Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. 2026/05/10 08:59:04 parsed 1 programs [ 70.257325][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 70.257339][ T30] audit: type=1400 audit(1778403544.151:129): avc: denied { node_bind } for pid=5612 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 72.532628][ T30] audit: type=1400 audit(1778403546.431:130): avc: denied { mounton } for pid=5619 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.556523][ T30] audit: type=1400 audit(1778403546.451:131): avc: denied { mount } for pid=5619 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.559715][ T5619] cgroup: Unknown subsys name 'net' [ 72.585300][ T30] audit: type=1400 audit(1778403546.481:132): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.703057][ T5619] cgroup: Unknown subsys name 'cpuset' [ 72.711157][ T5619] cgroup: Unknown subsys name 'rlimit' [ 72.865242][ T30] audit: type=1400 audit(1778403546.761:133): avc: denied { setattr } for pid=5619 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.899667][ T30] audit: type=1400 audit(1778403546.761:134): avc: denied { create } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.926988][ T30] audit: type=1400 audit(1778403546.761:135): avc: denied { write } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.955510][ T30] audit: type=1400 audit(1778403546.761:136): avc: denied { read } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.976257][ T30] audit: type=1400 audit(1778403546.761:137): avc: denied { mounton } for pid=5619 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 72.984312][ T5623] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 73.001463][ T30] audit: type=1400 audit(1778403546.761:138): avc: denied { mount } for pid=5619 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 73.988157][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.047516][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 76.047532][ T30] audit: type=1400 audit(1778403549.941:143): avc: denied { execmem } for pid=5632 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.107924][ T30] audit: type=1400 audit(1778403550.001:144): avc: denied { read } for pid=5638 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.147469][ T30] audit: type=1400 audit(1778403550.001:145): avc: denied { open } for pid=5638 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.172189][ T30] audit: type=1400 audit(1778403550.001:146): avc: denied { create } for pid=5635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 76.209245][ T30] audit: type=1400 audit(1778403550.001:147): avc: denied { mounton } for pid=5637 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.231076][ T30] audit: type=1400 audit(1778403550.001:148): avc: denied { sys_admin } for pid=5635 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 76.354551][ T30] audit: type=1400 audit(1778403550.241:149): avc: denied { mounton } for pid=5639 comm="syz-executor" path="/root/syzkaller.OPHt21/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.382338][ T30] audit: type=1400 audit(1778403550.241:150): avc: denied { mount } for pid=5639 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.404635][ T30] audit: type=1400 audit(1778403550.241:151): avc: denied { mounton } for pid=5639 comm="syz-executor" path="/root/syzkaller.OPHt21/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.430128][ T30] audit: type=1400 audit(1778403550.251:152): avc: denied { mount } for pid=5639 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.458183][ T5639] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.314567][ T5678] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.324331][ T5678] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.332345][ T5678] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.345477][ T5678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.353535][ T5678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.553921][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.565602][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.799683][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.831178][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.347052][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.355010][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.362341][ T5697] bridge_slave_0: entered allmulticast mode [ 79.371671][ T5697] bridge_slave_0: entered promiscuous mode [ 79.382448][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.389542][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.396801][ T5697] bridge_slave_1: entered allmulticast mode [ 79.404648][ T5697] bridge_slave_1: entered promiscuous mode [ 79.428439][ T5697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.439160][ T5697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.462206][ T5697] team0: Port device team_slave_0 added [ 79.469156][ T5697] team0: Port device team_slave_1 added [ 79.490083][ T5697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.498244][ T5697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.524155][ T5697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.536522][ T5697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.543499][ T5697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.569585][ T5697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.601564][ T5697] hsr_slave_0: entered promiscuous mode [ 79.607704][ T5697] hsr_slave_1: entered promiscuous mode [ 79.712565][ T5697] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.723948][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.732646][ T5697] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.743290][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.751487][ T5697] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.761651][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.769210][ T5697] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.778013][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.802634][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.809928][ T5697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.817554][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.824627][ T5697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.869953][ T5697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.878193][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.887037][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.907538][ T5697] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.918647][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.925876][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.937345][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.944440][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.189672][ T5697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.227770][ T5697] veth0_vlan: entered promiscuous mode [ 80.238525][ T5697] veth1_vlan: entered promiscuous mode [ 80.263411][ T5697] veth0_macvtap: entered promiscuous mode [ 80.273214][ T5697] veth1_macvtap: entered promiscuous mode [ 80.287779][ T5697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.302136][ T5697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.315875][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.325688][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.336042][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.345581][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/10 08:59:14 executed programs: 0 [ 80.495503][ T4930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.521855][ T5755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.529453][ T5755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.542571][ T5758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.549880][ T5758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.564546][ T5758] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.572489][ T5761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.580627][ T5763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.581512][ T5761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.601707][ T5761] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.601915][ T5763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.610010][ T5761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.624854][ T5761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.626263][ T5763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.634782][ T4930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.647423][ T5678] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.657043][ T4930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.665265][ T5678] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.680350][ T5678] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.700691][ T4930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.720262][ T4930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.734110][ T4930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.742430][ T4930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.751450][ T4930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.763869][ T4930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.802704][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.962532][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.103456][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.956301][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.432557][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.440734][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.447982][ T5752] bridge_slave_0: entered allmulticast mode [ 82.454910][ T5752] bridge_slave_0: entered promiscuous mode [ 82.470568][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.477656][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.484956][ T5764] bridge_slave_0: entered allmulticast mode [ 82.491961][ T5764] bridge_slave_0: entered promiscuous mode [ 82.499489][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.506619][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.513948][ T5764] bridge_slave_1: entered allmulticast mode [ 82.521362][ T5764] bridge_slave_1: entered promiscuous mode [ 82.536503][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.543594][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.550728][ T5752] bridge_slave_1: entered allmulticast mode [ 82.557459][ T5752] bridge_slave_1: entered promiscuous mode [ 82.636256][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.643390][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.651056][ T5760] bridge_slave_0: entered allmulticast mode [ 82.657735][ T5760] bridge_slave_0: entered promiscuous mode [ 82.674565][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.683887][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.691303][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.698379][ T5757] bridge_slave_0: entered allmulticast mode [ 82.705309][ T5757] bridge_slave_0: entered promiscuous mode [ 82.713930][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.723316][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.730424][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.737731][ T5760] bridge_slave_1: entered allmulticast mode [ 82.744691][ T5760] bridge_slave_1: entered promiscuous mode [ 82.751457][ T5755] Bluetooth: hci3: command tx timeout [ 82.751461][ T5758] Bluetooth: hci2: command tx timeout [ 82.751708][ T5758] Bluetooth: hci0: command tx timeout [ 82.768766][ T4930] Bluetooth: hci1: command tx timeout [ 82.769197][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.781264][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.788319][ T5751] bridge_slave_0: entered allmulticast mode [ 82.795170][ T5751] bridge_slave_0: entered promiscuous mode [ 82.803786][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.813140][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.820207][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.827326][ T5757] bridge_slave_1: entered allmulticast mode [ 82.834386][ T5757] bridge_slave_1: entered promiscuous mode [ 82.841494][ T4930] Bluetooth: hci4: command tx timeout [ 82.852701][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.868582][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.875865][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.883086][ T5751] bridge_slave_1: entered allmulticast mode [ 82.889730][ T5751] bridge_slave_1: entered promiscuous mode [ 82.921428][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.933413][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.958181][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.991625][ T5764] team0: Port device team_slave_0 added [ 82.998773][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.010071][ T5752] team0: Port device team_slave_0 added [ 83.024807][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.035712][ T5764] team0: Port device team_slave_1 added [ 83.061020][ T5752] team0: Port device team_slave_1 added [ 83.067706][ T5760] team0: Port device team_slave_0 added [ 83.075481][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.124952][ T5760] team0: Port device team_slave_1 added [ 83.137624][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.144899][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.170878][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.183203][ T5757] team0: Port device team_slave_0 added [ 83.205559][ T5751] team0: Port device team_slave_0 added [ 83.211899][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.218840][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.245090][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.257407][ T5757] team0: Port device team_slave_1 added [ 83.263502][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.270435][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.296603][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.317536][ T5751] team0: Port device team_slave_1 added [ 83.347316][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.354326][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.380400][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.392365][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.399290][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.425425][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.456444][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.463422][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.491652][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.504395][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.511483][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.537415][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.548964][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.556047][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.582890][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.599309][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.606604][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.632738][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.664628][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.671626][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.697614][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.766802][ T5752] hsr_slave_0: entered promiscuous mode [ 83.773089][ T5752] hsr_slave_1: entered promiscuous mode [ 83.779319][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 83.785137][ T5752] Cannot create hsr debugfs directory [ 83.803033][ T5764] hsr_slave_0: entered promiscuous mode [ 83.809080][ T5764] hsr_slave_1: entered promiscuous mode [ 83.815313][ T5764] debugfs: 'hsr0' already exists in 'hsr' [ 83.821050][ T5764] Cannot create hsr debugfs directory [ 83.882715][ T5760] hsr_slave_0: entered promiscuous mode [ 83.888767][ T5760] hsr_slave_1: entered promiscuous mode [ 83.894997][ T5760] debugfs: 'hsr0' already exists in 'hsr' [ 83.901019][ T5760] Cannot create hsr debugfs directory [ 83.928351][ T5751] hsr_slave_0: entered promiscuous mode [ 83.934777][ T5751] hsr_slave_1: entered promiscuous mode [ 83.941550][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 83.947288][ T5751] Cannot create hsr debugfs directory [ 83.958393][ T5757] hsr_slave_0: entered promiscuous mode [ 83.964657][ T5757] hsr_slave_1: entered promiscuous mode [ 83.970608][ T5757] debugfs: 'hsr0' already exists in 'hsr' [ 83.976343][ T5757] Cannot create hsr debugfs directory [ 84.024941][ T12] bridge_slave_1: left allmulticast mode [ 84.030864][ T12] bridge_slave_1: left promiscuous mode [ 84.037582][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.047923][ T12] bridge_slave_0: left allmulticast mode [ 84.054606][ T12] bridge_slave_0: left promiscuous mode [ 84.060251][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.207100][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.217903][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.227467][ T12] bond0 (unregistering): Released all slaves [ 84.385611][ T12] hsr_slave_0: left promiscuous mode [ 84.391652][ T12] hsr_slave_1: left promiscuous mode [ 84.397319][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.405071][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.412989][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.420377][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.433383][ T12] veth1_macvtap: left promiscuous mode [ 84.438933][ T12] veth0_macvtap: left promiscuous mode [ 84.444887][ T12] veth1_vlan: left promiscuous mode [ 84.450129][ T12] veth0_vlan: left promiscuous mode [ 84.591912][ T12] team0 (unregistering): Port device team_slave_1 removed [ 84.606966][ T12] team0 (unregistering): Port device team_slave_0 removed [ 84.831804][ T5763] Bluetooth: hci3: command tx timeout [ 84.831818][ T5755] Bluetooth: hci2: command tx timeout [ 84.843788][ T5758] Bluetooth: hci0: command tx timeout [ 84.849205][ T4930] Bluetooth: hci1: command tx timeout [ 84.910599][ T4930] Bluetooth: hci4: command tx timeout [ 85.113436][ T5752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.134268][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 85.134281][ T30] audit: type=1400 audit(1778403559.031:174): avc: denied { write } for pid=5845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.136505][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.174578][ T5752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.191705][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.216088][ T30] audit: type=1400 audit(1778403559.111:175): avc: denied { write } for pid=5856 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.317119][ T5752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.326596][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.337223][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 85.355205][ T5752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.368168][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.499302][ T5760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.516791][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.525590][ T5760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.535674][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.574778][ T5760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.592921][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.608761][ T5760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.625872][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.688649][ T30] audit: type=1400 audit(1778403559.581:176): avc: denied { write } for pid=5865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.782694][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.794970][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.796528][ T30] audit: type=1400 audit(1778403559.691:177): avc: denied { write } for pid=5884 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.812381][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.839822][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.852489][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.877699][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.887639][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.897122][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.909012][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.917037][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 85.953496][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.984605][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.991698][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.004355][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.011471][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.062443][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.127759][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.147725][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.154875][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.166991][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.174129][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.325701][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.403493][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.438129][ T804] cfg80211: failed to load regulatory.db [ 86.471859][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.478997][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.525985][ T5757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.550850][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.572283][ T5757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.602163][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.616296][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.617821][ T30] audit: type=1400 audit(1778403560.511:178): avc: denied { write } for pid=5893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.623419][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.676793][ T5757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.687093][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.727609][ T5757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.738582][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.765955][ T30] audit: type=1400 audit(1778403560.661:179): avc: denied { write } for pid=5912 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.894964][ T5751] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.912895][ T4930] Bluetooth: hci1: command tx timeout [ 86.918734][ T5758] Bluetooth: hci2: command tx timeout [ 86.928440][ T5763] Bluetooth: hci0: command tx timeout [ 86.928458][ T5755] Bluetooth: hci3: command tx timeout [ 86.936489][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.964087][ T5751] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.984909][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.992124][ T5755] Bluetooth: hci4: command tx timeout [ 87.014230][ T5751] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.032621][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.059857][ T5751] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.075488][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.288903][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.375168][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.432386][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.450353][ T30] audit: type=1400 audit(1778403561.341:180): avc: denied { write } for pid=5923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.527390][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.566097][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.616550][ T5752] veth0_vlan: entered promiscuous mode [ 87.628470][ T30] audit: type=1400 audit(1778403561.521:181): avc: denied { write } for pid=5956 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.639812][ T5752] veth1_vlan: entered promiscuous mode [ 87.674027][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.681167][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.691126][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.698244][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.768338][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.788351][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.795508][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.874222][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.881377][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.937180][ T5752] veth0_macvtap: entered promiscuous mode [ 87.962278][ T5752] veth1_macvtap: entered promiscuous mode [ 88.038645][ T5760] veth0_vlan: entered promiscuous mode [ 88.062443][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.074836][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.103481][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.119836][ T5760] veth1_vlan: entered promiscuous mode [ 88.152038][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.170031][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.211083][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.243843][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.366833][ T30] audit: type=1400 audit(1778403562.261:182): avc: denied { write } for pid=5964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.418469][ T5760] veth0_macvtap: entered promiscuous mode [ 88.467412][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.478694][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.494690][ T5760] veth1_macvtap: entered promiscuous mode [ 88.495132][ T30] audit: type=1400 audit(1778403562.391:183): avc: denied { write } for pid=5987 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.589697][ T5764] veth0_vlan: entered promiscuous mode [ 88.668600][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.690338][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.698835][ T5764] veth1_vlan: entered promiscuous mode [ 88.720639][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.772023][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 2026/05/10 08:59:22 executed programs: 10 [ 88.815802][ T139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.854565][ T139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.898808][ T139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.916136][ T139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.992108][ T5755] Bluetooth: hci0: command tx timeout [ 88.992918][ T5763] Bluetooth: hci2: command tx timeout [ 88.997584][ T5755] Bluetooth: hci1: command tx timeout [ 88.997793][ T5755] Bluetooth: hci3: command tx timeout [ 89.014975][ T5764] veth0_macvtap: entered promiscuous mode [ 89.056255][ T5764] veth1_macvtap: entered promiscuous mode [ 89.070781][ T5755] Bluetooth: hci4: command tx timeout [ 89.111133][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.124006][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.169080][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.181988][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.196987][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.206661][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.219699][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.257455][ T139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.266938][ T139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.287379][ T139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.296548][ T139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.300801][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 89.315655][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.327807][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.328646][ T10] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 89.343724][ T10] usb 1-1: config 0 has no interface number 0 [ 89.350149][ T10] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.369608][ T10] usb 1-1: config 0 interface 89 has no altsetting 0 [ 89.381107][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 89.395530][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.403923][ T10] usb 1-1: Product: syz [ 89.408148][ T10] usb 1-1: Manufacturer: syz [ 89.427243][ T10] usb 1-1: SerialNumber: syz [ 89.435908][ T5757] veth0_vlan: entered promiscuous mode [ 89.467639][ T5751] veth0_vlan: entered promiscuous mode [ 89.469213][ T10] usb 1-1: config 0 descriptor?? [ 89.507727][ T10] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 89.514566][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.528649][ T5757] veth1_vlan: entered promiscuous mode [ 89.531548][ T10] em28xx 1-1:0.89: Video interface 89 found: [ 89.542328][ T5751] veth1_vlan: entered promiscuous mode [ 89.550576][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.596046][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.606032][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.647246][ T5757] veth0_macvtap: entered promiscuous mode [ 89.666016][ T5751] veth0_macvtap: entered promiscuous mode [ 89.688000][ T5757] veth1_macvtap: entered promiscuous mode [ 89.700838][ T2168] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.707300][ T5751] veth1_macvtap: entered promiscuous mode [ 89.739024][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.754898][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.768960][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.778989][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.787819][ T10] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 89.789089][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.806209][ T139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.816023][ T139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.826754][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.854908][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.861295][ T2168] usb 5-1: Using ep0 maxpacket: 32 [ 89.868769][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.873316][ T2168] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 89.884507][ T10] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 89.889037][ T2168] usb 5-1: config 0 has no interface number 0 [ 89.895341][ T10] em28xx 1-1:0.89: board has no eeprom [ 89.908699][ T2168] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.910764][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.918612][ T2168] usb 5-1: config 0 interface 89 has no altsetting 0 [ 89.920709][ T2168] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 89.929012][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.939152][ T5735] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.962700][ T2168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.970525][ T10] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 89.972048][ T2168] usb 5-1: Product: syz [ 89.994194][ T2168] usb 5-1: Manufacturer: syz [ 89.998859][ T2168] usb 5-1: SerialNumber: syz [ 90.000137][ T10] em28xx 1-1:0.89: analog set to bulk mode. [ 90.007266][ T2168] usb 5-1: config 0 descriptor?? [ 90.015790][ T5871] em28xx 1-1:0.89: Registering V4L2 extension [ 90.056353][ T2168] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 90.070161][ T2168] em28xx 5-1:0.89: Video interface 89 found: [ 90.086165][ T10] usb 1-1: USB disconnect, device number 2 [ 90.105811][ T10] em28xx 1-1:0.89: Disconnecting em28xx [ 90.121464][ T5871] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 90.128964][ T5871] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 90.131794][ T5735] usb 4-1: Using ep0 maxpacket: 32 [ 90.140583][ T5871] em28xx 1-1:0.89: No AC97 audio processor [ 90.153028][ T5735] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 90.172470][ T5735] usb 4-1: config 0 has no interface number 0 [ 90.179845][ T5871] usb 1-1: Decoder not found [ 90.183571][ T5735] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.194547][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.194564][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.203912][ T5735] usb 4-1: config 0 interface 89 has no altsetting 0 [ 90.225496][ T5871] em28xx 1-1:0.89: failed to create media graph [ 90.236755][ T5871] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 90.249919][ T5735] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 90.254696][ T5871] em28xx 1-1:0.89: Registering snapshot button... [ 90.288263][ T5871] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input5 [ 90.288764][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.308293][ T2168] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 90.310277][ T5871] em28xx 1-1:0.89: Remote control support is not available for this card. [ 90.357753][ T10] em28xx 1-1:0.89: Closing input extension [ 90.360233][ T5735] usb 4-1: Product: syz [ 90.372139][ T10] em28xx 1-1:0.89: Deregistering snapshot button [ 90.385668][ T2168] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 90.393924][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.404163][ T2168] em28xx 5-1:0.89: board has no eeprom [ 90.410098][ T5735] usb 4-1: Manufacturer: syz [ 90.416660][ T5735] usb 4-1: SerialNumber: syz [ 90.418468][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.433617][ T5735] usb 4-1: config 0 descriptor?? [ 90.440026][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.457657][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.471216][ T5735] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 90.483019][ T2168] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 90.486327][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.490218][ T2168] em28xx 5-1:0.89: analog set to bulk mode. [ 90.490727][ T5766] em28xx 5-1:0.89: Registering V4L2 extension [ 90.502074][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.516115][ T2168] usb 5-1: USB disconnect, device number 2 [ 90.528855][ T5735] em28xx 4-1:0.89: Video interface 89 found: [ 90.546343][ T10] em28xx 1-1:0.89: Freeing device [ 90.549965][ T2168] em28xx 5-1:0.89: Disconnecting em28xx [ 90.639197][ T5766] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 90.668827][ T5766] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 90.697137][ T5766] em28xx 5-1:0.89: No AC97 audio processor [ 90.719285][ T5766] usb 5-1: Decoder not found [ 90.734171][ T5766] em28xx 5-1:0.89: failed to create media graph [ 90.740447][ T5766] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 90.762634][ T6012] ================================================================== [ 90.767347][ T5766] em28xx 5-1:0.89: Registering snapshot button... [ 90.770698][ T6012] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 90.770733][ T6012] Read of size 4 at addr ffff888077a58860 by task v4l_id/6012 [ 90.770748][ T6012] [ 90.770768][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 90.770789][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.770806][ T6012] Call Trace: [ 90.770812][ T6012] [ 90.770820][ T6012] dump_stack_lvl+0x100/0x190 [ 90.770846][ T6012] print_report+0x13d/0x4b0 [ 90.770874][ T6012] ? __virt_addr_valid+0x239/0x430 [ 90.770896][ T6012] ? v4l2_open+0x351/0x490 [ 90.770921][ T6012] kasan_report+0xdf/0x1d0 [ 90.770944][ T6012] ? v4l2_open+0x351/0x490 [ 90.770973][ T6012] v4l2_open+0x351/0x490 [ 90.770999][ T6012] ? __pfx_v4l2_open+0x10/0x10 [ 90.771031][ T6012] chrdev_open+0x234/0x6a0 [ 90.771055][ T6012] ? __pfx_chrdev_open+0x10/0x10 [ 90.771079][ T6012] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 90.771109][ T6012] do_dentry_open+0x6d8/0x1660 [ 90.771131][ T6012] ? __pfx_chrdev_open+0x10/0x10 [ 90.771157][ T6012] vfs_open+0x82/0x3f0 [ 90.771184][ T6012] path_openat+0x208c/0x31a0 [ 90.771213][ T6012] ? __pfx_path_openat+0x10/0x10 [ 90.771242][ T6012] do_file_open+0x20e/0x430 [ 90.771267][ T6012] ? __pfx_do_file_open+0x10/0x10 [ 90.771299][ T6012] ? alloc_fd+0x476/0x790 [ 90.771325][ T6012] ? do_getname+0x191/0x390 [ 90.771354][ T6012] do_sys_openat2+0x10d/0x1e0 [ 90.771381][ T6012] ? __pfx_do_sys_openat2+0x10/0x10 [ 90.771413][ T6012] __x64_sys_openat+0x12d/0x210 [ 90.771440][ T6012] ? __pfx___x64_sys_openat+0x10/0x10 [ 90.771470][ T6012] ? rcu_is_watching+0x12/0xc0 [ 90.771501][ T6012] do_syscall_64+0x10b/0xf80 [ 90.771526][ T6012] ? clear_bhb_loop+0x40/0x90 [ 90.771548][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.771567][ T6012] RIP: 0033:0x7f6e908a7407 [ 90.771586][ T6012] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 90.771605][ T6012] RSP: 002b:00007fffc9222260 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 90.771626][ T6012] RAX: ffffffffffffffda RBX: 00007f6e91021880 RCX: 00007f6e908a7407 [ 90.771639][ T6012] RDX: 0000000000000000 RSI: 00007fffc9223f1d RDI: ffffffffffffff9c [ 90.771652][ T6012] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 90.771663][ T6012] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 90.771674][ T6012] R13: 00007fffc92224b0 R14: 00007f6e91188000 R15: 00005648a22c34d8 [ 90.771694][ T6012] [ 90.771703][ T6012] [ 90.778978][ T5735] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 90.784358][ T6012] Allocated by task 5766: [ 90.784375][ T6012] kasan_save_stack+0x30/0x50 [ 90.784395][ T6012] kasan_save_track+0x14/0x30 [ 91.049182][ T6012] __kasan_kmalloc+0xaa/0xb0 [ 91.053769][ T6012] em28xx_v4l2_init.cold+0x94/0x3a40 [ 91.059038][ T6012] em28xx_init_extension+0x13a/0x200 [ 91.064306][ T6012] request_module_async+0x61/0x80 [ 91.069314][ T6012] process_one_work+0xa0e/0x1980 [ 91.074239][ T6012] worker_thread+0x5ef/0xe50 [ 91.078815][ T6012] kthread+0x370/0x450 [ 91.082868][ T6012] ret_from_fork+0x72b/0xd50 [ 91.087446][ T6012] ret_from_fork_asm+0x1a/0x30 [ 91.092198][ T6012] [ 91.094503][ T6012] Freed by task 5766: [ 91.098459][ T6012] kasan_save_stack+0x30/0x50 [ 91.103113][ T6012] kasan_save_track+0x14/0x30 [ 91.107768][ T6012] kasan_save_free_info+0x3b/0x70 [ 91.112778][ T6012] __kasan_slab_free+0x5f/0x80 [ 91.117522][ T6012] kfree+0x223/0x6c0 [ 91.121402][ T6012] kref_put.isra.0+0x53/0x75 [ 91.125973][ T6012] em28xx_v4l2_init.cold+0x280/0x3a40 [ 91.131344][ T6012] em28xx_init_extension+0x13a/0x200 [ 91.136625][ T6012] request_module_async+0x61/0x80 [ 91.141631][ T6012] process_one_work+0xa0e/0x1980 [ 91.146566][ T6012] worker_thread+0x5ef/0xe50 [ 91.151157][ T6012] kthread+0x370/0x450 [ 91.155238][ T6012] ret_from_fork+0x72b/0xd50 [ 91.159813][ T6012] ret_from_fork_asm+0x1a/0x30 [ 91.164569][ T6012] [ 91.166875][ T6012] The buggy address belongs to the object at ffff888077a58000 [ 91.166875][ T6012] which belongs to the cache kmalloc-8k of size 8192 [ 91.180905][ T6012] The buggy address is located 2144 bytes inside of [ 91.180905][ T6012] freed 8192-byte region [ffff888077a58000, ffff888077a5a000) [ 91.194854][ T6012] [ 91.197189][ T6012] The buggy address belongs to the physical page: [ 91.203586][ T6012] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77a58 [ 91.212328][ T6012] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 91.220805][ T6012] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 91.228336][ T6012] page_type: f5(slab) [ 91.232296][ T6012] raw: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 91.240867][ T6012] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 91.249431][ T6012] head: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 91.258083][ T6012] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 91.266734][ T6012] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 91.275387][ T6012] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 91.284030][ T6012] page dumped because: kasan: bad access detected [ 91.290422][ T6012] page_owner tracks the page as allocated [ 91.296111][ T6012] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5262, tgid 5262 (rcS), ts 42868928064, free_ts 42762944633 [ 91.315885][ T6012] post_alloc_hook+0x153/0x170 [ 91.320639][ T6012] get_page_from_freelist+0x11a6/0x33b0 [ 91.326173][ T6012] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 91.332060][ T6012] new_slab+0xa6/0x6c0 [ 91.336115][ T6012] refill_objects+0x277/0x420 [ 91.340777][ T6012] __pcs_replace_empty_main+0x375/0x650 [ 91.346312][ T6012] __kmalloc_cache_noprof+0x493/0x6f0 [ 91.351673][ T6012] tomoyo_init_log+0xc4f/0x20c0 [ 91.356510][ T6012] tomoyo_supervisor+0x506/0x1340 [ 91.361524][ T6012] tomoyo_env_perm+0x191/0x200 [ 91.366271][ T6012] tomoyo_find_next_domain+0x13d7/0x2010 [ 91.371886][ T6012] tomoyo_bprm_check_security+0x12d/0x1d0 [ 91.377596][ T6012] security_bprm_check+0x87/0x1e0 [ 91.382604][ T6012] bprm_execve+0x845/0x1740 [ 91.387089][ T6012] do_execveat_common.isra.0+0x4a5/0x580 [ 91.392706][ T6012] __x64_sys_execve+0x93/0xd0 [ 91.397368][ T6012] page last free pid 5261 tgid 5261 stack trace: [ 91.403669][ T6012] __free_frozen_pages+0x747/0x1040 [ 91.408875][ T6012] qlist_free_all+0x47/0xf0 [ 91.413370][ T6012] kasan_quarantine_reduce+0x1a0/0x1f0 [ 91.418818][ T6012] __kasan_slab_alloc+0x69/0x90 [ 91.423649][ T6012] __kmalloc_noprof+0x2b9/0x850 [ 91.428487][ T6012] tomoyo_supervisor+0x65d/0x1340 [ 91.433515][ T6012] tomoyo_env_perm+0x191/0x200 [ 91.438259][ T6012] tomoyo_find_next_domain+0x13d7/0x2010 [ 91.443873][ T6012] tomoyo_bprm_check_security+0x12d/0x1d0 [ 91.449581][ T6012] security_bprm_check+0x87/0x1e0 [ 91.454589][ T6012] bprm_execve+0x845/0x1740 [ 91.459073][ T6012] do_execveat_common.isra.0+0x4a5/0x580 [ 91.464687][ T6012] __x64_sys_execve+0x93/0xd0 [ 91.469347][ T6012] do_syscall_64+0x10b/0xf80 [ 91.473924][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.479800][ T6012] [ 91.482102][ T6012] Memory state around the buggy address: [ 91.487710][ T6012] ffff888077a58700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.495749][ T6012] ffff888077a58780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.503788][ T6012] >ffff888077a58800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.511827][ T6012] ^ [ 91.518997][ T6012] ffff888077a58880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.527035][ T6012] ffff888077a58900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.535070][ T6012] ================================================================== [ 91.556002][ T6012] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.563215][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 91.572132][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.582167][ T6012] Call Trace: [ 91.585429][ T6012] [ 91.588341][ T6012] dump_stack_lvl+0x100/0x190 [ 91.593006][ T6012] vpanic+0x552/0x970 [ 91.596971][ T6012] ? __pfx_vpanic+0x10/0x10 [ 91.601455][ T6012] ? rcu_is_watching+0x12/0xc0 [ 91.606220][ T6012] ? v4l2_open+0x351/0x490 [ 91.610626][ T6012] panic+0xd1/0xe0 [ 91.614329][ T6012] ? __pfx_panic+0x10/0x10 [ 91.618728][ T6012] ? v4l2_open+0x351/0x490 [ 91.623134][ T6012] ? preempt_schedule_common+0x42/0xc0 [ 91.628580][ T6012] ? check_panic_on_warn+0x1f/0x90 [ 91.633680][ T6012] check_panic_on_warn.cold+0x19/0x34 [ 91.639035][ T6012] end_report.part.0+0x3a/0x90 [ 91.643786][ T6012] kasan_report.cold+0xe/0x18 [ 91.648454][ T6012] ? v4l2_open+0x351/0x490 [ 91.652868][ T6012] v4l2_open+0x351/0x490 [ 91.657099][ T6012] ? __pfx_v4l2_open+0x10/0x10 [ 91.661853][ T6012] chrdev_open+0x234/0x6a0 [ 91.666261][ T6012] ? __pfx_chrdev_open+0x10/0x10 [ 91.671190][ T6012] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 91.677558][ T6012] do_dentry_open+0x6d8/0x1660 [ 91.682310][ T6012] ? __pfx_chrdev_open+0x10/0x10 [ 91.687235][ T6012] vfs_open+0x82/0x3f0 [ 91.691293][ T6012] path_openat+0x208c/0x31a0 [ 91.695875][ T6012] ? __pfx_path_openat+0x10/0x10 [ 91.700803][ T6012] do_file_open+0x20e/0x430 [ 91.705294][ T6012] ? __pfx_do_file_open+0x10/0x10 [ 91.710313][ T6012] ? alloc_fd+0x476/0x790 [ 91.714634][ T6012] ? do_getname+0x191/0x390 [ 91.719132][ T6012] do_sys_openat2+0x10d/0x1e0 [ 91.723798][ T6012] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.728989][ T6012] __x64_sys_openat+0x12d/0x210 [ 91.733829][ T6012] ? __pfx___x64_sys_openat+0x10/0x10 [ 91.739194][ T6012] ? rcu_is_watching+0x12/0xc0 [ 91.743965][ T6012] do_syscall_64+0x10b/0xf80 [ 91.748543][ T6012] ? clear_bhb_loop+0x40/0x90 [ 91.753206][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.759078][ T6012] RIP: 0033:0x7f6e908a7407 [ 91.763473][ T6012] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 91.783063][ T6012] RSP: 002b:00007fffc9222260 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 91.791460][ T6012] RAX: ffffffffffffffda RBX: 00007f6e91021880 RCX: 00007f6e908a7407 [ 91.799430][ T6012] RDX: 0000000000000000 RSI: 00007fffc9223f1d RDI: ffffffffffffff9c [ 91.807384][ T6012] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 91.815387][ T6012] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 91.823355][ T6012] R13: 00007fffc92224b0 R14: 00007f6e91188000 R15: 00005648a22c34d8 [ 91.831314][ T6012] [ 91.834819][ T6012] Kernel Offset: disabled [ 91.839133][ T6012] Rebooting in 86400 seconds..