Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts.
2026/04/06 00:21:53 parsed 1 programs
[ 86.816454][ T5845] cgroup: Unknown subsys name 'net'
[ 86.954936][ T5845] cgroup: Unknown subsys name 'cpuset'
[ 86.966861][ T5845] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 88.697075][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.656403][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 91.930683][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.939224][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.973711][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.985151][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.033190][ T24] cfg80211: failed to load regulatory.db
[ 94.759059][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 94.771355][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 94.779986][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.788874][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.797349][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.487220][ T5933] chnl_net:caif_netlink_parms(): no params data found
[ 95.568997][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.576840][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.584234][ T5933] bridge_slave_0: entered allmulticast mode
[ 95.591931][ T5933] bridge_slave_0: entered promiscuous mode
[ 95.602340][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.609622][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.616961][ T5933] bridge_slave_1: entered allmulticast mode
[ 95.625271][ T5933] bridge_slave_1: entered promiscuous mode
[ 95.682787][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.694551][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.736218][ T5933] team0: Port device team_slave_0 added
[ 95.744017][ T5933] team0: Port device team_slave_1 added
[ 95.773372][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.780934][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.806977][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.819689][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.826645][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.853209][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.900658][ T5933] hsr_slave_0: entered promiscuous mode
[ 95.906945][ T5933] hsr_slave_1: entered promiscuous mode
[ 96.056177][ T5933] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.068213][ T5933] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.079383][ T5933] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.091663][ T5933] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.124873][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.132315][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.140099][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.147199][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.203911][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.224220][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.232875][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.247716][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.263232][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.270508][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.283630][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.290776][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.466352][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.513020][ T5933] veth0_vlan: entered promiscuous mode
[ 96.524699][ T5933] veth1_vlan: entered promiscuous mode
[ 96.556326][ T5933] veth0_macvtap: entered promiscuous mode
[ 96.566177][ T5933] veth1_macvtap: entered promiscuous mode
[ 96.586192][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.601869][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.618493][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.629505][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.642023][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.651182][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.824399][ T140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.886699][ T140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.000086][ T140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.108592][ T140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/04/06 00:22:06 executed programs: 0
[ 97.292287][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.300211][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.307972][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.318781][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.328338][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 97.476357][ T5958] chnl_net:caif_netlink_parms(): no params data found
[ 97.546442][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.554587][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.562535][ T5958] bridge_slave_0: entered allmulticast mode
[ 97.570054][ T5958] bridge_slave_0: entered promiscuous mode
[ 97.582816][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.590127][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.597376][ T5958] bridge_slave_1: entered allmulticast mode
[ 97.605084][ T5958] bridge_slave_1: entered promiscuous mode
[ 97.641821][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.654503][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.690211][ T5958] team0: Port device team_slave_0 added
[ 97.699644][ T5958] team0: Port device team_slave_1 added
[ 97.731852][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.738977][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.765687][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.779488][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.786461][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.812784][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.862973][ T5958] hsr_slave_0: entered promiscuous mode
[ 97.870088][ T5958] hsr_slave_1: entered promiscuous mode
[ 97.876771][ T5958] debugfs: 'hsr0' already exists in 'hsr'
[ 97.882786][ T5958] Cannot create hsr debugfs directory
[ 99.399862][ T51] Bluetooth: hci0: command tx timeout
[ 99.806657][ T140] bridge_slave_1: left allmulticast mode
[ 99.816223][ T140] bridge_slave_1: left promiscuous mode
[ 99.823305][ T140] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.834644][ T140] bridge_slave_0: left allmulticast mode
[ 99.842261][ T140] bridge_slave_0: left promiscuous mode
[ 99.848517][ T140] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.014931][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.026993][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.038148][ T140] bond0 (unregistering): Released all slaves
[ 100.122993][ T140] hsr_slave_0: left promiscuous mode
[ 100.136638][ T140] hsr_slave_1: left promiscuous mode
[ 100.143715][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.151638][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.162078][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.170154][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.191211][ T140] veth1_macvtap: left promiscuous mode
[ 100.197239][ T140] veth0_macvtap: left promiscuous mode
[ 100.203507][ T140] veth1_vlan: left promiscuous mode
[ 100.208952][ T140] veth0_vlan: left promiscuous mode
[ 100.587617][ T140] team0 (unregistering): Port device team_slave_1 removed
[ 100.609021][ T140] team0 (unregistering): Port device team_slave_0 removed
[ 101.093667][ T5958] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.118342][ T5958] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.136999][ T5958] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.152454][ T5958] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.385666][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.431873][ T5958] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.448394][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.455779][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.473991][ T51] Bluetooth: hci0: command tx timeout
[ 101.485173][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.492444][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.788947][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.856477][ T5958] veth0_vlan: entered promiscuous mode
[ 101.874019][ T5958] veth1_vlan: entered promiscuous mode
[ 101.922807][ T5958] veth0_macvtap: entered promiscuous mode
[ 101.936982][ T5958] veth1_macvtap: entered promiscuous mode
[ 101.972948][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.998217][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.016613][ T140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.031099][ T140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.051817][ T140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.074411][ T140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.171618][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.191714][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.235818][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.247436][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/06 00:22:11 executed programs: 2
[ 102.322644][ T6023] wlan1 speed is unknown, defaulting to 1000
[ 102.329924][ T6023] wlan1 speed is unknown, defaulting to 1000
[ 102.340593][ T6023] wlan1 speed is unknown, defaulting to 1000
[ 102.355997][ T6023] smbdirect: ib_dev[óyz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 102.373690][ T6023] smbdirect: ib_dev[óyz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 102.393747][ T6023] smbdirect: ib_dev[óyz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 102.409921][ T6023] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 102.433701][ T6023] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98
[ 102.482043][ T6023] wlan1 speed is unknown, defaulting to 1000
[ 103.549247][ T51] Bluetooth: hci0: command tx timeout
[ 105.629633][ T51] Bluetooth: hci0: command tx timeout
2026/04/06 00:22:16 executed programs: 221
2026/04/06 00:22:21 executed programs: 487
[ 114.456579][ T5163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 114.471832][ T5163] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 114.482030][ T5163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 114.490862][ T5163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 114.498611][ T5163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 114.543958][ T6636] wlan1 speed is unknown, defaulting to 1000
[ 114.664222][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.690351][ T6636] chnl_net:caif_netlink_parms(): no params data found
[ 114.764968][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.791276][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.798621][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state
[ 114.806132][ T6636] bridge_slave_0: entered allmulticast mode
[ 114.813304][ T6636] bridge_slave_0: entered promiscuous mode
[ 114.822311][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.829733][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state
[ 114.836891][ T6636] bridge_slave_1: entered allmulticast mode
[ 114.846830][ T6636] bridge_slave_1: entered promiscuous mode
[ 114.874627][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.901347][ T6636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 114.913235][ T6636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 114.957851][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.975594][ T6636] team0: Port device team_slave_0 added
[ 114.983217][ T6636] team0: Port device team_slave_1 added
[ 115.007251][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 115.014304][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.040544][ T6636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 115.052456][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 115.059496][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.088898][ T6636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 115.142602][ T6636] hsr_slave_0: entered promiscuous mode
[ 115.149320][ T6636] hsr_slave_1: entered promiscuous mode
[ 115.322039][ T12] bridge_slave_1: left allmulticast mode
[ 115.327770][ T12] bridge_slave_1: left promiscuous mode
[ 115.334328][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.343862][ T12] bridge_slave_0: left allmulticast mode
[ 115.350264][ T12] bridge_slave_0: left promiscuous mode
[ 115.356116][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.519009][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 115.530359][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 115.540366][ T12] bond0 (unregistering): Released all slaves
[ 115.647728][ T10] wlan1 speed is unknown, defaulting to 1000
[ 115.655367][ T10] óyz2: Port: 1 Link DOWN
[ 115.658663][ T49] smbdirect: ib_dev[óyz2] removed
[ 115.692112][ T49] ==================================================================
[ 115.700247][ T49] BUG: KASAN: invalid-free in gid_table_release_one+0x384/0x470
[ 115.708008][ T49] Free of addr ffff88807a160ed8 by task kworker/u8:3/49
[ 115.714969][ T49]
[ 115.717327][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full)
[ 115.717351][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 115.717363][ T49] Workqueue: ib-unreg-wq ib_unregister_work
[ 115.717393][ T49] Call Trace:
[ 115.717401][ T49]
[ 115.717408][ T49] dump_stack_lvl+0xe8/0x150
[ 115.717437][ T49] print_address_description+0x55/0x1e0
[ 115.717463][ T49] print_report+0x58/0x70
[ 115.717485][ T49] ? gid_table_release_one+0x384/0x470
[ 115.717504][ T49] kasan_report_invalid_free+0xea/0x110
[ 115.717526][ T49] ? gid_table_release_one+0x384/0x470
[ 115.717548][ T49] ? gid_table_release_one+0x384/0x470
[ 115.717568][ T49] __kasan_slab_pre_free+0x104/0x120
[ 115.717586][ T49] kfree+0x173/0x640
[ 115.717609][ T49] ? gid_table_release_one+0x384/0x470
[ 115.717631][ T49] gid_table_release_one+0x384/0x470
[ 115.717657][ T49] ib_device_release+0xd2/0x1c0
[ 115.717685][ T49] ? __pfx_ib_device_release+0x10/0x10
[ 115.717711][ T49] device_release+0xc4/0x1f0
[ 115.717736][ T49] kobject_put+0x228/0x560
[ 115.717763][ T49] ? process_scheduled_works+0xa70/0x1860
[ 115.717791][ T49] process_scheduled_works+0xb5d/0x1860
[ 115.717830][ T49] ? __pfx_process_scheduled_works+0x10/0x10
[ 115.717859][ T49] ? assign_work+0x3d5/0x5e0
[ 115.717886][ T49] worker_thread+0xa53/0xfc0
[ 115.717924][ T49] kthread+0x388/0x470
[ 115.717953][ T49] ? __pfx_worker_thread+0x10/0x10
[ 115.717979][ T49] ? __pfx_kthread+0x10/0x10
[ 115.717999][ T49] ret_from_fork+0x514/0xb70
[ 115.718025][ T49] ? __pfx_ret_from_fork+0x10/0x10
[ 115.718051][ T49] ? __switch_to+0xc79/0x1410
[ 115.718073][ T49] ? __pfx_kthread+0x10/0x10
[ 115.718094][ T49] ret_from_fork_asm+0x1a/0x30
[ 115.718118][ T49]
[ 115.718125][ T49]
[ 115.895876][ T49] Allocated by task 6023:
[ 115.900228][ T49] kasan_save_track+0x3e/0x80
[ 115.904941][ T49] __kasan_kmalloc+0x93/0xb0
[ 115.909535][ T49] __kmalloc_noprof+0x35c/0x760
[ 115.914391][ T49] ib_cache_setup_one+0x198/0x570
[ 115.919481][ T49] ib_register_device+0xfbd/0x13e0
[ 115.924597][ T49] siw_newlink+0x8fe/0xde0
[ 115.929021][ T49] nldev_newlink+0x5bc/0x650
[ 115.933706][ T49] rdma_nl_rcv+0x6d1/0xa10
[ 115.938151][ T49] netlink_unicast+0x80f/0x9b0
[ 115.942956][ T49] netlink_sendmsg+0x813/0xb40
[ 115.947722][ T49] ____sys_sendmsg+0x972/0x9f0
[ 115.952487][ T49] ___sys_sendmsg+0x2a5/0x360
[ 115.957165][ T49] __x64_sys_sendmsg+0x1bd/0x2a0
[ 115.962107][ T49] do_syscall_64+0x15f/0xf80
[ 115.966706][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.972686][ T49]
[ 115.975014][ T49] The buggy address belongs to the object at ffff88807a160e00
[ 115.975014][ T49] which belongs to the cache kmalloc-256 of size 256
[ 115.989244][ T49] The buggy address is located 216 bytes inside of
[ 115.989244][ T49] 224-byte region [ffff88807a160e00, ffff88807a160ee0)
[ 116.002607][ T49]
[ 116.005018][ T49] The buggy address belongs to the physical page:
[ 116.011432][ T49] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a160600 pfn:0x7a160
[ 116.021519][ T49] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 116.030279][ T49] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 116.038795][ T49] page_type: f5(slab)
[ 116.042778][ T49] raw: 00fff00000000240 ffff88813fe25b40 ffffea0001dfec10 ffffea0001f31690
[ 116.051370][ T49] raw: ffff88807a160600 000000080010000b 00000000f5000000 0000000000000000
[ 116.060068][ T49] head: 00fff00000000240 ffff88813fe25b40 ffffea0001dfec10 ffffea0001f31690
[ 116.068825][ T49] head: ffff88807a160600 000000080010000b 00000000f5000000 0000000000000000
[ 116.077504][ T49] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 116.086265][ T49] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 116.095021][ T49] page dumped because: kasan: bad access detected
[ 116.101433][ T49] page_owner tracks the page as allocated
[ 116.107161][ T49] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5958, tgid 5958 (syz-executor), ts 101997671951, free_ts 101992623176
[ 116.128903][ T49] post_alloc_hook+0x231/0x280
[ 116.133790][ T49] get_page_from_freelist+0x24ba/0x2540
[ 116.139338][ T49] __alloc_frozen_pages_noprof+0x18d/0x380
[ 116.145247][ T49] allocate_slab+0x77/0x660
[ 116.149759][ T49] refill_objects+0x339/0x3d0
[ 116.154465][ T49] __pcs_replace_empty_main+0x321/0x720
[ 116.160014][ T49] __kmalloc_noprof+0x474/0x760
[ 116.164873][ T49] fib_create_info+0x1723/0x31f0
[ 116.169817][ T49] fib_table_insert+0xc8/0x1b50
[ 116.174676][ T49] fib_magic+0x434/0x510
[ 116.179014][ T49] fib_add_ifaddr+0x3fb/0x5f0
[ 116.183693][ T49] fib_netdev_event+0x382/0x490
[ 116.188633][ T49] notifier_call_chain+0x1ad/0x3d0
[ 116.193746][ T49] __dev_notify_flags+0x1a9/0x310
[ 116.198773][ T49] netif_change_flags+0xe8/0x1a0
[ 116.203709][ T49] do_setlink+0xf82/0x4590
[ 116.208127][ T49] page last free pid 15 tgid 15 stack trace:
[ 116.214101][ T49] __free_frozen_pages+0xbc7/0xd30
[ 116.219303][ T49] rcu_core+0x7cd/0x1070
[ 116.223548][ T49] handle_softirqs+0x22a/0x840
[ 116.228316][ T49] run_ksoftirqd+0x36/0x60
[ 116.232749][ T49] smpboot_thread_fn+0x541/0xa50
[ 116.237731][ T49] kthread+0x388/0x470
[ 116.241823][ T49] ret_from_fork+0x514/0xb70
[ 116.246430][ T49] ret_from_fork_asm+0x1a/0x30
[ 116.251295][ T49]
[ 116.253676][ T49] Memory state around the buggy address:
[ 116.259308][ T49] ffff88807a160d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.267633][ T49] ffff88807a160e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 116.275702][ T49] >ffff88807a160e80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[ 116.283762][ T49] ^
[ 116.290867][ T49] ffff88807a160f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.298938][ T49] ffff88807a160f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.307275][ T49] ==================================================================
[ 116.328326][ T49] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 116.335663][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full)
[ 116.344950][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 116.355102][ T49] Workqueue: ib-unreg-wq ib_unregister_work
[ 116.361053][ T49] Call Trace:
[ 116.364356][ T49]
[ 116.367311][ T49] vpanic+0x56c/0xa60
[ 116.371329][ T49] ? __pfx_vpanic+0x10/0x10
[ 116.376308][ T49] panic+0xc5/0xd0
[ 116.380063][ T49] ? __pfx_panic+0x10/0x10
[ 116.384521][ T49] ? preempt_schedule_thunk+0x16/0x30
[ 116.390108][ T49] ? preempt_schedule_thunk+0x16/0x30
[ 116.395624][ T49] check_panic_on_warn+0x89/0xb0
[ 116.400571][ T49] end_report+0x73/0x170
[ 116.404826][ T49] ? gid_table_release_one+0x384/0x470
[ 116.410299][ T49] kasan_report_invalid_free+0xfa/0x110
[ 116.416044][ T49] ? gid_table_release_one+0x384/0x470
[ 116.421605][ T49] ? gid_table_release_one+0x384/0x470
[ 116.427165][ T49] __kasan_slab_pre_free+0x104/0x120
[ 116.432460][ T49] kfree+0x173/0x640
[ 116.436367][ T49] ? gid_table_release_one+0x384/0x470
[ 116.441839][ T49] gid_table_release_one+0x384/0x470
[ 116.447396][ T49] ib_device_release+0xd2/0x1c0
[ 116.453066][ T49] ? __pfx_ib_device_release+0x10/0x10
[ 116.458620][ T49] device_release+0xc4/0x1f0
[ 116.463422][ T49] kobject_put+0x228/0x560
[ 116.467883][ T49] ? process_scheduled_works+0xa70/0x1860
[ 116.473894][ T49] process_scheduled_works+0xb5d/0x1860
[ 116.479490][ T49] ? __pfx_process_scheduled_works+0x10/0x10
[ 116.485486][ T49] ? assign_work+0x3d5/0x5e0
[ 116.490105][ T49] worker_thread+0xa53/0xfc0
[ 116.494716][ T49] kthread+0x388/0x470
[ 116.498800][ T49] ? __pfx_worker_thread+0x10/0x10
[ 116.503927][ T49] ? __pfx_kthread+0x10/0x10
[ 116.508711][ T49] ret_from_fork+0x514/0xb70
[ 116.513313][ T49] ? __pfx_ret_from_fork+0x10/0x10
[ 116.518522][ T49] ? __switch_to+0xc79/0x1410
[ 116.523305][ T49] ? __pfx_kthread+0x10/0x10
[ 116.527999][ T49] ret_from_fork_asm+0x1a/0x30
[ 116.532795][ T49]
[ 116.536466][ T49] Kernel Offset: disabled
[ 116.540795][ T49] Rebooting in 86400 seconds..