Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. 1970/01/01 00:00:21 parsed 1 programs 1970/01/01 00:00:21 serving rpc on tcp://39081 [ 22.938019][ T4722] cgroup: Unknown subsys name 'net' [ 23.098311][ T4722] cgroup: Unknown subsys name 'cpuset' [ 23.099706][ T4722] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.252639][ T4722] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 26.129547][ T4728] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.303751][ T4733] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.303995][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.304053][ T4733] bridge_slave_0: entered allmulticast mode [ 26.304527][ T4733] bridge_slave_0: entered promiscuous mode [ 26.307227][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.307251][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.307298][ T4733] bridge_slave_1: entered allmulticast mode [ 26.307760][ T4733] bridge_slave_1: entered promiscuous mode [ 26.314871][ T4733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.315722][ T4733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.324740][ T4733] team0: Port device team_slave_0 added [ 26.325409][ T4733] team0: Port device team_slave_1 added [ 26.331723][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.331732][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.331742][ T4733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.332814][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.332822][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.332838][ T4733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.343472][ T4733] hsr_slave_0: entered promiscuous mode [ 26.343776][ T4733] hsr_slave_1: entered promiscuous mode [ 26.387498][ T4733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.389621][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.390033][ T4733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.390858][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.391195][ T4733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.392250][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.392586][ T4733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.393402][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.402455][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.402493][ T4733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.402628][ T4733] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.402657][ T4733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.419270][ T4733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.422644][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.423078][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.427801][ T4733] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.433309][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.433361][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.433721][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.433738][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.443020][ T4733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.528654][ T4733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.543618][ T4733] veth0_vlan: entered promiscuous mode [ 26.545749][ T4733] veth1_vlan: entered promiscuous mode [ 26.555120][ T4733] veth0_macvtap: entered promiscuous mode [ 26.556255][ T4733] veth1_macvtap: entered promiscuous mode [ 26.561607][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.564075][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.596833][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.596864][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.596880][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.596894][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.684391][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 26.690338][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.690349][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.701124][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.701135][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.751463][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 26.809778][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 26.875964][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.546951][ T4814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 27.547485][ T4814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 27.547690][ T4814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 27.547990][ T4814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 27.548213][ T4814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:27 executed programs: 0 [ 27.837982][ T4814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 27.838328][ T4814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 27.838516][ T4814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 27.838910][ T4814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 27.839828][ T4814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 27.972168][ T4825] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.972237][ T4825] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.972302][ T4825] bridge_slave_0: entered allmulticast mode [ 27.972748][ T4825] bridge_slave_0: entered promiscuous mode [ 27.973851][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.973898][ T4825] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.973991][ T4825] bridge_slave_1: entered allmulticast mode [ 27.974415][ T4825] bridge_slave_1: entered promiscuous mode [ 27.981887][ T4825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.982904][ T4825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.990142][ T4825] team0: Port device team_slave_0 added [ 27.990993][ T4825] team0: Port device team_slave_1 added [ 27.997249][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.997257][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.997269][ T4825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.997908][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.997915][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.997926][ T4825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.009383][ T4825] hsr_slave_0: entered promiscuous mode [ 28.009706][ T4825] hsr_slave_1: entered promiscuous mode [ 28.009907][ T4825] debugfs: 'hsr0' already exists in 'hsr' [ 28.009948][ T4825] Cannot create hsr debugfs directory [ 29.862959][ T40] bridge_slave_1: left allmulticast mode [ 29.862981][ T40] bridge_slave_1: left promiscuous mode [ 29.863223][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.865793][ T40] bridge_slave_0: left allmulticast mode [ 29.865806][ T40] bridge_slave_0: left promiscuous mode [ 29.865956][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.867793][ T4814] Bluetooth: hci0: command tx timeout [ 29.933577][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 29.946328][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 29.967473][ T40] bond0 (unregistering): Released all slaves [ 29.985551][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 29.997830][ T40] hsr_slave_0: left promiscuous mode [ 29.998174][ T40] hsr_slave_1: left promiscuous mode [ 29.998478][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.998491][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 29.998880][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.998890][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 30.002667][ T40] veth1_macvtap: left promiscuous mode [ 30.002694][ T40] veth0_macvtap: left promiscuous mode [ 30.002751][ T40] veth1_vlan: left promiscuous mode [ 30.002792][ T40] veth0_vlan: left promiscuous mode [ 30.090193][ T40] team0 (unregistering): Port device team_slave_1 removed [ 30.094013][ T40] team0 (unregistering): Port device team_slave_0 removed [ 30.326324][ T4825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.334334][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.334635][ T4825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.336243][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.340984][ T4825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.342024][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.342300][ T4825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.343297][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.600399][ T4825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.605862][ T4825] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.609070][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.609095][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.611511][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.611531][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.622857][ T4825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.744519][ T4825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.757354][ T4825] veth0_vlan: entered promiscuous mode [ 30.774237][ T4825] veth1_vlan: entered promiscuous mode [ 30.782288][ T4825] veth0_macvtap: entered promiscuous mode [ 30.783295][ T4825] veth1_macvtap: entered promiscuous mode [ 30.788839][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.791293][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.826838][ T1756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.827752][ T1756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.827775][ T1756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.827794][ T1756] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.852300][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.852314][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.864768][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.864780][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.126709][ T4757] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.276982][ T4757] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 31.277859][ T4757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.277879][ T4757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.279461][ T4757] usb 1-1: config 0 descriptor?? [ 31.685819][ T4757] aquacomputer_d5next 0003:0C70:F00E.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0 [ 31.882344][ C1] ================================================================== [ 31.882356][ C1] BUG: KASAN: slab-out-of-bounds in aqc_raw_event+0x334/0x2220 [ 31.882377][ C1] Read of size 2 at addr ffff0000dd54d1d7 by task swapper/1/0 [ 31.882386][ C1] [ 31.882390][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT [ 31.882400][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 31.882405][ C1] Call trace: [ 31.882408][ C1] show_stack+0x2c/0x3c (C) [ 31.882422][ C1] __dump_stack+0x30/0x40 [ 31.882432][ C1] dump_stack_lvl+0xd8/0x12c [ 31.882442][ C1] print_address_description+0xb0/0x238 [ 31.882450][ C1] print_report+0x68/0x84 [ 31.882457][ C1] kasan_report+0x8c/0xc4 [ 31.882466][ C1] __asan_report_load_n_noabort+0x1c/0x28 [ 31.882476][ C1] aqc_raw_event+0x334/0x2220 [ 31.882484][ C1] __hid_input_report+0x32c/0x408 [ 31.882494][ C1] hid_safe_input_report+0x50/0x68 [ 31.882503][ C1] hid_irq_in+0x3dc/0x718 [ 31.882513][ C1] __usb_hcd_giveback_urb+0x314/0x594 [ 31.882522][ C1] usb_hcd_giveback_urb+0x100/0x350 [ 31.882530][ C1] dummy_timer+0x570/0x2ba0 [ 31.882541][ C1] __hrtimer_run_queues+0x314/0xbe0 [ 31.882550][ C1] hrtimer_run_softirq+0x1b4/0x2a8 [ 31.882558][ C1] handle_softirqs+0x2ec/0xd98 [ 31.882566][ C1] __do_softirq+0x14/0x20 [ 31.882574][ C1] ____do_softirq+0x14/0x20 [ 31.882581][ C1] call_on_irq_stack+0x30/0x48 [ 31.882589][ C1] do_softirq_own_stack+0x20/0x2c [ 31.882596][ C1] __irq_exit_rcu+0x1ac/0x428 [ 31.882604][ C1] irq_exit_rcu+0x14/0x84 [ 31.882611][ C1] el1_interrupt+0x40/0x60 [ 31.882622][ C1] el1h_64_irq_handler+0x18/0x24 [ 31.882631][ C1] el1h_64_irq+0x6c/0x70 [ 31.882638][ C1] default_idle_call+0xd0/0xfc (P) [ 31.882646][ C1] do_idle+0x1ec/0x450 [ 31.882655][ C1] cpu_startup_entry+0x5c/0x74 [ 31.882664][ C1] secondary_start_kernel+0x1bc/0x1e0 [ 31.882674][ C1] __secondary_switched+0xc0/0xc4 [ 31.882684][ C1] [ 31.882686][ C1] Allocated by task 4757: [ 31.882691][ C1] kasan_save_track+0x40/0x78 [ 31.882698][ C1] kasan_save_alloc_info+0x40/0x50 [ 31.882706][ C1] __kasan_kmalloc+0x9c/0xb4 [ 31.882712][ C1] __kmalloc_noprof+0x34c/0x6c8 [ 31.882718][ C1] hcd_buffer_alloc+0xfc/0x1fc [ 31.882727][ C1] usb_alloc_coherent+0x6c/0x94 [ 31.882735][ C1] usbhid_start+0x688/0x1b08 [ 31.882743][ C1] hid_hw_start+0x6c/0x124 [ 31.882750][ C1] aqc_probe+0x108/0x2324 [ 31.882756][ C1] hid_device_probe+0x35c/0x61c [ 31.882764][ C1] really_probe+0x29c/0x800 [ 31.882770][ C1] __driver_probe_device+0x1e0/0x350 [ 31.882776][ C1] driver_probe_device+0x6c/0x19c [ 31.882782][ C1] __device_attach_driver+0x198/0x2f8 [ 31.882788][ C1] bus_for_each_drv+0x144/0x1dc [ 31.882797][ C1] __device_attach+0x248/0x390 [ 31.882806][ C1] device_initial_probe+0x90/0xc8 [ 31.882815][ C1] bus_probe_device+0x58/0x120 [ 31.882823][ C1] device_add+0x6cc/0x9e0 [ 31.882829][ C1] hid_add_device+0x254/0x3b8 [ 31.882836][ C1] usbhid_probe+0x83c/0xbac [ 31.882845][ C1] usb_probe_interface+0x374/0x834 [ 31.882853][ C1] really_probe+0x29c/0x800 [ 31.882858][ C1] __driver_probe_device+0x1e0/0x350 [ 31.882864][ C1] driver_probe_device+0x6c/0x19c [ 31.882870][ C1] __device_attach_driver+0x198/0x2f8 [ 31.882876][ C1] bus_for_each_drv+0x144/0x1dc [ 31.882884][ C1] __device_attach+0x248/0x390 [ 31.882893][ C1] device_initial_probe+0x90/0xc8 [ 31.882902][ C1] bus_probe_device+0x58/0x120 [ 31.882910][ C1] device_add+0x6cc/0x9e0 [ 31.882916][ C1] usb_set_configuration+0x1184/0x158c [ 31.882924][ C1] usb_generic_driver_probe+0x8c/0x148 [ 31.882931][ C1] usb_probe_device+0x114/0x2b0 [ 31.882939][ C1] really_probe+0x29c/0x800 [ 31.882944][ C1] __driver_probe_device+0x1e0/0x350 [ 31.882950][ C1] driver_probe_device+0x6c/0x19c [ 31.882956][ C1] __device_attach_driver+0x198/0x2f8 [ 31.882961][ C1] bus_for_each_drv+0x144/0x1dc [ 31.882969][ C1] __device_attach+0x248/0x390 [ 31.882978][ C1] device_initial_probe+0x90/0xc8 [ 31.882987][ C1] bus_probe_device+0x58/0x120 [ 31.882995][ C1] device_add+0x6cc/0x9e0 [ 31.883002][ C1] usb_new_device+0x9c4/0x11f8 [ 31.883010][ C1] hub_event+0x1ef0/0x39fc [ 31.883018][ C1] process_scheduled_works+0x91c/0x1250 [ 31.883026][ C1] worker_thread+0x798/0xbd0 [ 31.883033][ C1] kthread+0x304/0x3d4 [ 31.883040][ C1] ret_from_fork+0x10/0x20 [ 31.883045][ C1] [ 31.883047][ C1] The buggy address belongs to the object at ffff0000dd54d180 [ 31.883047][ C1] which belongs to the cache kmalloc-96 of size 96 [ 31.883053][ C1] The buggy address is located 22 bytes to the right of [ 31.883053][ C1] allocated 65-byte region [ffff0000dd54d180, ffff0000dd54d1c1) [ 31.883061][ C1] [ 31.883063][ C1] The buggy address belongs to the physical page: [ 31.883067][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d54d [ 31.883075][ C1] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 31.883083][ C1] page_type: f5(slab) [ 31.883092][ C1] raw: 05ffc00000000000 ffff0000c0001280 dead000000000122 0000000000000000 [ 31.883099][ C1] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 31.883102][ C1] page dumped because: kasan: bad access detected [ 31.883105][ C1] [ 31.883107][ C1] Memory state around the buggy address: [ 31.883111][ C1] ffff0000dd54d080: 00 00 00 00 00 00 00 00 01 fc fc fc fc fc fc fc [ 31.883116][ C1] ffff0000dd54d100: 00 00 00 00 00 00 00 00 01 fc fc fc fc fc fc fc [ 31.883123][ C1] >ffff0000dd54d180: 00 00 00 00 00 00 00 00 01 fc fc fc fc fc fc fc [ 31.883128][ C1] ^ [ 31.883132][ C1] ffff0000dd54d200: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 31.883138][ C1] ffff0000dd54d280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 31.883142][ C1] ================================================================== [ 31.883145][ C1] Disabling lock debugging due to kernel taint [ 31.937388][ T4814] Bluetooth: hci0: command tx timeout [ 32.083016][ T4749] usb 1-1: USB disconnect, device number 2