[ 91.918773][ T43] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts.
2026/08/17 04:17:36 parsed 1 programs
2026/08/17 04:17:36 serving rpc on tcp://41789
[ 98.928496][ T5598] cgroup: Unknown subsys name 'net'
[ 99.169646][ T5598] cgroup: Unknown subsys name 'cpuset'
[ 99.244350][ T5598] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 101.106286][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 107.455039][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.455174][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.455357][ T5615] bridge_slave_0: entered allmulticast mode
[ 107.458670][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.458685][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.507316][ T5668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 107.528144][ T5668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 107.533195][ T5668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 107.542393][ T5668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 107.547199][ T5668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 107.585892][ T5615] bridge_slave_0: entered promiscuous mode
[ 107.661548][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.661676][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.661864][ T5615] bridge_slave_1: entered allmulticast mode
[ 107.687870][ T5615] bridge_slave_1: entered promiscuous mode
[ 107.953471][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 108.119626][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 108.178532][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.178552][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.366867][ T5615] team0: Port device team_slave_0 added
[ 108.415536][ T5615] team0: Port device team_slave_1 added
[ 108.645685][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 108.645703][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 108.645731][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 108.760472][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 108.760486][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 108.760507][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.172980][ T5615] hsr_slave_0: entered promiscuous mode
[ 109.180204][ T5615] hsr_slave_1: entered promiscuous mode
[ 110.600139][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 110.671447][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 110.686840][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 110.721108][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 110.731741][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 110.806510][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 110.807532][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 110.862248][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 111.315746][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[ 111.603322][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[ 111.645972][ T1519] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.646134][ T1519] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 111.786690][ T68] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.790014][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 112.496267][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 112.756659][ T5615] veth0_vlan: entered promiscuous mode
[ 112.779402][ T5615] veth1_vlan: entered promiscuous mode
[ 112.898173][ T5615] veth0_macvtap: entered promiscuous mode
[ 112.912036][ T5615] veth1_macvtap: entered promiscuous mode
[ 113.070082][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.089739][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.541712][ T1023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.573987][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.574184][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.574226][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
2026/08/17 04:17:55 executed programs: 0
[ 114.054759][ T5668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 114.108537][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 114.140997][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 114.167307][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 114.172300][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 114.187427][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 114.205401][ T5735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 114.222159][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 114.244889][ T5735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 114.246435][ T5735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 114.247187][ T5735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 114.295581][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 114.296292][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 114.330234][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 114.357267][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 114.409555][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 114.448483][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 114.449604][ T5735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 114.453409][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 114.522970][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 114.621727][ T5668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 114.644260][ T5668] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 114.669154][ T5668] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 114.671363][ T5668] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 114.673576][ T5668] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 116.170163][ T820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.395753][ T5741] Bluetooth: hci2: command tx timeout
[ 116.554059][ T5741] Bluetooth: hci1: command tx timeout
[ 116.597179][ T820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.795190][ T5741] Bluetooth: hci3: command tx timeout
[ 116.874046][ T5741] Bluetooth: hci4: command tx timeout
[ 116.876207][ T5741] Bluetooth: hci0: command tx timeout
[ 116.880510][ T820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.207816][ T820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.404792][ T820] bridge_slave_1: left allmulticast mode
[ 118.404954][ T820] bridge_slave_1: left promiscuous mode
[ 118.411524][ T820] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.476569][ T5741] Bluetooth: hci2: command tx timeout
[ 118.535160][ T820] bridge_slave_0: left allmulticast mode
[ 118.535189][ T820] bridge_slave_0: left promiscuous mode
[ 118.535433][ T820] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.633903][ T5741] Bluetooth: hci1: command tx timeout
[ 118.873905][ T5741] Bluetooth: hci3: command tx timeout
[ 118.953891][ T5741] Bluetooth: hci0: command tx timeout
[ 118.964611][ T59] Bluetooth: hci4: command tx timeout
[ 119.355240][ T820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 119.434957][ T820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 119.476358][ T820] bond0 (unregistering): Released all slaves
[ 119.693549][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.693665][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.695746][ T5728] bridge_slave_0: entered allmulticast mode
[ 119.714910][ T5728] bridge_slave_0: entered promiscuous mode
[ 119.779923][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.780068][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.780261][ T5728] bridge_slave_1: entered allmulticast mode
[ 119.783141][ T5728] bridge_slave_1: entered promiscuous mode
[ 119.859109][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.859244][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.859438][ T5730] bridge_slave_0: entered allmulticast mode
[ 119.862330][ T5730] bridge_slave_0: entered promiscuous mode
[ 119.932116][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.932222][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.932334][ T5730] bridge_slave_1: entered allmulticast mode
[ 119.954922][ T5730] bridge_slave_1: entered promiscuous mode
[ 120.048718][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.122866][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.123124][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.123292][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.123404][ T5733] bridge_slave_0: entered allmulticast mode
[ 120.131629][ T5733] bridge_slave_0: entered promiscuous mode
[ 120.172387][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.172533][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.172719][ T5729] bridge_slave_0: entered allmulticast mode
[ 120.202769][ T5729] bridge_slave_0: entered promiscuous mode
[ 120.221581][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.221679][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.221817][ T5737] bridge_slave_0: entered allmulticast mode
[ 120.223597][ T5737] bridge_slave_0: entered promiscuous mode
[ 120.255690][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.285122][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.285247][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.285600][ T5733] bridge_slave_1: entered allmulticast mode
[ 120.287356][ T5733] bridge_slave_1: entered promiscuous mode
[ 120.288382][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.288484][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.288588][ T5729] bridge_slave_1: entered allmulticast mode
[ 120.290208][ T5729] bridge_slave_1: entered promiscuous mode
[ 120.291198][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.291306][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.291466][ T5737] bridge_slave_1: entered allmulticast mode
[ 120.311700][ T5737] bridge_slave_1: entered promiscuous mode
[ 120.350292][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.456279][ T5728] team0: Port device team_slave_0 added
[ 120.522820][ T5728] team0: Port device team_slave_1 added
[ 120.536751][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.543571][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.553943][ T5741] Bluetooth: hci2: command tx timeout
[ 120.571264][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.586158][ T5730] team0: Port device team_slave_0 added
[ 120.620870][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.637018][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.640299][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.643146][ T5730] team0: Port device team_slave_1 added
[ 120.713846][ T5741] Bluetooth: hci1: command tx timeout
[ 120.777679][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 120.777697][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.777721][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 120.953917][ T5741] Bluetooth: hci3: command tx timeout
[ 121.033947][ T59] Bluetooth: hci4: command tx timeout
[ 121.034057][ T5741] Bluetooth: hci0: command tx timeout
[ 121.323407][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 121.323424][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.323448][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 121.341602][ T5733] team0: Port device team_slave_0 added
[ 121.376607][ T5242] 8021q: adding VLAN 0 to HW filter on device eth1
[ 121.379477][ T5729] team0: Port device team_slave_0 added
[ 121.381542][ T5737] team0: Port device team_slave_0 added
[ 121.382356][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 121.382369][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.382393][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 121.456995][ T5733] team0: Port device team_slave_1 added
[ 121.459288][ T5729] team0: Port device team_slave_1 added
[ 121.461235][ T5737] team0: Port device team_slave_1 added
[ 121.461930][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 121.461939][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.461955][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 121.674272][ T820] hsr_slave_0: left promiscuous mode
[ 121.694122][ T820] hsr_slave_1: left promiscuous mode
[ 121.695012][ T820] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 121.695068][ T820] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 121.736825][ T820] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 121.736857][ T820] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 121.797188][ T820] veth1_macvtap: left promiscuous mode
[ 121.797403][ T820] veth0_macvtap: left promiscuous mode
[ 121.797596][ T820] veth1_vlan: left promiscuous mode
[ 121.797794][ T820] veth0_vlan: left promiscuous mode
[ 122.496137][ T820] team0 (unregistering): Port device team_slave_1 removed
[ 122.554987][ T820] team0 (unregistering): Port device team_slave_0 removed
[ 122.633849][ T5741] Bluetooth: hci2: command tx timeout
[ 122.793850][ T5741] Bluetooth: hci1: command tx timeout
[ 122.936466][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 122.936483][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 122.936502][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 122.937823][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 122.937837][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 122.937895][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 122.940566][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 122.940576][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 122.940592][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 123.043810][ T5741] Bluetooth: hci3: command tx timeout
[ 123.088553][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 123.088568][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.088592][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 123.090158][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 123.090171][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.090196][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 123.091468][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 123.091486][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.091504][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 123.113955][ T59] Bluetooth: hci4: command tx timeout
[ 123.114002][ T5741] Bluetooth: hci0: command tx timeout
[ 123.118887][ T5728] hsr_slave_0: entered promiscuous mode
[ 123.122369][ T5728] hsr_slave_1: entered promiscuous mode
[ 123.329023][ T5730] hsr_slave_0: entered promiscuous mode
[ 123.329994][ T5730] hsr_slave_1: entered promiscuous mode
[ 123.330725][ T5730] debugfs: 'hsr0' already exists in 'hsr'
[ 123.330802][ T5730] Cannot create hsr debugfs directory
[ 123.529156][ T5733] hsr_slave_0: entered promiscuous mode
[ 123.530048][ T5733] hsr_slave_1: entered promiscuous mode
[ 123.530675][ T5733] debugfs: 'hsr0' already exists in 'hsr'
[ 123.530692][ T5733] Cannot create hsr debugfs directory
[ 123.557296][ T5729] hsr_slave_0: entered promiscuous mode
[ 123.558403][ T5729] hsr_slave_1: entered promiscuous mode
[ 123.559254][ T5729] debugfs: 'hsr0' already exists in 'hsr'
[ 123.559273][ T5729] Cannot create hsr debugfs directory
[ 123.591670][ T5737] hsr_slave_0: entered promiscuous mode
[ 123.592594][ T5737] hsr_slave_1: entered promiscuous mode
[ 123.593417][ T5737] debugfs: 'hsr0' already exists in 'hsr'
[ 123.593432][ T5737] Cannot create hsr debugfs directory
[ 124.332439][ T5242] 8021q: adding VLAN 0 to HW filter on device eth2
[ 124.888027][ T5728] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 124.919543][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 124.929404][ T5728] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 124.962694][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 124.972109][ T5728] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 125.024995][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 125.149558][ T5728] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 125.200577][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 125.527737][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0
[ 125.802134][ T5728] 8021q: adding VLAN 0 to HW filter on device team0
[ 125.827460][ T1525] bridge0: port 1(bridge_slave_0) entered blocking state
[ 125.827700][ T1525] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 125.902813][ T1525] bridge0: port 2(bridge_slave_1) entered blocking state
[ 125.903167][ T1525] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 126.742601][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 126.813012][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 126.832742][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 126.890911][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 126.904517][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 126.950763][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 127.008278][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 127.048643][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 127.217715][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.400523][ T5733] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 127.441579][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 127.463253][ T5733] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 127.500383][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 127.517321][ T5733] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 127.558553][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 127.570089][ T5733] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 127.622973][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 127.986508][ T5729] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 128.021475][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 128.044792][ T5729] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 128.087951][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 128.117065][ T5729] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 128.177367][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 128.195661][ T5728] veth0_vlan: entered promiscuous mode
[ 128.262067][ T5729] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 128.289486][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 128.425826][ T5728] veth1_vlan: entered promiscuous mode
[ 128.507311][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0
[ 128.522145][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 128.549402][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 128.557952][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 128.577808][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 128.591056][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 128.617665][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 128.643845][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 128.687777][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 128.747741][ T5730] 8021q: adding VLAN 0 to HW filter on device team0
[ 128.786086][ T820] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.786225][ T820] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 128.832751][ T5728] veth0_macvtap: entered promiscuous mode
[ 128.851190][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.851436][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 128.890317][ T5728] veth1_macvtap: entered promiscuous mode
[ 128.903581][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0
[ 128.998042][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 129.001191][ T5733] 8021q: adding VLAN 0 to HW filter on device team0
[ 129.042866][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 129.067990][ T820] bridge0: port 1(bridge_slave_0) entered blocking state
[ 129.068134][ T820] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 129.111807][ T820] bridge0: port 2(bridge_slave_1) entered blocking state
[ 129.111937][ T820] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 129.148586][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0
[ 129.387577][ T5729] 8021q: adding VLAN 0 to HW filter on device team0
[ 129.608934][ T1519] bridge0: port 1(bridge_slave_0) entered blocking state
[ 129.609123][ T1519] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 129.699583][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[ 129.702594][ T820] bridge0: port 2(bridge_slave_1) entered blocking state
[ 129.702703][ T820] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 129.821260][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 129.821306][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 129.911378][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[ 130.025450][ T820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.025469][ T820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.027102][ T1525] bridge0: port 1(bridge_slave_0) entered blocking state
[ 130.028804][ T1525] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 130.121192][ T5690] bridge0: port 2(bridge_slave_1) entered blocking state
[ 130.121342][ T5690] bridge0: port 2(bridge_slave_1) entered forwarding state
2026/08/17 04:18:12 executed programs: 10
[ 130.351092][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.611472][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 130.948030][ T5730] veth0_vlan: entered promiscuous mode
[ 130.968333][ T1525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.968668][ T1525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 131.094165][ T5730] veth1_vlan: entered promiscuous mode
[ 131.112951][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 131.341007][ T5730] veth0_macvtap: entered promiscuous mode
[ 131.365063][ T10] usb 1-1: Using ep0 maxpacket: 16
[ 131.370990][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1
[ 131.372418][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 131.407945][ T5730] veth1_macvtap: entered promiscuous mode
[ 131.452483][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 131.489737][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 131.489770][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7
[ 131.489797][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024
[ 131.512804][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 131.512868][ T10] usb 1-1: Product: syz
[ 131.512899][ T10] usb 1-1: Manufacturer: syz
[ 131.512930][ T10] usb 1-1: SerialNumber: syz
[ 131.550819][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 131.868597][ T10] usb 1-1: config 0 descriptor??
[ 131.981712][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 132.071246][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0)
[ 132.071285][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 132.384710][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 132.406520][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 132.410447][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[ 132.419454][ T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[ 132.419508][ T10] em28xx 1-1:0.0: No AC97 audio processor
[ 132.419758][ T10] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners.
[ 132.526533][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 132.526967][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[ 132.527683][ T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[ 132.527697][ T10] em28xx 1-1:0.0: No AC97 audio processor
[ 132.662320][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 132.662339][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 132.804606][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 132.804628][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 132.877203][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.877280][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[ 132.949639][ T5729] veth0_vlan: entered promiscuous mode
[ 133.013556][ T5737] veth0_vlan: entered promiscuous mode
[ 133.105599][ T5729] veth1_vlan: entered promiscuous mode
[ 133.111572][ T5733] veth0_vlan: entered promiscuous mode
[ 133.154885][ T5737] veth1_vlan: entered promiscuous mode
[ 133.204825][ T10] usb 1-1: USB disconnect, device number 2
[ 133.261602][ T5733] veth1_vlan: entered promiscuous mode
[ 133.346253][ T10] em28xx 1-1:0.0: Disconnecting em28xx #1
[ 133.346273][ T10] em28xx 1-1:0.0: Disconnecting em28xx
[ 133.428691][ T5729] veth0_macvtap: entered promiscuous mode
[ 133.457348][ T5737] veth0_macvtap: entered promiscuous mode
[ 133.500750][ T5737] veth1_macvtap: entered promiscuous mode
[ 133.502092][ T10] em28xx 1-1:0.0: Freeing device
[ 133.502155][ T10] em28xx 1-1:0.0: Freeing device
[ 133.520821][ T5733] veth0_macvtap: entered promiscuous mode
[ 133.532017][ T5729] veth1_macvtap: entered promiscuous mode
[ 133.566375][ T5733] veth1_macvtap: entered promiscuous mode
[ 133.606069][ T5996] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 133.655678][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 133.688480][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 133.690661][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 133.692387][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 133.761261][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 133.762915][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 133.814775][ T5996] usb 3-1: Using ep0 maxpacket: 16
[ 133.816770][ T5996] usb 3-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1
[ 133.818457][ T5996] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 133.818492][ T5996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7
[ 133.818511][ T5996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024
[ 133.821757][ T5996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 133.821780][ T5996] usb 3-1: Product: syz
[ 133.821799][ T5996] usb 3-1: Manufacturer: syz
[ 133.821809][ T5996] usb 3-1: SerialNumber: syz
[ 133.887421][ T5996] usb 3-1: config 0 descriptor??
[ 133.951316][ T5996] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0)
[ 133.951340][ T5996] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 134.047710][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 134.268136][ T5996] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 134.269463][ T5996] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 134.272298][ T5996] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[ 134.272311][ T5996] em28xx 3-1:0.0: No AC97 audio processor
[ 134.272344][ T5996] ==================================================================
[ 134.272353][ T5996] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x6a/0x130
[ 134.272398][ T5996] Read of size 8 at addr ffff8880474b8290 by task kworker/0:7/5996
[ 134.272412][ T5996]
[ 134.272434][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 134.272457][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 134.272468][ T5996] Workqueue: usb_hub_wq hub_event
[ 134.272500][ T5996] Call Trace:
[ 134.272507][ T5996]
[ 134.272514][ T5996] dump_stack_lvl+0xe8/0x150
[ 134.272540][ T5996] print_address_description+0x55/0x1e0
[ 134.272565][ T5996] ? __list_add_valid_or_report+0x6a/0x130
[ 134.272591][ T5996] print_report+0x58/0x70
[ 134.272616][ T5996] kasan_report+0x117/0x150
[ 134.272637][ T5996] ? __list_add_valid_or_report+0x6a/0x130
[ 134.272665][ T5996] __list_add_valid_or_report+0x6a/0x130
[ 134.272691][ T5996] em28xx_init_extension+0x56/0x1d0
[ 134.272715][ T5996] ? media_device_init+0x2ed/0x530
[ 134.272742][ T5996] em28xx_init_dev+0x9f6/0x2210
[ 134.272767][ T5996] ? _dev_info+0x11e/0x180
[ 134.272793][ T5996] ? __pfx_em28xx_init_dev+0x10/0x10
[ 134.272819][ T5996] ? __pfx__dev_info+0x10/0x10
[ 134.272852][ T5996] em28xx_usb_probe+0x17b2/0x2dd0
[ 134.272916][ T5996] usb_probe_interface+0x653/0xc60
[ 134.272941][ T5996] ? __pfx_usb_probe_interface+0x10/0x10
[ 134.272959][ T5996] really_probe+0x254/0xae0
[ 134.272984][ T5996] __driver_probe_device+0x1e8/0x360
[ 134.273009][ T5996] driver_probe_device+0x4f/0x240
[ 134.273037][ T5996] __device_attach_driver+0x270/0x410
[ 134.273064][ T5996] bus_for_each_drv+0x25b/0x2f0
[ 134.273081][ T5996] ? __pfx___device_attach_driver+0x10/0x10
[ 134.273104][ T5996] ? __pfx_bus_for_each_drv+0x10/0x10
[ 134.273121][ T5996] ? rt_spin_unlock+0x163/0x200
[ 134.273139][ T5996] __device_attach+0x2c7/0x450
[ 134.273161][ T5996] ? rt_spin_unlock+0x157/0x200
[ 134.273177][ T5996] ? __pfx___device_attach+0x10/0x10
[ 134.273203][ T5996] device_initial_probe+0xa1/0xd0
[ 134.273224][ T5996] bus_probe_device+0x12d/0x220
[ 134.273242][ T5996] device_add+0x7d7/0xb80
[ 134.273262][ T5996] usb_set_configuration+0x1ad8/0x2180
[ 134.273292][ T5996] usb_generic_driver_probe+0x8d/0x150
[ 134.273311][ T5996] usb_probe_device+0x1c3/0x3b0
[ 134.273330][ T5996] ? __pfx_usb_probe_device+0x10/0x10
[ 134.273349][ T5996] really_probe+0x254/0xae0
[ 134.273377][ T5996] __driver_probe_device+0x1e8/0x360
[ 134.273401][ T5996] driver_probe_device+0x4f/0x240
[ 134.273427][ T5996] __device_attach_driver+0x270/0x410
[ 134.273452][ T5996] bus_for_each_drv+0x25b/0x2f0
[ 134.273469][ T5996] ? __pfx___device_attach_driver+0x10/0x10
[ 134.273493][ T5996] ? __pfx_bus_for_each_drv+0x10/0x10
[ 134.273509][ T5996] ? rt_spin_unlock+0x163/0x200
[ 134.273531][ T5996] __device_attach+0x2c7/0x450
[ 134.273553][ T5996] ? __pfx___device_attach+0x10/0x10
[ 134.273579][ T5996] device_initial_probe+0xa1/0xd0
[ 134.273601][ T5996] bus_probe_device+0x12d/0x220
[ 134.273630][ T5996] device_add+0x7d7/0xb80
[ 134.273650][ T5996] usb_new_device+0x99a/0x1680
[ 134.273674][ T5996] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 134.273699][ T5996] ? __pfx_usb_new_device+0x10/0x10
[ 134.273749][ T5996] hub_event+0x28cf/0x4cf0
[ 134.273785][ T5996] ? __pfx_hub_event+0x10/0x10
[ 134.273800][ T5996] ? process_scheduled_works+0xa20/0x14e0
[ 134.273822][ T5996] ? rcu_is_watching+0x15/0xb0
[ 134.273843][ T5996] ? process_scheduled_works+0xa20/0x14e0
[ 134.273870][ T5996] process_scheduled_works+0xa8e/0x14e0
[ 134.273899][ T5996] ? __pfx_process_scheduled_works+0x10/0x10
[ 134.273920][ T5996] ? assign_work+0x3cf/0x5d0
[ 134.273939][ T5996] worker_thread+0xa47/0xfb0
[ 134.273965][ T5996] ? __kthread_parkme+0x71/0x1f0
[ 134.273990][ T5996] kthread+0x388/0x470
[ 134.274014][ T5996] ? __pfx_worker_thread+0x10/0x10
[ 134.274032][ T5996] ? __pfx_kthread+0x10/0x10
[ 134.274059][ T5996] ret_from_fork+0x514/0xb70
[ 134.274085][ T5996] ? __pfx_ret_from_fork+0x10/0x10
[ 134.274108][ T5996] ? __switch_to+0xc89/0x1420
[ 134.274129][ T5996] ? __pfx_kthread+0x10/0x10
[ 134.274152][ T5996] ret_from_fork_asm+0x1a/0x30
[ 134.274185][ T5996]
[ 134.274192][ T5996]
[ 134.274196][ T5996] Allocated by task 13:
[ 134.274204][ T5996] kasan_save_track+0x3e/0x80
[ 134.274231][ T5996] __kasan_slab_alloc+0x6c/0x80
[ 134.274244][ T5996] kmem_cache_alloc_node_noprof+0x3eb/0x670
[ 134.274269][ T5996] __alloc_skb+0x276/0x7a0
[ 134.274284][ T5996] __ipv6_ifa_notify+0x1d0/0xc60
[ 134.274300][ T5996] addrconf_dad_completed+0x1b5/0xe60
[ 134.274325][ T5996] addrconf_dad_work+0xdda/0x16e0
[ 134.274348][ T5996] process_scheduled_works+0xa8e/0x14e0
[ 134.274369][ T5996] worker_thread+0xa47/0xfb0
[ 134.274385][ T5996] kthread+0x388/0x470
[ 134.274406][ T5996] ret_from_fork+0x514/0xb70
[ 134.274427][ T5996] ret_from_fork_asm+0x1a/0x30
[ 134.274452][ T5996]
[ 134.274456][ T5996] Freed by task 13:
[ 134.274463][ T5996] kasan_save_track+0x3e/0x80
[ 134.274488][ T5996] kasan_save_free_info+0x40/0x50
[ 134.274508][ T5996] __kasan_slab_free+0x5c/0x80
[ 134.274521][ T5996] kfree+0x1c5/0x6c0
[ 134.274543][ T5996] skb_release_data+0x85e/0xab0
[ 134.274564][ T5996] __kfree_skb+0x5d/0x210
[ 134.274580][ T5996] netlink_broadcast_filtered+0xd97/0xea0
[ 134.274597][ T5996] nlmsg_notify+0xe3/0x1a0
[ 134.274614][ T5996] __ipv6_ifa_notify+0x21e/0xc60
[ 134.274628][ T5996] addrconf_dad_completed+0x1b5/0xe60
[ 134.274652][ T5996] addrconf_dad_work+0xdda/0x16e0
[ 134.274675][ T5996] process_scheduled_works+0xa8e/0x14e0
[ 134.274692][ T5996] worker_thread+0xa47/0xfb0
[ 134.274709][ T5996] kthread+0x388/0x470
[ 134.274731][ T5996] ret_from_fork+0x514/0xb70
[ 134.274752][ T5996] ret_from_fork_asm+0x1a/0x30
[ 134.274776][ T5996]
[ 134.274780][ T5996] The buggy address belongs to the object at ffff8880474b8000
[ 134.274780][ T5996] which belongs to the cache skbuff_small_head of size 704
[ 134.274794][ T5996] The buggy address is located 656 bytes inside of
[ 134.274794][ T5996] freed 704-byte region [ffff8880474b8000, ffff8880474b82c0)
[ 134.274811][ T5996]
[ 134.274816][ T5996] The buggy address belongs to the physical page:
[ 134.274869][ T5996] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x474b8
[ 134.274886][ T5996] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 134.274900][ T5996] flags: 0x80000000000040(head|node=0|zone=1)
[ 134.274918][ T5996] page_type: f5(slab)
[ 134.274933][ T5996] raw: 0080000000000040 ffff88801ceeec80 dead000000000100 dead000000000122
[ 134.274947][ T5996] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[ 134.274962][ T5996] head: 0080000000000040 ffff88801ceeec80 dead000000000100 dead000000000122
[ 134.274976][ T5996] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[ 134.274990][ T5996] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[ 134.275003][ T5996] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
[ 134.275013][ T5996] page dumped because: kasan: bad access detected
[ 134.275025][ T5996] page_owner tracks the page as allocated
[ 134.275032][ T5996] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5729, tgid 5729 (syz-executor), ts 133555957054, free_ts 133502109494
[ 134.275063][ T5996] post_alloc_hook+0x1f9/0x250
[ 134.275092][ T5996] get_page_from_freelist+0x262a/0x26a0
[ 134.275108][ T5996] __alloc_frozen_pages_noprof+0x18d/0x380
[ 134.275125][ T5996] allocate_slab+0x79/0x5e0
[ 134.275144][ T5996] refill_objects+0x2d8/0x350
[ 134.275164][ T5996] __pcs_replace_empty_main+0x330/0x690
[ 134.275183][ T5996] kmem_cache_alloc_node_noprof+0x4dc/0x670
[ 134.275208][ T5996] __alloc_skb+0x276/0x7a0
[ 134.275223][ T5996] netlink_sendmsg+0x5d4/0xb40
[ 134.275244][ T5996] sock_sendmsg_nosec+0x13a/0x180
[ 134.275267][ T5996] __sys_sendto+0x41e/0x5d0
[ 134.275282][ T5996] __x64_sys_sendto+0xde/0x100
[ 134.275298][ T5996] do_syscall_64+0x174/0x580
[ 134.275316][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.275332][ T5996] page last free pid 10 tgid 10 stack trace:
[ 134.275341][ T5996] __free_frozen_pages+0x10e7/0x11c0
[ 134.275370][ T5996] em28xx_usb_disconnect+0x27f/0x2f0
[ 134.275393][ T5996] usb_unbind_interface+0x295/0x9f0
[ 134.275410][ T5996] device_release_driver_internal+0x4f5/0x880
[ 134.275433][ T5996] bus_remove_device+0x449/0x560
[ 134.275447][ T5996] device_del+0x528/0x8f0
[ 134.275465][ T5996] usb_disable_device+0x3d4/0x8d0
[ 134.275481][ T5996] usb_disconnect+0x32d/0x990
[ 134.275503][ T5996] hub_event+0x1bb7/0x4cf0
[ 134.275517][ T5996] process_scheduled_works+0xa8e/0x14e0
[ 134.275535][ T5996] worker_thread+0xa47/0xfb0
[ 134.275551][ T5996] kthread+0x388/0x470
[ 134.275572][ T5996] ret_from_fork+0x514/0xb70
[ 134.275600][ T5996] ret_from_fork_asm+0x1a/0x30
[ 134.275631][ T5996]
[ 134.275637][ T5996] Memory state around the buggy address:
[ 134.275647][ T5996] ffff8880474b8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 134.275658][ T5996] ffff8880474b8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 134.275669][ T5996] >ffff8880474b8280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 134.275676][ T5996] ^
[ 134.275685][ T5996] ffff8880474b8300: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 134.275696][ T5996] ffff8880474b8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 134.275704][ T5996] ==================================================================
[ 134.277527][ T10] usb 1-1: Using ep0 maxpacket: 16
[ 134.288865][ T5996] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 134.288918][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 134.288981][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 134.289021][ T5996] Workqueue: usb_hub_wq hub_event
[ 134.289091][ T5996] Call Trace:
[ 134.289113][ T5996]
[ 134.289134][ T5996] vpanic+0x56c/0xa60
[ 134.289212][ T5996] ? rcu_is_watching+0x15/0xb0
[ 134.289275][ T5996] ? __pfx_vpanic+0x10/0x10
[ 134.289371][ T5996] panic+0xc5/0xd0
[ 134.289447][ T5996] ? __pfx_panic+0x10/0x10
[ 134.289532][ T5996] ? preempt_schedule_thunk+0x16/0x40
[ 134.289602][ T5996] ? __list_add_valid_or_report+0x6a/0x130
[ 134.289695][ T5996] ? preempt_schedule_thunk+0x16/0x40
[ 134.289762][ T5996] ? __list_add_valid_or_report+0x6a/0x130
[ 134.289828][ T5996] check_panic_on_warn+0x89/0xb0
[ 134.289930][ T5996] ? __list_add_valid_or_report+0x6a/0x130
[ 134.290036][ T5996] end_report+0x73/0x170
[ 134.290101][ T5996] ? __list_add_valid_or_report+0x6a/0x130
[ 134.290176][ T5996] kasan_report+0x128/0x150
[ 134.290236][ T5996] ? __list_add_valid_or_report+0x6a/0x130
[ 134.290340][ T5996] __list_add_valid_or_report+0x6a/0x130
[ 134.290418][ T5996] em28xx_init_extension+0x56/0x1d0
[ 134.290492][ T5996] ? media_device_init+0x2ed/0x530
[ 134.290573][ T5996] em28xx_init_dev+0x9f6/0x2210
[ 134.290653][ T5996] ? _dev_info+0x11e/0x180
[ 134.290734][ T5996] ? __pfx_em28xx_init_dev+0x10/0x10
[ 134.290806][ T5996] ? __pfx__dev_info+0x10/0x10
[ 134.290904][ T5996] em28xx_usb_probe+0x17b2/0x2dd0
[ 134.291015][ T5996] usb_probe_interface+0x653/0xc60
[ 134.291095][ T5996] ? __pfx_usb_probe_interface+0x10/0x10
[ 134.291156][ T5996] really_probe+0x254/0xae0
[ 134.291233][ T5996] __driver_probe_device+0x1e8/0x360
[ 134.291317][ T5996] driver_probe_device+0x4f/0x240
[ 134.291394][ T5996] __device_attach_driver+0x270/0x410
[ 134.291474][ T5996] bus_for_each_drv+0x25b/0x2f0
[ 134.291525][ T5996] ? __pfx___device_attach_driver+0x10/0x10
[ 134.291609][ T5996] ? __pfx_bus_for_each_drv+0x10/0x10
[ 134.291656][ T5996] ? rt_spin_unlock+0x163/0x200
[ 134.291713][ T5996] __device_attach+0x2c7/0x450
[ 134.291772][ T5996] ? rt_spin_unlock+0x157/0x200
[ 134.291819][ T5996] ? __pfx___device_attach+0x10/0x10
[ 134.291902][ T5996] device_initial_probe+0xa1/0xd0
[ 134.291967][ T5996] bus_probe_device+0x12d/0x220
[ 134.292016][ T5996] device_add+0x7d7/0xb80
[ 134.292083][ T5996] usb_set_configuration+0x1ad8/0x2180
[ 134.292167][ T5996] usb_generic_driver_probe+0x8d/0x150
[ 134.292216][ T5996] usb_probe_device+0x1c3/0x3b0
[ 134.292275][ T5996] ? __pfx_usb_probe_device+0x10/0x10
[ 134.292344][ T5996] really_probe+0x254/0xae0
[ 134.292407][ T5996] __driver_probe_device+0x1e8/0x360
[ 134.292547][ T5996] driver_probe_device+0x4f/0x240
[ 134.292575][ T5996] __device_attach_driver+0x270/0x410
[ 134.292604][ T5996] bus_for_each_drv+0x25b/0x2f0
[ 134.292624][ T5996] ? __pfx___device_attach_driver+0x10/0x10
[ 134.292652][ T5996] ? __pfx_bus_for_each_drv+0x10/0x10
[ 134.292671][ T5996] ? rt_spin_unlock+0x163/0x200
[ 134.292693][ T5996] __device_attach+0x2c7/0x450
[ 134.292720][ T5996] ? __pfx___device_attach+0x10/0x10
[ 134.292751][ T5996] device_initial_probe+0xa1/0xd0
[ 134.292777][ T5996] bus_probe_device+0x12d/0x220
[ 134.292794][ T5996] device_add+0x7d7/0xb80
[ 134.292833][ T5996] usb_new_device+0x99a/0x1680
[ 134.292868][ T5996] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 134.292896][ T5996] ? __pfx_usb_new_device+0x10/0x10
[ 134.292931][ T5996] hub_event+0x28cf/0x4cf0
[ 134.292975][ T5996] ? __pfx_hub_event+0x10/0x10
[ 134.292996][ T5996] ? process_scheduled_works+0xa20/0x14e0
[ 134.293022][ T5996] ? rcu_is_watching+0x15/0xb0
[ 134.293047][ T5996] ? process_scheduled_works+0xa20/0x14e0
[ 134.293070][ T5996] process_scheduled_works+0xa8e/0x14e0
[ 134.293108][ T5996] ? __pfx_process_scheduled_works+0x10/0x10
[ 134.293136][ T5996] ? assign_work+0x3cf/0x5d0
[ 134.293161][ T5996] worker_thread+0xa47/0xfb0
[ 134.293192][ T5996] ? __kthread_parkme+0x71/0x1f0
[ 134.293224][ T5996] kthread+0x388/0x470
[ 134.293253][ T5996] ? __pfx_worker_thread+0x10/0x10
[ 134.293276][ T5996] ? __pfx_kthread+0x10/0x10
[ 134.293305][ T5996] ret_from_fork+0x514/0xb70
[ 134.293338][ T5996] ? __pfx_ret_from_fork+0x10/0x10
[ 134.293368][ T5996] ? __switch_to+0xc89/0x1420
[ 134.293395][ T5996] ? __pfx_kthread+0x10/0x10
[ 134.293425][ T5996] ret_from_fork_asm+0x1a/0x30
[ 134.293465][ T5996]
[ 134.293621][ T5996] Kernel Offset: disabled