Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. 2025/09/04 14:48:23 parsed 1 programs [ 89.743046][ T5869] cgroup: Unknown subsys name 'net' [ 89.878786][ T5869] cgroup: Unknown subsys name 'cpuset' [ 89.887781][ T5869] cgroup: Unknown subsys name 'rlimit' [ 91.557559][ T5869] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.036303][ T10] cfg80211: failed to load regulatory.db [ 94.623805][ T5890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.632363][ T5890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.640159][ T5890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.664588][ T5890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.675499][ T5890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.118284][ T5888] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.789133][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.797734][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.118925][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 98.149160][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.168421][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.400349][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.407710][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.415942][ T5946] bridge_slave_0: entered allmulticast mode [ 98.423285][ T5946] bridge_slave_0: entered promiscuous mode [ 98.432885][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.442478][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.449933][ T5946] bridge_slave_1: entered allmulticast mode [ 98.459857][ T5946] bridge_slave_1: entered promiscuous mode [ 98.499415][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.512162][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.552385][ T5946] team0: Port device team_slave_0 added [ 98.560813][ T5946] team0: Port device team_slave_1 added [ 98.593301][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.600346][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.626871][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.640747][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.647805][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.674641][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.721132][ T5946] hsr_slave_0: entered promiscuous mode [ 98.727828][ T5946] hsr_slave_1: entered promiscuous mode [ 98.893146][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.906134][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.917078][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.927848][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.018129][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.041131][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.054452][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.061875][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.079743][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.086949][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.283978][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.329410][ T5946] veth0_vlan: entered promiscuous mode [ 99.341714][ T5946] veth1_vlan: entered promiscuous mode [ 99.372709][ T5946] veth0_macvtap: entered promiscuous mode [ 99.383602][ T5946] veth1_macvtap: entered promiscuous mode [ 99.405770][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.421398][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.440052][ T2953] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.449776][ T2953] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.460182][ T2953] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.471405][ T2953] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/04 14:48:36 executed programs: 0 [ 99.680332][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.697046][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.706070][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.760992][ T5186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.771894][ T5186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.785412][ T5186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.796912][ T5186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.805090][ T5186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.813559][ T5186] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.822564][ T5186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.852775][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.869358][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.877515][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.893531][ T5987] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.901172][ T5985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.912415][ T5985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.921012][ T5985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.930534][ T5985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.938526][ T5985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.947437][ T5987] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.107123][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.128541][ T5186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.136572][ T5186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.150880][ T5186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.164960][ T5186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.924365][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 101.073842][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 101.110433][ T5986] chnl_net:caif_netlink_parms(): no params data found [ 101.180935][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 101.255860][ T2953] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.277552][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 101.419172][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.426711][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.434081][ T5982] bridge_slave_0: entered allmulticast mode [ 101.442808][ T5982] bridge_slave_0: entered promiscuous mode [ 101.451766][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.459230][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.466572][ T5982] bridge_slave_1: entered allmulticast mode [ 101.474105][ T5982] bridge_slave_1: entered promiscuous mode [ 101.558720][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.566131][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.574536][ T5984] bridge_slave_0: entered allmulticast mode [ 101.581828][ T5984] bridge_slave_0: entered promiscuous mode [ 101.641937][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.656992][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.680187][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.688083][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.696719][ T5984] bridge_slave_1: entered allmulticast mode [ 101.703993][ T5984] bridge_slave_1: entered promiscuous mode [ 101.724998][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.732277][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.740434][ T5994] bridge_slave_0: entered allmulticast mode [ 101.748938][ T5994] bridge_slave_0: entered promiscuous mode [ 101.811836][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.819299][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.827772][ T5986] bridge_slave_0: entered allmulticast mode [ 101.835757][ T5986] bridge_slave_0: entered promiscuous mode [ 101.858447][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.868898][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.876150][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.883353][ T5994] bridge_slave_1: entered allmulticast mode [ 101.885737][ T51] Bluetooth: hci1: command tx timeout [ 101.889915][ T5186] Bluetooth: hci0: command tx timeout [ 101.902558][ T5994] bridge_slave_1: entered promiscuous mode [ 101.926454][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.933579][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.941128][ T5979] bridge_slave_0: entered allmulticast mode [ 101.949108][ T5979] bridge_slave_0: entered promiscuous mode [ 101.966745][ T2953] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.997187][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.004836][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.012181][ T5986] bridge_slave_1: entered allmulticast mode [ 102.020979][ T5986] bridge_slave_1: entered promiscuous mode [ 102.037974][ T5186] Bluetooth: hci3: command tx timeout [ 102.037981][ T51] Bluetooth: hci2: command tx timeout [ 102.052726][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.092939][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.100512][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.108445][ T5979] bridge_slave_1: entered allmulticast mode [ 102.115941][ T5979] bridge_slave_1: entered promiscuous mode [ 102.126051][ T5982] team0: Port device team_slave_0 added [ 102.140557][ T2953] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.194595][ T5186] Bluetooth: hci4: command tx timeout [ 102.209168][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.222575][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.262589][ T5982] team0: Port device team_slave_1 added [ 102.285845][ T5986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.300244][ T5986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.317309][ T2953] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.342760][ T5984] team0: Port device team_slave_0 added [ 102.375897][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.426742][ T5984] team0: Port device team_slave_1 added [ 102.435029][ T5986] team0: Port device team_slave_0 added [ 102.445715][ T5986] team0: Port device team_slave_1 added [ 102.468888][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.491825][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.499408][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.525888][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.539521][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.547084][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.574836][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.630469][ T5994] team0: Port device team_slave_0 added [ 102.659224][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.666556][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.693320][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.707164][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.714467][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.740791][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.770657][ T5994] team0: Port device team_slave_1 added [ 102.779386][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.786829][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.813259][ T5986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.827403][ T5979] team0: Port device team_slave_0 added [ 102.890786][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.898350][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.925559][ T5986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.945464][ T5979] team0: Port device team_slave_1 added [ 103.003093][ T5982] hsr_slave_0: entered promiscuous mode [ 103.009644][ T5982] hsr_slave_1: entered promiscuous mode [ 103.017871][ T5982] debugfs: 'hsr0' already exists in 'hsr' [ 103.023898][ T5982] Cannot create hsr debugfs directory [ 103.030601][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.038514][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.064655][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.077714][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.084873][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.111332][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.166583][ T5984] hsr_slave_0: entered promiscuous mode [ 103.173378][ T5984] hsr_slave_1: entered promiscuous mode [ 103.179934][ T5984] debugfs: 'hsr0' already exists in 'hsr' [ 103.186714][ T5984] Cannot create hsr debugfs directory [ 103.193236][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.200949][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.227310][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.241264][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.248425][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.274484][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.413698][ T5986] hsr_slave_0: entered promiscuous mode [ 103.420334][ T5986] hsr_slave_1: entered promiscuous mode [ 103.426668][ T5986] debugfs: 'hsr0' already exists in 'hsr' [ 103.432421][ T5986] Cannot create hsr debugfs directory [ 103.477228][ T5994] hsr_slave_0: entered promiscuous mode [ 103.483961][ T5994] hsr_slave_1: entered promiscuous mode [ 103.490702][ T5994] debugfs: 'hsr0' already exists in 'hsr' [ 103.496532][ T5994] Cannot create hsr debugfs directory [ 103.810171][ T5979] hsr_slave_0: entered promiscuous mode [ 103.817854][ T5979] hsr_slave_1: entered promiscuous mode [ 103.826984][ T5979] debugfs: 'hsr0' already exists in 'hsr' [ 103.832754][ T5979] Cannot create hsr debugfs directory [ 103.891893][ T2953] bridge_slave_1: left allmulticast mode [ 103.898276][ T2953] bridge_slave_1: left promiscuous mode [ 103.904842][ T2953] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.922770][ T2953] bridge_slave_0: left allmulticast mode [ 103.928516][ T2953] bridge_slave_0: left promiscuous mode [ 103.934323][ T2953] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.954391][ T5186] Bluetooth: hci0: command tx timeout [ 103.964462][ T5186] Bluetooth: hci1: command tx timeout [ 104.114604][ T5186] Bluetooth: hci3: command tx timeout [ 104.124299][ T5186] Bluetooth: hci2: command tx timeout [ 104.276449][ T5186] Bluetooth: hci4: command tx timeout [ 104.315087][ T2953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.326911][ T2953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.338004][ T2953] bond0 (unregistering): Released all slaves [ 104.575268][ T2953] hsr_slave_0: left promiscuous mode [ 104.581615][ T2953] hsr_slave_1: left promiscuous mode [ 104.589424][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.597839][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.607298][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.615345][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.635134][ T2953] veth1_macvtap: left promiscuous mode [ 104.641060][ T2953] veth0_macvtap: left promiscuous mode [ 104.647280][ T2953] veth1_vlan: left promiscuous mode [ 104.652769][ T2953] veth0_vlan: left promiscuous mode [ 105.011019][ T2953] team0 (unregistering): Port device team_slave_1 removed [ 105.040556][ T2953] team0 (unregistering): Port device team_slave_0 removed [ 105.677173][ T5984] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.716893][ T5984] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.732126][ T5984] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.760915][ T5984] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.035646][ T5186] Bluetooth: hci1: command tx timeout [ 106.036792][ T51] Bluetooth: hci0: command tx timeout [ 106.088130][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.156866][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.168200][ T5979] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.194645][ T51] Bluetooth: hci2: command tx timeout [ 106.195236][ T5186] Bluetooth: hci3: command tx timeout [ 106.221549][ T5979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.268497][ T5979] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.291239][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.298479][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.322957][ T5979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.355925][ T5186] Bluetooth: hci4: command tx timeout [ 106.370972][ T3033] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.378177][ T3033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.411512][ T5982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.440144][ T5982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.452014][ T5982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.466769][ T5982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.582583][ T5984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.616532][ T5994] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.628883][ T5994] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.655414][ T5994] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.672704][ T5994] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.920754][ T5986] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.959813][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.991351][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.011908][ T5986] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.027266][ T5986] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.075604][ T5986] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.120776][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.155604][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.188809][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.209667][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.216988][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.263342][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.270769][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.288098][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.295332][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.310597][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.317825][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.541631][ T5984] veth0_vlan: entered promiscuous mode [ 107.590665][ T5982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.659228][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.669889][ T5984] veth1_vlan: entered promiscuous mode [ 107.802018][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.842634][ T5986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.893169][ T3033] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.900386][ T3033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.926423][ T5986] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.939054][ T5984] veth0_macvtap: entered promiscuous mode [ 107.964048][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.971285][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.002700][ T5984] veth1_macvtap: entered promiscuous mode [ 108.020195][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.027508][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.054016][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.061224][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.114802][ T5186] Bluetooth: hci1: command tx timeout [ 108.116386][ T51] Bluetooth: hci0: command tx timeout [ 108.142093][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.170148][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.186893][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.222801][ T5986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.242955][ T2982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.262540][ T2982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.271989][ T2982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.281609][ T51] Bluetooth: hci3: command tx timeout [ 108.281637][ T5186] Bluetooth: hci2: command tx timeout [ 108.300858][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.313904][ T2982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.437452][ T51] Bluetooth: hci4: command tx timeout [ 108.480725][ T5979] veth0_vlan: entered promiscuous mode [ 108.494076][ T5979] veth1_vlan: entered promiscuous mode [ 108.629854][ T5982] veth0_vlan: entered promiscuous mode [ 108.637462][ T5979] veth0_macvtap: entered promiscuous mode [ 108.653277][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.689169][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.718702][ T5979] veth1_macvtap: entered promiscuous mode [ 108.760917][ T5982] veth1_vlan: entered promiscuous mode [ 108.807641][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.818849][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.833286][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 2025/09/04 14:48:45 executed programs: 10 [ 108.876791][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.910929][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.962185][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.001841][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.044016][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.078429][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.104773][ T5982] veth0_macvtap: entered promiscuous mode [ 109.134080][ T5982] veth1_macvtap: entered promiscuous mode [ 109.157630][ T2968] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.303074][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.372902][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.396364][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.414978][ T2953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.424103][ T2968] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.426728][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.456934][ T2968] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.519094][ T2968] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.578700][ T3033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.604507][ T3033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.643419][ T5986] veth0_vlan: entered promiscuous mode [ 109.763945][ T5986] veth1_vlan: entered promiscuous mode [ 109.851605][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.863612][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.003442][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.014047][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.075914][ T5994] veth0_vlan: entered promiscuous mode [ 110.120230][ T5986] veth0_macvtap: entered promiscuous mode [ 110.157980][ T5986] veth1_macvtap: entered promiscuous mode [ 110.188622][ T5994] veth1_vlan: entered promiscuous mode [ 110.281585][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.376196][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.433851][ T5994] veth0_macvtap: entered promiscuous mode [ 110.482391][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.549862][ T5994] veth1_macvtap: entered promiscuous mode [ 110.577341][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.602237][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.678344][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.779405][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.888790][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.982770][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.031354][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.087381][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.106578][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.131781][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.179295][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.350654][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.376302][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.605100][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.612978][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.880891][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.915194][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.734164][ C0] hrtimer: interrupt took 46435 ns 2025/09/04 14:48:50 executed programs: 145 [ 116.077056][ C1] ================================================================== [ 116.085217][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x677/0xcf0 [ 116.093055][ C1] Write of size 8 at addr ffff888079491a48 by task syz.3.243/6340 [ 116.100864][ C1] [ 116.103216][ C1] CPU: 1 UID: 0 PID: 6340 Comm: syz.3.243 Not tainted syzkaller #0 PREEMPT(full) [ 116.103236][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.103253][ C1] Call Trace: [ 116.103262][ C1] [ 116.103269][ C1] dump_stack_lvl+0x189/0x250 [ 116.103291][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 116.103312][ C1] ? rcu_is_watching+0x15/0xb0 [ 116.103327][ C1] ? __kasan_check_byte+0x12/0x40 [ 116.103351][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.103369][ C1] ? rcu_is_watching+0x15/0xb0 [ 116.103385][ C1] ? lock_release+0x4b/0x3e0 [ 116.103411][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 116.103431][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 116.103452][ C1] print_report+0xca/0x240 [ 116.103468][ C1] ? __bpf_get_stackid+0x677/0xcf0 [ 116.103491][ C1] kasan_report+0x118/0x150 [ 116.103515][ C1] ? __bpf_get_stackid+0x677/0xcf0 [ 116.103542][ C1] ? bpf_prog_b724608cae728045+0x27/0x2f [ 116.103561][ C1] __bpf_get_stackid+0x677/0xcf0 [ 116.103591][ C1] ? bpf_prog_b724608cae728045+0x27/0x2f [ 116.103605][ C1] bpf_get_stackid_raw_tp+0x196/0x210 [ 116.103627][ C1] bpf_prog_b724608cae728045+0x27/0x2f [ 116.103640][ C1] bpf_trace_run2+0x281/0x4b0 [ 116.103661][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 116.103676][ C1] ? bpf_trace_run2+0x186/0x4b0 [ 116.103697][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 116.103717][ C1] ? ieee80211_inform_bss+0xbd9/0x10a0 [ 116.103740][ C1] ? ieee80211_inform_bss+0xbd9/0x10a0 [ 116.103806][ C1] kfree+0x3a0/0x440 [ 116.103830][ C1] ieee80211_inform_bss+0xbd9/0x10a0 [ 116.103853][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 116.103870][ C1] ? do_raw_spin_lock+0x121/0x290 [ 116.103892][ C1] ? trace_kmalloc+0x1f/0xd0 [ 116.103914][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 116.103935][ C1] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 116.103960][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 116.103988][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 116.104009][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 116.104031][ C1] ? cfg80211_inform_bss_data+0x1e8/0x3b30 [ 116.104051][ C1] cfg80211_inform_bss_data+0x1fb/0x3b30 [ 116.104071][ C1] ? ktime_get+0x3e/0x1f0 [ 116.104089][ C1] ? ktime_get+0x3e/0x1f0 [ 116.104109][ C1] ? ktime_get+0x3e/0x1f0 [ 116.104126][ C1] ? ktime_get+0x3e/0x1f0 [ 116.104148][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 116.104177][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 116.104198][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 116.104219][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 116.104240][ C1] ? sched_clock+0x3f/0x60 [ 116.104262][ C1] ? sched_clock_cpu+0x74/0x430 [ 116.104288][ C1] ? lapic_next_event+0x11/0x20 [ 116.104305][ C1] ? clockevents_program_event+0x24d/0x360 [ 116.104329][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 116.104353][ C1] ? hrtimer_interrupt+0x889/0xaa0 [ 116.104372][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 116.104400][ C1] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 116.104420][ C1] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 116.104442][ C1] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 116.104463][ C1] ieee80211_bss_info_update+0x746/0x9e0 [ 116.104485][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 116.104504][ C1] ? irqentry_exit+0x74/0x90 [ 116.104528][ C1] ? kcov_remote_start+0x97/0x7f0 [ 116.104552][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 116.104569][ C1] ieee80211_scan_rx+0x593/0xa20 [ 116.104591][ C1] ieee80211_rx_list+0x201c/0x2a90 [ 116.104611][ C1] ? hrtimer_interrupt+0x889/0xaa0 [ 116.104630][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 116.104651][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 116.104676][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 116.104696][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 116.104721][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 116.104740][ C1] ieee80211_rx_napi+0x1a8/0x3d0 [ 116.104761][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 116.104784][ C1] ? skb_dequeue+0x10e/0x150 [ 116.104807][ C1] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 116.104828][ C1] tasklet_action_common+0x369/0x580 [ 116.104847][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 116.104868][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 116.104889][ C1] ? workqueue_softirq_action+0xd4/0x150 [ 116.104910][ C1] handle_softirqs+0x283/0x870 [ 116.104929][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 116.104947][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 116.104967][ C1] __irq_exit_rcu+0xca/0x1f0 [ 116.104982][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 116.105002][ C1] irq_exit_rcu+0x9/0x30 [ 116.105016][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 116.105038][ C1] [ 116.105043][ C1] [ 116.105049][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 116.105067][ C1] RIP: 0010:stack_depot_save_flags+0xba/0x860 [ 116.105092][ C1] Code: 31 c0 01 ef 45 89 c1 41 c1 c1 08 44 29 c5 41 31 e9 41 01 f8 44 29 cf 44 89 c9 c1 c1 10 31 f9 45 01 c1 89 c8 c1 c0 13 41 29 c8 <44> 31 c0 44 01 c9 41 29 c1 89 c5 c1 c5 04 44 31 cd 01 c8 83 c6 fd [ 116.105106][ C1] RSP: 0018:ffffc90003c0f908 EFLAGS: 00000296 [ 116.105121][ C1] RAX: 000000007151c86d RBX: 0000000000000000 RCX: 00000000390dae2a [ 116.105133][ C1] RDX: ffffc90003c0f988 RSI: 000000000000000c RDI: 00000000f0713105 [ 116.105144][ C1] RBP: 0000000087b3ff16 R08: 00000000c0abe88d R09: 0000000098e96033 [ 116.105154][ C1] R10: 0000000000000009 R11: ffffffff81ac3930 R12: 0000000000000001 [ 116.105165][ C1] R13: 0000000000000000 R14: ffffc90003c0f970 R15: ffffc90003c0f970 [ 116.105186][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 116.105211][ C1] ? stack_depot_save_flags+0x40/0x860 [ 116.105232][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 116.105252][ C1] kasan_save_stack+0x4d/0x60 [ 116.105272][ C1] ? kasan_save_stack+0x3e/0x60 [ 116.105290][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 116.105306][ C1] ? task_work_add+0xb1/0x420 [ 116.105326][ C1] ? __fput_deferred+0x154/0x390 [ 116.105343][ C1] ? fput_close+0x119/0x200 [ 116.105359][ C1] ? filp_close+0x27/0x40 [ 116.105375][ C1] ? __se_sys_close_range+0x359/0x650 [ 116.105400][ C1] ? do_syscall_64+0xfa/0x3b0 [ 116.105422][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.105458][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 116.105476][ C1] task_work_add+0xb1/0x420 [ 116.105497][ C1] ? irqentry_enter+0x3d/0x60 [ 116.105517][ C1] ? locks_remove_posix+0x381/0x650 [ 116.105539][ C1] ? __pfx_task_work_add+0x10/0x10 [ 116.105560][ C1] ? __pfx_locks_remove_posix+0x10/0x10 [ 116.105585][ C1] __fput_deferred+0x154/0x390 [ 116.105602][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 116.105619][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.105644][ C1] fput_close+0x119/0x200 [ 116.105662][ C1] ? __pfx_fput_close+0x10/0x10 [ 116.105684][ C1] filp_close+0x27/0x40 [ 116.105701][ C1] __se_sys_close_range+0x359/0x650 [ 116.105729][ C1] ? __pfx___se_sys_close_range+0x10/0x10 [ 116.105756][ C1] ? do_syscall_64+0xbe/0x3b0 [ 116.105781][ C1] do_syscall_64+0xfa/0x3b0 [ 116.105804][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.105819][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 116.105835][ C1] ? clear_bhb_loop+0x60/0xb0 [ 116.105853][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.105869][ C1] RIP: 0033:0x7f1a02f8ebe9 [ 116.105883][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.105896][ C1] RSP: 002b:00007ffe22f5a768 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 116.105911][ C1] RAX: ffffffffffffffda RBX: 000000000001c4d4 RCX: 00007f1a02f8ebe9 [ 116.105925][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 116.105934][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000522f5aa5f [ 116.105944][ C1] R10: 0000001b31c20000 R11: 0000000000000246 R12: 00007f1a031c5fac [ 116.105955][ C1] R13: 00007f1a031c5fa0 R14: ffffffffffffffff R15: 0000000000000005 [ 116.105973][ C1] [ 116.105979][ C1] [ 116.891674][ C1] Allocated by task 6340: [ 116.896056][ C1] kasan_save_track+0x3e/0x80 [ 116.900783][ C1] __kasan_kmalloc+0x93/0xb0 [ 116.905395][ C1] __kmalloc_node_noprof+0x276/0x4e0 [ 116.910716][ C1] bpf_map_area_alloc+0x64/0x180 [ 116.915675][ C1] prealloc_elems_and_freelist+0x86/0x1d0 [ 116.921399][ C1] stack_map_alloc+0x33f/0x4c0 [ 116.926178][ C1] map_create+0xaa0/0x14d0 [ 116.930619][ C1] __sys_bpf+0x60f/0x870 [ 116.935086][ C1] __x64_sys_bpf+0x7c/0x90 [ 116.939533][ C1] do_syscall_64+0xfa/0x3b0 [ 116.944054][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.949954][ C1] [ 116.952289][ C1] The buggy address belongs to the object at ffff888079491800 [ 116.952289][ C1] which belongs to the cache kmalloc-cg-1k of size 1024 [ 116.966614][ C1] The buggy address is located 8 bytes to the right of [ 116.966614][ C1] allocated 576-byte region [ffff888079491800, ffff888079491a40) [ 116.981127][ C1] [ 116.983460][ C1] The buggy address belongs to the physical page: [ 116.989886][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79490 [ 116.998678][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 117.007194][ C1] memcg:ffff888059290201 [ 117.011434][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 117.019078][ C1] page_type: f5(slab) [ 117.023252][ C1] raw: 00fff00000000040 ffff88801a44b280 ffffea0000c5e000 dead000000000002 [ 117.031928][ C1] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff888059290201 [ 117.040526][ C1] head: 00fff00000000040 ffff88801a44b280 ffffea0000c5e000 dead000000000002 [ 117.049263][ C1] head: 0000000000000000 0000000080100010 00000000f5000000 ffff888059290201 [ 117.057945][ C1] head: 00fff00000000003 ffffea0001e52401 00000000ffffffff 00000000ffffffff [ 117.066715][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 117.075390][ C1] page dumped because: kasan: bad access detected [ 117.081810][ C1] page_owner tracks the page as allocated [ 117.087543][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5891, tgid 5891 (syz-executor), ts 94934733431, free_ts 94617192401 [ 117.109021][ C1] post_alloc_hook+0x240/0x2a0 [ 117.113811][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 117.119533][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 117.125357][ C1] alloc_pages_mpol+0x232/0x4a0 [ 117.130303][ C1] allocate_slab+0x8a/0x370 [ 117.134813][ C1] ___slab_alloc+0xbeb/0x1410 [ 117.139598][ C1] __kmalloc_noprof+0x305/0x4f0 [ 117.144481][ C1] __register_sysctl_table+0x72/0x1340 [ 117.150037][ C1] ipv6_sysctl_net_init+0x31b/0x4a0 [ 117.155242][ C1] ops_init+0x359/0x5c0 [ 117.159453][ C1] setup_net+0x10c/0x320 [ 117.163790][ C1] copy_net_ns+0x31b/0x4d0 [ 117.168279][ C1] create_new_namespaces+0x3f3/0x720 [ 117.173607][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 117.179437][ C1] ksys_unshare+0x4c8/0x8c0 [ 117.183963][ C1] __x64_sys_unshare+0x38/0x50 [ 117.188832][ C1] page last free pid 5887 tgid 5887 stack trace: [ 117.195166][ C1] __free_frozen_pages+0xbc4/0xd30 [ 117.200388][ C1] __put_partials+0x156/0x1a0 [ 117.205096][ C1] put_cpu_partial+0x17c/0x250 [ 117.209866][ C1] __slab_free+0x2d5/0x3c0 [ 117.214293][ C1] qlist_free_all+0x97/0x140 [ 117.218902][ C1] kasan_quarantine_reduce+0x148/0x160 [ 117.224402][ C1] __kasan_slab_alloc+0x22/0x80 [ 117.229263][ C1] __kmalloc_noprof+0x224/0x4f0 [ 117.234123][ C1] tomoyo_supervisor+0xbd5/0x1480 [ 117.239164][ C1] tomoyo_path_number_perm+0x438/0x5a0 [ 117.244632][ C1] security_file_ioctl+0xcb/0x2d0 [ 117.250098][ C1] __se_sys_ioctl+0x47/0x170 [ 117.254700][ C1] do_syscall_64+0xfa/0x3b0 [ 117.259213][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.265114][ C1] [ 117.267446][ C1] Memory state around the buggy address: [ 117.273075][ C1] ffff888079491900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 117.281140][ C1] ffff888079491980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 117.289378][ C1] >ffff888079491a00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 117.297435][ C1] ^ [ 117.303846][ C1] ffff888079491a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 117.311999][ C1] ffff888079491b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 117.320062][ C1] ================================================================== [ 117.328335][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 117.335570][ C1] CPU: 1 UID: 0 PID: 6340 Comm: syz.3.243 Not tainted syzkaller #0 PREEMPT(full) [ 117.344792][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.354893][ C1] Call Trace: [ 117.358183][ C1] [ 117.361037][ C1] dump_stack_lvl+0x99/0x250 [ 117.365639][ C1] ? __asan_memcpy+0x40/0x70 [ 117.370237][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.375441][ C1] ? __pfx__printk+0x10/0x10 [ 117.380143][ C1] vpanic+0x281/0x750 [ 117.384146][ C1] ? __pfx_vpanic+0x10/0x10 [ 117.388672][ C1] ? __irq_exit_rcu+0xd8/0x1f0 [ 117.393443][ C1] panic+0xb9/0xc0 [ 117.397347][ C1] ? __pfx_panic+0x10/0x10 [ 117.401862][ C1] ? __bpf_get_stackid+0x677/0xcf0 [ 117.406994][ C1] ? __bpf_get_stackid+0x677/0xcf0 [ 117.412126][ C1] check_panic_on_warn+0x89/0xb0 [ 117.417073][ C1] ? __bpf_get_stackid+0x677/0xcf0 [ 117.422204][ C1] end_report+0x78/0x160 [ 117.426474][ C1] kasan_report+0x129/0x150 [ 117.430989][ C1] ? __bpf_get_stackid+0x677/0xcf0 [ 117.436120][ C1] ? bpf_prog_b724608cae728045+0x27/0x2f [ 117.441769][ C1] __bpf_get_stackid+0x677/0xcf0 [ 117.446733][ C1] ? bpf_prog_b724608cae728045+0x27/0x2f [ 117.452371][ C1] bpf_get_stackid_raw_tp+0x196/0x210 [ 117.457757][ C1] bpf_prog_b724608cae728045+0x27/0x2f [ 117.463220][ C1] bpf_trace_run2+0x281/0x4b0 [ 117.467906][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 117.473192][ C1] ? bpf_trace_run2+0x186/0x4b0 [ 117.478050][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 117.483268][ C1] ? ieee80211_inform_bss+0xbd9/0x10a0 [ 117.488749][ C1] ? ieee80211_inform_bss+0xbd9/0x10a0 [ 117.494225][ C1] kfree+0x3a0/0x440 [ 117.498138][ C1] ieee80211_inform_bss+0xbd9/0x10a0 [ 117.503434][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 117.509189][ C1] ? do_raw_spin_lock+0x121/0x290 [ 117.514226][ C1] ? trace_kmalloc+0x1f/0xd0 [ 117.518827][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 117.524558][ C1] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 117.530812][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 117.537512][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 117.543457][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 117.549793][ C1] ? cfg80211_inform_bss_data+0x1e8/0x3b30 [ 117.555698][ C1] cfg80211_inform_bss_data+0x1fb/0x3b30 [ 117.561336][ C1] ? ktime_get+0x3e/0x1f0 [ 117.565677][ C1] ? ktime_get+0x3e/0x1f0 [ 117.570023][ C1] ? ktime_get+0x3e/0x1f0 [ 117.574531][ C1] ? ktime_get+0x3e/0x1f0 [ 117.578870][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 117.585207][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 117.591839][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 117.597924][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 117.603133][ C1] ? sched_clock+0x3f/0x60 [ 117.607571][ C1] ? sched_clock_cpu+0x74/0x430 [ 117.612439][ C1] ? lapic_next_event+0x11/0x20 [ 117.617428][ C1] ? clockevents_program_event+0x24d/0x360 [ 117.623335][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 117.628633][ C1] ? hrtimer_interrupt+0x889/0xaa0 [ 117.633770][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 117.639002][ C1] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 117.644827][ C1] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 117.650920][ C1] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 117.656748][ C1] ieee80211_bss_info_update+0x746/0x9e0 [ 117.662391][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 117.668551][ C1] ? irqentry_exit+0x74/0x90 [ 117.673154][ C1] ? kcov_remote_start+0x97/0x7f0 [ 117.678188][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 117.684007][ C1] ieee80211_scan_rx+0x593/0xa20 [ 117.688969][ C1] ieee80211_rx_list+0x201c/0x2a90 [ 117.694278][ C1] ? hrtimer_interrupt+0x889/0xaa0 [ 117.699515][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 117.704943][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 117.710437][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 117.715475][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 117.720640][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 117.725673][ C1] ieee80211_rx_napi+0x1a8/0x3d0 [ 117.730707][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 117.736264][ C1] ? skb_dequeue+0x10e/0x150 [ 117.740955][ C1] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 117.746952][ C1] tasklet_action_common+0x369/0x580 [ 117.752249][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 117.758516][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 117.764335][ C1] ? workqueue_softirq_action+0xd4/0x150 [ 117.770012][ C1] handle_softirqs+0x283/0x870 [ 117.774786][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 117.779659][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 117.785024][ C1] __irq_exit_rcu+0xca/0x1f0 [ 117.789639][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 117.794872][ C1] irq_exit_rcu+0x9/0x30 [ 117.799163][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 117.804906][ C1] [ 117.807935][ C1] [ 117.810869][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.816858][ C1] RIP: 0010:stack_depot_save_flags+0xba/0x860 [ 117.822943][ C1] Code: 31 c0 01 ef 45 89 c1 41 c1 c1 08 44 29 c5 41 31 e9 41 01 f8 44 29 cf 44 89 c9 c1 c1 10 31 f9 45 01 c1 89 c8 c1 c0 13 41 29 c8 <44> 31 c0 44 01 c9 41 29 c1 89 c5 c1 c5 04 44 31 cd 01 c8 83 c6 fd [ 117.842655][ C1] RSP: 0018:ffffc90003c0f908 EFLAGS: 00000296 [ 117.848786][ C1] RAX: 000000007151c86d RBX: 0000000000000000 RCX: 00000000390dae2a [ 117.856771][ C1] RDX: ffffc90003c0f988 RSI: 000000000000000c RDI: 00000000f0713105 [ 117.864849][ C1] RBP: 0000000087b3ff16 R08: 00000000c0abe88d R09: 0000000098e96033 [ 117.872834][ C1] R10: 0000000000000009 R11: ffffffff81ac3930 R12: 0000000000000001 [ 117.880919][ C1] R13: 0000000000000000 R14: ffffc90003c0f970 R15: ffffc90003c0f970 [ 117.888913][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 117.895088][ C1] ? stack_depot_save_flags+0x40/0x860 [ 117.900560][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 117.906460][ C1] kasan_save_stack+0x4d/0x60 [ 117.911144][ C1] ? kasan_save_stack+0x3e/0x60 [ 117.916020][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 117.921411][ C1] ? task_work_add+0xb1/0x420 [ 117.926103][ C1] ? __fput_deferred+0x154/0x390 [ 117.931044][ C1] ? fput_close+0x119/0x200 [ 117.935560][ C1] ? filp_close+0x27/0x40 [ 117.939896][ C1] ? __se_sys_close_range+0x359/0x650 [ 117.945301][ C1] ? do_syscall_64+0xfa/0x3b0 [ 117.950009][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.956103][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 117.961308][ C1] task_work_add+0xb1/0x420 [ 117.965827][ C1] ? irqentry_enter+0x3d/0x60 [ 117.970511][ C1] ? locks_remove_posix+0x381/0x650 [ 117.975717][ C1] ? __pfx_task_work_add+0x10/0x10 [ 117.980837][ C1] ? __pfx_locks_remove_posix+0x10/0x10 [ 117.986400][ C1] __fput_deferred+0x154/0x390 [ 117.991177][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 117.996471][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.001685][ C1] fput_close+0x119/0x200 [ 118.006024][ C1] ? __pfx_fput_close+0x10/0x10 [ 118.010976][ C1] filp_close+0x27/0x40 [ 118.015159][ C1] __se_sys_close_range+0x359/0x650 [ 118.020378][ C1] ? __pfx___se_sys_close_range+0x10/0x10 [ 118.026112][ C1] ? do_syscall_64+0xbe/0x3b0 [ 118.030804][ C1] do_syscall_64+0xfa/0x3b0 [ 118.035321][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.041391][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.047563][ C1] ? clear_bhb_loop+0x60/0xb0 [ 118.052248][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.058175][ C1] RIP: 0033:0x7f1a02f8ebe9 [ 118.062600][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.082213][ C1] RSP: 002b:00007ffe22f5a768 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 118.090664][ C1] RAX: ffffffffffffffda RBX: 000000000001c4d4 RCX: 00007f1a02f8ebe9 [ 118.098655][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 118.106628][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000522f5aa5f [ 118.114608][ C1] R10: 0000001b31c20000 R11: 0000000000000246 R12: 00007f1a031c5fac [ 118.122586][ C1] R13: 00007f1a031c5fa0 R14: ffffffffffffffff R15: 0000000000000005 [ 118.130620][ C1] [ 118.133989][ C1] Kernel Offset: disabled [ 118.138315][ C1] Rebooting in 86400 seconds..