Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 91.924972][ T49] cfg80211: failed to load regulatory.db 2025/12/22 00:03:25 parsed 1 programs [ 95.965409][ T5801] cgroup: Unknown subsys name 'net' [ 96.206306][ T5801] cgroup: Unknown subsys name 'cpuset' [ 96.261606][ T5801] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 98.081917][ T5801] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.516226][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.528304][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.538164][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.540545][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.544821][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.640391][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.640414][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.961537][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 104.968172][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.968213][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.343491][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.345567][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.345712][ T5866] bridge_slave_0: entered allmulticast mode [ 105.347663][ T5866] bridge_slave_0: entered promiscuous mode [ 105.381452][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.381667][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.381854][ T5866] bridge_slave_1: entered allmulticast mode [ 105.384444][ T5866] bridge_slave_1: entered promiscuous mode [ 105.836984][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.855370][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.026377][ T5866] team0: Port device team_slave_0 added [ 106.028867][ T5866] team0: Port device team_slave_1 added [ 106.187999][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.188011][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.188029][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.190494][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.190504][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.190522][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.517296][ T5866] hsr_slave_0: entered promiscuous mode [ 106.518406][ T5866] hsr_slave_1: entered promiscuous mode [ 107.236449][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.259737][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.275124][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.315722][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.445724][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.473242][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.480218][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.497245][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.537719][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.537986][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.872343][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.996171][ T5866] veth0_vlan: entered promiscuous mode [ 108.018675][ T5866] veth1_vlan: entered promiscuous mode [ 108.069279][ T5866] veth0_macvtap: entered promiscuous mode [ 108.080777][ T5866] veth1_macvtap: entered promiscuous mode [ 108.103582][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.110706][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.136420][ T1382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.138297][ T1382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.138340][ T1382] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.138376][ T1382] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/12/22 00:03:41 executed programs: 0 [ 108.503120][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.509641][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.512892][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.516229][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.518160][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.572633][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.577315][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.578426][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.579995][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.580728][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.715988][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.720880][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.733737][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.735268][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.736346][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.836096][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.852153][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.856720][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.859696][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.883153][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.943964][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.946182][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.946988][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.948034][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.948686][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.466469][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.552386][ T5117] Bluetooth: hci0: command tx timeout [ 110.609847][ T5914] chnl_net:caif_netlink_parms(): no params data found [ 110.623258][ T5920] chnl_net:caif_netlink_parms(): no params data found [ 110.639433][ T5917] chnl_net:caif_netlink_parms(): no params data found [ 110.642267][ T5117] Bluetooth: hci1: command tx timeout [ 110.791123][ T5117] Bluetooth: hci2: command tx timeout [ 110.793539][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.868439][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 110.951162][ T5117] Bluetooth: hci3: command tx timeout [ 111.031710][ T5117] Bluetooth: hci4: command tx timeout [ 111.122246][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 111.267886][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.725292][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.119281][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.119412][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.119753][ T5914] bridge_slave_0: entered allmulticast mode [ 112.122906][ T5914] bridge_slave_0: entered promiscuous mode [ 112.147085][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.147196][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.147353][ T5920] bridge_slave_0: entered allmulticast mode [ 112.149713][ T5920] bridge_slave_0: entered promiscuous mode [ 112.241922][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.242098][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.242235][ T5917] bridge_slave_0: entered allmulticast mode [ 112.244091][ T5917] bridge_slave_0: entered promiscuous mode [ 112.278012][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.278117][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.278249][ T5914] bridge_slave_1: entered allmulticast mode [ 112.279937][ T5914] bridge_slave_1: entered promiscuous mode [ 112.283737][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.284064][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.284473][ T5920] bridge_slave_1: entered allmulticast mode [ 112.290606][ T5920] bridge_slave_1: entered promiscuous mode [ 112.412023][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.412215][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.412398][ T5917] bridge_slave_1: entered allmulticast mode [ 112.414339][ T5917] bridge_slave_1: entered promiscuous mode [ 112.631090][ T5117] Bluetooth: hci0: command tx timeout [ 112.682873][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.683034][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.683200][ T5924] bridge_slave_0: entered allmulticast mode [ 112.685597][ T5924] bridge_slave_0: entered promiscuous mode [ 112.711213][ T5117] Bluetooth: hci1: command tx timeout [ 112.871187][ T5117] Bluetooth: hci2: command tx timeout [ 113.016502][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.016610][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.016776][ T5924] bridge_slave_1: entered allmulticast mode [ 113.019078][ T5924] bridge_slave_1: entered promiscuous mode [ 113.040990][ T5117] Bluetooth: hci3: command tx timeout [ 113.111106][ T5117] Bluetooth: hci4: command tx timeout [ 113.154686][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.154838][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.154990][ T5925] bridge_slave_0: entered allmulticast mode [ 113.156695][ T5925] bridge_slave_0: entered promiscuous mode [ 113.188497][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.202788][ T5920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.285977][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.286919][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.287035][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.287201][ T5925] bridge_slave_1: entered allmulticast mode [ 113.288928][ T5925] bridge_slave_1: entered promiscuous mode [ 113.322666][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.334095][ T5920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.466019][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.666637][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.958712][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.245132][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.247209][ T5914] team0: Port device team_slave_0 added [ 114.249400][ T5920] team0: Port device team_slave_0 added [ 114.343963][ T5917] team0: Port device team_slave_0 added [ 114.346989][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.348741][ T5914] team0: Port device team_slave_1 added [ 114.350662][ T5920] team0: Port device team_slave_1 added [ 114.464313][ T5917] team0: Port device team_slave_1 added [ 114.674987][ T5924] team0: Port device team_slave_0 added [ 114.711083][ T5117] Bluetooth: hci0: command tx timeout [ 114.791590][ T5117] Bluetooth: hci1: command tx timeout [ 114.951270][ T5117] Bluetooth: hci2: command tx timeout [ 114.975764][ T5924] team0: Port device team_slave_1 added [ 114.976534][ T69] bridge_slave_1: left allmulticast mode [ 114.976725][ T69] bridge_slave_1: left promiscuous mode [ 114.978405][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.072764][ T69] bridge_slave_0: left allmulticast mode [ 115.072796][ T69] bridge_slave_0: left promiscuous mode [ 115.073009][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.112390][ T5117] Bluetooth: hci3: command tx timeout [ 115.191626][ T5117] Bluetooth: hci4: command tx timeout [ 116.762192][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.791134][ T5117] Bluetooth: hci0: command tx timeout [ 116.821844][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.843786][ T69] bond0 (unregistering): Released all slaves [ 116.871192][ T5117] Bluetooth: hci1: command tx timeout [ 116.984510][ T5925] team0: Port device team_slave_0 added [ 116.989339][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.989355][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.989383][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.994892][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.994933][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.995032][ T5920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.031065][ T5117] Bluetooth: hci2: command tx timeout [ 117.191066][ T5117] Bluetooth: hci3: command tx timeout [ 117.244752][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.244765][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.244783][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.247066][ T5925] team0: Port device team_slave_1 added [ 117.248193][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.248203][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.248220][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.249153][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.249162][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.249180][ T5920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.289257][ T5117] Bluetooth: hci4: command tx timeout [ 117.483041][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.483059][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.483086][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.847699][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.847716][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.847744][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.978395][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.978408][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.978427][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.072354][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.072368][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.072388][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.213143][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.213157][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.213177][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.946785][ T5914] hsr_slave_0: entered promiscuous mode [ 118.947803][ T5914] hsr_slave_1: entered promiscuous mode [ 118.948852][ T5914] debugfs: 'hsr0' already exists in 'hsr' [ 118.948950][ T5914] Cannot create hsr debugfs directory [ 119.047854][ T5920] hsr_slave_0: entered promiscuous mode [ 119.048980][ T5920] hsr_slave_1: entered promiscuous mode [ 119.049614][ T5920] debugfs: 'hsr0' already exists in 'hsr' [ 119.049630][ T5920] Cannot create hsr debugfs directory [ 119.078512][ T5917] hsr_slave_0: entered promiscuous mode [ 119.079406][ T5917] hsr_slave_1: entered promiscuous mode [ 119.080101][ T5917] debugfs: 'hsr0' already exists in 'hsr' [ 119.080119][ T5917] Cannot create hsr debugfs directory [ 119.252038][ T5924] hsr_slave_0: entered promiscuous mode [ 119.253041][ T5924] hsr_slave_1: entered promiscuous mode [ 119.253721][ T5924] debugfs: 'hsr0' already exists in 'hsr' [ 119.253738][ T5924] Cannot create hsr debugfs directory [ 119.567412][ T5925] hsr_slave_0: entered promiscuous mode [ 119.568323][ T5925] hsr_slave_1: entered promiscuous mode [ 119.568954][ T5925] debugfs: 'hsr0' already exists in 'hsr' [ 119.568972][ T5925] Cannot create hsr debugfs directory [ 120.511275][ T69] hsr_slave_0: left promiscuous mode [ 120.551589][ T69] hsr_slave_1: left promiscuous mode [ 120.552592][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.552652][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.592970][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.592999][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.693039][ T69] veth1_macvtap: left promiscuous mode [ 120.693193][ T69] veth0_macvtap: left promiscuous mode [ 120.693387][ T69] veth1_vlan: left promiscuous mode [ 120.693565][ T69] veth0_vlan: left promiscuous mode [ 122.621962][ T69] team0 (unregistering): Port device team_slave_1 removed [ 122.821809][ T69] team0 (unregistering): Port device team_slave_0 removed [ 125.704339][ T5914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.743336][ T5914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.873167][ T5914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.942978][ T5914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.525681][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.555341][ T5914] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.569929][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.570082][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.604951][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.605108][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.846684][ T5920] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 126.870825][ T5920] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 126.910463][ T5920] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 126.994856][ T5920] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 127.167164][ T5924] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 127.209126][ T5924] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 127.276657][ T5924] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 127.321855][ T5924] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 127.442464][ T5925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.485692][ T5925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.531977][ T5925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.583049][ T5925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.628669][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.707590][ T5917] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 127.738277][ T5917] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 127.782339][ T5917] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 127.825513][ T5917] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 127.953492][ T5920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.978151][ T5914] veth0_vlan: entered promiscuous mode [ 128.038097][ T5914] veth1_vlan: entered promiscuous mode [ 128.050285][ T5920] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.077150][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.090679][ T1361] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.090829][ T1361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.134854][ T1361] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.135416][ T1361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.198219][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.239337][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.248612][ T1382] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.248840][ T1382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.281688][ T1361] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.281896][ T1361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.318242][ T5914] veth0_macvtap: entered promiscuous mode [ 128.351755][ T5914] veth1_macvtap: entered promiscuous mode [ 128.354760][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.378559][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.412584][ T1382] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.412739][ T1382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.452867][ T1382] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.453845][ T1382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.495583][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.524082][ T5917] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.539387][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.586451][ T1296] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.591285][ T1296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.618848][ T1361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.645629][ T1382] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.646527][ T1382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.667497][ T3531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.683325][ T3531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.700614][ T3531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.080143][ T5920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.107094][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.107114][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.177655][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.285382][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.285404][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/22 00:04:02 executed programs: 10 [ 129.478961][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.502388][ T5920] veth0_vlan: entered promiscuous mode [ 129.509155][ T5924] veth0_vlan: entered promiscuous mode [ 129.556239][ T5924] veth1_vlan: entered promiscuous mode [ 129.557846][ T5920] veth1_vlan: entered promiscuous mode [ 129.696500][ T5924] veth0_macvtap: entered promiscuous mode [ 129.716998][ T5920] veth0_macvtap: entered promiscuous mode [ 129.745086][ T5924] veth1_macvtap: entered promiscuous mode [ 129.769698][ T5920] veth1_macvtap: entered promiscuous mode [ 129.799923][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.866854][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.907752][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.924381][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.937796][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.960040][ T3612] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.976161][ T3612] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.977614][ T3612] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.981147][ T3612] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.016988][ T1361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.018717][ T1361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.038654][ T1361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.050329][ T1361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.274512][ T5917] veth0_vlan: entered promiscuous mode [ 130.468702][ T5917] veth1_vlan: entered promiscuous mode [ 130.484238][ T5925] veth0_vlan: entered promiscuous mode [ 130.489907][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.489925][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.563559][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.563579][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.567386][ T5925] veth1_vlan: entered promiscuous mode [ 130.645676][ T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.645696][ T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.717350][ T5917] veth0_macvtap: entered promiscuous mode [ 130.719596][ T1361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.719613][ T1361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.756255][ T5917] veth1_macvtap: entered promiscuous mode [ 130.800085][ T5925] veth0_macvtap: entered promiscuous mode [ 130.835028][ T5925] veth1_macvtap: entered promiscuous mode [ 130.863568][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.936843][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.980839][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.988419][ T1296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.005901][ T1296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.007382][ T1296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.020504][ T1296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.032525][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.106630][ T3531] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.107731][ T3531] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.108920][ T3531] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.121068][ T3531] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.459544][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.459565][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.593386][ T1382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.593406][ T1382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.675552][ T1382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.675572][ T1382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.818277][ T3612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.818297][ T3612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/22 00:04:08 executed programs: 30 [ 138.007391][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.007513][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 2025/12/22 00:04:13 executed programs: 60 2025/12/22 00:04:18 executed programs: 90 2025/12/22 00:04:23 executed programs: 120 2025/12/22 00:04:29 executed programs: 150 2025/12/22 00:04:34 executed programs: 180 2025/12/22 00:04:39 executed programs: 210 2025/12/22 00:04:44 executed programs: 240 2025/12/22 00:04:49 executed programs: 270 2025/12/22 00:04:55 executed programs: 300 2025/12/22 00:05:00 executed programs: 330 2025/12/22 00:05:05 executed programs: 360 2025/12/22 00:05:10 executed programs: 390 [ 199.443785][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.443833][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 2025/12/22 00:05:16 executed programs: 420 2025/12/22 00:05:21 executed programs: 450 2025/12/22 00:05:26 executed programs: 480 2025/12/22 00:05:31 executed programs: 510 2025/12/22 00:05:36 executed programs: 540 2025/12/22 00:05:42 executed programs: 570 [ 232.235641][ T7777] Bluetooth: hci4: command 0x0406 tx timeout [ 232.236208][ T7777] Bluetooth: hci1: command 0x0406 tx timeout [ 232.236236][ T7777] Bluetooth: hci2: command 0x0406 tx timeout [ 232.236258][ T7777] Bluetooth: hci3: command 0x0406 tx timeout [ 232.237960][ T7775] Bluetooth: hci0: command 0x0406 tx timeout 2025/12/22 00:05:47 executed programs: 600 2025/12/22 00:05:52 executed programs: 630 2025/12/22 00:05:57 executed programs: 660 2025/12/22 00:06:03 executed programs: 690 2025/12/22 00:06:08 executed programs: 720 2025/12/22 00:06:13 executed programs: 750 [ 260.879691][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.879765][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 2025/12/22 00:06:18 executed programs: 780 2025/12/22 00:06:23 executed programs: 810 2025/12/22 00:06:29 executed programs: 840 2025/12/22 00:06:34 executed programs: 870 2025/12/22 00:06:39 executed programs: 900 2025/12/22 00:06:44 executed programs: 930 2025/12/22 00:06:50 executed programs: 960 2025/12/22 00:06:55 executed programs: 990 2025/12/22 00:07:00 executed programs: 1020 2025/12/22 00:07:05 executed programs: 1050 2025/12/22 00:07:10 executed programs: 1080 [ 322.321494][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.321568][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 2025/12/22 00:07:15 executed programs: 1110 2025/12/22 00:07:21 executed programs: 1140 2025/12/22 00:07:26 executed programs: 1170 2025/12/22 00:07:31 executed programs: 1200 2025/12/22 00:07:36 executed programs: 1230 [ 343.643457][ T9742] ================================================================== [ 343.643472][ T9742] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x3e0 [ 343.643514][ T9742] Read of size 1 at addr ffff888034ea7200 by task syz.1.1236/9742 [ 343.643531][ T9742] [ 343.643558][ T9742] CPU: 1 UID: 0 PID: 9742 Comm: syz.1.1236 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 343.643581][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.643601][ T9742] Call Trace: [ 343.643612][ T9742] [ 343.643620][ T9742] dump_stack_lvl+0xe8/0x150 [ 343.643653][ T9742] print_report+0xca/0x240 [ 343.643684][ T9742] ? rt_spin_lock+0x88/0x3e0 [ 343.643710][ T9742] kasan_report+0x118/0x150 [ 343.643744][ T9742] ? rt_spin_lock+0x88/0x3e0 [ 343.643773][ T9742] ? __wake_up_common_lock+0x2f/0x1e0 [ 343.643799][ T9742] __kasan_check_byte+0x2a/0x40 [ 343.643831][ T9742] lock_acquire+0x84/0x340 [ 343.643858][ T9742] ? rt_mutex_slowunlock+0x668/0x8a0 [ 343.643884][ T9742] ? reacquire_held_locks+0x104/0x190 [ 343.643920][ T9742] rt_spin_lock+0x88/0x3e0 [ 343.643945][ T9742] ? __wake_up_common_lock+0x2f/0x1e0 [ 343.643972][ T9742] ? __pfx_rt_spin_lock+0x10/0x10 [ 343.643998][ T9742] ? rt_spin_unlock+0x161/0x200 [ 343.644026][ T9742] ? __wake_up_common_lock+0x18a/0x1e0 [ 343.644054][ T9742] __wake_up_common_lock+0x2f/0x1e0 [ 343.644080][ T9742] ? snd_pcm_post_stop+0x14a/0x1e0 [ 343.644100][ T9742] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 343.644118][ T9742] snd_pcm_action+0x1f4/0x240 [ 343.644147][ T9742] loopback_trigger+0xb82/0x1b60 [ 343.644169][ T9742] ? rcu_is_watching+0x15/0xb0 [ 343.644192][ T9742] snd_pcm_do_start+0xb7/0x180 [ 343.644224][ T9742] snd_pcm_action+0xe7/0x240 [ 343.644252][ T9742] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 343.644278][ T9742] ? __pfx_interleaved_copy+0x10/0x10 [ 343.644300][ T9742] ? __pfx_default_write_copy+0x10/0x10 [ 343.644323][ T9742] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 343.644345][ T9742] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 343.644365][ T9742] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 343.644392][ T9742] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 343.644421][ T9742] ? snd_pcm_oss_write3+0x1a2/0x350 [ 343.644456][ T9742] snd_pcm_oss_write3+0x1bc/0x350 [ 343.644491][ T9742] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 343.644519][ T9742] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 343.644543][ T9742] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 343.644572][ T9742] snd_pcm_oss_write+0xa31/0xf20 [ 343.644610][ T9742] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 343.644644][ T9742] ? rw_verify_area+0x25b/0x4e0 [ 343.644684][ T9742] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 343.644708][ T9742] vfs_write+0x287/0xb40 [ 343.644730][ T9742] ? __pfx_vfs_write+0x10/0x10 [ 343.644750][ T9742] ? __fget_files+0x2a/0x420 [ 343.644766][ T9742] ? __fget_files+0x2a/0x420 [ 343.644780][ T9742] ? __fget_files+0x3a6/0x420 [ 343.644794][ T9742] ? __fget_files+0x2a/0x420 [ 343.644811][ T9742] ksys_write+0x14b/0x260 [ 343.644832][ T9742] ? __pfx_ksys_write+0x10/0x10 [ 343.644855][ T9742] do_syscall_64+0xec/0xf80 [ 343.644869][ T9742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.644883][ T9742] ? trace_irq_disable+0x37/0x100 [ 343.644899][ T9742] ? clear_bhb_loop+0x60/0xb0 [ 343.644915][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.644929][ T9742] RIP: 0033:0x7f1277acf749 [ 343.644945][ T9742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.644958][ T9742] RSP: 002b:00007f1277115038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.644975][ T9742] RAX: ffffffffffffffda RBX: 00007f1277d26090 RCX: 00007f1277acf749 [ 343.644986][ T9742] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000008 [ 343.644996][ T9742] RBP: 00007f1277b53f91 R08: 0000000000000000 R09: 0000000000000000 [ 343.645005][ T9742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.645013][ T9742] R13: 00007f1277d26128 R14: 00007f1277d26090 R15: 00007ffea9722d18 [ 343.645030][ T9742] [ 343.645035][ T9742] [ 343.645038][ T9742] Allocated by task 9740: [ 343.645045][ T9742] kasan_save_track+0x3e/0x80 [ 343.645063][ T9742] __kasan_kmalloc+0x93/0xb0 [ 343.645082][ T9742] __kmalloc_cache_noprof+0x1fb/0x6d0 [ 343.645102][ T9742] snd_pcm_attach_substream+0x5b7/0xb30 [ 343.645116][ T9742] snd_pcm_open_substream+0xb6/0x2410 [ 343.645135][ T9742] snd_pcm_oss_open+0xf2a/0x1bd0 [ 343.645145][ T9742] chrdev_open+0x4cf/0x5e0 [ 343.645156][ T9742] do_dentry_open+0x7d0/0x1270 [ 343.645168][ T9742] vfs_open+0x3b/0x350 [ 343.645180][ T9742] path_openat+0x342a/0x3df0 [ 343.645198][ T9742] do_filp_open+0x1fa/0x410 [ 343.645214][ T9742] do_sys_openat2+0x121/0x200 [ 343.645228][ T9742] __x64_sys_openat+0x138/0x170 [ 343.645242][ T9742] do_syscall_64+0xec/0xf80 [ 343.645254][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.645266][ T9742] [ 343.645269][ T9742] Freed by task 9740: [ 343.645275][ T9742] kasan_save_track+0x3e/0x80 [ 343.645292][ T9742] kasan_save_free_info+0x46/0x50 [ 343.645307][ T9742] __kasan_slab_free+0x5c/0x80 [ 343.645326][ T9742] kfree+0x1bd/0x900 [ 343.645342][ T9742] snd_pcm_detach_substream+0x1e1/0x290 [ 343.645356][ T9742] snd_pcm_oss_release+0x184/0x250 [ 343.645367][ T9742] __fput+0x45b/0xa80 [ 343.645380][ T9742] task_work_run+0x1d4/0x260 [ 343.645400][ T9742] get_signal+0x11c4/0x1310 [ 343.645414][ T9742] arch_do_signal_or_restart+0x9a/0x7a0 [ 343.645453][ T9742] exit_to_user_mode_loop+0x87/0x4e0 [ 343.645489][ T9742] do_syscall_64+0x2b7/0xf80 [ 343.645502][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.645515][ T9742] [ 343.645519][ T9742] The buggy address belongs to the object at ffff888034ea7000 [ 343.645519][ T9742] which belongs to the cache kmalloc-2k of size 2048 [ 343.645531][ T9742] The buggy address is located 512 bytes inside of [ 343.645531][ T9742] freed 2048-byte region [ffff888034ea7000, ffff888034ea7800) [ 343.645546][ T9742] [ 343.645550][ T9742] The buggy address belongs to the physical page: [ 343.645564][ T9742] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34ea0 [ 343.645578][ T9742] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 343.645590][ T9742] flags: 0x80000000000040(head|node=0|zone=1) [ 343.645608][ T9742] page_type: f5(slab) [ 343.645626][ T9742] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 343.645639][ T9742] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 343.645653][ T9742] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 343.645666][ T9742] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 343.645685][ T9742] head: 0080000000000003 ffffea0000d3a801 00000000ffffffff 00000000ffffffff [ 343.645697][ T9742] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 343.645705][ T9742] page dumped because: kasan: bad access detected [ 343.645716][ T9742] page_owner tracks the page as allocated [ 343.645721][ T9742] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5917, tgid 5917 (syz-executor), ts 127811454833, free_ts 125843464373 [ 343.645748][ T9742] post_alloc_hook+0x234/0x290 [ 343.645768][ T9742] get_page_from_freelist+0x28c0/0x2960 [ 343.645781][ T9742] __alloc_frozen_pages_noprof+0x181/0x370 [ 343.645795][ T9742] alloc_pages_mpol+0xd1/0x380 [ 343.645807][ T9742] allocate_slab+0x86/0x3b0 [ 343.645822][ T9742] ___slab_alloc+0xb10/0x13e0 [ 343.645836][ T9742] __slab_alloc+0xc6/0x1f0 [ 343.645849][ T9742] __kmalloc_node_track_caller_noprof+0x2bf/0x810 [ 343.645871][ T9742] kmalloc_reserve+0x136/0x290 [ 343.645886][ T9742] pskb_expand_head+0x19d/0x1160 [ 343.645905][ T9742] netlink_trim+0x1b3/0x2c0 [ 343.645921][ T9742] netlink_broadcast_filtered+0xd6/0x1000 [ 343.645937][ T9742] nlmsg_notify+0xf0/0x1a0 [ 343.645954][ T9742] rtnetlink_event+0x224/0x270 [ 343.645969][ T9742] notifier_call_chain+0x19d/0x3a0 [ 343.645987][ T9742] netif_change_name+0x5db/0x970 [ 343.646000][ T9742] page last free pid 5966 tgid 5966 stack trace: [ 343.646008][ T9742] __free_frozen_pages+0xfe1/0x1170 [ 343.646028][ T9742] __put_partials+0x149/0x170 [ 343.646042][ T9742] __slab_free+0x2af/0x330 [ 343.646057][ T9742] qlist_free_all+0x97/0x100 [ 343.646075][ T9742] kasan_quarantine_reduce+0x148/0x160 [ 343.646094][ T9742] __kasan_slab_alloc+0x22/0x80 [ 343.646115][ T9742] kmem_cache_alloc_noprof+0x18d/0x6c0 [ 343.646133][ T9742] getname_flags+0xb8/0x540 [ 343.646146][ T9742] user_path_at+0x24/0x60 [ 343.646162][ T9742] user_statfs+0x94/0x170 [ 343.646183][ T9742] __x64_sys_statfs+0xe0/0x1b0 [ 343.646204][ T9742] do_syscall_64+0xec/0xf80 [ 343.646217][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.646230][ T9742] [ 343.646233][ T9742] Memory state around the buggy address: [ 343.646241][ T9742] ffff888034ea7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 343.646251][ T9742] ffff888034ea7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 343.646261][ T9742] >ffff888034ea7200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 343.646269][ T9742] ^ [ 343.646276][ T9742] ffff888034ea7280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 343.646297][ T9742] ffff888034ea7300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 343.646305][ T9742] ================================================================== [ 343.646316][ T9742] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 343.646329][ T9742] CPU: 1 UID: 0 PID: 9742 Comm: syz.1.1236 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 343.646345][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.646353][ T9742] Call Trace: [ 343.646359][ T9742] [ 343.646364][ T9742] vpanic+0x1e0/0x670 [ 343.646385][ T9742] panic+0xb9/0xc0 [ 343.646404][ T9742] ? __pfx_panic+0x10/0x10 [ 343.646426][ T9742] ? rt_spin_lock+0x88/0x3e0 [ 343.646444][ T9742] ? rcu_is_watching+0x15/0xb0 [ 343.646459][ T9742] ? rt_spin_lock+0x88/0x3e0 [ 343.646477][ T9742] check_panic_on_warn+0x89/0xb0 [ 343.646499][ T9742] ? rt_spin_lock+0x88/0x3e0 [ 343.646517][ T9742] end_report+0x6f/0x140 [ 343.646538][ T9742] kasan_report+0x129/0x150 [ 343.646561][ T9742] ? rt_spin_lock+0x88/0x3e0 [ 343.646582][ T9742] ? __wake_up_common_lock+0x2f/0x1e0 [ 343.646599][ T9742] __kasan_check_byte+0x2a/0x40 [ 343.646620][ T9742] lock_acquire+0x84/0x340 [ 343.646639][ T9742] ? rt_mutex_slowunlock+0x668/0x8a0 [ 343.646658][ T9742] ? reacquire_held_locks+0x104/0x190 [ 343.646687][ T9742] rt_spin_lock+0x88/0x3e0 [ 343.646705][ T9742] ? __wake_up_common_lock+0x2f/0x1e0 [ 343.646724][ T9742] ? __pfx_rt_spin_lock+0x10/0x10 [ 343.646742][ T9742] ? rt_spin_unlock+0x161/0x200 [ 343.646762][ T9742] ? __wake_up_common_lock+0x18a/0x1e0 [ 343.646781][ T9742] __wake_up_common_lock+0x2f/0x1e0 [ 343.646799][ T9742] ? snd_pcm_post_stop+0x14a/0x1e0 [ 343.646812][ T9742] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 343.646825][ T9742] snd_pcm_action+0x1f4/0x240 [ 343.646845][ T9742] loopback_trigger+0xb82/0x1b60 [ 343.646859][ T9742] ? rcu_is_watching+0x15/0xb0 [ 343.646875][ T9742] snd_pcm_do_start+0xb7/0x180 [ 343.646898][ T9742] snd_pcm_action+0xe7/0x240 [ 343.646918][ T9742] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 343.646935][ T9742] ? __pfx_interleaved_copy+0x10/0x10 [ 343.646951][ T9742] ? __pfx_default_write_copy+0x10/0x10 [ 343.646967][ T9742] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 343.646982][ T9742] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 343.646996][ T9742] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 343.647020][ T9742] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 343.647041][ T9742] ? snd_pcm_oss_write3+0x1a2/0x350 [ 343.647065][ T9742] snd_pcm_oss_write3+0x1bc/0x350 [ 343.647109][ T9742] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 343.647134][ T9742] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 343.647154][ T9742] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 343.647176][ T9742] snd_pcm_oss_write+0xa31/0xf20 [ 343.647206][ T9742] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 343.647233][ T9742] ? rw_verify_area+0x25b/0x4e0 [ 343.647255][ T9742] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 343.647281][ T9742] vfs_write+0x287/0xb40 [ 343.647305][ T9742] ? __pfx_vfs_write+0x10/0x10 [ 343.647327][ T9742] ? __fget_files+0x2a/0x420 [ 343.647344][ T9742] ? __fget_files+0x2a/0x420 [ 343.647360][ T9742] ? __fget_files+0x3a6/0x420 [ 343.647375][ T9742] ? __fget_files+0x2a/0x420 [ 343.647395][ T9742] ksys_write+0x14b/0x260 [ 343.647417][ T9742] ? __pfx_ksys_write+0x10/0x10 [ 343.647446][ T9742] do_syscall_64+0xec/0xf80 [ 343.647461][ T9742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.647476][ T9742] ? trace_irq_disable+0x37/0x100 [ 343.647493][ T9742] ? clear_bhb_loop+0x60/0xb0 [ 343.647511][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.647526][ T9742] RIP: 0033:0x7f1277acf749 [ 343.647538][ T9742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.647551][ T9742] RSP: 002b:00007f1277115038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.647567][ T9742] RAX: ffffffffffffffda RBX: 00007f1277d26090 RCX: 00007f1277acf749 [ 343.647578][ T9742] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000008 [ 343.647589][ T9742] RBP: 00007f1277b53f91 R08: 0000000000000000 R09: 0000000000000000 [ 343.647599][ T9742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.647608][ T9742] R13: 00007f1277d26128 R14: 00007f1277d26090 R15: 00007ffea9722d18 [ 343.647626][ T9742] [ 343.648257][ T9742] Kernel Offset: disabled