Warning: Permanently added '[localhost]:9541' (ED25519) to the list of known hosts. 2026/06/22 00:01:26 parsed 1 programs 2026/06/22 00:01:26 serving rpc on tcp://41937 [ 80.086813][ T5295] cgroup: Unknown subsys name 'net' [ 80.136775][ T5295] cgroup: Unknown subsys name 'cpuset' [ 80.140682][ T5295] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.956614][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.959459][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.135025][ T5295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.744054][ T5309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.913352][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.925133][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.928741][ T5320] bridge_slave_0: entered allmulticast mode [ 86.935744][ T5320] bridge_slave_0: entered promiscuous mode [ 86.946478][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.954876][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.958734][ T5320] bridge_slave_1: entered allmulticast mode [ 86.966994][ T5320] bridge_slave_1: entered promiscuous mode [ 87.003869][ T5320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.017286][ T5320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.054662][ T5320] team0: Port device team_slave_0 added [ 87.061759][ T5320] team0: Port device team_slave_1 added [ 87.096795][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.101156][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.124176][ T5320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.130954][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.134701][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.146938][ T5320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.172579][ T5320] hsr_slave_0: entered promiscuous mode [ 87.176119][ T5320] hsr_slave_1: entered promiscuous mode [ 87.303986][ T5320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.316415][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.325509][ T5320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.337061][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.341553][ T5320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.357292][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.361866][ T5320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.377208][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.406503][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.409914][ T5320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.413345][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.416869][ T5320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.507828][ T5320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.529006][ T1066] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.545354][ T1066] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.555533][ T5320] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.570902][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.574219][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.599252][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.602894][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.002501][ T5320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.055365][ T5320] veth0_vlan: entered promiscuous mode [ 88.072539][ T5320] veth1_vlan: entered promiscuous mode [ 88.092399][ T5320] veth0_macvtap: entered promiscuous mode [ 88.100451][ T5320] veth1_macvtap: entered promiscuous mode [ 88.113363][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.125204][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.133361][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.138773][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.148454][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.158626][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.311413][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.357969][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.402204][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.476701][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.589868][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.598041][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.616837][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.627370][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.450349][ T48] bridge_slave_1: left allmulticast mode [ 90.466227][ T48] bridge_slave_1: left promiscuous mode [ 90.483370][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.511122][ T48] bridge_slave_0: left allmulticast mode [ 90.529406][ T48] bridge_slave_0: left promiscuous mode [ 90.545519][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.783900][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.797332][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.807677][ T48] bond0 (unregistering): Released all slaves [ 90.875834][ T48] hsr_slave_0: left promiscuous mode [ 90.887221][ T48] hsr_slave_1: left promiscuous mode [ 90.894134][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.904625][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.915680][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.924635][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.937668][ T48] veth1_macvtap: left promiscuous mode [ 90.940249][ T48] veth0_macvtap: left promiscuous mode [ 90.942673][ T48] veth1_vlan: left promiscuous mode [ 90.956075][ T48] veth0_vlan: left promiscuous mode [ 91.158388][ T48] team0 (unregistering): Port device team_slave_1 removed [ 91.176812][ T48] team0 (unregistering): Port device team_slave_0 removed [ 92.001072][ T4999] 8021q: adding VLAN 0 to HW filter on device eth2 [ 92.217103][ T803] cfg80211: failed to load regulatory.db [ 92.571910][ T4999] 8021q: adding VLAN 0 to HW filter on device eth3 [ 93.137932][ T4999] 8021q: adding VLAN 0 to HW filter on device eth4 [ 93.262837][ T5434] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.266285][ T5434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.269937][ T5434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.273948][ T5434] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.277673][ T5434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.658329][ T4999] 8021q: adding VLAN 0 to HW filter on device eth5 2026/06/22 00:01:43 executed programs: 0 [ 94.279595][ T4654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.283987][ T4654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.288470][ T4654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.291981][ T4654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.297520][ T4654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.618530][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.621715][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.626161][ T5453] bridge_slave_0: entered allmulticast mode [ 94.630361][ T5453] bridge_slave_0: entered promiscuous mode [ 94.634593][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.637321][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.640477][ T5453] bridge_slave_1: entered allmulticast mode [ 94.644321][ T5453] bridge_slave_1: entered promiscuous mode [ 94.661591][ T5453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.667926][ T5453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.685923][ T5453] team0: Port device team_slave_0 added [ 94.689933][ T5453] team0: Port device team_slave_1 added [ 94.705669][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.708769][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.720105][ T5453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.726293][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.729284][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.742432][ T5453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.767529][ T5453] hsr_slave_0: entered promiscuous mode [ 94.770633][ T5453] hsr_slave_1: entered promiscuous mode [ 94.994890][ T5453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.007393][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.016778][ T5453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.026979][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.033112][ T5453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.043550][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.053811][ T5453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.067287][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.097907][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.100841][ T5453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.104285][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.108710][ T5453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.189633][ T5453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.208241][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.215942][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.233992][ T5453] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.250274][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.253397][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.268565][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.272418][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.769966][ T5453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.833197][ T5453] veth0_vlan: entered promiscuous mode [ 95.849084][ T5453] veth1_vlan: entered promiscuous mode [ 95.889232][ T5453] veth0_macvtap: entered promiscuous mode [ 95.903554][ T5453] veth1_macvtap: entered promiscuous mode [ 95.928033][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.945983][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.962494][ T27] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.970924][ T27] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.986802][ T27] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.995515][ T27] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.065595][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.079589][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.111616][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.117755][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.355970][ T4654] Bluetooth: hci0: command tx timeout [ 96.363000][ T5515] infiniband syz0: set down [ 96.372250][ T5515] infiniband syz0: added ipvlan1 [ 96.400206][ T5515] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 96.414598][ T5515] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 96.438085][ T5515] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 96.467667][ T5515] RDS/IB: syz0: added [ 96.478860][ T5515] smc: adding ib device syz0 with port count 1 [ 96.485836][ T5515] smc: ib device syz0 port 1 has no pnetid [ 96.729934][ T5525] syz0: rxe_newlink: already configured on ipvlan1 [ 96.778557][ T5527] syz0: rxe_newlink: already configured on ipvlan1 [ 96.832159][ T5529] syz0: rxe_newlink: already configured on ipvlan1 [ 96.894787][ T5530] syz0: rxe_newlink: already configured on ipvlan1 [ 96.959489][ T5532] syz0: rxe_newlink: already configured on ipvlan1 [ 97.021171][ T5533] syz0: rxe_newlink: already configured on ipvlan1 [ 97.078623][ T5535] syz0: rxe_newlink: already configured on ipvlan1 [ 97.139856][ T5536] syz0: rxe_newlink: already configured on ipvlan1 [ 97.202572][ T5537] syz0: rxe_newlink: already configured on ipvlan1 [ 97.242291][ T5538] syz0: rxe_newlink: already configured on ipvlan1 [ 98.434755][ T4654] Bluetooth: hci0: command tx timeout 2026/06/22 00:01:48 executed programs: 93 [ 100.514985][ T4654] Bluetooth: hci0: command tx timeout [ 101.741827][ T5747] rxe_newlink: 208 callbacks suppressed [ 101.741859][ T5747] syz0: rxe_newlink: already configured on ipvlan1 [ 101.783670][ T5748] syz0: rxe_newlink: already configured on ipvlan1 [ 101.799319][ T5749] syz0: rxe_newlink: already configured on ipvlan1 [ 101.811951][ T5750] syz0: rxe_newlink: already configured on ipvlan1 [ 101.841451][ T5751] syz0: rxe_newlink: already configured on ipvlan1 [ 101.853551][ T5752] syz0: rxe_newlink: already configured on ipvlan1 [ 101.868420][ T5753] syz0: rxe_newlink: already configured on ipvlan1 [ 101.899894][ T5754] syz0: rxe_newlink: already configured on ipvlan1 [ 101.911076][ T5755] syz0: rxe_newlink: already configured on ipvlan1 [ 101.923425][ T5756] syz0: rxe_newlink: already configured on ipvlan1 [ 102.594767][ T4654] Bluetooth: hci0: command tx timeout 2026/06/22 00:01:53 executed programs: 367 [ 106.751688][ T6040] rxe_newlink: 282 callbacks suppressed [ 106.751775][ T6040] syz0: rxe_newlink: already configured on ipvlan1 [ 106.769558][ T6041] syz0: rxe_newlink: already configured on ipvlan1 [ 106.791384][ T6042] syz0: rxe_newlink: already configured on ipvlan1 [ 106.814008][ T6043] syz0: rxe_newlink: already configured on ipvlan1 [ 106.839349][ T6044] syz0: rxe_newlink: already configured on ipvlan1 [ 106.853812][ T6045] syz0: rxe_newlink: already configured on ipvlan1 [ 106.866005][ T6046] syz0: rxe_newlink: already configured on ipvlan1 [ 106.900081][ T6047] syz0: rxe_newlink: already configured on ipvlan1 [ 106.910079][ T6048] syz0: rxe_newlink: already configured on ipvlan1 [ 106.923551][ T6049] syz0: rxe_newlink: already configured on ipvlan1 [ 108.328930][ T5434] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.333184][ T5434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.337133][ T5434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.341728][ T5434] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.345833][ T5434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.438408][ T1066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.475444][ T1066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.511427][ T1066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.548367][ T1066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.652820][ T1066] bridge_slave_1: left allmulticast mode [ 108.664509][ T1066] bridge_slave_1: left promiscuous mode [ 108.667321][ T1066] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.678110][ T1066] bridge_slave_0: left allmulticast mode [ 108.684619][ T1066] bridge_slave_0: left promiscuous mode [ 108.693655][ T1066] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.764347][ T1066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.769415][ T1066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.773913][ T1066] bond0 (unregistering): Released all slaves [ 109.083279][ T1066] hsr_slave_0: left promiscuous mode [ 109.092629][ T1066] hsr_slave_1: left promiscuous mode [ 109.103527][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.114133][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.128525][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.138276][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.149142][ T1066] veth1_macvtap: left promiscuous mode [ 109.157508][ T1066] veth0_macvtap: left promiscuous mode [ 109.164613][ T1066] veth1_vlan: left promiscuous mode [ 109.167918][ T1066] veth0_vlan: left promiscuous mode [ 109.222705][ T48] smc: removing ib device syz0 [ 109.281659][ T1066] team0 (unregistering): Port device team_slave_1 removed [ 109.290627][ T1066] team0 (unregistering): Port device team_slave_0 removed [ 109.361856][ T4999] 8021q: adding VLAN 0 to HW filter on device eth2 [ 109.370385][ T5344] ================================================================== [ 109.374056][ T5344] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 109.378014][ T5344] Read of size 1 at addr ffff888042192df9 by task kworker/0:5/5344 [ 109.383014][ T5344] [ 109.384274][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 109.384292][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.384303][ T5344] Workqueue: events smc_ib_port_event_work [ 109.384330][ T5344] Call Trace: [ 109.384338][ T5344] [ 109.384344][ T5344] dump_stack_lvl+0xe8/0x150 [ 109.384364][ T5344] print_address_description+0x55/0x1e0 [ 109.384376][ T5344] ? __ethtool_get_link_ksettings+0x230/0x250 [ 109.384390][ T5344] print_report+0x58/0x70 [ 109.384399][ T5344] kasan_report+0x117/0x150 [ 109.384417][ T5344] ? __ethtool_get_link_ksettings+0x230/0x250 [ 109.384433][ T5344] __ethtool_get_link_ksettings+0x230/0x250 [ 109.384446][ T5344] __ethtool_get_link_ksettings+0x11f/0x250 [ 109.384459][ T5344] ib_get_eth_speed+0x180/0x7f0 [ 109.384472][ T5344] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 109.384483][ T5344] ? do_raw_spin_unlock+0x4d/0x210 [ 109.384499][ T5344] ? rxe_query_port+0x6b/0x3d0 [ 109.384511][ T5344] rxe_query_port+0x93/0x3d0 [ 109.384523][ T5344] ib_query_port+0x16e/0x830 [ 109.384535][ T5344] smc_ib_port_event_work+0x147/0x920 [ 109.384548][ T5344] ? rcu_is_watching+0x15/0xb0 [ 109.384562][ T5344] ? rcu_is_watching+0x15/0xb0 [ 109.384574][ T5344] ? process_scheduled_works+0xa20/0x14e0 [ 109.384589][ T5344] process_scheduled_works+0xa8e/0x14e0 [ 109.384606][ T5344] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.384619][ T5344] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.384634][ T5344] ? assign_work+0x3cf/0x5d0 [ 109.384647][ T5344] worker_thread+0xa47/0xfb0 [ 109.384665][ T5344] ? __kthread_parkme+0x71/0x1f0 [ 109.384683][ T5344] kthread+0x388/0x470 [ 109.384693][ T5344] ? __pfx_worker_thread+0x10/0x10 [ 109.384706][ T5344] ? __pfx_kthread+0x10/0x10 [ 109.384717][ T5344] ret_from_fork+0x514/0xb70 [ 109.384729][ T5344] ? __pfx_ret_from_fork+0x10/0x10 [ 109.384740][ T5344] ? __switch_to+0xc89/0x1420 [ 109.384755][ T5344] ? __pfx_kthread+0x10/0x10 [ 109.384765][ T5344] ret_from_fork_asm+0x1a/0x30 [ 109.384790][ T5344] [ 109.384794][ T5344] [ 109.474976][ T5344] Allocated by task 5453: [ 109.477059][ T5344] kasan_save_track+0x3e/0x80 [ 109.479575][ T5344] __kasan_kmalloc+0x93/0xb0 [ 109.481655][ T5344] __kvmalloc_node_noprof+0x520/0x890 [ 109.483948][ T5344] alloc_netdev_mqs+0xa9/0x1260 [ 109.486095][ T5344] rtnl_create_link+0x321/0xd70 [ 109.488316][ T5344] rtnl_newlink_create+0x25f/0xb00 [ 109.490988][ T5344] rtnl_newlink+0x167f/0x1bd0 [ 109.493081][ T5344] rtnetlink_rcv_msg+0x802/0xc00 [ 109.495151][ T5344] netlink_rcv_skb+0x226/0x4a0 [ 109.497106][ T5344] netlink_unicast+0x7bb/0x940 [ 109.499067][ T5344] netlink_sendmsg+0x813/0xb40 [ 109.501308][ T5344] sock_sendmsg_nosec+0x13a/0x180 [ 109.503835][ T5344] __sys_sendto+0x408/0x5a0 [ 109.505981][ T5344] __x64_sys_sendto+0xde/0x100 [ 109.508102][ T5344] do_syscall_64+0x174/0x580 [ 109.509939][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.512288][ T5344] [ 109.513381][ T5344] Freed by task 1066: [ 109.515114][ T5344] kasan_save_track+0x3e/0x80 [ 109.517355][ T5344] kasan_save_free_info+0x40/0x50 [ 109.519780][ T5344] __kasan_slab_free+0x5c/0x80 [ 109.521986][ T5344] kfree+0x1c5/0x640 [ 109.523692][ T5344] device_release+0xc4/0x1f0 [ 109.525782][ T5344] kobject_put+0x222/0x550 [ 109.527895][ T5344] netdev_run_todo+0xf56/0x10d0 [ 109.530217][ T5344] default_device_exit_batch+0x966/0x9e0 [ 109.532986][ T5344] ops_undo_list+0x4b4/0x8d0 [ 109.535085][ T5344] cleanup_net+0x572/0x810 [ 109.536979][ T5344] process_scheduled_works+0xa8e/0x14e0 [ 109.539317][ T5344] worker_thread+0xa47/0xfb0 [ 109.541316][ T5344] kthread+0x388/0x470 [ 109.543058][ T5344] ret_from_fork+0x514/0xb70 [ 109.545102][ T5344] ret_from_fork_asm+0x1a/0x30 [ 109.547225][ T5344] [ 109.548387][ T5344] The buggy address belongs to the object at ffff888042192000 [ 109.548387][ T5344] which belongs to the cache kmalloc-cg-4k of size 4096 [ 109.554432][ T5344] The buggy address is located 3577 bytes inside of [ 109.554432][ T5344] freed 4096-byte region [ffff888042192000, ffff888042193000) [ 109.560587][ T5344] [ 109.561798][ T5344] The buggy address belongs to the physical page: [ 109.564638][ T5344] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42190 [ 109.568538][ T5344] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 109.572175][ T5344] memcg:ffff888042191011 [ 109.574161][ T5344] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 109.577949][ T5344] page_type: f5(slab) [ 109.579864][ T5344] raw: 04fff00000000040 ffff88801ac58500 dead000000000122 0000000000000000 [ 109.583266][ T5344] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff888042191011 [ 109.587018][ T5344] head: 04fff00000000040 ffff88801ac58500 dead000000000122 0000000000000000 [ 109.591397][ T5344] head: 0000000000000000 0000200000040004 00000000f5000000 ffff888042191011 [ 109.595007][ T5344] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 109.598653][ T5344] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 109.602813][ T5344] page dumped because: kasan: bad access detected [ 109.605866][ T5344] page_owner tracks the page as allocated [ 109.608708][ T5344] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5453, tgid 5453 (syz-executor), ts 94782381098, free_ts 91209387820 [ 109.617788][ T5344] post_alloc_hook+0x1f9/0x250 [ 109.619952][ T5344] get_page_from_freelist+0x21fa/0x2270 [ 109.622436][ T5344] __alloc_frozen_pages_noprof+0x18d/0x380 [ 109.625328][ T5344] allocate_slab+0x74/0x5d0 [ 109.627913][ T5344] refill_objects+0x328/0x3c0 [ 109.630083][ T5344] __pcs_replace_empty_main+0x2e0/0x6b0 [ 109.632339][ T5344] __kmalloc_node_track_caller_noprof+0x565/0x7b0 [ 109.635077][ T5344] kmemdup_noprof+0x2b/0x70 [ 109.637338][ T5344] __addrconf_sysctl_register+0xa7/0x4b0 [ 109.640360][ T5344] addrconf_sysctl_register+0x168/0x1c0 [ 109.642728][ T5344] ipv6_add_dev+0xd26/0x13a0 [ 109.644636][ T5344] addrconf_notify+0x771/0x1050 [ 109.646658][ T5344] notifier_call_chain+0x1a5/0x3d0 [ 109.648829][ T5344] register_netdevice+0x18a4/0x1eb0 [ 109.651187][ T5344] virt_wifi_newlink+0x3be/0x7c0 [ 109.653637][ T5344] rtnl_newlink_create+0x310/0xb00 [ 109.655849][ T5344] page last free pid 48 tgid 48 stack trace: [ 109.658280][ T5344] __free_frozen_pages+0xc1f/0xd10 [ 109.660375][ T5344] __slab_free+0x274/0x2c0 [ 109.662361][ T5344] qlist_free_all+0x99/0x100 [ 109.664690][ T5344] kasan_quarantine_reduce+0x148/0x160 [ 109.667669][ T5344] __kasan_slab_alloc+0x22/0x80 [ 109.670022][ T5344] kmem_cache_alloc_node_noprof+0x380/0x680 [ 109.672525][ T5344] __alloc_skb+0x1d7/0x7a0 [ 109.674448][ T5344] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 109.677019][ T5344] addrconf_ifdown+0x16f3/0x1a30 [ 109.679309][ T5344] addrconf_notify+0x1bc/0x1050 [ 109.681872][ T5344] notifier_call_chain+0x1a5/0x3d0 [ 109.684279][ T5344] unregister_netdevice_many_notify+0x17de/0x2150 [ 109.686701][ T5344] default_device_exit_batch+0x961/0x9e0 [ 109.688909][ T5344] ops_undo_list+0x4b4/0x8d0 [ 109.690772][ T5344] cleanup_net+0x572/0x810 [ 109.692857][ T5344] process_scheduled_works+0xa8e/0x14e0 [ 109.695893][ T5344] [ 109.697127][ T5344] Memory state around the buggy address: [ 109.699599][ T5344] ffff888042192c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.702907][ T5344] ffff888042192d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.706337][ T5344] >ffff888042192d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.709992][ T5344] ^ [ 109.713724][ T5344] ffff888042192e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.717125][ T5344] ffff888042192e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.720590][ T5344] ================================================================== [ 109.739027][ T5344] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.742244][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 109.746386][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.750617][ T5344] Workqueue: events smc_ib_port_event_work [ 109.753213][ T5344] Call Trace: [ 109.754867][ T5344] [ 109.756588][ T5344] vpanic+0x56c/0xa60 [ 109.758725][ T5344] ? __pfx_vpanic+0x10/0x10 [ 109.760811][ T5344] ? rcu_is_watching+0x15/0xb0 [ 109.762861][ T5344] panic+0xc5/0xd0 [ 109.764531][ T5344] ? __pfx_panic+0x10/0x10 [ 109.766426][ T5344] ? preempt_schedule_thunk+0x16/0x40 [ 109.769031][ T5344] ? __ethtool_get_link_ksettings+0x230/0x250 [ 109.772123][ T5344] ? preempt_schedule_thunk+0x16/0x40 [ 109.774723][ T5344] ? __ethtool_get_link_ksettings+0x230/0x250 [ 109.777371][ T5344] check_panic_on_warn+0x89/0xb0 [ 109.779793][ T5344] ? __ethtool_get_link_ksettings+0x230/0x250 [ 109.782878][ T5344] end_report+0x73/0x170 [ 109.785245][ T5344] ? __ethtool_get_link_ksettings+0x230/0x250 [ 109.788267][ T5344] kasan_report+0x128/0x150 [ 109.790385][ T5344] ? __ethtool_get_link_ksettings+0x230/0x250 [ 109.793139][ T5344] __ethtool_get_link_ksettings+0x230/0x250 [ 109.795759][ T5344] __ethtool_get_link_ksettings+0x11f/0x250 [ 109.798446][ T5344] ib_get_eth_speed+0x180/0x7f0 [ 109.800762][ T5344] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 109.803397][ T5344] ? do_raw_spin_unlock+0x4d/0x210 [ 109.805825][ T5344] ? rxe_query_port+0x6b/0x3d0 [ 109.808030][ T5344] rxe_query_port+0x93/0x3d0 [ 109.810177][ T5344] ib_query_port+0x16e/0x830 [ 109.812370][ T5344] smc_ib_port_event_work+0x147/0x920 [ 109.815060][ T5344] ? rcu_is_watching+0x15/0xb0 [ 109.817356][ T5344] ? rcu_is_watching+0x15/0xb0 [ 109.819443][ T5344] ? process_scheduled_works+0xa20/0x14e0 [ 109.821504][ T5344] process_scheduled_works+0xa8e/0x14e0 [ 109.823767][ T5344] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.826649][ T5344] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.829017][ T5344] ? assign_work+0x3cf/0x5d0 [ 109.830962][ T5344] worker_thread+0xa47/0xfb0 [ 109.832824][ T5344] ? __kthread_parkme+0x71/0x1f0 [ 109.834972][ T5344] kthread+0x388/0x470 [ 109.837020][ T5344] ? __pfx_worker_thread+0x10/0x10 [ 109.839781][ T5344] ? __pfx_kthread+0x10/0x10 [ 109.842051][ T5344] ret_from_fork+0x514/0xb70 [ 109.844127][ T5344] ? __pfx_ret_from_fork+0x10/0x10 [ 109.846395][ T5344] ? __switch_to+0xc89/0x1420 [ 109.848525][ T5344] ? __pfx_kthread+0x10/0x10 [ 109.850386][ T5344] ret_from_fork_asm+0x1a/0x30 [ 109.852415][ T5344] [ 109.854231][ T5344] Kernel Offset: disabled [ 109.856120][ T5344] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:01:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90001e8f1d0 R8 =ffff888034580237 R9 =1ffff110068b0046 R10=dffffc0000000000 R11=ffffffff854bb170 R12=dffffc0000000000 R13=ffffffff9a4cdb64 R14=ffffffff9a7e31e0 R15=0000000000000000 RIP=ffffffff854bb1ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808c848000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056420f794138 CR3=0000000043744000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000044401020 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbde9833518 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbde983344c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbde9833444 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbde9833452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbde9833492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbde98335f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbde9833484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6376003065676469 7262003070617465 7267367069007061 7465726736706900 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 465300154042414c 5747001555445140 574213554c005544 5140574213554c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbde99ed5f8 00007fbde99ed5c8 00007fbde99ed600 00007fbde99ed5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000