Warning: Permanently added '[localhost]:30181' (ED25519) to the list of known hosts. 2026/07/01 18:47:05 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 178.327464][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 191.593008][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.596572][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.599956][ T5626] bridge_slave_0: entered allmulticast mode [ 191.624336][ T5626] bridge_slave_0: entered promiscuous mode [ 191.635584][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.643082][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.663509][ T5626] bridge_slave_1: entered allmulticast mode [ 191.684387][ T5626] bridge_slave_1: entered promiscuous mode [ 191.958806][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.728440][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.859343][ T5626] team0: Port device team_slave_0 added [ 192.878712][ T5626] team0: Port device team_slave_1 added [ 194.329779][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.349958][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.487428][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.502327][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.532234][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.868129][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.882269][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.913655][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.469558][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.473259][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.003695][ T5626] hsr_slave_0: entered promiscuous mode [ 197.013082][ T5626] hsr_slave_1: entered promiscuous mode [ 206.538810][ T5626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.859400][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.876994][ T5626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.958479][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.359716][ T5626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.392699][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 208.416679][ T5626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.359276][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.849680][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.852947][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.032564][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.492298][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.515959][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.519586][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.872549][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.876446][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.643777][ T4650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.660010][ T4650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.666244][ T4650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.673209][ T4650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.678667][ T4650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.722886][ T4650] Bluetooth: hci0: command tx timeout [ 219.899995][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.802491][ T4650] Bluetooth: hci0: command tx timeout [ 220.978892][ T5626] veth0_vlan: entered promiscuous mode [ 221.015613][ T5626] veth1_vlan: entered promiscuous mode [ 221.126455][ T5626] veth0_macvtap: entered promiscuous mode [ 221.157336][ T5626] veth1_macvtap: entered promiscuous mode [ 221.228254][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.269214][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.320134][ T88] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.341202][ T88] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.355571][ T88] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.380806][ T88] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.885669][ T4650] Bluetooth: hci0: command tx timeout [ 224.964333][ T4650] Bluetooth: hci0: command tx timeout [ 226.333617][ T5369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.358429][ T5369] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.365582][ T5369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.377257][ T5369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.386036][ T5369] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 2026/07/01 18:47:59 executed programs: 0 [ 226.635466][ T4650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.643058][ T4650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.657571][ T4650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.667752][ T4650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.679077][ T4650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.762982][ T5369] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.781872][ T5369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.789037][ T5369] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.811180][ T5369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.821255][ T5369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.945236][ T5369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.957078][ T5369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.981505][ T5369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.005837][ T5369] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.013135][ T5369] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.113772][ T5369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.141524][ T5369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.163355][ T5369] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.169142][ T5369] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.174214][ T5369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.184645][ T5626] syz-executor (5626) used greatest stack depth: 16384 bytes left [ 227.340027][ T4650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.358230][ T4650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.368981][ T4650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.377045][ T4650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.383349][ T4650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.099774][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.485947][ T4650] Bluetooth: hci1: command tx timeout [ 228.563517][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.803455][ T4650] Bluetooth: hci0: command tx timeout [ 228.888916][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.962102][ T4650] Bluetooth: hci2: command tx timeout [ 229.122228][ T4650] Bluetooth: hci3: command tx timeout [ 229.228643][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.282395][ T4650] Bluetooth: hci4: command tx timeout [ 229.443753][ T4650] Bluetooth: hci5: command tx timeout [ 230.185779][ T13] bridge_slave_1: left allmulticast mode [ 230.188346][ T13] bridge_slave_1: left promiscuous mode [ 230.192930][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.199733][ T13] bridge_slave_0: left allmulticast mode [ 230.203343][ T13] bridge_slave_0: left promiscuous mode [ 230.208060][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.392281][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.398890][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.415182][ T13] bond0 (unregistering): Released all slaves [ 230.562395][ T4650] Bluetooth: hci1: command tx timeout [ 230.883892][ T4650] Bluetooth: hci0: command tx timeout [ 231.042192][ T4650] Bluetooth: hci2: command tx timeout [ 231.202339][ T4650] Bluetooth: hci3: command tx timeout [ 231.233534][ T13] hsr_slave_0: left promiscuous mode [ 231.252945][ T13] hsr_slave_1: left promiscuous mode [ 231.261267][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.279967][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.293993][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.308153][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.367766][ T4650] Bluetooth: hci4: command tx timeout [ 231.400319][ T13] veth1_macvtap: left promiscuous mode [ 231.407930][ T13] veth0_macvtap: left promiscuous mode [ 231.413615][ T13] veth1_vlan: left promiscuous mode [ 231.422265][ T13] veth0_vlan: left promiscuous mode [ 231.527283][ T4650] Bluetooth: hci5: command tx timeout [ 231.656681][ T13] team0 (unregistering): Port device team_slave_1 removed [ 231.671906][ T13] team0 (unregistering): Port device team_slave_0 removed [ 231.870096][ T4996] 8021q: adding VLAN 0 to HW filter on device eth6 [ 232.228633][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.232269][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.235892][ T5812] bridge_slave_0: entered allmulticast mode [ 232.239890][ T5812] bridge_slave_0: entered promiscuous mode [ 232.345839][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.349516][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.354049][ T5812] bridge_slave_1: entered allmulticast mode [ 232.358484][ T5812] bridge_slave_1: entered promiscuous mode [ 232.642456][ T4650] Bluetooth: hci1: command tx timeout [ 232.758601][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.916317][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.962569][ T4650] Bluetooth: hci0: command tx timeout [ 233.122572][ T4650] Bluetooth: hci2: command tx timeout [ 233.249794][ T5812] team0: Port device team_slave_0 added [ 233.282321][ T4650] Bluetooth: hci3: command tx timeout [ 233.293811][ T4996] 8021q: adding VLAN 0 to HW filter on device eth7 [ 233.312754][ T5812] team0: Port device team_slave_1 added [ 233.442182][ T4650] Bluetooth: hci4: command tx timeout [ 233.524310][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.527648][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.540910][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.572625][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.576329][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.579771][ T5836] bridge_slave_0: entered allmulticast mode [ 233.585430][ T5836] bridge_slave_0: entered promiscuous mode [ 233.602306][ T4650] Bluetooth: hci5: command tx timeout [ 233.611755][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.615965][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.629536][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.669229][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.673989][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.677832][ T5836] bridge_slave_1: entered allmulticast mode [ 233.681750][ T5836] bridge_slave_1: entered promiscuous mode [ 233.700042][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.704500][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.708762][ T5820] bridge_slave_0: entered allmulticast mode [ 233.713401][ T5820] bridge_slave_0: entered promiscuous mode [ 233.779695][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.785035][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.788922][ T5820] bridge_slave_1: entered allmulticast mode [ 233.793529][ T5820] bridge_slave_1: entered promiscuous mode [ 233.804646][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.808947][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.812823][ T5831] bridge_slave_0: entered allmulticast mode [ 233.816891][ T5831] bridge_slave_0: entered promiscuous mode [ 233.821555][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.826700][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.830363][ T5818] bridge_slave_0: entered allmulticast mode [ 233.835149][ T5818] bridge_slave_0: entered promiscuous mode [ 233.856998][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.886215][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.889965][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.894579][ T5831] bridge_slave_1: entered allmulticast mode [ 233.898562][ T5831] bridge_slave_1: entered promiscuous mode [ 233.904044][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.907516][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.910850][ T5818] bridge_slave_1: entered allmulticast mode [ 233.916670][ T5818] bridge_slave_1: entered promiscuous mode [ 233.922443][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.929793][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.933542][ T5827] bridge_slave_0: entered allmulticast mode [ 233.944373][ T5827] bridge_slave_0: entered promiscuous mode [ 233.954035][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.000819][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.008389][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.022442][ T5827] bridge_slave_1: entered allmulticast mode [ 234.027233][ T5827] bridge_slave_1: entered promiscuous mode [ 234.061203][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.089401][ T5812] hsr_slave_0: entered promiscuous mode [ 234.100293][ T5812] hsr_slave_1: entered promiscuous mode [ 234.240111][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.278796][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.295940][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.318004][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.334685][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.396865][ T5836] team0: Port device team_slave_0 added [ 234.481316][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.489916][ T5836] team0: Port device team_slave_1 added [ 234.514980][ T4996] 8021q: adding VLAN 0 to HW filter on device eth8 [ 234.534594][ T5818] team0: Port device team_slave_0 added [ 234.539934][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.557673][ T5820] team0: Port device team_slave_0 added [ 234.574766][ T5831] team0: Port device team_slave_0 added [ 234.580672][ T5818] team0: Port device team_slave_1 added [ 234.609410][ T5820] team0: Port device team_slave_1 added [ 234.640777][ T5831] team0: Port device team_slave_1 added [ 234.670379][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.674152][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.686967][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.722611][ T4650] Bluetooth: hci1: command tx timeout [ 234.743785][ T5827] team0: Port device team_slave_0 added [ 234.749279][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.753171][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.765941][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.772354][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.775742][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.789193][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.815790][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.819425][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.832278][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.839737][ T5827] team0: Port device team_slave_1 added [ 234.865839][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.869132][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.881269][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.898726][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.903290][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.915064][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.922755][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.926147][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.938396][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.988705][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.993080][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.006067][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.020489][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.025230][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.037614][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.043232][ T4650] Bluetooth: hci0: command tx timeout [ 235.099710][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.103871][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.117260][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.188869][ T5836] hsr_slave_0: entered promiscuous mode [ 235.193265][ T5836] hsr_slave_1: entered promiscuous mode [ 235.196913][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 235.199896][ T5836] Cannot create hsr debugfs directory [ 235.202805][ T4650] Bluetooth: hci2: command tx timeout [ 235.269469][ T5818] hsr_slave_0: entered promiscuous mode [ 235.281513][ T5818] hsr_slave_1: entered promiscuous mode [ 235.291588][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 235.302425][ T5818] Cannot create hsr debugfs directory [ 235.362388][ T4650] Bluetooth: hci3: command tx timeout [ 235.524196][ T4650] Bluetooth: hci4: command tx timeout [ 235.682525][ T4650] Bluetooth: hci5: command tx timeout [ 235.725347][ T5820] hsr_slave_0: entered promiscuous mode [ 235.729085][ T5820] hsr_slave_1: entered promiscuous mode [ 235.746049][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 235.765889][ T5820] Cannot create hsr debugfs directory [ 235.825511][ T5831] hsr_slave_0: entered promiscuous mode [ 235.836801][ T5831] hsr_slave_1: entered promiscuous mode [ 235.846036][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 235.849059][ T5831] Cannot create hsr debugfs directory [ 235.885238][ T5827] hsr_slave_0: entered promiscuous mode [ 235.889290][ T5827] hsr_slave_1: entered promiscuous mode [ 235.893417][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 235.896070][ T5827] Cannot create hsr debugfs directory [ 235.901329][ T4996] 8021q: adding VLAN 0 to HW filter on device eth9 [ 237.363148][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.385088][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.446052][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.466354][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.482127][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 237.509597][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.525016][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 237.536259][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.080486][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.227002][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.333281][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.337723][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.368538][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.383468][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.409534][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.413212][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.437905][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.475170][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.527186][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.544718][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.589481][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.605650][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.809684][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.835412][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.865199][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.896832][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.922385][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 238.940040][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.998885][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.009827][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.329779][ T5820] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 239.383953][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 239.401923][ T5820] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 239.430391][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.477342][ T5820] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 239.542802][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 239.557804][ T5820] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.589801][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.995292][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.031559][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.049277][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.073145][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.293105][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.311551][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.326435][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.339158][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.508172][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.709912][ T5836] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 240.743712][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.780534][ T5836] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 240.810924][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.834619][ T5836] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 240.862901][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.874961][ T5836] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.891504][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.983822][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.013993][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.075688][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.116081][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.119708][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.183180][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.186652][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.299408][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.398278][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.401414][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.431485][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.467242][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.470416][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.584528][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.596400][ T5812] veth0_vlan: entered promiscuous mode [ 241.636874][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.640056][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.717152][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.744190][ T5812] veth1_vlan: entered promiscuous mode [ 241.789883][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.793549][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.026677][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.130780][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.134218][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.223753][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.227045][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.256238][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.360464][ T5812] veth0_macvtap: entered promiscuous mode [ 242.487187][ T5812] veth1_macvtap: entered promiscuous mode [ 242.620470][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.750478][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.753746][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.848873][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.881916][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.885745][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.979957][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.129794][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.169107][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.246261][ T177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.277120][ T177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.105518][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.147158][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.422586][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.455618][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.567716][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 2026/07/01 18:48:18 executed programs: 12 [ 245.223116][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.318266][ T5818] veth0_vlan: entered promiscuous mode [ 245.474370][ T5818] veth1_vlan: entered promiscuous mode [ 245.574974][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.978611][ T5818] veth0_macvtap: entered promiscuous mode [ 246.090113][ T5818] veth1_macvtap: entered promiscuous mode [ 246.371076][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.523389][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.580856][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.696992][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.735173][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.807686][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.838454][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.539328][ T5827] veth0_vlan: entered promiscuous mode [ 247.596119][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.620784][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.625398][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.827218][ T5827] veth1_vlan: entered promiscuous mode [ 247.936666][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.971112][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.210252][ T5831] veth0_vlan: entered promiscuous mode [ 248.496029][ T5831] veth1_vlan: entered promiscuous mode [ 248.529641][ T5827] veth0_macvtap: entered promiscuous mode [ 248.571352][ T5820] veth0_vlan: entered promiscuous mode [ 248.646847][ T5827] veth1_macvtap: entered promiscuous mode [ 248.783859][ T5820] veth1_vlan: entered promiscuous mode [ 248.964585][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.069206][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.201015][ T5831] veth0_macvtap: entered promiscuous mode [ 249.267889][ T177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.294547][ T177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.348813][ T177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.371138][ T177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.418323][ T5831] veth1_macvtap: entered promiscuous mode [ 249.458899][ T5820] veth0_macvtap: entered promiscuous mode [ 249.557158][ T5820] veth1_macvtap: entered promiscuous mode [ 249.726998][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.868193][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 2026/07/01 18:48:23 executed programs: 43 [ 250.040313][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.088396][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.113302][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.138998][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.186106][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.394910][ T5836] veth0_vlan: entered promiscuous mode [ 250.427076][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.516618][ T1060] ================================================================== [ 250.520488][ T1060] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks+0x317/0x8f0 [ 250.527554][ T1060] Read of size 1 at addr ffff88804471c409 by task kworker/u4:7/1060 [ 250.531803][ T1060] [ 250.532856][ T1060] CPU: 0 UID: 0 PID: 1060 Comm: kworker/u4:7 Not tainted syzkaller #0 PREEMPT(full) [ 250.532873][ T1060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.532881][ T1060] Workqueue: events_unbound commit_work [ 250.532902][ T1060] Call Trace: [ 250.532910][ T1060] [ 250.532916][ T1060] dump_stack_lvl+0xe8/0x150 [ 250.532931][ T1060] print_address_description+0x55/0x1e0 [ 250.532943][ T1060] ? drm_atomic_helper_wait_for_vblanks+0x317/0x8f0 [ 250.532956][ T1060] print_report+0x58/0x70 [ 250.532965][ T1060] kasan_report+0x117/0x150 [ 250.532976][ T1060] ? drm_atomic_helper_wait_for_vblanks+0x317/0x8f0 [ 250.532991][ T1060] drm_atomic_helper_wait_for_vblanks+0x317/0x8f0 [ 250.533005][ T1060] ? preempt_schedule_thunk+0x16/0x40 [ 250.533022][ T1060] ? __pfx_drm_atomic_helper_wait_for_vblanks+0x10/0x10 [ 250.533035][ T1060] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 250.533103][ T1060] ? drm_atomic_helper_commit_hw_done+0x3da/0x410 [ 250.533119][ T1060] drm_atomic_helper_commit_tail+0x2e9/0x510 [ 250.533135][ T1060] commit_tail+0x2b1/0x3c0 [ 250.533150][ T1060] ? process_scheduled_works+0xa20/0x14e0 [ 250.533165][ T1060] process_scheduled_works+0xa8e/0x14e0 [ 250.533184][ T1060] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.533198][ T1060] ? assign_work+0x3cf/0x5d0 [ 250.533212][ T1060] worker_thread+0xa47/0xfb0 [ 250.533232][ T1060] kthread+0x388/0x470 [ 250.533244][ T1060] ? __pfx_worker_thread+0x10/0x10 [ 250.533259][ T1060] ? __pfx_kthread+0x10/0x10 [ 250.533269][ T1060] ret_from_fork+0x514/0xb70 [ 250.533282][ T1060] ? __pfx_ret_from_fork+0x10/0x10 [ 250.533293][ T1060] ? __switch_to+0xc89/0x1420 [ 250.533310][ T1060] ? __pfx_kthread+0x10/0x10 [ 250.533321][ T1060] ret_from_fork_asm+0x1a/0x30 [ 250.533338][ T1060] [ 250.533342][ T1060] [ 250.617236][ T1060] Allocated by task 6227: [ 250.619481][ T1060] kasan_save_track+0x3e/0x80 [ 250.621623][ T1060] __kasan_kmalloc+0x93/0xb0 [ 250.623579][ T1060] __kmalloc_cache_noprof+0x32d/0x660 [ 250.626222][ T1060] drm_atomic_helper_crtc_duplicate_state+0x72/0xb0 [ 250.629469][ T1060] drm_atomic_get_crtc_state+0x1b3/0x570 [ 250.632394][ T1060] page_flip_common+0x56/0x2a0 [ 250.634655][ T1060] drm_atomic_helper_page_flip+0xa5/0x160 [ 250.637107][ T1060] drm_mode_page_flip_ioctl+0xe2d/0x13d0 [ 250.639507][ T1060] drm_ioctl_kernel+0x2df/0x3b0 [ 250.641602][ T1060] drm_ioctl+0x70e/0xba0 [ 250.643493][ T1060] __se_sys_ioctl+0xfc/0x170 [ 250.646174][ T1060] do_syscall_64+0x174/0x580 [ 250.649145][ T1060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.651982][ T1060] [ 250.653137][ T1060] Freed by task 6226: [ 250.654901][ T1060] kasan_save_track+0x3e/0x80 [ 250.656894][ T1060] kasan_save_free_info+0x40/0x50 [ 250.659030][ T1060] __kasan_slab_free+0x5c/0x80 [ 250.661138][ T1060] kfree+0x1c5/0x640 [ 250.662905][ T1060] drm_atomic_commit_default_clear+0x47f/0xf00 [ 250.665977][ T1060] __drm_atomic_commit_free+0xb4/0x230 [ 250.669065][ T1060] drm_client_modeset_commit_atomic+0x6ec/0x7e0 [ 250.672427][ T1060] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 250.675118][ T1060] drm_client_modeset_commit+0x4a/0x70 [ 250.677509][ T1060] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0x1c0 [ 250.680560][ T1060] drm_fbdev_client_restore+0x1b/0x30 [ 250.682891][ T1060] drm_client_dev_restore+0x14c/0x290 [ 250.685161][ T1060] drm_release+0x32d/0x400 [ 250.687457][ T1060] __fput+0x418/0xa50 [ 250.689825][ T1060] task_work_run+0x1d9/0x270 [ 250.692390][ T1060] exit_to_user_mode_loop+0x1fa/0x730 [ 250.694875][ T1060] do_syscall_64+0x353/0x580 [ 250.697165][ T1060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.699766][ T1060] [ 250.700838][ T1060] The buggy address belongs to the object at ffff88804471c400 [ 250.700838][ T1060] which belongs to the cache kmalloc-512 of size 512 [ 250.707366][ T1060] The buggy address is located 9 bytes inside of [ 250.707366][ T1060] freed 512-byte region [ffff88804471c400, ffff88804471c600) [ 250.714030][ T1060] [ 250.715209][ T1060] The buggy address belongs to the physical page: [ 250.718026][ T1060] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4471c [ 250.721928][ T1060] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 250.726274][ T1060] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 250.729890][ T1060] page_type: f5(slab) [ 250.731750][ T1060] raw: 04fff00000000040 ffff88801ac41c80 dead000000000100 dead000000000122 [ 250.735641][ T1060] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 250.739897][ T1060] head: 04fff00000000040 ffff88801ac41c80 dead000000000100 dead000000000122 [ 250.743794][ T1060] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 250.747709][ T1060] head: 04fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 250.752461][ T1060] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 250.756843][ T1060] page dumped because: kasan: bad access detected [ 250.759627][ T1060] page_owner tracks the page as allocated [ 250.761958][ T1060] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6046, tgid 6046 (kworker/0:9), ts 249148547044, free_ts 227914510022 [ 250.772240][ T1060] post_alloc_hook+0x1f9/0x250 [ 250.774434][ T1060] get_page_from_freelist+0x21fa/0x2270 [ 250.776798][ T1060] __alloc_frozen_pages_noprof+0x18d/0x380 [ 250.779356][ T1060] allocate_slab+0x79/0x5e0 [ 250.781379][ T1060] refill_objects+0x2d5/0x350 [ 250.783470][ T1060] __pcs_replace_empty_main+0x2bf/0x6b0 [ 250.786391][ T1060] __kmalloc_cache_noprof+0x3a7/0x660 [ 250.789869][ T1060] drm_atomic_helper_setup_commit+0x1b2/0x1a30 [ 250.792652][ T1060] drm_atomic_helper_commit+0x6a/0xb10 [ 250.795069][ T1060] drm_atomic_commit+0x24e/0x2b0 [ 250.797164][ T1060] drm_atomic_helper_dirtyfb+0xe2f/0xfd0 [ 250.799613][ T1060] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 250.802748][ T1060] drm_fb_helper_damage_work+0x2a4/0x740 [ 250.805733][ T1060] process_scheduled_works+0xa8e/0x14e0 [ 250.808412][ T1060] worker_thread+0xa47/0xfb0 [ 250.810493][ T1060] kthread+0x388/0x470 [ 250.812368][ T1060] page last free pid 5690 tgid 5690 stack trace: [ 250.815674][ T1060] free_pages_prepare+0x960/0xa60 [ 250.818429][ T1060] __free_contig_range_common+0x174/0x340 [ 250.821177][ T1060] free_pages_bulk+0x48/0x120 [ 250.823287][ T1060] vfree+0x224/0x4a0 [ 250.825030][ T1060] kcov_close+0x28/0x50 [ 250.826870][ T1060] __fput+0x418/0xa50 [ 250.828584][ T1060] task_work_run+0x1d9/0x270 [ 250.830685][ T1060] do_exit+0x73a/0x2360 [ 250.832776][ T1060] do_group_exit+0x22d/0x2f0 [ 250.835149][ T1060] get_signal+0x121b/0x12c0 [ 250.837405][ T1060] arch_do_signal_or_restart+0xbb/0x860 [ 250.839811][ T1060] exit_to_user_mode_loop+0x104/0x730 [ 250.842094][ T1060] do_syscall_64+0x353/0x580 [ 250.844235][ T1060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.847134][ T1060] [ 250.848423][ T1060] Memory state around the buggy address: [ 250.851123][ T1060] ffff88804471c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 250.854783][ T1060] ffff88804471c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 250.858316][ T1060] >ffff88804471c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.862440][ T1060] ^ [ 250.864706][ T1060] ffff88804471c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.868220][ T1060] ffff88804471c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.871688][ T1060] ================================================================== [ 250.902930][ T5836] veth1_vlan: entered promiscuous mode [ 250.953958][ T5836] veth0_macvtap: entered promiscuous mode [ 250.965111][ T5836] veth1_macvtap: entered promiscuous mode [ 250.979163][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.986556][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.258663][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.300464][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.322473][ T88] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.326801][ T88] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.371173][ T88] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.394096][ T88] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.469063][ T88] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.478608][ T88] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.507850][ T88] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.517399][ T88] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.564587][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.575695][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.706465][ T1060] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 251.709931][ T1060] CPU: 0 UID: 0 PID: 1060 Comm: kworker/u4:7 Not tainted syzkaller #0 PREEMPT(full) [ 251.714423][ T1060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.719036][ T1060] Workqueue: events_unbound commit_work [ 251.721635][ T1060] Call Trace: [ 251.723173][ T1060] [ 251.724511][ T1060] vpanic+0x56c/0xa60 [ 251.726352][ T1060] ? __pfx_vpanic+0x10/0x10 [ 251.728570][ T1060] panic+0xc5/0xd0 [ 251.730386][ T1060] ? __pfx_panic+0x10/0x10 [ 251.732474][ T1060] ? preempt_schedule_thunk+0x16/0x40 [ 251.734871][ T1060] ? drm_atomic_helper_wait_for_vblanks+0x317/0x8f0 [ 251.738046][ T1060] ? preempt_schedule_thunk+0x16/0x40 [ 251.740669][ T1060] ? drm_atomic_helper_wait_for_vblanks+0x317/0x8f0 [ 251.743623][ T1060] check_panic_on_warn+0x89/0xb0 [ 251.745741][ T1060] ? drm_atomic_helper_wait_for_vblanks+0x317/0x8f0 [ 251.748938][ T1060] end_report+0x73/0x170 [ 251.751282][ T1060] ? drm_atomic_helper_wait_for_vblanks+0x317/0x8f0 [ 251.754235][ T1060] kasan_report+0x128/0x150 [ 251.756358][ T1060] ? drm_atomic_helper_wait_for_vblanks+0x317/0x8f0 [ 251.759413][ T1060] drm_atomic_helper_wait_for_vblanks+0x317/0x8f0 [ 251.762375][ T1060] ? preempt_schedule_thunk+0x16/0x40 [ 251.764957][ T1060] ? __pfx_drm_atomic_helper_wait_for_vblanks+0x10/0x10 [ 251.768079][ T1060] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 251.770818][ T1060] ? drm_atomic_helper_commit_hw_done+0x3da/0x410 [ 251.773687][ T1060] drm_atomic_helper_commit_tail+0x2e9/0x510 [ 251.776491][ T1060] commit_tail+0x2b1/0x3c0 [ 251.778589][ T1060] ? process_scheduled_works+0xa20/0x14e0 [ 251.781249][ T1060] process_scheduled_works+0xa8e/0x14e0 [ 251.783752][ T1060] ? __pfx_process_scheduled_works+0x10/0x10 [ 251.786424][ T1060] ? assign_work+0x3cf/0x5d0 [ 251.788664][ T1060] worker_thread+0xa47/0xfb0 [ 251.790935][ T1060] kthread+0x388/0x470 [ 251.793023][ T1060] ? __pfx_worker_thread+0x10/0x10 [ 251.795442][ T1060] ? __pfx_kthread+0x10/0x10 [ 251.797471][ T1060] ret_from_fork+0x514/0xb70 [ 251.799725][ T1060] ? __pfx_ret_from_fork+0x10/0x10 [ 251.802564][ T1060] ? __switch_to+0xc89/0x1420 [ 251.804999][ T1060] ? __pfx_kthread+0x10/0x10 [ 251.807127][ T1060] ret_from_fork_asm+0x1a/0x30 [ 251.809295][ T1060] [ 251.811122][ T1060] Kernel Offset: disabled [ 251.813338][ T1060] Rebooting in 86400 seconds..