[ 86.052534][ T1277] device hsr_slave_0 left promiscuous mode
[ 86.059561][ T1277] device hsr_slave_1 left promiscuous mode
[ 86.068303][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 86.077243][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 86.087802][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 86.097243][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 86.106453][ T1277] device bridge_slave_1 left promiscuous mode
[ 86.113249][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.124422][ T1277] device bridge_slave_0 left promiscuous mode
[ 86.131877][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.161332][ T1277] device veth1_macvtap left promiscuous mode
[ 86.167412][ T1277] device veth0_macvtap left promiscuous mode
[ 86.175915][ T1277] device veth1_vlan left promiscuous mode
[ 86.182616][ T1277] device veth0_vlan left promiscuous mode
[ 86.308691][ T1277] team0 (unregistering): Port device team_slave_1 removed
[ 86.321776][ T1277] team0 (unregistering): Port device team_slave_0 removed
[ 86.336168][ T1277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 86.350099][ T1277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 86.397904][ T1277] bond0 (unregistering): Released all slaves
[ 87.092750][ T13] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts.
2026/09/22 09:52:41 parsed 1 programs
[ 95.375452][ T4514] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 97.509643][ T4558] chnl_net:caif_netlink_parms(): no params data found
[ 97.568165][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.577423][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.586088][ T4558] device bridge_slave_0 entered promiscuous mode
[ 97.596976][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.604695][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.614102][ T4558] device bridge_slave_1 entered promiscuous mode
[ 97.641930][ T4558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.654731][ T4558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.688465][ T4558] team0: Port device team_slave_0 added
[ 97.696923][ T4558] team0: Port device team_slave_1 added
[ 97.720585][ T4558] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.727739][ T4558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.755918][ T4558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.769094][ T4558] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.777564][ T4558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.804758][ T4558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.842058][ T4558] device hsr_slave_0 entered promiscuous mode
[ 97.849014][ T4558] device hsr_slave_1 entered promiscuous mode
[ 98.347047][ T4558] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.359724][ T4558] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.371061][ T4558] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.382957][ T4558] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.410245][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.417552][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.425054][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.432829][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.486823][ T4558] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.512576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 98.528863][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.547339][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.575706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 98.589589][ T4558] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.600207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 98.616580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 98.625538][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.633011][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.650808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 98.660048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 98.670075][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.677440][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.686016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 98.696957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 98.707412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 98.717322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 98.736421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 98.751055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 98.763186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 98.773154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 98.784231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 98.796536][ T4558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 98.809595][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 98.819507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 98.830315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 98.961872][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 98.969427][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 98.984627][ T4558] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.017622][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 99.028667][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 99.061309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 99.070264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 99.082906][ T4558] device veth0_vlan entered promiscuous mode
[ 99.091706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 99.100694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 99.112192][ T4558] device veth1_vlan entered promiscuous mode
[ 99.142770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 99.152102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 99.162540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 99.171798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 99.185910][ T4558] device veth0_macvtap entered promiscuous mode
[ 99.205865][ T4558] device veth1_macvtap entered promiscuous mode
[ 99.225288][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.234348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 99.244452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 99.254566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 99.265964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 99.285975][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.301480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 99.312438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 99.336668][ T4558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.346499][ T4558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.357443][ T4558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.367713][ T4558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.225960][ T3075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.444046][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.454060][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.462823][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 101.487097][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.500989][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.509402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/09/22 09:52:51 executed programs: 0
[ 102.213739][ T4754] chnl_net:caif_netlink_parms(): no params data found
[ 102.266108][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.273340][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.282319][ T4754] device bridge_slave_0 entered promiscuous mode
[ 102.291010][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.298328][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.306686][ T4754] device bridge_slave_1 entered promiscuous mode
[ 102.336172][ T4754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.347928][ T4754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.380645][ T4754] team0: Port device team_slave_0 added
[ 102.388606][ T4754] team0: Port device team_slave_1 added
[ 102.416850][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.424281][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.450980][ T4754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.465105][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.472704][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.499281][ T4754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.536709][ T4754] device hsr_slave_0 entered promiscuous mode
[ 102.544241][ T4754] device hsr_slave_1 entered promiscuous mode
[ 102.553714][ T4754] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 102.562029][ T4754] Cannot create hsr debugfs directory
[ 103.816009][ T3075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.865395][ T3075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.906578][ T3075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.130478][ T4351] Bluetooth: hci0: command 0x0409 tx timeout
[ 104.683696][ T4754] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.693527][ T4754] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.703892][ T4754] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.729818][ T4754] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.781958][ T4754] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.795923][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 104.804705][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 104.826897][ T4754] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.837315][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 104.847593][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 104.857657][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.865564][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.874009][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 104.885684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 104.896824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 104.905681][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.913025][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.941155][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 104.951065][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 104.963785][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 104.974948][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 104.985985][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 104.997243][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 105.006266][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 105.033573][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 105.042610][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 105.053732][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 105.064784][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 105.075930][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 105.175819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 105.184179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 105.196787][ T4754] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.213175][ T3075] device hsr_slave_0 left promiscuous mode
[ 105.219822][ T3075] device hsr_slave_1 left promiscuous mode
[ 105.226858][ T3075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 105.235348][ T3075] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 105.243815][ T3075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 105.252547][ T3075] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 105.263139][ T3075] device bridge_slave_1 left promiscuous mode
[ 105.270175][ T3075] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.278961][ T3075] device bridge_slave_0 left promiscuous mode
[ 105.285404][ T3075] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.297293][ T3075] device veth1_macvtap left promiscuous mode
[ 105.303483][ T3075] device veth0_macvtap left promiscuous mode
[ 105.309526][ T3075] device veth1_vlan left promiscuous mode
[ 105.315536][ T3075] device veth0_vlan left promiscuous mode
[ 105.437121][ T3075] team0 (unregistering): Port device team_slave_1 removed
[ 105.448796][ T3075] team0 (unregistering): Port device team_slave_0 removed
[ 105.459997][ T3075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 105.472794][ T3075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 105.519755][ T3075] bond0 (unregistering): Released all slaves
[ 105.575053][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 105.585039][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 105.603521][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 105.612589][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 105.621699][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 105.629518][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 105.639628][ T4754] device veth0_vlan entered promiscuous mode
[ 105.656828][ T4754] device veth1_vlan entered promiscuous mode
[ 105.682524][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 105.692426][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 105.702772][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 105.711998][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 105.722338][ T4754] device veth0_macvtap entered promiscuous mode
[ 105.731006][ T4754] device veth1_macvtap entered promiscuous mode
[ 105.751245][ T4754] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.758750][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 105.768827][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 105.777821][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 105.788540][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 105.799955][ T4754] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.811168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 105.819760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 105.830011][ T4754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.839432][ T4754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.848501][ T4754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.858467][ T4754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.921227][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.929789][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.939318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 105.961004][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.969223][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.977820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 106.210545][ T4351] Bluetooth: hci0: command 0x041b tx timeout
2026/09/22 09:52:56 executed programs: 4
[ 108.280961][ T4338] Bluetooth: hci0: command 0x040f tx timeout
[ 110.360594][ T4338] Bluetooth: hci0: command 0x0419 tx timeout
2026/09/22 09:53:02 executed programs: 10
[ 116.272808][ T154] ==================================================================
[ 116.281055][ T154] BUG: KASAN: use-after-free in __lock_acquire+0x107/0x7b50
[ 116.288425][ T154] Read of size 8 at addr ffff888076ef6220 by task kworker/u4:2/154
[ 116.296483][ T154]
[ 116.298820][ T154] CPU: 0 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0
[ 116.306798][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 116.317489][ T154] Workqueue: kkcmd kcm_tx_work
[ 116.322426][ T154] Call Trace:
[ 116.326258][ T154]
[ 116.329207][ T154] dump_stack_lvl+0x188/0x250
[ 116.334044][ T154] ? show_regs_print_info+0x20/0x20
[ 116.339380][ T154] ? load_image+0x410/0x410
[ 116.343906][ T154] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 116.349458][ T154] print_address_description+0x60/0x2d0
[ 116.354995][ T154] ? __lock_acquire+0x107/0x7b50
[ 116.360115][ T154] kasan_report+0xdf/0x130
[ 116.364548][ T154] ? __lock_acquire+0x107/0x7b50
[ 116.369503][ T154] __lock_acquire+0x107/0x7b50
[ 116.374256][ T154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 116.380228][ T154] ? __lock_acquire+0x7b50/0x7b50
[ 116.385241][ T154] ? lock_chain_count+0x20/0x20
[ 116.390166][ T154] ? finish_lock_switch+0x12d/0x290
[ 116.395353][ T154] ? finish_lock_switch+0x12d/0x290
[ 116.401177][ T154] ? verify_lock_unused+0x140/0x140
[ 116.406476][ T154] ? finish_task_switch+0x12f/0x650
[ 116.411675][ T154] ? __schedule+0x11cb/0x4350
[ 116.416360][ T154] lock_acquire+0x19e/0x400
[ 116.420912][ T154] ? __lock_sock+0x166/0x2b0
[ 116.425833][ T154] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0
[ 116.431886][ T154] ? __local_bh_disable_ip+0x111/0x1a0
[ 116.437334][ T154] ? read_lock_is_recursive+0x10/0x10
[ 116.442704][ T154] ? __local_bh_enable_ip+0x136/0x1c0
[ 116.448193][ T154] ? kthread_data+0x4b/0xc0
[ 116.452778][ T154] ? kthread_data+0x4b/0xc0
[ 116.457308][ T154] ? __lock_sock+0x166/0x2b0
[ 116.462017][ T154] _raw_spin_lock_bh+0x32/0x50
[ 116.466774][ T154] ? __lock_sock+0x166/0x2b0
[ 116.471357][ T154] __lock_sock+0x166/0x2b0
[ 116.475944][ T154] ? sk_page_frag_refill+0x200/0x200
[ 116.481233][ T154] ? do_raw_spin_lock+0x128/0x2f0
[ 116.486272][ T154] ? init_wait_entry+0xd0/0xd0
[ 116.491034][ T154] ? __rwlock_init+0x140/0x140
[ 116.495870][ T154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 116.501872][ T154] ? __lock_acquire+0x7b50/0x7b50
[ 116.507019][ T154] ? lock_sock_nested+0x68/0x100
[ 116.511981][ T154] lock_sock_nested+0x9d/0x100
[ 116.516838][ T154] kcm_tx_work+0x2d/0x180
[ 116.521168][ T154] process_one_work+0x867/0xff0
[ 116.526268][ T154] ? worker_detach_from_pool+0x240/0x240
[ 116.531892][ T154] ? lockdep_hardirqs_off+0x70/0x100
[ 116.537179][ T154] ? _raw_spin_lock_irq+0xb7/0xf0
[ 116.542252][ T154] ? _raw_spin_lock_irqsave+0x100/0x100
[ 116.547801][ T154] ? wq_worker_running+0x97/0x170
[ 116.552937][ T154] worker_thread+0xad7/0x12a0
[ 116.557626][ T154] kthread+0x42e/0x520
[ 116.561758][ T154] ? rcu_lock_release+0x20/0x20
[ 116.566669][ T154] ? kthread_blkcg+0xd0/0xd0
[ 116.571604][ T154] ret_from_fork+0x1f/0x30
[ 116.576200][ T154]
[ 116.579322][ T154]
[ 116.581633][ T154] Allocated by task 4955:
[ 116.585999][ T154] __kasan_slab_alloc+0x92/0xc0
[ 116.591215][ T154] slab_post_alloc_hook+0x4c/0x380
[ 116.596402][ T154] kmem_cache_alloc+0x15d/0x280
[ 116.601358][ T154] sk_prot_alloc+0x57/0x210
[ 116.605844][ T154] sk_alloc+0x2f/0x310
[ 116.610047][ T154] kcm_ioctl+0x20f/0xfd0
[ 116.614743][ T154] sock_do_ioctl+0xfb/0x320
[ 116.619239][ T154] sock_ioctl+0x48a/0x700
[ 116.623734][ T154] __se_sys_ioctl+0xfa/0x170
[ 116.628426][ T154] do_syscall_64+0x4c/0xa0
[ 116.632981][ T154] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 116.639211][ T154]
[ 116.641539][ T154] Freed by task 4956:
[ 116.645506][ T154] kasan_set_track+0x4b/0x70
[ 116.650105][ T154] kasan_set_free_info+0x1f/0x40
[ 116.655119][ T154] ____kasan_slab_free+0xd5/0x110
[ 116.660437][ T154] slab_free_freelist_hook+0xec/0x170
[ 116.665820][ T154] kmem_cache_free+0x8f/0x210
[ 116.670493][ T154] __sk_destruct+0x571/0x840
[ 116.675088][ T154] kcm_release+0x504/0x590
[ 116.679553][ T154] sock_close+0xbf/0x210
[ 116.683818][ T154] __fput+0x212/0x8c0
[ 116.687785][ T154] task_work_run+0x125/0x1a0
[ 116.692495][ T154] exit_to_user_mode_loop+0x10f/0x130
[ 116.697975][ T154] exit_to_user_mode_prepare+0xee/0x180
[ 116.703516][ T154] syscall_exit_to_user_mode+0x16/0x40
[ 116.709080][ T154] do_syscall_64+0x58/0xa0
[ 116.713712][ T154] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 116.719614][ T154]
[ 116.722104][ T154] Last potentially related work creation:
[ 116.727898][ T154] kasan_save_stack+0x35/0x60
[ 116.732770][ T154] kasan_record_aux_stack+0xb8/0x100
[ 116.738325][ T154] insert_work+0x54/0x3d0
[ 116.742649][ T154] __queue_work+0x90b/0xc80
[ 116.747231][ T154] queue_work_on+0x124/0x1f0
[ 116.751892][ T154] kcm_unattach+0x89a/0xef0
[ 116.756383][ T154] kcm_ioctl+0x749/0xfd0
[ 116.760881][ T154] sock_do_ioctl+0xfb/0x320
[ 116.765374][ T154] sock_ioctl+0x48a/0x700
[ 116.769704][ T154] __se_sys_ioctl+0xfa/0x170
[ 116.774380][ T154] do_syscall_64+0x4c/0xa0
[ 116.778787][ T154] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 116.784687][ T154]
[ 116.787010][ T154] Second to last potentially related work creation:
[ 116.793714][ T154] kasan_save_stack+0x35/0x60
[ 116.798385][ T154] kasan_record_aux_stack+0xb8/0x100
[ 116.803912][ T154] insert_work+0x54/0x3d0
[ 116.808232][ T154] __queue_work+0x90b/0xc80
[ 116.812734][ T154] queue_work_on+0x124/0x1f0
[ 116.817407][ T154] kcm_ioctl+0xe32/0xfd0
[ 116.821657][ T154] sock_do_ioctl+0xfb/0x320
[ 116.826150][ T154] sock_ioctl+0x48a/0x700
[ 116.830463][ T154] __se_sys_ioctl+0xfa/0x170
[ 116.835144][ T154] do_syscall_64+0x4c/0xa0
[ 116.839553][ T154] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 116.845563][ T154]
[ 116.848054][ T154] The buggy address belongs to the object at ffff888076ef6180
[ 116.848054][ T154] which belongs to the cache KCM of size 1736
[ 116.861895][ T154] The buggy address is located 160 bytes inside of
[ 116.861895][ T154] 1736-byte region [ffff888076ef6180, ffff888076ef6848)
[ 116.876359][ T154] The buggy address belongs to the page:
[ 116.882186][ T154] page:ffffea0001dbbc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76ef0
[ 116.892600][ T154] head:ffffea0001dbbc00 order:3 compound_mapcount:0 compound_pincount:0
[ 116.900922][ T154] memcg:ffff88801a1c1a01
[ 116.906456][ T154] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 116.914539][ T154] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88802bbd5140
[ 116.923760][ T154] raw: 0000000000000000 0000000080110011 00000001ffffffff ffff88801a1c1a01
[ 116.932537][ T154] page dumped because: kasan: bad access detected
[ 116.939126][ T154] page_owner tracks the page as allocated
[ 116.944840][ T154] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4905, ts 106027419413, free_ts 106021209265
[ 116.965786][ T154] get_page_from_freelist+0x24f6/0x2670
[ 116.971416][ T154] __alloc_pages+0x1ee/0x480
[ 116.976082][ T154] new_slab+0xc0/0x4b0
[ 116.980142][ T154] ___slab_alloc+0x807/0xdd0
[ 116.984999][ T154] kmem_cache_alloc+0xf0/0x280
[ 116.989760][ T154] sk_prot_alloc+0x57/0x210
[ 116.994256][ T154] sk_alloc+0x2f/0x310
[ 116.998576][ T154] kcm_create+0xfa/0x540
[ 117.002874][ T154] __sock_create+0x473/0x910
[ 117.007626][ T154] __sys_socket+0xe2/0x170
[ 117.012301][ T154] __x64_sys_socket+0x76/0x80
[ 117.017346][ T154] do_syscall_64+0x4c/0xa0
[ 117.021839][ T154] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 117.027958][ T154] page last free stack trace:
[ 117.032711][ T154] free_unref_page_prepare+0x637/0x6c0
[ 117.038421][ T154] free_unref_page+0x8f/0x2a0
[ 117.043457][ T154] __unfreeze_partials+0x188/0x1e0
[ 117.048566][ T154] put_cpu_partial+0x12d/0x190
[ 117.053515][ T154] qlist_free_all+0x35/0x90
[ 117.058020][ T154] kasan_quarantine_reduce+0x150/0x160
[ 117.063475][ T154] __kasan_slab_alloc+0x2f/0xc0
[ 117.068355][ T154] slab_post_alloc_hook+0x4c/0x380
[ 117.073536][ T154] __kmalloc+0x189/0x340
[ 117.077870][ T154] tomoyo_realpath_from_path+0xed/0x5e0
[ 117.083400][ T154] tomoyo_check_open_permission+0x1eb/0x410
[ 117.089366][ T154] security_file_open+0x5e/0xa0
[ 117.094201][ T154] do_dentry_open+0x321/0xf90
[ 117.098947][ T154] path_openat+0x2718/0x2fb0
[ 117.103531][ T154] do_filp_open+0x1df/0x400
[ 117.108035][ T154] do_sys_openat2+0x14b/0x500
[ 117.112709][ T154]
[ 117.115026][ T154] Memory state around the buggy address:
[ 117.120819][ T154] ffff888076ef6100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 117.128862][ T154] ffff888076ef6180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.136992][ T154] >ffff888076ef6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.145033][ T154] ^
[ 117.150130][ T154] ffff888076ef6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.158868][ T154] ffff888076ef6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.167259][ T154] ==================================================================
[ 117.175493][ T154] Disabling lock debugging due to kernel taint
[ 117.182001][ T154] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 117.189970][ T154] CPU: 0 PID: 154 Comm: kworker/u4:2 Tainted: G B syzkaller #0
[ 117.199316][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 117.209487][ T154] Workqueue: kkcmd kcm_tx_work
[ 117.214277][ T154] Call Trace:
[ 117.217633][ T154]
[ 117.220640][ T154] dump_stack_lvl+0x188/0x250
[ 117.225341][ T154] ? show_regs_print_info+0x20/0x20
[ 117.230619][ T154] ? load_image+0x410/0x410
[ 117.235138][ T154] panic+0x2f8/0x850
[ 117.239119][ T154] ? bpf_jit_dump+0xd0/0xd0
[ 117.243728][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 117.249613][ T154] ? _raw_spin_unlock+0x40/0x40
[ 117.254546][ T154] ? __lock_acquire+0x107/0x7b50
[ 117.259563][ T154] check_panic_on_warn+0x80/0xa0
[ 117.264525][ T154] ? __lock_acquire+0x107/0x7b50
[ 117.269827][ T154] end_report+0x6d/0xf0
[ 117.273986][ T154] kasan_report+0x102/0x130
[ 117.278506][ T154] ? __lock_acquire+0x107/0x7b50
[ 117.283538][ T154] __lock_acquire+0x107/0x7b50
[ 117.288641][ T154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 117.295130][ T154] ? __lock_acquire+0x7b50/0x7b50
[ 117.300225][ T154] ? lock_chain_count+0x20/0x20
[ 117.305243][ T154] ? finish_lock_switch+0x12d/0x290
[ 117.310521][ T154] ? finish_lock_switch+0x12d/0x290
[ 117.315789][ T154] ? verify_lock_unused+0x140/0x140
[ 117.321265][ T154] ? finish_task_switch+0x12f/0x650
[ 117.326554][ T154] ? __schedule+0x11cb/0x4350
[ 117.331218][ T154] lock_acquire+0x19e/0x400
[ 117.335720][ T154] ? __lock_sock+0x166/0x2b0
[ 117.340341][ T154] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0
[ 117.346396][ T154] ? __local_bh_disable_ip+0x111/0x1a0
[ 117.351953][ T154] ? read_lock_is_recursive+0x10/0x10
[ 117.357430][ T154] ? __local_bh_enable_ip+0x136/0x1c0
[ 117.362968][ T154] ? kthread_data+0x4b/0xc0
[ 117.367493][ T154] ? kthread_data+0x4b/0xc0
[ 117.371986][ T154] ? __lock_sock+0x166/0x2b0
[ 117.376596][ T154] _raw_spin_lock_bh+0x32/0x50
[ 117.381446][ T154] ? __lock_sock+0x166/0x2b0
[ 117.386170][ T154] __lock_sock+0x166/0x2b0
[ 117.390600][ T154] ? sk_page_frag_refill+0x200/0x200
[ 117.395865][ T154] ? do_raw_spin_lock+0x128/0x2f0
[ 117.400873][ T154] ? init_wait_entry+0xd0/0xd0
[ 117.405654][ T154] ? __rwlock_init+0x140/0x140
[ 117.410507][ T154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 117.416485][ T154] ? __lock_acquire+0x7b50/0x7b50
[ 117.421682][ T154] ? lock_sock_nested+0x68/0x100
[ 117.426713][ T154] lock_sock_nested+0x9d/0x100
[ 117.431555][ T154] kcm_tx_work+0x2d/0x180
[ 117.435870][ T154] process_one_work+0x867/0xff0
[ 117.440930][ T154] ? worker_detach_from_pool+0x240/0x240
[ 117.446691][ T154] ? lockdep_hardirqs_off+0x70/0x100
[ 117.451976][ T154] ? _raw_spin_lock_irq+0xb7/0xf0
[ 117.456989][ T154] ? _raw_spin_lock_irqsave+0x100/0x100
[ 117.462605][ T154] ? wq_worker_running+0x97/0x170
[ 117.467717][ T154] worker_thread+0xad7/0x12a0
[ 117.472412][ T154] kthread+0x42e/0x520
[ 117.476474][ T154] ? rcu_lock_release+0x20/0x20
[ 117.481357][ T154] ? kthread_blkcg+0xd0/0xd0
[ 117.485957][ T154] ret_from_fork+0x1f/0x30
[ 117.490377][ T154]
[ 117.494861][ T154] Kernel Offset: disabled
[ 117.499816][ T154] Rebooting in 86400 seconds..