[ 101.426059][ T24] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. 2025/06/16 09:07:03 ignoring optional flag "sandboxArg"="0" 2025/06/16 09:07:04 parsed 1 programs [ 108.914080][ T5834] cgroup: Unknown subsys name 'net' [ 109.067581][ T5834] cgroup: Unknown subsys name 'cpuset' [ 109.078011][ T5834] cgroup: Unknown subsys name 'rlimit' [ 110.824472][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.704200][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 114.269036][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.279152][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.286889][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.295073][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.306817][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.860434][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.894972][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.932090][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 116.600628][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.608590][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.813851][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.821161][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.829254][ T5872] bridge_slave_0: entered allmulticast mode [ 116.838356][ T5872] bridge_slave_0: entered promiscuous mode [ 116.852592][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.859776][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.868296][ T5872] bridge_slave_1: entered allmulticast mode [ 116.888567][ T5872] bridge_slave_1: entered promiscuous mode [ 116.954235][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.977308][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.059101][ T5872] team0: Port device team_slave_0 added [ 117.076269][ T5872] team0: Port device team_slave_1 added [ 117.148298][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.155846][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.183518][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.279906][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.292473][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.347333][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.469893][ T5872] hsr_slave_0: entered promiscuous mode [ 117.477889][ T5872] hsr_slave_1: entered promiscuous mode [ 117.685665][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.699311][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.710410][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.721444][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.813703][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.835938][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.850857][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.858114][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.876696][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.883868][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.135480][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.184948][ T5872] veth0_vlan: entered promiscuous mode [ 118.198084][ T5872] veth1_vlan: entered promiscuous mode [ 118.233381][ T5872] veth0_macvtap: entered promiscuous mode [ 118.244135][ T5872] veth1_macvtap: entered promiscuous mode [ 118.265734][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.281421][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.294118][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.303231][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.311957][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.320796][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/06/16 09:07:18 executed programs: 0 [ 118.546426][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.571457][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.579827][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.588595][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.596399][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.607287][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.610696][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.616150][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.625696][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.629823][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.639401][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.657354][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.667426][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.685126][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.695825][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.768835][ T1002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.803666][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.814260][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.831906][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.843560][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.855365][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.024168][ T5946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.032331][ T5946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.041748][ T5946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.056168][ T5946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.067100][ T5946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.067455][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.098379][ T5944] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.107056][ T5944] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.124408][ T5944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.132123][ T5944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.172237][ T1002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.408324][ T1002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.549797][ T1002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.008536][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 120.336339][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 120.359667][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 120.399887][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 120.488613][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 120.642663][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.653497][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.661038][ T5941] bridge_slave_0: entered allmulticast mode [ 120.669081][ T5941] bridge_slave_0: entered promiscuous mode [ 120.677963][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 120.704192][ T51] Bluetooth: hci1: command tx timeout [ 120.713073][ T51] Bluetooth: hci0: command tx timeout [ 120.756730][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.764113][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.771294][ T5941] bridge_slave_1: entered allmulticast mode [ 120.779739][ T5941] bridge_slave_1: entered promiscuous mode [ 120.786166][ T51] Bluetooth: hci2: command tx timeout [ 120.952513][ T51] Bluetooth: hci3: command tx timeout [ 120.968818][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.980313][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.988102][ T5943] bridge_slave_0: entered allmulticast mode [ 120.996877][ T5943] bridge_slave_0: entered promiscuous mode [ 121.050473][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.111721][ T51] Bluetooth: hci4: command tx timeout [ 121.182884][ T51] Bluetooth: hci5: command tx timeout [ 121.211019][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.222164][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.237058][ T5951] bridge_slave_0: entered allmulticast mode [ 121.272932][ T5951] bridge_slave_0: entered promiscuous mode [ 121.287447][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.307099][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.323295][ T5943] bridge_slave_1: entered allmulticast mode [ 121.345002][ T5943] bridge_slave_1: entered promiscuous mode [ 121.354415][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.361615][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.369570][ T5940] bridge_slave_0: entered allmulticast mode [ 121.377987][ T5940] bridge_slave_0: entered promiscuous mode [ 121.387285][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.394795][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.402276][ T5940] bridge_slave_1: entered allmulticast mode [ 121.410181][ T5940] bridge_slave_1: entered promiscuous mode [ 121.420512][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.438264][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.445566][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.453091][ T5957] bridge_slave_0: entered allmulticast mode [ 121.460659][ T5957] bridge_slave_0: entered promiscuous mode [ 121.470478][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.477814][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.485331][ T5951] bridge_slave_1: entered allmulticast mode [ 121.493329][ T5951] bridge_slave_1: entered promiscuous mode [ 121.579282][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.586663][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.595201][ T5957] bridge_slave_1: entered allmulticast mode [ 121.603064][ T5957] bridge_slave_1: entered promiscuous mode [ 121.698141][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.710509][ T5941] team0: Port device team_slave_0 added [ 121.720881][ T5941] team0: Port device team_slave_1 added [ 121.775465][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.790626][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.804373][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.817938][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.862833][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.869993][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.877964][ T5955] bridge_slave_0: entered allmulticast mode [ 121.886196][ T5955] bridge_slave_0: entered promiscuous mode [ 121.898471][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.912150][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.937028][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.011594][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.019222][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.026559][ T5955] bridge_slave_1: entered allmulticast mode [ 122.034934][ T5955] bridge_slave_1: entered promiscuous mode [ 122.136754][ T5943] team0: Port device team_slave_0 added [ 122.162695][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.169673][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.196612][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.223161][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.257691][ T5951] team0: Port device team_slave_0 added [ 122.269019][ T5943] team0: Port device team_slave_1 added [ 122.298382][ T5940] team0: Port device team_slave_0 added [ 122.308407][ T5940] team0: Port device team_slave_1 added [ 122.315487][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.322556][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.348966][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.386761][ T1002] bridge_slave_1: left allmulticast mode [ 122.393057][ T1002] bridge_slave_1: left promiscuous mode [ 122.399302][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.411765][ T1002] bridge_slave_0: left allmulticast mode [ 122.418775][ T1002] bridge_slave_0: left promiscuous mode [ 122.424868][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.699622][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.712143][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.723259][ T1002] bond0 (unregistering): Released all slaves [ 122.740959][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.755683][ T5957] team0: Port device team_slave_0 added [ 122.764624][ T5951] team0: Port device team_slave_1 added [ 122.782603][ T51] Bluetooth: hci0: command tx timeout [ 122.782622][ T5944] Bluetooth: hci1: command tx timeout [ 122.863544][ T5944] Bluetooth: hci2: command tx timeout [ 122.890115][ T5957] team0: Port device team_slave_1 added [ 122.913252][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.920238][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.946495][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.960357][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.968005][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.994757][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.007251][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.014308][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.023339][ T5944] Bluetooth: hci3: command tx timeout [ 123.045960][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.058958][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.065980][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.092811][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.110301][ T1002] hsr_slave_0: left promiscuous mode [ 123.117753][ T1002] hsr_slave_1: left promiscuous mode [ 123.123995][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.131412][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.140365][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.147863][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.168829][ T1002] veth1_macvtap: left promiscuous mode [ 123.174736][ T1002] veth0_macvtap: left promiscuous mode [ 123.180397][ T1002] veth1_vlan: left promiscuous mode [ 123.185954][ T5944] Bluetooth: hci4: command tx timeout [ 123.188296][ T1002] veth0_vlan: left promiscuous mode [ 123.262506][ T5944] Bluetooth: hci5: command tx timeout [ 123.528704][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 123.559115][ T1002] team0 (unregistering): Port device team_slave_0 removed [ 123.836635][ T5955] team0: Port device team_slave_0 added [ 123.939252][ T5955] team0: Port device team_slave_1 added [ 123.978240][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.985891][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.013234][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.054883][ T5941] hsr_slave_0: entered promiscuous mode [ 124.061326][ T5941] hsr_slave_1: entered promiscuous mode [ 124.112262][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.119959][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.147172][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.160755][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.168074][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.194452][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.206674][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.214084][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.240204][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.296053][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.303436][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.331822][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.346292][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.353459][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.379952][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.413394][ T5943] hsr_slave_0: entered promiscuous mode [ 124.419930][ T5943] hsr_slave_1: entered promiscuous mode [ 124.426457][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.434443][ T5943] Cannot create hsr debugfs directory [ 124.474460][ T5940] hsr_slave_0: entered promiscuous mode [ 124.481026][ T5940] hsr_slave_1: entered promiscuous mode [ 124.488109][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.495958][ T5940] Cannot create hsr debugfs directory [ 124.738690][ T5951] hsr_slave_0: entered promiscuous mode [ 124.746934][ T5951] hsr_slave_1: entered promiscuous mode [ 124.753517][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.761112][ T5951] Cannot create hsr debugfs directory [ 124.803622][ T5957] hsr_slave_0: entered promiscuous mode [ 124.810107][ T5957] hsr_slave_1: entered promiscuous mode [ 124.816500][ T5957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.824803][ T5957] Cannot create hsr debugfs directory [ 124.863089][ T5944] Bluetooth: hci1: command tx timeout [ 124.863104][ T51] Bluetooth: hci0: command tx timeout [ 124.918706][ T5955] hsr_slave_0: entered promiscuous mode [ 124.931528][ T5955] hsr_slave_1: entered promiscuous mode [ 124.938156][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.958558][ T51] Bluetooth: hci2: command tx timeout [ 124.964610][ T5955] Cannot create hsr debugfs directory [ 125.103378][ T51] Bluetooth: hci3: command tx timeout [ 125.268227][ T51] Bluetooth: hci4: command tx timeout [ 125.342501][ T51] Bluetooth: hci5: command tx timeout [ 126.230400][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 126.297749][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 126.330485][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 126.414181][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 126.586794][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.648919][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.706699][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.774537][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.942700][ T51] Bluetooth: hci1: command tx timeout [ 126.942791][ T5944] Bluetooth: hci0: command tx timeout [ 127.025777][ T5944] Bluetooth: hci2: command tx timeout [ 127.091951][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.192547][ T5944] Bluetooth: hci3: command tx timeout [ 127.205220][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.241131][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.255251][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.267410][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.280288][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.309895][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.317336][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.343400][ T5944] Bluetooth: hci4: command tx timeout [ 127.351931][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.359128][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.423394][ T5944] Bluetooth: hci5: command tx timeout [ 127.480389][ T5957] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.535845][ T5957] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.565349][ T5957] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.617178][ T5957] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.633866][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.767379][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.791434][ T5951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 127.808101][ T5951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 127.851119][ T5951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 127.870299][ T5951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 127.984774][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.991967][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.088673][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.134883][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.142072][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.259622][ T5955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.304938][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.336357][ T5955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.361134][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.382836][ T5955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.450382][ T5955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.467107][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.474309][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.486118][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.493299][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.512194][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.718442][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.820494][ T5943] veth0_vlan: entered promiscuous mode [ 128.971222][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.001089][ T5943] veth1_vlan: entered promiscuous mode [ 129.037514][ T5941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.084354][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.091546][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.118567][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.206855][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.240845][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.248063][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.327685][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.380142][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.387332][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.489440][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.496671][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.597292][ T5943] veth0_macvtap: entered promiscuous mode [ 129.620473][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.690624][ T5943] veth1_macvtap: entered promiscuous mode [ 129.752181][ T5940] veth0_vlan: entered promiscuous mode [ 129.881683][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.916812][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.928137][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.960011][ T5940] veth1_vlan: entered promiscuous mode [ 129.982286][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.011502][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.069919][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.077152][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.125166][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.132355][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.179514][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.189750][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.201878][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.211075][ T5943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.363686][ T5940] veth0_macvtap: entered promiscuous mode [ 130.430644][ T5940] veth1_macvtap: entered promiscuous mode [ 130.462165][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.604842][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.691435][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.751869][ T5941] veth0_vlan: entered promiscuous mode [ 130.784898][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.800689][ T5940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.815726][ T5940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.825660][ T5940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.834787][ T5940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.897069][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.911078][ T5941] veth1_vlan: entered promiscuous mode [ 130.916706][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.092262][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.123018][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.181648][ T5941] veth0_macvtap: entered promiscuous mode 2025/06/16 09:07:31 executed programs: 12 [ 131.345685][ T5941] veth1_macvtap: entered promiscuous mode [ 131.377092][ T5951] veth0_vlan: entered promiscuous mode [ 131.438669][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.446759][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.502335][ T5951] veth1_vlan: entered promiscuous mode [ 131.593660][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.668742][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.767819][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.802509][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.811264][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.832104][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.851490][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.894262][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.021329][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.069211][ T5951] veth0_macvtap: entered promiscuous mode [ 132.120690][ T5957] veth0_vlan: entered promiscuous mode [ 132.181515][ T5951] veth1_macvtap: entered promiscuous mode [ 132.278932][ T5957] veth1_vlan: entered promiscuous mode [ 132.296008][ T6137] loop2: detected capacity change from 0 to 32768 [ 132.361872][ T6137] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.18 (6137) [ 132.380648][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.410126][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.418265][ T6137] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.446700][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.491295][ T6137] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 132.526713][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.542956][ T6137] BTRFS info (device loop2): using free-space-tree [ 132.600472][ T5957] veth0_macvtap: entered promiscuous mode [ 132.630486][ T5951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.658332][ T5951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.677406][ T5951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.690428][ T5951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.721162][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.765008][ T5957] veth1_macvtap: entered promiscuous mode [ 132.792556][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.880179][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.969714][ T5943] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.987869][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.055416][ T5957] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.102451][ T5957] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.111224][ T5957] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.183014][ T5957] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.399456][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.418184][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.700148][ T6144] loop1: detected capacity change from 0 to 32768 [ 133.741833][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.748983][ T6144] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.17 (6144) [ 133.803434][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.857765][ T6144] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.902899][ T6144] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 133.915423][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.949245][ T6144] BTRFS info (device loop1): using free-space-tree [ 133.963048][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.011553][ T5955] veth0_vlan: entered promiscuous mode [ 134.287959][ T5955] veth1_vlan: entered promiscuous mode [ 134.325641][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.362816][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.526700][ T6142] ================================================================== [ 134.534817][ T6142] BUG: KASAN: slab-use-after-free in lane_ioctl+0x2224/0x23e0 [ 134.542324][ T6142] Read of size 8 at addr ffff88807c7b8e68 by task syz.1.17/6142 [ 134.549973][ T6142] [ 134.552311][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.1.17 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 134.552354][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.552389][ T6142] Call Trace: [ 134.552401][ T6142] [ 134.552414][ T6142] dump_stack_lvl+0x116/0x1f0 [ 134.552479][ T6142] print_report+0xcd/0x680 [ 134.552523][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.552569][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.552613][ T6142] ? __phys_addr+0xe8/0x180 [ 134.552656][ T6142] ? lane_ioctl+0x2224/0x23e0 [ 134.552699][ T6142] kasan_report+0xe0/0x110 [ 134.552745][ T6142] ? lane_ioctl+0x2224/0x23e0 [ 134.552794][ T6142] lane_ioctl+0x2224/0x23e0 [ 134.552838][ T6142] ? __pfx_br2684_ioctl+0x10/0x10 [ 134.552877][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.552924][ T6142] ? __pfx_clip_ioctl+0x10/0x10 [ 134.552960][ T6142] ? __pfx_lane_ioctl+0x10/0x10 [ 134.553004][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.553048][ T6142] ? atmtcp_ioctl+0x268/0xd60 [ 134.553106][ T6142] ? __pfx_atmtcp_ioctl+0x10/0x10 [ 134.553164][ T6142] ? do_vcc_ioctl+0x53/0x930 [ 134.553212][ T6142] do_vcc_ioctl+0x12c/0x930 [ 134.553259][ T6142] sock_do_ioctl+0x118/0x280 [ 134.553303][ T6142] ? __pfx_sock_do_ioctl+0x10/0x10 [ 134.553356][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.553424][ T6142] sock_ioctl+0x227/0x6b0 [ 134.553466][ T6142] ? __pfx_sock_ioctl+0x10/0x10 [ 134.553506][ T6142] ? hook_file_ioctl_common+0x145/0x410 [ 134.553547][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.553588][ T6142] ? __fget_files+0x20e/0x3c0 [ 134.553631][ T6142] ? __pfx_sock_ioctl+0x10/0x10 [ 134.553673][ T6142] __x64_sys_ioctl+0x18e/0x210 [ 134.553730][ T6142] do_syscall_64+0xcd/0x4c0 [ 134.553764][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.553798][ T6142] RIP: 0033:0x7fc55f38e929 [ 134.553823][ T6142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.553856][ T6142] RSP: 002b:00007fc56028f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.553888][ T6142] RAX: ffffffffffffffda RBX: 00007fc55f5b5fa0 RCX: 00007fc55f38e929 [ 134.553911][ T6142] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000005 [ 134.553931][ T6142] RBP: 00007fc55f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 134.553960][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.553980][ T6142] R13: 0000000000000000 R14: 00007fc55f5b5fa0 R15: 00007fff0ede2e48 [ 134.554013][ T6142] [ 134.554024][ T6142] [ 134.807413][ T6142] Allocated by task 6132: [ 134.811743][ T6142] kasan_save_stack+0x33/0x60 [ 134.816446][ T6142] kasan_save_track+0x14/0x30 [ 134.821139][ T6142] __kasan_kmalloc+0xaa/0xb0 [ 134.825747][ T6142] __kvmalloc_node_noprof+0x27b/0x620 [ 134.831136][ T6142] alloc_netdev_mqs+0xd2/0x1570 [ 134.836015][ T6142] lane_ioctl+0x17db/0x23e0 [ 134.840544][ T6142] do_vcc_ioctl+0x12c/0x930 [ 134.845070][ T6142] sock_do_ioctl+0x118/0x280 [ 134.849681][ T6142] sock_ioctl+0x227/0x6b0 [ 134.854033][ T6142] __x64_sys_ioctl+0x18e/0x210 [ 134.858835][ T6142] do_syscall_64+0xcd/0x4c0 [ 134.863353][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.869278][ T6142] [ 134.871685][ T6142] Freed by task 6132: [ 134.875684][ T6142] kasan_save_stack+0x33/0x60 [ 134.880376][ T6142] kasan_save_track+0x14/0x30 [ 134.885068][ T6142] kasan_save_free_info+0x3b/0x60 [ 134.890126][ T6142] __kasan_slab_free+0x51/0x70 [ 134.894912][ T6142] kfree+0x2b4/0x4d0 [ 134.898846][ T6142] free_netdev+0x6c5/0x910 [ 134.903272][ T6142] lane_ioctl+0x1ce8/0x23e0 [ 134.907798][ T6142] do_vcc_ioctl+0x12c/0x930 [ 134.912318][ T6142] sock_do_ioctl+0x118/0x280 [ 134.916927][ T6142] sock_ioctl+0x227/0x6b0 [ 134.921275][ T6142] __x64_sys_ioctl+0x18e/0x210 [ 134.926075][ T6142] do_syscall_64+0xcd/0x4c0 [ 134.930587][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.936497][ T6142] [ 134.938819][ T6142] The buggy address belongs to the object at ffff88807c7b8000 [ 134.938819][ T6142] which belongs to the cache kmalloc-cg-4k of size 4096 [ 134.953143][ T6142] The buggy address is located 3688 bytes inside of [ 134.953143][ T6142] freed 4096-byte region [ffff88807c7b8000, ffff88807c7b9000) [ 134.967129][ T6142] [ 134.969450][ T6142] The buggy address belongs to the physical page: [ 134.975859][ T6142] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c7be000 pfn:0x7c7b8 [ 134.985935][ T6142] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 134.994440][ T6142] memcg:ffff888077790a81 [ 134.998678][ T6142] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 135.007186][ T6142] page_type: f5(slab) [ 135.011175][ T6142] raw: 00fff00000000240 ffff88801b84b500 ffffea00016b0210 ffffea0000a38c10 [ 135.019772][ T6142] raw: ffff88807c7be000 0000000000040001 00000000f5000000 ffff888077790a81 [ 135.028374][ T6142] head: 00fff00000000240 ffff88801b84b500 ffffea00016b0210 ffffea0000a38c10 [ 135.037059][ T6142] head: ffff88807c7be000 0000000000040001 00000000f5000000 ffff888077790a81 [ 135.045746][ T6142] head: 00fff00000000003 ffffea0001f1ee01 00000000ffffffff 00000000ffffffff [ 135.054432][ T6142] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 135.063105][ T6142] page dumped because: kasan: bad access detected [ 135.069516][ T6142] page_owner tracks the page as allocated [ 135.075238][ T6142] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5876, tgid 5876 (syz-executor), ts 115146069114, free_ts 115116949410 [ 135.096806][ T6142] post_alloc_hook+0x1c0/0x230 [ 135.101589][ T6142] get_page_from_freelist+0x1321/0x3890 [ 135.107158][ T6142] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 135.113072][ T6142] alloc_pages_mpol+0x1fb/0x550 [ 135.117945][ T6142] new_slab+0x23b/0x330 [ 135.122132][ T6142] ___slab_alloc+0xd9c/0x1940 [ 135.126844][ T6142] __slab_alloc.constprop.0+0x56/0xb0 [ 135.132252][ T6142] __kmalloc_noprof+0x2f2/0x510 [ 135.137119][ T6142] __register_sysctl_table+0xb3/0x1900 [ 135.142641][ T6142] __addrconf_sysctl_register+0x1a2/0x360 [ 135.148391][ T6142] addrconf_sysctl_register+0x15f/0x1f0 [ 135.153953][ T6142] ipv6_add_dev+0xb39/0x15f0 [ 135.158555][ T6142] addrconf_notify+0x53e/0x19e0 [ 135.163431][ T6142] notifier_call_chain+0xbc/0x410 [ 135.168484][ T6142] call_netdevice_notifiers_info+0xbe/0x140 [ 135.174425][ T6142] register_netdevice+0x182e/0x2270 [ 135.179638][ T6142] page last free pid 5880 tgid 5880 stack trace: [ 135.185965][ T6142] __free_frozen_pages+0x7fe/0x1180 [ 135.191196][ T6142] __put_partials+0x16d/0x1c0 [ 135.195889][ T6142] qlist_free_all+0x4d/0x120 [ 135.200492][ T6142] kasan_quarantine_reduce+0x195/0x1e0 [ 135.205967][ T6142] __kasan_slab_alloc+0x69/0x90 [ 135.210837][ T6142] __kmalloc_noprof+0x1d4/0x510 [ 135.215701][ T6142] tomoyo_realpath_from_path+0xc2/0x6e0 [ 135.221275][ T6142] tomoyo_path_perm+0x274/0x460 [ 135.226227][ T6142] security_inode_getattr+0x116/0x290 [ 135.231716][ T6142] vfs_fstat+0x4b/0xe0 [ 135.235815][ T6142] __do_sys_newfstat+0x87/0x100 [ 135.240693][ T6142] do_syscall_64+0xcd/0x4c0 [ 135.245208][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.251115][ T6142] [ 135.253437][ T6142] Memory state around the buggy address: [ 135.259067][ T6142] ffff88807c7b8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.267143][ T6142] ffff88807c7b8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.275219][ T6142] >ffff88807c7b8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.283287][ T6142] ^ [ 135.290742][ T6142] ffff88807c7b8e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.298810][ T6142] ffff88807c7b8f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.306876][ T6142] ================================================================== [ 135.414238][ T5955] veth0_macvtap: entered promiscuous mode [ 135.538125][ T5955] veth1_macvtap: entered promiscuous mode [ 135.541246][ T6170] loop0: detected capacity change from 0 to 32768 [ 135.577165][ T6170] BTRFS: device /dev/loop0 (7:0) using temp-fsid 22f332ed-20c5-4b7c-8051-0590b472ffa7 [ 135.593077][ T6142] Disabling lock debugging due to kernel taint [ 135.599272][ T6142] ================================================================== [ 135.607343][ T6142] BUG: KASAN: slab-use-after-free in lane_ioctl+0x1d43/0x23e0 [ 135.614843][ T6142] Write of size 8 at addr ffff88807c7b8d90 by task syz.1.17/6142 [ 135.622580][ T6142] [ 135.624922][ T6142] CPU: 0 UID: 0 PID: 6142 Comm: syz.1.17 Tainted: G B 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 135.624980][ T6142] Tainted: [B]=BAD_PAGE [ 135.624993][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.625015][ T6142] Call Trace: [ 135.625027][ T6142] [ 135.625040][ T6142] dump_stack_lvl+0x116/0x1f0 [ 135.625104][ T6142] print_report+0xcd/0x680 [ 135.625149][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.625195][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.625240][ T6142] ? __phys_addr+0xe8/0x180 [ 135.625283][ T6142] ? lane_ioctl+0x1d43/0x23e0 [ 135.625326][ T6142] kasan_report+0xe0/0x110 [ 135.625372][ T6142] ? lane_ioctl+0x1d43/0x23e0 [ 135.625421][ T6142] lane_ioctl+0x1d43/0x23e0 [ 135.625465][ T6142] ? __pfx_br2684_ioctl+0x10/0x10 [ 135.625505][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.625552][ T6142] ? __pfx_clip_ioctl+0x10/0x10 [ 135.625588][ T6142] ? __pfx_lane_ioctl+0x10/0x10 [ 135.625639][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.625684][ T6142] ? atmtcp_ioctl+0x268/0xd60 [ 135.625741][ T6142] ? __pfx_atmtcp_ioctl+0x10/0x10 [ 135.625800][ T6142] ? do_vcc_ioctl+0x53/0x930 [ 135.625848][ T6142] do_vcc_ioctl+0x12c/0x930 [ 135.625895][ T6142] sock_do_ioctl+0x118/0x280 [ 135.625938][ T6142] ? __pfx_sock_do_ioctl+0x10/0x10 [ 135.625990][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.626039][ T6142] sock_ioctl+0x227/0x6b0 [ 135.626084][ T6142] ? __pfx_sock_ioctl+0x10/0x10 [ 135.626128][ T6142] ? hook_file_ioctl_common+0x145/0x410 [ 135.626173][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.626218][ T6142] ? __fget_files+0x20e/0x3c0 [ 135.626265][ T6142] ? __pfx_sock_ioctl+0x10/0x10 [ 135.626312][ T6142] __x64_sys_ioctl+0x18e/0x210 [ 135.626375][ T6142] do_syscall_64+0xcd/0x4c0 [ 135.626411][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.626448][ T6142] RIP: 0033:0x7fc55f38e929 [ 135.626476][ T6142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.626512][ T6142] RSP: 002b:00007fc56028f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.626546][ T6142] RAX: ffffffffffffffda RBX: 00007fc55f5b5fa0 RCX: 00007fc55f38e929 [ 135.626572][ T6142] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000005 [ 135.626595][ T6142] RBP: 00007fc55f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 135.626619][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.626646][ T6142] R13: 0000000000000000 R14: 00007fc55f5b5fa0 R15: 00007fff0ede2e48 [ 135.626682][ T6142] [ 135.626694][ T6142] [ 135.885572][ T6142] Allocated by task 6132: [ 135.889940][ T6142] kasan_save_stack+0x33/0x60 [ 135.894645][ T6142] kasan_save_track+0x14/0x30 [ 135.899426][ T6142] __kasan_kmalloc+0xaa/0xb0 [ 135.904030][ T6142] __kvmalloc_node_noprof+0x27b/0x620 [ 135.909420][ T6142] alloc_netdev_mqs+0xd2/0x1570 [ 135.914284][ T6142] lane_ioctl+0x17db/0x23e0 [ 135.918808][ T6142] do_vcc_ioctl+0x12c/0x930 [ 135.923331][ T6142] sock_do_ioctl+0x118/0x280 [ 135.927964][ T6142] sock_ioctl+0x227/0x6b0 [ 135.932312][ T6142] __x64_sys_ioctl+0x18e/0x210 [ 135.937110][ T6142] do_syscall_64+0xcd/0x4c0 [ 135.941621][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.947533][ T6142] [ 135.949855][ T6142] Freed by task 6132: [ 135.953845][ T6142] kasan_save_stack+0x33/0x60 [ 135.958543][ T6142] kasan_save_track+0x14/0x30 [ 135.963235][ T6142] kasan_save_free_info+0x3b/0x60 [ 135.968312][ T6142] __kasan_slab_free+0x51/0x70 [ 135.973097][ T6142] kfree+0x2b4/0x4d0 [ 135.977034][ T6142] free_netdev+0x6c5/0x910 [ 135.981486][ T6142] lane_ioctl+0x1ce8/0x23e0 [ 135.986013][ T6142] do_vcc_ioctl+0x12c/0x930 [ 135.990542][ T6142] sock_do_ioctl+0x118/0x280 [ 135.995150][ T6142] sock_ioctl+0x227/0x6b0 [ 135.999501][ T6142] __x64_sys_ioctl+0x18e/0x210 [ 136.004300][ T6142] do_syscall_64+0xcd/0x4c0 [ 136.008816][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.014724][ T6142] [ 136.017045][ T6142] The buggy address belongs to the object at ffff88807c7b8000 [ 136.017045][ T6142] which belongs to the cache kmalloc-cg-4k of size 4096 [ 136.031800][ T6142] The buggy address is located 3472 bytes inside of [ 136.031800][ T6142] freed 4096-byte region [ffff88807c7b8000, ffff88807c7b9000) [ 136.045790][ T6142] [ 136.048115][ T6142] The buggy address belongs to the physical page: [ 136.054527][ T6142] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c7b8 [ 136.063404][ T6142] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 136.071913][ T6142] memcg:ffff888077790a81 [ 136.076151][ T6142] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 136.084158][ T6142] page_type: f5(slab) [ 136.088154][ T6142] raw: 00fff00000000040 ffff88801b84b500 0000000000000000 dead000000000001 [ 136.096755][ T6142] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888077790a81 [ 136.105361][ T6142] head: 00fff00000000040 ffff88801b84b500 0000000000000000 dead000000000001 [ 136.114050][ T6142] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888077790a81 [ 136.122738][ T6142] head: 00fff00000000003 ffffea0001f1ee01 00000000ffffffff 00000000ffffffff [ 136.131420][ T6142] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 136.140095][ T6142] page dumped because: kasan: bad access detected [ 136.146514][ T6142] page_owner tracks the page as allocated [ 136.152257][ T6142] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5876, tgid 5876 (syz-executor), ts 115146069114, free_ts 115116949410 [ 136.173866][ T6142] post_alloc_hook+0x1c0/0x230 [ 136.178654][ T6142] get_page_from_freelist+0x1321/0x3890 [ 136.184223][ T6142] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 136.190144][ T6142] alloc_pages_mpol+0x1fb/0x550 [ 136.195024][ T6142] new_slab+0x23b/0x330 [ 136.199232][ T6142] ___slab_alloc+0xd9c/0x1940 [ 136.203967][ T6142] __slab_alloc.constprop.0+0x56/0xb0 [ 136.209383][ T6142] __kmalloc_noprof+0x2f2/0x510 [ 136.214255][ T6142] __register_sysctl_table+0xb3/0x1900 [ 136.219749][ T6142] __addrconf_sysctl_register+0x1a2/0x360 [ 136.225492][ T6142] addrconf_sysctl_register+0x15f/0x1f0 [ 136.231056][ T6142] ipv6_add_dev+0xb39/0x15f0 [ 136.235663][ T6142] addrconf_notify+0x53e/0x19e0 [ 136.240542][ T6142] notifier_call_chain+0xbc/0x410 [ 136.245596][ T6142] call_netdevice_notifiers_info+0xbe/0x140 [ 136.251519][ T6142] register_netdevice+0x182e/0x2270 [ 136.256737][ T6142] page last free pid 5880 tgid 5880 stack trace: [ 136.263064][ T6142] __free_frozen_pages+0x7fe/0x1180 [ 136.268304][ T6142] __put_partials+0x16d/0x1c0 [ 136.272996][ T6142] qlist_free_all+0x4d/0x120 [ 136.277601][ T6142] kasan_quarantine_reduce+0x195/0x1e0 [ 136.283087][ T6142] __kasan_slab_alloc+0x69/0x90 [ 136.287959][ T6142] __kmalloc_noprof+0x1d4/0x510 [ 136.292841][ T6142] tomoyo_realpath_from_path+0xc2/0x6e0 [ 136.298428][ T6142] tomoyo_path_perm+0x274/0x460 [ 136.303303][ T6142] security_inode_getattr+0x116/0x290 [ 136.308711][ T6142] vfs_fstat+0x4b/0xe0 [ 136.312811][ T6142] __do_sys_newfstat+0x87/0x100 [ 136.317696][ T6142] do_syscall_64+0xcd/0x4c0 [ 136.322210][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.328136][ T6142] [ 136.330546][ T6142] Memory state around the buggy address: [ 136.336181][ T6142] ffff88807c7b8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.344251][ T6142] ffff88807c7b8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.352320][ T6142] >ffff88807c7b8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.360388][ T6142] ^ [ 136.365011][ T6142] ffff88807c7b8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.373115][ T6142] ffff88807c7b8e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.381179][ T6142] ================================================================== [ 136.421899][ T6170] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.16 (6170) [ 136.457664][ T6175] loop2: detected capacity change from 0 to 32768 [ 136.468722][ T6142] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 136.476484][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.1.17 Tainted: G B 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 136.489893][ T6142] Tainted: [B]=BAD_PAGE [ 136.494053][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.504121][ T6142] Call Trace: [ 136.507412][ T6142] [ 136.510355][ T6142] dump_stack_lvl+0x3d/0x1f0 [ 136.514997][ T6142] panic+0x71c/0x800 [ 136.518931][ T6142] ? rcu_is_watching+0x12/0xc0 [ 136.523723][ T6142] ? __pfx_panic+0x10/0x10 [ 136.528171][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.533831][ T6142] ? lane_ioctl+0x1d43/0x23e0 [ 136.538570][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.544236][ T6142] ? preempt_schedule_common+0x44/0xc0 [ 136.549735][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.555404][ T6142] ? preempt_schedule_thunk+0x16/0x30 [ 136.560809][ T6142] ? lane_ioctl+0x1d43/0x23e0 [ 136.565537][ T6142] end_report+0x159/0x170 [ 136.569893][ T6142] kasan_report+0xee/0x110 [ 136.574335][ T6142] ? lane_ioctl+0x1d43/0x23e0 [ 136.579075][ T6142] lane_ioctl+0x1d43/0x23e0 [ 136.583607][ T6142] ? __pfx_br2684_ioctl+0x10/0x10 [ 136.588653][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.594315][ T6142] ? __pfx_clip_ioctl+0x10/0x10 [ 136.599182][ T6142] ? __pfx_lane_ioctl+0x10/0x10 [ 136.604060][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.609719][ T6142] ? atmtcp_ioctl+0x268/0xd60 [ 136.614435][ T6142] ? __pfx_atmtcp_ioctl+0x10/0x10 [ 136.619499][ T6142] ? do_vcc_ioctl+0x53/0x930 [ 136.624117][ T6142] do_vcc_ioctl+0x12c/0x930 [ 136.628646][ T6142] sock_do_ioctl+0x118/0x280 [ 136.633257][ T6142] ? __pfx_sock_do_ioctl+0x10/0x10 [ 136.638402][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.644071][ T6142] sock_ioctl+0x227/0x6b0 [ 136.648427][ T6142] ? __pfx_sock_ioctl+0x10/0x10 [ 136.653312][ T6142] ? hook_file_ioctl_common+0x145/0x410 [ 136.658891][ T6142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.664555][ T6142] ? __fget_files+0x20e/0x3c0 [ 136.669257][ T6142] ? __pfx_sock_ioctl+0x10/0x10 [ 136.674138][ T6142] __x64_sys_ioctl+0x18e/0x210 [ 136.678943][ T6142] do_syscall_64+0xcd/0x4c0 [ 136.683465][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.689376][ T6142] RIP: 0033:0x7fc55f38e929 [ 136.693810][ T6142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.713439][ T6142] RSP: 002b:00007fc56028f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.721872][ T6142] RAX: ffffffffffffffda RBX: 00007fc55f5b5fa0 RCX: 00007fc55f38e929 [ 136.729882][ T6142] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000005 [ 136.737864][ T6142] RBP: 00007fc55f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 136.745950][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.753931][ T6142] R13: 0000000000000000 R14: 00007fc55f5b5fa0 R15: 00007fff0ede2e48 [ 136.761927][ T6142] [ 136.765255][ T6142] Kernel Offset: disabled [ 136.769585][ T6142] Rebooting in 86400 seconds..