Warning: Permanently added '10.128.10.42' (ED25519) to the list of known hosts.
2025/08/10 13:35:00 ignoring optional flag "sandboxArg"="0"
2025/08/10 13:35:01 parsed 1 programs
[ 106.232878][ T4866] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 107.998093][ T376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.020249][ T376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.045482][ T4885] syz-executor (4885) used greatest stack depth: 20928 bytes left
[ 108.060189][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 108.070338][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.099879][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.127825][ T4886] chnl_net:caif_netlink_parms(): no params data found
[ 108.144658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 108.456772][ T4886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.474718][ T4886] bridge0: port 1(bridge_slave_0) entered disabled state
[ 108.531261][ T4886] device bridge_slave_0 entered promiscuous mode
[ 108.647020][ T4886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.659655][ T4886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 108.672154][ T4886] device bridge_slave_1 entered promiscuous mode
[ 108.737961][ T4886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 108.778476][ T4886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 108.907424][ T4886] team0: Port device team_slave_0 added
[ 108.946155][ T4886] team0: Port device team_slave_1 added
[ 109.011264][ T4886] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 109.018643][ T4886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 109.049983][ T4886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 109.087013][ T4886] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.096971][ T4886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 109.128337][ T4886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.223428][ T4886] device hsr_slave_0 entered promiscuous mode
[ 109.251446][ T4886] device hsr_slave_1 entered promiscuous mode
[ 109.733814][ T4886] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 109.764467][ T4886] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 109.801087][ T4886] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 109.824459][ T4886] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 110.040871][ T4886] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.063389][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 110.087834][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 110.114098][ T4886] 8021q: adding VLAN 0 to HW filter on device team0
[ 110.134976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 110.152152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 110.171376][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.179100][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 110.211063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 110.255362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 110.264352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 110.274514][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.281858][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 110.295216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 110.317708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 110.335804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 110.347833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 110.357638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 110.367476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 110.386565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 110.395180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 110.404962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 110.416149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 110.425844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 110.436968][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 110.564933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 110.573189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 110.587376][ T4886] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 110.611154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 110.621322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 110.645217][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 110.653980][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 110.663647][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 110.672263][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 110.683853][ T4886] device veth0_vlan entered promiscuous mode
[ 110.705984][ T4886] device veth1_vlan entered promiscuous mode
[ 110.729308][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 110.737828][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 110.748115][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 110.759082][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 110.771916][ T4886] device veth0_macvtap entered promiscuous mode
[ 110.783104][ T4886] device veth1_macvtap entered promiscuous mode
[ 110.802532][ T4886] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 110.813889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 110.822601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 110.832004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 110.841794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 110.855769][ T4886] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 110.863734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 110.873548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 110.887159][ T4886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.896687][ T4886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.907107][ T4886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.916630][ T4886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/08/10 13:35:10 executed programs: 0
[ 111.628984][ T4957] chnl_net:caif_netlink_parms(): no params data found
[ 111.647903][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.791357][ T4959] chnl_net:caif_netlink_parms(): no params data found
[ 111.847030][ T4957] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.854849][ T4957] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.863271][ T4957] device bridge_slave_0 entered promiscuous mode
[ 111.875006][ T4957] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.882533][ T4957] bridge0: port 2(bridge_slave_1) entered disabled state
[ 111.891302][ T4957] device bridge_slave_1 entered promiscuous mode
[ 111.962086][ T4956] chnl_net:caif_netlink_parms(): no params data found
[ 112.034893][ T4957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.076475][ T4957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.091396][ T4968] chnl_net:caif_netlink_parms(): no params data found
[ 112.124570][ T4959] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.132142][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.140986][ T4959] device bridge_slave_0 entered promiscuous mode
[ 112.195602][ T4959] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.203675][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.212085][ T4959] device bridge_slave_1 entered promiscuous mode
[ 112.223716][ T4957] team0: Port device team_slave_0 added
[ 112.234275][ T4962] chnl_net:caif_netlink_parms(): no params data found
[ 112.257140][ T4956] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.264889][ T4956] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.273576][ T4956] device bridge_slave_0 entered promiscuous mode
[ 112.282636][ T4957] team0: Port device team_slave_1 added
[ 112.288932][ T4956] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.297690][ T4956] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.306028][ T4956] device bridge_slave_1 entered promiscuous mode
[ 112.399174][ T4959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.414414][ T4959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.443305][ T4968] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.450911][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.458997][ T4968] device bridge_slave_0 entered promiscuous mode
[ 112.468488][ T4957] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.478798][ T4957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.505117][ T4957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 112.519157][ T4956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.545677][ T4968] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.553237][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.562775][ T4968] device bridge_slave_1 entered promiscuous mode
[ 112.570818][ T4957] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 112.577808][ T4957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.604788][ T4957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 112.626983][ T4956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.684528][ T4959] team0: Port device team_slave_0 added
[ 112.701718][ T4962] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.708830][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.717240][ T4962] device bridge_slave_0 entered promiscuous mode
[ 112.742908][ T4968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.757866][ T4959] team0: Port device team_slave_1 added
[ 112.767266][ T4956] team0: Port device team_slave_0 added
[ 112.776987][ T4956] team0: Port device team_slave_1 added
[ 112.795415][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.802904][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.811895][ T4962] device bridge_slave_1 entered promiscuous mode
[ 112.821211][ T4968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.890857][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.897842][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.924469][ T4959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 112.936652][ T4956] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.946271][ T4956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.976020][ T4956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.006528][ T4957] device hsr_slave_0 entered promiscuous mode
[ 113.013527][ T4957] device hsr_slave_1 entered promiscuous mode
[ 113.020317][ T4957] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 113.027903][ T4957] Cannot create hsr debugfs directory
[ 113.035322][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.042706][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.070023][ T4959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.082722][ T4956] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.090216][ T4956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.117348][ T4956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.131863][ T4962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 113.144375][ T4968] team0: Port device team_slave_0 added
[ 113.180729][ T4962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 113.190292][ T4290] Bluetooth: hci1: command 0x0409 tx timeout
[ 113.190499][ T4300] Bluetooth: hci0: command 0x0409 tx timeout
[ 113.206820][ T4968] team0: Port device team_slave_1 added
[ 113.269671][ T21] Bluetooth: hci3: command 0x0409 tx timeout
[ 113.286641][ T4968] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.297199][ T4968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.324634][ T4968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.349901][ T21] Bluetooth: hci2: command 0x0409 tx timeout
[ 113.362033][ T4962] team0: Port device team_slave_0 added
[ 113.377966][ T4968] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.385120][ T4968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.411828][ T4968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.430451][ T7] Bluetooth: hci4: command 0x0409 tx timeout
[ 113.437234][ T4956] device hsr_slave_0 entered promiscuous mode
[ 113.445613][ T4956] device hsr_slave_1 entered promiscuous mode
[ 113.454269][ T4956] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 113.462110][ T4956] Cannot create hsr debugfs directory
[ 113.469191][ T4962] team0: Port device team_slave_1 added
[ 113.479109][ T4959] device hsr_slave_0 entered promiscuous mode
[ 113.486384][ T4959] device hsr_slave_1 entered promiscuous mode
[ 113.493512][ T4959] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 113.501637][ T4959] Cannot create hsr debugfs directory
[ 113.545579][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.596081][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.603593][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.630531][ T4962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.682679][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.689903][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.716812][ T4962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.751269][ T4968] device hsr_slave_0 entered promiscuous mode
[ 113.758328][ T4968] device hsr_slave_1 entered promiscuous mode
[ 113.766419][ T4968] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 113.774787][ T4968] Cannot create hsr debugfs directory
[ 113.876356][ T4962] device hsr_slave_0 entered promiscuous mode
[ 113.892807][ T4962] device hsr_slave_1 entered promiscuous mode
[ 113.900206][ T4962] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 113.907976][ T4962] Cannot create hsr debugfs directory
[ 115.269938][ T7] Bluetooth: hci0: command 0x041b tx timeout
[ 115.276097][ T7] Bluetooth: hci1: command 0x041b tx timeout
[ 115.353273][ T4302] Bluetooth: hci3: command 0x041b tx timeout
[ 115.368400][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.430069][ T4302] Bluetooth: hci2: command 0x041b tx timeout
[ 115.440636][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.509715][ T7] Bluetooth: hci4: command 0x041b tx timeout
[ 115.794003][ T4957] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 115.844659][ T4957] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 115.864347][ T4957] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 115.891288][ T4957] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 116.047690][ T4957] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.062947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 116.080985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 116.093293][ T4957] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.135342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 116.153501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 116.169300][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.176564][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.215427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 116.228470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 116.242765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 116.254407][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.261768][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.270243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 116.290372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 116.302906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 116.314323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 116.324081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 116.334116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 116.345660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 116.358718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 116.367852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 116.387862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 116.396950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 116.410708][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 116.675505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 116.693073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 116.713670][ T4957] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 116.827519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 116.846259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 116.867242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 116.876290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 116.886791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 116.895318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 116.905219][ T4957] device veth0_vlan entered promiscuous mode
[ 117.060171][ T4957] device veth1_vlan entered promiscuous mode
[ 117.072504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 117.081695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 117.120979][ T4957] device veth0_macvtap entered promiscuous mode
[ 117.130611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 117.141800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 117.220755][ T4957] device veth1_macvtap entered promiscuous mode
[ 117.274610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 117.283688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 117.349814][ T5005] Bluetooth: hci1: command 0x040f tx timeout
[ 117.366372][ T5005] Bluetooth: hci0: command 0x040f tx timeout
[ 117.367301][ T4957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 117.385603][ T4957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 117.398760][ T4957] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 117.414605][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 117.429968][ T4291] Bluetooth: hci3: command 0x040f tx timeout
[ 117.436985][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 117.451950][ T4957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 117.470787][ T4957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 117.483462][ T4957] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 117.519171][ T4291] Bluetooth: hci2: command 0x040f tx timeout
[ 117.548984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 117.558532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 117.570680][ T4957] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.580802][ T4957] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.590530][ T4291] Bluetooth: hci4: command 0x040f tx timeout
[ 117.597292][ T4957] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.607124][ T4957] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.026102][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.048701][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.131566][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 118.149377][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.167514][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.224777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2025/08/10 13:35:18 executed programs: 10
[ 118.494011][ T4962] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 118.534280][ T154] device hsr_slave_0 left promiscuous mode
[ 118.541320][ T154] device hsr_slave_1 left promiscuous mode
[ 118.560037][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 118.567785][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 118.578057][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 118.586111][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 118.603605][ T154] device bridge_slave_1 left promiscuous mode
[ 118.615153][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.627050][ T154] device bridge_slave_0 left promiscuous mode
[ 118.634493][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.650115][ T154] device veth1_macvtap left promiscuous mode
[ 118.656493][ T154] device veth0_macvtap left promiscuous mode
[ 118.663382][ T154] device veth1_vlan left promiscuous mode
[ 118.669832][ T154] device veth0_vlan left promiscuous mode
[ 118.998908][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 119.016371][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 119.038038][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 119.057299][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 119.149134][ T154] bond0 (unregistering): Released all slaves
[ 119.244032][ T4962] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 119.266959][ T4962] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 119.323816][ T4962] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 119.346787][ T4959] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 119.398077][ T4959] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 119.429955][ T5005] Bluetooth: hci0: command 0x0419 tx timeout
[ 119.444597][ T5005] Bluetooth: hci1: command 0x0419 tx timeout
[ 119.461763][ T4959] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 119.509049][ T4959] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 119.516949][ T13] Bluetooth: hci3: command 0x0419 tx timeout
[ 119.535065][ T4956] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 119.589683][ T5005] Bluetooth: hci2: command 0x0419 tx timeout
[ 119.593927][ T4956] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 119.615423][ T4956] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 119.626633][ T4956] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 119.679691][ T4215] Bluetooth: hci4: command 0x0419 tx timeout
[ 119.720450][ T4962] 8021q: adding VLAN 0 to HW filter on device bond0
[ 119.750020][ T4968] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 119.771414][ T4968] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 119.794820][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 119.807986][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 119.859911][ T4968] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 119.882494][ T4962] 8021q: adding VLAN 0 to HW filter on device team0
[ 119.915678][ T4968] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 119.952077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 120.002454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 120.066012][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.073191][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 120.168432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 120.190972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 120.212351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 120.243639][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.251180][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 120.282485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 120.367528][ T4959] 8021q: adding VLAN 0 to HW filter on device bond0
[ 120.407344][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 120.431657][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 120.456482][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 120.477863][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 120.540377][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 120.560758][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 120.632617][ T4959] 8021q: adding VLAN 0 to HW filter on device team0
[ 120.653140][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 120.680454][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 120.690176][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 120.710366][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 120.727643][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 120.737807][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 120.765257][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 120.792948][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 120.811798][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 120.828793][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.836287][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 120.850058][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 120.864918][ T4956] 8021q: adding VLAN 0 to HW filter on device bond0
[ 120.913628][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 120.951079][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 120.979225][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.986466][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 120.997895][ T5138] ==================================================================
[ 121.006039][ T5138] BUG: KASAN: use-after-free in __lock_acquire+0xf7/0x7c60
[ 121.013469][ T5138] Read of size 8 at addr ffff888023cb0f20 by task kworker/u4:6/5138
[ 121.021472][ T5138]
[ 121.023834][ T5138] CPU: 0 PID: 5138 Comm: kworker/u4:6 Not tainted 5.15.189-syzkaller #0
[ 121.032378][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 121.042461][ T5138] Workqueue: kkcmd kcm_tx_work
[ 121.047300][ T5138] Call Trace:
[ 121.050599][ T5138]
[ 121.053555][ T5138] dump_stack_lvl+0x168/0x230
[ 121.058262][ T5138] ? show_regs_print_info+0x20/0x20
[ 121.063494][ T5138] ? load_image+0x3b0/0x3b0
[ 121.068033][ T5138] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 121.073439][ T5138] print_address_description+0x60/0x2d0
[ 121.079030][ T5138] ? __lock_acquire+0xf7/0x7c60
[ 121.083914][ T5138] kasan_report+0xdf/0x130
[ 121.088360][ T5138] ? __lock_acquire+0xf7/0x7c60
[ 121.093246][ T5138] __lock_acquire+0xf7/0x7c60
[ 121.097957][ T5138] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 121.104172][ T5138] ? lock_chain_count+0x20/0x20
[ 121.109142][ T5138] ? finish_lock_switch+0x12f/0x280
[ 121.114366][ T5138] ? lockdep_hardirqs_on+0x94/0x140
[ 121.119857][ T5138] ? finish_lock_switch+0x12f/0x280
[ 121.125091][ T5138] ? verify_lock_unused+0x140/0x140
[ 121.130441][ T5138] ? finish_task_switch+0x12f/0x640
[ 121.135689][ T5138] ? __switch_to_asm+0x34/0x60
[ 121.140502][ T5138] ? __schedule+0x11c0/0x43b0
[ 121.145208][ T5138] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 121.151318][ T5138] lock_acquire+0x197/0x3f0
[ 121.155852][ T5138] ? __lock_sock+0x152/0x2a0
[ 121.160465][ T5138] ? lockdep_hardirqs_on_prepare+0x760/0x760
[ 121.166616][ T5138] ? __local_bh_disable_ip+0xfb/0x190
[ 121.172021][ T5138] ? read_lock_is_recursive+0x10/0x10
[ 121.177517][ T5138] ? __local_bh_enable_ip+0x12a/0x1b0
[ 121.182998][ T5138] ? kthread_data+0x4b/0xc0
[ 121.187891][ T5138] ? kthread_data+0x4b/0xc0
[ 121.192522][ T5138] ? __lock_sock+0x152/0x2a0
[ 121.197676][ T5138] _raw_spin_lock_bh+0x32/0x50
[ 121.203040][ T5138] ? __lock_sock+0x152/0x2a0
[ 121.207754][ T5138] __lock_sock+0x152/0x2a0
[ 121.212732][ T5138] ? sk_page_frag_refill+0x200/0x200
[ 121.218759][ T5138] ? do_raw_spin_lock+0x11d/0x280
[ 121.224094][ T5138] ? init_wait_entry+0xd0/0xd0
[ 121.229035][ T5138] ? __rwlock_init+0x140/0x140
[ 121.233930][ T5138] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 121.240078][ T5138] ? lock_sock_nested+0x68/0x100
[ 121.245251][ T5138] lock_sock_nested+0x9d/0x100
[ 121.246570][ T4968] 8021q: adding VLAN 0 to HW filter on device bond0
[ 121.250066][ T5138] kcm_tx_work+0x2d/0x180
[ 121.250095][ T5138] process_one_work+0x863/0x1000
[ 121.250127][ T5138] ? worker_detach_from_pool+0x240/0x240
[ 121.250149][ T5138] ? lockdep_hardirqs_off+0x70/0x100
[ 121.250176][ T5138] ? _raw_spin_lock_irq+0xab/0xe0
[ 121.250202][ T5138] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 121.250236][ T5138] ? wq_worker_running+0x97/0x170
[ 121.250258][ T5138] worker_thread+0xaa8/0x12a0
[ 121.250281][ T5138] ? _raw_spin_unlock_irqrestore+0x82/0x100
[ 121.250306][ T5138] ? lockdep_hardirqs_on+0x94/0x140
[ 121.250332][ T5138] ? lockdep_hardirqs_on+0x94/0x140
[ 121.250354][ T5138] ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 121.250385][ T5138] kthread+0x436/0x520
[ 121.250405][ T5138] ? rcu_lock_release+0x20/0x20
[ 121.250435][ T5138] ? kthread_blkcg+0xd0/0xd0
[ 121.250456][ T5138] ret_from_fork+0x1f/0x30
[ 121.250486][ T5138]
[ 121.250494][ T5138]
[ 121.250500][ T5138] Allocated by task 5166:
[ 121.321585][ T4968] 8021q: adding VLAN 0 to HW filter on device team0
[ 121.324211][ T5138] __kasan_slab_alloc+0x9c/0xd0
[ 121.359493][ T5138] slab_post_alloc_hook+0x4c/0x380
[ 121.364644][ T5138] kmem_cache_alloc+0x100/0x290
[ 121.369824][ T5138] sk_prot_alloc+0x57/0x210
[ 121.374456][ T5138] sk_alloc+0x2f/0x310
[ 121.378565][ T5138] kcm_ioctl+0x211/0xff0
[ 121.382858][ T5138] sock_do_ioctl+0xd3/0x2f0
[ 121.387583][ T5138] sock_ioctl+0x4ed/0x6e0
[ 121.391951][ T5138] __se_sys_ioctl+0xfa/0x170
[ 121.396675][ T5138] do_syscall_64+0x4c/0xa0
[ 121.401119][ T5138] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 121.407426][ T5138]
[ 121.409966][ T5138] Freed by task 5167:
[ 121.413967][ T5138] kasan_set_track+0x4b/0x70
[ 121.418706][ T5138] kasan_set_free_info+0x1f/0x40
[ 121.423769][ T5138] ____kasan_slab_free+0xd5/0x110
[ 121.428919][ T5138] slab_free_freelist_hook+0xea/0x170
[ 121.434343][ T5138] kmem_cache_free+0x8f/0x210
[ 121.436916][ T4968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 121.439051][ T5138] __sk_destruct+0x54b/0x820
[ 121.439081][ T5138] kcm_release+0x51a/0x5b0
[ 121.459112][ T5138] sock_close+0xd5/0x240
[ 121.463594][ T5138] __fput+0x234/0x930
[ 121.467611][ T5138] task_work_run+0x125/0x1a0
[ 121.472235][ T5138] exit_to_user_mode_loop+0x10f/0x130
[ 121.474270][ T4968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 121.477728][ T5138] exit_to_user_mode_prepare+0xb1/0x140
[ 121.477755][ T5138] syscall_exit_to_user_mode+0x16/0x40
[ 121.499985][ T5138] do_syscall_64+0x58/0xa0
[ 121.504422][ T5138] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 121.510417][ T5138]
[ 121.513017][ T5138] Last potentially related work creation:
[ 121.518820][ T5138] kasan_save_stack+0x35/0x60
[ 121.523510][ T5138] kasan_record_aux_stack+0xb8/0x100
[ 121.528808][ T5138] insert_work+0x54/0x3d0
[ 121.533345][ T5138] __queue_work+0x9c5/0xd50
[ 121.537937][ T5138] queue_work_on+0x11d/0x1d0
[ 121.542539][ T5138] kcm_unattach+0x85e/0xe80
[ 121.547299][ T5138] kcm_ioctl+0x78d/0xff0
[ 121.551651][ T5138] sock_do_ioctl+0xd3/0x2f0
[ 121.556252][ T5138] sock_ioctl+0x4ed/0x6e0
[ 121.560592][ T5138] __se_sys_ioctl+0xfa/0x170
[ 121.565389][ T5138] do_syscall_64+0x4c/0xa0
[ 121.569833][ T5138] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 121.575738][ T5138]
[ 121.578076][ T5138] Second to last potentially related work creation:
[ 121.584759][ T5138] kasan_save_stack+0x35/0x60
[ 121.589627][ T5138] kasan_record_aux_stack+0xb8/0x100
[ 121.594931][ T5138] insert_work+0x54/0x3d0
[ 121.599265][ T5138] __queue_work+0x9c5/0xd50
[ 121.603944][ T5138] queue_work_on+0x11d/0x1d0
[ 121.608633][ T5138] kcm_ioctl+0xe4b/0xff0
[ 121.612885][ T5138] sock_do_ioctl+0xd3/0x2f0
[ 121.617408][ T5138] sock_ioctl+0x4ed/0x6e0
[ 121.621754][ T5138] __se_sys_ioctl+0xfa/0x170
[ 121.626374][ T5138] do_syscall_64+0x4c/0xa0
[ 121.631013][ T5138] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 121.637009][ T5138]
[ 121.639420][ T5138] The buggy address belongs to the object at ffff888023cb0e80
[ 121.639420][ T5138] which belongs to the cache KCM of size 1728
[ 121.653215][ T5138] The buggy address is located 160 bytes inside of
[ 121.653215][ T5138] 1728-byte region [ffff888023cb0e80, ffff888023cb1540)
[ 121.666584][ T5138] The buggy address belongs to the page:
[ 121.672573][ T5138] page:ffffea00008f2c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23cb0
[ 121.682831][ T5138] head:ffffea00008f2c00 order:3 compound_mapcount:0 compound_pincount:0
[ 121.691254][ T5138] memcg:ffff88805d5cc001
[ 121.695502][ T5138] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 121.703770][ T5138] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88814c63eb40
[ 121.712796][ T5138] raw: 0000000000000000 0000000080110011 00000001ffffffff ffff88805d5cc001
[ 121.721390][ T5138] page dumped because: kasan: bad access detected
[ 121.727901][ T5138] page_owner tracks the page as allocated
[ 121.733713][ T5138] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5103, ts 119177934637, free_ts 119048224503
[ 121.754578][ T5138] get_page_from_freelist+0x1b77/0x1c60
[ 121.760334][ T5138] __alloc_pages+0x1e1/0x470
[ 121.764939][ T5138] new_slab+0xc0/0x4b0
[ 121.769014][ T5138] ___slab_alloc+0x81e/0xdf0
[ 121.774093][ T5138] kmem_cache_alloc+0x195/0x290
[ 121.778967][ T5138] sk_prot_alloc+0x57/0x210
[ 121.783588][ T5138] sk_alloc+0x2f/0x310
[ 121.787661][ T5138] kcm_create+0xfc/0x570
[ 121.791904][ T5138] __sock_create+0x47b/0x900
[ 121.796589][ T5138] __sys_socket+0xe2/0x170
[ 121.801006][ T5138] __x64_sys_socket+0x76/0x80
[ 121.805691][ T5138] do_syscall_64+0x4c/0xa0
[ 121.810115][ T5138] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 121.816035][ T5138] page last free stack trace:
[ 121.820802][ T5138] free_unref_page_prepare+0x637/0x6c0
[ 121.826530][ T5138] free_unref_page+0x94/0x280
[ 121.831573][ T5138] __unfreeze_partials+0x1a5/0x200
[ 121.836689][ T5138] put_cpu_partial+0x12d/0x190
[ 121.841546][ T5138] qlist_free_all+0x35/0x90
[ 121.846054][ T5138] kasan_quarantine_reduce+0x150/0x160
[ 121.851521][ T5138] __kasan_slab_alloc+0x2f/0xd0
[ 121.856479][ T5138] slab_post_alloc_hook+0x4c/0x380
[ 121.861856][ T5138] __kmalloc+0x127/0x330
[ 121.866103][ T5138] ethnl_default_notify+0xbe/0x5e0
[ 121.871407][ T5138] ethnl_netdev_event+0x54/0x70
[ 121.876260][ T5138] raw_notifier_call_chain+0xcb/0x160
[ 121.881633][ T5138] netdev_change_features+0x8a/0xc0
[ 121.886925][ T5138] bond_compute_features+0x6ae/0x7a0
[ 121.892233][ T5138] __bond_release_one+0xb3d/0x1320
[ 121.897398][ T5138] bond_netdev_event+0x65b/0xea0
[ 121.902516][ T5138]
[ 121.904841][ T5138] Memory state around the buggy address:
[ 121.910471][ T5138] ffff888023cb0e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 121.918896][ T5138] ffff888023cb0e80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 121.927744][ T5138] >ffff888023cb0f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 121.935980][ T5138] ^
[ 121.941102][ T5138] ffff888023cb0f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 121.949463][ T5138] ffff888023cb1000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 121.957627][ T5138] ==================================================================
[ 121.966595][ T5138] Disabling lock debugging due to kernel taint
[ 121.972910][ T5138] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 121.980113][ T5138] CPU: 0 PID: 5138 Comm: kworker/u4:6 Tainted: G B 5.15.189-syzkaller #0
[ 121.990522][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 122.000689][ T5138] Workqueue: kkcmd kcm_tx_work
[ 122.005486][ T5138] Call Trace:
[ 122.008936][ T5138]
[ 122.011895][ T5138] dump_stack_lvl+0x168/0x230
[ 122.016686][ T5138] ? show_regs_print_info+0x20/0x20
[ 122.021989][ T5138] ? load_image+0x3b0/0x3b0
[ 122.026602][ T5138] panic+0x2c9/0x7f0
[ 122.030723][ T5138] ? bpf_jit_dump+0xd0/0xd0
[ 122.035285][ T5138] ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 122.041276][ T5138] ? _raw_spin_unlock+0x40/0x40
[ 122.046148][ T5138] ? __lock_acquire+0xf7/0x7c60
[ 122.051008][ T5138] check_panic_on_warn+0x80/0xa0
[ 122.055965][ T5138] ? __lock_acquire+0xf7/0x7c60
[ 122.060819][ T5138] end_report+0x6d/0xf0
[ 122.064997][ T5138] kasan_report+0x102/0x130
[ 122.069523][ T5138] ? __lock_acquire+0xf7/0x7c60
[ 122.074385][ T5138] __lock_acquire+0xf7/0x7c60
[ 122.079137][ T5138] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 122.085142][ T5138] ? lock_chain_count+0x20/0x20
[ 122.090030][ T5138] ? finish_lock_switch+0x12f/0x280
[ 122.095365][ T5138] ? lockdep_hardirqs_on+0x94/0x140
[ 122.100736][ T5138] ? finish_lock_switch+0x12f/0x280
[ 122.106130][ T5138] ? verify_lock_unused+0x140/0x140
[ 122.111431][ T5138] ? finish_task_switch+0x12f/0x640
[ 122.116737][ T5138] ? __switch_to_asm+0x34/0x60
[ 122.121629][ T5138] ? __schedule+0x11c0/0x43b0
[ 122.126341][ T5138] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 122.132818][ T5138] lock_acquire+0x197/0x3f0
[ 122.137424][ T5138] ? __lock_sock+0x152/0x2a0
[ 122.142052][ T5138] ? lockdep_hardirqs_on_prepare+0x760/0x760
[ 122.148498][ T5138] ? __local_bh_disable_ip+0xfb/0x190
[ 122.153986][ T5138] ? read_lock_is_recursive+0x10/0x10
[ 122.159488][ T5138] ? __local_bh_enable_ip+0x12a/0x1b0
[ 122.164870][ T5138] ? kthread_data+0x4b/0xc0
[ 122.169475][ T5138] ? kthread_data+0x4b/0xc0
[ 122.174019][ T5138] ? __lock_sock+0x152/0x2a0
[ 122.178626][ T5138] _raw_spin_lock_bh+0x32/0x50
[ 122.183408][ T5138] ? __lock_sock+0x152/0x2a0
[ 122.188227][ T5138] __lock_sock+0x152/0x2a0
[ 122.192831][ T5138] ? sk_page_frag_refill+0x200/0x200
[ 122.198197][ T5138] ? do_raw_spin_lock+0x11d/0x280
[ 122.203238][ T5138] ? init_wait_entry+0xd0/0xd0
[ 122.208299][ T5138] ? __rwlock_init+0x140/0x140
[ 122.213182][ T5138] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 122.219300][ T5138] ? lock_sock_nested+0x68/0x100
[ 122.224667][ T5138] lock_sock_nested+0x9d/0x100
[ 122.229557][ T5138] kcm_tx_work+0x2d/0x180
[ 122.234096][ T5138] process_one_work+0x863/0x1000
[ 122.239343][ T5138] ? worker_detach_from_pool+0x240/0x240
[ 122.245247][ T5138] ? lockdep_hardirqs_off+0x70/0x100
[ 122.250538][ T5138] ? _raw_spin_lock_irq+0xab/0xe0
[ 122.255593][ T5138] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 122.260993][ T5138] ? wq_worker_running+0x97/0x170
[ 122.266120][ T5138] worker_thread+0xaa8/0x12a0
[ 122.270894][ T5138] ? _raw_spin_unlock_irqrestore+0x82/0x100
[ 122.276816][ T5138] ? lockdep_hardirqs_on+0x94/0x140
[ 122.282047][ T5138] ? lockdep_hardirqs_on+0x94/0x140
[ 122.287255][ T5138] ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 122.293166][ T5138] kthread+0x436/0x520
[ 122.297344][ T5138] ? rcu_lock_release+0x20/0x20
[ 122.302220][ T5138] ? kthread_blkcg+0xd0/0xd0
[ 122.306816][ T5138] ret_from_fork+0x1f/0x30
[ 122.311241][ T5138]
[ 122.314586][ T5138] Kernel Offset: disabled
[ 122.319035][ T5138] Rebooting in 86400 seconds..