Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. 2026/05/24 07:29:27 parsed 1 programs [ 80.084730][ T5636] cgroup: Unknown subsys name 'net' [ 80.194194][ T5636] cgroup: Unknown subsys name 'cpuset' [ 80.203676][ T5636] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.651208][ T5636] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.651547][ T5656] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.974727][ T5675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.989717][ T5675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.997631][ T5675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.012188][ T5675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.021941][ T5675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.383201][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.422603][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.528362][ T810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.542033][ T810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.782703][ T24] cfg80211: failed to load regulatory.db [ 88.182934][ T5688] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.190765][ T5688] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.198310][ T5688] bridge_slave_0: entered allmulticast mode [ 88.207299][ T5688] bridge_slave_0: entered promiscuous mode [ 88.226840][ T5688] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.250037][ T5688] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.264424][ T5688] bridge_slave_1: entered allmulticast mode [ 88.272745][ T5688] bridge_slave_1: entered promiscuous mode [ 88.403147][ T5688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.419195][ T5688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.475430][ T5688] team0: Port device team_slave_0 added [ 88.484221][ T5688] team0: Port device team_slave_1 added [ 88.531576][ T5688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.538535][ T5688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.564716][ T5688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.578124][ T5688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.586361][ T5688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.615034][ T5688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.666913][ T5688] hsr_slave_0: entered promiscuous mode [ 88.674031][ T5688] hsr_slave_1: entered promiscuous mode [ 88.812123][ T5688] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.827895][ T5688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.835847][ T5688] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.852911][ T5688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.862775][ T5688] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.873388][ T5688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.883882][ T5688] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.893570][ T5688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.965301][ T5688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.988876][ T5688] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.002283][ T810] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.009739][ T810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.027559][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.034689][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.316122][ T5688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.360251][ T5688] veth0_vlan: entered promiscuous mode [ 89.373719][ T5688] veth1_vlan: entered promiscuous mode [ 89.403875][ T5688] veth0_macvtap: entered promiscuous mode [ 89.414131][ T5688] veth1_macvtap: entered promiscuous mode [ 89.434048][ T5688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.447437][ T5688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.462498][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.474137][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.487630][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.497572][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/24 07:29:39 executed programs: 0 [ 89.631317][ T4943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.640419][ T4943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.654160][ T4943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.664580][ T4943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.674824][ T4943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.734261][ T4943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.750022][ T4943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.760457][ T4943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.774681][ T4943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.790157][ T4943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.808979][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.818847][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.827010][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.837010][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.845188][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.902479][ T4943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.918722][ T4943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.938908][ T4943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.949407][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.959684][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.988208][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.999416][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.010379][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.021458][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.031021][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.429149][ T77] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.597835][ T77] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.543723][ T77] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.594110][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.612284][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.626612][ T5769] bridge_slave_0: entered allmulticast mode [ 91.635259][ T5769] bridge_slave_0: entered promiscuous mode [ 91.667305][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.675583][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.683438][ T5769] bridge_slave_1: entered allmulticast mode [ 91.692378][ T5769] bridge_slave_1: entered promiscuous mode [ 91.722103][ T4943] Bluetooth: hci0: command tx timeout [ 91.824663][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.837766][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.881273][ T50] Bluetooth: hci1: command tx timeout [ 91.887544][ T4943] Bluetooth: hci2: command tx timeout [ 91.969089][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.976745][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.984024][ T5765] bridge_slave_0: entered allmulticast mode [ 91.991825][ T5765] bridge_slave_0: entered promiscuous mode [ 92.005577][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.012846][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.020160][ T5776] bridge_slave_0: entered allmulticast mode [ 92.027375][ T5776] bridge_slave_0: entered promiscuous mode [ 92.036188][ T5769] team0: Port device team_slave_0 added [ 92.042376][ T4943] Bluetooth: hci3: command tx timeout [ 92.048038][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.055390][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.062810][ T5773] bridge_slave_0: entered allmulticast mode [ 92.069768][ T5773] bridge_slave_0: entered promiscuous mode [ 92.077879][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.085188][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.092964][ T5765] bridge_slave_1: entered allmulticast mode [ 92.099923][ T5765] bridge_slave_1: entered promiscuous mode [ 92.120745][ T4943] Bluetooth: hci4: command tx timeout [ 92.136871][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.145058][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.152874][ T5776] bridge_slave_1: entered allmulticast mode [ 92.159844][ T5776] bridge_slave_1: entered promiscuous mode [ 92.168275][ T5769] team0: Port device team_slave_1 added [ 92.174229][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.181499][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.188672][ T5773] bridge_slave_1: entered allmulticast mode [ 92.195925][ T5773] bridge_slave_1: entered promiscuous mode [ 92.274879][ T77] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.292916][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.302281][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.309450][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.316995][ T5778] bridge_slave_0: entered allmulticast mode [ 92.324244][ T5778] bridge_slave_0: entered promiscuous mode [ 92.358020][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.369373][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.378865][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.386320][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.393629][ T5778] bridge_slave_1: entered allmulticast mode [ 92.401624][ T5778] bridge_slave_1: entered promiscuous mode [ 92.410726][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.423502][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.431387][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.457755][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.471633][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.499509][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.522577][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.529618][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.555569][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.595542][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.623022][ T5776] team0: Port device team_slave_0 added [ 92.639904][ T5765] team0: Port device team_slave_0 added [ 92.648633][ T5765] team0: Port device team_slave_1 added [ 92.657059][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.669153][ T5776] team0: Port device team_slave_1 added [ 92.686631][ T5773] team0: Port device team_slave_0 added [ 92.764874][ T5773] team0: Port device team_slave_1 added [ 92.816283][ T5778] team0: Port device team_slave_0 added [ 92.823305][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.830469][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.856808][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.869444][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.876624][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.902994][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.923931][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.930953][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.957261][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.969282][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.976945][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.004894][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.017788][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.025265][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.051429][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.072307][ T5778] team0: Port device team_slave_1 added [ 93.095992][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.103064][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.129641][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.157141][ T5769] hsr_slave_0: entered promiscuous mode [ 93.164683][ T5769] hsr_slave_1: entered promiscuous mode [ 93.171133][ T5769] debugfs: 'hsr0' already exists in 'hsr' [ 93.176934][ T5769] Cannot create hsr debugfs directory [ 93.202534][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.209545][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.235727][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.267668][ T77] bridge_slave_1: left allmulticast mode [ 93.273855][ T77] bridge_slave_1: left promiscuous mode [ 93.281030][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.296305][ T77] bridge_slave_0: left allmulticast mode [ 93.302307][ T77] bridge_slave_0: left promiscuous mode [ 93.308557][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.611903][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.623899][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.634956][ T77] bond0 (unregistering): Released all slaves [ 93.673918][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.682922][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.710804][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.759777][ T5765] hsr_slave_0: entered promiscuous mode [ 93.766745][ T5765] hsr_slave_1: entered promiscuous mode [ 93.773647][ T5765] debugfs: 'hsr0' already exists in 'hsr' [ 93.779534][ T5765] Cannot create hsr debugfs directory [ 93.814173][ T4943] Bluetooth: hci0: command tx timeout [ 93.829441][ T5773] hsr_slave_0: entered promiscuous mode [ 93.836125][ T5773] hsr_slave_1: entered promiscuous mode [ 93.843113][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 93.848898][ T5773] Cannot create hsr debugfs directory [ 93.901326][ T77] hsr_slave_0: left promiscuous mode [ 93.907255][ T77] hsr_slave_1: left promiscuous mode [ 93.913865][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.922491][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.930512][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.938191][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.950715][ T77] veth1_macvtap: left promiscuous mode [ 93.956331][ T77] veth0_macvtap: left promiscuous mode [ 93.962717][ T77] veth1_vlan: left promiscuous mode [ 93.968011][ T77] veth0_vlan: left promiscuous mode [ 93.970742][ T50] Bluetooth: hci1: command tx timeout [ 93.979407][ T4943] Bluetooth: hci2: command tx timeout [ 94.120691][ T4943] Bluetooth: hci3: command tx timeout [ 94.159060][ T77] team0 (unregistering): Port device team_slave_1 removed [ 94.176145][ T77] team0 (unregistering): Port device team_slave_0 removed [ 94.200888][ T4943] Bluetooth: hci4: command tx timeout [ 94.295662][ T5776] hsr_slave_0: entered promiscuous mode [ 94.302456][ T5776] hsr_slave_1: entered promiscuous mode [ 94.332078][ T5778] hsr_slave_0: entered promiscuous mode [ 94.338451][ T5778] hsr_slave_1: entered promiscuous mode [ 94.344689][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 94.350433][ T5778] Cannot create hsr debugfs directory [ 95.026683][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 95.114846][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.132921][ T5769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.141956][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.166973][ T5769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.175443][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.187470][ T5769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.196309][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.209897][ T5769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.328954][ T5773] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.346921][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.355705][ T5773] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.368896][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.394484][ T5773] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.414681][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.425486][ T5773] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.436999][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.582269][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.599478][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.618597][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.633646][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.641827][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.653663][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.693480][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.711049][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.720070][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 95.758409][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.819804][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.862567][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.869682][ T5812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.880780][ T4943] Bluetooth: hci0: command tx timeout [ 95.934953][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.942184][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.040920][ T4943] Bluetooth: hci1: command tx timeout [ 96.041083][ T50] Bluetooth: hci2: command tx timeout [ 96.086965][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.200861][ T50] Bluetooth: hci3: command tx timeout [ 96.214266][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.241651][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.254263][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.263007][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.274653][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.282423][ T50] Bluetooth: hci4: command tx timeout [ 96.312895][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.352015][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.360169][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.374903][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.389933][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.397205][ T5812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.445200][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.457058][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.464403][ T5812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.596444][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.628103][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.639229][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.667041][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.674408][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.688306][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.699032][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.716464][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.729791][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.749097][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.766219][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.785324][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.792707][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.217821][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.351877][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.381483][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.413206][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.465830][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.473064][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.534335][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.541629][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.554874][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.608124][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.615433][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.721985][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.729264][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.840051][ T5769] veth0_vlan: entered promiscuous mode [ 97.939617][ T5769] veth1_vlan: entered promiscuous mode [ 97.961188][ T50] Bluetooth: hci0: command tx timeout [ 98.100536][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.120686][ T50] Bluetooth: hci2: command tx timeout [ 98.125180][ T4943] Bluetooth: hci1: command tx timeout [ 98.164460][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.216256][ T5769] veth0_macvtap: entered promiscuous mode [ 98.274692][ T5769] veth1_macvtap: entered promiscuous mode [ 98.284059][ T4943] Bluetooth: hci3: command tx timeout [ 98.364887][ T4943] Bluetooth: hci4: command tx timeout [ 98.408703][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.463464][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.528475][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.552668][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.579279][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.593483][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.637636][ T5778] veth0_vlan: entered promiscuous mode [ 98.694025][ T5778] veth1_vlan: entered promiscuous mode [ 98.946034][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.972482][ T5778] veth0_macvtap: entered promiscuous mode [ 98.984289][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.015347][ T5778] veth1_macvtap: entered promiscuous mode [ 99.044133][ T5773] veth0_vlan: entered promiscuous mode [ 99.118646][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.126474][ T5773] veth1_vlan: entered promiscuous mode [ 99.137883][ T810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.158498][ T810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/24 07:29:48 executed programs: 10 [ 99.186053][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.212271][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.223494][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.268146][ T1163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.289811][ T1163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.320510][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.329887][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.368718][ T5773] veth0_macvtap: entered promiscuous mode [ 99.408576][ T5773] veth1_macvtap: entered promiscuous mode [ 99.417183][ T5776] veth0_vlan: entered promiscuous mode [ 99.477486][ T5776] veth1_vlan: entered promiscuous mode [ 99.497572][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.507027][ T5765] veth0_vlan: entered promiscuous mode [ 99.531231][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.542642][ T810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.553552][ T5765] veth1_vlan: entered promiscuous mode [ 99.564230][ T810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.597276][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.620074][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.631560][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.640288][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.650051][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.679796][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.690478][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.722879][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 99.740158][ T5896] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 99.766339][ T5896] usb 2-1: config 0 has no interface number 0 [ 99.778100][ T5896] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.802622][ T5896] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 99.815360][ T5776] veth0_macvtap: entered promiscuous mode [ 99.816430][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.832628][ T5896] usb 2-1: Product: syz [ 99.836860][ T5896] usb 2-1: Manufacturer: syz [ 99.842239][ T5896] usb 2-1: SerialNumber: syz [ 99.848963][ T5765] veth0_macvtap: entered promiscuous mode [ 99.855534][ T5896] usb 2-1: config 0 descriptor?? [ 99.873037][ T5776] veth1_macvtap: entered promiscuous mode [ 99.878670][ T5896] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 99.883502][ T5765] veth1_macvtap: entered promiscuous mode [ 99.897173][ T5896] em28xx 2-1:0.132: Video interface 132 found: [ 99.911392][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.920316][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.938179][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.965649][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.979566][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.007411][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.019630][ T810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.027794][ T810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.031396][ T6017] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.049361][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.072935][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.092846][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.114606][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.141660][ T5896] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 100.153076][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.168820][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.184412][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.196885][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.211035][ T6017] usb 4-1: Using ep0 maxpacket: 32 [ 100.245139][ T6017] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 100.259417][ T5896] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 100.271627][ T6017] usb 4-1: config 0 has no interface number 0 [ 100.278800][ T5896] em28xx 2-1:0.132: board has no eeprom [ 100.291471][ T6017] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.309443][ T6017] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 100.323374][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.331874][ T6017] usb 4-1: Product: syz [ 100.336082][ T6017] usb 4-1: Manufacturer: syz [ 100.341271][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.350774][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.358209][ T6017] usb 4-1: SerialNumber: syz [ 100.363133][ T5896] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 100.371104][ T5896] em28xx 2-1:0.132: analog set to bulk mode. [ 100.371344][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.389636][ T6017] usb 4-1: config 0 descriptor?? [ 100.401086][ T1559] em28xx 2-1:0.132: Registering V4L2 extension [ 100.447415][ T6017] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 100.464330][ T5896] usb 2-1: USB disconnect, device number 2 [ 100.472719][ T6017] em28xx 4-1:0.132: Video interface 132 found: [ 100.483839][ T5896] em28xx 2-1:0.132: Disconnecting em28xx [ 100.497157][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.508488][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.553109][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 100.567498][ T24] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 100.574526][ T5812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.590213][ T24] usb 5-1: config 0 has no interface number 0 [ 100.605239][ T5812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.626605][ T24] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.649026][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.663805][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.691383][ T6017] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 100.692284][ T24] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 100.741497][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.777061][ T24] usb 5-1: Product: syz [ 100.787549][ T24] usb 5-1: Manufacturer: syz [ 100.799606][ T1559] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 100.805737][ T24] usb 5-1: SerialNumber: syz [ 100.819078][ T6017] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 100.836297][ T1559] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 100.842754][ T24] usb 5-1: config 0 descriptor?? [ 100.863424][ T1559] em28xx 2-1:0.132: No AC97 audio processor [ 100.870439][ T6017] em28xx 4-1:0.132: board has no eeprom [ 100.889492][ T24] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 100.892364][ T1559] usb 2-1: Decoder not found [ 100.908124][ T24] em28xx 5-1:0.132: Video interface 132 found: [ 100.909282][ T1559] em28xx 2-1:0.132: failed to create media graph [ 100.922750][ T1559] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 100.941853][ T6017] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 100.963330][ T1559] em28xx 2-1:0.132: Remote control support is not available for this card. [ 100.974424][ T6017] em28xx 4-1:0.132: analog set to bulk mode. [ 100.986406][ T5896] em28xx 2-1:0.132: Closing input extension [ 101.001645][ T6017] usb 4-1: USB disconnect, device number 2 [ 101.015852][ T6017] em28xx 4-1:0.132: Disconnecting em28xx [ 101.022429][ T5751] em28xx 4-1:0.132: Registering V4L2 extension [ 101.055636][ T5896] em28xx 2-1:0.132: Freeing device [ 101.111360][ T5360] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.143345][ T24] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 101.151196][ T1559] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.222595][ T5751] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 101.230051][ T5751] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 101.233983][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 101.244709][ T5751] em28xx 4-1:0.132: No AC97 audio processor [ 101.266788][ T5751] usb 4-1: Decoder not found [ 101.267987][ T24] em28xx 5-1:0.132: board has no eeprom [ 101.272222][ T5751] em28xx 4-1:0.132: failed to create media graph [ 101.285010][ T5751] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 101.292261][ T5360] usb 3-1: Using ep0 maxpacket: 32 [ 101.297946][ T5751] em28xx 4-1:0.132: Remote control support is not available for this card. [ 101.298058][ T6031] ================================================================== [ 101.314602][ T6031] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0 [ 101.321814][ T6031] Read of size 4 at addr ffff8880595c4860 by task v4l_id/6031 [ 101.329261][ T6031] [ 101.331678][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 101.331695][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.331709][ T6031] Call Trace: [ 101.331719][ T6031] [ 101.331726][ T6031] dump_stack_lvl+0xe8/0x150 [ 101.331745][ T6031] print_address_description+0x55/0x1e0 [ 101.331760][ T6031] ? v4l2_open+0x395/0x3a0 [ 101.331780][ T6031] print_report+0x58/0x70 [ 101.331792][ T6031] kasan_report+0x117/0x150 [ 101.331814][ T6031] ? v4l2_open+0x395/0x3a0 [ 101.331835][ T6031] v4l2_open+0x395/0x3a0 [ 101.331856][ T6031] chrdev_open+0x4cd/0x5e0 [ 101.331871][ T6031] ? __pfx_chrdev_open+0x10/0x10 [ 101.331885][ T6031] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 101.331907][ T6031] ? __pfx_chrdev_open+0x10/0x10 [ 101.331920][ T6031] do_dentry_open+0x785/0x14e0 [ 101.331946][ T6031] vfs_open+0x3b/0x340 [ 101.331961][ T6031] ? path_openat+0x2df0/0x3860 [ 101.331981][ T6031] path_openat+0x2e08/0x3860 [ 101.332005][ T6031] ? __pfx_stack_trace_save+0x10/0x10 [ 101.332027][ T6031] ? stack_depot_save_flags+0x33/0x810 [ 101.332049][ T6031] ? __pfx_path_openat+0x10/0x10 [ 101.332067][ T6031] ? __x64_sys_openat+0x138/0x170 [ 101.332085][ T6031] ? __lock_acquire+0x6b5/0x2cf0 [ 101.332104][ T6031] do_file_open+0x23e/0x4a0 [ 101.332127][ T6031] ? __pfx_do_file_open+0x10/0x10 [ 101.332153][ T6031] ? _raw_spin_unlock+0x28/0x50 [ 101.332173][ T6031] ? alloc_fd+0x64b/0x6c0 [ 101.332192][ T6031] do_sys_openat2+0x113/0x200 [ 101.332209][ T6031] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.332225][ T6031] ? exc_page_fault+0x6a/0xc0 [ 101.332247][ T6031] ? do_user_addr_fault+0xc6f/0x1340 [ 101.332263][ T6031] __x64_sys_openat+0x138/0x170 [ 101.332280][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.332294][ T6031] do_syscall_64+0x15f/0xf80 [ 101.332307][ T6031] ? trace_irq_disable+0x3b/0x140 [ 101.332328][ T6031] ? clear_bhb_loop+0x40/0x90 [ 101.332344][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.332358][ T6031] RIP: 0033:0x7fd99eca7407 [ 101.332379][ T6031] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 101.332391][ T6031] RSP: 002b:00007fff8411bd90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 101.332406][ T6031] RAX: ffffffffffffffda RBX: 00007fd99f42f880 RCX: 00007fd99eca7407 [ 101.332416][ T6031] RDX: 0000000000000000 RSI: 00007fff8411cf1c RDI: ffffffffffffff9c [ 101.332426][ T6031] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 101.332434][ T6031] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 101.332442][ T6031] R13: 00007fff8411bfe0 R14: 00007fd99f596000 R15: 000055ec3d8c54d8 [ 101.332458][ T6031] [ 101.332463][ T6031] [ 101.601835][ T6031] Allocated by task 5751: [ 101.606250][ T6031] kasan_save_track+0x3e/0x80 [ 101.610940][ T6031] __kasan_kmalloc+0x93/0xb0 [ 101.615536][ T6031] __kmalloc_cache_noprof+0x31c/0x660 [ 101.620908][ T6031] em28xx_v4l2_init+0x10b/0x2eb0 [ 101.626307][ T6031] em28xx_init_extension+0x120/0x1c0 [ 101.631599][ T6031] process_scheduled_works+0xb5d/0x1860 [ 101.637141][ T6031] worker_thread+0xa53/0xfc0 [ 101.641783][ T6031] kthread+0x389/0x470 [ 101.645846][ T6031] ret_from_fork+0x514/0xb70 [ 101.650613][ T6031] ret_from_fork_asm+0x1a/0x30 [ 101.655388][ T6031] [ 101.657706][ T6031] Freed by task 5751: [ 101.661675][ T6031] kasan_save_track+0x3e/0x80 [ 101.666364][ T6031] kasan_save_free_info+0x46/0x50 [ 101.671497][ T6031] __kasan_slab_free+0x5c/0x80 [ 101.676262][ T6031] kfree+0x1c5/0x640 [ 101.680155][ T6031] em28xx_v4l2_init+0x1685/0x2eb0 [ 101.685263][ T6031] em28xx_init_extension+0x120/0x1c0 [ 101.690713][ T6031] process_scheduled_works+0xb5d/0x1860 [ 101.696240][ T6031] worker_thread+0xa53/0xfc0 [ 101.700811][ T6031] kthread+0x389/0x470 [ 101.704953][ T6031] ret_from_fork+0x514/0xb70 [ 101.709525][ T6031] ret_from_fork_asm+0x1a/0x30 [ 101.714276][ T6031] [ 101.716685][ T6031] The buggy address belongs to the object at ffff8880595c4000 [ 101.716685][ T6031] which belongs to the cache kmalloc-8k of size 8192 [ 101.730811][ T6031] The buggy address is located 2144 bytes inside of [ 101.730811][ T6031] freed 8192-byte region [ffff8880595c4000, ffff8880595c6000) [ 101.744770][ T6031] [ 101.747085][ T6031] The buggy address belongs to the physical page: [ 101.753495][ T6031] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x595c0 [ 101.762245][ T6031] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 101.770732][ T6031] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 101.778268][ T6031] page_type: f5(slab) [ 101.782239][ T6031] raw: 00fff00000000040 ffff88813fe1b280 dead000000000122 0000000000000000 [ 101.790832][ T6031] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 101.799398][ T6031] head: 00fff00000000040 ffff88813fe1b280 dead000000000122 0000000000000000 [ 101.808064][ T6031] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 101.816729][ T6031] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 101.825391][ T6031] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 101.834130][ T6031] page dumped because: kasan: bad access detected [ 101.840638][ T6031] page_owner tracks the page as allocated [ 101.846339][ T6031] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 57, tgid 57 (kworker/u8:4), ts 100732434894, free_ts 87192678993 [ 101.867432][ T6031] post_alloc_hook+0x22d/0x280 [ 101.872284][ T6031] get_page_from_freelist+0x24ba/0x2540 [ 101.877829][ T6031] __alloc_frozen_pages_noprof+0x18d/0x380 [ 101.883627][ T6031] allocate_slab+0x77/0x660 [ 101.888144][ T6031] refill_objects+0x339/0x3d0 [ 101.892832][ T6031] __pcs_replace_empty_main+0x321/0x720 [ 101.898455][ T6031] __kmalloc_noprof+0x474/0x760 [ 101.903294][ T6031] __sta_info_alloc+0xce5/0x2630 [ 101.908223][ T6031] ieee80211_ibss_add_sta+0x5b7/0x870 [ 101.913637][ T6031] ieee80211_ibss_rx_queued_mgmt+0x155e/0x2cb0 [ 101.920186][ T6031] ieee80211_iface_work+0x845/0x1380 [ 101.925509][ T6031] cfg80211_wiphy_work+0x2cf/0x460 [ 101.931060][ T6031] process_scheduled_works+0xb5d/0x1860 [ 101.936610][ T6031] worker_thread+0xa53/0xfc0 [ 101.941227][ T6031] kthread+0x389/0x470 [ 101.945730][ T6031] ret_from_fork+0x514/0xb70 [ 101.950308][ T6031] page last free pid 5698 tgid 5698 stack trace: [ 101.956715][ T6031] __free_frozen_pages+0xbc7/0xd30 [ 101.961845][ T6031] vfree+0x1d1/0x2f0 [ 101.965739][ T6031] kcov_close+0x28/0x50 [ 101.969903][ T6031] __fput+0x44f/0xa60 [ 101.974053][ T6031] task_work_run+0x1d9/0x270 [ 101.978749][ T6031] do_exit+0x70f/0x22c0 [ 101.982998][ T6031] do_group_exit+0x21b/0x2d0 [ 101.987605][ T6031] get_signal+0x1284/0x1330 [ 101.992384][ T6031] arch_do_signal_or_restart+0xbc/0x840 [ 101.998031][ T6031] exit_to_user_mode_loop+0x8c/0x4d0 [ 102.003304][ T6031] do_syscall_64+0x33e/0xf80 [ 102.007889][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.013950][ T6031] [ 102.016257][ T6031] Memory state around the buggy address: [ 102.021955][ T6031] ffff8880595c4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.029998][ T6031] ffff8880595c4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.038042][ T6031] >ffff8880595c4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.046088][ T6031] ^ [ 102.053270][ T6031] ffff8880595c4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.061318][ T6031] ffff8880595c4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.069538][ T6031] ================================================================== [ 102.111351][ T24] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 102.133558][ T24] em28xx 5-1:0.132: analog set to bulk mode. [ 102.149945][ T5931] em28xx 5-1:0.132: Registering V4L2 extension [ 102.184517][ T5360] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 102.193180][ T5360] usb 3-1: config 0 has no interface number 0 [ 102.198940][ T1559] usb 1-1: Using ep0 maxpacket: 32 [ 102.200798][ T5360] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.216218][ T24] usb 5-1: USB disconnect, device number 2 [ 102.226333][ T24] em28xx 5-1:0.132: Disconnecting em28xx [ 102.232150][ T5896] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.247367][ T6031] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.254706][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 102.263657][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.273729][ T6031] Call Trace: [ 102.277015][ T6031] [ 102.279957][ T6031] vpanic+0x56c/0xa60 [ 102.283957][ T6031] ? __pfx_vpanic+0x10/0x10 [ 102.288491][ T6031] ? __pfx___schedule+0x10/0x10 [ 102.293367][ T6031] panic+0xc5/0xd0 [ 102.297111][ T6031] ? __pfx_panic+0x10/0x10 [ 102.301543][ T6031] ? preempt_schedule_thunk+0x16/0x30 [ 102.306998][ T6031] ? v4l2_open+0x395/0x3a0 [ 102.311406][ T6031] check_panic_on_warn+0x89/0xb0 [ 102.316369][ T6031] ? v4l2_open+0x395/0x3a0 [ 102.320782][ T6031] end_report+0x73/0x170 [ 102.325034][ T6031] ? v4l2_open+0x395/0x3a0 [ 102.329472][ T6031] kasan_report+0x128/0x150 [ 102.334091][ T6031] ? v4l2_open+0x395/0x3a0 [ 102.338533][ T6031] v4l2_open+0x395/0x3a0 [ 102.342814][ T6031] chrdev_open+0x4cd/0x5e0 [ 102.347254][ T6031] ? __pfx_chrdev_open+0x10/0x10 [ 102.352215][ T6031] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 102.358657][ T6031] ? __pfx_chrdev_open+0x10/0x10 [ 102.363607][ T6031] do_dentry_open+0x785/0x14e0 [ 102.368398][ T6031] vfs_open+0x3b/0x340 [ 102.372485][ T6031] ? path_openat+0x2df0/0x3860 [ 102.377269][ T6031] path_openat+0x2e08/0x3860 [ 102.381892][ T6031] ? __pfx_stack_trace_save+0x10/0x10 [ 102.387293][ T6031] ? stack_depot_save_flags+0x33/0x810 [ 102.392868][ T6031] ? __pfx_path_openat+0x10/0x10 [ 102.397831][ T6031] ? __x64_sys_openat+0x138/0x170 [ 102.402870][ T6031] ? __lock_acquire+0x6b5/0x2cf0 [ 102.407937][ T6031] do_file_open+0x23e/0x4a0 [ 102.412708][ T6031] ? __pfx_do_file_open+0x10/0x10 [ 102.417795][ T6031] ? _raw_spin_unlock+0x28/0x50 [ 102.422641][ T6031] ? alloc_fd+0x64b/0x6c0 [ 102.426966][ T6031] do_sys_openat2+0x113/0x200 [ 102.431649][ T6031] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.436955][ T6031] ? exc_page_fault+0x6a/0xc0 [ 102.441674][ T6031] ? do_user_addr_fault+0xc6f/0x1340 [ 102.446976][ T6031] __x64_sys_openat+0x138/0x170 [ 102.451856][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.457939][ T6031] do_syscall_64+0x15f/0xf80 [ 102.462537][ T6031] ? trace_irq_disable+0x3b/0x140 [ 102.467574][ T6031] ? clear_bhb_loop+0x40/0x90 [ 102.472255][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.478153][ T6031] RIP: 0033:0x7fd99eca7407 [ 102.482581][ T6031] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 102.502293][ T6031] RSP: 002b:00007fff8411bd90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 102.510805][ T6031] RAX: ffffffffffffffda RBX: 00007fd99f42f880 RCX: 00007fd99eca7407 [ 102.518793][ T6031] RDX: 0000000000000000 RSI: 00007fff8411cf1c RDI: ffffffffffffff9c [ 102.526774][ T6031] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 102.534826][ T6031] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 102.543061][ T6031] R13: 00007fff8411bfe0 R14: 00007fd99f596000 R15: 000055ec3d8c54d8 [ 102.551127][ T6031] [ 102.554586][ T6031] Kernel Offset: disabled [ 102.558935][ T6031] Rebooting in 86400 seconds..