Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. 2026/07/29 20:52:26 parsed 1 programs 2026/07/29 20:52:26 serving rpc on tcp://43695 [ 120.174835][ T5624] cgroup: Unknown subsys name 'net' [ 120.415126][ T5624] cgroup: Unknown subsys name 'cpuset' [ 120.471426][ T5624] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 122.335533][ T5624] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 128.114972][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.116596][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.116808][ T5643] bridge_slave_0: entered allmulticast mode [ 128.120827][ T5643] bridge_slave_0: entered promiscuous mode [ 128.193222][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.193499][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.194136][ T5643] bridge_slave_1: entered allmulticast mode [ 128.196271][ T5643] bridge_slave_1: entered promiscuous mode [ 128.379085][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.410319][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.572007][ T5643] team0: Port device team_slave_0 added [ 128.602549][ T5643] team0: Port device team_slave_1 added [ 128.818899][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.818928][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.818953][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.934885][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.934902][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.934924][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.985753][ T5643] hsr_slave_0: entered promiscuous mode [ 129.988560][ T5643] hsr_slave_1: entered promiscuous mode [ 130.834945][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.834965][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.254232][ T4526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.254258][ T4526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.617267][ T5643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 131.892921][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.897413][ T5643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.005773][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.145161][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.188346][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.189958][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.197681][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.198489][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.379849][ T5643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.399731][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.413549][ T5643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.458505][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.340160][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.340287][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.875122][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.072111][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.186464][ T4526] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.187349][ T4526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.282587][ T60] Bluetooth: hci0: command tx timeout [ 134.356575][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.356739][ T4526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.356859][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.371638][ T60] Bluetooth: hci0: command tx timeout [ 136.521506][ T5643] veth0_vlan: entered promiscuous mode [ 136.544819][ T5643] veth1_vlan: entered promiscuous mode [ 136.680177][ T5643] veth0_macvtap: entered promiscuous mode [ 136.698364][ T5643] veth1_macvtap: entered promiscuous mode [ 136.739456][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.772069][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.826037][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.847056][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.849135][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.849975][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/07/29 20:52:47 executed programs: 0 [ 137.854618][ T4910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.897485][ T4910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.899309][ T4910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.923311][ T4910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.924089][ T4910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.184005][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.256073][ T5764] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.272916][ T5764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.276756][ T5764] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.277462][ T5764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.292160][ T5766] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.317189][ T5766] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.318315][ T5766] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.320447][ T5766] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.323330][ T5766] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.334982][ T5766] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.363270][ T5766] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.372873][ T4910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.502844][ T5764] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.507743][ T5764] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.961989][ T5766] Bluetooth: hci2: command tx timeout [ 140.196869][ T148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.522998][ T5766] Bluetooth: hci4: command tx timeout [ 140.539515][ T148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.684868][ T5766] Bluetooth: hci3: command tx timeout [ 140.691599][ T5766] Bluetooth: hci1: command tx timeout [ 140.859893][ T148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.215856][ T148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.980359][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.991944][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.992153][ T5758] bridge_slave_0: entered allmulticast mode [ 141.993998][ T5758] bridge_slave_0: entered promiscuous mode [ 142.050745][ T5766] Bluetooth: hci2: command tx timeout [ 142.079609][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.079832][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.080438][ T5758] bridge_slave_1: entered allmulticast mode [ 142.105524][ T5758] bridge_slave_1: entered promiscuous mode [ 142.293761][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.338421][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.431773][ T148] bridge_slave_1: left allmulticast mode [ 142.432052][ T148] bridge_slave_1: left promiscuous mode [ 142.442402][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.584547][ T148] bridge_slave_0: left allmulticast mode [ 142.584578][ T148] bridge_slave_0: left promiscuous mode [ 142.584787][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.600729][ T5766] Bluetooth: hci4: command tx timeout [ 142.764439][ T5766] Bluetooth: hci1: command tx timeout [ 142.764537][ T5766] Bluetooth: hci3: command tx timeout [ 143.471546][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.531623][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.573095][ T148] bond0 (unregistering): Released all slaves [ 143.794632][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.794905][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.795177][ T5756] bridge_slave_0: entered allmulticast mode [ 143.842014][ T5756] bridge_slave_0: entered promiscuous mode [ 143.957999][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.958209][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.958372][ T5760] bridge_slave_0: entered allmulticast mode [ 143.960312][ T5760] bridge_slave_0: entered promiscuous mode [ 144.018061][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.018358][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.018631][ T5756] bridge_slave_1: entered allmulticast mode [ 144.020790][ T5756] bridge_slave_1: entered promiscuous mode [ 144.090393][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.091223][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.095412][ T5760] bridge_slave_1: entered allmulticast mode [ 144.098764][ T5760] bridge_slave_1: entered promiscuous mode [ 144.121092][ T60] Bluetooth: hci2: command tx timeout [ 144.203609][ T5758] team0: Port device team_slave_0 added [ 144.245294][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.245618][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.245848][ T5759] bridge_slave_0: entered allmulticast mode [ 144.248043][ T5759] bridge_slave_0: entered promiscuous mode [ 144.296520][ T5758] team0: Port device team_slave_1 added [ 144.309025][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.309662][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.309884][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.310048][ T5759] bridge_slave_1: entered allmulticast mode [ 144.344431][ T5759] bridge_slave_1: entered promiscuous mode [ 144.373969][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.411377][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.439314][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.524937][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.524948][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.524962][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.594025][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.624248][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.624266][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.624292][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.627378][ T5756] team0: Port device team_slave_0 added [ 144.632587][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.666076][ T5760] team0: Port device team_slave_0 added [ 144.690677][ T60] Bluetooth: hci4: command tx timeout [ 144.717461][ T5756] team0: Port device team_slave_1 added [ 144.746607][ T5760] team0: Port device team_slave_1 added [ 144.820432][ T5759] team0: Port device team_slave_0 added [ 144.843192][ T5766] Bluetooth: hci1: command tx timeout [ 144.843183][ T60] Bluetooth: hci3: command tx timeout [ 144.875925][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.875936][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.875950][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.902216][ T5759] team0: Port device team_slave_1 added [ 144.907000][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.907018][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.907042][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.974644][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.974661][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.974687][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.034864][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.034881][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.034906][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.548321][ T5758] hsr_slave_0: entered promiscuous mode [ 145.549607][ T5758] hsr_slave_1: entered promiscuous mode [ 145.554614][ T5758] debugfs: 'hsr0' already exists in 'hsr' [ 145.554747][ T5758] Cannot create hsr debugfs directory [ 145.607544][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 145.615729][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.615750][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.615776][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.637474][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.637495][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.637519][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.791881][ T5756] hsr_slave_0: entered promiscuous mode [ 145.801206][ T5756] hsr_slave_1: entered promiscuous mode [ 145.802763][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 145.802791][ T5756] Cannot create hsr debugfs directory [ 145.834231][ T5760] hsr_slave_0: entered promiscuous mode [ 145.835631][ T5760] hsr_slave_1: entered promiscuous mode [ 145.836893][ T5760] debugfs: 'hsr0' already exists in 'hsr' [ 145.836919][ T5760] Cannot create hsr debugfs directory [ 145.970840][ T148] hsr_slave_0: left promiscuous mode [ 145.991119][ T148] hsr_slave_1: left promiscuous mode [ 145.996624][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.996762][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.033216][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.033245][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.118079][ T148] veth1_macvtap: left promiscuous mode [ 146.118257][ T148] veth0_macvtap: left promiscuous mode [ 146.118466][ T148] veth1_vlan: left promiscuous mode [ 146.119301][ T148] veth0_vlan: left promiscuous mode [ 146.203388][ T60] Bluetooth: hci2: command tx timeout [ 146.761054][ T60] Bluetooth: hci4: command tx timeout [ 146.911548][ T148] team0 (unregistering): Port device team_slave_1 removed [ 146.924872][ T5766] Bluetooth: hci1: command tx timeout [ 146.924946][ T60] Bluetooth: hci3: command tx timeout [ 146.972864][ T148] team0 (unregistering): Port device team_slave_0 removed [ 147.335078][ T5759] hsr_slave_0: entered promiscuous mode [ 147.336401][ T5759] hsr_slave_1: entered promiscuous mode [ 148.516462][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 148.731082][ T5758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.798105][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.816406][ T5758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.896280][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.072822][ T5758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.144413][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.156842][ T5758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.229783][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.178577][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.278621][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.318903][ T3287] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.319059][ T3287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.379280][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.379448][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.185953][ T5760] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.236583][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.255433][ T5760] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.296399][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.301546][ T5760] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.374391][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.510490][ T5760] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.546286][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.045696][ T5756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.091789][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.120437][ T5756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.173021][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.182839][ T5756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.209183][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.223927][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.268544][ T5756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.304960][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.569747][ T5759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.584380][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.587998][ T5759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.640096][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.655758][ T5759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.694427][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.718803][ T5759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.754170][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.905395][ T5758] veth0_vlan: entered promiscuous mode [ 152.986727][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.035525][ T5758] veth1_vlan: entered promiscuous mode [ 153.117455][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.162907][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.163069][ T4550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.226127][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.226283][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.272410][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.337847][ T5758] veth0_macvtap: entered promiscuous mode [ 153.376711][ T5758] veth1_macvtap: entered promiscuous mode [ 153.406867][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.474652][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.474806][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.497226][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.523996][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.524114][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.529362][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.589993][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.666712][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.687048][ T148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.700487][ T148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.730163][ T4550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.760064][ T4550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.765260][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.765508][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.937658][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.937882][ T4526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.527833][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.527857][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.898656][ T4526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.898679][ T4526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.926638][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 2026/07/29 20:53:04 executed programs: 8 [ 155.738594][ T5980] Mass Storage Function, version: 2009/09/11 [ 155.738646][ T5980] LUN: removable file: (no medium) [ 155.819440][ T5760] veth0_vlan: entered promiscuous mode [ 155.913111][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.956826][ T5760] veth1_vlan: entered promiscuous mode [ 156.090024][ T5986] Mass Storage Function, version: 2009/09/11 [ 156.090066][ T5986] LUN: removable file: (no medium) [ 156.349366][ T5991] Mass Storage Function, version: 2009/09/11 [ 156.349566][ T5991] LUN: removable file: (no medium) [ 156.409667][ T5760] veth0_macvtap: entered promiscuous mode [ 156.457512][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.485559][ T5756] veth0_vlan: entered promiscuous mode [ 156.505912][ T5993] Mass Storage Function, version: 2009/09/11 [ 156.505943][ T5993] LUN: removable file: (no medium) [ 156.523621][ T5760] veth1_macvtap: entered promiscuous mode [ 156.679763][ T5995] Mass Storage Function, version: 2009/09/11 [ 156.679795][ T5995] LUN: removable file: (no medium) [ 156.692585][ T5756] veth1_vlan: entered promiscuous mode [ 156.799450][ T5997] Mass Storage Function, version: 2009/09/11 [ 156.799482][ T5997] LUN: removable file: (no medium) [ 156.897113][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.961916][ T5999] Mass Storage Function, version: 2009/09/11 [ 156.961949][ T5999] LUN: removable file: (no medium) [ 156.987712][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.053050][ T6001] Mass Storage Function, version: 2009/09/11 [ 157.053083][ T6001] LUN: removable file: (no medium) [ 157.143959][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.176399][ T6003] Mass Storage Function, version: 2009/09/11 [ 157.176433][ T6003] LUN: removable file: (no medium) [ 157.197345][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.217452][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.239824][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.270324][ T5759] veth0_vlan: entered promiscuous mode [ 157.278158][ T6005] Mass Storage Function, version: 2009/09/11 [ 157.278228][ T6005] LUN: removable file: (no medium) [ 157.305676][ T5756] veth0_macvtap: entered promiscuous mode [ 157.462705][ T6007] Mass Storage Function, version: 2009/09/11 [ 157.462739][ T6007] LUN: removable file: (no medium) [ 157.518424][ T5756] veth1_macvtap: entered promiscuous mode [ 157.547170][ T6009] Mass Storage Function, version: 2009/09/11 [ 157.547201][ T6009] LUN: removable file: (no medium) [ 157.601935][ T5759] veth1_vlan: entered promiscuous mode [ 157.742854][ T6011] Mass Storage Function, version: 2009/09/11 [ 157.742893][ T6011] LUN: removable file: (no medium) [ 157.947294][ T6014] Mass Storage Function, version: 2009/09/11 [ 157.947320][ T6014] LUN: removable file: (no medium) [ 157.979485][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.054793][ T6016] Mass Storage Function, version: 2009/09/11 [ 158.054835][ T6016] LUN: removable file: (no medium) [ 158.094118][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.114949][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.114969][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.173736][ T6018] Mass Storage Function, version: 2009/09/11 [ 158.173777][ T6018] LUN: removable file: (no medium) [ 158.195962][ T5759] veth0_macvtap: entered promiscuous mode [ 158.208956][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.223572][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.229301][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.244756][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.282519][ T6020] Mass Storage Function, version: 2009/09/11 [ 158.282556][ T6020] LUN: removable file: (no medium) [ 158.345866][ T5759] veth1_macvtap: entered promiscuous mode [ 158.359399][ T6022] Mass Storage Function, version: 2009/09/11 [ 158.359426][ T6022] LUN: removable file: (no medium) [ 158.483784][ T6024] Mass Storage Function, version: 2009/09/11 [ 158.483826][ T6024] LUN: removable file: (no medium) [ 158.551598][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.551618][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.677189][ T6026] Mass Storage Function, version: 2009/09/11 [ 158.677210][ T6026] LUN: removable file: (no medium) [ 158.835318][ T6028] Mass Storage Function, version: 2009/09/11 [ 158.835351][ T6028] LUN: removable file: (no medium) [ 159.145299][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.219320][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.242953][ T6030] Mass Storage Function, version: 2009/09/11 [ 159.242982][ T6030] LUN: removable file: (no medium) [ 159.338022][ T6032] Mass Storage Function, version: 2009/09/11 [ 159.338056][ T6032] LUN: removable file: (no medium) [ 159.489812][ T4550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.587910][ T4550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.623891][ T4550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.644431][ T4550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.648459][ T4550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.648483][ T4550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.711612][ T6037] Mass Storage Function, version: 2009/09/11 [ 159.711641][ T6037] LUN: removable file: (no medium) [ 159.824132][ T6036] Mass Storage Function, version: 2009/09/11 [ 159.824161][ T6036] LUN: removable file: (no medium) [ 159.963566][ T6041] Mass Storage Function, version: 2009/09/11 [ 159.963608][ T6041] LUN: removable file: (no medium) [ 160.034847][ T6043] Mass Storage Function, version: 2009/09/11 [ 160.034879][ T6043] LUN: removable file: (no medium) [ 160.329935][ T6046] Mass Storage Function, version: 2009/09/11 [ 160.329966][ T6046] LUN: removable file: (no medium) [ 160.388936][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.388962][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/29 20:53:10 executed programs: 38 [ 160.629538][ T6049] Mass Storage Function, version: 2009/09/11 [ 160.629583][ T6049] LUN: removable file: (no medium) [ 160.669733][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.669757][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.757493][ T6051] Mass Storage Function, version: 2009/09/11 [ 160.757522][ T6051] LUN: removable file: (no medium) [ 161.029663][ T6053] Mass Storage Function, version: 2009/09/11 [ 161.029710][ T6053] LUN: removable file: (no medium) [ 161.056900][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.056917][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.450140][ T6066] Mass Storage Function, version: 2009/09/11 [ 161.450185][ T6066] LUN: removable file: (no medium) [ 161.520190][ T6068] Mass Storage Function, version: 2009/09/11 [ 161.520226][ T6068] LUN: removable file: (no medium) [ 161.579674][ T6069] Mass Storage Function, version: 2009/09/11 [ 161.579696][ T6069] LUN: removable file: (no medium) [ 161.686254][ T6072] Mass Storage Function, version: 2009/09/11 [ 161.686287][ T6072] LUN: removable file: (no medium) [ 161.789840][ T6077] Mass Storage Function, version: 2009/09/11 [ 161.789874][ T6077] LUN: removable file: (no medium) [ 161.878429][ T6081] Mass Storage Function, version: 2009/09/11 [ 161.878462][ T6081] LUN: removable file: (no medium) [ 161.930293][ T6080] Mass Storage Function, version: 2009/09/11 [ 161.930315][ T6080] LUN: removable file: (no medium) [ 162.080070][ T6085] Mass Storage Function, version: 2009/09/11 [ 162.080100][ T6085] LUN: removable file: (no medium) [ 162.184630][ T6087] Mass Storage Function, version: 2009/09/11 [ 162.184674][ T6087] LUN: removable file: (no medium) [ 162.258842][ T6090] Mass Storage Function, version: 2009/09/11 [ 162.258875][ T6090] LUN: removable file: (no medium) [ 162.379715][ T6095] Mass Storage Function, version: 2009/09/11 [ 162.384020][ T6095] LUN: removable file: (no medium) [ 162.517639][ T6100] Mass Storage Function, version: 2009/09/11 [ 162.517671][ T6100] LUN: removable file: (no medium) [ 162.597650][ T6102] Mass Storage Function, version: 2009/09/11 [ 162.597701][ T6102] LUN: removable file: (no medium) [ 162.736323][ T6104] Mass Storage Function, version: 2009/09/11 [ 162.736355][ T6104] LUN: removable file: (no medium) [ 162.851995][ T6107] Mass Storage Function, version: 2009/09/11 [ 162.852023][ T6107] LUN: removable file: (no medium) [ 162.913924][ T6109] Mass Storage Function, version: 2009/09/11 [ 162.913954][ T6109] LUN: removable file: (no medium) [ 163.064638][ T6112] Mass Storage Function, version: 2009/09/11 [ 163.064681][ T6112] LUN: removable file: (no medium) [ 163.152840][ T6116] Mass Storage Function, version: 2009/09/11 [ 163.152885][ T6116] LUN: removable file: (no medium) [ 163.198723][ T6117] Mass Storage Function, version: 2009/09/11 [ 163.198754][ T6117] LUN: removable file: (no medium) [ 163.397580][ T6123] Mass Storage Function, version: 2009/09/11 [ 163.397610][ T6123] LUN: removable file: (no medium) [ 163.716785][ T6128] Mass Storage Function, version: 2009/09/11 [ 163.716827][ T6128] LUN: removable file: (no medium) [ 163.857397][ T6134] Mass Storage Function, version: 2009/09/11 [ 163.857432][ T6134] LUN: removable file: (no medium) [ 163.880047][ T6132] Mass Storage Function, version: 2009/09/11 [ 163.880076][ T6132] LUN: removable file: (no medium) [ 164.015818][ T6138] Mass Storage Function, version: 2009/09/11 [ 164.015859][ T6138] LUN: removable file: (no medium) [ 164.078071][ T6139] Mass Storage Function, version: 2009/09/11 [ 164.078099][ T6139] LUN: removable file: (no medium) [ 164.188680][ T6142] Mass Storage Function, version: 2009/09/11 [ 164.188714][ T6142] LUN: removable file: (no medium) [ 164.197194][ T6140] Mass Storage Function, version: 2009/09/11 [ 164.197236][ T6140] LUN: removable file: (no medium) [ 164.266097][ T6146] Mass Storage Function, version: 2009/09/11 [ 164.266128][ T6146] LUN: removable file: (no medium) [ 164.314245][ T6144] Mass Storage Function, version: 2009/09/11 [ 164.314276][ T6144] LUN: removable file: (no medium) [ 164.383171][ T6149] Mass Storage Function, version: 2009/09/11 [ 164.383190][ T6149] LUN: removable file: (no medium) [ 164.446608][ T6152] Mass Storage Function, version: 2009/09/11 [ 164.446636][ T6152] LUN: removable file: (no medium) [ 164.517272][ T6156] Mass Storage Function, version: 2009/09/11 [ 164.517299][ T6156] LUN: removable file: (no medium) [ 164.661666][ T6160] Mass Storage Function, version: 2009/09/11 [ 164.661695][ T6160] LUN: removable file: (no medium) [ 164.715161][ T6159] Mass Storage Function, version: 2009/09/11 [ 164.715179][ T6159] LUN: removable file: (no medium) [ 164.903088][ T6168] Mass Storage Function, version: 2009/09/11 [ 164.903117][ T6168] LUN: removable file: (no medium) [ 165.000836][ T6169] Mass Storage Function, version: 2009/09/11 [ 165.000876][ T6169] LUN: removable file: (no medium) [ 165.113390][ T6173] Mass Storage Function, version: 2009/09/11 [ 165.113428][ T6173] LUN: removable file: (no medium) [ 165.275725][ T6180] Mass Storage Function, version: 2009/09/11 [ 165.275753][ T6180] LUN: removable file: (no medium) [ 165.407112][ T6183] Mass Storage Function, version: 2009/09/11 [ 165.407138][ T6183] LUN: removable file: (no medium) [ 165.444001][ T6181] ================================================================== [ 165.444015][ T6181] BUG: KASAN: slab-use-after-free in config_item_get+0x26/0x90 [ 165.444042][ T6181] Write of size 4 at addr ffff88803bc08024 by task syz.1.104/6181 [ 165.444055][ T6181] [ 165.444076][ T6181] CPU: 0 UID: 0 PID: 6181 Comm: syz.1.104 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.444091][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.444106][ T6181] Call Trace: [ 165.444112][ T6181] [ 165.444118][ T6181] dump_stack_lvl+0xe8/0x150 [ 165.444137][ T6181] print_address_description+0x55/0x1e0 [ 165.444173][ T6181] ? config_item_get+0x26/0x90 [ 165.444190][ T6181] print_report+0x58/0x70 [ 165.444208][ T6181] kasan_report+0x117/0x150 [ 165.444222][ T6181] ? config_item_get+0x26/0x90 [ 165.444242][ T6181] kasan_check_range+0x264/0x2c0 [ 165.444255][ T6181] config_item_get+0x26/0x90 [ 165.444273][ T6181] configfs_symlink+0x4ab/0x1030 [ 165.444291][ T6181] ? lookup_one_qstr_excl+0x1d4/0x360 [ 165.444306][ T6181] ? make_vfsuid+0x49/0xa0 [ 165.444327][ T6181] ? __pfx_configfs_symlink+0x10/0x10 [ 165.444346][ T6181] ? bpf_lsm_inode_symlink+0x9/0x20 [ 165.444604][ T6181] vfs_symlink+0x18b/0x330 [ 165.444625][ T6181] ? security_path_symlink+0xf3/0x310 [ 165.444654][ T6181] filename_symlinkat+0x1cd/0x420 [ 165.444675][ T6181] ? __pfx_filename_symlinkat+0x10/0x10 [ 165.444692][ T6181] ? strncpy_from_user+0x150/0x2c0 [ 165.444711][ T6181] ? do_getname+0x151/0x250 [ 165.444731][ T6181] __se_sys_symlinkat+0x4e/0x2b0 [ 165.444752][ T6181] do_syscall_64+0x17b/0x530 [ 165.444766][ T6181] ? irqentry_exit+0x10f/0x8f0 [ 165.444780][ T6181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.444795][ T6181] ? clear_bhb_loop+0x40/0x90 [ 165.444812][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.444826][ T6181] RIP: 0033:0x7fa61ea6de99 [ 165.444851][ T6181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.444863][ T6181] RSP: 002b:00007fa61e0ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 165.444883][ T6181] RAX: ffffffffffffffda RBX: 00007fa61ecf5fa0 RCX: 00007fa61ea6de99 [ 165.444894][ T6181] RDX: 0000200000000300 RSI: ffffffffffffff9c RDI: 0000200000000200 [ 165.444903][ T6181] RBP: 00007fa61eb03eaf R08: 0000000000000000 R09: 0000000000000000 [ 165.444912][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.444921][ T6181] R13: 00007fa61ecf6038 R14: 00007fa61ecf5fa0 R15: 00007ffe30223308 [ 165.444938][ T6181] [ 165.444944][ T6181] [ 165.444948][ T6181] Allocated by task 6183: [ 165.444956][ T6181] kasan_save_track+0x3e/0x80 [ 165.445035][ T6181] __kasan_kmalloc+0x93/0xb0 [ 165.445056][ T6181] __kmalloc_cache_noprof+0x3cd/0x670 [ 165.445077][ T6181] fsg_alloc_inst+0xc1/0x650 [ 165.445099][ T6181] usb_get_function_instance+0xe3/0x2f0 [ 165.445121][ T6181] function_make+0x127/0x360 [ 165.445134][ T6181] configfs_mkdir+0x4f6/0x9e0 [ 165.445149][ T6181] vfs_mkdir+0x408/0x620 [ 165.445164][ T6181] filename_mkdirat+0x289/0x520 [ 165.445180][ T6181] __se_sys_mkdirat+0x35/0x150 [ 165.445196][ T6181] do_syscall_64+0x17b/0x530 [ 165.445209][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.445222][ T6181] [ 165.445225][ T6181] Freed by task 6183: [ 165.445232][ T6181] kasan_save_track+0x3e/0x80 [ 165.445252][ T6181] kasan_save_free_info+0x40/0x50 [ 165.445267][ T6181] __kasan_slab_free+0x5c/0x80 [ 165.445285][ T6181] kfree+0x1c5/0x6c0 [ 165.445300][ T6181] usb_put_function_instance+0x90/0xb0 [ 165.445318][ T6181] config_item_release+0x13a/0x2d0 [ 165.445337][ T6181] configfs_rmdir+0x885/0x950 [ 165.445351][ T6181] vfs_rmdir+0x3e9/0x6b0 [ 165.445367][ T6181] filename_rmdir+0x292/0x520 [ 165.445386][ T6181] __se_sys_rmdir+0x2e/0x140 [ 165.445405][ T6181] do_syscall_64+0x17b/0x530 [ 165.445417][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.445429][ T6181] [ 165.445433][ T6181] The buggy address belongs to the object at ffff88803bc08000 [ 165.445433][ T6181] which belongs to the cache kmalloc-512 of size 512 [ 165.445445][ T6181] The buggy address is located 36 bytes inside of [ 165.445445][ T6181] freed 512-byte region [ffff88803bc08000, ffff88803bc08200) [ 165.445463][ T6181] [ 165.445468][ T6181] The buggy address belongs to the physical page: [ 165.445485][ T6181] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3bc08 [ 165.445500][ T6181] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 165.445512][ T6181] flags: 0x80000000000040(head|node=0|zone=1) [ 165.445534][ T6181] page_type: f5(slab) [ 165.445549][ T6181] raw: 0080000000000040 ffff88813fe37c80 dead000000000100 dead000000000122 [ 165.445563][ T6181] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 165.445577][ T6181] head: 0080000000000040 ffff88813fe37c80 dead000000000100 dead000000000122 [ 165.445590][ T6181] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 165.445605][ T6181] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 165.445618][ T6181] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 165.445626][ T6181] page dumped because: kasan: bad access detected [ 165.445642][ T6181] page_owner tracks the page as allocated [ 165.445648][ T6181] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4962, tgid 4962 (udevadm), ts 31666960987 [ 165.445677][ T6181] post_alloc_hook+0x1f9/0x250 [ 165.445702][ T6181] get_page_from_freelist+0x264c/0x26c0 [ 165.445729][ T6181] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 165.445752][ T6181] allocate_slab+0x7c/0x5e0 [ 165.445769][ T6181] refill_objects+0x2d8/0x350 [ 165.445788][ T6181] __pcs_replace_empty_main+0x330/0x690 [ 165.445806][ T6181] __kmalloc_cache_noprof+0x467/0x670 [ 165.445830][ T6181] kernfs_fop_open+0x3a7/0xcf0 [ 165.445853][ T6181] do_dentry_open+0x849/0x1420 [ 165.445879][ T6181] vfs_open+0x3b/0x350 [ 165.445903][ T6181] path_openat+0x2e64/0x3850 [ 165.445922][ T6181] do_file_open+0x23e/0x4a0 [ 165.445942][ T6181] do_sys_openat2+0x115/0x200 [ 165.445967][ T6181] __x64_sys_openat+0x138/0x170 [ 165.446053][ T6181] do_syscall_64+0x17b/0x530 [ 165.446070][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.446086][ T6181] page_owner free stack trace missing [ 165.446093][ T6181] [ 165.446096][ T6181] Memory state around the buggy address: [ 165.446107][ T6181] ffff88803bc07f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.446117][ T6181] ffff88803bc07f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.446126][ T6181] >ffff88803bc08000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.446134][ T6181] ^ [ 165.446143][ T6181] ffff88803bc08080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.446165][ T6181] ffff88803bc08100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.446174][ T6181] ================================================================== [ 165.447976][ T6181] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.447996][ T6181] CPU: 0 UID: 0 PID: 6181 Comm: syz.1.104 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.448017][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.448028][ T6181] Call Trace: [ 165.448036][ T6181] [ 165.448044][ T6181] vpanic+0x56c/0xa60 [ 165.448069][ T6181] ? __pfx_vpanic+0x10/0x10 [ 165.448087][ T6181] ? __pfx___schedule+0x10/0x10 [ 165.448119][ T6181] panic+0xc5/0xd0 [ 165.448136][ T6181] ? __pfx_panic+0x10/0x10 [ 165.448155][ T6181] ? preempt_schedule_common+0x82/0xd0 [ 165.448182][ T6181] ? config_item_get+0x26/0x90 [ 165.448208][ T6181] check_panic_on_warn+0x89/0xb0 [ 165.448234][ T6181] ? config_item_get+0x26/0x90 [ 165.448259][ T6181] end_report+0x73/0x170 [ 165.448277][ T6181] ? config_item_get+0x26/0x90 [ 165.448300][ T6181] kasan_report+0x128/0x150 [ 165.448315][ T6181] ? config_item_get+0x26/0x90 [ 165.448343][ T6181] kasan_check_range+0x264/0x2c0 [ 165.448361][ T6181] config_item_get+0x26/0x90 [ 165.448387][ T6181] configfs_symlink+0x4ab/0x1030 [ 165.448413][ T6181] ? lookup_one_qstr_excl+0x1d4/0x360 [ 165.448434][ T6181] ? make_vfsuid+0x49/0xa0 [ 165.448463][ T6181] ? __pfx_configfs_symlink+0x10/0x10 [ 165.448497][ T6181] ? bpf_lsm_inode_symlink+0x9/0x20 [ 165.448523][ T6181] vfs_symlink+0x18b/0x330 [ 165.448549][ T6181] ? security_path_symlink+0xf3/0x310 [ 165.448578][ T6181] filename_symlinkat+0x1cd/0x420 [ 165.448605][ T6181] ? __pfx_filename_symlinkat+0x10/0x10 [ 165.448629][ T6181] ? strncpy_from_user+0x150/0x2c0 [ 165.448650][ T6181] ? do_getname+0x151/0x250 [ 165.448677][ T6181] __se_sys_symlinkat+0x4e/0x2b0 [ 165.448704][ T6181] do_syscall_64+0x17b/0x530 [ 165.448722][ T6181] ? irqentry_exit+0x10f/0x8f0 [ 165.448740][ T6181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.448759][ T6181] ? clear_bhb_loop+0x40/0x90 [ 165.448777][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.448795][ T6181] RIP: 0033:0x7fa61ea6de99 [ 165.448812][ T6181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.448828][ T6181] RSP: 002b:00007fa61e0ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 165.448847][ T6181] RAX: ffffffffffffffda RBX: 00007fa61ecf5fa0 RCX: 00007fa61ea6de99 [ 165.448860][ T6181] RDX: 0000200000000300 RSI: ffffffffffffff9c RDI: 0000200000000200 [ 165.448872][ T6181] RBP: 00007fa61eb03eaf R08: 0000000000000000 R09: 0000000000000000 [ 165.448884][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.448894][ T6181] R13: 00007fa61ecf6038 R14: 00007fa61ecf5fa0 R15: 00007ffe30223308 [ 165.448915][ T6181] [ 165.450285][ T6181] Kernel Offset: disabled