Warning: Permanently added '[localhost]:63872' (ED25519) to the list of known hosts. 2025/10/17 03:56:33 parsed 1 programs [ 128.289170][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 135.127413][ T5370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.131803][ T5370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.135507][ T5370] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.138997][ T5370] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.143579][ T5370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.362745][ T5611] chnl_net:caif_netlink_parms(): no params data found [ 136.935631][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.938679][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.949705][ T5611] bridge_slave_0: entered allmulticast mode [ 136.960152][ T5611] bridge_slave_0: entered promiscuous mode [ 137.021441][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.024643][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.027768][ T5611] bridge_slave_1: entered allmulticast mode [ 137.070195][ T5611] bridge_slave_1: entered promiscuous mode [ 137.180087][ T5370] Bluetooth: hci0: command tx timeout [ 137.778630][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.892485][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.983953][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.989647][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.126049][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.136215][ T5611] team0: Port device team_slave_0 added [ 138.140040][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.171037][ T5611] team0: Port device team_slave_1 added [ 138.298451][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.308604][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.313908][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.339495][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.370117][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.381147][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.384223][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.430725][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.568483][ T5611] hsr_slave_0: entered promiscuous mode [ 138.580601][ T5611] hsr_slave_1: entered promiscuous mode [ 138.861915][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 138.867762][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 138.880792][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 138.896034][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.022580][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.044241][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.063031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.066260][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.091639][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.094889][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.262968][ T5370] Bluetooth: hci0: command tx timeout [ 139.324325][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.360507][ T5611] veth0_vlan: entered promiscuous mode [ 139.368204][ T5611] veth1_vlan: entered promiscuous mode [ 139.396191][ T5611] veth0_macvtap: entered promiscuous mode [ 139.404165][ T5611] veth1_macvtap: entered promiscuous mode [ 139.424138][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.434890][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.445466][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.462419][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.466409][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.475529][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/10/17 03:56:48 executed programs: 0 [ 139.702677][ T4666] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.707101][ T4666] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.712571][ T4666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.716411][ T4666] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.720263][ T4666] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.817978][ T5370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.824492][ T5370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.828189][ T5370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.885956][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.890788][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.894447][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.903739][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.907539][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.914194][ T5715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.928714][ T4666] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.949158][ T5716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.971432][ T5716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.013465][ T5716] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 140.020638][ T5716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.039956][ T5716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 140.169875][ T4666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.191174][ T4666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.220048][ T4666] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.223492][ T4666] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.230139][ T4666] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.234437][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.238199][ T4666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.242652][ T4666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.252891][ T5716] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.281380][ T5716] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 141.749513][ T5716] Bluetooth: hci1: command tx timeout [ 141.982401][ T5716] Bluetooth: hci3: command tx timeout [ 141.985210][ T5716] Bluetooth: hci2: command tx timeout [ 142.025495][ T5706] chnl_net:caif_netlink_parms(): no params data found [ 142.187274][ T1041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.220802][ T5715] Bluetooth: hci4: command tx timeout [ 142.299664][ T5715] Bluetooth: hci5: command tx timeout [ 142.539668][ T5715] Bluetooth: hci6: command tx timeout [ 142.631043][ T5706] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.634341][ T5706] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.638085][ T5706] bridge_slave_0: entered allmulticast mode [ 142.671974][ T5706] bridge_slave_0: entered promiscuous mode [ 142.810548][ T1041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.835250][ T5706] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.838561][ T5706] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.851525][ T5706] bridge_slave_1: entered allmulticast mode [ 142.860178][ T5706] bridge_slave_1: entered promiscuous mode [ 142.904425][ T5709] chnl_net:caif_netlink_parms(): no params data found [ 143.035636][ T1041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.054122][ T5706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.161584][ T5712] chnl_net:caif_netlink_parms(): no params data found [ 143.171319][ T5706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.191364][ T1041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.434242][ T5706] team0: Port device team_slave_0 added [ 143.438937][ T5706] team0: Port device team_slave_1 added [ 143.476788][ T5721] chnl_net:caif_netlink_parms(): no params data found [ 143.578664][ T5722] chnl_net:caif_netlink_parms(): no params data found [ 143.735224][ T5708] chnl_net:caif_netlink_parms(): no params data found [ 143.743758][ T5712] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.747011][ T5712] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.751072][ T5712] bridge_slave_0: entered allmulticast mode [ 143.754892][ T5712] bridge_slave_0: entered promiscuous mode [ 143.760751][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.763748][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.775746][ T5706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.790359][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.794140][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.805961][ T5706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.829490][ T5715] Bluetooth: hci1: command tx timeout [ 143.904542][ T5712] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.907693][ T5712] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.911881][ T5712] bridge_slave_1: entered allmulticast mode [ 143.915859][ T5712] bridge_slave_1: entered promiscuous mode [ 143.945031][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.948120][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.959732][ T5709] bridge_slave_0: entered allmulticast mode [ 143.970065][ T5709] bridge_slave_0: entered promiscuous mode [ 144.056892][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.060442][ T5715] Bluetooth: hci2: command tx timeout [ 144.062873][ T5715] Bluetooth: hci3: command tx timeout [ 144.066288][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.070081][ T5709] bridge_slave_1: entered allmulticast mode [ 144.074106][ T5709] bridge_slave_1: entered promiscuous mode [ 144.193134][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.196546][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.221179][ T5721] bridge_slave_0: entered allmulticast mode [ 144.229452][ T5721] bridge_slave_0: entered promiscuous mode [ 144.275926][ T5706] hsr_slave_0: entered promiscuous mode [ 144.284815][ T5706] hsr_slave_1: entered promiscuous mode [ 144.300489][ T5716] Bluetooth: hci4: command tx timeout [ 144.303081][ T5706] debugfs: 'hsr0' already exists in 'hsr' [ 144.305568][ T5706] Cannot create hsr debugfs directory [ 144.308430][ T1041] bridge_slave_1: left allmulticast mode [ 144.316337][ T1041] bridge_slave_1: left promiscuous mode [ 144.319136][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.351796][ T1041] bridge_slave_0: left allmulticast mode [ 144.354448][ T1041] bridge_slave_0: left promiscuous mode [ 144.356999][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.380200][ T5716] Bluetooth: hci5: command tx timeout [ 144.622212][ T5716] Bluetooth: hci6: command tx timeout [ 144.827567][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.833844][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.838834][ T1041] bond0 (unregistering): Released all slaves [ 144.954891][ T5709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.964985][ T5712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.971617][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.975007][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.978247][ T5721] bridge_slave_1: entered allmulticast mode [ 145.001493][ T5721] bridge_slave_1: entered promiscuous mode [ 145.108299][ T5709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.157949][ T5712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.190751][ T1041] hsr_slave_0: left promiscuous mode [ 145.193704][ T1041] hsr_slave_1: left promiscuous mode [ 145.200415][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.203700][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.220088][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.223206][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.244610][ T1041] veth1_macvtap: left promiscuous mode [ 145.247059][ T1041] veth0_macvtap: left promiscuous mode [ 145.262081][ T1041] veth1_vlan: left promiscuous mode [ 145.265414][ T1041] veth0_vlan: left promiscuous mode [ 145.552407][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 145.572047][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 145.840287][ T5708] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.843421][ T5708] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.846672][ T5708] bridge_slave_0: entered allmulticast mode [ 145.868296][ T5708] bridge_slave_0: entered promiscuous mode [ 145.899665][ T5716] Bluetooth: hci1: command tx timeout [ 145.906165][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.909808][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.913042][ T5722] bridge_slave_0: entered allmulticast mode [ 145.917552][ T5722] bridge_slave_0: entered promiscuous mode [ 145.944289][ T5708] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.947509][ T5708] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.983839][ T5708] bridge_slave_1: entered allmulticast mode [ 145.987833][ T5708] bridge_slave_1: entered promiscuous mode [ 146.031314][ T5709] team0: Port device team_slave_0 added [ 146.054597][ T5712] team0: Port device team_slave_0 added [ 146.057451][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.080099][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.083465][ T5722] bridge_slave_1: entered allmulticast mode [ 146.109461][ T5722] bridge_slave_1: entered promiscuous mode [ 146.140093][ T5716] Bluetooth: hci3: command tx timeout [ 146.142535][ T5716] Bluetooth: hci2: command tx timeout [ 146.147871][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.175465][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.222257][ T5709] team0: Port device team_slave_1 added [ 146.254023][ T5712] team0: Port device team_slave_1 added [ 146.323965][ T5708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.372118][ T5722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.379522][ T5716] Bluetooth: hci4: command tx timeout [ 146.413745][ T5708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.459489][ T5716] Bluetooth: hci5: command tx timeout [ 146.469042][ T5722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.521699][ T5721] team0: Port device team_slave_0 added [ 146.563743][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.566829][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.581820][ T5709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.588119][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.592606][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.604559][ T5712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.622622][ T5722] team0: Port device team_slave_0 added [ 146.634597][ T5721] team0: Port device team_slave_1 added [ 146.649109][ T5708] team0: Port device team_slave_0 added [ 146.656899][ T5708] team0: Port device team_slave_1 added [ 146.661472][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.664557][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.676561][ T5709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.687297][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.690953][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.702373][ T5716] Bluetooth: hci6: command tx timeout [ 146.705791][ T5712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.718256][ T5722] team0: Port device team_slave_1 added [ 146.851068][ T5708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.854199][ T5708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.866131][ T5708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.892089][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.895261][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.907332][ T5722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.915200][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.918241][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.935451][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.942966][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.946015][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.959203][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.971881][ T5708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.975013][ T5708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.991511][ T5708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.001472][ T5709] hsr_slave_0: entered promiscuous mode [ 147.004968][ T5709] hsr_slave_1: entered promiscuous mode [ 147.013319][ T5712] hsr_slave_0: entered promiscuous mode [ 147.016991][ T5712] hsr_slave_1: entered promiscuous mode [ 147.020937][ T5712] debugfs: 'hsr0' already exists in 'hsr' [ 147.023487][ T5712] Cannot create hsr debugfs directory [ 147.026537][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.030084][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.042387][ T5722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.355368][ T5708] hsr_slave_0: entered promiscuous mode [ 147.358565][ T5708] hsr_slave_1: entered promiscuous mode [ 147.369848][ T5708] debugfs: 'hsr0' already exists in 'hsr' [ 147.372735][ T5708] Cannot create hsr debugfs directory [ 147.481241][ T5721] hsr_slave_0: entered promiscuous mode [ 147.484682][ T5721] hsr_slave_1: entered promiscuous mode [ 147.498138][ T5721] debugfs: 'hsr0' already exists in 'hsr' [ 147.518381][ T5721] Cannot create hsr debugfs directory [ 147.548638][ T5722] hsr_slave_0: entered promiscuous mode [ 147.551966][ T5722] hsr_slave_1: entered promiscuous mode [ 147.555041][ T5722] debugfs: 'hsr0' already exists in 'hsr' [ 147.557520][ T5722] Cannot create hsr debugfs directory [ 147.981876][ T5716] Bluetooth: hci1: command tx timeout [ 148.217938][ T5706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.222373][ T5716] Bluetooth: hci3: command tx timeout [ 148.224682][ T5716] Bluetooth: hci2: command tx timeout [ 148.248608][ T5706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.298443][ T5706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.310920][ T5706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.463434][ T5715] Bluetooth: hci4: command tx timeout [ 148.539896][ T5715] Bluetooth: hci5: command tx timeout [ 148.693419][ T5706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.720218][ T5721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.750641][ T5721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.766754][ T5721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.779860][ T5715] Bluetooth: hci6: command tx timeout [ 148.791398][ T5706] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.811957][ T5721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.868193][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.871593][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.881272][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.884444][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.987437][ T5709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.001149][ T5709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.063649][ T5709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.080527][ T5709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.580793][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.649140][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.698097][ T5708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.762646][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.765942][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.773117][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.776182][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.783735][ T5708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.830109][ T5708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.851022][ T5708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.897838][ T5709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.033111][ T5721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.037447][ T5721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.102497][ T5722] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.136963][ T5709] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.162331][ T5706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.195795][ T5722] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.214526][ T5722] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.368511][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.372016][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.410633][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.413717][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.417999][ T5722] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.776752][ T5709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.809765][ T5709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.822997][ T5712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.868425][ T5712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.952239][ T5706] veth0_vlan: entered promiscuous mode [ 151.013459][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.017581][ T5712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 151.060649][ T5712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.230985][ T5706] veth1_vlan: entered promiscuous mode [ 151.314871][ T5708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.422472][ T5708] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.596444][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.599793][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.622382][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.625566][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.645056][ T5706] veth0_macvtap: entered promiscuous mode [ 151.654911][ T5722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.724044][ T5709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.734077][ T5706] veth1_macvtap: entered promiscuous mode [ 151.787456][ T5722] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.862546][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.868983][ T5712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.918134][ T1048] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.921265][ T1048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.936585][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.043650][ T5709] veth0_vlan: entered promiscuous mode [ 152.137858][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.141242][ T1048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.185681][ T5709] veth1_vlan: entered promiscuous mode [ 152.189546][ T1045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.202545][ T5712] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.237926][ T1045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.250296][ T1045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.254280][ T1045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.411676][ T1048] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.414860][ T1048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.463395][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.466376][ T1048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.536164][ T5709] veth0_macvtap: entered promiscuous mode [ 152.610644][ T5721] veth0_vlan: entered promiscuous mode [ 152.617788][ T5721] veth1_vlan: entered promiscuous mode [ 152.665765][ T5709] veth1_macvtap: entered promiscuous mode [ 152.769664][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.773035][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.867883][ T5708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.882963][ T5721] veth0_macvtap: entered promiscuous mode [ 152.888174][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.973057][ T5721] veth1_macvtap: entered promiscuous mode [ 153.007670][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.024805][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.035448][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.052830][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.133076][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.186428][ T54] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.380363][ T54] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 2025/10/17 03:57:02 executed programs: 12 [ 153.501279][ T54] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.562975][ T5708] veth0_vlan: entered promiscuous mode [ 153.620324][ T54] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.642549][ T5708] veth1_vlan: entered promiscuous mode [ 153.647222][ T54] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.680852][ T54] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.684872][ T54] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.732984][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.866127][ T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.926881][ T5708] veth0_macvtap: entered promiscuous mode [ 153.951409][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.955395][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.965751][ T5712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.055415][ T5708] veth1_macvtap: entered promiscuous mode [ 154.131419][ T5708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.178580][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.199183][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.257549][ T5708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.299051][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.340454][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.369709][ T1048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.373758][ T1048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.377593][ T1048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.523222][ T1048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.542542][ T5935] loop0: detected capacity change from 0 to 32768 [ 154.644031][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.689207][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.696700][ T5712] veth0_vlan: entered promiscuous mode [ 155.013068][ T5712] veth1_vlan: entered promiscuous mode [ 155.049665][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.053116][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.410954][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.414414][ T5722] veth0_vlan: entered promiscuous mode [ 155.440385][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.534968][ T5712] veth0_macvtap: entered promiscuous mode [ 155.561029][ T5722] veth1_vlan: entered promiscuous mode [ 155.634744][ T5712] veth1_macvtap: entered promiscuous mode [ 155.771141][ T5722] veth0_macvtap: entered promiscuous mode [ 155.851824][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.891640][ T5722] veth1_macvtap: entered promiscuous mode [ 155.984274][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.033976][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.126231][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.155043][ T5953] loop0: detected capacity change from 0 to 32768 [ 156.158954][ T1041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.177729][ T1041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.246135][ T1041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.260570][ T1041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.295568][ T1041] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.524528][ T1041] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.687502][ T1041] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.693578][ T1041] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.336729][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.383522][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.671667][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.687611][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.757097][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.786081][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.955849][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.987146][ T5967] loop0: detected capacity change from 0 to 32768 [ 158.001268][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/17 03:57:08 executed programs: 24 [ 159.921594][ T5985] loop0: detected capacity change from 0 to 32768 [ 161.610663][ T6001] loop0: detected capacity change from 0 to 32768 [ 163.413767][ T6019] loop0: detected capacity change from 0 to 32768 2025/10/17 03:57:13 executed programs: 39 [ 165.149192][ T6037] loop0: detected capacity change from 0 to 32768 [ 166.908219][ T6057] loop0: detected capacity change from 0 to 32768 [ 168.585936][ T6071] loop0: detected capacity change from 0 to 32768 [ 170.305306][ T6090] loop0: detected capacity change from 0 to 32768 2025/10/17 03:57:19 executed programs: 55 [ 171.922682][ T6107] loop0: detected capacity change from 0 to 32768 [ 173.505047][ T6125] loop0: detected capacity change from 0 to 32768 [ 175.029091][ T6144] loop0: detected capacity change from 0 to 32768 2025/10/17 03:57:24 executed programs: 71 [ 176.750358][ T6157] loop0: detected capacity change from 0 to 32768 [ 178.372063][ T6175] loop0: detected capacity change from 0 to 32768 [ 179.819102][ T6192] loop0: detected capacity change from 0 to 32768 2025/10/17 03:57:29 executed programs: 87 [ 181.487996][ T6204] loop0: detected capacity change from 0 to 32768 [ 182.888430][ T6216] loop0: detected capacity change from 0 to 32768 [ 184.487884][ T6222] loop0: detected capacity change from 0 to 32768 [ 186.183989][ T6240] loop0: detected capacity change from 0 to 32768 2025/10/17 03:57:35 executed programs: 105 [ 187.806463][ T6249] loop0: detected capacity change from 0 to 32768 [ 189.392665][ T6261] loop0: detected capacity change from 0 to 32768 [ 190.961120][ T6273] loop0: detected capacity change from 0 to 32768 [ 192.350153][ T6279] loop0: detected capacity change from 0 to 32768 2025/10/17 03:57:41 executed programs: 124 [ 193.783889][ T6291] loop0: detected capacity change from 0 to 32768 [ 195.226496][ T6299] loop0: detected capacity change from 0 to 32768 [ 196.630096][ T6311] loop0: detected capacity change from 0 to 32768 2025/10/17 03:57:46 executed programs: 143 [ 198.012853][ T6319] loop0: detected capacity change from 0 to 32768 [ 199.357820][ T6329] loop0: detected capacity change from 0 to 32768 [ 199.442759][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.445843][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.750368][ T6337] loop0: detected capacity change from 0 to 32768 [ 202.184005][ T6349] loop0: detected capacity change from 0 to 32768 2025/10/17 03:57:52 executed programs: 162 [ 203.559755][ T6361] loop0: detected capacity change from 0 to 32768 [ 203.836686][ T9] ================================================================== [ 203.840026][ T9] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x2ca/0x550 [ 203.843346][ T9] Read of size 8 at addr ffff88805101d358 by task kworker/0:0/9 [ 203.847426][ T9] [ 203.848521][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 203.848533][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.848542][ T9] Workqueue: events hci_uart_write_work [ 203.848561][ T9] Call Trace: [ 203.848568][ T9] [ 203.848573][ T9] dump_stack_lvl+0x189/0x250 [ 203.848587][ T9] ? __virt_addr_valid+0x1c8/0x5c0 [ 203.848598][ T9] ? rcu_is_watching+0x15/0xb0 [ 203.848612][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.848622][ T9] ? rcu_is_watching+0x15/0xb0 [ 203.848635][ T9] ? lock_release+0x4b/0x3e0 [ 203.848646][ T9] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 203.848709][ T9] ? __virt_addr_valid+0x1c8/0x5c0 [ 203.848719][ T9] ? __virt_addr_valid+0x4a5/0x5c0 [ 203.848729][ T9] print_report+0xca/0x240 [ 203.848746][ T9] ? hci_uart_write_work+0x2ca/0x550 [ 203.848759][ T9] kasan_report+0x118/0x150 [ 203.848800][ T9] ? hci_uart_write_work+0x2ca/0x550 [ 203.848815][ T9] ? __pfx_pty_write+0x10/0x10 [ 203.848827][ T9] hci_uart_write_work+0x2ca/0x550 [ 203.848844][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 203.848858][ T9] process_scheduled_works+0xae1/0x17b0 [ 203.848877][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 203.848893][ T9] worker_thread+0x8a0/0xda0 [ 203.848913][ T9] kthread+0x711/0x8a0 [ 203.848923][ T9] ? __pfx_worker_thread+0x10/0x10 [ 203.848936][ T9] ? __pfx_kthread+0x10/0x10 [ 203.848946][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 203.848959][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.848973][ T9] ? __pfx_kthread+0x10/0x10 [ 203.848983][ T9] ret_from_fork+0x4bc/0x870 [ 203.848997][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 203.849011][ T9] ? __pfx_kthread+0x10/0x10 [ 203.849020][ T9] ret_from_fork_asm+0x1a/0x30 [ 203.849035][ T9] [ 203.849038][ T9] [ 203.927811][ T9] Allocated by task 5954: [ 203.929701][ T9] kasan_save_track+0x3e/0x80 [ 203.931699][ T9] __kasan_slab_alloc+0x6c/0x80 [ 203.933801][ T9] kmem_cache_alloc_node_noprof+0x433/0x710 [ 203.936340][ T9] __alloc_skb+0x112/0x2d0 [ 203.938235][ T9] h5_prepare_pkt+0x184/0x530 [ 203.940293][ T9] h5_dequeue+0x197/0x790 [ 203.942171][ T9] hci_uart_write_work+0x24a/0x550 [ 203.944506][ T9] process_scheduled_works+0xae1/0x17b0 [ 203.947457][ T9] worker_thread+0x8a0/0xda0 [ 203.949371][ T9] kthread+0x711/0x8a0 [ 203.951108][ T9] ret_from_fork+0x4bc/0x870 [ 203.953276][ T9] ret_from_fork_asm+0x1a/0x30 [ 203.955420][ T9] [ 203.956612][ T9] The buggy address belongs to the object at ffff88805101d280 [ 203.956612][ T9] which belongs to the cache skbuff_head_cache of size 240 [ 203.962765][ T9] The buggy address is located 216 bytes inside of [ 203.962765][ T9] freed 240-byte region [ffff88805101d280, ffff88805101d370) [ 203.968618][ T9] [ 203.969666][ T9] The buggy address belongs to the physical page: [ 203.972515][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5101d [ 203.976256][ T9] anon flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 203.979551][ T9] page_type: f5(slab) [ 203.981223][ T9] raw: 04fff00000000000 ffff88801bee0c80 0000000000000000 dead000000000001 [ 203.984944][ T9] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 203.988714][ T9] page dumped because: kasan: bad access detected [ 203.991563][ T9] page_owner tracks the page as allocated [ 203.994049][ T9] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1041, tgid 1041 (kworker/u4:6), ts 169169994502, free_ts 169163103384 [ 204.002147][ T9] post_alloc_hook+0x240/0x2a0 [ 204.004226][ T9] get_page_from_freelist+0x2365/0x2440 [ 204.006572][ T9] __alloc_frozen_pages_noprof+0x181/0x370 [ 204.008984][ T9] alloc_pages_mpol+0x232/0x4a0 [ 204.011069][ T9] allocate_slab+0x96/0x3a0 [ 204.013000][ T9] ___slab_alloc+0xe94/0x18a0 [ 204.015085][ T9] __slab_alloc+0x65/0x100 [ 204.016968][ T9] kmem_cache_alloc_node_noprof+0x4c5/0x710 [ 204.019569][ T9] __alloc_skb+0x112/0x2d0 [ 204.021392][ T9] nsim_dev_trap_report_work+0x29a/0xb80 [ 204.023870][ T9] process_scheduled_works+0xae1/0x17b0 [ 204.026314][ T9] worker_thread+0x8a0/0xda0 [ 204.028294][ T9] kthread+0x711/0x8a0 [ 204.030026][ T9] ret_from_fork+0x4bc/0x870 [ 204.032054][ T9] ret_from_fork_asm+0x1a/0x30 [ 204.034225][ T9] page last free pid 6091 tgid 6091 stack trace: [ 204.037100][ T9] __free_frozen_pages+0xbc4/0xd30 [ 204.039462][ T9] __mmdrop+0xb5/0x570 [ 204.041322][ T9] exit_mm+0x1da/0x2c0 [ 204.043212][ T9] do_exit+0x648/0x2300 [ 204.045132][ T9] do_group_exit+0x21c/0x2d0 [ 204.047182][ T9] __x64_sys_exit_group+0x3f/0x40 [ 204.049240][ T9] x64_sys_call+0x21f7/0x2200 [ 204.051205][ T9] do_syscall_64+0xfa/0xfa0 [ 204.053018][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.055698][ T9] [ 204.056742][ T9] Memory state around the buggy address: [ 204.059191][ T9] ffff88805101d200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 204.062643][ T9] ffff88805101d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.066082][ T9] >ffff88805101d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 204.069494][ T9] ^ [ 204.072468][ T9] ffff88805101d380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 204.075963][ T9] ffff88805101d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.079444][ T9] ================================================================== [ 204.888523][ T6367] loop0: detected capacity change from 0 to 32768 [ 205.487410][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 205.490614][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 205.494496][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.499035][ T9] Workqueue: events hci_uart_write_work [ 205.501456][ T9] Call Trace: [ 205.502947][ T9] [ 205.504329][ T9] dump_stack_lvl+0x99/0x250 [ 205.506419][ T9] ? __asan_memcpy+0x40/0x70 [ 205.508459][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.510678][ T9] ? __pfx__printk+0x10/0x10 [ 205.512645][ T9] vpanic+0x237/0x6d0 [ 205.514412][ T9] ? __pfx_vpanic+0x10/0x10 [ 205.516426][ T9] ? preempt_schedule+0xae/0xc0 [ 205.518691][ T9] ? __pfx_preempt_schedule+0x10/0x10 [ 205.521008][ T9] panic+0xb9/0xc0 [ 205.522658][ T9] ? __pfx_panic+0x10/0x10 [ 205.524585][ T9] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 205.527023][ T9] ? is_module_address+0x17/0xf0 [ 205.529429][ T9] ? hci_uart_write_work+0x2ca/0x550 [ 205.532508][ T9] check_panic_on_warn+0x89/0xb0 [ 205.534638][ T9] ? hci_uart_write_work+0x2ca/0x550 [ 205.536924][ T9] end_report+0x78/0x160 [ 205.538813][ T9] kasan_report+0x129/0x150 [ 205.540741][ T9] ? hci_uart_write_work+0x2ca/0x550 [ 205.543107][ T9] ? __pfx_pty_write+0x10/0x10 [ 205.545174][ T9] hci_uart_write_work+0x2ca/0x550 [ 205.547450][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 205.550068][ T9] process_scheduled_works+0xae1/0x17b0 [ 205.552455][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 205.555157][ T9] worker_thread+0x8a0/0xda0 [ 205.557191][ T9] kthread+0x711/0x8a0 [ 205.558967][ T9] ? __pfx_worker_thread+0x10/0x10 [ 205.561270][ T9] ? __pfx_kthread+0x10/0x10 [ 205.563395][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.565721][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.567978][ T9] ? __pfx_kthread+0x10/0x10 [ 205.570022][ T9] ret_from_fork+0x4bc/0x870 [ 205.572030][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 205.574348][ T9] ? __pfx_kthread+0x10/0x10 [ 205.576353][ T9] ret_from_fork_asm+0x1a/0x30 [ 205.578601][ T9] [ 205.580312][ T9] Kernel Offset: disabled [ 205.582191][ T9] Rebooting in 86400 seconds..