Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. 2026/03/14 14:15:19 parsed 1 programs [ 88.709819][ T5830] cgroup: Unknown subsys name 'net' [ 88.820041][ T5830] cgroup: Unknown subsys name 'cpuset' [ 88.832475][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.775434][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.068712][ T10] cfg80211: failed to load regulatory.db [ 94.227976][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.857872][ T5879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.887823][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.906347][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.919720][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.930627][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.983031][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.998888][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.307506][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.316465][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.900466][ T5889] chnl_net:caif_netlink_parms(): no params data found [ 97.520651][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.548941][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.556344][ T5889] bridge_slave_0: entered allmulticast mode [ 97.564503][ T5889] bridge_slave_0: entered promiscuous mode [ 97.611851][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.622950][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.632183][ T5889] bridge_slave_1: entered allmulticast mode [ 97.640540][ T5889] bridge_slave_1: entered promiscuous mode [ 97.690885][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.703979][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.810774][ T5889] team0: Port device team_slave_0 added [ 97.868873][ T5889] team0: Port device team_slave_1 added [ 97.918264][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.925697][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.953572][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.968655][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.975836][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.006766][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.080729][ T5889] hsr_slave_0: entered promiscuous mode [ 98.090359][ T5889] hsr_slave_1: entered promiscuous mode [ 98.319377][ T5889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.331671][ T5889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.342190][ T5889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.355694][ T5889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.399036][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.406616][ T5889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.459191][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.468314][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.494989][ T5889] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.508314][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.516240][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.531633][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.539012][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.715730][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.764568][ T5889] veth0_vlan: entered promiscuous mode [ 98.777026][ T5889] veth1_vlan: entered promiscuous mode [ 98.807600][ T5889] veth0_macvtap: entered promiscuous mode [ 98.818069][ T5889] veth1_macvtap: entered promiscuous mode [ 98.835371][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.850301][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.865112][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.874930][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.887523][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.897392][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/03/14 14:15:32 executed programs: 0 [ 99.075941][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.084651][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.094291][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.105331][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.113740][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.158427][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.170663][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.187709][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.196328][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.206717][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.401265][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.417006][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.426181][ T5955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.434847][ T5955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.442983][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.451965][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.459285][ T5955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.467269][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.477948][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.480369][ T5955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.493566][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.494719][ T5955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.516642][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.517019][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.541519][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.079131][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.214540][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.302125][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 100.333718][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 100.611284][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.621847][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.631066][ T5946] bridge_slave_0: entered allmulticast mode [ 100.640787][ T5946] bridge_slave_0: entered promiscuous mode [ 100.692585][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.706733][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.718055][ T5946] bridge_slave_1: entered allmulticast mode [ 100.730671][ T5946] bridge_slave_1: entered promiscuous mode [ 100.741334][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.752141][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.760326][ T5944] bridge_slave_0: entered allmulticast mode [ 100.767796][ T5944] bridge_slave_0: entered promiscuous mode [ 100.813254][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.821266][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.829523][ T5944] bridge_slave_1: entered allmulticast mode [ 100.838145][ T5944] bridge_slave_1: entered promiscuous mode [ 100.863456][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 100.900789][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.961626][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.972693][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 100.994346][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.055848][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.070533][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 101.099848][ T5946] team0: Port device team_slave_0 added [ 101.110802][ T5946] team0: Port device team_slave_1 added [ 101.187426][ T5959] Bluetooth: hci0: command tx timeout [ 101.202893][ T5944] team0: Port device team_slave_0 added [ 101.260756][ T5944] team0: Port device team_slave_1 added [ 101.267147][ T5959] Bluetooth: hci1: command tx timeout [ 101.301985][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.309858][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.339160][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.354190][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.361551][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.392168][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.422854][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.453822][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.461597][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.470672][ T5951] bridge_slave_0: entered allmulticast mode [ 101.480501][ T5951] bridge_slave_0: entered promiscuous mode [ 101.490844][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.498639][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.506648][ T5951] bridge_slave_1: entered allmulticast mode [ 101.515399][ T5951] bridge_slave_1: entered promiscuous mode [ 101.540222][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.547667][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.577897][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.589747][ T5879] Bluetooth: hci4: command tx timeout [ 101.597309][ T5955] Bluetooth: hci3: command tx timeout [ 101.604857][ T5959] Bluetooth: hci2: command tx timeout [ 101.637451][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.647055][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.654884][ T5950] bridge_slave_0: entered allmulticast mode [ 101.662560][ T5950] bridge_slave_0: entered promiscuous mode [ 101.683224][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.690898][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.699554][ T5952] bridge_slave_0: entered allmulticast mode [ 101.708896][ T5952] bridge_slave_0: entered promiscuous mode [ 101.722269][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.729594][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.759999][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.779737][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.789584][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.799098][ T5950] bridge_slave_1: entered allmulticast mode [ 101.808211][ T5950] bridge_slave_1: entered promiscuous mode [ 101.831964][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.841946][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.849625][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.857042][ T5952] bridge_slave_1: entered allmulticast mode [ 101.864598][ T5952] bridge_slave_1: entered promiscuous mode [ 101.901610][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.934167][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.969913][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.027572][ T5944] hsr_slave_0: entered promiscuous mode [ 102.035652][ T5944] hsr_slave_1: entered promiscuous mode [ 102.044739][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 102.051527][ T5944] Cannot create hsr debugfs directory [ 102.068805][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.098281][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.113389][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.130986][ T5946] hsr_slave_0: entered promiscuous mode [ 102.138096][ T5946] hsr_slave_1: entered promiscuous mode [ 102.145362][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 102.151612][ T5946] Cannot create hsr debugfs directory [ 102.208609][ T5951] team0: Port device team_slave_0 added [ 102.218199][ T5952] team0: Port device team_slave_0 added [ 102.230812][ T5950] team0: Port device team_slave_0 added [ 102.257091][ T5951] team0: Port device team_slave_1 added [ 102.290168][ T5952] team0: Port device team_slave_1 added [ 102.300804][ T5950] team0: Port device team_slave_1 added [ 102.407127][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.414489][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.441255][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.491332][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.499241][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.526707][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.547186][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.554175][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.583464][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.612450][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.620114][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.648115][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.660231][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.668623][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.696260][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.749754][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.756925][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.783602][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.889079][ T5950] hsr_slave_0: entered promiscuous mode [ 102.897741][ T5950] hsr_slave_1: entered promiscuous mode [ 102.904195][ T5950] debugfs: 'hsr0' already exists in 'hsr' [ 102.910306][ T5950] Cannot create hsr debugfs directory [ 102.986687][ T13] bridge_slave_1: left allmulticast mode [ 102.993251][ T13] bridge_slave_1: left promiscuous mode [ 103.002053][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.016459][ T13] bridge_slave_0: left allmulticast mode [ 103.022233][ T13] bridge_slave_0: left promiscuous mode [ 103.029492][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.227940][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.239885][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.250449][ T13] bond0 (unregistering): Released all slaves [ 103.266862][ T5959] Bluetooth: hci0: command tx timeout [ 103.274585][ T5951] hsr_slave_0: entered promiscuous mode [ 103.281290][ T5951] hsr_slave_1: entered promiscuous mode [ 103.288964][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 103.295815][ T5951] Cannot create hsr debugfs directory [ 103.346574][ T5959] Bluetooth: hci1: command tx timeout [ 103.459548][ T5952] hsr_slave_0: entered promiscuous mode [ 103.465843][ T5952] hsr_slave_1: entered promiscuous mode [ 103.472828][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 103.478727][ T5952] Cannot create hsr debugfs directory [ 103.489848][ T13] hsr_slave_0: left promiscuous mode [ 103.496130][ T13] hsr_slave_1: left promiscuous mode [ 103.502750][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.511286][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.520807][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.529423][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.547682][ T13] veth1_macvtap: left promiscuous mode [ 103.554309][ T13] veth0_macvtap: left promiscuous mode [ 103.560717][ T13] veth1_vlan: left promiscuous mode [ 103.566511][ T13] veth0_vlan: left promiscuous mode [ 103.666717][ T5879] Bluetooth: hci4: command tx timeout [ 103.673995][ T5879] Bluetooth: hci3: command tx timeout [ 103.680467][ T5959] Bluetooth: hci2: command tx timeout [ 103.781966][ T13] team0 (unregistering): Port device team_slave_1 removed [ 103.803094][ T13] team0 (unregistering): Port device team_slave_0 removed [ 104.409767][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.428689][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.442763][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.461318][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.513927][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.525969][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.552713][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.566676][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.656541][ T5951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.670633][ T5951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.680608][ T5951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.694256][ T5951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.792201][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.812297][ T5952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.824871][ T5952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.840666][ T5952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.873597][ T5952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.902845][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.947706][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.955625][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.014910][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.022857][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.034500][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.072455][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.083789][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.112791][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.232341][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.275880][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.337792][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.349130][ T5959] Bluetooth: hci0: command tx timeout [ 105.379968][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.403007][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.418549][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.425837][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.433862][ T5959] Bluetooth: hci1: command tx timeout [ 105.454889][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.462514][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.496896][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.504057][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.535030][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.562215][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.570779][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.583908][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.593318][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.624902][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.654705][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.670338][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.677943][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.756785][ T5959] Bluetooth: hci2: command tx timeout [ 105.761467][ T5955] Bluetooth: hci4: command tx timeout [ 105.768108][ T5879] Bluetooth: hci3: command tx timeout [ 105.771107][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.841326][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.849134][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.891116][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.898664][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.089135][ T5946] veth0_vlan: entered promiscuous mode [ 106.159375][ T5946] veth1_vlan: entered promiscuous mode [ 106.274444][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.339696][ T5946] veth0_macvtap: entered promiscuous mode [ 106.404409][ T5946] veth1_macvtap: entered promiscuous mode [ 106.510289][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.533124][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.584970][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.611484][ T5952] veth0_vlan: entered promiscuous mode [ 106.644526][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.668493][ T177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.695306][ T177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.709023][ T177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.733969][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.762916][ T5952] veth1_vlan: entered promiscuous mode [ 106.786874][ T177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.973276][ T5952] veth0_macvtap: entered promiscuous mode [ 107.015004][ T5944] veth0_vlan: entered promiscuous mode [ 107.023371][ T5952] veth1_macvtap: entered promiscuous mode [ 107.048588][ T379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.071609][ T5950] veth0_vlan: entered promiscuous mode [ 107.076530][ T379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.101245][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.143955][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.155269][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.165006][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.177086][ T5944] veth1_vlan: entered promiscuous mode [ 107.193495][ T5950] veth1_vlan: entered promiscuous mode [ 107.219020][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 2026/03/14 14:15:41 executed programs: 10 [ 107.247363][ T5951] veth0_vlan: entered promiscuous mode [ 107.257371][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.311963][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.324390][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.350934][ T5950] veth0_macvtap: entered promiscuous mode [ 107.372503][ T5951] veth1_vlan: entered promiscuous mode [ 107.383962][ T5950] veth1_macvtap: entered promiscuous mode [ 107.426292][ T5879] Bluetooth: hci0: command tx timeout [ 107.482534][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.502371][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.512630][ T5879] Bluetooth: hci1: command tx timeout [ 107.515275][ T5951] veth0_macvtap: entered promiscuous mode [ 107.532039][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.549312][ T6004] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.553741][ T5944] veth0_macvtap: entered promiscuous mode [ 107.573372][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.601589][ T5944] veth1_macvtap: entered promiscuous mode [ 107.613533][ T5951] veth1_macvtap: entered promiscuous mode [ 107.634267][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.643982][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.671827][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.680888][ T379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.692821][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.703197][ T379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.726160][ T6004] usb 2-1: Using ep0 maxpacket: 32 [ 107.743330][ T6004] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 107.761113][ T6004] usb 2-1: config 0 has no interface number 0 [ 107.769123][ T6004] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.785815][ T6004] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 107.801933][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.824526][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.834692][ T5879] Bluetooth: hci2: command tx timeout [ 107.836300][ T5879] Bluetooth: hci3: command tx timeout [ 107.847544][ T5955] Bluetooth: hci4: command tx timeout [ 107.856696][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.874484][ T6004] usb 2-1: Product: syz [ 107.879913][ T6004] usb 2-1: Manufacturer: syz [ 107.885238][ T6004] usb 2-1: SerialNumber: syz [ 107.908853][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.933405][ T6004] usb 2-1: config 0 descriptor?? [ 107.943263][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.960663][ T6004] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 107.974823][ T6004] em28xx 2-1:0.132: Video interface 132 found: [ 107.994143][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.006278][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.025199][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.025289][ T379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.044004][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.046161][ T379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.076308][ T5997] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.084653][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.112623][ T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.123554][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.159003][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.175788][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.199767][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.217256][ T6004] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 108.249797][ T5997] usb 4-1: Using ep0 maxpacket: 32 [ 108.267703][ T5997] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 108.282716][ T5997] usb 4-1: config 0 has no interface number 0 [ 108.320754][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.326968][ T5997] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.332988][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.344079][ T6004] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 108.361275][ T6004] em28xx 2-1:0.132: board has no eeprom [ 108.388118][ T5997] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 108.404890][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.414377][ T5997] usb 4-1: Product: syz [ 108.419646][ T5997] usb 4-1: Manufacturer: syz [ 108.424800][ T5997] usb 4-1: SerialNumber: syz [ 108.441165][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.442443][ T5997] usb 4-1: config 0 descriptor?? [ 108.464023][ T5997] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 108.467786][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.476146][ T6004] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 108.497323][ T5997] em28xx 4-1:0.132: Video interface 132 found: [ 108.506217][ T379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.507540][ T6004] em28xx 2-1:0.132: analog set to bulk mode. [ 108.514322][ T379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.536716][ T6018] em28xx 2-1:0.132: Registering V4L2 extension [ 108.544028][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.618545][ T6004] usb 2-1: USB disconnect, device number 2 [ 108.643153][ T6004] em28xx 2-1:0.132: Disconnecting em28xx [ 108.658905][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.688987][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.710247][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 108.716574][ T5997] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 108.741195][ T24] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 108.771300][ T24] usb 3-1: config 0 has no interface number 0 [ 108.792702][ T24] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.819530][ T5997] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 108.834079][ T5997] em28xx 4-1:0.132: board has no eeprom [ 108.843666][ T24] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 108.876232][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.925194][ T24] usb 3-1: Product: syz [ 108.936120][ T5997] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 108.948125][ T24] usb 3-1: Manufacturer: syz [ 108.975797][ T24] usb 3-1: SerialNumber: syz [ 108.988840][ T5997] em28xx 4-1:0.132: analog set to bulk mode. [ 109.015727][ T24] usb 3-1: config 0 descriptor?? [ 109.029170][ T5935] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.035764][ T6018] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 109.053699][ T5997] usb 4-1: USB disconnect, device number 2 [ 109.071046][ T6018] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 109.080675][ T5997] em28xx 4-1:0.132: Disconnecting em28xx [ 109.093446][ T6018] em28xx 2-1:0.132: No AC97 audio processor [ 109.124844][ T24] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 109.137358][ T24] em28xx 3-1:0.132: Video interface 132 found: [ 109.153724][ T6018] usb 2-1: Decoder not found [ 109.160099][ T6018] em28xx 2-1:0.132: failed to create media graph [ 109.167920][ T6018] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 109.182253][ T6018] em28xx 2-1:0.132: Remote control support is not available for this card. [ 109.189225][ T6063] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.201048][ T6055] em28xx 4-1:0.132: Registering V4L2 extension [ 109.227335][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 109.242075][ T5935] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 109.254683][ T5935] usb 5-1: config 0 has no interface number 0 [ 109.261733][ T5935] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.308638][ T5935] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 109.320217][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.334121][ T5935] usb 5-1: Product: syz [ 109.336527][ T24] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 109.339432][ T5935] usb 5-1: Manufacturer: syz [ 109.352126][ T5935] usb 5-1: SerialNumber: syz [ 109.368133][ T5935] usb 5-1: config 0 descriptor?? [ 109.385889][ T5935] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 109.396821][ T5935] em28xx 5-1:0.132: Video interface 132 found: [ 109.407764][ T6063] usb 1-1: Using ep0 maxpacket: 32 [ 109.410364][ T6055] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 109.418374][ T6063] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 109.430625][ T24] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 109.431052][ T6063] usb 1-1: config 0 has no interface number 0 [ 109.444143][ T6055] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 109.453995][ T24] em28xx 3-1:0.132: board has no eeprom [ 109.460446][ T6055] em28xx 4-1:0.132: No AC97 audio processor [ 109.467713][ T6063] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.471078][ T6055] usb 4-1: Decoder not found [ 109.483620][ T6063] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 109.484092][ T6055] em28xx 4-1:0.132: failed to create media graph [ 109.496488][ T6063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.503249][ T6055] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 109.518801][ T6063] usb 1-1: Product: syz [ 109.525389][ T6055] em28xx 4-1:0.132: Remote control support is not available for this card. [ 109.525469][ T6004] em28xx 2-1:0.132: Closing input extension [ 109.538704][ T6063] usb 1-1: Manufacturer: syz [ 109.544290][ T24] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 109.554996][ T6063] usb 1-1: SerialNumber: syz [ 109.559746][ T24] em28xx 3-1:0.132: analog set to bulk mode. [ 109.574498][ T5997] em28xx 4-1:0.132: Closing input extension [ 109.577634][ T6063] usb 1-1: config 0 descriptor?? [ 109.604754][ T6055] em28xx 3-1:0.132: Registering V4L2 extension [ 109.605292][ T6063] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 109.618406][ T6004] em28xx 2-1:0.132: Freeing device [ 109.630317][ T6063] em28xx 1-1:0.132: Video interface 132 found: [ 109.633918][ T5997] em28xx 4-1:0.132: Freeing device [ 109.652740][ T24] usb 3-1: USB disconnect, device number 2 [ 109.658306][ T5935] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 109.669527][ T24] em28xx 3-1:0.132: Disconnecting em28xx [ 109.773054][ T5935] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 109.805195][ T5935] em28xx 5-1:0.132: board has no eeprom [ 109.861775][ T6063] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 109.896944][ T5935] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 109.930029][ T5935] em28xx 5-1:0.132: analog set to bulk mode. [ 109.938690][ T6063] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 109.955465][ T6055] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 109.963218][ T6055] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 109.970723][ T5935] usb 5-1: USB disconnect, device number 2 [ 109.970885][ T6055] em28xx 3-1:0.132: No AC97 audio processor [ 109.976697][ T6063] em28xx 1-1:0.132: board has no eeprom [ 109.994371][ T6055] usb 3-1: Decoder not found [ 109.994804][ T5935] em28xx 5-1:0.132: Disconnecting em28xx [ 110.006792][ T5997] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.015432][ T6004] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.035986][ T6055] em28xx 3-1:0.132: failed to create media graph [ 110.037137][ T6063] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 110.042524][ T6055] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 110.072094][ T6063] em28xx 1-1:0.132: analog set to bulk mode. [ 110.101818][ T6063] usb 1-1: USB disconnect, device number 2 [ 110.102182][ T6055] em28xx 3-1:0.132: Remote control support is not available for this card. [ 110.119737][ T6077] ================================================================== [ 110.121512][ T24] em28xx 3-1:0.132: Closing input extension [ 110.129520][ T6077] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 110.129559][ T6077] Read of size 8 at addr ffff88807e16c748 by task v4l_id/6077 [ 110.129574][ T6077] [ 110.129584][ T6077] CPU: 0 UID: 0 PID: 6077 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 110.129603][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.129613][ T6077] Call Trace: [ 110.129622][ T6077] [ 110.129629][ T6077] dump_stack_lvl+0xe8/0x150 [ 110.129653][ T6077] print_report+0xba/0x230 [ 110.129673][ T6077] ? v4l2_fh_open+0xac/0x420 [ 110.129692][ T6077] kasan_report+0x117/0x150 [ 110.129715][ T6077] ? v4l2_fh_open+0xac/0x420 [ 110.129736][ T6077] v4l2_fh_open+0xac/0x420 [ 110.129754][ T6077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.129776][ T6077] em28xx_v4l2_open+0x157/0x9a0 [ 110.129792][ T6077] ? do_raw_spin_lock+0x12b/0x2f0 [ 110.129818][ T6077] v4l2_open+0x1bf/0x3a0 [ 110.129841][ T6077] chrdev_open+0x4cd/0x5e0 [ 110.129861][ T6077] ? __pfx_chrdev_open+0x10/0x10 [ 110.129887][ T6077] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 110.129906][ T6077] ? __pfx_chrdev_open+0x10/0x10 [ 110.129923][ T6077] do_dentry_open+0x785/0x14e0 [ 110.129949][ T6077] vfs_open+0x3b/0x340 [ 110.129968][ T6077] ? path_openat+0x2df0/0x3860 [ 110.129986][ T6077] path_openat+0x2e08/0x3860 [ 110.130008][ T6077] ? __pfx_stack_trace_save+0x10/0x10 [ 110.130025][ T6077] ? stack_depot_save_flags+0x33/0x810 [ 110.130050][ T6077] ? __pfx_path_openat+0x10/0x10 [ 110.130065][ T6077] ? __x64_sys_openat+0x138/0x170 [ 110.130085][ T6077] ? do_syscall_64+0x14d/0xf80 [ 110.130102][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.130121][ T6077] ? __lock_acquire+0x6b5/0x2cf0 [ 110.130143][ T6077] do_file_open+0x23e/0x4a0 [ 110.130162][ T6077] ? __pfx_do_file_open+0x10/0x10 [ 110.130186][ T6077] ? _raw_spin_unlock+0x28/0x50 [ 110.130200][ T6077] ? alloc_fd+0x64b/0x6c0 [ 110.130224][ T6077] do_sys_openat2+0x113/0x200 [ 110.130247][ T6077] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.130268][ T6077] ? exc_page_fault+0x6a/0xc0 [ 110.130286][ T6077] ? do_user_addr_fault+0xc6f/0x1340 [ 110.130308][ T6077] __x64_sys_openat+0x138/0x170 [ 110.130331][ T6077] do_syscall_64+0x14d/0xf80 [ 110.130347][ T6077] ? trace_irq_disable+0x3b/0x150 [ 110.130369][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.130385][ T6077] ? clear_bhb_loop+0x40/0x90 [ 110.130402][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.130417][ T6077] RIP: 0033:0x7f48a3aa7407 [ 110.130433][ T6077] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 110.130446][ T6077] RSP: 002b:00007ffc1a249640 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 110.130465][ T6077] RAX: ffffffffffffffda RBX: 00007f48a423f880 RCX: 00007f48a3aa7407 [ 110.130477][ T6077] RDX: 0000000000000000 RSI: 00007ffc1a24af1b RDI: ffffffffffffff9c [ 110.130488][ T6077] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 110.130497][ T6077] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 110.130507][ T6077] R13: 00007ffc1a249890 R14: 00007f48a43a6000 R15: 000055ccedf894d8 [ 110.130524][ T6077] [ 110.130529][ T6077] [ 110.503965][ T6077] Allocated by task 6055: [ 110.508851][ T6077] kasan_save_track+0x3e/0x80 [ 110.514703][ T6077] __kasan_kmalloc+0x93/0xb0 [ 110.519578][ T6077] __kmalloc_cache_noprof+0x31c/0x660 [ 110.526126][ T6077] em28xx_v4l2_init+0x10b/0x2e70 [ 110.532180][ T6077] em28xx_init_extension+0x120/0x1c0 [ 110.537775][ T6077] process_scheduled_works+0xb6e/0x18c0 [ 110.544137][ T6077] worker_thread+0xa53/0xfc0 [ 110.549639][ T6077] kthread+0x388/0x470 [ 110.556783][ T6077] ret_from_fork+0x51e/0xb90 [ 110.562843][ T6077] ret_from_fork_asm+0x1a/0x30 [ 110.568881][ T6077] [ 110.572624][ T6077] Freed by task 6055: [ 110.576612][ T6077] kasan_save_track+0x3e/0x80 [ 110.581334][ T6077] kasan_save_free_info+0x46/0x50 [ 110.587518][ T6077] __kasan_slab_free+0x5c/0x80 [ 110.594720][ T6077] kfree+0x1c1/0x630 [ 110.599274][ T6077] em28xx_v4l2_init+0x1683/0x2e70 [ 110.607165][ T6077] em28xx_init_extension+0x120/0x1c0 [ 110.615106][ T6077] process_scheduled_works+0xb6e/0x18c0 [ 110.621936][ T6077] worker_thread+0xa53/0xfc0 [ 110.626924][ T6077] kthread+0x388/0x470 [ 110.632675][ T6077] ret_from_fork+0x51e/0xb90 [ 110.638684][ T6077] ret_from_fork_asm+0x1a/0x30 [ 110.644535][ T6077] [ 110.647940][ T6077] The buggy address belongs to the object at ffff88807e16c000 [ 110.647940][ T6077] which belongs to the cache kmalloc-8k of size 8192 [ 110.669221][ T6077] The buggy address is located 1864 bytes inside of [ 110.669221][ T6077] freed 8192-byte region [ffff88807e16c000, ffff88807e16e000) [ 110.687110][ T6077] [ 110.690263][ T6077] The buggy address belongs to the physical page: [ 110.697410][ T6077] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807e168000 pfn:0x7e168 [ 110.711708][ T6077] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 110.722920][ T6077] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 110.732594][ T6077] page_type: f5(slab) [ 110.737049][ T6077] raw: 00fff00000000240 ffff88813fea6280 ffffea0001fb5810 ffffea0001fa3e10 [ 110.748447][ T6077] raw: ffff88807e168000 0000000800020001 00000000f5000000 0000000000000000 [ 110.759495][ T6077] head: 00fff00000000240 ffff88813fea6280 ffffea0001fb5810 ffffea0001fa3e10 [ 110.771574][ T6077] head: ffff88807e168000 0000000800020001 00000000f5000000 0000000000000000 [ 110.782814][ T6077] head: 00fff00000000003 ffffea0001f85a01 00000000ffffffff 00000000ffffffff [ 110.793637][ T6077] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 110.805109][ T6077] page dumped because: kasan: bad access detected [ 110.813784][ T6077] page_owner tracks the page as allocated [ 110.820127][ T6077] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5852, tgid 5852 (syz-executor), ts 94175883307, free_ts 94153678535 [ 110.849271][ T6077] post_alloc_hook+0x231/0x280 [ 110.854983][ T6077] get_page_from_freelist+0x24dc/0x2580 [ 110.863080][ T6077] __alloc_frozen_pages_noprof+0x18d/0x380 [ 110.869834][ T6077] allocate_slab+0x77/0x660 [ 110.876540][ T6077] refill_objects+0x331/0x3c0 [ 110.882564][ T6077] __pcs_replace_empty_main+0x2e6/0x730 [ 110.889617][ T6077] __kvmalloc_node_noprof+0x657/0x8a0 [ 110.896153][ T6077] tun_attach+0x891/0x1590 [ 110.901436][ T6077] tun_net_init+0x309/0x3d0 [ 110.907548][ T6077] register_netdevice+0x6d1/0x1cf0 [ 110.913334][ T6077] tun_set_iff+0x844/0xf00 [ 110.918525][ T6077] __tun_chr_ioctl+0x7bb/0x1e10 [ 110.924282][ T6077] __se_sys_ioctl+0xfc/0x170 [ 110.928933][ T6077] do_syscall_64+0x14d/0xf80 [ 110.933720][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.939799][ T6077] page last free pid 5852 tgid 5852 stack trace: [ 110.946586][ T6077] __free_frozen_pages+0xc2b/0xdb0 [ 110.952023][ T6077] __slab_free+0x263/0x2b0 [ 110.956479][ T6077] qlist_free_all+0x97/0x100 [ 110.961879][ T6077] kasan_quarantine_reduce+0x148/0x160 [ 110.968538][ T6077] __kasan_slab_alloc+0x22/0x80 [ 110.974104][ T6077] __kmalloc_cache_noprof+0x2ba/0x660 [ 110.979613][ T6077] tomoyo_init_log+0x195/0x1fb0 [ 110.985375][ T6077] tomoyo_supervisor+0x353/0x1570 [ 110.992216][ T6077] tomoyo_path_permission+0x25a/0x380 [ 110.998948][ T6077] tomoyo_check_open_permission+0x31f/0x470 [ 111.005782][ T6077] security_file_open+0xa9/0x240 [ 111.011279][ T6077] do_dentry_open+0x384/0x14e0 [ 111.016428][ T6077] vfs_open+0x3b/0x340 [ 111.021146][ T6077] path_openat+0x2e08/0x3860 [ 111.026382][ T6077] do_file_open+0x23e/0x4a0 [ 111.032894][ T6077] do_sys_openat2+0x113/0x200 [ 111.037959][ T6077] [ 111.040343][ T6077] Memory state around the buggy address: [ 111.046981][ T6077] ffff88807e16c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.056727][ T6077] ffff88807e16c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.065023][ T6077] >ffff88807e16c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.073266][ T6077] ^ [ 111.080146][ T6077] ffff88807e16c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.088490][ T6077] ffff88807e16c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.096820][ T6077] ================================================================== [ 111.112491][ T9] em28xx 5-1:0.132: Registering V4L2 extension [ 111.129834][ T6063] em28xx 1-1:0.132: Disconnecting em28xx [ 111.193158][ T5997] usb 4-1: Using ep0 maxpacket: 32 [ 111.205304][ T6004] usb 2-1: Using ep0 maxpacket: 32 [ 111.280976][ T6004] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 111.302229][ T6004] usb 2-1: config 0 has no interface number 0 [ 111.310023][ T6004] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.336772][ T5997] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 111.359061][ T5997] usb 4-1: config 0 has no interface number 0 [ 111.366100][ T5997] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.386698][ T6004] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 111.397464][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.408418][ T6004] usb 2-1: Product: syz [ 111.413310][ T5997] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 111.424082][ T6004] usb 2-1: Manufacturer: syz [ 111.429109][ T6004] usb 2-1: SerialNumber: syz [ 111.430103][ T6077] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.430121][ T6077] CPU: 0 UID: 0 PID: 6077 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 111.430140][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.430151][ T6077] Call Trace: [ 111.430159][ T6077] [ 111.430166][ T6077] vpanic+0x56c/0xa60 [ 111.430193][ T6077] ? __pfx_vpanic+0x10/0x10 [ 111.430218][ T6077] panic+0xc5/0xd0 [ 111.430237][ T6077] ? __pfx_panic+0x10/0x10 [ 111.430267][ T6077] ? preempt_schedule_thunk+0x16/0x30 [ 111.430286][ T6077] ? preempt_schedule_thunk+0x16/0x30 [ 111.430304][ T6077] ? v4l2_fh_open+0xac/0x420 [ 111.430324][ T6077] check_panic_on_warn+0x89/0xb0 [ 111.430342][ T6077] ? v4l2_fh_open+0xac/0x420 [ 111.430360][ T6077] end_report+0x73/0x180 [ 111.430380][ T6077] ? v4l2_fh_open+0xac/0x420 [ 111.430398][ T6077] kasan_report+0x128/0x150 [ 111.430418][ T6077] ? v4l2_fh_open+0xac/0x420 [ 111.430439][ T6077] v4l2_fh_open+0xac/0x420 [ 111.430459][ T6077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.430480][ T6077] em28xx_v4l2_open+0x157/0x9a0 [ 111.430497][ T6077] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.430517][ T6077] v4l2_open+0x1bf/0x3a0 [ 111.430539][ T6077] chrdev_open+0x4cd/0x5e0 [ 111.430561][ T6077] ? __pfx_chrdev_open+0x10/0x10 [ 111.430579][ T6077] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 111.430711][ T6077] ? __pfx_chrdev_open+0x10/0x10 [ 111.430742][ T6077] do_dentry_open+0x785/0x14e0 [ 111.430772][ T6077] vfs_open+0x3b/0x340 [ 111.430792][ T6077] ? path_openat+0x2df0/0x3860 [ 111.430811][ T6077] path_openat+0x2e08/0x3860 [ 111.430834][ T6077] ? __pfx_stack_trace_save+0x10/0x10 [ 111.430853][ T6077] ? stack_depot_save_flags+0x33/0x810 [ 111.430880][ T6077] ? __pfx_path_openat+0x10/0x10 [ 111.430896][ T6077] ? __x64_sys_openat+0x138/0x170 [ 111.430917][ T6077] ? do_syscall_64+0x14d/0xf80 [ 111.430934][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.430967][ T6077] ? __lock_acquire+0x6b5/0x2cf0 [ 111.430991][ T6077] do_file_open+0x23e/0x4a0 [ 111.431010][ T6077] ? __pfx_do_file_open+0x10/0x10 [ 111.431034][ T6077] ? _raw_spin_unlock+0x28/0x50 [ 111.431049][ T6077] ? alloc_fd+0x64b/0x6c0 [ 111.431074][ T6077] do_sys_openat2+0x113/0x200 [ 111.431098][ T6077] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.431120][ T6077] ? exc_page_fault+0x6a/0xc0 [ 111.431139][ T6077] ? do_user_addr_fault+0xc6f/0x1340 [ 111.431169][ T6077] __x64_sys_openat+0x138/0x170 [ 111.431194][ T6077] do_syscall_64+0x14d/0xf80 [ 111.431211][ T6077] ? trace_irq_disable+0x3b/0x150 [ 111.431233][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.431251][ T6077] ? clear_bhb_loop+0x40/0x90 [ 111.431269][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.431286][ T6077] RIP: 0033:0x7f48a3aa7407 [ 111.431329][ T6077] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 111.431344][ T6077] RSP: 002b:00007ffc1a249640 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 111.431364][ T6077] RAX: ffffffffffffffda RBX: 00007f48a423f880 RCX: 00007f48a3aa7407 [ 111.431377][ T6077] RDX: 0000000000000000 RSI: 00007ffc1a24af1b RDI: ffffffffffffff9c [ 111.431389][ T6077] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 111.431400][ T6077] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 111.431410][ T6077] R13: 00007ffc1a249890 R14: 00007f48a43a6000 R15: 000055ccedf894d8 [ 111.431429][ T6077] [ 111.436439][ T6077] Kernel Offset: disabled