Warning: Permanently added '[localhost]:41823' (ED25519) to the list of known hosts.
2025/11/21 17:21:07 parsed 1 programs
syzkaller login: [ 62.418306][ T5818] cgroup: Unknown subsys name 'net'
[ 62.519803][ T5818] cgroup: Unknown subsys name 'cpuset'
[ 62.523753][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 64.299776][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 66.643949][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 67.777618][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 67.788756][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 67.794208][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 67.799667][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 67.807979][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 68.343240][ T5872] chnl_net:caif_netlink_parms(): no params data found
[ 68.655284][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[ 68.658289][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[ 68.660441][ T5872] bridge_slave_0: entered allmulticast mode
[ 68.663159][ T5872] bridge_slave_0: entered promiscuous mode
[ 68.688229][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[ 68.690593][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[ 68.693063][ T5872] bridge_slave_1: entered allmulticast mode
[ 68.696617][ T5872] bridge_slave_1: entered promiscuous mode
[ 68.769750][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 68.790031][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 68.885626][ T5872] team0: Port device team_slave_0 added
[ 68.910295][ T5872] team0: Port device team_slave_1 added
[ 68.993289][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 68.996288][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 69.016885][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 69.028370][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 69.031036][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 69.056884][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 69.238987][ T5872] hsr_slave_0: entered promiscuous mode
[ 69.244694][ T5872] hsr_slave_1: entered promiscuous mode
[ 69.381312][ T722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.383988][ T722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.497331][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.503090][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.616064][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 69.634161][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 69.640303][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 69.648390][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 69.742687][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[ 69.759002][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[ 69.765905][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.768503][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 69.776668][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.778902][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 69.914148][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 69.952876][ T5872] veth0_vlan: entered promiscuous mode
[ 69.961802][ T5872] veth1_vlan: entered promiscuous mode
[ 69.985621][ T5872] veth0_macvtap: entered promiscuous mode
[ 69.990881][ T5872] veth1_macvtap: entered promiscuous mode
[ 70.002518][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 70.012027][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 70.024541][ T5884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.028667][ T5884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.035097][ T5884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.041311][ T5884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/11/21 17:21:16 executed programs: 0
[ 70.218776][ T5930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 70.222363][ T5930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 70.226054][ T5930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 70.232479][ T5930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 70.235652][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 70.244815][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 70.245282][ T5930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 70.250634][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 70.253544][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 70.254402][ T5930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 70.260103][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 70.260660][ T5930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 70.262625][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 70.269358][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 70.269912][ T5884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 70.290802][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 70.342326][ T5884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 70.419386][ T5884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 70.514791][ T5884] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 70.698238][ T5926] chnl_net:caif_netlink_parms(): no params data found
[ 70.749511][ T5927] chnl_net:caif_netlink_parms(): no params data found
[ 70.766216][ T5928] chnl_net:caif_netlink_parms(): no params data found
[ 70.865268][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.867703][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.869819][ T5926] bridge_slave_0: entered allmulticast mode
[ 70.872563][ T5926] bridge_slave_0: entered promiscuous mode
[ 70.915384][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.918417][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.921278][ T5926] bridge_slave_1: entered allmulticast mode
[ 70.924322][ T5926] bridge_slave_1: entered promiscuous mode
[ 70.983683][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.007452][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.009753][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.012204][ T5927] bridge_slave_0: entered allmulticast mode
[ 71.015072][ T5927] bridge_slave_0: entered promiscuous mode
[ 71.019451][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.021799][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.024022][ T5927] bridge_slave_1: entered allmulticast mode
[ 71.027250][ T5927] bridge_slave_1: entered promiscuous mode
[ 71.032789][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.036161][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.038810][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.041098][ T5928] bridge_slave_0: entered allmulticast mode
[ 71.044003][ T5928] bridge_slave_0: entered promiscuous mode
[ 71.048092][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.050556][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.053405][ T5928] bridge_slave_1: entered allmulticast mode
[ 71.057247][ T5928] bridge_slave_1: entered promiscuous mode
[ 71.123993][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.132037][ T5926] team0: Port device team_slave_0 added
[ 71.146638][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.162680][ T5926] team0: Port device team_slave_1 added
[ 71.168352][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.184725][ T5927] team0: Port device team_slave_0 added
[ 71.198620][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.212593][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.214643][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.223194][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.229604][ T5927] team0: Port device team_slave_1 added
[ 71.276051][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.279985][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.289265][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.304171][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.307647][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.316682][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.323485][ T5928] team0: Port device team_slave_0 added
[ 71.326551][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.329296][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.337809][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.349021][ T5928] team0: Port device team_slave_1 added
[ 71.422797][ T5926] hsr_slave_0: entered promiscuous mode
[ 71.425341][ T5926] hsr_slave_1: entered promiscuous mode
[ 71.429244][ T5926] debugfs: 'hsr0' already exists in 'hsr'
[ 71.431858][ T5926] Cannot create hsr debugfs directory
[ 71.444933][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.448301][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.456096][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.472098][ T5927] hsr_slave_0: entered promiscuous mode
[ 71.474626][ T5927] hsr_slave_1: entered promiscuous mode
[ 71.477531][ T5927] debugfs: 'hsr0' already exists in 'hsr'
[ 71.479212][ T5927] Cannot create hsr debugfs directory
[ 71.492647][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.494781][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.502858][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.594811][ T5928] hsr_slave_0: entered promiscuous mode
[ 71.598507][ T5928] hsr_slave_1: entered promiscuous mode
[ 71.600767][ T5928] debugfs: 'hsr0' already exists in 'hsr'
[ 71.602712][ T5928] Cannot create hsr debugfs directory
[ 71.611327][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.614517][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.328942][ T5874] Bluetooth: hci2: command tx timeout
[ 72.329474][ T5935] Bluetooth: hci0: command tx timeout
[ 72.337116][ T5935] Bluetooth: hci1: command tx timeout
[ 73.533129][ T5884] bridge_slave_1: left allmulticast mode
[ 73.534965][ T5884] bridge_slave_1: left promiscuous mode
[ 73.541361][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.552046][ T5884] bridge_slave_0: left allmulticast mode
[ 73.554031][ T5884] bridge_slave_0: left promiscuous mode
[ 73.555742][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.820793][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 73.826163][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 73.832265][ T5884] bond0 (unregistering): Released all slaves
[ 73.960917][ T5884] hsr_slave_0: left promiscuous mode
[ 73.963805][ T5884] hsr_slave_1: left promiscuous mode
[ 73.967982][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 73.971300][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 73.975481][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 73.979421][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 74.004379][ T5884] veth1_macvtap: left promiscuous mode
[ 74.009349][ T5884] veth0_macvtap: left promiscuous mode
[ 74.017805][ T5884] veth1_vlan: left promiscuous mode
[ 74.020232][ T5884] veth0_vlan: left promiscuous mode
[ 74.408229][ T5935] Bluetooth: hci2: command tx timeout
[ 74.412001][ T5884] team0 (unregistering): Port device team_slave_1 removed
[ 74.420891][ T5935] Bluetooth: hci1: command tx timeout
[ 74.420949][ T5874] Bluetooth: hci0: command tx timeout
[ 74.440834][ T5884] team0 (unregistering): Port device team_slave_0 removed
[ 74.938538][ T5926] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 74.951280][ T5926] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 74.979434][ T5926] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 74.998515][ T5926] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.036697][ T5927] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 75.049514][ T5927] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 75.063868][ T5927] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 75.069370][ T5927] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 75.280345][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 75.293666][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 75.336396][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 75.342017][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 75.501335][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.525027][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.536016][ T5927] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.549499][ T722] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.551770][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.573186][ T5926] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.580875][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.583162][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.599449][ T722] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.601774][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.614867][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.622781][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.625780][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.684527][ T5928] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.695204][ T722] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.697713][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.714038][ T722] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.717167][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.774733][ T5928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 75.783671][ T5928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 75.873107][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.904579][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.954498][ T5926] veth0_vlan: entered promiscuous mode
[ 75.960676][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.974179][ T5926] veth1_vlan: entered promiscuous mode
[ 75.997832][ T5927] veth0_vlan: entered promiscuous mode
[ 76.017913][ T5927] veth1_vlan: entered promiscuous mode
[ 76.026176][ T5928] veth0_vlan: entered promiscuous mode
[ 76.042473][ T5926] veth0_macvtap: entered promiscuous mode
[ 76.049528][ T5926] veth1_macvtap: entered promiscuous mode
[ 76.056008][ T5928] veth1_vlan: entered promiscuous mode
[ 76.076225][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.083769][ T5927] veth0_macvtap: entered promiscuous mode
[ 76.090518][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.098677][ T5927] veth1_macvtap: entered promiscuous mode
[ 76.108357][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.114555][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.121018][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.125846][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.134780][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.149496][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.171192][ T5928] veth0_macvtap: entered promiscuous mode
[ 76.189345][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.206158][ T5928] veth1_macvtap: entered promiscuous mode
[ 76.212869][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.232513][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.239526][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.272927][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.280146][ T722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.288398][ T722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.310259][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.360090][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.363016][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.378403][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.382670][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.385681][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.396330][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.434407][ T722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.443306][ T722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/11/21 17:21:23 executed programs: 6
[ 76.487038][ T5874] Bluetooth: hci0: command tx timeout
[ 76.498082][ T5874] Bluetooth: hci1: command tx timeout
[ 76.498930][ T5935] Bluetooth: hci2: command tx timeout
[ 76.509501][ T6017] ==================================================================
[ 76.512142][ T6017] BUG: KASAN: slab-use-after-free in tcp_ioctl+0x76d/0x860
[ 76.514868][ T6017] Read of size 4 at addr ffff8881023c66e4 by task syz.0.21/6017
[ 76.517566][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.519226][ T6017]
[ 76.521668][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.522777][ T6017] CPU: 0 UID: 0 PID: 6017 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full)
[ 76.522799][ T6017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 76.522810][ T6017] Call Trace:
[ 76.522819][ T6017]
[ 76.522826][ T6017] dump_stack_lvl+0x189/0x250
[ 76.522844][ T6017] ? __kasan_check_byte+0x12/0x40
[ 76.522856][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.522866][ T6017] ? lock_release+0x4b/0x3e0
[ 76.522881][ T6017] ? __virt_addr_valid+0x4a5/0x5c0
[ 76.522902][ T6017] print_report+0xca/0x240
[ 76.522920][ T6017] ? tcp_ioctl+0x76d/0x860
[ 76.522933][ T6017] kasan_report+0x118/0x150
[ 76.522945][ T6017] ? stack_trace_save+0x9c/0xe0
[ 76.522961][ T6017] ? tcp_ioctl+0x76d/0x860
[ 76.522975][ T6017] tcp_ioctl+0x76d/0x860
[ 76.522988][ T6017] ? kasan_save_track+0x4f/0x80
[ 76.522999][ T6017] ? kasan_save_track+0x3e/0x80
[ 76.523010][ T6017] ? __kasan_save_free_info+0x46/0x50
[ 76.523028][ T6017] ? udp_bpf_ioctl+0xaa/0x1d0
[ 76.523050][ T6017] sk_ioctl+0x3c7/0x600
[ 76.523059][ T6017] ? __pfx_sk_ioctl+0x10/0x10
[ 76.523079][ T6017] inet_ioctl+0x416/0x4c0
[ 76.523095][ T6017] ? __pfx_inet_ioctl+0x10/0x10
[ 76.523108][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 76.523129][ T6017] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 76.523145][ T6017] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 76.523167][ T6017] sock_do_ioctl+0xdc/0x300
[ 76.523188][ T6017] ? __pfx_sock_do_ioctl+0x10/0x10
[ 76.523212][ T6017] sock_ioctl+0x576/0x790
[ 76.523228][ T6017] ? __pfx_sock_ioctl+0x10/0x10
[ 76.523242][ T6017] ? __fget_files+0x3a0/0x420
[ 76.523257][ T6017] ? __fget_files+0x2a/0x420
[ 76.523273][ T6017] ? bpf_lsm_file_ioctl+0x9/0x20
[ 76.523290][ T6017] ? __pfx_sock_ioctl+0x10/0x10
[ 76.523307][ T6017] __se_sys_ioctl+0xfc/0x170
[ 76.523320][ T6017] do_syscall_64+0xfa/0xfa0
[ 76.523335][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 76.523347][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.523361][ T6017] ? exc_page_fault+0xab/0x100
[ 76.523373][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.523387][ T6017] RIP: 0033:0x7fd75e18f749
[ 76.523413][ T6017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.523422][ T6017] RSP: 002b:00007fd75f094038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 76.523438][ T6017] RAX: ffffffffffffffda RBX: 00007fd75e3e5fa0 RCX: 00007fd75e18f749
[ 76.523448][ T6017] RDX: 0000200000000080 RSI: 000000000000894b RDI: 0000000000000003
[ 76.523457][ T6017] RBP: 00007fd75e213f91 R08: 0000000000000000 R09: 0000000000000000
[ 76.523466][ T6017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 76.523474][ T6017] R13: 00007fd75e3e6038 R14: 00007fd75e3e5fa0 R15: 00007ffc97663258
[ 76.523488][ T6017]
[ 76.523493][ T6017]
[ 76.643984][ T6017] Allocated by task 5843:
[ 76.645621][ T6017] kasan_save_track+0x3e/0x80
[ 76.647523][ T6017] __kasan_slab_alloc+0x6c/0x80
[ 76.649526][ T6017] kmem_cache_alloc_noprof+0x367/0x6e0
[ 76.652736][ T6017] sk_prot_alloc+0x57/0x220
[ 76.654379][ T6017] sk_alloc+0x3a/0x370
[ 76.655898][ T6017] inet_create+0x7a0/0x1000
[ 76.658134][ T6017] __sock_create+0x4b3/0x9f0
[ 76.660137][ T6017] inet_ctl_sock_create+0x9a/0x220
[ 76.662312][ T6017] igmp_net_init+0xb9/0x150
[ 76.664054][ T6017] ops_init+0x35c/0x5c0
[ 76.665687][ T6017] setup_net+0xfe/0x320
[ 76.667616][ T6017] copy_net_ns+0x34e/0x4e0
[ 76.669493][ T6017] create_new_namespaces+0x3f3/0x720
[ 76.671879][ T6017] unshare_nsproxy_namespaces+0x11c/0x170
[ 76.674250][ T6017] ksys_unshare+0x4c8/0x8c0
[ 76.676145][ T6017] __x64_sys_unshare+0x38/0x50
[ 76.678134][ T6017] do_syscall_64+0xfa/0xfa0
[ 76.679874][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.682224][ T6017]
[ 76.683228][ T6017] Freed by task 5682:
[ 76.684976][ T6017] kasan_save_track+0x3e/0x80
[ 76.686728][ T6017] __kasan_save_free_info+0x46/0x50
[ 76.689338][ T6017] __kasan_slab_free+0x5c/0x80
[ 76.691284][ T6017] kmem_cache_free+0x19b/0x690
[ 76.693113][ T6017] __sk_destruct+0x4d2/0x660
[ 76.694840][ T6017] inet_release+0x144/0x190
[ 76.696528][ T6017] sock_release+0x85/0x150
[ 76.698209][ T6017] ops_undo_list+0x49a/0x990
[ 76.700115][ T6017] cleanup_net+0x4d8/0x820
[ 76.701829][ T6017] process_scheduled_works+0xae1/0x17b0
[ 76.704007][ T6017] worker_thread+0x8a0/0xda0
[ 76.705759][ T6017] kthread+0x711/0x8a0
[ 76.707287][ T6017] ret_from_fork+0x4bc/0x870
[ 76.708993][ T6017] ret_from_fork_asm+0x1a/0x30
[ 76.711074][ T6017]
[ 76.712021][ T6017] The buggy address belongs to the object at ffff8881023c6600
[ 76.712021][ T6017] which belongs to the cache UDP of size 1984
[ 76.717237][ T6017] The buggy address is located 228 bytes inside of
[ 76.717237][ T6017] freed 1984-byte region [ffff8881023c6600, ffff8881023c6dc0)
[ 76.723062][ T6017]
[ 76.724118][ T6017] The buggy address belongs to the physical page:
[ 76.727163][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1023c0
[ 76.730419][ T6017] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 76.734939][ T6017] memcg:ffff888114298b01
[ 76.736884][ T6017] anon flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[ 76.740586][ T6017] page_type: f5(slab)
[ 76.742197][ T6017] raw: 017ff00000000040 ffff888104ab6640 0000000000000000 0000000000000001
[ 76.746013][ T6017] raw: 0000000000000000 00000000800f000f 00000000f5000000 ffff888114298b01
[ 76.753172][ T6017] head: 017ff00000000040 ffff888104ab6640 0000000000000000 0000000000000001
[ 76.759010][ T6017] head: 0000000000000000 00000000800f000f 00000000f5000000 ffff888114298b01
[ 76.763488][ T6017] head: 017ff00000000003 ffffea000408f001 00000000ffffffff 00000000ffffffff
[ 76.769090][ T6017] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 76.775441][ T6017] page dumped because: kasan: bad access detected
[ 76.779977][ T6017] page_owner tracks the page as allocated
[ 76.783274][ T6017] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4132853290, free_ts 0
[ 76.792386][ T6017] post_alloc_hook+0x240/0x2a0
[ 76.794771][ T6017] get_page_from_freelist+0x2365/0x2440
[ 76.796884][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 76.798629][ T6017] alloc_pages_mpol+0x232/0x4a0
[ 76.800065][ T6017] allocate_slab+0x96/0x350
[ 76.801350][ T6017] ___slab_alloc+0xf56/0x1990
[ 76.802709][ T6017] __slab_alloc+0x65/0x100
[ 76.804013][ T6017] kmem_cache_alloc_noprof+0x3f9/0x6e0
[ 76.805738][ T6017] sk_prot_alloc+0x57/0x220
[ 76.807610][ T6017] sk_alloc+0x3a/0x370
[ 76.808843][ T6017] inet_create+0x7a0/0x1000
[ 76.810267][ T6017] __sock_create+0x4b3/0x9f0
[ 76.812913][ T6017] inet_ctl_sock_create+0x9a/0x220
[ 76.816658][ T6017] igmp_net_init+0xb9/0x150
[ 76.818494][ T6017] ops_init+0x35c/0x5c0
[ 76.819863][ T6017] register_pernet_operations+0x336/0x800
[ 76.822566][ T6017] page_owner free stack trace missing
[ 76.824535][ T6017]
[ 76.825440][ T6017] Memory state around the buggy address:
[ 76.827800][ T6017] ffff8881023c6580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 76.830857][ T6017] ffff8881023c6600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 76.833981][ T6017] >ffff8881023c6680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 76.836692][ T6017] ^
[ 76.838956][ T6017] ffff8881023c6700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 76.841324][ T6017] ffff8881023c6780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 76.843875][ T6017] ==================================================================
[ 76.858506][ T6017] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 76.861317][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full)
[ 76.864014][ T6017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 76.866997][ T6017] Call Trace:
[ 76.868065][ T6017]
[ 76.869069][ T6017] dump_stack_lvl+0x99/0x250
[ 76.871441][ T6017] ? __asan_memcpy+0x40/0x70
[ 76.873287][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.875251][ T6017] ? __pfx__printk+0x10/0x10
[ 76.877392][ T6017] vpanic+0x237/0x6d0
[ 76.878930][ T6017] ? __pfx_vpanic+0x10/0x10
[ 76.880575][ T6017] ? preempt_schedule+0xae/0xc0
[ 76.882390][ T6017] ? __pfx_preempt_schedule+0x10/0x10
[ 76.884493][ T6017] panic+0xb9/0xc0
[ 76.886151][ T6017] ? __pfx_panic+0x10/0x10
[ 76.887700][ T6017] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 76.889575][ T6017] ? tcp_ioctl+0x76d/0x860
[ 76.891109][ T6017] check_panic_on_warn+0x89/0xb0
[ 76.892644][ T6017] ? tcp_ioctl+0x76d/0x860
[ 76.894037][ T6017] end_report+0x78/0x160
[ 76.895476][ T6017] kasan_report+0x129/0x150
[ 76.897226][ T6017] ? stack_trace_save+0x9c/0xe0
[ 76.899006][ T6017] ? tcp_ioctl+0x76d/0x860
[ 76.900704][ T6017] tcp_ioctl+0x76d/0x860
[ 76.902160][ T6017] ? kasan_save_track+0x4f/0x80
[ 76.903708][ T6017] ? kasan_save_track+0x3e/0x80
[ 76.905189][ T6017] ? __kasan_save_free_info+0x46/0x50
[ 76.906835][ T6017] ? udp_bpf_ioctl+0xaa/0x1d0
[ 76.908240][ T6017] sk_ioctl+0x3c7/0x600
[ 76.909517][ T6017] ? __pfx_sk_ioctl+0x10/0x10
[ 76.910953][ T6017] inet_ioctl+0x416/0x4c0
[ 76.912238][ T6017] ? __pfx_inet_ioctl+0x10/0x10
[ 76.913700][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 76.915364][ T6017] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 76.917004][ T6017] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 76.918477][ T6017] sock_do_ioctl+0xdc/0x300
[ 76.919860][ T6017] ? __pfx_sock_do_ioctl+0x10/0x10
[ 76.921403][ T6017] sock_ioctl+0x576/0x790
[ 76.922719][ T6017] ? __pfx_sock_ioctl+0x10/0x10
[ 76.924219][ T6017] ? __fget_files+0x3a0/0x420
[ 76.925616][ T6017] ? __fget_files+0x2a/0x420
[ 76.927094][ T6017] ? bpf_lsm_file_ioctl+0x9/0x20
[ 76.928881][ T6017] ? __pfx_sock_ioctl+0x10/0x10
[ 76.930428][ T6017] __se_sys_ioctl+0xfc/0x170
[ 76.931834][ T6017] do_syscall_64+0xfa/0xfa0
[ 76.933181][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 76.934757][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.936512][ T6017] ? exc_page_fault+0xab/0x100
[ 76.938117][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.940376][ T6017] RIP: 0033:0x7fd75e18f749
[ 76.941731][ T6017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.947561][ T6017] RSP: 002b:00007fd75f094038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 76.951042][ T6017] RAX: ffffffffffffffda RBX: 00007fd75e3e5fa0 RCX: 00007fd75e18f749
[ 76.954748][ T6017] RDX: 0000200000000080 RSI: 000000000000894b RDI: 0000000000000003
[ 76.958270][ T6017] RBP: 00007fd75e213f91 R08: 0000000000000000 R09: 0000000000000000
[ 76.961595][ T6017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 76.965366][ T6017] R13: 00007fd75e3e6038 R14: 00007fd75e3e5fa0 R15: 00007ffc97663258
[ 76.971093][ T6017]
[ 76.973795][ T6017] Kernel Offset: disabled
[ 76.975108][ T6017] Rebooting in 86400 seconds..
VM DIAGNOSIS:
17:21:23 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900037a7230
R8 =ffff88816a700237 R9 =1ffff1102d4e0046 R10=dffffc0000000000 R11=ffffffff85153300
R12=dffffc0000000000 R13=ffffffff997dc93c R14=ffffffff99aeff60 R15=0000000000000000
RIP=ffffffff8515337c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd75f0946c0 ffffffff 00c00000
GS =0000 ffff88818eb38000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000440 CR3=00000001116de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd75e3ba498 00007fd75e3ba470 XMM03=00007fd75e3ba4a8 00007fd75e3ba4a0
XMM04=00007fd75ef1d100 00007fd75e3ba460 XMM05=00007fd75e3ba478 00007fd75e3ba4c0
XMM06=00007fd75e3ba4b8 00007fd75e3ba4b0 XMM07=00007fd75e3ba4a8 00007fd75e3ba4a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd75e2151cf
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1
CPU#1
RAX=ffffffff81a019af RBX=ffffffff81a0196e RCX=ffff888162edd700 RDX=0000000000000000
RSI=ffffffff8d8f5e92 RDI=ffffffff8bbf0e60 RBP=ffffc90000ac7770 RSP=ffffc90000ac7660
R8 =ffffc90000ac73e0 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819dc620
R12=0000000000000000 R13=000000000000003f R14=0000000000000200 R15=1ffff92000158ed0
RIP=ffffffff81a0199d RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f38000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000561ec50c7ee0 CR3=000000016c34e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffff00ffffffffff ff00000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ffff00ffffff ffffff0000000000 XMM05=0000000000000000 ff00ff0000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 00007fea9aa1506b
XMM08=0000000000000000 00007fea9aa150f1 XMM09=0000000000000000 00007fea9aa151cf
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000