Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. 2026/05/06 08:28:46 parsed 1 programs [ 131.592320][ T6059] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 132.871290][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.871416][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.307954][ T1467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.307973][ T1467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.691554][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.691570][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.867377][ T4915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.885964][ T4915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.894991][ T4915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.921005][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.925232][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.981407][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.981613][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.981778][ T6070] bridge_slave_0: entered allmulticast mode [ 137.984139][ T6070] bridge_slave_0: entered promiscuous mode [ 138.601093][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.601185][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.601290][ T6070] bridge_slave_1: entered allmulticast mode [ 138.602638][ T6070] bridge_slave_1: entered promiscuous mode [ 138.912452][ T6070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.959533][ T6070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.233729][ T6070] team0: Port device team_slave_0 added [ 139.249946][ T6070] team0: Port device team_slave_1 added [ 139.753212][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.753227][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.753249][ T6070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.865726][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.865742][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.865769][ T6070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.550631][ T6070] hsr_slave_0: entered promiscuous mode [ 140.551384][ T6070] hsr_slave_1: entered promiscuous mode [ 140.963215][ T6070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.006187][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.007255][ T6070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.049466][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.050356][ T6070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.088697][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.090553][ T6070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.128306][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.249725][ T6070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.419259][ T6070] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.433180][ T1467] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.433306][ T1467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.460121][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.460288][ T1444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.904386][ T6070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.103964][ T6070] veth0_vlan: entered promiscuous mode [ 142.119018][ T6070] veth1_vlan: entered promiscuous mode [ 142.153760][ T6070] veth0_macvtap: entered promiscuous mode [ 142.163436][ T6070] veth1_macvtap: entered promiscuous mode [ 142.180398][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.198822][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.211348][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.211590][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.211623][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.211654][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/06 08:29:01 executed programs: 0 [ 142.714533][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.739345][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.751744][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.769588][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.772916][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.910337][ T4915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.922406][ T4915] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.937853][ T4915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.940225][ T4915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.940958][ T4915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.082591][ T5660] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.120798][ T5660] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.125689][ T5660] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.133058][ T5660] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.135270][ T5660] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.231408][ T5660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.247956][ T5660] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.284694][ T5660] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.300378][ T5660] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.301852][ T5660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.304629][ T5660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.328760][ T6187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.330103][ T5660] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.346536][ T4915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.361588][ T4915] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.532396][ T1467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.855641][ T5660] Bluetooth: hci0: command tx timeout [ 145.169631][ T1467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.175699][ T5660] Bluetooth: hci1: command tx timeout [ 145.255888][ T5660] Bluetooth: hci2: command tx timeout [ 145.416801][ T59] Bluetooth: hci4: command tx timeout [ 145.416811][ T5660] Bluetooth: hci3: command tx timeout [ 145.478968][ T1467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.719233][ T1467] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.935640][ T5660] Bluetooth: hci0: command tx timeout [ 147.255579][ T5660] Bluetooth: hci1: command tx timeout [ 147.336811][ T5660] Bluetooth: hci2: command tx timeout [ 147.476825][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.477069][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.477253][ T6185] bridge_slave_0: entered allmulticast mode [ 147.478650][ T6185] bridge_slave_0: entered promiscuous mode [ 147.495532][ T5660] Bluetooth: hci3: command tx timeout [ 147.495561][ T5660] Bluetooth: hci4: command tx timeout [ 147.715891][ T1467] bridge_slave_1: left allmulticast mode [ 147.715916][ T1467] bridge_slave_1: left promiscuous mode [ 147.716092][ T1467] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.776629][ T1467] bridge_slave_0: left allmulticast mode [ 147.776658][ T1467] bridge_slave_0: left promiscuous mode [ 147.776818][ T1467] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.436135][ T1467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.496132][ T1467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.519088][ T1467] bond0 (unregistering): Released all slaves [ 148.637252][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.637318][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.637453][ T6182] bridge_slave_0: entered allmulticast mode [ 148.638843][ T6182] bridge_slave_0: entered promiscuous mode [ 148.651904][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.652014][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.652163][ T6181] bridge_slave_0: entered allmulticast mode [ 148.654447][ T6181] bridge_slave_0: entered promiscuous mode [ 148.702338][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.702457][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.702659][ T6175] bridge_slave_0: entered allmulticast mode [ 148.705149][ T6175] bridge_slave_0: entered promiscuous mode [ 148.710622][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.710732][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.710882][ T6185] bridge_slave_1: entered allmulticast mode [ 148.713181][ T6185] bridge_slave_1: entered promiscuous mode [ 148.714839][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.714949][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.715135][ T6182] bridge_slave_1: entered allmulticast mode [ 148.719395][ T6182] bridge_slave_1: entered promiscuous mode [ 148.883022][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.883138][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.883304][ T6181] bridge_slave_1: entered allmulticast mode [ 148.889108][ T6181] bridge_slave_1: entered promiscuous mode [ 148.891372][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.891541][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.891697][ T6175] bridge_slave_1: entered allmulticast mode [ 148.894103][ T6175] bridge_slave_1: entered promiscuous mode [ 149.016901][ T59] Bluetooth: hci0: command tx timeout [ 149.335608][ T59] Bluetooth: hci1: command tx timeout [ 149.415710][ T59] Bluetooth: hci2: command tx timeout [ 149.446393][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.446498][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.446663][ T6178] bridge_slave_0: entered allmulticast mode [ 149.448598][ T6178] bridge_slave_0: entered promiscuous mode [ 149.568986][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.574826][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.575053][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.575224][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.575645][ T59] Bluetooth: hci3: command tx timeout [ 149.575672][ T59] Bluetooth: hci4: command tx timeout [ 149.577471][ T6178] bridge_slave_1: entered allmulticast mode [ 149.579917][ T6178] bridge_slave_1: entered promiscuous mode [ 149.593886][ T6181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.602032][ T6175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.608841][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.611888][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.678370][ T6181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.680659][ T6175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.349955][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.508068][ T6185] team0: Port device team_slave_0 added [ 150.514343][ T6182] team0: Port device team_slave_0 added [ 150.518169][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.522508][ T6181] team0: Port device team_slave_0 added [ 150.533457][ T6185] team0: Port device team_slave_1 added [ 150.560907][ T6175] team0: Port device team_slave_0 added [ 150.562988][ T6182] team0: Port device team_slave_1 added [ 150.709471][ T6181] team0: Port device team_slave_1 added [ 150.711785][ T6175] team0: Port device team_slave_1 added [ 150.936030][ T1467] hsr_slave_0: left promiscuous mode [ 150.955742][ T1467] hsr_slave_1: left promiscuous mode [ 150.956386][ T1467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.956402][ T1467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.998046][ T1467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.998072][ T1467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.056696][ T1467] veth1_macvtap: left promiscuous mode [ 151.056758][ T1467] veth0_macvtap: left promiscuous mode [ 151.058510][ T1467] veth1_vlan: left promiscuous mode [ 151.058611][ T1467] veth0_vlan: left promiscuous mode [ 151.095787][ T5660] Bluetooth: hci0: command tx timeout [ 151.415677][ T5660] Bluetooth: hci1: command tx timeout [ 151.495595][ T5660] Bluetooth: hci2: command tx timeout [ 151.655575][ T5660] Bluetooth: hci4: command tx timeout [ 151.655591][ T59] Bluetooth: hci3: command tx timeout [ 151.656114][ T1467] team0 (unregistering): Port device team_slave_1 removed [ 151.707142][ T1467] team0 (unregistering): Port device team_slave_0 removed [ 152.469703][ T6178] team0: Port device team_slave_0 added [ 152.471698][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.471712][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.471734][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.628311][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.628325][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.628345][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.633057][ T6178] team0: Port device team_slave_1 added [ 152.634366][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.634378][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.634398][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.642032][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.642046][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.642068][ T6181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.666869][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.666885][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.666907][ T6175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.852751][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.852767][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.852792][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.987679][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.987695][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.987717][ T6181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.004142][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.004158][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.004180][ T6175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.167665][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.167680][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.167697][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.173721][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 153.177246][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.177260][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.177282][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.711771][ T6185] hsr_slave_0: entered promiscuous mode [ 153.712484][ T6185] hsr_slave_1: entered promiscuous mode [ 153.803753][ T6182] hsr_slave_0: entered promiscuous mode [ 153.804619][ T6182] hsr_slave_1: entered promiscuous mode [ 153.805211][ T6182] debugfs: 'hsr0' already exists in 'hsr' [ 153.805229][ T6182] Cannot create hsr debugfs directory [ 153.887320][ T6181] hsr_slave_0: entered promiscuous mode [ 153.888113][ T6181] hsr_slave_1: entered promiscuous mode [ 153.888637][ T6181] debugfs: 'hsr0' already exists in 'hsr' [ 153.888651][ T6181] Cannot create hsr debugfs directory [ 153.894093][ T6175] hsr_slave_0: entered promiscuous mode [ 153.894851][ T6175] hsr_slave_1: entered promiscuous mode [ 153.915840][ T6175] debugfs: 'hsr0' already exists in 'hsr' [ 153.915866][ T6175] Cannot create hsr debugfs directory [ 154.166443][ T6178] hsr_slave_0: entered promiscuous mode [ 154.167258][ T6178] hsr_slave_1: entered promiscuous mode [ 154.167823][ T6178] debugfs: 'hsr0' already exists in 'hsr' [ 154.167839][ T6178] Cannot create hsr debugfs directory [ 155.612414][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 156.529142][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 156.932458][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 159.834258][ T6182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.866137][ T6182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.871410][ T6182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.918050][ T6182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.921449][ T6182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.964824][ T6182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.995133][ T6182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.020525][ T6182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.214335][ T6185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 160.239966][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.254304][ T6185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 160.284349][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.288611][ T6185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 160.349853][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.407616][ T6185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 160.453148][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.718896][ T6181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.751124][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.762426][ T6181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.810277][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.818537][ T6181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.859725][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.931719][ T6181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.959898][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.038669][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.146486][ T6178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.171294][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.197058][ T6178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.232785][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.251057][ T6178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.291201][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.311513][ T6178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.350441][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.365206][ T6182] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.580597][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.580801][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.677274][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.677459][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.809690][ T6175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.881533][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.912668][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.924452][ T6175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.961682][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.972072][ T6175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.018014][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.039724][ T6175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.069789][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.210597][ T6185] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.303018][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.303244][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.372577][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.386449][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.488298][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.679002][ T6181] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.730806][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.730994][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.770313][ T6178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.823257][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.823390][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.941188][ T6178] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.071701][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.071914][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.152142][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.152391][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.170416][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.394164][ T6175] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.465220][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.474168][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.567803][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.568048][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.627691][ T6182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.192926][ T6182] veth0_vlan: entered promiscuous mode [ 164.350594][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.402435][ T6182] veth1_vlan: entered promiscuous mode [ 164.682861][ T6182] veth0_macvtap: entered promiscuous mode [ 164.753545][ T6182] veth1_macvtap: entered promiscuous mode [ 164.779484][ T6185] veth0_vlan: entered promiscuous mode [ 164.910854][ T6181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.927817][ T6185] veth1_vlan: entered promiscuous mode [ 164.983371][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.053995][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.125001][ T1397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.133097][ T1397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.140714][ T1397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.153507][ T1397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.433642][ T6185] veth0_macvtap: entered promiscuous mode [ 165.561981][ T6178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.566539][ T6185] veth1_macvtap: entered promiscuous mode [ 165.678041][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.813010][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.813029][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.820883][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.972021][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.076416][ T1428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.090284][ T1428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.103939][ T1428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.143509][ T1428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.157694][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.157713][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.194187][ T6178] veth0_vlan: entered promiscuous mode [ 166.312694][ T6175] veth0_vlan: entered promiscuous mode 2026/05/06 08:29:25 executed programs: 10 [ 166.457969][ T6178] veth1_vlan: entered promiscuous mode [ 166.474098][ T6181] veth0_vlan: entered promiscuous mode [ 166.504242][ T6623] loop2: detected capacity change from 0 to 512 [ 166.556806][ T6623] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.601463][ T6175] veth1_vlan: entered promiscuous mode [ 166.760326][ T6623] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 166.977222][ T6623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 166.977351][ T6623] System zones: 1-12 [ 167.027145][ T1428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.027164][ T1428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.029017][ T6623] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.18: corrupted in-inode xattr: e_value size too large [ 167.029195][ T6623] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.036397][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 167.036421][ C1] EXT4-fs (loop2): initial error at time 1778056166: ext4_iget_extra_inode:5128: inode 15 [ 167.036447][ C1] EXT4-fs (loop2): last error at time 1778056166: ext4_iget_extra_inode:5128: inode 15 [ 167.086293][ T6181] veth1_vlan: entered promiscuous mode [ 167.117975][ T6623] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.18: couldn't read orphan inode 15 (err -117) [ 167.118153][ T6623] loop2: lost filesystem error report for type 5 error -117 [ 167.142998][ T6623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.293359][ T6623] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.18: Unrecognised inode hash code 4 [ 167.293389][ T6623] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.18: Corrupt directory, running e2fsck is recommended [ 167.293512][ T6623] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 255: comm syz.2.18: path (unknown): bad entry in directory: directory entry overrun - offset=1023, inode=256, rec_len=1024, size=1024 fake=0 [ 167.354914][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.354932][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.496756][ T6178] veth0_macvtap: entered promiscuous mode [ 167.525786][ T6175] veth0_macvtap: entered promiscuous mode [ 167.562990][ T6178] veth1_macvtap: entered promiscuous mode [ 167.583629][ T6175] veth1_macvtap: entered promiscuous mode [ 167.676220][ T6181] veth0_macvtap: entered promiscuous mode [ 167.709339][ T6181] veth1_macvtap: entered promiscuous mode [ 167.751818][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.784571][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.840639][ T6182] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.841674][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.887719][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.954689][ T1467] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.964758][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.965033][ T1467] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.968550][ T6652] loop3: detected capacity change from 0 to 512 [ 168.002083][ T6652] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.010841][ T1467] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.070147][ T1467] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.079449][ T1467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.099493][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.106467][ T1467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.125727][ T6652] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 168.173957][ T6656] loop2: detected capacity change from 0 to 512 [ 168.184818][ T6652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 168.184957][ T6652] System zones: 1-12 [ 168.192848][ T6652] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.19: corrupted in-inode xattr: e_value size too large [ 168.192877][ T6652] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.195458][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 168.195478][ C0] EXT4-fs (loop3): initial error at time 1778056167: ext4_iget_extra_inode:5128: inode 15 [ 168.195503][ C0] EXT4-fs (loop3): last error at time 1778056167: ext4_iget_extra_inode:5128: inode 15 [ 168.223315][ T6652] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.19: couldn't read orphan inode 15 (err -117) [ 168.223345][ T6652] loop3: lost filesystem error report for type 5 error -117 [ 168.235596][ T1467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.263651][ T6656] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.283768][ T805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.295351][ T6656] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 168.347331][ T6656] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 168.347522][ T6656] System zones: 1-12 [ 168.353045][ T6656] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.21: corrupted in-inode xattr: e_value size too large [ 168.353072][ T6656] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.355473][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 168.355494][ C1] EXT4-fs (loop2): initial error at time 1778056167: ext4_iget_extra_inode:5128: inode 15 [ 168.355551][ C1] EXT4-fs (loop2): last error at time 1778056167: ext4_iget_extra_inode:5128: inode 15 [ 168.366848][ T6652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.398025][ T6656] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.21: couldn't read orphan inode 15 (err -117) [ 168.398055][ T6656] loop2: lost filesystem error report for type 5 error -117 [ 168.496476][ T6656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.510982][ T805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.565874][ T1397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.582028][ T6652] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.19: Unrecognised inode hash code 4 [ 168.582055][ T6652] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.19: Corrupt directory, running e2fsck is recommended [ 168.582106][ T6652] ================================================================== [ 168.582115][ T6652] BUG: KASA[ 168.582115][ T6652] BUG: KASAN: slab-use-after-free in __ext4_check_dir_entry+0x755/0x8e0 [ 168.582149][ T6652] Read of size 2 at addr ffff888040bcf003 by task syz.3.19/6652 [ 168.582163][ T6652] [ 168.582186][ T6652] CPU: 0 UID: 0 PID: 6652 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.582205][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.582221][ T6652] Call Trace: [ 168.582228][ T6652] [ 168.582235][ T6652] dump_stack_lvl+0xe8/0x150 [ 168.582255][ T6652] print_address_description+0x55/0x1e0 [ 168.582274][ T6652] ? __ext4_check_dir_entry+0x755/0x8e0 [ 168.582293][ T6652] print_report+0x58/0x70 [ 168.582309][ T6652] kasan_report+0x117/0x150 [ 168.582326][ T6652] ? __ext4_check_dir_entry+0x755/0x8e0 [ 168.582349][ T6652] __ext4_check_dir_entry+0x755/0x8e0 [ 168.582373][ T6652] ext4_readdir+0x14c1/0x41b0 [ 168.582393][ T6652] ? __lock_acquire+0x6b5/0x2cf0 [ 168.582425][ T6652] ? __pfx_ext4_readdir+0x10/0x10 [ 168.582448][ T6652] ? iterate_dir+0x29e/0x580 [ 168.582469][ T6652] ? __pfx_down_read_killable+0x10/0x10 [ 168.582489][ T6652] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 168.582507][ T6652] ? lockdep_hardirqs_on+0x7a/0x110 [ 168.582523][ T6652] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 168.582542][ T6652] iterate_dir+0x3a5/0x580 [ 168.582562][ T6652] __se_sys_getdents64+0xf1/0x280 [ 168.582583][ T6652] ? __pfx___se_sys_getdents64+0x10/0x10 [ 168.582601][ T6652] ? __pfx_filldir64+0x10/0x10 [ 168.582621][ T6652] ? rcu_is_watching+0x15/0xb0 [ 168.582646][ T6652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.582662][ T6652] do_syscall_64+0x15f/0xf80 [ 168.582679][ T6652] ? trace_irq_disable+0x3b/0x140 [ 168.582698][ T6652] ? clear_bhb_loop+0x40/0x90 [ 168.582715][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.582732][ T6652] RIP: 0033:0x7f7ca6eb9079 [ 168.582750][ T6652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.582764][ T6652] RSP: 002b:00007f7ca611e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 168.582782][ T6652] RAX: ffffffffffffffda RBX: 00007f7ca70e5fa0 RCX: 00007f7ca6eb9079 [ 168.582794][ T6652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 168.582812][ T6652] RBP: 00007f7ca6f4ba4c R08: 0000000000000000 R09: 0000000000000000 [ 168.582823][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.582833][ T6652] R13: 0000000000000000 R14: 00007f7ca70e5fa0 R15: 00007fffadd1df18 [ 168.582851][ T6652] [ 168.582857][ T6652] [ 168.582864][ T6652] Allocated by task 6310: [ 168.582872][ T6652] kasan_save_track+0x3e/0x80 [ 168.582887][ T6652] __kasan_slab_alloc+0x6c/0x80 [ 168.582901][ T6652] kmem_cache_alloc_noprof+0x33b/0x680 [ 168.582916][ T6652] anon_vma_clone+0x3e5/0x9f0 [ 168.582931][ T6652] anon_vma_fork+0x16a/0x570 [ 168.582945][ T6652] dup_mmap+0x997/0x1d50 [ 168.582961][ T6652] copy_mm+0x13b/0x4a0 [ 168.582976][ T6652] copy_process+0x1f24/0x4450 [ 168.582991][ T6652] kernel_clone+0x283/0x870 [ 168.583006][ T6652] __x64_sys_clone+0x1b6/0x230 [ 168.583022][ T6652] do_syscall_64+0x15f/0xf80 [ 168.583037][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.583051][ T6652] [ 168.583055][ T6652] Freed by task 6316: [ 168.583062][ T6652] kasan_save_track+0x3e/0x80 [ 168.583076][ T6652] kasan_save_free_info+0x46/0x50 [ 168.583095][ T6652] __kasan_slab_free+0x5c/0x80 [ 168.583109][ T6652] kmem_cache_free+0x187/0x6c0 [ 168.583125][ T6652] unlink_anon_vmas+0x368/0x730 [ 168.583144][ T6652] free_pgtables+0x836/0xb70 [ 168.583162][ T6652] exit_mmap+0x490/0x9e0 [ 168.583176][ T6652] __mmput+0xcb/0x3d0 [ 168.583189][ T6652] exit_mm+0x18e/0x250 [ 168.583214][ T6652] do_exit+0x6a2/0x22c0 [ 168.583231][ T6652] do_group_exit+0x21b/0x2d0 [ 168.583249][ T6652] __x64_sys_exit_group+0x3f/0x40 [ 168.583267][ T6652] x64_sys_call+0x221a/0x2240 [ 168.583284][ T6652] do_syscall_64+0x15f/0xf80 [ 168.583299][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.583314][ T6652] [ 168.583317][ T6652] The buggy address belongs to the object at ffff888040bcf000 [ 168.583317][ T6652] which belongs to the cache anon_vma_chain of size 80 [ 168.583331][ T6652] The buggy address is located 3 bytes inside of [ 168.583331][ T6652] freed 80-byte region [ffff888040bcf000, ffff888040bcf050) [ 168.583348][ T6652] [ 168.583352][ T6652] The buggy address belongs to the physical page: [ 168.583368][ T6652] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40bcf [ 168.583382][ T6652] memcg:ffff88803aedd001 [ 168.583389][ T6652] flags: 0x80000000000000(node=0|zone=1) [ 168.583404][ T6652] page_type: f5(slab) [ 168.583419][ T6652] raw: 0080000000000000 ffff88801b6e3280 dead000000000100 dead000000000122 [ 168.583433][ T6652] raw: 0000000000000000 0000000800240024 00000000f5000000 ffff88803aedd001 [ 168.583441][ T6652] page dumped because: kasan: bad access detected [ 168.583456][ T6652] page_owner tracks the page as allocated [ 168.583461][ T6652] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6315, tgid 6315 (sed), ts 156710653383, free_ts 138661297381 [ 168.583489][ T6652] post_alloc_hook+0x231/0x280 [ 168.583504][ T6652] get_page_from_freelist+0x27c8/0x2840 [ 168.583523][ T6652] __alloc_frozen_pages_noprof+0x18d/0x380 [ 168.583541][ T6652] allocate_slab+0x77/0x660 [ 168.583560][ T6652] refill_objects+0x33c/0x3d0 [ 168.583577][ T6652] __pcs_replace_empty_main+0x373/0x720 [ 168.583596][ T6652] kmem_cache_alloc_noprof+0x433/0x680 [ 168.583611][ T6652] __anon_vma_prepare+0xcb/0x4a0 [ 168.583626][ T6652] do_pte_missing+0x1e57/0x2950 [ 168.583643][ T6652] handle_mm_fault+0xd0a/0x13c0 [ 168.583658][ T6652] do_user_addr_fault+0xa73/0x1340 [ 168.583674][ T6652] exc_page_fault+0x6a/0xc0 [ 168.583688][ T6652] asm_exc_page_fault+0x26/0x30 [ 168.583701][ T6652] page last free pid 805 tgid 805 stack trace: [ 168.583711][ T6652] __free_frozen_pages+0xfa6/0x10f0 [ 168.583726][ T6652] __slab_free+0x252/0x2a0 [ 168.583741][ T6652] qlist_free_all+0x99/0x100 [ 168.583754][ T6652] kasan_quarantine_reduce+0x148/0x160 [ 168.583768][ T6652] __kasan_slab_alloc+0x22/0x80 [ 168.583782][ T6652] __kmalloc_cache_noprof+0x338/0x690 [ 168.583805][ T6652] gro_cells_destroy+0x35a/0x440 [ 168.583819][ T6652] ip_tunnel_dev_free+0x19/0x30 [ 168.583836][ T6652] netdev_run_todo+0xc1f/0xde0 [ 168.583855][ T6652] ops_undo_list+0x3d8/0x940 [ 168.583870][ T6652] cleanup_net+0x56e/0x800 [ 168.583884][ T6652] process_scheduled_works+0xb5d/0x1860 [ 168.583899][ T6652] worker_thread+0xa53/0xfc0 [ 168.583914][ T6652] kthread+0x388/0x470 [ 168.583931][ T6652] ret_from_fork+0x514/0xb70 [ 168.583946][ T6652] ret_from_fork_asm+0x1a/0x30 [ 168.583964][ T6652] [ 168.583968][ T6652] Memory state around the buggy address: [ 168.583977][ T6652] ffff888040bcef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 168.583987][ T6652] ffff888040bcef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 168.583997][ T6652] >ffff888040bcf000: fa fb fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 168.584005][ T6652] ^ [ 168.584012][ T6652] ffff888040bcf080: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 168.584023][ T6652] ffff888040bcf100: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb [ 168.584031][ T6652] ================================================================== [ 168.603113][ T1397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.619147][ T6652] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 168.619165][ T6652] CPU: 0 UID: 0 PID: 6652 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.619184][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.619194][ T6652] Call Trace: [ 168.619201][ T6652] [ 168.619207][ T6652] vpanic+0x56c/0xa60 [ 168.619234][ T6652] ? __pfx_vpanic+0x10/0x10 [ 168.619253][ T6652] ? __pfx___schedule+0x10/0x10 [ 168.619271][ T6652] panic+0xc5/0xd0 [ 168.619289][ T6652] ? __pfx_panic+0x10/0x10 [ 168.619308][ T6652] ? preempt_schedule_common+0x82/0xd0 [ 168.619327][ T6652] ? __ext4_check_dir_entry+0x755/0x8e0 [ 168.619349][ T6652] check_panic_on_warn+0x89/0xb0 [ 168.619371][ T6652] ? __ext4_check_dir_entry+0x755/0x8e0 [ 168.619390][ T6652] end_report+0x73/0x170 [ 168.619408][ T6652] ? __ext4_check_dir_entry+0x755/0x8e0 [ 168.619427][ T6652] kasan_report+0x128/0x150 [ 168.619446][ T6652] ? __ext4_check_dir_entry+0x755/0x8e0 [ 168.619468][ T6652] __ext4_check_dir_entry+0x755/0x8e0 [ 168.619492][ T6652] ext4_readdir+0x14c1/0x41b0 [ 168.619512][ T6652] ? __lock_acquire+0x6b5/0x2cf0 [ 168.619544][ T6652] ? __pfx_ext4_readdir+0x10/0x10 [ 168.619568][ T6652] ? iterate_dir+0x29e/0x580 [ 168.619588][ T6652] ? __pfx_down_read_killable+0x10/0x10 [ 168.619607][ T6652] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 168.619624][ T6652] ? lockdep_hardirqs_on+0x7a/0x110 [ 168.619642][ T6652] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 168.619660][ T6652] iterate_dir+0x3a5/0x580 [ 168.619692][ T6652] __se_sys_getdents64+0xf1/0x280 [ 168.619713][ T6652] ? __pfx___se_sys_getdents64+0x10/0x10 [ 168.619732][ T6652] ? __pfx_filldir64+0x10/0x10 [ 168.619751][ T6652] ? rcu_is_watching+0x15/0xb0 [ 168.619776][ T6652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.619800][ T6652] do_syscall_64+0x15f/0xf80 [ 168.619817][ T6652] ? trace_irq_disable+0x3b/0x140 [ 168.619836][ T6652] ? clear_bhb_loop+0x40/0x90 [ 168.619854][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.619870][ T6652] RIP: 0033:0x7f7ca6eb9079 [ 168.619887][ T6652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.619900][ T6652] RSP: 002b:00007f7ca611e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 168.619919][ T6652] RAX: ffffffffffffffda RBX: 00007f7ca70e5fa0 RCX: 00007f7ca6eb9079 [ 168.619931][ T6652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 168.619941][ T6652] RBP: 00007f7ca6f4ba4c R08: 0000000000000000 R09: 0000000000000000 [ 168.619952][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.619965][ T6652] R13: 0000000000000000 R14: 00007f7ca70e5fa0 R15: 00007fffadd1df18 [ 168.619984][ T6652] [ 168.620441][ T6652] Kernel Offset: disabled