Warning: Permanently added '[localhost]:58612' (ED25519) to the list of known hosts.
2026/05/28 12:02:40 parsed 1 programs
syzkaller login: [ 62.260213][ T5617] cgroup: Unknown subsys name 'net'
[ 62.350632][ T5617] cgroup: Unknown subsys name 'cpuset'
[ 62.357719][ T5617] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 64.210844][ T5617] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 67.233619][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 67.385474][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.398955][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.511259][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.520153][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.735877][ T5655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 67.739745][ T5655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 67.743057][ T5655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 67.747955][ T5655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 67.750976][ T5655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 68.412808][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state
[ 68.417794][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state
[ 68.420963][ T5639] bridge_slave_0: entered allmulticast mode
[ 68.424901][ T5639] bridge_slave_0: entered promiscuous mode
[ 68.444517][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state
[ 68.447028][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state
[ 68.449391][ T5639] bridge_slave_1: entered allmulticast mode
[ 68.453224][ T5639] bridge_slave_1: entered promiscuous mode
[ 68.593946][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 68.600767][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 68.660480][ T5639] team0: Port device team_slave_0 added
[ 68.680753][ T5639] team0: Port device team_slave_1 added
[ 68.750930][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 68.753856][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 68.767102][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 68.782427][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 68.785260][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 68.799075][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 68.887458][ T5639] hsr_slave_0: entered promiscuous mode
[ 68.892669][ T5639] hsr_slave_1: entered promiscuous mode
[ 69.722762][ T5639] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 69.758732][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 69.767989][ T5639] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 69.784917][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 69.802713][ T5639] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 69.818701][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 69.823723][ T5639] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 69.830858][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 70.193060][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0
[ 70.286891][ T5639] 8021q: adding VLAN 0 to HW filter on device team0
[ 70.301108][ T82] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.304614][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 70.318829][ T82] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.321393][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 70.632977][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 70.673181][ T5639] veth0_vlan: entered promiscuous mode
[ 70.684190][ T5639] veth1_vlan: entered promiscuous mode
[ 70.713989][ T5639] veth0_macvtap: entered promiscuous mode
[ 70.721538][ T5639] veth1_macvtap: entered promiscuous mode
[ 70.735001][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 70.747819][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 70.758761][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.764068][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.773433][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.778354][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/05/28 12:02:50 executed programs: 0
[ 70.942031][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 70.949844][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 70.952913][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 70.960768][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 70.966535][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 70.984284][ T5002] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 70.988421][ T5002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 70.995934][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 71.002366][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 71.009762][ T5751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 71.013704][ T5751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 71.016864][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 71.018503][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 71.020261][ T5751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 71.025128][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 71.303565][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.366845][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.463309][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.784476][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.787186][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.789890][ T5746] bridge_slave_0: entered allmulticast mode
[ 71.792663][ T5746] bridge_slave_0: entered promiscuous mode
[ 71.796727][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.799245][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.801679][ T5746] bridge_slave_1: entered allmulticast mode
[ 71.804306][ T5746] bridge_slave_1: entered promiscuous mode
[ 71.861105][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.867178][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.922790][ T5746] team0: Port device team_slave_0 added
[ 71.945182][ T5746] team0: Port device team_slave_1 added
[ 71.968630][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.971227][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.973936][ T5744] bridge_slave_0: entered allmulticast mode
[ 71.977613][ T5744] bridge_slave_0: entered promiscuous mode
[ 71.981449][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.983859][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.986675][ T5744] bridge_slave_1: entered allmulticast mode
[ 71.990134][ T5744] bridge_slave_1: entered promiscuous mode
[ 72.047989][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 72.050920][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.061657][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 72.067734][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.070875][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.074200][ T5747] bridge_slave_0: entered allmulticast mode
[ 72.079804][ T5747] bridge_slave_0: entered promiscuous mode
[ 72.101423][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 72.105645][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 72.109462][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.120039][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 72.129002][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.131396][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.134343][ T5747] bridge_slave_1: entered allmulticast mode
[ 72.137989][ T5747] bridge_slave_1: entered promiscuous mode
[ 72.150730][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 72.182953][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 72.207531][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 72.212403][ T5744] team0: Port device team_slave_0 added
[ 72.235511][ T5744] team0: Port device team_slave_1 added
[ 72.241512][ T5746] hsr_slave_0: entered promiscuous mode
[ 72.243812][ T5746] hsr_slave_1: entered promiscuous mode
[ 72.245921][ T5746] debugfs: 'hsr0' already exists in 'hsr'
[ 72.248353][ T5746] Cannot create hsr debugfs directory
[ 72.254900][ T5747] team0: Port device team_slave_0 added
[ 72.284347][ T5747] team0: Port device team_slave_1 added
[ 72.302108][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 72.304998][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.315568][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 72.334319][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 72.337432][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.347737][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 72.353926][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 72.356505][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.365631][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 72.372242][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 72.374558][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.383075][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 72.467321][ T5744] hsr_slave_0: entered promiscuous mode
[ 72.470925][ T5744] hsr_slave_1: entered promiscuous mode
[ 72.473822][ T5744] debugfs: 'hsr0' already exists in 'hsr'
[ 72.476929][ T5744] Cannot create hsr debugfs directory
[ 72.491863][ T5747] hsr_slave_0: entered promiscuous mode
[ 72.494383][ T5747] hsr_slave_1: entered promiscuous mode
[ 72.498569][ T5747] debugfs: 'hsr0' already exists in 'hsr'
[ 72.500587][ T5747] Cannot create hsr debugfs directory
[ 72.581579][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 73.037055][ T5655] Bluetooth: hci0: command tx timeout
[ 73.040022][ T5002] Bluetooth: hci2: command tx timeout
[ 73.127003][ T5002] Bluetooth: hci1: command tx timeout
[ 73.924508][ T12] bridge_slave_1: left allmulticast mode
[ 73.926966][ T12] bridge_slave_1: left promiscuous mode
[ 73.930968][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.939761][ T12] bridge_slave_0: left allmulticast mode
[ 73.941586][ T12] bridge_slave_0: left promiscuous mode
[ 73.943815][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.130240][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 74.137189][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 74.140971][ T12] bond0 (unregistering): Released all slaves
[ 74.149597][ T5358] 8021q: adding VLAN 0 to HW filter on device eth1
[ 74.241755][ T12] hsr_slave_0: left promiscuous mode
[ 74.244281][ T12] hsr_slave_1: left promiscuous mode
[ 74.248611][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 74.251045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 74.254328][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 74.257245][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 74.264619][ T12] veth1_macvtap: left promiscuous mode
[ 74.267603][ T12] veth0_macvtap: left promiscuous mode
[ 74.269528][ T12] veth1_vlan: left promiscuous mode
[ 74.271119][ T12] veth0_vlan: left promiscuous mode
[ 74.423494][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 74.431808][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 74.533731][ T5358] 8021q: adding VLAN 0 to HW filter on device eth2
[ 74.731142][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 74.740595][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 74.745642][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 74.774983][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 74.783303][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 74.794271][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 74.811029][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 74.816778][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 74.876300][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 74.882169][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 74.887854][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 74.894038][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 74.916385][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 74.930871][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 74.942328][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 74.947077][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 74.981232][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 74.987022][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 74.990047][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 74.997770][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 75.001093][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 75.007458][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 75.013037][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 75.017544][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 75.082072][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.111287][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.116748][ T5002] Bluetooth: hci2: command tx timeout
[ 75.119096][ T5655] Bluetooth: hci0: command tx timeout
[ 75.126882][ T5744] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.138043][ T5746] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.143611][ T29] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.146533][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.156810][ T29] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.159362][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.169909][ T52] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.172935][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.184709][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.189967][ T52] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.192907][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.196967][ T5655] Bluetooth: hci1: command tx timeout
[ 75.239478][ T5747] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.262660][ T29] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.265746][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.288280][ T52] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.290655][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.379633][ T5747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 75.592970][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.622923][ T5746] veth0_vlan: entered promiscuous mode
[ 75.632793][ T5746] veth1_vlan: entered promiscuous mode
[ 75.659389][ T5746] veth0_macvtap: entered promiscuous mode
[ 75.670004][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.672582][ T5746] veth1_macvtap: entered promiscuous mode
[ 75.686691][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.701145][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.709931][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.730306][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.733594][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.745033][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.752740][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.764001][ T5744] veth0_vlan: entered promiscuous mode
[ 75.805678][ T5744] veth1_vlan: entered promiscuous mode
[ 75.812284][ T5747] veth0_vlan: entered promiscuous mode
[ 75.830646][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.833588][ T5747] veth1_vlan: entered promiscuous mode
[ 75.837312][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.869302][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.872218][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.881520][ T5744] veth0_macvtap: entered promiscuous mode
[ 75.894893][ T5747] veth0_macvtap: entered promiscuous mode
[ 75.899735][ T5744] veth1_macvtap: entered promiscuous mode
2026/05/28 12:02:55 executed programs: 6
[ 75.904260][ T5747] veth1_macvtap: entered promiscuous mode
[ 75.921091][ T5873] ==================================================================
[ 75.923677][ T5873] BUG: KASAN: slab-use-after-free in sk_skb_reason_drop+0x37/0x110
[ 75.926264][ T5873] Write of size 4 at addr ffff8881178efee4 by task syz.1.18/5873
[ 75.930047][ T5873]
[ 75.931058][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full)
[ 75.931075][ T5873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 75.931084][ T5873] Call Trace:
[ 75.931090][ T5873]
[ 75.931096][ T5873] dump_stack_lvl+0xe8/0x150
[ 75.931117][ T5873] print_address_description+0x55/0x1e0
[ 75.931131][ T5873] ? sk_skb_reason_drop+0x37/0x110
[ 75.931149][ T5873] print_report+0x58/0x70
[ 75.931159][ T5873] kasan_report+0x117/0x150
[ 75.931176][ T5873] ? nfulnl_rcv_nl_event+0x36f/0x3c0
[ 75.931189][ T5873] ? sk_skb_reason_drop+0x37/0x110
[ 75.931206][ T5873] kasan_check_range+0x264/0x2c0
[ 75.931222][ T5873] sk_skb_reason_drop+0x37/0x110
[ 75.931265][ T5873] netlink_release+0x133a/0x1ad0
[ 75.931283][ T5873] ? netlink_release+0x101/0x1ad0
[ 75.931299][ T5873] ? __pfx_netlink_release+0x10/0x10
[ 75.931314][ T5873] ? down_write+0x16d/0x200
[ 75.931327][ T5873] ? __pfx_down_write+0x10/0x10
[ 75.931338][ T5873] ? __fput_deferred+0x216/0x380
[ 75.931355][ T5873] sock_close+0xc3/0x240
[ 75.931369][ T5873] ? __pfx_sock_close+0x10/0x10
[ 75.931380][ T5873] __fput+0x44f/0xa60
[ 75.931396][ T5873] task_work_run+0x1d9/0x270
[ 75.931426][ T5873] ? __pfx_task_work_run+0x10/0x10
[ 75.931443][ T5873] exit_to_user_mode_loop+0xf3/0x4d0
[ 75.931454][ T5873] ? rcu_is_watching+0x15/0xb0
[ 75.931468][ T5873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.931480][ T5873] do_syscall_64+0x33e/0xf80
[ 75.931497][ T5873] ? trace_irq_disable+0x3b/0x140
[ 75.931515][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.931526][ T5873] RIP: 0033:0x7fd4d139ce59
[ 75.931539][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 75.931549][ T5873] RSP: 002b:00007fff722ecbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 75.931569][ T5873] RAX: 0000000000000000 RBX: 00007fff722ecce0 RCX: 00007fd4d139ce59
[ 75.931578][ T5873] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 75.931584][ T5873] RBP: 0000000000012825 R08: 0000000000000001 R09: 0000000000000000
[ 75.931591][ T5873] R10: 0000001b32e20000 R11: 0000000000000246 R12: 00007fff722ecd20
[ 75.931599][ T5873] R13: 00007fd4d1615fac R14: 0000000000012859 R15: 00007fd4d1615fa0
[ 75.931611][ T5873]
[ 75.931616][ T5873]
[ 75.934345][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.935312][ T5873] Allocated by task 5874:
[ 75.935328][ T5873] kasan_save_track+0x3e/0x80
[ 75.935350][ T5873] __kasan_mempool_unpoison_object+0xa3/0x130
[ 75.935367][ T5873] napi_skb_cache_get+0x3c8/0x780
[ 75.944224][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.945136][ T5873] __alloc_skb+0x19a/0x7d0
[ 75.945162][ T5873] netlink_sendmsg+0x5d4/0xb40
[ 75.956085][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.957339][ T5873] __sys_sendto+0x672/0x710
[ 75.957368][ T5873] __x64_sys_sendto+0xde/0x100
[ 75.963054][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.963141][ T5873] do_syscall_64+0x15f/0xf80
[ 75.973283][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.973461][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.973480][ T5873]
[ 75.973484][ T5873] Freed by task 5874:
[ 75.973491][ T5873] kasan_save_track+0x3e/0x80
[ 75.985331][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.985424][ T5873] kasan_save_free_info+0x46/0x50
[ 75.992168][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.996148][ T5873] __kasan_slab_free+0x5c/0x80
[ 75.996172][ T5873] kmem_cache_free+0x182/0x650
[ 75.996182][ T5873] netlink_unicast+0x764/0x8e0
[ 75.996192][ T5873] netlink_sendmsg+0x813/0xb40
[ 75.996202][ T5873] __sys_sendto+0x672/0x710
[ 75.996212][ T5873] __x64_sys_sendto+0xde/0x100
[ 75.996221][ T5873] do_syscall_64+0x15f/0xf80
[ 75.996261][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.996273][ T5873]
[ 75.996277][ T5873] The buggy address belongs to the object at ffff8881178efe00
[ 75.996277][ T5873] which belongs to the cache skbuff_head_cache of size 240
[ 75.996288][ T5873] The buggy address is located 228 bytes inside of
[ 75.996288][ T5873] freed 240-byte region [ffff8881178efe00, ffff8881178efef0)
[ 75.996299][ T5873]
[ 75.996304][ T5873] The buggy address belongs to the physical page:
[ 75.996310][ T5873] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1178ee
[ 75.996317][ T5873] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 75.996324][ T5873] flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[ 75.996333][ T5873] page_type: f5(slab)
[ 75.996340][ T5873] raw: 017ff00000000040 ffff888160416c80 dead000000000122 0000000000000000
[ 75.996346][ T5873] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000
[ 75.996353][ T5873] head: 017ff00000000040 ffff888160416c80 dead000000000122 0000000000000000
[ 75.996359][ T5873] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000
[ 75.996365][ T5873] head: 017ff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 75.996371][ T5873] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 75.996375][ T5873] page dumped because: kasan: bad access detected
[ 75.996380][ T5873] page_owner tracks the page as allocated
[ 75.996383][ T5873] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5050, tgid 5050 (klogd), ts 75887265953, free_ts 75876344896
[ 75.996397][ T5873] post_alloc_hook+0x22d/0x280
[ 75.996408][ T5873] get_page_from_freelist+0x24ba/0x2540
[ 75.996418][ T5873] __alloc_frozen_pages_noprof+0x18d/0x380
[ 75.996428][ T5873] allocate_slab+0x77/0x660
[ 75.996435][ T5873] refill_objects+0x339/0x3d0
[ 75.996441][ T5873] __pcs_replace_empty_main+0x321/0x720
[ 75.996448][ T5873] kmem_cache_alloc_node_noprof+0x441/0x690
[ 75.996457][ T5873] __alloc_skb+0x1d0/0x7d0
[ 75.996465][ T5873] alloc_skb_with_frags+0xc8/0x760
[ 75.996474][ T5873] sock_alloc_send_pskb+0x878/0x990
[ 75.996481][ T5873] unix_dgram_sendmsg+0x460/0x18d0
[ 75.996490][ T5873] __sys_sendto+0x672/0x710
[ 75.996498][ T5873] __x64_sys_sendto+0xde/0x100
[ 75.996507][ T5873] do_syscall_64+0x15f/0xf80
[ 75.996516][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.996523][ T5873] page last free pid 0 tgid 0 stack trace:
[ 75.996527][ T5873] __free_frozen_pages+0xbc7/0xd30
[ 75.996536][ T5873] rcu_core+0x7cd/0x1070
[ 75.996544][ T5873] handle_softirqs+0x22a/0x840
[ 75.996552][ T5873] __irq_exit_rcu+0xca/0x220
[ 75.996563][ T5873] irq_exit_rcu+0x9/0x30
[ 75.996569][ T5873] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 75.996579][ T5873] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 75.996587][ T5873]
[ 75.996589][ T5873] Memory state around the buggy address:
[ 75.996593][ T5873] ffff8881178efd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 76.166091][ T5873] ffff8881178efe00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 76.168566][ T5873] >ffff8881178efe80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[ 76.170981][ T5873] ^
[ 76.173268][ T5873] ffff8881178eff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 76.176385][ T5873] ffff8881178eff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 76.179663][ T5873] ==================================================================
[ 76.184672][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.193210][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.197928][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.201975][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.210980][ T5873] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 76.213951][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full)
[ 76.217664][ T5873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 76.221271][ T5873] Call Trace:
[ 76.222572][ T5873]
[ 76.223536][ T5873] vpanic+0x56c/0xa60
[ 76.225151][ T5873] ? __pfx_vpanic+0x10/0x10
[ 76.227075][ T5873] panic+0xc5/0xd0
[ 76.228648][ T5873] ? __pfx_panic+0x10/0x10
[ 76.230142][ T5873] ? preempt_schedule_thunk+0x16/0x30
[ 76.231835][ T5873] ? preempt_schedule_thunk+0x16/0x30
[ 76.233722][ T5873] ? sk_skb_reason_drop+0x37/0x110
[ 76.235839][ T5873] check_panic_on_warn+0x89/0xb0
[ 76.237868][ T5873] ? sk_skb_reason_drop+0x37/0x110
[ 76.239930][ T5873] end_report+0x73/0x170
[ 76.241693][ T5873] ? sk_skb_reason_drop+0x37/0x110
[ 76.243745][ T5873] kasan_report+0x128/0x150
[ 76.245618][ T5873] ? nfulnl_rcv_nl_event+0x36f/0x3c0
[ 76.247794][ T5873] ? sk_skb_reason_drop+0x37/0x110
[ 76.249919][ T5873] kasan_check_range+0x264/0x2c0
[ 76.252005][ T5873] sk_skb_reason_drop+0x37/0x110
[ 76.254027][ T5873] netlink_release+0x133a/0x1ad0
[ 76.256088][ T5873] ? netlink_release+0x101/0x1ad0
[ 76.258115][ T5873] ? __pfx_netlink_release+0x10/0x10
[ 76.260254][ T5873] ? down_write+0x16d/0x200
[ 76.262101][ T5873] ? __pfx_down_write+0x10/0x10
[ 76.264064][ T5873] ? __fput_deferred+0x216/0x380
[ 76.266063][ T5873] sock_close+0xc3/0x240
[ 76.267806][ T5873] ? __pfx_sock_close+0x10/0x10
[ 76.269760][ T5873] __fput+0x44f/0xa60
[ 76.271372][ T5873] task_work_run+0x1d9/0x270
[ 76.273346][ T5873] ? __pfx_task_work_run+0x10/0x10
[ 76.275480][ T5873] exit_to_user_mode_loop+0xf3/0x4d0
[ 76.277672][ T5873] ? rcu_is_watching+0x15/0xb0
[ 76.279673][ T5873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.281631][ T5873] do_syscall_64+0x33e/0xf80
[ 76.283176][ T5873] ? trace_irq_disable+0x3b/0x140
[ 76.284838][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.286915][ T5873] RIP: 0033:0x7fd4d139ce59
[ 76.288652][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 76.295729][ T5873] RSP: 002b:00007fff722ecbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 76.298914][ T5873] RAX: 0000000000000000 RBX: 00007fff722ecce0 RCX: 00007fd4d139ce59
[ 76.301709][ T5873] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 76.304327][ T5873] RBP: 0000000000012825 R08: 0000000000000001 R09: 0000000000000000
[ 76.307268][ T5873] R10: 0000001b32e20000 R11: 0000000000000246 R12: 00007fff722ecd20
[ 76.310535][ T5873] R13: 00007fd4d1615fac R14: 0000000000012859 R15: 00007fd4d1615fa0
[ 76.313414][ T5873]
[ 76.315202][ T5873] Kernel Offset: disabled
[ 76.316541][ T5873] Rebooting in 86400 seconds..
VM DIAGNOSIS:
12:02:56 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900037ef550
R8 =ffff8881612f8237 R9 =1ffff1102c25f046 R10=dffffc0000000000 R11=ffffffff854515d0
R12=dffffc0000000000 R13=ffffffff9a48f9ce R14=ffffffff9a7a8880 R15=0000000000000000
RIP=ffffffff8545164c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555591137500 ffffffff 00c00000
GS =0000 ffff88818dc87000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000d9bffc CR3=000000010ac70000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=a100000000000010 7b8e65e700120000
XMM02=f90bafe247cf4ff8 213bcf834e499fc9 XMM03=970a926fcc780000 006d0006ffe88047
XMM04=00007fd4d214d020 00007fd4d15ed5c0 XMM05=00007fd4d15ed5d0 00007fd4d15ed610
XMM06=00007fd4d15ed5f8 00007fd4d15ed5c8 XMM07=00007fd4d15ed600 00007fd4d15ed5e0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1
CPU#1
RAX=1ffff92000025c09 RBX=ffffc9000012e060 RCX=dffffc0000000000 RDX=0000000000000000
RSI=ffffc9000012e060 RDI=ffff8881b7a88d80 RBP=ffffc90004d5f7c8 RSP=ffffc90004d5f698
R8 =0000000000000003 R9 =0000000000000000 R10=ffffc90004d5f740 R11=ffffffffa0001014
R12=1ffff92000025c00 R13=1ffff920009abee4 R14=ffff8881b7a88d80 R15=ffffc9000012e048
RIP=ffffffffa0001018 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fda47f07c80 ffffffff 00c00000
GS =0000 ffff8882a9287000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f03463ee440 CR3=000000016a922000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000136 0000000000003230
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=6c6c696b66722f36 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000