Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. 2025/08/03 19:27:28 ignoring optional flag "sandboxArg"="0" 2025/08/03 19:27:29 parsed 1 programs [ 69.990141][ T5787] cgroup: Unknown subsys name 'net' [ 70.123624][ T5787] cgroup: Unknown subsys name 'rlimit' [ 71.480521][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.580286][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.586865][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.248220][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.256224][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.294825][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.308141][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.172409][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 74.592809][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.618968][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.626247][ T5825] bridge_slave_0: entered allmulticast mode [ 74.653408][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.663052][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.686921][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.688156][ T5825] bridge_slave_0: entered promiscuous mode [ 74.719637][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.728925][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.736308][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.787198][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.794516][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.828224][ T5825] bridge_slave_1: entered allmulticast mode [ 74.839730][ T5825] bridge_slave_1: entered promiscuous mode [ 74.944312][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.968769][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.074651][ T5825] team0: Port device team_slave_0 added [ 75.099143][ T5825] team0: Port device team_slave_1 added [ 75.177480][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.184605][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.244204][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.289192][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.306814][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.333151][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.485941][ T5825] hsr_slave_0: entered promiscuous mode [ 75.494016][ T5825] hsr_slave_1: entered promiscuous mode [ 76.293721][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.309549][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.324506][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.336082][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.625477][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.674765][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.731057][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.738557][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.773301][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.780512][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.323058][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.391242][ T5825] veth0_vlan: entered promiscuous mode [ 77.406588][ T5825] veth1_vlan: entered promiscuous mode [ 77.443854][ T5825] veth0_macvtap: entered promiscuous mode [ 77.455495][ T5825] veth1_macvtap: entered promiscuous mode [ 77.487424][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.503557][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.515606][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.525139][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.539092][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.548046][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/08/03 19:27:39 executed programs: 0 [ 77.730271][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.742289][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.757205][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.767223][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.777556][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.787918][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.828390][ T5905] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.839397][ T5905] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.847323][ T5905] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.859013][ T5905] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.859410][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.866885][ T5905] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.886040][ T5905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.886574][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.901911][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.911941][ T5905] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.923989][ T5905] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.936065][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.945542][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.954212][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.967179][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.975721][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.984682][ T5904] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.001312][ T5904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.527086][ T5902] chnl_net:caif_netlink_parms(): no params data found [ 78.670938][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 78.781134][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.788528][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.795699][ T5902] bridge_slave_0: entered allmulticast mode [ 78.802753][ T5902] bridge_slave_0: entered promiscuous mode [ 78.811185][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.818724][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.825921][ T5902] bridge_slave_1: entered allmulticast mode [ 78.832924][ T5902] bridge_slave_1: entered promiscuous mode [ 78.867890][ T5902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.877370][ T5909] chnl_net:caif_netlink_parms(): no params data found [ 78.911972][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 78.922682][ T5902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.954858][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.962490][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.969775][ T5907] bridge_slave_0: entered allmulticast mode [ 78.976570][ T5907] bridge_slave_0: entered promiscuous mode [ 79.021942][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.029313][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.036563][ T5907] bridge_slave_1: entered allmulticast mode [ 79.044010][ T5907] bridge_slave_1: entered promiscuous mode [ 79.077686][ T5902] team0: Port device team_slave_0 added [ 79.131581][ T5902] team0: Port device team_slave_1 added [ 79.173787][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.181183][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.190621][ T5909] bridge_slave_0: entered allmulticast mode [ 79.197612][ T5909] bridge_slave_0: entered promiscuous mode [ 79.209241][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.234190][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.241254][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.268138][ T5902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.283816][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.291000][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.317037][ T5902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.328473][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.335660][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.343093][ T5909] bridge_slave_1: entered allmulticast mode [ 79.350214][ T5909] bridge_slave_1: entered promiscuous mode [ 79.359141][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.394353][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.401921][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.409213][ T5899] bridge_slave_0: entered allmulticast mode [ 79.416238][ T5899] bridge_slave_0: entered promiscuous mode [ 79.424901][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.432091][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.439758][ T5899] bridge_slave_1: entered allmulticast mode [ 79.446500][ T5899] bridge_slave_1: entered promiscuous mode [ 79.506628][ T5907] team0: Port device team_slave_0 added [ 79.515216][ T5907] team0: Port device team_slave_1 added [ 79.558074][ T5902] hsr_slave_0: entered promiscuous mode [ 79.564471][ T5902] hsr_slave_1: entered promiscuous mode [ 79.571103][ T5902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.584372][ T5902] Cannot create hsr debugfs directory [ 79.633838][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.648995][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.661042][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.675403][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.772485][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.779703][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.806040][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.817713][ T5904] Bluetooth: hci0: command tx timeout [ 79.825006][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.832009][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.858256][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.871972][ T5899] team0: Port device team_slave_0 added [ 79.881415][ T5899] team0: Port device team_slave_1 added [ 79.901398][ T5909] team0: Port device team_slave_0 added [ 79.914600][ T5909] team0: Port device team_slave_1 added [ 79.964979][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.972284][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.978006][ T5904] Bluetooth: hci1: command tx timeout [ 80.005158][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.040352][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.056944][ T5904] Bluetooth: hci3: command tx timeout [ 80.057173][ T5905] Bluetooth: hci2: command tx timeout [ 80.068155][ T5907] hsr_slave_0: entered promiscuous mode [ 80.074452][ T5907] hsr_slave_1: entered promiscuous mode [ 80.080748][ T5907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.089904][ T5907] Cannot create hsr debugfs directory [ 80.111290][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.118422][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.145500][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.191358][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.198625][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.225046][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.238670][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.245684][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.271909][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.319175][ T5899] hsr_slave_0: entered promiscuous mode [ 80.326091][ T5899] hsr_slave_1: entered promiscuous mode [ 80.332195][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.340533][ T5899] Cannot create hsr debugfs directory [ 80.440610][ T5909] hsr_slave_0: entered promiscuous mode [ 80.447240][ T5909] hsr_slave_1: entered promiscuous mode [ 80.453401][ T5909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.461638][ T5909] Cannot create hsr debugfs directory [ 80.652419][ T5902] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.690812][ T5902] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.701150][ T5902] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.715981][ T5902] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.811193][ T5907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.830030][ T5907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.842683][ T5907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.854105][ T5907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.944308][ T5899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.964976][ T5899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.975010][ T5899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.985468][ T5899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.064506][ T5902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.095730][ T5902] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.119410][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.126558][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.141228][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.148399][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.208752][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.235174][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.261025][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.286120][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.309462][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.316588][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.350322][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.360485][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.367671][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.415772][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.422993][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.439096][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.446246][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.516432][ T5899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.595548][ T5902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.702191][ T5902] veth0_vlan: entered promiscuous mode [ 81.724529][ T5902] veth1_vlan: entered promiscuous mode [ 81.792441][ T5902] veth0_macvtap: entered promiscuous mode [ 81.804979][ T5902] veth1_macvtap: entered promiscuous mode [ 81.830556][ T966] cfg80211: failed to load regulatory.db [ 81.865210][ T5902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.877974][ T5902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.892522][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.902127][ T5905] Bluetooth: hci0: command tx timeout [ 81.919598][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.928808][ T5902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.940130][ T5902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.951659][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.962747][ T5902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.972263][ T5902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.982757][ T5902] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.991848][ T5902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.032973][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.057441][ T5905] Bluetooth: hci1: command tx timeout [ 82.105313][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.115010][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.138492][ T5905] Bluetooth: hci2: command tx timeout [ 82.138529][ T5904] Bluetooth: hci3: command tx timeout [ 82.171846][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.180104][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.194928][ T5899] veth0_vlan: entered promiscuous mode [ 82.229606][ T5899] veth1_vlan: entered promiscuous mode [ 82.282741][ T5967] syz.1.18[5967]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.283974][ T5907] veth0_vlan: entered promiscuous mode [ 82.333698][ T5899] veth0_macvtap: entered promiscuous mode [ 82.346564][ T5899] veth1_macvtap: entered promiscuous mode [ 82.399153][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.429754][ T5907] veth1_vlan: entered promiscuous mode [ 82.452226][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.472916][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.483839][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.495520][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.511043][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.522759][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.534079][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.545293][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.556090][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.573508][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.604067][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.651019][ T5899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.651860][ T5967] loop1: detected capacity change from 0 to 32768 [ 82.675448][ T5967] ======================================================= [ 82.675448][ T5967] WARNING: The mand mount option has been deprecated and [ 82.675448][ T5967] and is ignored by this kernel. Remove the mand [ 82.675448][ T5967] option from the mount to silence this warning. [ 82.675448][ T5967] ======================================================= [ 82.711006][ T5899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.711058][ T5899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.711082][ T5899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.726492][ T5907] veth0_macvtap: entered promiscuous mode [ 82.792378][ T5907] veth1_macvtap: entered promiscuous mode [ 82.834774][ T5967] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 82.884346][ T5967] ================================================================== [ 82.892440][ T5967] BUG: KASAN: use-after-free in ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 82.900692][ T5967] Read of size 4 at addr ffff88807b30f000 by task syz.1.18/5967 [ 82.908302][ T5967] [ 82.910617][ T5967] CPU: 0 PID: 5967 Comm: syz.1.18 Not tainted 6.6.101-syzkaller #0 [ 82.918499][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.928555][ T5967] Call Trace: [ 82.931821][ T5967] [ 82.934746][ T5967] dump_stack_lvl+0x16c/0x230 [ 82.939419][ T5967] ? __lock_acquire+0x7c80/0x7c80 [ 82.944432][ T5967] ? show_regs_print_info+0x20/0x20 [ 82.949617][ T5967] ? load_image+0x3b0/0x3b0 [ 82.954110][ T5967] ? __virt_addr_valid+0x469/0x540 [ 82.959213][ T5967] print_report+0xac/0x220 [ 82.963611][ T5967] ? ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 82.969495][ T5967] kasan_report+0x117/0x150 [ 82.973981][ T5967] ? add_lock_to_list+0x191/0x280 [ 82.978990][ T5967] ? ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 82.984873][ T5967] ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 82.990587][ T5967] ? ocfs2_claim_metadata+0x4a0/0x4a0 [ 82.995975][ T5967] ocfs2_claim_new_inode+0x32a/0x780 [ 83.001265][ T5967] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 83.008002][ T5967] ? mark_lock+0x94/0x320 [ 83.012328][ T5967] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 83.018306][ T5967] ? lock_chain_count+0x20/0x20 [ 83.023151][ T5967] ocfs2_mknod_locked+0x101/0x250 [ 83.028166][ T5967] ? trace_ocfs2_symlink_create+0x210/0x210 [ 83.034070][ T5967] ? dquot_alloc_inode+0x211/0xa40 [ 83.039173][ T5967] ? ocfs2_block_signals+0x95/0xd0 [ 83.044272][ T5967] ? ocfs2_free_mem_caches+0x50/0x50 [ 83.049544][ T5967] ? ocfs2_init_security_get+0x139/0x1a0 [ 83.055163][ T5967] ocfs2_mknod+0x107e/0x20f0 [ 83.059760][ T5967] ? ocfs2_mkdir+0x410/0x410 [ 83.064354][ T5967] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 83.070244][ T5967] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 83.076140][ T5967] ? ocfs2_inode_unlock+0xa5/0x140 [ 83.081239][ T5967] ? __lock_acquire+0x7c80/0x7c80 [ 83.086253][ T5967] ? __rwlock_init+0x150/0x150 [ 83.091009][ T5967] ? do_raw_spin_unlock+0x121/0x230 [ 83.096195][ T5967] ? rcu_is_watching+0x15/0xb0 [ 83.100945][ T5967] ? ocfs2_lookup+0x495/0x940 [ 83.105610][ T5967] ocfs2_create+0x196/0x410 [ 83.110099][ T5967] ? ocfs2_update_inode_fsync_trans+0x240/0x240 [ 83.116324][ T5967] ? from_kgid+0x15d/0x680 [ 83.120727][ T5967] ? ocfs2_lookup+0x940/0x940 [ 83.125385][ T5967] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 83.130311][ T5967] ? inode_permission+0xf3/0x480 [ 83.135234][ T5967] ? bpf_lsm_inode_create+0x9/0x10 [ 83.140328][ T5967] ? security_inode_create+0xb7/0x100 [ 83.145711][ T5967] ? ocfs2_lookup+0x940/0x940 [ 83.150374][ T5967] path_openat+0x1277/0x3190 [ 83.154963][ T5967] ? do_filp_open+0x3d0/0x3d0 [ 83.159630][ T5967] do_filp_open+0x1c5/0x3d0 [ 83.164119][ T5967] ? vfs_tmpfile+0x490/0x490 [ 83.168703][ T5967] ? _raw_spin_unlock+0x28/0x40 [ 83.173545][ T5967] ? alloc_fd+0x58f/0x630 [ 83.177860][ T5967] do_sys_openat2+0x12c/0x1c0 [ 83.182526][ T5967] ? do_sys_open+0xe0/0xe0 [ 83.186940][ T5967] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 83.192926][ T5967] ? lock_chain_count+0x20/0x20 [ 83.197771][ T5967] __x64_sys_creat+0x90/0xb0 [ 83.202358][ T5967] do_syscall_64+0x55/0xb0 [ 83.206786][ T5967] ? clear_bhb_loop+0x40/0x90 [ 83.211460][ T5967] ? clear_bhb_loop+0x40/0x90 [ 83.216143][ T5967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.222479][ T5967] RIP: 0033:0x7fb4d6f8eb69 [ 83.226892][ T5967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.246492][ T5967] RSP: 002b:00007fff2caac8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 83.254989][ T5967] RAX: ffffffffffffffda RBX: 00007fb4d71b5fa0 RCX: 00007fb4d6f8eb69 [ 83.262947][ T5967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000d80 [ 83.270900][ T5967] RBP: 00007fb4d7011df1 R08: 0000000000000000 R09: 0000000000000000 [ 83.278854][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.286815][ T5967] R13: 00007fb4d71b5fa0 R14: 00007fb4d71b5fa0 R15: 0000000000000002 [ 83.294785][ T5967] [ 83.297787][ T5967] [ 83.300091][ T5967] The buggy address belongs to the physical page: [ 83.306494][ T5967] page:ffffea0001ecc3c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b30f [ 83.316627][ T5967] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.323726][ T5967] page_type: 0xffffffff() [ 83.328036][ T5967] raw: 00fff00000000000 ffffea000096a248 ffffea000094e688 0000000000000000 [ 83.336607][ T5967] raw: 0000000000000000 0000000000120000 00000000ffffffff 0000000000000000 [ 83.345167][ T5967] page dumped because: kasan: bad access detected [ 83.351567][ T5967] page_owner tracks the page as freed [ 83.356911][ T5967] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5766, tgid 5766 (sshd-session), ts 55756903408, free_ts 82015757291 [ 83.375304][ T5967] post_alloc_hook+0x1cd/0x210 [ 83.380057][ T5967] get_page_from_freelist+0x195c/0x19f0 [ 83.385616][ T5967] __alloc_pages+0x1e3/0x460 [ 83.390196][ T5967] alloc_slab_page+0x5d/0x170 [ 83.394859][ T5967] new_slab+0x87/0x2e0 [ 83.398926][ T5967] ___slab_alloc+0xc6d/0x12f0 [ 83.403589][ T5967] kmem_cache_alloc+0x1b7/0x2e0 [ 83.408460][ T5967] vm_area_dup+0x61/0x270 [ 83.412771][ T5967] __split_vma+0x19f/0xc00 [ 83.417171][ T5967] do_vmi_align_munmap+0x2dc/0x1660 [ 83.422352][ T5967] do_vmi_munmap+0x252/0x2d0 [ 83.426936][ T5967] __vm_munmap+0x193/0x3c0 [ 83.431337][ T5967] __x64_sys_munmap+0x60/0x70 [ 83.436082][ T5967] do_syscall_64+0x55/0xb0 [ 83.440491][ T5967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.446373][ T5967] page last free stack trace: [ 83.451023][ T5967] free_unref_page_prepare+0x7ce/0x8e0 [ 83.456469][ T5967] free_unref_page+0x32/0x2e0 [ 83.461129][ T5967] __unfreeze_partials+0x1cf/0x210 [ 83.466227][ T5967] put_cpu_partial+0x17c/0x250 [ 83.470974][ T5967] __slab_free+0x31d/0x410 [ 83.475374][ T5967] qlist_free_all+0x75/0xe0 [ 83.479859][ T5967] kasan_quarantine_reduce+0x143/0x160 [ 83.485301][ T5967] __kasan_slab_alloc+0x22/0x80 [ 83.490136][ T5967] slab_post_alloc_hook+0x6e/0x4d0 [ 83.495271][ T5967] kmem_cache_alloc_node+0x150/0x330 [ 83.500541][ T5967] __alloc_skb+0x108/0x2c0 [ 83.504942][ T5967] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 83.510211][ T5967] rtmsg_ifinfo+0x8c/0x1a0 [ 83.514609][ T5967] netdev_state_change+0xf0/0x150 [ 83.519616][ T5967] linkwatch_do_dev+0x10d/0x160 [ 83.524452][ T5967] __linkwatch_run_queue+0x40f/0x660 [ 83.529724][ T5967] [ 83.532027][ T5967] Memory state around the buggy address: [ 83.537634][ T5967] ffff88807b30ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 83.545676][ T5967] ffff88807b30ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 83.553718][ T5967] >ffff88807b30f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.561787][ T5967] ^ [ 83.565835][ T5967] ffff88807b30f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.573873][ T5967] ffff88807b30f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.581910][ T5967] ================================================================== [ 83.602669][ T5967] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.609897][ T5967] CPU: 1 PID: 5967 Comm: syz.1.18 Not tainted 6.6.101-syzkaller #0 [ 83.617799][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.627859][ T5967] Call Trace: [ 83.631146][ T5967] [ 83.634078][ T5967] dump_stack_lvl+0x16c/0x230 [ 83.638764][ T5967] ? show_regs_print_info+0x20/0x20 [ 83.643970][ T5967] ? load_image+0x3b0/0x3b0 [ 83.648491][ T5967] panic+0x2c0/0x710 [ 83.652486][ T5967] ? bpf_jit_dump+0xd0/0xd0 [ 83.657001][ T5967] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 83.660629][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.660641][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.668107][ T5899] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 83.685585][ T5967] ? _raw_spin_unlock+0x40/0x40 [ 83.690447][ T5967] ? print_memory_metadata+0x314/0x400 [ 83.695895][ T5967] ? ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 83.701780][ T5967] check_panic_on_warn+0x84/0xa0 [ 83.706706][ T5967] ? ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 83.712584][ T5967] end_report+0x6f/0x140 [ 83.716811][ T5967] kasan_report+0x128/0x150 [ 83.721298][ T5967] ? add_lock_to_list+0x191/0x280 [ 83.726309][ T5967] ? ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 83.732191][ T5967] ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 83.737925][ T5967] ? ocfs2_claim_metadata+0x4a0/0x4a0 [ 83.743292][ T5967] ocfs2_claim_new_inode+0x32a/0x780 [ 83.748566][ T5967] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 83.755135][ T5967] ? mark_lock+0x94/0x320 [ 83.759446][ T5967] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 83.765410][ T5967] ? lock_chain_count+0x20/0x20 [ 83.770245][ T5967] ocfs2_mknod_locked+0x101/0x250 [ 83.775285][ T5967] ? trace_ocfs2_symlink_create+0x210/0x210 [ 83.781248][ T5967] ? dquot_alloc_inode+0x211/0xa40 [ 83.786353][ T5967] ? ocfs2_block_signals+0x95/0xd0 [ 83.791455][ T5967] ? ocfs2_free_mem_caches+0x50/0x50 [ 83.796729][ T5967] ? ocfs2_init_security_get+0x139/0x1a0 [ 83.802359][ T5967] ocfs2_mknod+0x107e/0x20f0 [ 83.806937][ T5967] ? ocfs2_mkdir+0x410/0x410 [ 83.811514][ T5967] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 83.817408][ T5967] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 83.823385][ T5967] ? ocfs2_inode_unlock+0xa5/0x140 [ 83.828518][ T5967] ? __lock_acquire+0x7c80/0x7c80 [ 83.833527][ T5967] ? __rwlock_init+0x150/0x150 [ 83.838278][ T5967] ? do_raw_spin_unlock+0x121/0x230 [ 83.843477][ T5967] ? rcu_is_watching+0x15/0xb0 [ 83.848225][ T5967] ? ocfs2_lookup+0x495/0x940 [ 83.852886][ T5967] ocfs2_create+0x196/0x410 [ 83.857372][ T5967] ? ocfs2_update_inode_fsync_trans+0x240/0x240 [ 83.863599][ T5967] ? from_kgid+0x15d/0x680 [ 83.868009][ T5967] ? ocfs2_lookup+0x940/0x940 [ 83.872667][ T5967] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 83.877677][ T5967] ? inode_permission+0xf3/0x480 [ 83.882604][ T5967] ? bpf_lsm_inode_create+0x9/0x10 [ 83.887695][ T5967] ? security_inode_create+0xb7/0x100 [ 83.893140][ T5967] ? ocfs2_lookup+0x940/0x940 [ 83.897804][ T5967] path_openat+0x1277/0x3190 [ 83.902390][ T5967] ? do_filp_open+0x3d0/0x3d0 [ 83.907065][ T5967] do_filp_open+0x1c5/0x3d0 [ 83.911560][ T5967] ? vfs_tmpfile+0x490/0x490 [ 83.916144][ T5967] ? _raw_spin_unlock+0x28/0x40 [ 83.920981][ T5967] ? alloc_fd+0x58f/0x630 [ 83.925296][ T5967] do_sys_openat2+0x12c/0x1c0 [ 83.929958][ T5967] ? do_sys_open+0xe0/0xe0 [ 83.934355][ T5967] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 83.940318][ T5967] ? lock_chain_count+0x20/0x20 [ 83.945151][ T5967] __x64_sys_creat+0x90/0xb0 [ 83.949730][ T5967] do_syscall_64+0x55/0xb0 [ 83.954129][ T5967] ? clear_bhb_loop+0x40/0x90 [ 83.958786][ T5967] ? clear_bhb_loop+0x40/0x90 [ 83.963617][ T5967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.969500][ T5967] RIP: 0033:0x7fb4d6f8eb69 [ 83.973898][ T5967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.993488][ T5967] RSP: 002b:00007fff2caac8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 84.001887][ T5967] RAX: ffffffffffffffda RBX: 00007fb4d71b5fa0 RCX: 00007fb4d6f8eb69 [ 84.009844][ T5967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000d80 [ 84.017811][ T5967] RBP: 00007fb4d7011df1 R08: 0000000000000000 R09: 0000000000000000 [ 84.025785][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.033759][ T5967] R13: 00007fb4d71b5fa0 R14: 00007fb4d71b5fa0 R15: 0000000000000002 [ 84.041732][ T5967] [ 84.045023][ T5967] Kernel Offset: disabled [ 84.049332][ T5967] Rebooting in 86400 seconds..