[ 138.076929][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.080030][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:49885' (ED25519) to the list of known hosts. 2025/08/31 18:55:51 parsed 1 programs [ 148.402537][ T5644] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 152.803780][ T4702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.818078][ T4702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.822562][ T4702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.832600][ T4702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.837150][ T4702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.380758][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.414669][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.680478][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.705040][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.491358][ T5684] chnl_net:caif_netlink_parms(): no params data found [ 159.631125][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.639402][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.644254][ T5684] bridge_slave_0: entered allmulticast mode [ 159.656378][ T5684] bridge_slave_0: entered promiscuous mode [ 159.666672][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.675142][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.688860][ T5684] bridge_slave_1: entered allmulticast mode [ 159.701348][ T5684] bridge_slave_1: entered promiscuous mode [ 159.757271][ T5684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.776775][ T5684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.837111][ T5684] team0: Port device team_slave_0 added [ 159.842505][ T5684] team0: Port device team_slave_1 added [ 159.896850][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.900616][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.935149][ T5684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.941251][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.944268][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.974844][ T5684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.026460][ T5684] hsr_slave_0: entered promiscuous mode [ 160.031632][ T5684] hsr_slave_1: entered promiscuous mode [ 160.280156][ T5684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.307997][ T5684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.328747][ T5684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.348819][ T5684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 160.397277][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.400629][ T5684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.406089][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.409387][ T5684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.477571][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.481796][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.556494][ T5684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.588182][ T5684] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.611277][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.614750][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.633606][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.637320][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.721738][ T5684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.735099][ T5684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.058804][ T5684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.131315][ T5684] veth0_vlan: entered promiscuous mode [ 161.155805][ T5684] veth1_vlan: entered promiscuous mode [ 161.215322][ T5684] veth0_macvtap: entered promiscuous mode [ 161.226676][ T5684] veth1_macvtap: entered promiscuous mode [ 161.259238][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.278894][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.312084][ T3025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.325583][ T3025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.329488][ T3025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.333498][ T3025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/08/31 18:56:08 executed programs: 0 [ 161.554838][ T5672] syz-executor (5672) used greatest stack depth: 19768 bytes left [ 161.665906][ T5392] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.670252][ T5392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.674887][ T5392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.687200][ T5392] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.690870][ T5392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.792005][ T4702] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.797817][ T4702] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.801667][ T4702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.806637][ T4702] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.810394][ T4702] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.033133][ T5392] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.044882][ T5392] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.055145][ T5392] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.060083][ T5392] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.064278][ T5392] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.173533][ T4702] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.198347][ T4702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.207990][ T4702] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.225061][ T5772] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.230519][ T5772] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.237951][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.241299][ T5772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.245818][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.250902][ T5772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.258446][ T5392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.325876][ T5772] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.331410][ T5773] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.342000][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.347128][ T5773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.395305][ T5773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.563999][ T1038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.976925][ T1038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.293894][ T1038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.763853][ T5773] Bluetooth: hci0: command tx timeout [ 163.835325][ T5773] Bluetooth: hci1: command tx timeout [ 164.140203][ T1038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.156261][ T5773] Bluetooth: hci2: command tx timeout [ 164.315699][ T5773] Bluetooth: hci3: command tx timeout [ 164.318648][ T5773] Bluetooth: hci4: command tx timeout [ 164.475734][ T45] Bluetooth: hci5: command tx timeout [ 164.630297][ T5753] chnl_net:caif_netlink_parms(): no params data found [ 165.261827][ T1038] bridge_slave_1: left allmulticast mode [ 165.268160][ T1038] bridge_slave_1: left promiscuous mode [ 165.271353][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.297379][ T1038] bridge_slave_0: left allmulticast mode [ 165.299862][ T1038] bridge_slave_0: left promiscuous mode [ 165.302677][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.840357][ T45] Bluetooth: hci0: command tx timeout [ 165.906464][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.915332][ T45] Bluetooth: hci1: command tx timeout [ 165.921761][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.930711][ T1038] bond0 (unregistering): Released all slaves [ 166.004806][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.009418][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.013830][ T5753] bridge_slave_0: entered allmulticast mode [ 166.039957][ T5753] bridge_slave_0: entered promiscuous mode [ 166.120948][ T1038] hsr_slave_0: left promiscuous mode [ 166.124333][ T1038] hsr_slave_1: left promiscuous mode [ 166.130037][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.133870][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.140316][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.143945][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.157401][ T1038] veth1_macvtap: left promiscuous mode [ 166.160106][ T1038] veth0_macvtap: left promiscuous mode [ 166.163100][ T1038] veth1_vlan: left promiscuous mode [ 166.169561][ T1038] veth0_vlan: left promiscuous mode [ 166.235031][ T45] Bluetooth: hci2: command tx timeout [ 166.395079][ T45] Bluetooth: hci4: command tx timeout [ 166.397892][ T45] Bluetooth: hci3: command tx timeout [ 166.561278][ T5773] Bluetooth: hci5: command tx timeout [ 166.568529][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 166.594351][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 166.957486][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.961408][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.967000][ T5753] bridge_slave_1: entered allmulticast mode [ 166.971089][ T5753] bridge_slave_1: entered promiscuous mode [ 167.186974][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.303776][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.441367][ T5756] chnl_net:caif_netlink_parms(): no params data found [ 167.467033][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 167.566399][ T5753] team0: Port device team_slave_0 added [ 167.768486][ T5753] team0: Port device team_slave_1 added [ 167.891836][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 167.918549][ T5773] Bluetooth: hci0: command tx timeout [ 167.978478][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.982511][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.998754][ T5773] Bluetooth: hci1: command tx timeout [ 168.005876][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.062513][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 168.072371][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.078798][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.091341][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.263358][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 168.314609][ T5773] Bluetooth: hci2: command tx timeout [ 168.477816][ T5773] Bluetooth: hci3: command tx timeout [ 168.480270][ T5773] Bluetooth: hci4: command tx timeout [ 168.634907][ T5773] Bluetooth: hci5: command tx timeout [ 168.890216][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.894037][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.926349][ T5767] bridge_slave_0: entered allmulticast mode [ 168.943101][ T5767] bridge_slave_0: entered promiscuous mode [ 169.059056][ T5753] hsr_slave_0: entered promiscuous mode [ 169.063044][ T5753] hsr_slave_1: entered promiscuous mode [ 169.070303][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.074228][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.079525][ T5756] bridge_slave_0: entered allmulticast mode [ 169.083629][ T5756] bridge_slave_0: entered promiscuous mode [ 169.118106][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.121843][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.128870][ T5767] bridge_slave_1: entered allmulticast mode [ 169.132966][ T5767] bridge_slave_1: entered promiscuous mode [ 169.176291][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.179730][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.183943][ T5756] bridge_slave_1: entered allmulticast mode [ 169.193462][ T5756] bridge_slave_1: entered promiscuous mode [ 169.384062][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.394338][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.403855][ T5766] bridge_slave_0: entered allmulticast mode [ 169.409386][ T5766] bridge_slave_0: entered promiscuous mode [ 169.419946][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.427422][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.430694][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.434001][ T5768] bridge_slave_0: entered allmulticast mode [ 169.442207][ T5768] bridge_slave_0: entered promiscuous mode [ 169.458611][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.502804][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.508600][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.511817][ T5766] bridge_slave_1: entered allmulticast mode [ 169.519833][ T5766] bridge_slave_1: entered promiscuous mode [ 169.525851][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.530537][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.533841][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.541202][ T5768] bridge_slave_1: entered allmulticast mode [ 169.546911][ T5768] bridge_slave_1: entered promiscuous mode [ 169.569483][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.738723][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.742334][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.749177][ T5761] bridge_slave_0: entered allmulticast mode [ 169.763839][ T5761] bridge_slave_0: entered promiscuous mode [ 169.822583][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.847794][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.961350][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.985165][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.988992][ T5761] bridge_slave_1: entered allmulticast mode [ 169.992996][ T5761] bridge_slave_1: entered promiscuous mode [ 170.001496][ T5773] Bluetooth: hci0: command tx timeout [ 170.050806][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.071873][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.077051][ T5773] Bluetooth: hci1: command tx timeout [ 170.081436][ T5767] team0: Port device team_slave_0 added [ 170.096388][ T5767] team0: Port device team_slave_1 added [ 170.119078][ T5756] team0: Port device team_slave_0 added [ 170.216116][ T5756] team0: Port device team_slave_1 added [ 170.221279][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.251977][ T5766] team0: Port device team_slave_0 added [ 170.270948][ T5768] team0: Port device team_slave_0 added [ 170.296755][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.305957][ T5766] team0: Port device team_slave_1 added [ 170.323485][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.331065][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.343482][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.363874][ T5768] team0: Port device team_slave_1 added [ 170.394773][ T5773] Bluetooth: hci2: command tx timeout [ 170.418306][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.421377][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.437922][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.460988][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.466670][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.483091][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.489739][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.492880][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.507488][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.522438][ T5761] team0: Port device team_slave_0 added [ 170.530846][ T5761] team0: Port device team_slave_1 added [ 170.554806][ T5773] Bluetooth: hci3: command tx timeout [ 170.557549][ T5773] Bluetooth: hci4: command tx timeout [ 170.716376][ T45] Bluetooth: hci5: command tx timeout [ 170.719609][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.722732][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.764793][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.793761][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.815092][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.847681][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.870035][ T5767] hsr_slave_0: entered promiscuous mode [ 170.885819][ T5767] hsr_slave_1: entered promiscuous mode [ 170.889576][ T5767] debugfs: 'hsr0' already exists in 'hsr' [ 170.892551][ T5767] Cannot create hsr debugfs directory [ 170.987294][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.990489][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.026632][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.078939][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.081987][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.108570][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.180456][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.183709][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.202700][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.241220][ T5756] hsr_slave_0: entered promiscuous mode [ 171.245530][ T5756] hsr_slave_1: entered promiscuous mode [ 171.249092][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 171.251798][ T5756] Cannot create hsr debugfs directory [ 171.268336][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.272049][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.287464][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.419532][ T5766] hsr_slave_0: entered promiscuous mode [ 171.423171][ T5766] hsr_slave_1: entered promiscuous mode [ 171.429454][ T5766] debugfs: 'hsr0' already exists in 'hsr' [ 171.432037][ T5766] Cannot create hsr debugfs directory [ 171.556216][ T5768] hsr_slave_0: entered promiscuous mode [ 171.560218][ T5768] hsr_slave_1: entered promiscuous mode [ 171.563766][ T5768] debugfs: 'hsr0' already exists in 'hsr' [ 171.588215][ T5768] Cannot create hsr debugfs directory [ 171.805855][ T5761] hsr_slave_0: entered promiscuous mode [ 171.817800][ T5761] hsr_slave_1: entered promiscuous mode [ 171.821047][ T5761] debugfs: 'hsr0' already exists in 'hsr' [ 171.823783][ T5761] Cannot create hsr debugfs directory [ 172.271994][ T5753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.428351][ T5753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.578444][ T5753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.759162][ T5753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.290461][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.374337][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.490370][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.579958][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.598560][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.601718][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.669002][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.689908][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.693728][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.768872][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.137716][ T5766] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.190997][ T5766] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.229369][ T5766] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.319217][ T5766] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.514264][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.530300][ T5768] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.594279][ T5768] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.694197][ T5768] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.717392][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.762085][ T5768] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.787239][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.851441][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.855684][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.905854][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.908615][ T1062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.996833][ T5761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.109333][ T5761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.163077][ T5753] veth0_vlan: entered promiscuous mode [ 175.232188][ T5761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.303938][ T5761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.337138][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.409325][ T5753] veth1_vlan: entered promiscuous mode [ 175.534001][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.598206][ T5756] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.636857][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.701587][ T5756] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.795457][ T5753] veth0_macvtap: entered promiscuous mode [ 175.810338][ T5756] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.882059][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.885488][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.906565][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.909934][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.971463][ T5753] veth1_macvtap: entered promiscuous mode [ 175.990813][ T5756] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.256845][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.392202][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.400878][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.407432][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.471277][ T174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.571774][ T174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.586056][ T174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.590353][ T174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.612160][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.660110][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.690914][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.780779][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.784053][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.807027][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.810903][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.930578][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.933826][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.956636][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.959991][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.140444][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.201515][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.223864][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.319893][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.555469][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.617288][ T5767] veth0_vlan: entered promiscuous mode [ 177.687906][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.693293][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.747035][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.820661][ T5767] veth1_vlan: entered promiscuous mode [ 177.901268][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.904660][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.957809][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.961900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state 2025/08/31 18:56:25 executed programs: 12 [ 178.086335][ T5980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.111480][ T5767] veth0_macvtap: entered promiscuous mode [ 178.120397][ T5980] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 178.253905][ T5980] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.278931][ T5767] veth1_macvtap: entered promiscuous mode [ 178.404988][ T5984] wlan1: No basic rates, using min rate instead [ 178.465125][ T5984] wlan1: authenticate with aa:09:b7:99:c0:d7 (local address=aa:aa:aa:aa:aa:17) [ 178.469415][ T5984] wlan1: send auth to aa:09:b7:99:c0:d7 (try 1/3) [ 178.549527][ T1038] wlan1: send auth to aa:09:b7:99:c0:d7 (try 2/3) [ 178.552673][ T1038] wlan1: send auth to aa:09:b7:99:c0:d7 (try 3/3) [ 178.578613][ T5980] bond0: entered promiscuous mode [ 178.581794][ T1038] wlan1: authentication with aa:09:b7:99:c0:d7 timed out [ 178.584807][ T5980] bond_slave_0: entered promiscuous mode [ 178.597735][ T5980] bond_slave_1: entered promiscuous mode [ 178.600788][ T5980] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 178.604087][ T1038] ================================================================== [ 178.607350][ T1038] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40 [ 178.610279][ T1038] Read of size 1 at addr ffff88804331be30 by task kworker/u4:6/1038 [ 178.614805][ T1038] [ 178.616239][ T1038] CPU: 0 UID: 0 PID: 1038 Comm: kworker/u4:6 Not tainted syzkaller #0 PREEMPT(full) [ 178.616254][ T1038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.616261][ T1038] Workqueue: events_unbound cfg80211_wiphy_work [ 178.616327][ T1038] Call Trace: [ 178.616336][ T1038] [ 178.616342][ T1038] dump_stack_lvl+0x189/0x250 [ 178.616358][ T1038] ? __virt_addr_valid+0x1c8/0x5c0 [ 178.616372][ T1038] ? rcu_is_watching+0x15/0xb0 [ 178.616440][ T1038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.616453][ T1038] ? rcu_is_watching+0x15/0xb0 [ 178.616463][ T1038] ? lock_release+0x4b/0x3e0 [ 178.616478][ T1038] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 178.616494][ T1038] ? __virt_addr_valid+0x1c8/0x5c0 [ 178.616509][ T1038] ? __virt_addr_valid+0x4a5/0x5c0 [ 178.616523][ T1038] print_report+0xca/0x240 [ 178.616535][ T1038] ? _raw_spin_lock+0x2e/0x40 [ 178.616547][ T1038] kasan_report+0x118/0x150 [ 178.616562][ T1038] ? _raw_spin_lock+0x2e/0x40 [ 178.616576][ T1038] ? lockref_get+0x15/0x60 [ 178.616591][ T1038] __kasan_check_byte+0x2a/0x40 [ 178.616604][ T1038] lock_acquire+0x8d/0x360 [ 178.616619][ T1038] ? do_raw_spin_lock+0x121/0x290 [ 178.616634][ T1038] _raw_spin_lock+0x2e/0x40 [ 178.616647][ T1038] ? lockref_get+0x15/0x60 [ 178.616662][ T1038] lockref_get+0x15/0x60 [ 178.616678][ T1038] __simple_recursive_removal+0x33/0x510 [ 178.616701][ T1038] ? mntput+0x65/0xc0 [ 178.616711][ T1038] ? __pfx_remove_one+0x10/0x10 [ 178.616726][ T1038] debugfs_remove+0x5b/0x70 [ 178.616739][ T1038] ieee80211_sta_debugfs_remove+0x40/0x70 [ 178.616757][ T1038] __sta_info_destroy_part2+0x352/0x450 [ 178.616776][ T1038] sta_info_destroy_addr+0xf5/0x140 [ 178.616792][ T1038] ieee80211_destroy_auth_data+0x12d/0x260 [ 178.616804][ T1038] ieee80211_sta_work+0x11cf/0x3600 [ 178.616817][ T1038] ? __lock_acquire+0xab9/0xd20 [ 178.616834][ T1038] ? __lock_acquire+0xab9/0xd20 [ 178.616851][ T1038] ? __pfx_ieee80211_sta_work+0x10/0x10 [ 178.616862][ T1038] ? do_raw_spin_lock+0x121/0x290 [ 178.616877][ T1038] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 178.616892][ T1038] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.616907][ T1038] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 178.616920][ T1038] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.616934][ T1038] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 178.616946][ T1038] ? skb_dequeue+0x10e/0x150 [ 178.616960][ T1038] ? ieee80211_iface_work+0xfc4/0x12d0 [ 178.616976][ T1038] ? ieee80211_iface_work+0x11d6/0x12d0 [ 178.616992][ T1038] ? rcu_is_watching+0x15/0xb0 [ 178.617004][ T1038] cfg80211_wiphy_work+0x2bb/0x470 [ 178.617063][ T1038] ? process_scheduled_works+0x9ef/0x17b0 [ 178.617077][ T1038] process_scheduled_works+0xae1/0x17b0 [ 178.617093][ T1038] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.617107][ T1038] worker_thread+0x8a0/0xda0 [ 178.617119][ T1038] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.617136][ T1038] ? __kthread_parkme+0x7b/0x200 [ 178.617151][ T1038] kthread+0x70e/0x8a0 [ 178.617165][ T1038] ? __pfx_worker_thread+0x10/0x10 [ 178.617175][ T1038] ? __pfx_kthread+0x10/0x10 [ 178.617189][ T1038] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.617207][ T1038] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.617222][ T1038] ? __pfx_kthread+0x10/0x10 [ 178.617235][ T1038] ret_from_fork+0x3fc/0x770 [ 178.617248][ T1038] ? __pfx_ret_from_fork+0x10/0x10 [ 178.617260][ T1038] ? __pfx_kthread+0x10/0x10 [ 178.617273][ T1038] ret_from_fork_asm+0x1a/0x30 [ 178.617292][ T1038] [ 178.617296][ T1038] [ 178.778463][ T1038] Allocated by task 5984: [ 178.780718][ T1038] kasan_save_track+0x3e/0x80 [ 178.783027][ T1038] __kasan_slab_alloc+0x6c/0x80 [ 178.785222][ T1038] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 178.787794][ T1038] __d_alloc+0x36/0x7a0 [ 178.789711][ T1038] d_alloc_parallel+0xe5/0x15e0 [ 178.791865][ T1038] __lookup_slow+0x116/0x3d0 [ 178.793934][ T1038] simple_start_creating+0xfd/0x1e0 [ 178.796260][ T1038] start_creating+0x10f/0x180 [ 178.798482][ T1038] debugfs_create_dir+0x28/0x420 [ 178.801288][ T1038] ieee80211_sta_debugfs_add+0x12c/0x850 [ 178.804098][ T1038] sta_info_insert_rcu+0xfac/0x1940 [ 178.806481][ T1038] sta_info_insert+0x16/0xc0 [ 178.808546][ T1038] ieee80211_prep_connection+0xfce/0x13f0 [ 178.811214][ T1038] ieee80211_mgd_auth+0xee3/0x1770 [ 178.813536][ T1038] cfg80211_mlme_auth+0x62f/0x9c0 [ 178.815772][ T1038] cfg80211_conn_do_work+0x501/0xd10 [ 178.818143][ T1038] cfg80211_connect+0x1862/0x21a0 [ 178.820510][ T1038] nl80211_connect+0x17bc/0x1cd0 [ 178.822923][ T1038] genl_family_rcv_msg_doit+0x212/0x300 [ 178.825687][ T1038] genl_rcv_msg+0x60e/0x790 [ 178.827970][ T1038] netlink_rcv_skb+0x205/0x470 [ 178.830117][ T1038] genl_rcv+0x28/0x40 [ 178.832160][ T1038] netlink_unicast+0x82f/0x9e0 [ 178.834789][ T1038] netlink_sendmsg+0x805/0xb30 [ 178.837136][ T1038] __sock_sendmsg+0x219/0x270 [ 178.839457][ T1038] ____sys_sendmsg+0x505/0x830 [ 178.841875][ T1038] ___sys_sendmsg+0x21f/0x2a0 [ 178.844271][ T1038] __x64_sys_sendmsg+0x19b/0x260 [ 178.847092][ T1038] do_syscall_64+0xfa/0x3b0 [ 178.849231][ T1038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.852013][ T1038] [ 178.853157][ T1038] Freed by task 15: [ 178.855108][ T1038] kasan_save_track+0x3e/0x80 [ 178.857702][ T1038] kasan_save_free_info+0x46/0x50 [ 178.860737][ T1038] __kasan_slab_free+0x5b/0x80 [ 178.863304][ T1038] kmem_cache_free+0x18f/0x400 [ 178.865957][ T1038] rcu_core+0xcab/0x1770 [ 178.868198][ T1038] handle_softirqs+0x283/0x870 [ 178.870340][ T1038] run_ksoftirqd+0x9b/0x100 [ 178.872362][ T1038] smpboot_thread_fn+0x53f/0xa60 [ 178.874940][ T1038] kthread+0x70e/0x8a0 [ 178.876814][ T1038] ret_from_fork+0x3fc/0x770 [ 178.878949][ T1038] ret_from_fork_asm+0x1a/0x30 [ 178.881152][ T1038] [ 178.882365][ T1038] Last potentially related work creation: [ 178.885366][ T1038] kasan_save_stack+0x3e/0x60 [ 178.887886][ T1038] kasan_record_aux_stack+0xbd/0xd0 [ 178.890342][ T1038] call_rcu+0x157/0x9c0 [ 178.892233][ T1038] __dentry_kill+0x4d2/0x660 [ 178.894521][ T1038] dput+0x19f/0x2b0 [ 178.896322][ T1038] find_next_child+0x1e5/0x250 [ 178.898469][ T1038] __simple_recursive_removal+0x10b/0x510 [ 178.901553][ T1038] debugfs_remove+0x5b/0x70 [ 178.904094][ T1038] ieee80211_debugfs_recreate_netdev+0xbf/0x1460 [ 178.906941][ T1038] drv_remove_interface+0x1fa/0x590 [ 178.909263][ T1038] ieee80211_change_mac+0x912/0x12d0 [ 178.911571][ T1038] netif_set_mac_address+0x2f9/0x4c0 [ 178.913899][ T1038] dev_set_mac_address+0x12b/0x260 [ 178.916155][ T1038] bond_set_mac_address+0x26c/0x7b0 [ 178.918446][ T1038] netif_set_mac_address+0x2f9/0x4c0 [ 178.920872][ T1038] do_setlink+0x88c/0x41c0 [ 178.923158][ T1038] rtnl_newlink+0x160b/0x1c70 [ 178.925717][ T1038] rtnetlink_rcv_msg+0x7cc/0xb70 [ 178.927997][ T1038] netlink_rcv_skb+0x205/0x470 [ 178.930107][ T1038] netlink_unicast+0x82f/0x9e0 [ 178.932332][ T1038] netlink_sendmsg+0x805/0xb30 [ 178.934517][ T1038] __sock_sendmsg+0x219/0x270 [ 178.936678][ T1038] ____sys_sendmsg+0x505/0x830 [ 178.938838][ T1038] ___sys_sendmsg+0x21f/0x2a0 [ 178.941225][ T1038] __x64_sys_sendmsg+0x19b/0x260 [ 178.943793][ T1038] do_syscall_64+0xfa/0x3b0 [ 178.946204][ T1038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.948992][ T1038] [ 178.950284][ T1038] The buggy address belongs to the object at ffff88804331bd60 [ 178.950284][ T1038] which belongs to the cache dentry of size 312 [ 178.956270][ T1038] The buggy address is located 208 bytes inside of [ 178.956270][ T1038] freed 312-byte region [ffff88804331bd60, ffff88804331be98) [ 178.962633][ T1038] [ 178.963965][ T1038] The buggy address belongs to the physical page: [ 178.967956][ T1038] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804331a178 pfn:0x4331a [ 178.972539][ T1038] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 178.976204][ T1038] memcg:ffff88804591ff01 [ 178.978108][ T1038] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 178.981821][ T1038] page_type: f5(slab) [ 178.983966][ T1038] raw: 04fff00000000240 ffff888030410780 ffff8880304114c8 ffffea000109d510 [ 178.988413][ T1038] raw: ffff88804331a178 000000000015000c 00000000f5000000 ffff88804591ff01 [ 178.992433][ T1038] head: 04fff00000000240 ffff888030410780 ffff8880304114c8 ffffea000109d510 [ 178.996788][ T1038] head: ffff88804331a178 000000000015000c 00000000f5000000 ffff88804591ff01 [ 179.000700][ T1038] head: 04fff00000000001 ffffea00010cc681 00000000ffffffff 00000000ffffffff [ 179.004923][ T1038] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 179.009079][ T1038] page dumped because: kasan: bad access detected [ 179.011835][ T1038] page_owner tracks the page as allocated [ 179.014319][ T1038] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5242, tgid 5242 (dhcpcd-run-hook), ts 76237092932, free_ts 0 [ 179.025067][ T1038] post_alloc_hook+0x240/0x2a0 [ 179.027216][ T1038] get_page_from_freelist+0x21e4/0x22c0 [ 179.029863][ T1038] __alloc_frozen_pages_noprof+0x181/0x370 [ 179.032439][ T1038] alloc_pages_mpol+0x232/0x4a0 [ 179.034850][ T1038] allocate_slab+0x8a/0x370 [ 179.037107][ T1038] ___slab_alloc+0xbeb/0x1410 [ 179.039798][ T1038] kmem_cache_alloc_lru_noprof+0x288/0x3d0 [ 179.043422][ T1038] __d_alloc+0x36/0x7a0 [ 179.045625][ T1038] d_alloc_parallel+0xe5/0x15e0 [ 179.047963][ T1038] __lookup_slow+0x116/0x3d0 [ 179.050131][ T1038] lookup_slow+0x53/0x70 [ 179.052170][ T1038] walk_component+0x2d2/0x400 [ 179.054201][ T1038] path_lookupat+0x163/0x430 [ 179.056469][ T1038] filename_lookup+0x212/0x570 [ 179.059022][ T1038] vfs_statx+0xf8/0x550 [ 179.061046][ T1038] vfs_fstatat+0x118/0x170 [ 179.063182][ T1038] page_owner free stack trace missing [ 179.066229][ T1038] [ 179.067755][ T1038] Memory state around the buggy address: [ 179.071242][ T1038] ffff88804331bd00: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb [ 179.074768][ T1038] ffff88804331bd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.078293][ T1038] >ffff88804331be00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.081769][ T1038] ^ [ 179.084246][ T1038] ffff88804331be80: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.088083][ T1038] ffff88804331bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.092169][ T1038] ================================================================== [ 179.098769][ T1038] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 179.102019][ T1038] CPU: 0 UID: 0 PID: 1038 Comm: kworker/u4:6 Not tainted syzkaller #0 PREEMPT(full) [ 179.106169][ T1038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.111104][ T1038] Workqueue: events_unbound cfg80211_wiphy_work [ 179.114025][ T1038] Call Trace: [ 179.115989][ T1038] [ 179.117459][ T1038] dump_stack_lvl+0x99/0x250 [ 179.119587][ T1038] ? __asan_memcpy+0x40/0x70 [ 179.121772][ T1038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.124162][ T1038] ? __pfx__printk+0x10/0x10 [ 179.126443][ T1038] vpanic+0x281/0x750 [ 179.128340][ T1038] ? __pfx_vpanic+0x10/0x10 [ 179.130589][ T1038] ? irqentry_exit+0x74/0x90 [ 179.132752][ T1038] panic+0xb9/0xc0 [ 179.134639][ T1038] ? __pfx_panic+0x10/0x10 [ 179.136655][ T1038] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 179.139266][ T1038] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 179.141915][ T1038] ? is_module_address+0x17/0xf0 [ 179.144123][ T1038] ? _raw_spin_lock+0x2e/0x40 [ 179.146371][ T1038] check_panic_on_warn+0x89/0xb0 [ 179.148951][ T1038] ? _raw_spin_lock+0x2e/0x40 [ 179.151376][ T1038] end_report+0x78/0x160 [ 179.153387][ T1038] kasan_report+0x129/0x150 [ 179.155412][ T1038] ? _raw_spin_lock+0x2e/0x40 [ 179.157534][ T1038] ? lockref_get+0x15/0x60 [ 179.159625][ T1038] __kasan_check_byte+0x2a/0x40 [ 179.162405][ T1038] lock_acquire+0x8d/0x360 [ 179.165568][ T1038] ? do_raw_spin_lock+0x121/0x290 [ 179.168521][ T1038] _raw_spin_lock+0x2e/0x40 [ 179.170696][ T1038] ? lockref_get+0x15/0x60 [ 179.172708][ T1038] lockref_get+0x15/0x60 [ 179.174791][ T1038] __simple_recursive_removal+0x33/0x510 [ 179.177463][ T1038] ? mntput+0x65/0xc0 [ 179.179287][ T1038] ? __pfx_remove_one+0x10/0x10 [ 179.181453][ T1038] debugfs_remove+0x5b/0x70 [ 179.183457][ T1038] ieee80211_sta_debugfs_remove+0x40/0x70 [ 179.186088][ T1038] __sta_info_destroy_part2+0x352/0x450 [ 179.188810][ T1038] sta_info_destroy_addr+0xf5/0x140 [ 179.191166][ T1038] ieee80211_destroy_auth_data+0x12d/0x260 [ 179.193786][ T1038] ieee80211_sta_work+0x11cf/0x3600 [ 179.196242][ T1038] ? __lock_acquire+0xab9/0xd20 [ 179.198504][ T1038] ? __lock_acquire+0xab9/0xd20 [ 179.200794][ T1038] ? __pfx_ieee80211_sta_work+0x10/0x10 [ 179.203100][ T1038] ? do_raw_spin_lock+0x121/0x290 [ 179.205770][ T1038] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 179.208657][ T1038] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.211540][ T1038] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 179.214620][ T1038] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 179.217573][ T1038] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.219852][ T1038] ? skb_dequeue+0x10e/0x150 [ 179.221868][ T1038] ? ieee80211_iface_work+0xfc4/0x12d0 [ 179.224207][ T1038] ? ieee80211_iface_work+0x11d6/0x12d0 [ 179.226637][ T1038] ? rcu_is_watching+0x15/0xb0 [ 179.228779][ T1038] cfg80211_wiphy_work+0x2bb/0x470 [ 179.231129][ T1038] ? process_scheduled_works+0x9ef/0x17b0 [ 179.233647][ T1038] process_scheduled_works+0xae1/0x17b0 [ 179.236165][ T1038] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.238809][ T1038] worker_thread+0x8a0/0xda0 [ 179.241014][ T1038] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 179.244575][ T1038] ? __kthread_parkme+0x7b/0x200 [ 179.247407][ T1038] kthread+0x70e/0x8a0 [ 179.249283][ T1038] ? __pfx_worker_thread+0x10/0x10 [ 179.251772][ T1038] ? __pfx_kthread+0x10/0x10 [ 179.253894][ T1038] ? _raw_spin_unlock_irq+0x23/0x50 [ 179.256192][ T1038] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.258463][ T1038] ? __pfx_kthread+0x10/0x10 [ 179.260570][ T1038] ret_from_fork+0x3fc/0x770 [ 179.263052][ T1038] ? __pfx_ret_from_fork+0x10/0x10 [ 179.266317][ T1038] ? __pfx_kthread+0x10/0x10 [ 179.268784][ T1038] ret_from_fork_asm+0x1a/0x30 [ 179.270965][ T1038] [ 179.272787][ T1038] Kernel Offset: disabled [ 179.274737][ T1038] Rebooting in 86400 seconds..