[ 143.285620][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.288610][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:64085' (ED25519) to the list of known hosts. 2026/03/05 07:42:28 parsed 1 programs [ 153.914369][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 159.172572][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.182818][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.192109][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.199243][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.203380][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.234055][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.238198][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.704421][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.711097][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.947430][ T5637] chnl_net:caif_netlink_parms(): no params data found [ 168.880516][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.912347][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.915872][ T5637] bridge_slave_0: entered allmulticast mode [ 168.932312][ T5637] bridge_slave_0: entered promiscuous mode [ 168.937640][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.941297][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.953073][ T5637] bridge_slave_1: entered allmulticast mode [ 168.972552][ T5637] bridge_slave_1: entered promiscuous mode [ 169.470847][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.764080][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.369728][ T5637] team0: Port device team_slave_0 added [ 170.400063][ T5637] team0: Port device team_slave_1 added [ 171.153815][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.157293][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.215566][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.283866][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.302124][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.344121][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.899999][ T5637] hsr_slave_0: entered promiscuous mode [ 173.903521][ T5637] hsr_slave_1: entered promiscuous mode [ 175.392659][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.414419][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.444155][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.733150][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.315181][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.603526][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.628337][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.632387][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.648906][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.652583][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.614164][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.728497][ T5637] veth0_vlan: entered promiscuous mode [ 177.763564][ T5637] veth1_vlan: entered promiscuous mode [ 177.820832][ T5637] veth0_macvtap: entered promiscuous mode [ 177.840799][ T5637] veth1_macvtap: entered promiscuous mode [ 177.910977][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.943061][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.180354][ T149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.185754][ T149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.190247][ T149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.220547][ T149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/03/05 07:43:08 executed programs: 0 [ 189.872943][ T4663] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.887003][ T4663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.893967][ T4663] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.899295][ T4663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.903787][ T4663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.939153][ T5637] syz-executor (5637) used greatest stack depth: 16392 bytes left [ 190.004889][ T45] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.014609][ T45] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.020769][ T45] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.029989][ T45] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.034212][ T45] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.133502][ T45] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.157473][ T45] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.174912][ T45] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.200796][ T45] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.204964][ T45] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.363317][ T4663] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.402309][ T4663] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.412080][ T4663] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.452748][ T4663] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.472425][ T4663] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.565232][ T45] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.576186][ T5714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.593365][ T5334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.597822][ T5334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.623205][ T5334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.626648][ T5334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.632647][ T5334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.636650][ T5334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.658876][ T5714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.708313][ T5731] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.663054][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.997138][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.022887][ T45] Bluetooth: hci0: command tx timeout [ 192.085291][ T45] Bluetooth: hci1: command tx timeout [ 192.245736][ T45] Bluetooth: hci2: command tx timeout [ 192.360562][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.564828][ T45] Bluetooth: hci3: command tx timeout [ 192.624657][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.722103][ T45] Bluetooth: hci4: command tx timeout [ 192.882048][ T45] Bluetooth: hci5: command tx timeout [ 192.931758][ T5726] chnl_net:caif_netlink_parms(): no params data found [ 193.490101][ T13] bridge_slave_1: left allmulticast mode [ 193.495721][ T13] bridge_slave_1: left promiscuous mode [ 193.511982][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.532895][ T13] bridge_slave_0: left allmulticast mode [ 193.535645][ T13] bridge_slave_0: left promiscuous mode [ 193.538380][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.085713][ T45] Bluetooth: hci0: command tx timeout [ 194.163288][ T45] Bluetooth: hci1: command tx timeout [ 194.267545][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.299650][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.308213][ T13] bond0 (unregistering): Released all slaves [ 194.323281][ T45] Bluetooth: hci2: command tx timeout [ 194.581131][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.602306][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.605315][ T5726] bridge_slave_0: entered allmulticast mode [ 194.615830][ T5726] bridge_slave_0: entered promiscuous mode [ 194.628531][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.631533][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.641430][ T5726] bridge_slave_1: entered allmulticast mode [ 194.645751][ T45] Bluetooth: hci3: command tx timeout [ 194.657216][ T5726] bridge_slave_1: entered promiscuous mode [ 194.803575][ T45] Bluetooth: hci4: command tx timeout [ 194.890101][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.962159][ T45] Bluetooth: hci5: command tx timeout [ 194.990029][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.036967][ T13] hsr_slave_0: left promiscuous mode [ 195.047676][ T13] hsr_slave_1: left promiscuous mode [ 195.050763][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.065100][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.075023][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.078709][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.109047][ T13] veth1_macvtap: left promiscuous mode [ 195.111485][ T13] veth0_macvtap: left promiscuous mode [ 195.133216][ T13] veth1_vlan: left promiscuous mode [ 195.145351][ T13] veth0_vlan: left promiscuous mode [ 195.618149][ T13] team0 (unregistering): Port device team_slave_1 removed [ 195.629093][ T13] team0 (unregistering): Port device team_slave_0 removed [ 195.990628][ T5726] team0: Port device team_slave_0 added [ 195.994242][ T5707] chnl_net:caif_netlink_parms(): no params data found [ 196.009641][ T5711] chnl_net:caif_netlink_parms(): no params data found [ 196.059714][ T5708] chnl_net:caif_netlink_parms(): no params data found [ 196.075345][ T5722] chnl_net:caif_netlink_parms(): no params data found [ 196.090585][ T5726] team0: Port device team_slave_1 added [ 196.168498][ T45] Bluetooth: hci0: command tx timeout [ 196.242486][ T45] Bluetooth: hci1: command tx timeout [ 196.397436][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.400829][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.422168][ T45] Bluetooth: hci2: command tx timeout [ 196.442204][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.462283][ T5725] chnl_net:caif_netlink_parms(): no params data found [ 196.502625][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.506153][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.543080][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.722343][ T45] Bluetooth: hci3: command tx timeout [ 196.821023][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.835110][ T5711] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.838657][ T5711] bridge_slave_0: entered allmulticast mode [ 196.845406][ T5711] bridge_slave_0: entered promiscuous mode [ 196.882539][ T45] Bluetooth: hci4: command tx timeout [ 196.914214][ T5708] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.918931][ T5708] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.925259][ T5708] bridge_slave_0: entered allmulticast mode [ 196.929953][ T5708] bridge_slave_0: entered promiscuous mode [ 196.943352][ T5711] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.946613][ T5711] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.950074][ T5711] bridge_slave_1: entered allmulticast mode [ 196.959113][ T5711] bridge_slave_1: entered promiscuous mode [ 196.984779][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.988537][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.994257][ T5722] bridge_slave_0: entered allmulticast mode [ 196.999160][ T5722] bridge_slave_0: entered promiscuous mode [ 197.010116][ T5726] hsr_slave_0: entered promiscuous mode [ 197.014575][ T5726] hsr_slave_1: entered promiscuous mode [ 197.027521][ T5708] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.030776][ T5708] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.036268][ T5708] bridge_slave_1: entered allmulticast mode [ 197.041308][ T5708] bridge_slave_1: entered promiscuous mode [ 197.044412][ T45] Bluetooth: hci5: command tx timeout [ 197.058593][ T5707] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.061752][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.066912][ T5707] bridge_slave_0: entered allmulticast mode [ 197.071797][ T5707] bridge_slave_0: entered promiscuous mode [ 197.079498][ T5707] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.083810][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.087313][ T5707] bridge_slave_1: entered allmulticast mode [ 197.091416][ T5707] bridge_slave_1: entered promiscuous mode [ 197.097793][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.101711][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.106090][ T5722] bridge_slave_1: entered allmulticast mode [ 197.110052][ T5722] bridge_slave_1: entered promiscuous mode [ 197.297454][ T5711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.308527][ T5711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.324303][ T5707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.343159][ T5707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.383975][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.387290][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.390569][ T5725] bridge_slave_0: entered allmulticast mode [ 197.413585][ T5725] bridge_slave_0: entered promiscuous mode [ 197.433446][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.437264][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.441754][ T5725] bridge_slave_1: entered allmulticast mode [ 197.463462][ T5725] bridge_slave_1: entered promiscuous mode [ 197.471021][ T5708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.484652][ T5708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.588865][ T5722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.598917][ T5722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.626192][ T5711] team0: Port device team_slave_0 added [ 197.697845][ T5708] team0: Port device team_slave_0 added [ 197.701723][ T5711] team0: Port device team_slave_1 added [ 197.723940][ T5707] team0: Port device team_slave_0 added [ 197.772712][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.780212][ T5708] team0: Port device team_slave_1 added [ 197.809130][ T5707] team0: Port device team_slave_1 added [ 197.813472][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.816968][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.847388][ T5711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.857721][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.861028][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.877421][ T5711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.895076][ T5722] team0: Port device team_slave_0 added [ 197.900263][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.993231][ T5722] team0: Port device team_slave_1 added [ 198.018058][ T5708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.023687][ T5708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.037318][ T5708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.125399][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.129398][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.146993][ T5707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.154845][ T5708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.158167][ T5708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.175279][ T5708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.216258][ T5725] team0: Port device team_slave_0 added [ 198.220586][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.224852][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.242328][ T45] Bluetooth: hci0: command tx timeout [ 198.271040][ T5707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.299436][ T5711] hsr_slave_0: entered promiscuous mode [ 198.303488][ T5711] hsr_slave_1: entered promiscuous mode [ 198.307318][ T5711] debugfs: 'hsr0' already exists in 'hsr' [ 198.310181][ T5711] Cannot create hsr debugfs directory [ 198.322366][ T45] Bluetooth: hci1: command tx timeout [ 198.325944][ T5725] team0: Port device team_slave_1 added [ 198.329094][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.333683][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.352324][ T5722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.465595][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.469540][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.484795][ T45] Bluetooth: hci2: command tx timeout [ 198.490115][ T5722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.627404][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.630807][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.643658][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.728577][ T5707] hsr_slave_0: entered promiscuous mode [ 198.737037][ T5707] hsr_slave_1: entered promiscuous mode [ 198.740410][ T5707] debugfs: 'hsr0' already exists in 'hsr' [ 198.743544][ T5707] Cannot create hsr debugfs directory [ 198.746893][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.751146][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.766722][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.802674][ T45] Bluetooth: hci3: command tx timeout [ 198.810764][ T5708] hsr_slave_0: entered promiscuous mode [ 198.817543][ T5708] hsr_slave_1: entered promiscuous mode [ 198.832631][ T5708] debugfs: 'hsr0' already exists in 'hsr' [ 198.835899][ T5708] Cannot create hsr debugfs directory [ 198.962987][ T45] Bluetooth: hci4: command tx timeout [ 198.972133][ T5722] hsr_slave_0: entered promiscuous mode [ 198.976374][ T5722] hsr_slave_1: entered promiscuous mode [ 198.990724][ T5722] debugfs: 'hsr0' already exists in 'hsr' [ 198.997487][ T5722] Cannot create hsr debugfs directory [ 199.124301][ T45] Bluetooth: hci5: command tx timeout [ 199.339669][ T5725] hsr_slave_0: entered promiscuous mode [ 199.349717][ T5725] hsr_slave_1: entered promiscuous mode [ 199.363874][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 199.366873][ T5725] Cannot create hsr debugfs directory [ 200.063497][ T5726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.163290][ T5726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.269146][ T5726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.348988][ T5726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.671047][ T5707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.697219][ T5707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.717345][ T5707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.835464][ T5707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.059177][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.184272][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.268699][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.272383][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.360536][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.364185][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.539414][ T5726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.562831][ T5726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.571282][ T5707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.585923][ T5708] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.631372][ T5708] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.663879][ T5708] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.706745][ T5708] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.854262][ T5707] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.908639][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.912853][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.007367][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.010706][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.047363][ T5722] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.192559][ T5722] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.209547][ T5722] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.312148][ T5722] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.429472][ T5707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.458479][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.627218][ T5711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.755163][ T5711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.827263][ T5711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.885786][ T5708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.968432][ T5711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.125505][ T5708] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.150502][ T5725] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.235682][ T5726] veth0_vlan: entered promiscuous mode [ 203.263768][ T5725] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.271619][ T5725] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.308745][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.312312][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.325114][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.328861][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.370078][ T5726] veth1_vlan: entered promiscuous mode [ 203.377815][ T5725] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 203.530982][ T5722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.557800][ T5707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.753572][ T5726] veth0_macvtap: entered promiscuous mode [ 203.807907][ T5726] veth1_macvtap: entered promiscuous mode [ 203.831473][ T5722] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.994549][ T5711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.998709][ T5707] veth0_vlan: entered promiscuous mode [ 204.008801][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.011822][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.054847][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.057918][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.121090][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.161387][ T5711] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.185766][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.227357][ T5707] veth1_vlan: entered promiscuous mode [ 204.267804][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.309129][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.328988][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.332413][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.359231][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.363222][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.524213][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.528136][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.543628][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.546885][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.551841][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.608067][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.622847][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.627860][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.738452][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.747173][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.754941][ T5708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.811224][ T5725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.856478][ T5725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.005134][ T5707] veth0_macvtap: entered promiscuous mode [ 205.295406][ T5707] veth1_macvtap: entered promiscuous mode [ 205.337270][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.341585][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.473739][ T5707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.480467][ T5707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.653226][ T5708] veth0_vlan: entered promiscuous mode [ 205.670327][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.709704][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.727253][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.731237][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.767949][ T5711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.797603][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.812463][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.824072][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.959630][ T5708] veth1_vlan: entered promiscuous mode [ 206.068882][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 2026/03/05 07:43:25 executed programs: 12 [ 206.357079][ T5711] veth0_vlan: entered promiscuous mode [ 206.413368][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.417272][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.452708][ T5708] veth0_macvtap: entered promiscuous mode [ 206.500671][ T5711] veth1_vlan: entered promiscuous mode [ 206.523529][ T5708] veth1_macvtap: entered promiscuous mode [ 206.685258][ T5708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.780452][ T5711] veth0_macvtap: entered promiscuous mode [ 206.844010][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.847842][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.953455][ T5708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.004234][ T5711] veth1_macvtap: entered promiscuous mode [ 207.099409][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.144326][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.148893][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.240653][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.269283][ T5722] veth0_vlan: entered promiscuous mode [ 207.315428][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.398703][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.458017][ T5722] veth1_vlan: entered promiscuous mode [ 207.579911][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.599079][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.731815][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.752674][ T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.960964][ T5725] veth0_vlan: entered promiscuous mode [ 208.060011][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.090479][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.104672][ T5722] veth0_macvtap: entered promiscuous mode [ 208.140646][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.167859][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.210487][ T5725] veth1_vlan: entered promiscuous mode [ 208.285214][ T5722] veth1_macvtap: entered promiscuous mode [ 208.399702][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.430011][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.555508][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.579052][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.583593][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.759708][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.797518][ T5725] veth0_macvtap: entered promiscuous mode [ 208.860076][ T5725] veth1_macvtap: entered promiscuous mode [ 208.926815][ T2997] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.956058][ T2997] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.960311][ T2997] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.030915][ T2997] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.140821][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.215923][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.435289][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.540707][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.563599][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.617962][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.697594][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.700940][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.014128][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.043198][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.203910][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.250606][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.693989][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.715272][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/03/05 07:43:30 executed programs: 85 [ 212.751323][ T6260] ================================================================== [ 212.755099][ T6260] BUG: KASAN: slab-use-after-free in nr_rt_ioctl+0x610/0xf90 [ 212.758978][ T6260] Read of size 2 at addr ffff888047f0beb2 by task syz.1.131/6260 [ 212.764132][ T6260] [ 212.765271][ T6260] CPU: 0 UID: 0 PID: 6260 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT(full) [ 212.765291][ T6260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.765300][ T6260] Call Trace: [ 212.765351][ T6260] [ 212.765360][ T6260] dump_stack_lvl+0xe8/0x150 [ 212.765412][ T6260] print_report+0xba/0x230 [ 212.765428][ T6260] ? nr_rt_ioctl+0x610/0xf90 [ 212.765439][ T6260] kasan_report+0x117/0x150 [ 212.765454][ T6260] ? nr_rt_ioctl+0x610/0xf90 [ 212.765464][ T6260] nr_rt_ioctl+0x610/0xf90 [ 212.765475][ T6260] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 212.765487][ T6260] ? apparmor_capable+0x126/0x170 [ 212.765567][ T6260] ? capable+0x88/0xe0 [ 212.765582][ T6260] ? nr_ioctl+0x1b1/0x3b0 [ 212.765597][ T6260] sock_do_ioctl+0x101/0x320 [ 212.765609][ T6260] ? __pfx_sock_do_ioctl+0x10/0x10 [ 212.765621][ T6260] ? do_futex+0x395/0x420 [ 212.765639][ T6260] sock_ioctl+0x5c6/0x7f0 [ 212.765651][ T6260] ? __pfx_sock_ioctl+0x10/0x10 [ 212.765660][ T6260] ? __fget_files+0x2a/0x420 [ 212.765674][ T6260] ? __fget_files+0x3a0/0x420 [ 212.765685][ T6260] ? __fget_files+0x2a/0x420 [ 212.765698][ T6260] ? bpf_lsm_file_ioctl+0x9/0x20 [ 212.765711][ T6260] ? __pfx_sock_ioctl+0x10/0x10 [ 212.765720][ T6260] __se_sys_ioctl+0xfc/0x170 [ 212.765732][ T6260] do_syscall_64+0x14d/0xf80 [ 212.765766][ T6260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.765777][ T6260] ? clear_bhb_loop+0x40/0x90 [ 212.765789][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.765801][ T6260] RIP: 0033:0x7f0c08d9a379 [ 212.765815][ T6260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.765824][ T6260] RSP: 002b:00007f0c083fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.765839][ T6260] RAX: ffffffffffffffda RBX: 00007f0c08fd5fa0 RCX: 00007f0c08d9a379 [ 212.765846][ T6260] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 212.765853][ T6260] RBP: 00007f0c08e2dd68 R08: 0000000000000000 R09: 0000000000000000 [ 212.765859][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.765865][ T6260] R13: 00007f0c08fd6038 R14: 00007f0c08fd5fa0 R15: 00007ffebfc080a8 [ 212.765875][ T6260] [ 212.765879][ T6260] [ 212.876454][ T6260] Allocated by task 6260: [ 212.878552][ T6260] kasan_save_track+0x3e/0x80 [ 212.880682][ T6260] __kasan_kmalloc+0x93/0xb0 [ 212.882768][ T6260] __kmalloc_cache_noprof+0x31c/0x660 [ 212.885167][ T6260] nr_add_node+0x25b/0x2630 [ 212.887580][ T6260] nr_rt_ioctl+0xe59/0xf90 [ 212.890207][ T6260] sock_do_ioctl+0x101/0x320 [ 212.892669][ T6260] sock_ioctl+0x5c6/0x7f0 [ 212.894743][ T6260] __se_sys_ioctl+0xfc/0x170 [ 212.896854][ T6260] do_syscall_64+0x14d/0xf80 [ 212.898919][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.901864][ T6260] [ 212.903218][ T6260] Freed by task 6260: [ 212.905529][ T6260] kasan_save_track+0x3e/0x80 [ 212.908176][ T6260] kasan_save_free_info+0x46/0x50 [ 212.910800][ T6260] __kasan_slab_free+0x5c/0x80 [ 212.912897][ T6260] kfree+0x1c1/0x630 [ 212.914715][ T6260] nr_rt_ioctl+0x363/0xf90 [ 212.916978][ T6260] sock_do_ioctl+0x101/0x320 [ 212.919149][ T6260] sock_ioctl+0x5c6/0x7f0 [ 212.921180][ T6260] __se_sys_ioctl+0xfc/0x170 [ 212.923272][ T6260] do_syscall_64+0x14d/0xf80 [ 212.925379][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.928039][ T6260] [ 212.929163][ T6260] The buggy address belongs to the object at ffff888047f0be80 [ 212.929163][ T6260] which belongs to the cache kmalloc-64 of size 64 [ 212.935182][ T6260] The buggy address is located 50 bytes inside of [ 212.935182][ T6260] freed 64-byte region [ffff888047f0be80, ffff888047f0bec0) [ 212.942537][ T6260] [ 212.943893][ T6260] The buggy address belongs to the physical page: [ 212.946849][ T6260] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47f0b [ 212.950701][ T6260] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 212.953893][ T6260] page_type: f5(slab) [ 212.955790][ T6260] raw: 04fff00000000000 ffff88801ac418c0 dead000000000100 dead000000000122 [ 212.960333][ T6260] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 212.964865][ T6260] page dumped because: kasan: bad access detected [ 212.967770][ T6260] page_owner tracks the page as allocated [ 212.970326][ T6260] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5707, tgid 5707 (syz-executor), ts 206997561236, free_ts 206993585322 [ 212.980250][ T6260] post_alloc_hook+0x231/0x280 [ 212.982653][ T6260] get_page_from_freelist+0x24dc/0x2580 [ 212.984941][ T6260] __alloc_frozen_pages_noprof+0x18d/0x380 [ 212.987408][ T6260] allocate_slab+0x77/0x660 [ 212.989344][ T6260] refill_objects+0x331/0x3c0 [ 212.991344][ T6260] __pcs_replace_empty_main+0x2b9/0x620 [ 212.994385][ T6260] __kmalloc_noprof+0x474/0x760 [ 212.997440][ T6260] tomoyo_encode+0x28b/0x550 [ 213.000768][ T6260] tomoyo_realpath_from_path+0x58d/0x5d0 [ 213.003495][ T6260] tomoyo_mount_permission+0x3e8/0x9d0 [ 213.005765][ T6260] security_sb_mount+0xe4/0x320 [ 213.007855][ T6260] path_mount+0xbc/0x10e0 [ 213.009639][ T6260] __se_sys_mount+0x31d/0x420 [ 213.011766][ T6260] do_syscall_64+0x14d/0xf80 [ 213.013855][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.016662][ T6260] page last free pid 53 tgid 53 stack trace: [ 213.019129][ T6260] __free_frozen_pages+0xc2b/0xdb0 [ 213.021537][ T6260] vfree+0x25a/0x400 [ 213.024149][ T6260] delayed_vfree_work+0x55/0x80 [ 213.027703][ T6260] process_scheduled_works+0xb02/0x1830 [ 213.029988][ T6260] worker_thread+0xa50/0xfc0 [ 213.032094][ T6260] kthread+0x388/0x470 [ 213.033981][ T6260] ret_from_fork+0x51e/0xb90 [ 213.036046][ T6260] ret_from_fork_asm+0x1a/0x30 [ 213.038294][ T6260] [ 213.039324][ T6260] Memory state around the buggy address: [ 213.042074][ T6260] ffff888047f0bd80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 213.046965][ T6260] ffff888047f0be00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 213.051143][ T6260] >ffff888047f0be80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 213.054633][ T6260] ^ [ 213.057146][ T6260] ffff888047f0bf00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 213.060633][ T6260] ffff888047f0bf80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 213.064132][ T6260] ================================================================== [ 213.069432][ T6260] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 213.073211][ T6260] CPU: 0 UID: 0 PID: 6260 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT(full) [ 213.077823][ T6260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.082764][ T6260] Call Trace: [ 213.084354][ T6260] [ 213.086092][ T6260] vpanic+0x56c/0xa60 [ 213.088156][ T6260] ? __pfx_vpanic+0x10/0x10 [ 213.090249][ T6260] panic+0xc5/0xd0 [ 213.091925][ T6260] ? __pfx_panic+0x10/0x10 [ 213.093917][ T6260] ? nr_rt_ioctl+0x610/0xf90 [ 213.096207][ T6260] ? nr_rt_ioctl+0x610/0xf90 [ 213.098426][ T6260] check_panic_on_warn+0x89/0xb0 [ 213.101292][ T6260] ? nr_rt_ioctl+0x610/0xf90 [ 213.103594][ T6260] end_report+0x73/0x180 [ 213.105853][ T6260] ? nr_rt_ioctl+0x610/0xf90 [ 213.108368][ T6260] kasan_report+0x128/0x150 [ 213.111033][ T6260] ? nr_rt_ioctl+0x610/0xf90 [ 213.114380][ T6260] nr_rt_ioctl+0x610/0xf90 [ 213.117604][ T6260] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 213.120302][ T6260] ? apparmor_capable+0x126/0x170 [ 213.123127][ T6260] ? capable+0x88/0xe0 [ 213.125211][ T6260] ? nr_ioctl+0x1b1/0x3b0 [ 213.127304][ T6260] sock_do_ioctl+0x101/0x320 [ 213.129871][ T6260] ? __pfx_sock_do_ioctl+0x10/0x10 [ 213.132648][ T6260] ? do_futex+0x395/0x420 [ 213.134783][ T6260] sock_ioctl+0x5c6/0x7f0 [ 213.136944][ T6260] ? __pfx_sock_ioctl+0x10/0x10 [ 213.139045][ T6260] ? __fget_files+0x2a/0x420 [ 213.141145][ T6260] ? __fget_files+0x3a0/0x420 [ 213.143301][ T6260] ? __fget_files+0x2a/0x420 [ 213.145421][ T6260] ? bpf_lsm_file_ioctl+0x9/0x20 [ 213.147687][ T6260] ? __pfx_sock_ioctl+0x10/0x10 [ 213.149968][ T6260] __se_sys_ioctl+0xfc/0x170 [ 213.152040][ T6260] do_syscall_64+0x14d/0xf80 [ 213.154128][ T6260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.157073][ T6260] ? clear_bhb_loop+0x40/0x90 [ 213.159059][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.161754][ T6260] RIP: 0033:0x7f0c08d9a379 [ 213.163805][ T6260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.173683][ T6260] RSP: 002b:00007f0c083fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.177447][ T6260] RAX: ffffffffffffffda RBX: 00007f0c08fd5fa0 RCX: 00007f0c08d9a379 [ 213.181034][ T6260] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 213.185507][ T6260] RBP: 00007f0c08e2dd68 R08: 0000000000000000 R09: 0000000000000000 [ 213.190312][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.193451][ T6260] R13: 00007f0c08fd6038 R14: 00007f0c08fd5fa0 R15: 00007ffebfc080a8 [ 213.196972][ T6260] [ 213.199893][ T6260] Kernel Offset: disabled [ 213.201831][ T6260] Rebooting in 86400 seconds..