Warning: Permanently added '10.128.1.233' (ED25519) to the list of known hosts. 2025/08/14 19:05:04 ignoring optional flag "sandboxArg"="0" 2025/08/14 19:05:05 parsed 1 programs [ 96.268875][ T6175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.215953][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.225800][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.240335][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.248282][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.402240][ T6219] chnl_net:caif_netlink_parms(): no params data found [ 99.458989][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.466944][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.475067][ T6219] bridge_slave_0: entered allmulticast mode [ 99.482123][ T6219] bridge_slave_0: entered promiscuous mode [ 99.494025][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.501472][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.508998][ T6219] bridge_slave_1: entered allmulticast mode [ 99.515702][ T6219] bridge_slave_1: entered promiscuous mode [ 99.532968][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.545681][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.576802][ T6219] team0: Port device team_slave_0 added [ 99.584594][ T6219] team0: Port device team_slave_1 added [ 99.600872][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.607844][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.635084][ T6219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.648618][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.655894][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.682396][ T6219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.711198][ T6219] hsr_slave_0: entered promiscuous mode [ 99.717301][ T6219] hsr_slave_1: entered promiscuous mode [ 100.106965][ T6219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.118476][ T6219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.128305][ T6219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.137887][ T6219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.166433][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.173622][ T6219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.181217][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.188351][ T6219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.229299][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.245591][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.254270][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.267836][ T6219] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.279081][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.286264][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.300491][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.307705][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.480626][ T6219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.521284][ T6219] veth0_vlan: entered promiscuous mode [ 100.533091][ T6219] veth1_vlan: entered promiscuous mode [ 100.566822][ T6219] veth0_macvtap: entered promiscuous mode [ 100.576535][ T6219] veth1_macvtap: entered promiscuous mode [ 100.596182][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.610667][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.625281][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.645401][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.671081][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.689167][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.776652][ T3016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.853118][ T3016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.913514][ T3016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.956706][ T3016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.993834][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.011683][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.023567][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.031840][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.040598][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/08/14 19:05:14 executed programs: 0 [ 102.170323][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.177863][ T5188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.185729][ T5188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.193889][ T5188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.201442][ T5188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.350029][ T6375] chnl_net:caif_netlink_parms(): no params data found [ 102.427148][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.434982][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.442611][ T6375] bridge_slave_0: entered allmulticast mode [ 102.450070][ T6375] bridge_slave_0: entered promiscuous mode [ 102.457587][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.464824][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.472195][ T6375] bridge_slave_1: entered allmulticast mode [ 102.479492][ T6375] bridge_slave_1: entered promiscuous mode [ 102.505635][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.523812][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.556254][ T6375] team0: Port device team_slave_0 added [ 102.564982][ T6375] team0: Port device team_slave_1 added [ 102.590964][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.602276][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.631462][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.643855][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.652289][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.680410][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.719132][ T6375] hsr_slave_0: entered promiscuous mode [ 102.725677][ T6375] hsr_slave_1: entered promiscuous mode [ 102.734990][ T6375] debugfs: 'hsr0' already exists in 'hsr' [ 102.741808][ T6375] Cannot create hsr debugfs directory [ 103.807750][ T3016] bridge_slave_1: left allmulticast mode [ 103.814356][ T3016] bridge_slave_1: left promiscuous mode [ 103.822137][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.831948][ T3016] bridge_slave_0: left allmulticast mode [ 103.837753][ T3016] bridge_slave_0: left promiscuous mode [ 103.844232][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.955231][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.967335][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.979798][ T3016] bond0 (unregistering): Released all slaves [ 104.067550][ T3016] hsr_slave_0: left promiscuous mode [ 104.075134][ T3016] hsr_slave_1: left promiscuous mode [ 104.081620][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.089111][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.100080][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.107504][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.117194][ T3016] veth1_macvtap: left promiscuous mode [ 104.123017][ T3016] veth0_macvtap: left promiscuous mode [ 104.128570][ T3016] veth1_vlan: left promiscuous mode [ 104.135512][ T3016] veth0_vlan: left promiscuous mode [ 104.219706][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 104.231769][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 104.289564][ T5188] Bluetooth: hci0: command tx timeout [ 104.414065][ T6375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.424087][ T6375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.433953][ T6375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.448037][ T6375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.520953][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.536299][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.556605][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.564363][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.586658][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.593969][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.810550][ T6375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.838755][ T6375] veth0_vlan: entered promiscuous mode [ 104.848916][ T6375] veth1_vlan: entered promiscuous mode [ 104.883663][ T6375] veth0_macvtap: entered promiscuous mode [ 104.891482][ T6375] veth1_macvtap: entered promiscuous mode [ 104.905784][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.918142][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.937245][ T2981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.947949][ T2981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.965255][ T2981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.974691][ T1106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.018779][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.027536][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.044825][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.053527][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.369576][ T5188] Bluetooth: hci0: command tx timeout 2025/08/14 19:05:19 executed programs: 123 [ 108.460019][ T5188] Bluetooth: hci0: command tx timeout [ 110.529911][ T5188] Bluetooth: hci0: command tx timeout 2025/08/14 19:05:24 executed programs: 423 [ 115.173738][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.181959][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.189193][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.196842][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.204747][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.282818][ T7691] chnl_net:caif_netlink_parms(): no params data found [ 115.317645][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.325441][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.332875][ T7691] bridge_slave_0: entered allmulticast mode [ 115.339662][ T7691] bridge_slave_0: entered promiscuous mode [ 115.346690][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.354094][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.361494][ T7691] bridge_slave_1: entered allmulticast mode [ 115.368223][ T7691] bridge_slave_1: entered promiscuous mode [ 115.386275][ T7691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.397727][ T7691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.409270][ T1106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.432618][ T7691] team0: Port device team_slave_0 added [ 115.440791][ T7691] team0: Port device team_slave_1 added [ 115.454391][ T1106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.473360][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.481159][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.507277][ T7691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.519184][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.526840][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.552874][ T7691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.565487][ T1106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.592840][ T7691] hsr_slave_0: entered promiscuous mode [ 115.599058][ T7691] hsr_slave_1: entered promiscuous mode [ 115.615486][ T1106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.707976][ T1106] bridge_slave_1: left allmulticast mode [ 115.713926][ T1106] bridge_slave_1: left promiscuous mode [ 115.720772][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.730026][ T1106] bridge_slave_0: left allmulticast mode [ 115.735659][ T1106] bridge_slave_0: left promiscuous mode [ 115.742001][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.825154][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.835224][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.845096][ T1106] bond0 (unregistering): Released all slaves [ 116.040812][ T1106] hsr_slave_0: left promiscuous mode [ 116.046795][ T1106] hsr_slave_1: left promiscuous mode [ 116.054651][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.063913][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.075328][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.083176][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.094026][ T1106] veth1_macvtap: left promiscuous mode [ 116.100741][ T1106] veth0_macvtap: left promiscuous mode [ 116.106333][ T1106] veth1_vlan: left promiscuous mode [ 116.112062][ T1106] veth0_vlan: left promiscuous mode [ 116.205257][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 116.218879][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 116.315394][ T7691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.325768][ T7691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.335264][ T7691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.344626][ T7691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.415391][ T7691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.434864][ T7691] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.446458][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.453636][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.465955][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.473363][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.519172][ T7691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.657448][ T7691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.684200][ T7691] veth0_vlan: entered promiscuous mode [ 116.693167][ T7691] veth1_vlan: entered promiscuous mode [ 116.712651][ T7691] veth0_macvtap: entered promiscuous mode [ 116.721087][ T7691] veth1_macvtap: entered promiscuous mode [ 116.734202][ T7691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.746456][ T7691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.759205][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.768660][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.778882][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.788066][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.818569][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.826891][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.843193][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.851511][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/14 19:05:29 executed programs: 621 [ 117.249654][ T51] Bluetooth: hci1: command tx timeout [ 119.329815][ T51] Bluetooth: hci1: command tx timeout [ 121.419850][ T51] Bluetooth: hci1: command tx timeout 2025/08/14 19:05:34 executed programs: 915 [ 123.489417][ T51] Bluetooth: hci1: command tx timeout [ 127.010507][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.017772][ T5188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.025442][ T5188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.034431][ T5188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.043679][ T5188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.121908][ T8941] chnl_net:caif_netlink_parms(): no params data found [ 127.157556][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.165122][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.172917][ T8941] bridge_slave_0: entered allmulticast mode [ 127.180147][ T8941] bridge_slave_0: entered promiscuous mode [ 127.187205][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.194439][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.201816][ T8941] bridge_slave_1: entered allmulticast mode [ 127.208302][ T8941] bridge_slave_1: entered promiscuous mode [ 127.223586][ T1106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.242598][ T8941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.253679][ T8941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.274109][ T8941] team0: Port device team_slave_0 added [ 127.282084][ T8941] team0: Port device team_slave_1 added [ 127.290331][ T1106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.311838][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.318884][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.345807][ T8941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.357631][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.365241][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.391877][ T8941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.405405][ T1106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.433600][ T8941] hsr_slave_0: entered promiscuous mode [ 127.440211][ T8941] hsr_slave_1: entered promiscuous mode [ 127.446279][ T8941] debugfs: 'hsr0' already exists in 'hsr' [ 127.452643][ T8941] Cannot create hsr debugfs directory [ 127.461998][ T1106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.550495][ T1106] bridge_slave_1: left allmulticast mode [ 127.556422][ T1106] bridge_slave_1: left promiscuous mode [ 127.567554][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.576184][ T1106] bridge_slave_0: left allmulticast mode [ 127.582260][ T1106] bridge_slave_0: left promiscuous mode [ 127.588009][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.694478][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.704446][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.714206][ T1106] bond0 (unregistering): Released all slaves [ 127.932574][ T1106] hsr_slave_0: left promiscuous mode [ 127.938602][ T1106] hsr_slave_1: left promiscuous mode [ 127.947306][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.954887][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.963383][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.971168][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.982493][ T1106] veth1_macvtap: left promiscuous mode [ 127.988032][ T1106] veth0_macvtap: left promiscuous mode [ 127.993948][ T1106] veth1_vlan: left promiscuous mode [ 127.999238][ T1106] veth0_vlan: left promiscuous mode [ 128.077700][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 128.093496][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 128.171627][ T8941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.188079][ T8941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.210496][ T8941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.220693][ T8941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.293948][ T8941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.315393][ T8941] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.327598][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.334882][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.353684][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.360878][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.519724][ T8941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.546367][ T8941] veth0_vlan: entered promiscuous mode [ 128.555736][ T8941] veth1_vlan: entered promiscuous mode [ 128.576124][ T8941] veth0_macvtap: entered promiscuous mode [ 128.585027][ T8941] veth1_macvtap: entered promiscuous mode [ 128.597842][ T8941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.610193][ T8941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.622124][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.631551][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.641398][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.651578][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/08/14 19:05:41 executed programs: 1202 [ 128.684799][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.693234][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.708941][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.717575][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.091379][ T5188] Bluetooth: hci0: command tx timeout [ 131.169483][ T5188] Bluetooth: hci0: command tx timeout [ 132.931612][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.938049][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.251658][ T5188] Bluetooth: hci0: command tx timeout 2025/08/14 19:05:46 executed programs: 1497 [ 135.329707][ T5188] Bluetooth: hci0: command tx timeout 2025/08/14 19:05:51 executed programs: 1791 [ 138.909747][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.917429][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.925406][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.934006][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.941986][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.017823][T10192] chnl_net:caif_netlink_parms(): no params data found [ 139.056283][T10192] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.063780][T10192] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.071823][T10192] bridge_slave_0: entered allmulticast mode [ 139.078855][T10192] bridge_slave_0: entered promiscuous mode [ 139.086744][T10192] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.094413][T10192] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.102063][T10192] bridge_slave_1: entered allmulticast mode [ 139.109080][T10192] bridge_slave_1: entered promiscuous mode [ 139.124106][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.142098][T10192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.153635][T10192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.175927][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.188664][T10192] team0: Port device team_slave_0 added [ 139.195733][T10192] team0: Port device team_slave_1 added [ 139.211558][T10192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.218812][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.245705][T10192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.258686][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.270870][T10192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.277913][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.305112][T10192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.331084][T10192] hsr_slave_0: entered promiscuous mode [ 139.337815][T10192] hsr_slave_1: entered promiscuous mode [ 139.347044][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.456555][ T13] bridge_slave_1: left allmulticast mode [ 139.463765][ T13] bridge_slave_1: left promiscuous mode [ 139.470429][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.479212][ T13] bridge_slave_0: left allmulticast mode [ 139.485763][ T13] bridge_slave_0: left promiscuous mode [ 139.492661][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.625383][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.643239][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.653035][ T13] bond0 (unregistering): Released all slaves [ 139.852209][ T13] hsr_slave_0: left promiscuous mode [ 139.858162][ T13] hsr_slave_1: left promiscuous mode [ 139.867194][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.878067][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.887047][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.895588][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.913804][ T13] veth1_macvtap: left promiscuous mode [ 139.920296][ T13] veth0_macvtap: left promiscuous mode [ 139.925895][ T13] veth1_vlan: left promiscuous mode [ 139.931944][ T13] veth0_vlan: left promiscuous mode [ 140.078616][ T13] team0 (unregistering): Port device team_slave_1 removed [ 140.093177][ T13] team0 (unregistering): Port device team_slave_0 removed [ 140.182229][T10192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.202139][T10192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.225410][T10192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.235695][T10192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.306769][T10192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.325823][T10192] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.337193][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.344549][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.365620][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.372994][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.518187][T10192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.545976][T10192] veth0_vlan: entered promiscuous mode [ 140.554854][T10192] veth1_vlan: entered promiscuous mode [ 140.573894][T10192] veth0_macvtap: entered promiscuous mode [ 140.582892][T10192] veth1_macvtap: entered promiscuous mode [ 140.597805][T10192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.609211][T10192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.620749][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.629903][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.638828][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.649746][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.680408][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.688515][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.705421][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.713853][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.010368][ T51] Bluetooth: hci1: command tx timeout [ 143.089596][ T51] Bluetooth: hci1: command tx timeout 2025/08/14 19:05:56 executed programs: 1980 [ 145.169628][ T51] Bluetooth: hci1: command tx timeout [ 147.249535][ T51] Bluetooth: hci1: command tx timeout 2025/08/14 19:06:01 executed programs: 2278 [ 150.833366][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.842374][ T5188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.851179][ T5188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.859041][ T5188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.867999][ T5188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.943726][T11454] chnl_net:caif_netlink_parms(): no params data found [ 150.981002][T11454] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.988126][T11454] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.995735][T11454] bridge_slave_0: entered allmulticast mode [ 151.002636][T11454] bridge_slave_0: entered promiscuous mode [ 151.010456][T11454] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.017650][T11454] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.025308][T11454] bridge_slave_1: entered allmulticast mode [ 151.032787][T11454] bridge_slave_1: entered promiscuous mode [ 151.050109][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.068418][T11454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.079281][T11454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.099217][T11454] team0: Port device team_slave_0 added [ 151.107133][T11454] team0: Port device team_slave_1 added [ 151.123438][T11454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.132202][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.158557][T11454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.170483][T11454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.177543][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.203790][T11454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.217669][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.244536][T11454] hsr_slave_0: entered promiscuous mode [ 151.250827][T11454] hsr_slave_1: entered promiscuous mode [ 151.256877][T11454] debugfs: 'hsr0' already exists in 'hsr' [ 151.262729][T11454] Cannot create hsr debugfs directory [ 151.284516][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.326894][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.412064][ T13] bridge_slave_1: left allmulticast mode [ 151.418090][ T13] bridge_slave_1: left promiscuous mode [ 151.424297][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.432495][ T13] bridge_slave_0: left allmulticast mode [ 151.438302][ T13] bridge_slave_0: left promiscuous mode [ 151.444400][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.532866][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.543307][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.552808][ T13] bond0 (unregistering): Released all slaves [ 151.785662][ T13] hsr_slave_0: left promiscuous mode [ 151.793018][ T13] hsr_slave_1: left promiscuous mode [ 151.798881][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.806930][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.817151][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.824848][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.834509][ T13] veth1_macvtap: left promiscuous mode [ 151.840277][ T13] veth0_macvtap: left promiscuous mode [ 151.845909][ T13] veth1_vlan: left promiscuous mode [ 151.851222][ T13] veth0_vlan: left promiscuous mode [ 151.934524][ T13] team0 (unregistering): Port device team_slave_1 removed [ 151.945056][ T13] team0 (unregistering): Port device team_slave_0 removed [ 152.050556][T11454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.067063][T11454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.079946][T11454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.090314][T11454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.156992][T11454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.174464][T11454] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.187156][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.194460][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.215692][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.222889][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.377515][T11454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.405179][T11454] veth0_vlan: entered promiscuous mode [ 152.413695][T11454] veth1_vlan: entered promiscuous mode [ 152.432540][T11454] veth0_macvtap: entered promiscuous mode [ 152.440791][T11454] veth1_macvtap: entered promiscuous mode [ 152.454475][T11454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.467964][T11454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.480334][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.489492][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.498547][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.510953][ T2981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.540258][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.548234][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.567739][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.576071][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.929458][ T51] Bluetooth: hci0: command tx timeout 2025/08/14 19:06:06 executed programs: 2470 [ 155.009742][ T51] Bluetooth: hci0: command tx timeout [ 157.089676][ T51] Bluetooth: hci0: command tx timeout [ 157.491867][T12084] ================================================================== [ 157.500408][T12084] BUG: KASAN: slab-use-after-free in __se_sys_mremap+0xb33/0x1150 [ 157.508316][T12084] Read of size 8 at addr ffff888033608058 by task syz.0.2706/12084 [ 157.516206][T12084] [ 157.518532][T12084] CPU: 1 UID: 0 PID: 12084 Comm: syz.0.2706 Not tainted 6.17.0-rc1-next-20250814-syzkaller-g931e46dcbc7e #0 PREEMPT(full) [ 157.518554][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.518565][T12084] Call Trace: [ 157.518571][T12084] [ 157.518577][T12084] dump_stack_lvl+0x189/0x250 [ 157.518596][T12084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.518609][T12084] ? lock_release+0x4b/0x3e0 [ 157.518621][T12084] ? __virt_addr_valid+0x4a5/0x5c0 [ 157.518630][T12084] print_report+0xca/0x240 [ 157.518640][T12084] ? __se_sys_mremap+0xb33/0x1150 [ 157.518653][T12084] kasan_report+0x118/0x150 [ 157.518664][T12084] ? __se_sys_mremap+0xb33/0x1150 [ 157.518677][T12084] __se_sys_mremap+0xb33/0x1150 [ 157.518694][T12084] ? __pfx___se_sys_mremap+0x10/0x10 [ 157.518711][T12084] ? rcu_is_watching+0x15/0xb0 [ 157.518723][T12084] ? __x64_sys_mremap+0x20/0xc0 [ 157.518735][T12084] do_syscall_64+0xfa/0x3b0 [ 157.518747][T12084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.518756][T12084] ? clear_bhb_loop+0x60/0xb0 [ 157.518766][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.518775][T12084] RIP: 0033:0x7f04d158e9a9 [ 157.518796][T12084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.518804][T12084] RSP: 002b:00007f04d2321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 157.518816][T12084] RAX: ffffffffffffffda RBX: 00007f04d17b5fa0 RCX: 00007f04d158e9a9 [ 157.518823][T12084] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000 [ 157.518829][T12084] RBP: 00007f04d1610d69 R08: 0000200000a00000 R09: 0000000000000000 [ 157.518835][T12084] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 157.518841][T12084] R13: 0000000000000000 R14: 00007f04d17b5fa0 R15: 00007ffcc354b158 [ 157.518850][T12084] [ 157.518854][T12084] [ 157.708832][T12084] Allocated by task 11454: [ 157.713231][T12084] kasan_save_track+0x3e/0x80 [ 157.717899][T12084] __kasan_slab_alloc+0x6c/0x80 [ 157.722729][T12084] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 157.728611][T12084] vm_area_dup+0x2b/0x680 [ 157.732953][T12084] dup_mmap+0x90c/0x1ac0 [ 157.737462][T12084] copy_mm+0x13c/0x4b0 [ 157.741625][T12084] copy_process+0x1706/0x3c00 [ 157.746304][T12084] kernel_clone+0x21e/0x840 [ 157.750898][T12084] __x64_sys_clone+0x18b/0x1e0 [ 157.755838][T12084] do_syscall_64+0xfa/0x3b0 [ 157.760343][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.766326][T12084] [ 157.768733][T12084] Freed by task 23: [ 157.772539][T12084] kasan_save_track+0x3e/0x80 [ 157.777219][T12084] __kasan_save_free_info+0x46/0x50 [ 157.782427][T12084] __kasan_slab_free+0x5b/0x80 [ 157.787496][T12084] slab_free_after_rcu_debug+0x129/0x2a0 [ 157.793120][T12084] rcu_core+0xca8/0x1770 [ 157.797442][T12084] handle_softirqs+0x286/0x870 [ 157.802463][T12084] run_ksoftirqd+0x9b/0x100 [ 157.806960][T12084] smpboot_thread_fn+0x542/0xa60 [ 157.811979][T12084] kthread+0x711/0x8a0 [ 157.816052][T12084] ret_from_fork+0x3f9/0x770 [ 157.820628][T12084] ret_from_fork_asm+0x1a/0x30 [ 157.825376][T12084] [ 157.827681][T12084] Last potentially related work creation: [ 157.833385][T12084] kasan_save_stack+0x3e/0x60 [ 157.838139][T12084] kasan_record_aux_stack+0xbd/0xd0 [ 157.843352][T12084] kmem_cache_free+0x2f6/0x400 [ 157.848100][T12084] vms_complete_munmap_vmas+0x626/0x8a0 [ 157.853808][T12084] do_vmi_align_munmap+0x358/0x420 [ 157.858920][T12084] do_vmi_munmap+0x253/0x2e0 [ 157.863503][T12084] do_munmap+0xe1/0x140 [ 157.867654][T12084] mremap_to+0x2df/0x7a0 [ 157.871942][T12084] __se_sys_mremap+0xadf/0x1150 [ 157.876779][T12084] do_syscall_64+0xfa/0x3b0 [ 157.881268][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.887190][T12084] [ 157.889523][T12084] The buggy address belongs to the object at ffff888033608000 [ 157.889523][T12084] which belongs to the cache vm_area_struct of size 256 [ 157.904022][T12084] The buggy address is located 88 bytes inside of [ 157.904022][T12084] freed 256-byte region [ffff888033608000, ffff888033608100) [ 157.917840][T12084] [ 157.920153][T12084] The buggy address belongs to the physical page: [ 157.926563][T12084] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33608 [ 157.935578][T12084] memcg:ffff888028d05901 [ 157.939808][T12084] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 157.947356][T12084] page_type: f5(slab) [ 157.951627][T12084] raw: 00fff00000000000 ffff88814047eb40 ffffea0001d83a40 0000000000000007 [ 157.960308][T12084] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888028d05901 [ 157.969111][T12084] page dumped because: kasan: bad access detected [ 157.975554][T12084] page_owner tracks the page as allocated [ 157.981795][T12084] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10192, tgid 10192 (syz-executor), ts 149327165862, free_ts 149319604861 [ 158.001804][T12084] post_alloc_hook+0x240/0x2a0 [ 158.006568][T12084] get_page_from_freelist+0x21e4/0x22c0 [ 158.012561][T12084] __alloc_frozen_pages_noprof+0x181/0x370 [ 158.018789][T12084] alloc_pages_mpol+0x232/0x4a0 [ 158.023732][T12084] allocate_slab+0x8a/0x370 [ 158.028336][T12084] ___slab_alloc+0xbeb/0x1410 [ 158.033450][T12084] kmem_cache_alloc_noprof+0x283/0x3c0 [ 158.038909][T12084] vm_area_dup+0x2b/0x680 [ 158.043233][T12084] dup_mmap+0x90c/0x1ac0 [ 158.047564][T12084] copy_mm+0x13c/0x4b0 [ 158.051631][T12084] copy_process+0x1706/0x3c00 [ 158.056391][T12084] kernel_clone+0x21e/0x840 [ 158.060975][T12084] __x64_sys_clone+0x18b/0x1e0 [ 158.065731][T12084] do_syscall_64+0xfa/0x3b0 [ 158.070310][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.076209][T12084] page last free pid 11274 tgid 11274 stack trace: [ 158.082788][T12084] __free_frozen_pages+0xbc4/0xd30 [ 158.087919][T12084] __tlb_remove_table+0x2d2/0x3b0 [ 158.092942][T12084] tlb_remove_table_rcu+0x85/0x100 [ 158.098053][T12084] rcu_core+0xca8/0x1770 [ 158.102548][T12084] handle_softirqs+0x286/0x870 [ 158.107299][T12084] __irq_exit_rcu+0xca/0x1f0 [ 158.111963][T12084] irq_exit_rcu+0x9/0x30 [ 158.116287][T12084] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 158.121901][T12084] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 158.127891][T12084] [ 158.130389][T12084] Memory state around the buggy address: [ 158.136224][T12084] ffff888033607f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.144561][T12084] ffff888033607f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.153242][T12084] >ffff888033608000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.161399][T12084] ^ [ 158.168675][T12084] ffff888033608080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.176813][T12084] ffff888033608100: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 158.184879][T12084] ================================================================== [ 158.198458][T12084] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 158.205696][T12084] CPU: 0 UID: 0 PID: 12084 Comm: syz.0.2706 Not tainted 6.17.0-rc1-next-20250814-syzkaller-g931e46dcbc7e #0 PREEMPT(full) [ 158.218543][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.228839][T12084] Call Trace: [ 158.232130][T12084] [ 158.235067][T12084] dump_stack_lvl+0x99/0x250 [ 158.239849][T12084] ? __asan_memcpy+0x40/0x70 [ 158.244786][T12084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.250071][T12084] ? __pfx__printk+0x10/0x10 [ 158.254658][T12084] vpanic+0x281/0x750 [ 158.258735][T12084] ? preempt_schedule+0xae/0xc0 [ 158.263570][T12084] ? __pfx_vpanic+0x10/0x10 [ 158.268238][T12084] ? preempt_schedule_common+0x83/0xd0 [ 158.273693][T12084] ? preempt_schedule+0xae/0xc0 [ 158.278621][T12084] ? __pfx_preempt_schedule+0x10/0x10 [ 158.284025][T12084] panic+0xb9/0xc0 [ 158.287756][T12084] ? __pfx_panic+0x10/0x10 [ 158.292171][T12084] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 158.298068][T12084] ? __se_sys_mremap+0xb33/0x1150 [ 158.303089][T12084] check_panic_on_warn+0x89/0xb0 [ 158.308386][T12084] ? __se_sys_mremap+0xb33/0x1150 [ 158.313408][T12084] end_report+0x78/0x160 [ 158.317647][T12084] kasan_report+0x129/0x150 [ 158.322231][T12084] ? __se_sys_mremap+0xb33/0x1150 [ 158.327425][T12084] __se_sys_mremap+0xb33/0x1150 [ 158.332274][T12084] ? __pfx___se_sys_mremap+0x10/0x10 [ 158.337729][T12084] ? rcu_is_watching+0x15/0xb0 [ 158.342487][T12084] ? __x64_sys_mremap+0x20/0xc0 [ 158.347772][T12084] do_syscall_64+0xfa/0x3b0 [ 158.352620][T12084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.358677][T12084] ? clear_bhb_loop+0x60/0xb0 [ 158.363432][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.369426][T12084] RIP: 0033:0x7f04d158e9a9 [ 158.373844][T12084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.393623][T12084] RSP: 002b:00007f04d2321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 158.402203][T12084] RAX: ffffffffffffffda RBX: 00007f04d17b5fa0 RCX: 00007f04d158e9a9 [ 158.410367][T12084] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000 [ 158.418456][T12084] RBP: 00007f04d1610d69 R08: 0000200000a00000 R09: 0000000000000000 [ 158.426714][T12084] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 158.434877][T12084] R13: 0000000000000000 R14: 00007f04d17b5fa0 R15: 00007ffcc354b158 [ 158.443032][T12084] [ 158.446399][T12084] Kernel Offset: disabled [ 158.450796][T12084] Rebooting in 86400 seconds..