Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. 2026/08/07 23:21:42 parsed 1 programs 2026/08/07 23:21:42 serving rpc on tcp://41407 [ 73.678645][ T4197] cgroup: Unknown subsys name 'net' [ 73.810749][ T4197] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.318122][ T4197] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.584722][ T4247] chnl_net:caif_netlink_parms(): no params data found [ 78.649642][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.657600][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.666025][ T4247] device bridge_slave_0 entered promiscuous mode [ 78.676473][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.683701][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.691625][ T4247] device bridge_slave_1 entered promiscuous mode [ 78.716145][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.728147][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.755216][ T4247] team0: Port device team_slave_0 added [ 78.764328][ T4247] team0: Port device team_slave_1 added [ 78.787547][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.794763][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.820955][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.834553][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.841547][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.867603][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.908165][ T4247] device hsr_slave_0 entered promiscuous mode [ 78.915801][ T4247] device hsr_slave_1 entered promiscuous mode [ 79.082814][ T4247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.110693][ T4247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.131157][ T4247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.156716][ T4247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.189230][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.196541][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.205107][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.212216][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.260512][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.273296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.283727][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.292330][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.301822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 79.332820][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.347347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.356098][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.363205][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.375204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.384617][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.391799][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.429180][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.438497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.451580][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.480430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.492041][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.505163][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.638716][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.647520][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.680588][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.699375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.709170][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.746030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.755655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.764691][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.772592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.785610][ T4247] device veth0_vlan entered promiscuous mode [ 79.808004][ T4247] device veth1_vlan entered promiscuous mode [ 79.832687][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.841580][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.850284][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.859677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.873075][ T4247] device veth0_macvtap entered promiscuous mode [ 79.896501][ T4247] device veth1_macvtap entered promiscuous mode [ 79.915474][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.924899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.934204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.942212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.952843][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.981275][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.991887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.004203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.015562][ T4247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.026391][ T4247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.036191][ T4247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.045354][ T4247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.170559][ T4247] syz-executor (4247) used greatest stack depth: 20464 bytes left [ 80.411192][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.426252][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.442056][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.472014][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.480052][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.490126][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/08/07 23:21:52 executed programs: 0 [ 81.742260][ T4299] chnl_net:caif_netlink_parms(): no params data found [ 81.784748][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.823839][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.830967][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.839456][ T4299] device bridge_slave_0 entered promiscuous mode [ 81.848125][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.855727][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.864106][ T4299] device bridge_slave_1 entered promiscuous mode [ 81.886214][ T4299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.898523][ T4299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.921925][ T4299] team0: Port device team_slave_0 added [ 81.931339][ T4299] team0: Port device team_slave_1 added [ 81.951185][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.958260][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.984929][ T4299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.997534][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.004965][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.032776][ T4299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.065174][ T4299] device hsr_slave_0 entered promiscuous mode [ 82.073096][ T4299] device hsr_slave_1 entered promiscuous mode [ 82.080214][ T4299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.088330][ T4299] Cannot create hsr debugfs directory [ 83.634485][ T4199] Bluetooth: hci0: command 0x0409 tx timeout [ 85.071428][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.231128][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.273762][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.704382][ T4317] Bluetooth: hci0: command 0x041b tx timeout [ 86.201623][ T4299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.213408][ T4299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.223257][ T4299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.235138][ T4299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.295831][ T4299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.325330][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.333308][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.345039][ T4299] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.356461][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.367646][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.376464][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.383597][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.392452][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.424839][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.433708][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.442188][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.449325][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.461134][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.476133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.512106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.522828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.532640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.543351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.552849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.565330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.574795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.586533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.595154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.609675][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.737203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.745651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.775768][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.795950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.804987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.828023][ T7] cfg80211: failed to load regulatory.db [ 86.850706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.874275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.889942][ T4299] device veth0_vlan entered promiscuous mode [ 86.915909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.924362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.936597][ T4299] device veth1_vlan entered promiscuous mode [ 86.993185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.002797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.016019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.028100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.043255][ T9] device hsr_slave_0 left promiscuous mode [ 87.054187][ T9] device hsr_slave_1 left promiscuous mode [ 87.061074][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.072349][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.082857][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.093743][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.102294][ T9] device bridge_slave_1 left promiscuous mode [ 87.111136][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.133780][ T9] device bridge_slave_0 left promiscuous mode [ 87.140121][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.171527][ T9] device veth1_macvtap left promiscuous mode [ 87.178761][ T9] device veth0_macvtap left promiscuous mode [ 87.188202][ T9] device veth1_vlan left promiscuous mode [ 87.194779][ T9] device veth0_vlan left promiscuous mode [ 87.507514][ T9] team0 (unregistering): Port device team_slave_1 removed [ 87.521794][ T9] team0 (unregistering): Port device team_slave_0 removed [ 87.537050][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.551798][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.613313][ T9] bond0 (unregistering): Released all slaves [ 87.680150][ T4299] device veth0_macvtap entered promiscuous mode [ 87.688619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.707993][ T4299] device veth1_macvtap entered promiscuous mode [ 87.732604][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.742763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.754590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.772593][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.780671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.790767][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 87.797274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.810570][ T4299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.819938][ T4299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.829675][ T4299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.838860][ T4299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.911322][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.922514][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.938304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/08/07 23:21:58 executed programs: 2 [ 87.971867][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.980496][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.989250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.046144][ T4355] CIFS: Attempting to mount \\127.0.0.1\share [ 88.105012][ T4356] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 88.138294][ T4355] CIFS: VFS: cifs_mount failed w/return code = -112 [ 88.216618][ T4363] CIFS: Attempting to mount \\127.0.0.1\share [ 88.269998][ T4364] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 88.296099][ T4363] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 88.305168][ T4363] CIFS: VFS: cifs_mount failed w/return code = -11 [ 88.356681][ T4367] CIFS: Attempting to mount \\127.0.0.1\share [ 88.407918][ T4368] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 88.424985][ T4367] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 88.432439][ T4367] CIFS: VFS: cifs_mount failed w/return code = -11 [ 88.497348][ T4371] CIFS: Attempting to mount \\127.0.0.1\share [ 88.549085][ T4372] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 88.558852][ T4371] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 88.587740][ T4371] CIFS: VFS: cifs_mount failed w/return code = -11 [ 88.665151][ T4375] CIFS: Attempting to mount \\127.0.0.1\share [ 88.716928][ T4376] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 88.726182][ T4375] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 88.734058][ T4375] CIFS: VFS: cifs_mount failed w/return code = -11 [ 88.765750][ T4379] CIFS: Attempting to mount \\127.0.0.1\share [ 88.816891][ T4380] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 88.826583][ T4379] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 88.837462][ T4379] CIFS: VFS: cifs_mount failed w/return code = -11 [ 88.887325][ T4383] CIFS: Attempting to mount \\127.0.0.1\share [ 88.938979][ T4384] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 88.953898][ T4383] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 88.961179][ T4383] CIFS: VFS: cifs_mount failed w/return code = -11 [ 89.026558][ T4387] CIFS: Attempting to mount \\127.0.0.1\share [ 89.077900][ T4388] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 89.093878][ T4387] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 89.101190][ T4387] CIFS: VFS: cifs_mount failed w/return code = -11 [ 89.141814][ T4391] CIFS: Attempting to mount \\127.0.0.1\share [ 89.192761][ T4392] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 89.213875][ T4391] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 89.221319][ T4391] CIFS: VFS: cifs_mount failed w/return code = -11 [ 89.287385][ T4395] CIFS: Attempting to mount \\127.0.0.1\share [ 89.341821][ T4396] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 89.349735][ T4395] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 89.373946][ T4395] CIFS: VFS: cifs_mount failed w/return code = -11 [ 89.466760][ T4400] ================================================================== [ 89.475096][ T4400] BUG: KASAN: use-after-free in string+0x204/0x290 [ 89.481660][ T4400] Read of size 1 at addr ffff888071136260 by task cifsd/4400 [ 89.489108][ T4400] [ 89.491596][ T4400] CPU: 0 PID: 4400 Comm: cifsd Not tainted syzkaller #0 [ 89.498764][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.509121][ T4400] Call Trace: [ 89.512651][ T4400] [ 89.515619][ T4400] dump_stack_lvl+0x188/0x250 [ 89.520348][ T4400] ? show_regs_print_info+0x20/0x20 [ 89.525584][ T4400] ? _printk+0xda/0x130 [ 89.529792][ T4400] ? load_image+0x410/0x410 [ 89.534576][ T4400] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 89.540185][ T4400] print_address_description+0x60/0x2d0 [ 89.545771][ T4400] ? string+0x204/0x290 [ 89.549978][ T4400] kasan_report+0xdf/0x130 [ 89.554609][ T4400] ? string+0x204/0x290 [ 89.559025][ T4400] string+0x204/0x290 [ 89.563571][ T4400] vsnprintf+0x10db/0x1c20 [ 89.568127][ T4400] scnprintf+0xe5/0x180 [ 89.572325][ T4400] ? ret_from_fork+0x1f/0x30 [ 89.576958][ T4400] ? snprintf+0x140/0x140 [ 89.581516][ T4400] reconn_set_ipaddr_from_hostname+0x112/0x580 [ 89.587814][ T4400] ? cifs_mark_tcp_ses_conns_for_reconnect+0x13a0/0x13a0 [ 89.595073][ T4400] ? cifs_tree_connect+0x4f0/0x4f0 [ 89.600312][ T4400] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 89.606224][ T4400] ? do_raw_spin_unlock+0x11d/0x230 [ 89.611637][ T4400] cifs_reconnect+0x470/0x1350 [ 89.616447][ T4400] ? cifs_mount_params_proc_show+0x1a0/0x1a0 [ 89.622453][ T4400] cifs_demultiplex_thread+0x1eca/0x35b0 [ 89.628571][ T4400] ? cifs_resolve_server+0x110/0x110 [ 89.634367][ T4400] ? finish_lock_switch+0x12d/0x290 [ 89.639781][ T4400] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.645989][ T4400] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 89.652183][ T4400] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 89.658212][ T4400] ? _raw_spin_unlock+0x40/0x40 [ 89.663079][ T4400] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 89.668988][ T4400] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 89.674991][ T4400] ? __kthread_parkme+0x14e/0x1b0 [ 89.680487][ T4400] kthread+0x42e/0x520 [ 89.684735][ T4400] ? cifs_resolve_server+0x110/0x110 [ 89.690116][ T4400] ? kthread_blkcg+0xd0/0xd0 [ 89.694713][ T4400] ret_from_fork+0x1f/0x30 [ 89.699140][ T4400] [ 89.702258][ T4400] [ 89.704587][ T4400] Allocated by task 4399: [ 89.708925][ T4400] __kasan_kmalloc+0xaf/0xe0 [ 89.713728][ T4400] kstrdup+0x32/0x70 [ 89.717636][ T4400] cifs_get_tcp_session+0xde/0x18f0 [ 89.722856][ T4400] mount_get_conns+0xc3/0xe00 [ 89.727578][ T4400] cifs_mount+0x162/0x1380 [ 89.732032][ T4400] cifs_smb3_do_mount+0x366/0x760 [ 89.737089][ T4400] smb3_get_tree+0x59a/0xa80 [ 89.741679][ T4400] vfs_get_tree+0x88/0x270 [ 89.746378][ T4400] do_new_mount+0x247/0xa40 [ 89.751056][ T4400] __se_sys_mount+0x2e3/0x3d0 [ 89.756061][ T4400] do_syscall_64+0x4c/0xa0 [ 89.760679][ T4400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.766855][ T4400] [ 89.769268][ T4400] Freed by task 4399: [ 89.773267][ T4400] kasan_set_track+0x4b/0x70 [ 89.778028][ T4400] kasan_set_free_info+0x1f/0x40 [ 89.783018][ T4400] ____kasan_slab_free+0xd5/0x110 [ 89.788089][ T4400] slab_free_freelist_hook+0xec/0x170 [ 89.793614][ T4400] kfree+0xef/0x2a0 [ 89.797653][ T4400] cifs_put_tcp_session+0x2e1/0x3d0 [ 89.803025][ T4400] mount_put_conns+0xb0/0x270 [ 89.807732][ T4400] cifs_mount+0xbf5/0x1380 [ 89.812820][ T4400] cifs_smb3_do_mount+0x366/0x760 [ 89.817973][ T4400] smb3_get_tree+0x59a/0xa80 [ 89.822683][ T4400] vfs_get_tree+0x88/0x270 [ 89.827127][ T4400] do_new_mount+0x247/0xa40 [ 89.831702][ T4400] __se_sys_mount+0x2e3/0x3d0 [ 89.836401][ T4400] do_syscall_64+0x4c/0xa0 [ 89.840836][ T4400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.846749][ T4400] [ 89.849098][ T4400] The buggy address belongs to the object at ffff888071136260 [ 89.849098][ T4400] which belongs to the cache kmalloc-16 of size 16 [ 89.863134][ T4400] The buggy address is located 0 bytes inside of [ 89.863134][ T4400] 16-byte region [ffff888071136260, ffff888071136270) [ 89.876501][ T4400] The buggy address belongs to the page: [ 89.882172][ T4400] page:ffffea0001c44d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x71136 [ 89.892463][ T4400] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 89.900214][ T4400] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016c413c0 [ 89.909136][ T4400] raw: 0000000000000000 0000000080800080 00000001ffffffff 0000000000000000 [ 89.917830][ T4400] page dumped because: kasan: bad access detected [ 89.924873][ T4400] page_owner tracks the page as allocated [ 89.930882][ T4400] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4299, ts 89404424684, free_ts 89397043492 [ 89.947233][ T4400] get_page_from_freelist+0x24f6/0x2670 [ 89.952808][ T4400] __alloc_pages+0x1ee/0x480 [ 89.957544][ T4400] new_slab+0xb6/0x4b0 [ 89.961637][ T4400] ___slab_alloc+0x807/0xdd0 [ 89.966245][ T4400] __kmalloc_node+0x142/0x3a0 [ 89.970955][ T4400] kvmalloc_node+0x84/0x130 [ 89.975559][ T4400] xt_replace_table+0x160/0x750 [ 89.980536][ T4400] __do_replace+0x16f/0xa00 [ 89.985088][ T4400] do_ip6t_set_ctl+0xaa4/0xd90 [ 89.989867][ T4400] nf_setsockopt+0x25f/0x280 [ 89.994559][ T4400] ipv6_setsockopt+0x20ba/0x3cc0 [ 89.999515][ T4400] tcp_setsockopt+0x229/0x1e60 [ 90.004296][ T4400] __sys_setsockopt+0x2bf/0x3d0 [ 90.009172][ T4400] __x64_sys_setsockopt+0xb1/0xc0 [ 90.014333][ T4400] do_syscall_64+0x4c/0xa0 [ 90.018774][ T4400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.024737][ T4400] page last free stack trace: [ 90.029520][ T4400] free_unref_page_prepare+0x637/0x6c0 [ 90.035009][ T4400] free_unref_page+0x8f/0x2a0 [ 90.039719][ T4400] __vunmap+0x8e0/0xa80 [ 90.043881][ T4400] free_work+0x56/0x80 [ 90.048153][ T4400] process_one_work+0x867/0xff0 [ 90.053756][ T4400] worker_thread+0xad7/0x12a0 [ 90.058475][ T4400] kthread+0x42e/0x520 [ 90.062687][ T4400] ret_from_fork+0x1f/0x30 [ 90.067156][ T4400] [ 90.069513][ T4400] Memory state around the buggy address: [ 90.075170][ T4400] ffff888071136100: 00 00 fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 90.083565][ T4400] ffff888071136180: 00 00 fc fc fa fb fc fc 00 06 fc fc 00 00 fc fc [ 90.091936][ T4400] >ffff888071136200: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 90.100330][ T4400] ^ [ 90.107546][ T4400] ffff888071136280: 00 00 fc fc 00 00 fc fc fc fc fc fc fc fc fc fc [ 90.116071][ T4400] ffff888071136300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.124156][ T4400] ================================================================== [ 90.132248][ T4400] Disabling lock debugging due to kernel taint [ 90.139234][ T4400] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.146568][ T4400] CPU: 1 PID: 4400 Comm: cifsd Tainted: G B syzkaller #0 [ 90.154935][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.158062][ T4317] Bluetooth: hci0: command 0x0419 tx timeout [ 90.165115][ T4400] Call Trace: [ 90.165125][ T4400] [ 90.165133][ T4400] dump_stack_lvl+0x188/0x250 [ 90.165166][ T4400] ? show_regs_print_info+0x20/0x20 [ 90.165192][ T4400] ? load_image+0x410/0x410 [ 90.192972][ T4400] panic+0x2f8/0x850 [ 90.197006][ T4400] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 90.203595][ T4400] ? bpf_jit_dump+0xd0/0xd0 [ 90.208447][ T4400] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 90.214620][ T4400] ? _raw_spin_unlock+0x40/0x40 [ 90.219522][ T4400] ? string+0x204/0x290 [ 90.223698][ T4400] check_panic_on_warn+0x80/0xa0 [ 90.228776][ T4400] ? string+0x204/0x290 [ 90.233177][ T4400] end_report+0x6d/0xf0 [ 90.237378][ T4400] kasan_report+0x102/0x130 [ 90.241923][ T4400] ? string+0x204/0x290 [ 90.246298][ T4400] string+0x204/0x290 [ 90.250341][ T4400] vsnprintf+0x10db/0x1c20 [ 90.254805][ T4400] scnprintf+0xe5/0x180 [ 90.259001][ T4400] ? ret_from_fork+0x1f/0x30 [ 90.263643][ T4400] ? snprintf+0x140/0x140 [ 90.268018][ T4400] reconn_set_ipaddr_from_hostname+0x112/0x580 [ 90.274222][ T4400] ? cifs_mark_tcp_ses_conns_for_reconnect+0x13a0/0x13a0 [ 90.281299][ T4400] ? cifs_tree_connect+0x4f0/0x4f0 [ 90.286453][ T4400] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 90.292393][ T4400] ? do_raw_spin_unlock+0x11d/0x230 [ 90.297639][ T4400] cifs_reconnect+0x470/0x1350 [ 90.302450][ T4400] ? cifs_mount_params_proc_show+0x1a0/0x1a0 [ 90.308625][ T4400] cifs_demultiplex_thread+0x1eca/0x35b0 [ 90.314373][ T4400] ? cifs_resolve_server+0x110/0x110 [ 90.319752][ T4400] ? finish_lock_switch+0x12d/0x290 [ 90.325447][ T4400] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.331545][ T4400] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 90.337477][ T4400] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.343520][ T4400] ? _raw_spin_unlock+0x40/0x40 [ 90.348403][ T4400] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 90.354348][ T4400] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.360407][ T4400] ? __kthread_parkme+0x14e/0x1b0 [ 90.365446][ T4400] kthread+0x42e/0x520 [ 90.369616][ T4400] ? cifs_resolve_server+0x110/0x110 [ 90.375124][ T4400] ? kthread_blkcg+0xd0/0xd0 [ 90.379739][ T4400] ret_from_fork+0x1f/0x30 [ 90.384284][ T4400] [ 90.387583][ T4400] Kernel Offset: disabled [ 90.391956][ T4400] Rebooting in 86400 seconds..