Warning: Permanently added '[localhost]:60224' (ED25519) to the list of known hosts.
2026/02/27 20:34:42 parsed 1 programs
syzkaller login: [ 88.642026][ T5303] cgroup: Unknown subsys name 'net'
[ 88.694685][ T5303] cgroup: Unknown subsys name 'cpuset'
[ 88.700188][ T5303] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 90.576165][ T5303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.654906][ T79] ODEBUG: Out of memory. ODEBUG disabled
[ 96.006045][ T5331] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 96.122983][ T5340] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.126684][ T5340] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.129787][ T5340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.133822][ T5340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.137989][ T5340] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 96.171593][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.174946][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.292811][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.313215][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.991402][ T53] cfg80211: failed to load regulatory.db
[ 100.556277][ T5377] chnl_net:caif_netlink_parms(): no params data found
[ 100.782941][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.786141][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.789450][ T5377] bridge_slave_0: entered allmulticast mode
[ 100.802343][ T5377] bridge_slave_0: entered promiscuous mode
[ 100.812397][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.815511][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.818663][ T5377] bridge_slave_1: entered allmulticast mode
[ 100.833201][ T5377] bridge_slave_1: entered promiscuous mode
[ 100.875585][ T5377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 100.894829][ T5377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.942403][ T5377] team0: Port device team_slave_0 added
[ 100.946831][ T5377] team0: Port device team_slave_1 added
[ 100.988928][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.001697][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.021292][ T5377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.031468][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.034383][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.060990][ T5377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.132423][ T5377] hsr_slave_0: entered promiscuous mode
[ 101.142054][ T5377] hsr_slave_1: entered promiscuous mode
[ 101.546410][ T5377] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 101.565912][ T5377] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 101.583245][ T5377] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 101.613389][ T5377] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 101.838142][ T5377] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.873603][ T5377] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.887256][ T1048] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.890516][ T1048] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.908388][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.911553][ T1048] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.969432][ T5377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 102.614722][ T5377] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.258891][ T5377] veth0_vlan: entered promiscuous mode
[ 103.276882][ T5377] veth1_vlan: entered promiscuous mode
[ 103.363939][ T5377] veth0_macvtap: entered promiscuous mode
[ 103.370101][ T5377] veth1_macvtap: entered promiscuous mode
[ 103.414030][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.435250][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.462089][ T1038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.466328][ T1038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.470102][ T1038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.514884][ T1038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/02/27 20:35:00 executed programs: 0
[ 104.041237][ T4661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 104.051492][ T4661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 104.071017][ T4661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 104.115216][ T4661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 104.159675][ T5441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 104.167845][ T5441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 104.181740][ T5441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 104.211230][ T5441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 104.244708][ T5340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 104.247869][ T5340] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 104.252365][ T5340] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 104.256598][ T5441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 104.260522][ T5441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 104.263760][ T5441] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 104.267007][ T5340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 104.370511][ T5340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 104.393615][ T5340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 104.398226][ T45] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 104.414308][ T5340] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 104.451149][ T5340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 104.455172][ T45] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 104.461527][ T45] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 104.465739][ T5340] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 104.478327][ T4661] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 104.515932][ T4661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 104.561904][ T5441] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 104.591165][ T5441] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 104.622695][ T5441] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 104.641373][ T5441] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 104.644869][ T5441] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 105.694519][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.902561][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.117627][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.206996][ T5433] chnl_net:caif_netlink_parms(): no params data found
[ 106.253596][ T5441] Bluetooth: hci1: command tx timeout
[ 106.283580][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.333139][ T5441] Bluetooth: hci2: command tx timeout
[ 106.336004][ T5441] Bluetooth: hci0: command tx timeout
[ 106.491371][ T4661] Bluetooth: hci3: command tx timeout
[ 106.572524][ T4661] Bluetooth: hci4: command tx timeout
[ 106.731088][ T4661] Bluetooth: hci5: command tx timeout
[ 106.846560][ T5433] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.865287][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.868641][ T5433] bridge_slave_0: entered allmulticast mode
[ 106.880267][ T5433] bridge_slave_0: entered promiscuous mode
[ 106.902709][ T5433] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.905827][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.909165][ T5433] bridge_slave_1: entered allmulticast mode
[ 106.935995][ T5433] bridge_slave_1: entered promiscuous mode
[ 107.125297][ T30] bridge_slave_1: left allmulticast mode
[ 107.128121][ T30] bridge_slave_1: left promiscuous mode
[ 107.131514][ T30] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.172945][ T30] bridge_slave_0: left allmulticast mode
[ 107.175458][ T30] bridge_slave_0: left promiscuous mode
[ 107.178045][ T30] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.552706][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 107.558194][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 107.572206][ T30] bond0 (unregistering): Released all slaves
[ 107.864564][ T5433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.973147][ T30] hsr_slave_0: left promiscuous mode
[ 107.995128][ T30] hsr_slave_1: left promiscuous mode
[ 108.001044][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 108.004245][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 108.022174][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 108.025424][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 108.043533][ T30] veth1_macvtap: left promiscuous mode
[ 108.046408][ T30] veth0_macvtap: left promiscuous mode
[ 108.048961][ T30] veth1_vlan: left promiscuous mode
[ 108.061403][ T30] veth0_vlan: left promiscuous mode
[ 108.333810][ T4661] Bluetooth: hci1: command tx timeout
[ 108.392048][ T30] team0 (unregistering): Port device team_slave_1 removed
[ 108.412588][ T4661] Bluetooth: hci0: command tx timeout
[ 108.415026][ T4661] Bluetooth: hci2: command tx timeout
[ 108.419093][ T30] team0 (unregistering): Port device team_slave_0 removed
[ 108.561301][ T5433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 108.571182][ T5441] Bluetooth: hci3: command tx timeout
[ 108.651000][ T5441] Bluetooth: hci4: command tx timeout
[ 108.695267][ T5443] chnl_net:caif_netlink_parms(): no params data found
[ 108.748369][ T5446] chnl_net:caif_netlink_parms(): no params data found
[ 108.802685][ T5433] team0: Port device team_slave_0 added
[ 108.812510][ T5441] Bluetooth: hci5: command tx timeout
[ 108.850259][ T5449] chnl_net:caif_netlink_parms(): no params data found
[ 108.905552][ T5433] team0: Port device team_slave_1 added
[ 109.150336][ T5434] chnl_net:caif_netlink_parms(): no params data found
[ 109.239486][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 109.251357][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.281110][ T5433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 109.368771][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.372161][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.401491][ T5433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.449348][ T5432] chnl_net:caif_netlink_parms(): no params data found
[ 109.502817][ T5443] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.507787][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.526165][ T5443] bridge_slave_0: entered allmulticast mode
[ 109.530074][ T5443] bridge_slave_0: entered promiscuous mode
[ 109.574272][ T5433] hsr_slave_0: entered promiscuous mode
[ 109.582599][ T5433] hsr_slave_1: entered promiscuous mode
[ 109.639793][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.646768][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.649943][ T5446] bridge_slave_0: entered allmulticast mode
[ 109.663291][ T5446] bridge_slave_0: entered promiscuous mode
[ 109.698737][ T5443] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.709536][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.734576][ T5443] bridge_slave_1: entered allmulticast mode
[ 109.741500][ T5443] bridge_slave_1: entered promiscuous mode
[ 109.771525][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.774648][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.777960][ T5449] bridge_slave_0: entered allmulticast mode
[ 109.793213][ T5449] bridge_slave_0: entered promiscuous mode
[ 109.804284][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.807531][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.810569][ T5449] bridge_slave_1: entered allmulticast mode
[ 109.833233][ T5449] bridge_slave_1: entered promiscuous mode
[ 109.843597][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.846906][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.850062][ T5446] bridge_slave_1: entered allmulticast mode
[ 109.861989][ T5446] bridge_slave_1: entered promiscuous mode
[ 110.003650][ T5443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.018619][ T5446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.029363][ T5434] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.034248][ T5434] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.037258][ T5434] bridge_slave_0: entered allmulticast mode
[ 110.041258][ T5434] bridge_slave_0: entered promiscuous mode
[ 110.051922][ T5443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.063378][ T5449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.069139][ T5446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.122388][ T5434] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.125480][ T5434] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.128607][ T5434] bridge_slave_1: entered allmulticast mode
[ 110.143021][ T5434] bridge_slave_1: entered promiscuous mode
[ 110.183837][ T5449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.245359][ T5443] team0: Port device team_slave_0 added
[ 110.303400][ T5446] team0: Port device team_slave_0 added
[ 110.324524][ T5443] team0: Port device team_slave_1 added
[ 110.383585][ T5446] team0: Port device team_slave_1 added
[ 110.387956][ T5434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.411852][ T5441] Bluetooth: hci1: command tx timeout
[ 110.414854][ T5434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.477368][ T5449] team0: Port device team_slave_0 added
[ 110.480142][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.491334][ T5441] Bluetooth: hci2: command tx timeout
[ 110.493780][ T5441] Bluetooth: hci0: command tx timeout
[ 110.497790][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.506578][ T5432] bridge_slave_0: entered allmulticast mode
[ 110.521141][ T5432] bridge_slave_0: entered promiscuous mode
[ 110.525699][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.528828][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.541876][ T5432] bridge_slave_1: entered allmulticast mode
[ 110.545455][ T5432] bridge_slave_1: entered promiscuous mode
[ 110.577602][ T5449] team0: Port device team_slave_1 added
[ 110.580747][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.584649][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.595669][ T5443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.651197][ T4661] Bluetooth: hci3: command tx timeout
[ 110.655746][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.658939][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.676822][ T5443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.706970][ T5432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.722623][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.725579][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.736308][ T4661] Bluetooth: hci4: command tx timeout
[ 110.748764][ T5446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.765358][ T5434] team0: Port device team_slave_0 added
[ 110.784767][ T5432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.789775][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.795429][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.806883][ T5446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.822145][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.825150][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.841182][ T5449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.847710][ T5434] team0: Port device team_slave_1 added
[ 110.893021][ T4661] Bluetooth: hci5: command tx timeout
[ 110.916635][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.919737][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.941483][ T5449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.971537][ T5434] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.974581][ T5434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.988943][ T5434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.013056][ T5434] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.016097][ T5434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.029251][ T5434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.037596][ T5432] team0: Port device team_slave_0 added
[ 111.088640][ T5432] team0: Port device team_slave_1 added
[ 111.163535][ T5443] hsr_slave_0: entered promiscuous mode
[ 111.166738][ T5443] hsr_slave_1: entered promiscuous mode
[ 111.169742][ T5443] debugfs: 'hsr0' already exists in 'hsr'
[ 111.173189][ T5443] Cannot create hsr debugfs directory
[ 111.230065][ T5446] hsr_slave_0: entered promiscuous mode
[ 111.238202][ T5446] hsr_slave_1: entered promiscuous mode
[ 111.245663][ T5446] debugfs: 'hsr0' already exists in 'hsr'
[ 111.248556][ T5446] Cannot create hsr debugfs directory
[ 111.266412][ T5449] hsr_slave_0: entered promiscuous mode
[ 111.269607][ T5449] hsr_slave_1: entered promiscuous mode
[ 111.272980][ T5449] debugfs: 'hsr0' already exists in 'hsr'
[ 111.275560][ T5449] Cannot create hsr debugfs directory
[ 111.278535][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.282382][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.293657][ T5432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.304015][ T5434] hsr_slave_0: entered promiscuous mode
[ 111.307229][ T5434] hsr_slave_1: entered promiscuous mode
[ 111.310113][ T5434] debugfs: 'hsr0' already exists in 'hsr'
[ 111.313206][ T5434] Cannot create hsr debugfs directory
[ 111.384473][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.387516][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.399465][ T5432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.471552][ T5433] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 111.508008][ T5433] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 111.567235][ T5433] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 111.604959][ T5433] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 111.622190][ T5432] hsr_slave_0: entered promiscuous mode
[ 111.625267][ T5432] hsr_slave_1: entered promiscuous mode
[ 111.628135][ T5432] debugfs: 'hsr0' already exists in 'hsr'
[ 111.630576][ T5432] Cannot create hsr debugfs directory
[ 112.222760][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0
[ 112.291823][ T5433] 8021q: adding VLAN 0 to HW filter on device team0
[ 112.327271][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.330527][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 112.374497][ T5449] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 112.385205][ T5449] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 112.406838][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.410076][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 112.442624][ T5449] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 112.455283][ T5449] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 112.491741][ T4661] Bluetooth: hci1: command tx timeout
[ 112.571403][ T4661] Bluetooth: hci0: command tx timeout
[ 112.573841][ T4661] Bluetooth: hci2: command tx timeout
[ 112.630251][ T5443] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 112.665239][ T5443] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 112.722186][ T5443] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 112.732848][ T5441] Bluetooth: hci3: command tx timeout
[ 112.773120][ T5443] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 112.811668][ T5441] Bluetooth: hci4: command tx timeout
[ 112.972401][ T5441] Bluetooth: hci5: command tx timeout
[ 112.987983][ T5446] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 113.018354][ T5446] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 113.061622][ T5446] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 113.124739][ T5446] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 113.259982][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.265534][ T5433] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 113.435930][ T5434] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 113.470242][ T5449] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.517786][ T5434] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 113.556019][ T5433] veth0_vlan: entered promiscuous mode
[ 113.582870][ T5434] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 113.594590][ T5434] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 113.614932][ T5443] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.624245][ T30] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.627372][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.643046][ T30] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.646189][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.758883][ T5449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 113.791824][ T5449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 113.812754][ T5443] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.817011][ T5433] veth1_vlan: entered promiscuous mode
[ 113.856340][ T5432] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 113.924675][ T66] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.927912][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.965465][ T66] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.968625][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.002423][ T5432] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 114.083602][ T5433] veth0_macvtap: entered promiscuous mode
[ 114.107488][ T5432] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 114.129682][ T5443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 114.151582][ T5443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 114.159645][ T5446] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.223671][ T5433] veth1_macvtap: entered promiscuous mode
[ 114.256177][ T5432] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 114.301883][ T5446] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.389800][ T5433] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.430637][ T5449] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.519508][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.522853][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.548716][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.551976][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.625048][ T5433] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.664801][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.702050][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.795905][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.876148][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.898049][ T5434] 8021q: adding VLAN 0 to HW filter on device team0
[ 115.024929][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.073581][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.076833][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.258859][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.262081][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.307202][ T5443] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 115.460417][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.473820][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0
[ 115.503314][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.643132][ T5446] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 115.646849][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.650254][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.676430][ T5449] veth0_vlan: entered promiscuous mode
[ 115.704809][ T5432] 8021q: adding VLAN 0 to HW filter on device team0
[ 115.712646][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.715909][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.752739][ T5449] veth1_vlan: entered promiscuous mode
2026/02/27 20:35:12 executed programs: 12
[ 115.890334][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.893863][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.969542][ T5446] veth0_vlan: entered promiscuous mode
[ 116.079830][ T5446] veth1_vlan: entered promiscuous mode
[ 116.137614][ T5434] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 116.148049][ T5449] veth0_macvtap: entered promiscuous mode
[ 116.233598][ T5449] veth1_macvtap: entered promiscuous mode
[ 116.344426][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 116.350245][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 116.431853][ T5446] veth0_macvtap: entered promiscuous mode
[ 116.437502][ T5446] veth1_macvtap: entered promiscuous mode
[ 116.535761][ T1041] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.552810][ T5434] veth0_vlan: entered promiscuous mode
[ 116.577505][ T5443] veth0_vlan: entered promiscuous mode
[ 116.589931][ T1041] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.659077][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 116.696835][ T5443] veth1_vlan: entered promiscuous mode
[ 116.703215][ T1041] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.711221][ T1041] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.786506][ T5434] veth1_vlan: entered promiscuous mode
[ 116.800017][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 116.882380][ T1041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.910715][ T5443] veth0_macvtap: entered promiscuous mode
[ 116.968300][ T5434] veth0_macvtap: entered promiscuous mode
[ 117.000130][ T5432] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.009939][ T1041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.018046][ T1041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.103971][ T1041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.113559][ T5434] veth1_macvtap: entered promiscuous mode
[ 117.166280][ T5443] veth1_macvtap: entered promiscuous mode
[ 117.223625][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.226945][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.253336][ T5434] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 117.310037][ T5443] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 117.335390][ T5434] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 117.387853][ T5432] veth0_vlan: entered promiscuous mode
[ 117.408109][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.415791][ T5443] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 117.428586][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.466223][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.472794][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.490213][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.496476][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.500547][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.511857][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.587183][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.597612][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.605150][ T5432] veth1_vlan: entered promiscuous mode
[ 117.658935][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.683504][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.738905][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.770665][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.978648][ T5432] veth0_macvtap: entered promiscuous mode
[ 118.087718][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.115813][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.140540][ T5432] veth1_macvtap: entered promiscuous mode
[ 118.298180][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.320075][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 118.325316][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.386264][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 118.483465][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.488850][ T1041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.518945][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.540014][ T1041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.559642][ T1041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.589608][ T1041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.640348][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.666431][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.042041][ T5772] ==================================================================
[ 119.045832][ T5772] BUG: KASAN: slab-use-after-free in bpf_trace_run9+0x13b/0x8c0
[ 119.049846][ T5772] Read of size 8 at addr ffff8880465fa718 by task syz.3.56/5772
[ 119.054856][ T5772]
[ 119.056224][ T5772] CPU: 0 UID: 0 PID: 5772 Comm: syz.3.56 Not tainted syzkaller #0 PREEMPT(full)
[ 119.056257][ T5772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 119.056265][ T5772] Call Trace:
[ 119.056291][ T5772]
[ 119.056316][ T5772] dump_stack_lvl+0xe8/0x150
[ 119.056338][ T5772] print_report+0xba/0x230
[ 119.056352][ T5772] ? bpf_trace_run9+0x13b/0x8c0
[ 119.056386][ T5772] kasan_report+0x117/0x150
[ 119.056399][ T5772] ? bpf_trace_run9+0x13b/0x8c0
[ 119.056417][ T5772] bpf_trace_run9+0x13b/0x8c0
[ 119.056435][ T5772] ? bpf_trace_run9+0x250/0x8c0
[ 119.056452][ T5772] ? __pfx_bpf_trace_run9+0x10/0x10
[ 119.056468][ T5772] ? virtio_transport_alloc_skb+0xf4/0x1180
[ 119.056542][ T5772] ? vsock_connect+0xaf5/0xd60
[ 119.056555][ T5772] ? __sys_connect+0x312/0x450
[ 119.056573][ T5772] __bpf_trace_virtio_transport_alloc_pkt+0x3a5/0x410
[ 119.056589][ T5772] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10
[ 119.056605][ T5772] ? kmem_cache_alloc_node_noprof+0x3ce/0x690
[ 119.056625][ T5772] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10
[ 119.056638][ T5772] __traceiter_virtio_transport_alloc_pkt+0xc1/0x120
[ 119.056651][ T5772] virtio_transport_alloc_skb+0x1108/0x1180
[ 119.056668][ T5772] ? __pfx_virtio_transport_alloc_skb+0x10/0x10
[ 119.056684][ T5772] virtio_transport_send_pkt_info+0x570/0xff0
[ 119.056704][ T5772] ? lockdep_hardirqs_on+0x7a/0x110
[ 119.056723][ T5772] virtio_transport_connect+0xf5/0x150
[ 119.056737][ T5772] ? __pfx_virtio_transport_connect+0x10/0x10
[ 119.056751][ T5772] ? __pfx_vsock_auto_bind+0x10/0x10
[ 119.056768][ T5772] vsock_connect+0xaf5/0xd60
[ 119.056784][ T5772] ? aa_sk_perm+0x6d5/0x900
[ 119.056898][ T5772] ? __pfx_vsock_connect+0x10/0x10
[ 119.056914][ T5772] ? __pfx_aa_sk_perm+0x10/0x10
[ 119.056939][ T5772] ? __pfx_autoremove_wake_function+0x10/0x10
[ 119.056952][ T5772] ? hook_socket_connect+0x107/0x190
[ 119.056964][ T5772] ? bpf_lsm_socket_connect+0x9/0x20
[ 119.056984][ T5772] __sys_connect+0x312/0x450
[ 119.056997][ T5772] ? __pfx___sys_connect+0x10/0x10
[ 119.057013][ T5772] ? rcu_is_watching+0x15/0xb0
[ 119.057031][ T5772] __x64_sys_connect+0x7a/0x90
[ 119.057044][ T5772] do_syscall_64+0x14d/0xf80
[ 119.057063][ T5772] ? trace_irq_disable+0x3b/0x150
[ 119.057080][ T5772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.057092][ T5772] ? clear_bhb_loop+0x40/0x90
[ 119.057105][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.057118][ T5772] RIP: 0033:0x7f81c259c799
[ 119.057152][ T5772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 119.057161][ T5772] RSP: 002b:00007f81c34fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 119.057189][ T5772] RAX: ffffffffffffffda RBX: 00007f81c2815fa0 RCX: 00007f81c259c799
[ 119.057196][ T5772] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003
[ 119.057203][ T5772] RBP: 00007f81c2632bd9 R08: 0000000000000000 R09: 0000000000000000
[ 119.057209][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 119.057216][ T5772] R13: 00007f81c2816038 R14: 00007f81c2815fa0 R15: 00007fff2d7d05a8
[ 119.057228][ T5772]
[ 119.057233][ T5772]
[ 119.193423][ T5772] Allocated by task 5767:
[ 119.195376][ T5772] kasan_save_track+0x3e/0x80
[ 119.197346][ T5772] __kasan_kmalloc+0x93/0xb0
[ 119.199181][ T5772] __kmalloc_cache_noprof+0x31c/0x660
[ 119.201225][ T5772] bpf_raw_tp_link_attach+0x278/0x700
[ 119.203453][ T5772] bpf_raw_tracepoint_open+0x1b2/0x220
[ 119.205463][ T5772] __sys_bpf+0x846/0x950
[ 119.206997][ T5772] __x64_sys_bpf+0x7c/0x90
[ 119.208517][ T5772] do_syscall_64+0x14d/0xf80
[ 119.210204][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.212430][ T5772]
[ 119.213423][ T5772] Freed by task 15:
[ 119.215083][ T5772] kasan_save_track+0x3e/0x80
[ 119.216964][ T5772] kasan_save_free_info+0x46/0x50
[ 119.219196][ T5772] __kasan_slab_free+0x5c/0x80
[ 119.221058][ T5772] kfree+0x1c1/0x630
[ 119.222935][ T5772] rcu_core+0x7cd/0x1070
[ 119.225188][ T5772] handle_softirqs+0x22a/0x870
[ 119.227314][ T5772] run_ksoftirqd+0x36/0x60
[ 119.229294][ T5772] smpboot_thread_fn+0x541/0xa50
[ 119.231518][ T5772] kthread+0x388/0x470
[ 119.233341][ T5772] ret_from_fork+0x51e/0xb90
[ 119.235410][ T5772] ret_from_fork_asm+0x1a/0x30
[ 119.237571][ T5772]
[ 119.238655][ T5772] Last potentially related work creation:
[ 119.241199][ T5772] kasan_save_stack+0x3e/0x60
[ 119.243334][ T5772] kasan_record_aux_stack+0xbd/0xd0
[ 119.245531][ T5772] call_rcu+0xee/0x890
[ 119.247239][ T5772] bpf_link_release+0x6b/0x80
[ 119.249201][ T5772] __fput+0x44f/0xa70
[ 119.250957][ T5772] task_work_run+0x1d9/0x270
[ 119.252976][ T5772] exit_to_user_mode_loop+0xed/0x480
[ 119.255244][ T5772] do_syscall_64+0x32d/0xf80
[ 119.257245][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.259855][ T5772]
[ 119.260891][ T5772] The buggy address belongs to the object at ffff8880465fa700
[ 119.260891][ T5772] which belongs to the cache kmalloc-192 of size 192
[ 119.266805][ T5772] The buggy address is located 24 bytes inside of
[ 119.266805][ T5772] freed 192-byte region [ffff8880465fa700, ffff8880465fa7c0)
[ 119.272575][ T5772]
[ 119.273630][ T5772] The buggy address belongs to the physical page:
[ 119.276228][ T5772] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x465fa
[ 119.279912][ T5772] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 119.283025][ T5772] page_type: f5(slab)
[ 119.284780][ T5772] raw: 04fff00000000000 ffff88801ac413c0 dead000000000100 dead000000000122
[ 119.288353][ T5772] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 119.292193][ T5772] page dumped because: kasan: bad access detected
[ 119.295073][ T5772] page_owner tracks the page as allocated
[ 119.297499][ T5772] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5432, tgid 5432 (syz-executor), ts 116164871720, free_ts 115984681902
[ 119.306439][ T5772] post_alloc_hook+0x231/0x280
[ 119.308668][ T5772] get_page_from_freelist+0x24dc/0x2580
[ 119.311180][ T5772] __alloc_frozen_pages_noprof+0x18d/0x380
[ 119.313684][ T5772] allocate_slab+0x77/0x660
[ 119.315633][ T5772] refill_objects+0x331/0x3c0
[ 119.317894][ T5772] __pcs_replace_empty_main+0x2b9/0x620
[ 119.320339][ T5772] __kmalloc_cache_noprof+0x392/0x660
[ 119.322605][ T5772] call_usermodehelper_setup+0x8e/0x270
[ 119.324923][ T5772] __request_module+0x3ba/0x660
[ 119.327192][ T5772] dev_load+0x190/0x1f0
[ 119.329127][ T5772] dev_ioctl+0x680/0x1150
[ 119.331160][ T5772] sock_do_ioctl+0x23e/0x320
[ 119.333143][ T5772] sock_ioctl+0x5c6/0x7f0
[ 119.335040][ T5772] __se_sys_ioctl+0xfc/0x170
[ 119.337046][ T5772] do_syscall_64+0x14d/0xf80
[ 119.339051][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.341639][ T5772] page last free pid 53 tgid 53 stack trace:
[ 119.344198][ T5772] __free_frozen_pages+0xc2b/0xdb0
[ 119.346478][ T5772] tlb_remove_table_rcu+0x85/0x100
[ 119.348878][ T5772] rcu_core+0x7cd/0x1070
[ 119.350634][ T5772] handle_softirqs+0x22a/0x870
[ 119.352610][ T5772] do_softirq+0x76/0xd0
[ 119.354361][ T5772] __local_bh_enable_ip+0xf8/0x130
[ 119.356662][ T5772] ipv6_get_lladdr+0x2aa/0x3f0
[ 119.358709][ T5772] mld_newpack+0x435/0xc90
[ 119.360760][ T5772] add_grhead+0x5a/0x2a0
[ 119.362662][ T5772] add_grec+0x1452/0x1740
[ 119.364552][ T5772] mld_send_initial_cr+0x288/0x550
[ 119.366580][ T5772] mld_dad_work+0x45/0x5b0
[ 119.368586][ T5772] process_scheduled_works+0xb02/0x1830
[ 119.371008][ T5772] worker_thread+0xa50/0xfc0
[ 119.372985][ T5772] kthread+0x388/0x470
[ 119.374727][ T5772] ret_from_fork+0x51e/0xb90
[ 119.376728][ T5772]
[ 119.377794][ T5772] Memory state around the buggy address:
[ 119.380403][ T5772] ffff8880465fa600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 119.383839][ T5772] ffff8880465fa680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 119.387116][ T5772] >ffff8880465fa700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 119.390438][ T5772] ^
[ 119.392628][ T5772] ffff8880465fa780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 119.395952][ T5772] ffff8880465fa800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 119.399355][ T5772] ==================================================================
[ 119.653676][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.656753][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.671692][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.675269][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/02/27 20:35:17 executed programs: 94
[ 120.941210][ T5772] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 120.944587][ T5772] CPU: 0 UID: 0 PID: 5772 Comm: syz.3.56 Not tainted syzkaller #0 PREEMPT(full)
[ 120.948476][ T5772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 120.952759][ T5772] Call Trace:
[ 120.954535][ T5772]
[ 120.956124][ T5772] vpanic+0x56c/0xa60
[ 120.957824][ T5772] ? __pfx_vpanic+0x10/0x10
[ 120.959871][ T5772] panic+0xc5/0xd0
[ 120.961518][ T5772] ? __pfx_panic+0x10/0x10
[ 120.963553][ T5772] ? preempt_schedule_thunk+0x16/0x30
[ 120.965896][ T5772] ? bpf_trace_run9+0x13b/0x8c0
[ 120.968060][ T5772] ? preempt_schedule_thunk+0x16/0x30
[ 120.970453][ T5772] ? bpf_trace_run9+0x13b/0x8c0
[ 120.972664][ T5772] check_panic_on_warn+0x89/0xb0
[ 120.974857][ T5772] ? bpf_trace_run9+0x13b/0x8c0
[ 120.977017][ T5772] end_report+0x73/0x180
[ 120.978785][ T5772] ? bpf_trace_run9+0x13b/0x8c0
[ 120.980949][ T5772] kasan_report+0x128/0x150
[ 120.983055][ T5772] ? bpf_trace_run9+0x13b/0x8c0
[ 120.985289][ T5772] bpf_trace_run9+0x13b/0x8c0
[ 120.987234][ T5772] ? bpf_trace_run9+0x250/0x8c0
[ 120.989437][ T5772] ? __pfx_bpf_trace_run9+0x10/0x10
[ 120.991787][ T5772] ? virtio_transport_alloc_skb+0xf4/0x1180
[ 120.994607][ T5772] ? vsock_connect+0xaf5/0xd60
[ 120.997082][ T5772] ? __sys_connect+0x312/0x450
[ 120.999222][ T5772] __bpf_trace_virtio_transport_alloc_pkt+0x3a5/0x410
[ 121.002174][ T5772] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10
[ 121.005218][ T5772] ? kmem_cache_alloc_node_noprof+0x3ce/0x690
[ 121.007753][ T5772] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10
[ 121.010807][ T5772] __traceiter_virtio_transport_alloc_pkt+0xc1/0x120
[ 121.013607][ T5772] virtio_transport_alloc_skb+0x1108/0x1180
[ 121.016121][ T5772] ? __pfx_virtio_transport_alloc_skb+0x10/0x10
[ 121.019001][ T5772] virtio_transport_send_pkt_info+0x570/0xff0
[ 121.021641][ T5772] ? lockdep_hardirqs_on+0x7a/0x110
[ 121.023923][ T5772] virtio_transport_connect+0xf5/0x150
[ 121.026295][ T5772] ? __pfx_virtio_transport_connect+0x10/0x10
[ 121.028905][ T5772] ? __pfx_vsock_auto_bind+0x10/0x10
[ 121.031216][ T5772] vsock_connect+0xaf5/0xd60
[ 121.033285][ T5772] ? aa_sk_perm+0x6d5/0x900
[ 121.035279][ T5772] ? __pfx_vsock_connect+0x10/0x10
[ 121.037582][ T5772] ? __pfx_aa_sk_perm+0x10/0x10
[ 121.039715][ T5772] ? __pfx_autoremove_wake_function+0x10/0x10
[ 121.042383][ T5772] ? hook_socket_connect+0x107/0x190
[ 121.044703][ T5772] ? bpf_lsm_socket_connect+0x9/0x20
[ 121.046908][ T5772] __sys_connect+0x312/0x450
[ 121.049010][ T5772] ? __pfx___sys_connect+0x10/0x10
[ 121.051262][ T5772] ? rcu_is_watching+0x15/0xb0
[ 121.053361][ T5772] __x64_sys_connect+0x7a/0x90
[ 121.055229][ T5772] do_syscall_64+0x14d/0xf80
[ 121.057019][ T5772] ? trace_irq_disable+0x3b/0x150
[ 121.059069][ T5772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.061385][ T5772] ? clear_bhb_loop+0x40/0x90
[ 121.063267][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.065861][ T5772] RIP: 0033:0x7f81c259c799
[ 121.068033][ T5772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 121.076295][ T5772] RSP: 002b:00007f81c34fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 121.079906][ T5772] RAX: ffffffffffffffda RBX: 00007f81c2815fa0 RCX: 00007f81c259c799
[ 121.083256][ T5772] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003
[ 121.086490][ T5772] RBP: 00007f81c2632bd9 R08: 0000000000000000 R09: 0000000000000000
[ 121.089976][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 121.093441][ T5772] R13: 00007f81c2816038 R14: 00007f81c2815fa0 R15: 00007fff2d7d05a8
[ 121.096776][ T5772]
[ 121.098402][ T5772] Kernel Offset: disabled
[ 121.100202][ T5772] Rebooting in 86400 seconds..
VM DIAGNOSIS:
20:35:15 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003866ed0
R8 =ffff888034cf8237 R9 =1ffff1100699f046 R10=dffffc0000000000 R11=ffffffff854184f0
R12=dffffc0000000000 R13=ffffffff9a2bda61 R14=ffffffff9a5d5c60 R15=0000000000000000
RIP=ffffffff8541856c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f81c34fe6c0 ffffffff 00c00000
GS =0000 ffff88808ca59000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007feee49ea4b8 CR3=0000000055733000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000401008 Opmask01=0000000000000101 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a79732f74656e 2f70756f7267637a
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd255489b6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd255489b6 00007ffd255489bc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee48331bc
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee48331fc
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee4833360
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee48331ee
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 685f746224646e69 6200353278612464 6e696200676c6124 646e696200776172
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100980070 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000028 0000000000000092 0000000000000001
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000