Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts.
2026/04/05 06:19:20 parsed 1 programs
[ 97.729702][ T5807] cgroup: Unknown subsys name 'net'
[ 97.991990][ T5807] cgroup: Unknown subsys name 'cpuset'
[ 98.056579][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 99.947293][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 103.117894][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.119537][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.120184][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.121710][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.122575][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 104.276613][ T5833] chnl_net:caif_netlink_parms(): no params data found
[ 104.385204][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.386984][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.387153][ T5833] bridge_slave_0: entered allmulticast mode
[ 104.389732][ T5833] bridge_slave_0: entered promiscuous mode
[ 104.396813][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.397059][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.397742][ T5833] bridge_slave_1: entered allmulticast mode
[ 104.400335][ T5833] bridge_slave_1: entered promiscuous mode
[ 104.446307][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.449641][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.590829][ T5833] team0: Port device team_slave_0 added
[ 104.593193][ T5833] team0: Port device team_slave_1 added
[ 104.625027][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.625041][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.625055][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.630191][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.630207][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.630230][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.698079][ T5833] hsr_slave_0: entered promiscuous mode
[ 104.699457][ T5833] hsr_slave_1: entered promiscuous mode
[ 105.029426][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.064212][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.079421][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.122369][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.189442][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.190137][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.191233][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.191553][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.267587][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.288217][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.455069][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.475678][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.494388][ T3765] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.494556][ T3765] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.513762][ T3765] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.513845][ T3765] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.729217][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.774517][ T5833] veth0_vlan: entered promiscuous mode
[ 105.784545][ T5833] veth1_vlan: entered promiscuous mode
[ 105.818616][ T5833] veth0_macvtap: entered promiscuous mode
[ 105.823180][ T5833] veth1_macvtap: entered promiscuous mode
[ 105.857161][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.865114][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.893599][ T3765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.895269][ T142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.895316][ T142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.895353][ T142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.661374][ T3765] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.909412][ T3765] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.148270][ T3765] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.264660][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.264684][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.315459][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.315483][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.701647][ T3765] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.828683][ T3765] bridge_slave_1: left allmulticast mode
[ 108.828873][ T3765] bridge_slave_1: left promiscuous mode
[ 108.831600][ T3765] bridge0: port 2(bridge_slave_1) entered disabled state
[ 108.927777][ T3765] bridge_slave_0: left allmulticast mode
[ 108.927800][ T3765] bridge_slave_0: left promiscuous mode
[ 108.927989][ T3765] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.597129][ T3765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 109.686696][ T3765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 109.708146][ T3765] bond0 (unregistering): Released all slaves
[ 110.076136][ T3765] hsr_slave_0: left promiscuous mode
[ 110.116229][ T3765] hsr_slave_1: left promiscuous mode
[ 110.117833][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 110.117919][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 110.158766][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 110.158796][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 110.258352][ T3765] veth1_macvtap: left promiscuous mode
[ 110.258602][ T3765] veth0_macvtap: left promiscuous mode
[ 110.258942][ T3765] veth1_vlan: left promiscuous mode
[ 110.259406][ T3765] veth0_vlan: left promiscuous mode
[ 111.116672][ T3765] team0 (unregistering): Port device team_slave_1 removed
[ 111.166687][ T3765] team0 (unregistering): Port device team_slave_0 removed
2026/04/05 06:19:40 executed programs: 0
[ 114.725637][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 114.737541][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 114.738542][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 114.739713][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 114.740513][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 115.583784][ T5968] chnl_net:caif_netlink_parms(): no params data found
[ 115.692815][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.693034][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.693138][ T5968] bridge_slave_0: entered allmulticast mode
[ 115.694668][ T5968] bridge_slave_0: entered promiscuous mode
[ 115.700978][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.701168][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.701325][ T5968] bridge_slave_1: entered allmulticast mode
[ 115.703871][ T5968] bridge_slave_1: entered promiscuous mode
[ 115.751963][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 115.756549][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 115.788260][ T5968] team0: Port device team_slave_0 added
[ 115.791012][ T5968] team0: Port device team_slave_1 added
[ 115.823272][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 115.823290][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.823309][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 115.825486][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 115.825499][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.825518][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 115.892939][ T5968] hsr_slave_0: entered promiscuous mode
[ 115.894378][ T5968] hsr_slave_1: entered promiscuous mode
[ 116.747845][ T60] Bluetooth: hci0: command tx timeout
[ 118.117452][ T5968] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 118.159396][ T5968] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 118.193426][ T5968] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 118.233594][ T5968] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 118.433156][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0
[ 118.460923][ T5968] 8021q: adding VLAN 0 to HW filter on device team0
[ 118.469674][ T3765] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.470583][ T3765] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 118.482552][ T3765] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.482745][ T3765] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 118.826152][ T60] Bluetooth: hci0: command tx timeout
[ 118.826277][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 118.889862][ T5968] veth0_vlan: entered promiscuous mode
[ 118.900926][ T5968] veth1_vlan: entered promiscuous mode
[ 118.957383][ T5968] veth0_macvtap: entered promiscuous mode
[ 118.963708][ T5968] veth1_macvtap: entered promiscuous mode
[ 118.988852][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.001013][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 119.014213][ T3765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.014269][ T3765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.014311][ T3765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.014353][ T3765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.204509][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.204533][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.271650][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.271673][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.798980][ T6061] infiniband syz0: set down
[ 119.799004][ T6061] infiniband syz0: added ipvlan1
[ 119.919288][ T6061] RDS/IB: syz0: added
[ 119.919958][ T6061] smc: adding ib device syz0 with port count 1
[ 119.920162][ T6061] smc: ib device syz0 port 1 has no pnetid
2026/04/05 06:19:46 executed programs: 3
[ 120.441776][ T6082] syz0: rxe_newlink: already configured on ipvlan1
[ 120.482914][ T6084] syz0: rxe_newlink: already configured on ipvlan1
[ 120.519127][ T6088] syz0: rxe_newlink: already configured on ipvlan1
[ 120.551735][ T6090] syz0: rxe_newlink: already configured on ipvlan1
[ 120.586302][ T6092] syz0: rxe_newlink: already configured on ipvlan1
[ 120.621766][ T6095] syz0: rxe_newlink: already configured on ipvlan1
[ 120.649266][ T6097] syz0: rxe_newlink: already configured on ipvlan1
[ 120.693125][ T6099] syz0: rxe_newlink: already configured on ipvlan1
[ 120.736822][ T6102] syz0: rxe_newlink: already configured on ipvlan1
[ 120.765486][ T6104] syz0: rxe_newlink: already configured on ipvlan1
[ 120.906033][ T60] Bluetooth: hci0: command tx timeout
[ 122.986079][ T60] Bluetooth: hci0: command tx timeout
2026/04/05 06:19:51 executed programs: 226
[ 125.455362][ T6549] rxe_newlink: 212 callbacks suppressed
[ 125.455378][ T6549] syz0: rxe_newlink: already configured on ipvlan1
[ 125.486411][ T6551] syz0: rxe_newlink: already configured on ipvlan1
[ 125.509344][ T6553] syz0: rxe_newlink: already configured on ipvlan1
[ 125.533005][ T6555] syz0: rxe_newlink: already configured on ipvlan1
[ 125.552676][ T6557] syz0: rxe_newlink: already configured on ipvlan1
[ 125.573114][ T6559] syz0: rxe_newlink: already configured on ipvlan1
[ 125.604787][ T6561] syz0: rxe_newlink: already configured on ipvlan1
[ 125.629993][ T6563] syz0: rxe_newlink: already configured on ipvlan1
[ 125.652344][ T6565] syz0: rxe_newlink: already configured on ipvlan1
[ 125.682526][ T6567] syz0: rxe_newlink: already configured on ipvlan1
[ 130.457192][ T7037] rxe_newlink: 234 callbacks suppressed
[ 130.457209][ T7037] syz0: rxe_newlink: already configured on ipvlan1
[ 130.485078][ T7039] syz0: rxe_newlink: already configured on ipvlan1
2026/04/05 06:19:56 executed programs: 472
[ 130.513184][ T7041] syz0: rxe_newlink: already configured on ipvlan1
[ 130.541989][ T7043] syz0: rxe_newlink: already configured on ipvlan1
[ 130.565560][ T7045] syz0: rxe_newlink: already configured on ipvlan1
[ 130.599701][ T7047] syz0: rxe_newlink: already configured on ipvlan1
[ 130.621614][ T7049] syz0: rxe_newlink: already configured on ipvlan1
[ 130.639930][ T7051] syz0: rxe_newlink: already configured on ipvlan1
[ 130.662383][ T7053] syz0: rxe_newlink: already configured on ipvlan1
[ 130.682338][ T7055] syz0: rxe_newlink: already configured on ipvlan1
[ 133.154720][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.154820][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.281242][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 133.283764][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 133.284681][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 133.292372][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 133.306415][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 134.111438][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.359200][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.383041][ T7303] chnl_net:caif_netlink_parms(): no params data found
[ 134.548410][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.612150][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state
[ 134.612285][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 134.612378][ T7303] bridge_slave_0: entered allmulticast mode
[ 134.613948][ T7303] bridge_slave_0: entered promiscuous mode
[ 134.617283][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state
[ 134.617470][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 134.617638][ T7303] bridge_slave_1: entered allmulticast mode
[ 134.620290][ T7303] bridge_slave_1: entered promiscuous mode
[ 134.678821][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 134.682133][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 134.821238][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.928602][ T7303] team0: Port device team_slave_0 added
[ 134.934040][ T7303] team0: Port device team_slave_1 added
[ 134.967607][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 134.967626][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 134.967653][ T7303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 134.970455][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 134.970468][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 134.970494][ T7303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 135.034679][ T7303] hsr_slave_0: entered promiscuous mode
[ 135.039784][ T7303] hsr_slave_1: entered promiscuous mode
[ 135.041523][ T7303] debugfs: 'hsr0' already exists in 'hsr'
[ 135.041602][ T7303] Cannot create hsr debugfs directory
[ 135.369162][ T70] bridge_slave_1: left allmulticast mode
[ 135.369193][ T70] bridge_slave_1: left promiscuous mode
[ 135.369503][ T70] bridge0: port 2(bridge_slave_1) entered disabled state
[ 135.386188][ T60] Bluetooth: hci1: command tx timeout
[ 135.467176][ T70] bridge_slave_0: left allmulticast mode
[ 135.467199][ T70] bridge_slave_0: left promiscuous mode
[ 135.467369][ T70] bridge0: port 1(bridge_slave_0) entered disabled state
[ 136.136748][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 136.197712][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 136.218220][ T70] bond0 (unregistering): Released all slaves
[ 137.466130][ T60] Bluetooth: hci1: command tx timeout
[ 137.639331][ T7303] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 137.707334][ T7303] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 137.896079][ T70] hsr_slave_0: left promiscuous mode
[ 137.936115][ T70] hsr_slave_1: left promiscuous mode
[ 137.936805][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 137.936823][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 137.996913][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 137.996946][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 138.078934][ T70] veth1_macvtap: left promiscuous mode
[ 138.079043][ T70] veth0_macvtap: left promiscuous mode
[ 138.079293][ T70] veth1_vlan: left promiscuous mode
[ 138.079464][ T70] veth0_vlan: left promiscuous mode
[ 138.494149][ T142] smc: removing ib device syz0
[ 138.729404][ T70] team0 (unregistering): Port device team_slave_1 removed
[ 138.786516][ T70] team0 (unregistering): Port device team_slave_0 removed
[ 138.966552][ T7303] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 139.013656][ T822] ==================================================================
[ 139.013676][ T822] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170
[ 139.013709][ T822] Read of size 8 at addr ffff888033d882f0 by task kworker/0:2/822
[ 139.013726][ T822]
[ 139.013739][ T822] CPU: 0 UID: 0 PID: 822 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 139.013762][ T822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 139.013776][ T822] Workqueue: events smc_ib_port_event_work
[ 139.013818][ T822] Call Trace:
[ 139.013827][ T822]
[ 139.013836][ T822] dump_stack_lvl+0xe8/0x150
[ 139.013868][ T822] print_report+0xba/0x230
[ 139.013895][ T822] ? __ethtool_get_link_ksettings+0x5e/0x170
[ 139.013916][ T822] kasan_report+0x117/0x150
[ 139.013938][ T822] ? __ethtool_get_link_ksettings+0x5e/0x170
[ 139.013964][ T822] __ethtool_get_link_ksett[ 139.013964][ T822] __ethtool_get_link_ksettings+0x5e/0x170
[ 139.013988][ T822] ib_get_eth_speed+0x180/0x7f0
[ 139.014020][ T822] ? __pfx_ib_get_eth_speed+0x10/0x10
[ 139.014055][ T822] ? lockdep_hardirqs_on+0x7a/0x110
[ 139.014077][ T822] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 139.014101][ T822] ? rxe_query_port+0x7e/0x3d0
[ 139.014131][ T822] rxe_query_port+0x93/0x3d0
[ 139.014160][ T822] ib_query_port+0x170/0x830
[ 139.014182][ T822] smc_ib_port_event_work+0x16f/0x940
[ 139.014217][ T822] ? process_scheduled_works+0xa8d/0x18c0
[ 139.014248][ T822] process_scheduled_works+0xb6e/0x18c0
[ 139.014289][ T822] ? __pfx_process_scheduled_works+0x10/0x10
[ 139.014321][ T822] ? assign_work+0x3d5/0x5e0
[ 139.014351][ T822] worker_thread+0xa53/0xfc0
[ 139.014392][ T822] kthread+0x388/0x470
[ 139.014413][ T822] ? __pfx_worker_thread+0x10/0x10
[ 139.014441][ T822] ? __pfx_kthread+0x10/0x10
[ 139.014463][ T822] ret_from_fork+0x51e/0xb90
[ 139.014494][ T822] ? __pfx_ret_from_fork+0x10/0x10
[ 139.014522][ T822] ? __switch_to+0xc7d/0x1450
[ 139.014548][ T822] ? __pfx_kthread+0x10/0x10
[ 139.014567][ T822] ret_from_fork_asm+0x1a/0x30
[ 139.014594][ T822]
[ 139.014601][ T822]
[ 139.014606][ T822] Allocated by task 5968:
[ 139.014615][ T822] kasan_save_track+0x3e/0x80
[ 139.014662][ T822] __kasan_kmalloc+0x93/0xb0
[ 139.014691][ T822] __kvmalloc_node_noprof+0x3c2/0x8e0
[ 139.014710][ T822] alloc_netdev_mqs+0xa6/0x11b0
[ 139.014736][ T822] rtnl_create_link+0x31f/0xd70
[ 139.014759][ T822] rtnl_newlink_create+0x277/0xb70
[ 139.014778][ T822] rtnl_newlink+0x1666/0x1be0
[ 139.014813][ T822] rtnetlink_rcv_msg+0x7d5/0xbe0
[ 139.014841][ T822] netlink_rcv_skb+0x232/0x4b0
[ 139.014868][ T822] netlink_unicast+0x831/0x9f0
[ 139.014892][ T822] netlink_sendmsg+0x813/0xb40
[ 139.014920][ T822] __sys_sendto+0x67f/0x710
[ 139.014939][ T822] __x64_sys_sendto+0xde/0x100
[ 139.014957][ T822] do_syscall_64+0x14d/0xf80
[ 139.014977][ T822] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.014997][ T822]
[ 139.015001][ T822] Freed by task 70:
[ 139.015011][ T822] kasan_save_track+0x3e/0x80
[ 139.015038][ T822] kasan_save_free_info+0x46/0x50
[ 139.015060][ T822] __kasan_slab_free+0x5c/0x80
[ 139.015089][ T822] kfree+0x1c1/0x6c0
[ 139.015115][ T822] device_release+0xc4/0x1f0
[ 139.015144][ T822] kobject_put+0x228/0x560
[ 139.015166][ T822] netdev_run_todo+0xc75/0xde0
[ 139.015188][ T822] default_device_exit_batch+0x986/0xa00
[ 139.015219][ T822] ops_undo_list+0x52b/0x940
[ 139.015236][ T822] cleanup_net+0x56e/0x800
[ 139.015252][ T822] process_scheduled_works+0xb6e/0x18c0
[ 139.015279][ T822] worker_thread+0xa53/0xfc0
[ 139.015306][ T822] kthread+0x388/0x470
[ 139.015324][ T822] ret_from_fork+0x51e/0xb90
[ 139.015350][ T822] ret_from_fork_asm+0x1a/0x30
[ 139.015367][ T822]
[ 139.015372][ T822] The buggy address belongs to the object at ffff888033d88000
[ 139.015372][ T822] which belongs to the cache kmalloc-cg-4k of size 4096
[ 139.015389][ T822] The buggy address is located 752 bytes inside of
[ 139.015389][ T822] freed 4096-byte region [ffff888033d88000, ffff888033d89000)
[ 139.015410][ T822]
[ 139.015415][ T822] The buggy address belongs to the physical page:
[ 139.015425][ T822] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33d88
[ 139.015445][ T822] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 139.015462][ T822] flags: 0x80000000000040(head|node=0|zone=1)
[ 139.015478][ T822] page_type: f5(slab)
[ 139.015497][ T822] raw: 0080000000000040 ffff88813fe33500 dead000000000100 dead000000000122
[ 139.015514][ T822] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 139.015533][ T822] head: 0080000000000040 ffff88813fe33500 dead000000000100 dead000000000122
[ 139.015550][ T822] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 139.015567][ T822] head: 0080000000000003 ffffea0000cf6201 00000000ffffffff 00000000ffffffff
[ 139.015584][ T822] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 139.015594][ T822] page dumped because: kasan: bad access detected
[ 139.015603][ T822] page_owner tracks the page as allocated
[ 139.015610][ T822] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5170, tgid 5170 (udevd), ts 35925280462, free_ts 35886442119
[ 139.015646][ T822] post_alloc_hook+0x231/0x280
[ 139.015676][ T822] get_page_from_freelist+0x28bb/0x2950
[ 139.015697][ T822] __alloc_frozen_pages_noprof+0x18d/0x380
[ 139.015718][ T822] allocate_slab+0x77/0x660
[ 139.015741][ T822] refill_objects+0x334/0x3c0
[ 139.015762][ T822] __pcs_replace_empty_main+0x35c/0x710
[ 139.015787][ T822] __kvmalloc_node_noprof+0x6f4/0x8e0
[ 139.015814][ T822] seq_read_iter+0x203/0xe20
[ 139.015832][ T822] vfs_read+0x58b/0xa80
[ 139.015859][ T822] ksys_read+0x156/0x270
[ 139.015890][ T822] do_syscall_64+0x14d/0xf80
[ 139.015909][ T822] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.015927][ T822] page last free pid 5195 tgid 5195 stack trace:
[ 139.015938][ T822] register_dummy_stack+0x98/0x100
[ 139.015954][ T822] init_page_owner+0x2e/0x5f0
[ 139.015971][ T822] page_ext_init+0x500/0x540
[ 139.015991][ T822] mm_core_init+0x51/0x70
[ 139.016009][ T822]
[ 139.016014][ T822] Memory state around the buggy address:
[ 139.016024][ T822] ffff888033d88180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 139.016037][ T822] ffff888033d88200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 139.016050][ T822] >ffff888033d88280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 139.016059][ T822] ^
[ 139.016070][ T822] ffff888033d88300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 139.016083][ T822] ffff888033d88380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 139.016093][ T822] ==================================================================
[ 139.106089][ T822] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 139.106122][ T822] CPU: 0 UID: 0 PID: 822 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 139.106146][ T822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 139.106177][ T822] Workqueue: events smc_ib_port_event_work
[ 139.106221][ T822] Call Trace:
[ 139.106230][ T822]
[ 139.106238][ T822] vpanic+0x56c/0xa60
[ 139.106269][ T822] ? __pfx_vpanic+0x10/0x10
[ 139.106296][ T822] ? __pfx___schedule+0x10/0x10
[ 139.106311][ T822] panic+0xc5/0xd0
[ 139.106327][ T822] ? __pfx_panic+0x10/0x10
[ 139.106352][ T822] ? preempt_schedule_common+0x82/0xd0
[ 139.106365][ T822] ? __ethtool_get_link_ksettings+0x5e/0x170
[ 139.106379][ T822] check_panic_on_warn+0x89/0xb0
[ 139.106392][ T822] ? __ethtool_get_link_ksettings+0x5e/0x170
[ 139.106411][ T822] end_report+0x73/0x180
[ 139.106423][ T822] ? __ethtool_get_link_ksettings+0x5e/0x170
[ 139.106434][ T822] kasan_report+0x128/0x150
[ 139.106446][ T822] ? __ethtool_get_link_ksettings+0x5e/0x170
[ 139.106459][ T822] __ethtool_get_link_ksettings+0x5e/0x170
[ 139.106472][ T822] ib_get_eth_speed+0x180/0x7f0
[ 139.106490][ T822] ? __pfx_ib_get_eth_speed+0x10/0x10
[ 139.106508][ T822] ? lockdep_hardirqs_on+0x7a/0x110
[ 139.106521][ T822] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 139.106535][ T822] ? rxe_query_port+0x7e/0x3d0
[ 139.106551][ T822] rxe_query_port+0x93/0x3d0
[ 139.106567][ T822] ib_query_port+0x170/0x830
[ 139.106579][ T822] smc_ib_port_event_work+0x16f/0x940
[ 139.106598][ T822] ? process_scheduled_works+0xa8d/0x18c0
[ 139.106615][ T822] process_scheduled_works+0xb6e/0x18c0
[ 139.106637][ T822] ? __pfx_process_scheduled_works+0x10/0x10
[ 139.106659][ T822] ? assign_work+0x3d5/0x5e0
[ 139.106676][ T822] worker_thread+0xa53/0xfc0
[ 139.106697][ T822] kthread+0x388/0x470
[ 139.106709][ T822] ? __pfx_worker_thread+0x10/0x10
[ 139.106724][ T822] ? __pfx_kthread+0x10/0x10
[ 139.106736][ T822] ret_from_fork+0x51e/0xb90
[ 139.106753][ T822] ? __pfx_ret_from_fork+0x10/0x10
[ 139.106768][ T822] ? __switch_to+0xc7d/0x1450
[ 139.106782][ T822] ? __pfx_kthread+0x10/0x10
[ 139.106794][ T822] ret_from_fork_asm+0x1a/0x30
[ 139.106809][ T822]
[ 139.107012][ T822] Kernel Offset: disabled