Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. 2026/11/01 23:45:01 parsed 1 programs 2026/11/01 23:45:01 serving rpc on tcp://39247 [ 70.253331][ T4201] cgroup: Unknown subsys name 'net' [ 70.392291][ T4201] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.438185][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.444747][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.975844][ T4201] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 73.861969][ T4223] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.871801][ T4223] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.885541][ T4223] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.003533][ T1328] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.002806][ T4223] infiniband rxe0: set active [ 74.015156][ T4223] infiniband rxe0: added rxe_eth0 [ 74.096445][ T4223] RDS/IB: rxe0: added [ 74.101164][ T4223] smc: adding ib device rxe0 with port count 1 [ 74.125373][ T4223] smc: ib device rxe0 port 1 has pnetid [ 74.132786][ T1328] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.142858][ T4223] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.250811][ T4223] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.387304][ T4223] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.699266][ T4223] chnl_net:caif_netlink_parms(): no params data found [ 74.786172][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.794171][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.804004][ T4223] device bridge_slave_0 entered promiscuous mode [ 74.814353][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.822859][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.831360][ T4223] device bridge_slave_1 entered promiscuous mode [ 74.862300][ T4223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.874138][ T4223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.907260][ T4223] team0: Port device team_slave_0 added [ 74.915386][ T4223] team0: Port device team_slave_1 added [ 74.938515][ T4223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.945670][ T4223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.971820][ T4223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.985491][ T4223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.992496][ T4223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.018509][ T4223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.061465][ T4223] device hsr_slave_0 entered promiscuous mode [ 75.069017][ T4223] device hsr_slave_1 entered promiscuous mode [ 75.214374][ T4223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.228692][ T4223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.240229][ T4223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.251018][ T4223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.283936][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.291314][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.299611][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.306794][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.379372][ T4223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.397198][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.410503][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.420857][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.430038][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.448674][ T4223] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.468255][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.479321][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.486531][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.496299][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.504935][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.512119][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.538944][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.558841][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.569271][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.580198][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.595723][ T4223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.618514][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.628260][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.770823][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.780648][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.796702][ T4223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.820672][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.830000][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.851959][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.861326][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.871081][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.880127][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.891426][ T4223] device veth0_vlan entered promiscuous mode [ 75.910406][ T4223] device veth1_vlan entered promiscuous mode [ 75.949999][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.959491][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.968290][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.977660][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.992020][ T4223] device veth0_macvtap entered promiscuous mode [ 76.010779][ T4223] device veth1_macvtap entered promiscuous mode [ 76.027695][ T4223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.036767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.044973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.053626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.066361][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.078559][ T4223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.087688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.096663][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.107559][ T4223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.117194][ T4223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.126509][ T4223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.135645][ T4223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.236942][ T4223] syz-executor (4223) used greatest stack depth: 21040 bytes left [ 76.266967][ T4272] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.470739][ T4277] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.681142][ T4284] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.074872][ T4288] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.581420][ T4292] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.880210][ T4296] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.153449][ T4300] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.371355][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.417622][ T4304] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.599435][ T4308] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.769499][ T4311] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.913875][ T4313] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.032426][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.043770][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.063077][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.076848][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.084729][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.093505][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.172981][ T4317] rxe_eth0 speed is unknown, defaulting to 1000 2026/11/01 23:45:13 executed programs: 0 [ 79.685581][ T4322] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.824353][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 79.872201][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.879418][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.887583][ T4322] device bridge_slave_0 entered promiscuous mode [ 79.896653][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.903929][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.912189][ T4322] device bridge_slave_1 entered promiscuous mode [ 79.936312][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.948562][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.972351][ T4322] team0: Port device team_slave_0 added [ 79.980062][ T4322] team0: Port device team_slave_1 added [ 79.998968][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.006059][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.032547][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.044980][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.052327][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.078813][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.110391][ T4322] device hsr_slave_0 entered promiscuous mode [ 80.118307][ T4322] device hsr_slave_1 entered promiscuous mode [ 80.126128][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.133960][ T4322] Cannot create hsr debugfs directory [ 80.863265][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.921361][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.975851][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.688641][ T4344] Bluetooth: hci0: command 0x0409 tx timeout [ 82.062993][ T4322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.074054][ T4322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.084777][ T4322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.114895][ T4322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.186160][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.198717][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.208263][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.219901][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.247389][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.256290][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.266202][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.273411][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.282788][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.296008][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.304782][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.314170][ T632] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.321553][ T632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.334753][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.358467][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.376778][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.386807][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.398741][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.408888][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.418196][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.435599][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.445777][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.454514][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.465399][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.478973][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.612162][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.620411][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.633829][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.660596][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.670222][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.693624][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.702835][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.715864][ T4322] device veth0_vlan entered promiscuous mode [ 82.728300][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.739373][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.750143][ T4322] device veth1_vlan entered promiscuous mode [ 82.776449][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.788390][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.797770][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.807411][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.819933][ T4322] device veth0_macvtap entered promiscuous mode [ 82.832786][ T4322] device veth1_macvtap entered promiscuous mode [ 82.854536][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.869719][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.882331][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.892237][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.903034][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.911499][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.921370][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.937436][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.949274][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.962545][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.974055][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.996450][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.009325][ T4322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.019185][ T4322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.029173][ T4322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.048023][ T4322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.126297][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.134183][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.145966][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.184131][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.192768][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.203381][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.318201][ T9] device hsr_slave_0 left promiscuous mode [ 83.325720][ T9] device hsr_slave_1 left promiscuous mode [ 83.332300][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.340583][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.350194][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.357824][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.367163][ T9] device bridge_slave_1 left promiscuous mode [ 83.374219][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.396232][ T9] device bridge_slave_0 left promiscuous mode [ 83.402477][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.421904][ T9] device veth1_macvtap left promiscuous mode [ 83.428923][ T9] device veth0_macvtap left promiscuous mode [ 83.435024][ T9] device veth1_vlan left promiscuous mode [ 83.441258][ T9] device veth0_vlan left promiscuous mode [ 83.536777][ T4257] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.663809][ T9] team0 (unregistering): Port device team_slave_1 removed [ 83.679960][ T9] team0 (unregistering): Port device team_slave_0 removed [ 83.695077][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.710999][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.755534][ T4344] Bluetooth: hci0: command 0x041b tx timeout [ 83.787638][ T9] bond0 (unregistering): Released all slaves [ 83.817168][ T1339] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.915792][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.928555][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.939531][ T4257] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 83.949062][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.973254][ T4257] usb 1-1: config 0 descriptor?? [ 84.470119][ T4257] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 84.712794][ T4257] usb 1-1: USB disconnect, device number 2 2026/11/01 23:45:19 executed programs: 3 [ 85.515405][ T4257] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.836074][ T4346] Bluetooth: hci0: command 0x040f tx timeout [ 85.875457][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.887363][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.897309][ T4257] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 85.906486][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.916828][ T4257] usb 1-1: config 0 descriptor?? [ 86.404806][ T4257] savu 0003:1E7D:2D5A.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 86.652867][ T4344] usb 1-1: USB disconnect, device number 3 [ 87.517216][ T4344] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.916453][ T4345] Bluetooth: hci0: command 0x0419 tx timeout [ 87.955419][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.966497][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.976575][ T4344] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 87.985871][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.998605][ T4344] usb 1-1: config 0 descriptor?? [ 88.509885][ T4344] savu 0003:1E7D:2D5A.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 88.759471][ T4344] usb 1-1: USB disconnect, device number 4 [ 88.787659][ T4344] ================================================================== [ 88.796093][ T4344] BUG: KASAN: use-after-free in roccat_disconnect+0x236/0x240 [ 88.803746][ T4344] Read of size 4 at addr ffff88807ac0f808 by task kworker/1:17/4344 [ 88.811744][ T4344] [ 88.814106][ T4344] CPU: 1 PID: 4344 Comm: kworker/1:17 Not tainted syzkaller #0 [ 88.821770][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.833782][ T4344] Workqueue: usb_hub_wq hub_event [ 88.838993][ T4344] Call Trace: [ 88.842614][ T4344] [ 88.845588][ T4344] dump_stack_lvl+0x188/0x250 [ 88.850299][ T4344] ? show_regs_print_info+0x20/0x20 [ 88.855543][ T4344] ? load_image+0x410/0x410 [ 88.860066][ T4344] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 88.865548][ T4344] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 88.871237][ T4344] print_address_description+0x60/0x2d0 [ 88.876851][ T4344] ? roccat_disconnect+0x236/0x240 [ 88.881980][ T4344] kasan_report+0xdf/0x130 [ 88.886563][ T4344] ? roccat_disconnect+0x236/0x240 [ 88.891738][ T4344] roccat_disconnect+0x236/0x240 [ 88.896721][ T4344] savu_remove+0xe5/0x160 [ 88.901087][ T4344] ? savu_probe+0x350/0x350 [ 88.905637][ T4344] hid_device_remove+0xba/0x1b0 [ 88.910627][ T4344] ? hid_device_probe+0x590/0x590 [ 88.915665][ T4344] device_release_driver_internal+0x44c/0x710 [ 88.921762][ T4344] bus_remove_device+0x2dd/0x400 [ 88.926719][ T4344] device_del+0x63f/0xa80 [ 88.931070][ T4344] ? kill_device+0x160/0x160 [ 88.935688][ T4344] ? _raw_spin_lock_irq+0xb7/0xf0 [ 88.941100][ T4344] ? _raw_spin_lock_irqsave+0x100/0x100 [ 88.946679][ T4344] hid_destroy_device+0x66/0x100 [ 88.951726][ T4344] usbhid_disconnect+0x9b/0xc0 [ 88.956520][ T4344] usb_unbind_interface+0x203/0x870 [ 88.961772][ T4344] ? up_write+0x1b6/0x410 [ 88.966130][ T4344] ? usb_driver_release_interface+0x1c0/0x1c0 [ 88.972226][ T4344] device_release_driver_internal+0x487/0x710 [ 88.978314][ T4344] bus_remove_device+0x2dd/0x400 [ 88.983280][ T4344] device_del+0x63f/0xa80 [ 88.987671][ T4344] ? kill_device+0x160/0x160 [ 88.992516][ T4344] ? kobject_put+0x41d/0x450 [ 88.997190][ T4344] usb_disable_device+0x3e7/0x8a0 [ 89.002250][ T4344] usb_disconnect+0x33c/0x8a0 [ 89.006956][ T4344] hub_event+0x1d64/0x5260 [ 89.011438][ T4344] ? hub_post_resume+0x120/0x120 [ 89.016388][ T4344] ? read_lock_is_recursive+0x10/0x10 [ 89.021953][ T4344] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 89.027873][ T4344] ? _raw_spin_unlock+0x40/0x40 [ 89.032764][ T4344] ? _raw_spin_unlock_irq+0x1f/0x40 [ 89.037983][ T4344] process_one_work+0x867/0xff0 [ 89.042906][ T4344] ? worker_detach_from_pool+0x240/0x240 [ 89.048548][ T4344] ? lockdep_hardirqs_off+0x70/0x100 [ 89.053850][ T4344] ? _raw_spin_lock_irq+0xb7/0xf0 [ 89.058913][ T4344] ? _raw_spin_lock_irqsave+0x100/0x100 [ 89.064521][ T4344] ? wq_worker_running+0x97/0x170 [ 89.069562][ T4344] worker_thread+0xad7/0x12a0 [ 89.074279][ T4344] kthread+0x42e/0x520 [ 89.078452][ T4344] ? rcu_lock_release+0x20/0x20 [ 89.083337][ T4344] ? kthread_blkcg+0xd0/0xd0 [ 89.087954][ T4344] ret_from_fork+0x1f/0x30 [ 89.092426][ T4344] [ 89.095459][ T4344] [ 89.097788][ T4344] Allocated by task 4344: [ 89.102178][ T4344] __kasan_kmalloc+0xaf/0xe0 [ 89.106783][ T4344] roccat_connect+0x59/0x490 [ 89.111398][ T4344] savu_probe+0x1af/0x350 [ 89.115880][ T4344] hid_device_probe+0x2cb/0x590 [ 89.120936][ T4344] really_probe+0x276/0xc70 [ 89.125652][ T4344] __driver_probe_device+0x1f5/0x390 [ 89.130990][ T4344] driver_probe_device+0x4f/0x420 [ 89.136048][ T4344] __device_attach_driver+0x2b0/0x500 [ 89.141811][ T4344] bus_for_each_drv+0x184/0x210 [ 89.146722][ T4344] __device_attach+0x2a7/0x480 [ 89.151624][ T4344] bus_probe_device+0xba/0x1d0 [ 89.156437][ T4344] device_add+0xbcf/0x1050 [ 89.160872][ T4344] hid_add_device+0x361/0x500 [ 89.165575][ T4344] usbhid_probe+0xbc5/0xf50 [ 89.170096][ T4344] usb_probe_interface+0x5be/0xae0 [ 89.175221][ T4344] really_probe+0x276/0xc70 [ 89.179755][ T4344] __driver_probe_device+0x1f5/0x390 [ 89.185058][ T4344] driver_probe_device+0x4f/0x420 [ 89.190400][ T4344] __device_attach_driver+0x2b0/0x500 [ 89.195797][ T4344] bus_for_each_drv+0x184/0x210 [ 89.200670][ T4344] __device_attach+0x2a7/0x480 [ 89.205600][ T4344] bus_probe_device+0xba/0x1d0 [ 89.210388][ T4344] device_add+0xbcf/0x1050 [ 89.214818][ T4344] usb_set_configuration+0x1ad8/0x2140 [ 89.220287][ T4344] usb_generic_driver_probe+0x89/0x150 [ 89.225759][ T4344] usb_probe_device+0x126/0x250 [ 89.230634][ T4344] really_probe+0x276/0xc70 [ 89.235152][ T4344] __driver_probe_device+0x1f5/0x390 [ 89.240478][ T4344] driver_probe_device+0x4f/0x420 [ 89.245548][ T4344] __device_attach_driver+0x2b0/0x500 [ 89.250959][ T4344] bus_for_each_drv+0x184/0x210 [ 89.255817][ T4344] __device_attach+0x2a7/0x480 [ 89.260623][ T4344] bus_probe_device+0xba/0x1d0 [ 89.265421][ T4344] device_add+0xbcf/0x1050 [ 89.269851][ T4344] usb_new_device+0x9f6/0x15d0 [ 89.274656][ T4344] hub_event+0x2b8d/0x5260 [ 89.279102][ T4344] process_one_work+0x867/0xff0 [ 89.283991][ T4344] worker_thread+0xad7/0x12a0 [ 89.288692][ T4344] kthread+0x42e/0x520 [ 89.292798][ T4344] ret_from_fork+0x1f/0x30 [ 89.297263][ T4344] [ 89.299621][ T4344] Freed by task 4417: [ 89.303643][ T4344] kasan_set_track+0x4b/0x70 [ 89.308526][ T4344] kasan_set_free_info+0x1f/0x40 [ 89.313501][ T4344] ____kasan_slab_free+0xd5/0x110 [ 89.318637][ T4344] slab_free_freelist_hook+0xec/0x170 [ 89.324028][ T4344] kfree+0xef/0x2a0 [ 89.328085][ T4344] roccat_release+0x2a6/0x370 [ 89.332816][ T4344] __fput+0x212/0x8c0 [ 89.336823][ T4344] task_work_run+0x125/0x1a0 [ 89.341537][ T4344] exit_to_user_mode_loop+0x10f/0x130 [ 89.347078][ T4344] exit_to_user_mode_prepare+0xee/0x180 [ 89.352710][ T4344] syscall_exit_to_user_mode+0x16/0x40 [ 89.358194][ T4344] do_syscall_64+0x58/0xa0 [ 89.363269][ T4344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.369685][ T4344] [ 89.372027][ T4344] The buggy address belongs to the object at ffff88807ac0f800 [ 89.372027][ T4344] which belongs to the cache kmalloc-1k of size 1024 [ 89.386467][ T4344] The buggy address is located 8 bytes inside of [ 89.386467][ T4344] 1024-byte region [ffff88807ac0f800, ffff88807ac0fc00) [ 89.399953][ T4344] The buggy address belongs to the page: [ 89.405609][ T4344] page:ffffea0001eb0200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ac08 [ 89.415898][ T4344] head:ffffea0001eb0200 order:3 compound_mapcount:0 compound_pincount:0 [ 89.424240][ T4344] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 89.432298][ T4344] raw: 00fff00000010200 ffffea0001ecf600 0000000500000005 ffff888017841dc0 [ 89.441028][ T4344] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 89.449955][ T4344] page dumped because: kasan: bad access detected [ 89.456379][ T4344] page_owner tracks the page as allocated [ 89.462132][ T4344] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4181, ts 60496512751, free_ts 60423112030 [ 89.481295][ T4344] get_page_from_freelist+0x24f6/0x2670 [ 89.486999][ T4344] __alloc_pages+0x1ee/0x480 [ 89.491636][ T4344] new_slab+0xc0/0x4b0 [ 89.495720][ T4344] ___slab_alloc+0x807/0xdd0 [ 89.500465][ T4344] __kmalloc_node_track_caller+0x13d/0x3a0 [ 89.506526][ T4344] __alloc_skb+0x22c/0x750 [ 89.510975][ T4344] sk_stream_alloc_skb+0x204/0xb50 [ 89.516108][ T4344] tcp_sendmsg_locked+0xcbb/0x3330 [ 89.521367][ T4344] tcp_sendmsg+0x2b/0x40 [ 89.525633][ T4344] sock_write_iter+0x2a6/0x3a0 [ 89.530750][ T4344] vfs_write+0x748/0xd70 [ 89.535027][ T4344] ksys_write+0x153/0x260 [ 89.539461][ T4344] do_syscall_64+0x4c/0xa0 [ 89.544027][ T4344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.549959][ T4344] page last free stack trace: [ 89.554673][ T4344] free_unref_page_prepare+0x637/0x6c0 [ 89.560168][ T4344] free_unref_page+0x8f/0x2a0 [ 89.564900][ T4344] skb_release_data+0x676/0x830 [ 89.569775][ T4344] __kfree_skb+0x4c/0x60 [ 89.574038][ T4344] tcp_recvmsg_locked+0x143d/0x2690 [ 89.579256][ T4344] tcp_recvmsg+0x22a/0x760 [ 89.583689][ T4344] inet_recvmsg+0x146/0x200 [ 89.588264][ T4344] sock_read_iter+0x2c2/0x380 [ 89.592975][ T4344] vfs_read+0x75e/0xd50 [ 89.597143][ T4344] ksys_read+0x153/0x260 [ 89.601406][ T4344] do_syscall_64+0x4c/0xa0 [ 89.605833][ T4344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.611742][ T4344] [ 89.614070][ T4344] Memory state around the buggy address: [ 89.619706][ T4344] ffff88807ac0f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.627800][ T4344] ffff88807ac0f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.635884][ T4344] >ffff88807ac0f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.644072][ T4344] ^ [ 89.648426][ T4344] ffff88807ac0f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.656499][ T4344] ffff88807ac0f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.665193][ T4344] ================================================================== [ 89.673441][ T4344] Disabling lock debugging due to kernel taint [ 89.681072][ T4344] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.688328][ T4344] CPU: 1 PID: 4344 Comm: kworker/1:17 Tainted: G B syzkaller #0 [ 89.697298][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 89.707390][ T4344] Workqueue: usb_hub_wq hub_event [ 89.712464][ T4344] Call Trace: [ 89.715766][ T4344] [ 89.718723][ T4344] dump_stack_lvl+0x188/0x250 [ 89.723438][ T4344] ? show_regs_print_info+0x20/0x20 [ 89.728650][ T4344] ? load_image+0x410/0x410 [ 89.733196][ T4344] panic+0x2f8/0x850 [ 89.737107][ T4344] ? bpf_jit_dump+0xd0/0xd0 [ 89.741637][ T4344] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 89.747632][ T4344] ? _raw_spin_unlock+0x40/0x40 [ 89.752495][ T4344] ? roccat_disconnect+0x236/0x240 [ 89.757610][ T4344] check_panic_on_warn+0x80/0xa0 [ 89.762564][ T4344] ? roccat_disconnect+0x236/0x240 [ 89.767682][ T4344] end_report+0x6d/0xf0 [ 89.771845][ T4344] kasan_report+0x102/0x130 [ 89.776452][ T4344] ? roccat_disconnect+0x236/0x240 [ 89.781590][ T4344] roccat_disconnect+0x236/0x240 [ 89.786544][ T4344] savu_remove+0xe5/0x160 [ 89.790916][ T4344] ? savu_probe+0x350/0x350 [ 89.795435][ T4344] hid_device_remove+0xba/0x1b0 [ 89.800294][ T4344] ? hid_device_probe+0x590/0x590 [ 89.805438][ T4344] device_release_driver_internal+0x44c/0x710 [ 89.811525][ T4344] bus_remove_device+0x2dd/0x400 [ 89.816501][ T4344] device_del+0x63f/0xa80 [ 89.820847][ T4344] ? kill_device+0x160/0x160 [ 89.825471][ T4344] ? _raw_spin_lock_irq+0xb7/0xf0 [ 89.830505][ T4344] ? _raw_spin_lock_irqsave+0x100/0x100 [ 89.836097][ T4344] hid_destroy_device+0x66/0x100 [ 89.841073][ T4344] usbhid_disconnect+0x9b/0xc0 [ 89.845874][ T4344] usb_unbind_interface+0x203/0x870 [ 89.851115][ T4344] ? up_write+0x1b6/0x410 [ 89.855487][ T4344] ? usb_driver_release_interface+0x1c0/0x1c0 [ 89.861569][ T4344] device_release_driver_internal+0x487/0x710 [ 89.867651][ T4344] bus_remove_device+0x2dd/0x400 [ 89.872610][ T4344] device_del+0x63f/0xa80 [ 89.876978][ T4344] ? kill_device+0x160/0x160 [ 89.881581][ T4344] ? kobject_put+0x41d/0x450 [ 89.886204][ T4344] usb_disable_device+0x3e7/0x8a0 [ 89.891287][ T4344] usb_disconnect+0x33c/0x8a0 [ 89.895986][ T4344] hub_event+0x1d64/0x5260 [ 89.900430][ T4344] ? hub_post_resume+0x120/0x120 [ 89.905406][ T4344] ? read_lock_is_recursive+0x10/0x10 [ 89.910801][ T4344] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 89.916705][ T4344] ? _raw_spin_unlock+0x40/0x40 [ 89.921696][ T4344] ? _raw_spin_unlock_irq+0x1f/0x40 [ 89.926926][ T4344] process_one_work+0x867/0xff0 [ 89.931816][ T4344] ? worker_detach_from_pool+0x240/0x240 [ 89.937470][ T4344] ? lockdep_hardirqs_off+0x70/0x100 [ 89.943103][ T4344] ? _raw_spin_lock_irq+0xb7/0xf0 [ 89.948142][ T4344] ? _raw_spin_lock_irqsave+0x100/0x100 [ 89.953877][ T4344] ? wq_worker_running+0x97/0x170 [ 89.958947][ T4344] worker_thread+0xad7/0x12a0 [ 89.963648][ T4344] kthread+0x42e/0x520 [ 89.967737][ T4344] ? rcu_lock_release+0x20/0x20 [ 89.972625][ T4344] ? kthread_blkcg+0xd0/0xd0 [ 89.977569][ T4344] ret_from_fork+0x1f/0x30 [ 89.982109][ T4344] [ 89.985291][ T4344] Kernel Offset: disabled [ 89.989773][ T4344] Rebooting in 86400 seconds..