Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts.
2025/07/16 06:20:24 ignoring optional flag "sandboxArg"="0"
2025/07/16 06:20:26 parsed 1 programs
[ 88.343264][ T5851] cgroup: Unknown subsys name 'net'
[ 88.514687][ T5851] cgroup: Unknown subsys name 'cpuset'
[ 88.523337][ T5851] cgroup: Unknown subsys name 'rlimit'
[ 90.218561][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 92.100062][ T24] cfg80211: failed to load regulatory.db
[ 93.281491][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 93.727194][ T5870] chnl_net:caif_netlink_parms(): no params data found
[ 93.807091][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.814681][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.821959][ T5870] bridge_slave_0: entered allmulticast mode
[ 93.829632][ T5870] bridge_slave_0: entered promiscuous mode
[ 93.838870][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.846014][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.853285][ T5870] bridge_slave_1: entered allmulticast mode
[ 93.860435][ T5870] bridge_slave_1: entered promiscuous mode
[ 93.891993][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.903874][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.937365][ T5870] team0: Port device team_slave_0 added
[ 93.945704][ T5870] team0: Port device team_slave_1 added
[ 93.974355][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.981755][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.007667][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.020552][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.027572][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.053495][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.099556][ T5870] hsr_slave_0: entered promiscuous mode
[ 94.105893][ T5870] hsr_slave_1: entered promiscuous mode
[ 94.253240][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.264865][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.275009][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.285599][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.315757][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.322997][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.331022][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.338167][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.395274][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.414369][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.423494][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.440497][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.454560][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.461806][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.477286][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.484455][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.666832][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.716821][ T5870] veth0_vlan: entered promiscuous mode
[ 94.729894][ T5870] veth1_vlan: entered promiscuous mode
[ 94.762183][ T5870] veth0_macvtap: entered promiscuous mode
[ 94.771794][ T5870] veth1_macvtap: entered promiscuous mode
[ 94.791395][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.806671][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.826163][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.835707][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.846312][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.855589][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.994205][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.065297][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.181884][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.252115][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.253923][ T5917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.268932][ T5917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.277223][ T5917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.286394][ T5917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.298566][ T5917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 96.999196][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.007572][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.042307][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.050430][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/07/16 06:20:38 executed programs: 0
[ 97.985446][ T13] bridge_slave_1: left allmulticast mode
[ 97.998830][ T13] bridge_slave_1: left promiscuous mode
[ 98.006620][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.027822][ T13] bridge_slave_0: left allmulticast mode
[ 98.033529][ T13] bridge_slave_0: left promiscuous mode
[ 98.044231][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.045126][ T5169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.063421][ T5169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.071967][ T5169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.080997][ T5169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.090093][ T5169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.340249][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 98.351258][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 98.361571][ T13] bond0 (unregistering): Released all slaves
[ 98.521446][ T13] hsr_slave_0: left promiscuous mode
[ 98.528825][ T13] hsr_slave_1: left promiscuous mode
[ 98.535151][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 98.543627][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 98.553317][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 98.563432][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 98.585976][ T13] veth1_macvtap: left promiscuous mode
[ 98.592778][ T13] veth0_macvtap: left promiscuous mode
[ 98.599654][ T13] veth1_vlan: left promiscuous mode
[ 98.605299][ T13] veth0_vlan: left promiscuous mode
[ 99.110476][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 99.136753][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 99.544861][ T5955] chnl_net:caif_netlink_parms(): no params data found
[ 99.727271][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.736503][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.743907][ T5955] bridge_slave_0: entered allmulticast mode
[ 99.761152][ T5955] bridge_slave_0: entered promiscuous mode
[ 99.770206][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.777457][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.784807][ T5955] bridge_slave_1: entered allmulticast mode
[ 99.793051][ T5955] bridge_slave_1: entered promiscuous mode
[ 99.864580][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.895811][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.182130][ T5917] Bluetooth: hci0: command tx timeout
[ 100.566824][ T5955] team0: Port device team_slave_0 added
[ 100.602842][ T5955] team0: Port device team_slave_1 added
[ 100.848901][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 100.858232][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.890834][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 100.934926][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 100.952300][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.999659][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.134184][ T5955] hsr_slave_0: entered promiscuous mode
[ 101.141323][ T5955] hsr_slave_1: entered promiscuous mode
[ 102.045892][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.062727][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 102.075742][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 102.090878][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 102.242085][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.263996][ T5917] Bluetooth: hci0: command tx timeout
[ 102.267141][ T5955] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.292532][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.299737][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.320678][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.327925][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.613287][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.685943][ T5955] veth0_vlan: entered promiscuous mode
[ 102.702817][ T5955] veth1_vlan: entered promiscuous mode
[ 102.751124][ T5955] veth0_macvtap: entered promiscuous mode
[ 102.762681][ T5955] veth1_macvtap: entered promiscuous mode
[ 102.789142][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.809744][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.835108][ T3574] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.855055][ T3574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.867631][ T3574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.885092][ T3574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.967114][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.980015][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.023096][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.032662][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/07/16 06:20:43 executed programs: 2
[ 104.338502][ T5917] Bluetooth: hci0: command tx timeout
[ 106.427831][ T5917] Bluetooth: hci0: command tx timeout
2025/07/16 06:20:48 executed programs: 210
2025/07/16 06:20:53 executed programs: 462
[ 115.959284][ T5169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 115.974149][ T5169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 115.983118][ T5169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 115.996289][ T5169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 116.008490][ T5169] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 116.154518][ T3574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.205590][ T6702] chnl_net:caif_netlink_parms(): no params data found
[ 116.265899][ T3574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.304494][ T6702] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.311760][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.319002][ T6702] bridge_slave_0: entered allmulticast mode
[ 116.326544][ T6702] bridge_slave_0: entered promiscuous mode
[ 116.334338][ T6702] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.342076][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.349651][ T6702] bridge_slave_1: entered allmulticast mode
[ 116.356749][ T6702] bridge_slave_1: entered promiscuous mode
[ 116.382481][ T3574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.412889][ T6702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 116.430126][ T6702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 116.450538][ T3574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.489293][ T6702] team0: Port device team_slave_0 added
[ 116.498044][ T6702] team0: Port device team_slave_1 added
[ 116.537208][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.544334][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 116.570405][ T6702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 116.584224][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 116.591334][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 116.618698][ T6702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 116.731898][ T6702] hsr_slave_0: entered promiscuous mode
[ 116.738759][ T6702] hsr_slave_1: entered promiscuous mode
[ 116.744855][ T6702] debugfs: 'hsr0' already exists in 'hsr'
[ 116.751343][ T6702] Cannot create hsr debugfs directory
[ 116.771133][ T3574] bridge_slave_1: left allmulticast mode
[ 116.776944][ T3574] bridge_slave_1: left promiscuous mode
[ 116.783023][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.792621][ T3574] bridge_slave_0: left allmulticast mode
[ 116.799857][ T3574] bridge_slave_0: left promiscuous mode
[ 116.805553][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.027320][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 117.039087][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 117.049601][ T3574] bond0 (unregistering): Released all slaves
[ 117.393627][ T3574] hsr_slave_0: left promiscuous mode
[ 117.400675][ T3574] hsr_slave_1: left promiscuous mode
[ 117.406813][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 117.415446][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 117.424055][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 117.432959][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 117.454093][ T3574] veth1_macvtap: left promiscuous mode
[ 117.460111][ T3574] veth0_macvtap: left promiscuous mode
[ 117.465817][ T3574] veth1_vlan: left promiscuous mode
[ 117.471852][ T3574] veth0_vlan: left promiscuous mode
[ 117.925820][ T3574] team0 (unregistering): Port device team_slave_1 removed
[ 117.953733][ T3574] team0 (unregistering): Port device team_slave_0 removed
[ 118.098391][ T5169] Bluetooth: hci1: command tx timeout
[ 118.574163][ T6702] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 118.589377][ T6702] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 118.603393][ T6702] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 118.616545][ T6702] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 118.766788][ T6702] 8021q: adding VLAN 0 to HW filter on device bond0
[ 118.793594][ T6702] 8021q: adding VLAN 0 to HW filter on device team0
[ 118.811378][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.818621][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 118.839701][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.846915][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 119.153245][ T6702] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 119.214347][ T6702] veth0_vlan: entered promiscuous mode
[ 119.232909][ T6702] veth1_vlan: entered promiscuous mode
[ 119.283181][ T6702] veth0_macvtap: entered promiscuous mode
[ 119.295194][ T6702] veth1_macvtap: entered promiscuous mode
[ 119.322044][ T6702] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.341275][ T6702] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 119.360877][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.375331][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.393583][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.410789][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.481362][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.506084][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.548842][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.556711][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/07/16 06:21:00 executed programs: 602
[ 120.177924][ T5169] Bluetooth: hci1: command tx timeout
[ 120.781743][ T6830] ==================================================================
[ 120.789866][ T6830] BUG: KASAN: slab-use-after-free in mas_next_slot+0x185/0xcf0
[ 120.797438][ T6830] Read of size 8 at addr ffff8880755dc600 by task syz.0.656/6830
[ 120.805166][ T6830]
[ 120.807496][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.0.656 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full)
[ 120.807517][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 120.807527][ T6830] Call Trace:
[ 120.807537][ T6830]
[ 120.807543][ T6830] dump_stack_lvl+0x189/0x250
[ 120.807564][ T6830] ? __kasan_check_byte+0x12/0x40
[ 120.807583][ T6830] ? __pfx_dump_stack_lvl+0x10/0x10
[ 120.807598][ T6830] ? lock_release+0x4b/0x3e0
[ 120.807614][ T6830] ? __virt_addr_valid+0x4a5/0x5c0
[ 120.807631][ T6830] print_report+0xca/0x230
[ 120.807644][ T6830] ? mas_next_slot+0x185/0xcf0
[ 120.807659][ T6830] kasan_report+0x118/0x150
[ 120.807674][ T6830] ? bpf_lsm_mmap_addr+0x9/0x20
[ 120.807690][ T6830] ? mas_next_slot+0x185/0xcf0
[ 120.807707][ T6830] mas_next_slot+0x185/0xcf0
[ 120.807728][ T6830] mas_find+0xb0e/0xd30
[ 120.807746][ T6830] __se_sys_mremap+0xaff/0xef0
[ 120.807766][ T6830] ? __pfx___se_sys_mremap+0x10/0x10
[ 120.807787][ T6830] ? do_syscall_64+0xbe/0x3b0
[ 120.807804][ T6830] ? __x64_sys_mremap+0x20/0xc0
[ 120.807817][ T6830] do_syscall_64+0xfa/0x3b0
[ 120.807834][ T6830] ? lockdep_hardirqs_on+0x9c/0x150
[ 120.807850][ T6830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.807863][ T6830] ? clear_bhb_loop+0x60/0xb0
[ 120.807878][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.807892][ T6830] RIP: 0033:0x7f4fecf8e929
[ 120.807905][ T6830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 120.807917][ T6830] RSP: 002b:00007fff93ea4718 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[ 120.807933][ T6830] RAX: ffffffffffffffda RBX: 00007f4fed1b5fa0 RCX: 00007f4fecf8e929
[ 120.807944][ T6830] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000
[ 120.807953][ T6830] RBP: 00007f4fed010b39 R08: 0000200000a00000 R09: 0000000000000000
[ 120.807962][ T6830] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[ 120.807970][ T6830] R13: 00007f4fed1b5fa0 R14: 00007f4fed1b5fa0 R15: 0000000000000005
[ 120.807985][ T6830]
[ 120.807997][ T6830]
[ 121.015762][ T6830] Allocated by task 6830:
[ 121.020088][ T6830] kasan_save_track+0x3e/0x80
[ 121.024765][ T6830] __kasan_slab_alloc+0x6c/0x80
[ 121.029610][ T6830] kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 121.035066][ T6830] mas_alloc_nodes+0x2e9/0x8e0
[ 121.039827][ T6830] mas_preallocate+0x3ad/0x6f0
[ 121.044586][ T6830] __split_vma+0x2fa/0xa00
[ 121.049005][ T6830] vms_gather_munmap_vmas+0x2de/0x12b0
[ 121.054459][ T6830] mmap_region+0x724/0x20c0
[ 121.058961][ T6830] do_mmap+0xc45/0x10d0
[ 121.063115][ T6830] vm_mmap_pgoff+0x2a6/0x4d0
[ 121.067701][ T6830] do_syscall_64+0xfa/0x3b0
[ 121.072203][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.078088][ T6830]
[ 121.080404][ T6830] Freed by task 23:
[ 121.084200][ T6830] kasan_save_track+0x3e/0x80
[ 121.088871][ T6830] kasan_save_free_info+0x46/0x50
[ 121.093887][ T6830] __kasan_slab_free+0x62/0x70
[ 121.098643][ T6830] kmem_cache_free+0x18f/0x400
[ 121.103401][ T6830] rcu_core+0xca8/0x1710
[ 121.107636][ T6830] handle_softirqs+0x283/0x870
[ 121.112393][ T6830] run_ksoftirqd+0x9b/0x100
[ 121.116891][ T6830] smpboot_thread_fn+0x53f/0xa60
[ 121.121825][ T6830] kthread+0x70e/0x8a0
[ 121.125889][ T6830] ret_from_fork+0x3f9/0x770
[ 121.130469][ T6830] ret_from_fork_asm+0x1a/0x30
[ 121.135234][ T6830]
[ 121.137555][ T6830] Last potentially related work creation:
[ 121.143265][ T6830] kasan_save_stack+0x3e/0x60
[ 121.147935][ T6830] kasan_record_aux_stack+0xbd/0xd0
[ 121.153132][ T6830] call_rcu+0x157/0x9c0
[ 121.157286][ T6830] mas_wr_store_entry+0x1f1b/0x25b0
[ 121.162487][ T6830] mas_store_prealloc+0xb00/0xf60
[ 121.167515][ T6830] vma_complete+0x224/0xae0
[ 121.172045][ T6830] __split_vma+0x8a6/0xa00
[ 121.176453][ T6830] vms_gather_munmap_vmas+0x2de/0x12b0
[ 121.181904][ T6830] do_vmi_align_munmap+0x25d/0x420
[ 121.187013][ T6830] do_vmi_munmap+0x253/0x2e0
[ 121.191599][ T6830] do_munmap+0xe1/0x140
[ 121.195757][ T6830] mremap_to+0x304/0x7b0
[ 121.199997][ T6830] __se_sys_mremap+0xa0b/0xef0
[ 121.204771][ T6830] do_syscall_64+0xfa/0x3b0
[ 121.209276][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.215598][ T6830]
[ 121.217918][ T6830] The buggy address belongs to the object at ffff8880755dc600
[ 121.217918][ T6830] which belongs to the cache maple_node of size 256
[ 121.231882][ T6830] The buggy address is located 0 bytes inside of
[ 121.231882][ T6830] freed 256-byte region [ffff8880755dc600, ffff8880755dc700)
[ 121.245499][ T6830]
[ 121.247820][ T6830] The buggy address belongs to the physical page:
[ 121.254234][ T6830] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x755dc
[ 121.262994][ T6830] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 121.271662][ T6830] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 121.279213][ T6830] page_type: f5(slab)
[ 121.283191][ T6830] raw: 00fff00000000040 ffff88801a491000 dead000000000122 0000000000000000
[ 121.291800][ T6830] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 121.300384][ T6830] head: 00fff00000000040 ffff88801a491000 dead000000000122 0000000000000000
[ 121.309051][ T6830] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 121.317770][ T6830] head: 00fff00000000001 ffffea0001d57701 00000000ffffffff 00000000ffffffff
[ 121.326610][ T6830] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 121.335269][ T6830] page dumped because: kasan: bad access detected
[ 121.341672][ T6830] page_owner tracks the page as allocated
[ 121.347383][ T6830] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6828, tgid 6828 (cmp), ts 120765032919, free_ts 112542256570
[ 121.368129][ T6830] post_alloc_hook+0x240/0x2a0
[ 121.372894][ T6830] get_page_from_freelist+0x21e4/0x22c0
[ 121.378442][ T6830] __alloc_frozen_pages_noprof+0x181/0x370
[ 121.384249][ T6830] alloc_pages_mpol+0x232/0x4a0
[ 121.389096][ T6830] allocate_slab+0x8a/0x370
[ 121.393666][ T6830] ___slab_alloc+0xbeb/0x1410
[ 121.398344][ T6830] kmem_cache_alloc_noprof+0x283/0x3c0
[ 121.403805][ T6830] mas_alloc_nodes+0x2e9/0x8e0
[ 121.408568][ T6830] mas_preallocate+0x3ad/0x6f0
[ 121.413329][ T6830] commit_merge+0x1fd/0x700
[ 121.417857][ T6830] vma_expand+0x40c/0x7e0
[ 121.422179][ T6830] vma_merge_new_range+0x6a3/0x860
[ 121.427293][ T6830] mmap_region+0xd46/0x20c0
[ 121.431793][ T6830] do_mmap+0xc45/0x10d0
[ 121.435944][ T6830] vm_mmap_pgoff+0x2a6/0x4d0
[ 121.440537][ T6830] ksys_mmap_pgoff+0x51f/0x760
[ 121.445296][ T6830] page last free pid 5955 tgid 5955 stack trace:
[ 121.451612][ T6830] __free_frozen_pages+0xbc4/0xd30
[ 121.456723][ T6830] __slab_free+0x303/0x3c0
[ 121.461144][ T6830] qlist_free_all+0x97/0x140
[ 121.465727][ T6830] kasan_quarantine_reduce+0x148/0x160
[ 121.471196][ T6830] __kasan_slab_alloc+0x22/0x80
[ 121.476070][ T6830] kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 121.481542][ T6830] getname_flags+0xb8/0x540
[ 121.486060][ T6830] do_sys_openat2+0xbc/0x1c0
[ 121.490648][ T6830] __x64_sys_openat+0x138/0x170
[ 121.495599][ T6830] do_syscall_64+0xfa/0x3b0
[ 121.500103][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.506005][ T6830]
[ 121.508334][ T6830] Memory state around the buggy address:
[ 121.513957][ T6830] ffff8880755dc500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 121.522015][ T6830] ffff8880755dc580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 121.530078][ T6830] >ffff8880755dc600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 121.538140][ T6830] ^
[ 121.542202][ T6830] ffff8880755dc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 121.550607][ T6830] ffff8880755dc700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 121.558663][ T6830] ==================================================================
[ 121.597689][ T6830] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 121.604944][ T6830] CPU: 0 UID: 0 PID: 6830 Comm: syz.0.656 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full)
[ 121.616343][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 121.626423][ T6830] Call Trace:
[ 121.629727][ T6830]
[ 121.632686][ T6830] dump_stack_lvl+0x99/0x250
[ 121.637307][ T6830] ? __asan_memcpy+0x40/0x70
[ 121.641938][ T6830] ? __pfx_dump_stack_lvl+0x10/0x10
[ 121.647160][ T6830] ? __pfx__printk+0x10/0x10
[ 121.651801][ T6830] vpanic+0x281/0x750
[ 121.655785][ T6830] ? preempt_schedule+0xae/0xc0
[ 121.660650][ T6830] ? __pfx_vpanic+0x10/0x10
[ 121.665173][ T6830] ? preempt_schedule_common+0x83/0xd0
[ 121.670649][ T6830] ? preempt_schedule+0xae/0xc0
[ 121.675516][ T6830] ? __pfx_preempt_schedule+0x10/0x10
[ 121.680892][ T6830] panic+0xb9/0xc0
[ 121.684616][ T6830] ? __pfx_panic+0x10/0x10
[ 121.689036][ T6830] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 121.694936][ T6830] ? mas_next_slot+0x185/0xcf0
[ 121.699699][ T6830] check_panic_on_warn+0x89/0xb0
[ 121.704645][ T6830] ? mas_next_slot+0x185/0xcf0
[ 121.709411][ T6830] end_report+0x78/0x160
[ 121.713657][ T6830] kasan_report+0x129/0x150
[ 121.718163][ T6830] ? bpf_lsm_mmap_addr+0x9/0x20
[ 121.723016][ T6830] ? mas_next_slot+0x185/0xcf0
[ 121.727782][ T6830] mas_next_slot+0x185/0xcf0
[ 121.732385][ T6830] mas_find+0xb0e/0xd30
[ 121.736543][ T6830] __se_sys_mremap+0xaff/0xef0
[ 121.741311][ T6830] ? __pfx___se_sys_mremap+0x10/0x10
[ 121.746603][ T6830] ? do_syscall_64+0xbe/0x3b0
[ 121.751284][ T6830] ? __x64_sys_mremap+0x20/0xc0
[ 121.756223][ T6830] do_syscall_64+0xfa/0x3b0
[ 121.760726][ T6830] ? lockdep_hardirqs_on+0x9c/0x150
[ 121.765967][ T6830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.772146][ T6830] ? clear_bhb_loop+0x60/0xb0
[ 121.776837][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.782729][ T6830] RIP: 0033:0x7f4fecf8e929
[ 121.787154][ T6830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 121.806846][ T6830] RSP: 002b:00007fff93ea4718 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[ 121.815262][ T6830] RAX: ffffffffffffffda RBX: 00007f4fed1b5fa0 RCX: 00007f4fecf8e929
[ 121.823234][ T6830] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000
[ 121.831210][ T6830] RBP: 00007f4fed010b39 R08: 0000200000a00000 R09: 0000000000000000
[ 121.839180][ T6830] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[ 121.847148][ T6830] R13: 00007f4fed1b5fa0 R14: 00007f4fed1b5fa0 R15: 0000000000000005
[ 121.855122][ T6830]
[ 121.858404][ T6830] Kernel Offset: disabled
[ 121.862721][ T6830] Rebooting in 86400 seconds..