Warning: Permanently added '[localhost]:65358' (ED25519) to the list of known hosts. 2026/10/18 14:56:52 parsed 1 programs 2026/10/18 14:56:52 serving rpc on tcp://40323 [ 36.616029][ T5743] cgroup: Unknown subsys name 'net' [ 36.755888][ T5743] cgroup: Unknown subsys name 'cpuset' [ 36.758521][ T5743] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.722473][ T5743] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.932055][ T5754] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.936019][ T5754] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.945710][ T5754] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.946525][ T5754] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.954156][ T5754] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.511401][ T5794] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.512275][ T5794] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.513454][ T5794] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.607592][ T5794] infiniband rxe0: set active [ 41.608121][ T5147] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.608431][ T5794] infiniband rxe0: added rxe_eth0 [ 41.619962][ T5794] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 41.619992][ T5794] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 41.620024][ T5794] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 41.648709][ T5794] RDS/IB: rxe0: added [ 41.648905][ T5794] smc: adding ib device rxe0 with port count 1 [ 41.648965][ T5794] smc: ib device rxe0 port 1 has no pnetid [ 41.649511][ T5147] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.662093][ T5794] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.723189][ T1040] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.729910][ T57] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.970786][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.971718][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.971816][ T5794] bridge_slave_0: entered allmulticast mode [ 41.973247][ T5794] bridge_slave_0: entered promiscuous mode [ 41.977583][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.977643][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.977750][ T5794] bridge_slave_1: entered allmulticast mode [ 41.979071][ T5794] bridge_slave_1: entered promiscuous mode [ 42.002523][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.005422][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.025104][ T5794] team0: Port device team_slave_0 added [ 42.027113][ T5794] team0: Port device team_slave_1 added [ 42.040160][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.040171][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.040183][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.041555][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.041564][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.041576][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.062556][ T5794] hsr_slave_0: entered promiscuous mode [ 42.063512][ T5794] hsr_slave_1: entered promiscuous mode [ 42.201179][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.206820][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.207736][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.210339][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.211073][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.214172][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.214619][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.217695][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.242145][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.242245][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.242647][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.242789][ T5794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.298337][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.310066][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.311003][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.328561][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.336219][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.336280][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.340395][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.340440][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.650765][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.680409][ T5794] veth0_vlan: entered promiscuous mode [ 42.685571][ T5794] veth1_vlan: entered promiscuous mode [ 42.701201][ T5794] veth0_macvtap: entered promiscuous mode [ 42.706475][ T5794] veth1_macvtap: entered promiscuous mode [ 42.722364][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.729597][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.773323][ T5578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.793401][ T5803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.793613][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.793781][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.818771][ T5578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.834532][ T5840] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.873592][ T5578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.941910][ T5578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.993498][ T5578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.049745][ T5845] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.271555][ T5850] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.413208][ T233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.413222][ T233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.429974][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.429988][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.510137][ T5856] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.664120][ T5860] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.807893][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.808924][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.809416][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.810390][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.810940][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.838143][ T5863] rxe_eth0 speed is unknown, defaulting to 1000 [ 44.048967][ T5870] rxe_eth0 speed is unknown, defaulting to 1000 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x8c000) [ 44.434108][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.434878][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.435384][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.436299][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.436874][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.503898][ T1130] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 44.503919][ T1130] ata1: failed to read log page 10h (errno=-5) [ 44.503932][ T1130] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 44.503947][ T1130] ata1.00: irq_stat 0x41000008 [ 44.503961][ T1130] ata1.00: failed command: READ FPDMA QUEUED [ 44.503970][ T1130] ata1.00: cmd 60/60:f0:2e:08:04/04:00:00:00:00/40 tag 30 ncq dma 573440 in [ 44.503970][ T1130] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 44.504012][ T1130] ata1.00: status: { DRDY } [ 44.504022][ T1130] ata1.00: error: { ABRT } [ 44.504786][ T1130] ata1.00: configured for UDMA/100 [ 44.506191][ T1130] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 44.506242][ T1130] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 44.506272][ T1130] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 44.506303][ T1130] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 04 08 2e 00 04 60 00 [ 44.506430][ T1130] I/O error, dev sda, sector 264238 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 2 [ 44.506605][ T1130] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa9000) [ 44.624284][ T1130] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 44.624304][ T1130] ata1: failed to read log page 10h (errno=-5) [ 44.624317][ T1130] ata1.00: NCQ disabled due to excessive errors [ 44.624327][ T1130] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 44.624340][ T1130] ata1.00: irq_stat 0x40000000 [ 44.624352][ T1130] ata1.00: failed command: READ FPDMA QUEUED [ 44.624360][ T1130] ata1.00: cmd 60/48:70:1e:8f:03/05:00:00:00:00/40 tag 14 ncq dma 692224 in [ 44.624360][ T1130] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 44.624398][ T1130] ata1.00: status: { DRDY } [ 44.624407][ T1130] ata1.00: error: { ABRT } [ 44.624425][ T1130] ata1.00: failed command: READ FPDMA QUEUED [ 44.624433][ T1130] ata1.00: cmd 60/a8:78:66:94:03/04:00:00:00:00/40 tag 15 ncq dma 610304 in [ 44.624433][ T1130] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 44.624469][ T1130] ata1.00: status: { DRDY } [ 44.624477][ T1130] ata1.00: error: { ABRT } [ 44.626556][ T1130] ata1.00: configured for UDMA/100 [ 44.626929][ T1130] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 44.626965][ T1130] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 44.626994][ T1130] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 44.627023][ T1130] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 8f 1e 00 05 48 00 [ 44.627040][ T1130] I/O error, dev sda, sector 233246 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 44.627215][ T1130] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 44.627239][ T1130] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 44.627256][ T1130] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 44.627289][ T1130] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 03 94 66 00 04 a8 00 [ 44.627307][ T1130] I/O error, dev sda, sector 234598 op 0x0:(READ) flags 0x80700 phys_seg 134 prio class 2 [ 44.627477][ T1130] ata1: EH complete 2026/10/18 14:57:02 executed programs: 0 [ 44.907162][ T5874] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.172530][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.172616][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.172715][ T5874] bridge_slave_0: entered allmulticast mode [ 45.174077][ T5874] bridge_slave_0: entered promiscuous mode [ 45.175619][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.175698][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.175753][ T5874] bridge_slave_1: entered allmulticast mode [ 45.176486][ T5874] bridge_slave_1: entered promiscuous mode [ 45.191957][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.194541][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.208567][ T5874] team0: Port device team_slave_0 added [ 45.210490][ T5874] team0: Port device team_slave_1 added [ 45.224873][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.224884][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.224897][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.226216][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.226224][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.226236][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.247222][ T5874] hsr_slave_0: entered promiscuous mode [ 45.247678][ T5874] hsr_slave_1: entered promiscuous mode [ 45.248012][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 45.248065][ T5874] Cannot create hsr debugfs directory [ 45.819779][ T5578] bridge_slave_1: left allmulticast mode [ 45.819808][ T5578] bridge_slave_1: left promiscuous mode [ 45.820382][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.827861][ T5578] bridge_slave_0: left allmulticast mode [ 45.827883][ T5578] bridge_slave_0: left promiscuous mode [ 45.828060][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.931165][ T5578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.937297][ T5578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.938759][ T5578] bond0 (unregistering): Released all slaves [ 46.096377][ T5578] hsr_slave_0: left promiscuous mode [ 46.106423][ T5578] hsr_slave_1: left promiscuous mode [ 46.106885][ T5578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.106902][ T5578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.108230][ T5578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.108240][ T5578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.123751][ T5578] veth1_macvtap: left promiscuous mode [ 46.123852][ T5578] veth0_macvtap: left promiscuous mode [ 46.124006][ T5578] veth1_vlan: left promiscuous mode [ 46.124134][ T5578] veth0_vlan: left promiscuous mode [ 46.299178][ T5578] team0 (unregistering): Port device team_slave_1 removed [ 46.317489][ T5578] team0 (unregistering): Port device team_slave_0 removed [ 46.386431][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 46.464227][ T5865] Bluetooth: hci0: command tx timeout [ 46.657661][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.661955][ T5874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.662790][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.671337][ T5874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.672007][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.678346][ T5874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.679067][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.682672][ T5874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.724992][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.731232][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.739959][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.740044][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.750490][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.750582][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.229937][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.268610][ T5874] veth0_vlan: entered promiscuous mode [ 47.275018][ T5874] veth1_vlan: entered promiscuous mode [ 47.291194][ T5874] veth0_macvtap: entered promiscuous mode [ 47.296874][ T5874] veth1_macvtap: entered promiscuous mode [ 47.309535][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.315952][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.334647][ T5803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.353835][ T5803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.353862][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.353879][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.408781][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.408796][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.463421][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.463437][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.783169][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 47.943133][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 47.947250][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 47.947288][ T10] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 47.948946][ T10] usb 5-1: config 3 has an invalid interface number: 223 but max is 1 [ 47.948963][ T10] usb 5-1: config 3 has an invalid interface number: 25 but max is 1 [ 47.948978][ T10] usb 5-1: config 3 has an invalid interface number: 223 but max is 1 [ 47.948992][ T10] usb 5-1: config 3 has no interface number 0 [ 47.949003][ T10] usb 5-1: config 3 has no interface number 1 [ 47.949036][ T10] usb 5-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 47.949051][ T10] usb 5-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 47.949070][ T10] usb 5-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 47.949097][ T10] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 47.949117][ T10] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 47.949158][ T10] usb 5-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82 [ 47.949178][ T10] usb 5-1: config 3 interface 223 has no altsetting 1 [ 47.949191][ T10] usb 5-1: config 3 interface 25 has no altsetting 0 [ 47.951690][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.951707][ T10] usb 5-1: Product: syz [ 47.951718][ T10] usb 5-1: Manufacturer: syz [ 47.951730][ T10] usb 5-1: SerialNumber: syz [ 48.228661][ T10] usbtv 5-1:3.223: Fushicai USBTV007 Audio-Video Grabber [ 48.241322][ T10] usb 5-1: USB disconnect, device number 2 [ 48.286439][ T10] [ 48.287483][ T10] ========================= [ 48.289372][ T10] WARNING: held lock freed! [ 48.291233][ T10] syzkaller #0 Not tainted [ 48.293052][ T10] ------------------------- [ 48.294922][ T10] kworker/0:1/10 is freeing memory ffff8880007b0000-ffff8880007b07ff, with a lock still held there! [ 48.298980][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 48.306277][ T10] ffff8880007b01a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 48.310594][ T10] locks held by kworker/0:1/10: 5, last CPU#0: [ 48.312771][ T10] #0: ffff88802270a540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 48.317258][ T10] #1: ffffc900001c7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 48.322181][ T10] #2: ffff8880226721d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 48.326003][ T10] #3: ffff8880008b91d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 48.329782][ T10] #4: ffff8880007b01a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 48.333740][ T10] [ 48.333740][ T10] stack backtrace: [ 48.336127][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 48.340967][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.345639][ T10] Workqueue: usb_hub_wq hub_event [ 48.347724][ T10] Call Trace: [ 48.349121][ T10] [ 48.350372][ T10] dump_stack_lvl+0x100/0x190 [ 48.352316][ T10] debug_check_no_locks_freed+0x115/0x120 [ 48.354652][ T10] ? device_release+0x60/0x270 [ 48.356512][ T10] ? device_release+0xd2/0x270 [ 48.358179][ T10] kfree+0x180/0x6d0 [ 48.359811][ T10] ? put_device+0x24/0x30 [ 48.361617][ T10] ? __pfx_usb_release_interface+0x10/0x10 [ 48.364022][ T10] device_release+0xd2/0x270 [ 48.365962][ T10] kobject_put+0x1f7/0x640 [ 48.367812][ T10] put_device+0x1f/0x30 [ 48.369192][ T10] v4l2_device_disconnect+0x60/0xc0 [ 48.371292][ T10] usbtv_video_free+0x25/0x30 [ 48.373222][ T10] usbtv_disconnect+0x58/0xa0 [ 48.375150][ T10] usb_unbind_interface+0x1dd/0x9e0 [ 48.377305][ T10] ? __pfx_usb_unbind_interface+0x10/0x10 [ 48.379618][ T10] device_remove+0x12a/0x180 [ 48.381545][ T10] device_release_driver_internal+0x44e/0x620 [ 48.383802][ T10] bus_remove_device+0x2bc/0x560 [ 48.385627][ T10] ? __pfx_bus_remove_device+0x10/0x10 [ 48.387829][ T10] ? __pfx_device_remove_attrs+0x10/0x10 [ 48.390132][ T10] device_del+0x376/0x9b0 [ 48.391913][ T10] ? __pfx_device_del+0x10/0x10 [ 48.393918][ T10] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 48.396239][ T10] ? lock_acquire+0x1d1/0x380 [ 48.398170][ T10] usb_disable_device+0x367/0x810 [ 48.400218][ T10] ? mark_held_locks+0x40/0x70 [ 48.402203][ T10] usb_disconnect+0x2e2/0x9a0 [ 48.404133][ T10] hub_event+0x1bb1/0x4420 [ 48.406026][ T10] ? __lock_acquire+0x5c0/0x1f40 [ 48.407651][ T10] ? __pfx_hub_event+0x10/0x10 [ 48.410051][ T10] ? down_read_trylock+0x180/0x440 [ 48.412937][ T10] ? lock_acquire+0x1d1/0x380 [ 48.414877][ T10] ? process_one_work+0xa2c/0x1b10 [ 48.416973][ T10] ? process_one_work+0x906/0x1b10 [ 48.419086][ T10] ? process_one_work+0x906/0x1b10 [ 48.421183][ T10] process_one_work+0xac7/0x1b10 [ 48.423197][ T10] ? __pfx_process_one_work+0x10/0x10 [ 48.426630][ T10] ? lock_acquire+0x1d1/0x380 [ 48.428373][ T10] ? __pfx_hub_event+0x10/0x10 [ 48.430725][ T10] worker_thread+0x5ef/0xe50 [ 48.433216][ T10] ? kthread+0x13a/0x450 [ 48.434952][ T10] ? __pfx_worker_thread+0x10/0x10 [ 48.437035][ T10] kthread+0x373/0x450 [ 48.438718][ T10] ? __pfx_kthread+0x10/0x10 [ 48.440633][ T10] ret_from_fork+0x730/0xd60 [ 48.442557][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 48.444587][ T10] ? __switch_to+0x800/0x10f0 [ 48.446183][ T10] ? __pfx_kthread+0x10/0x10 [ 48.448068][ T10] ret_from_fork_asm+0x1a/0x30 [ 48.450056][ T10] ** replaying previous printk message ** [ 48.452137][ T10] ================================================================== [ 48.452147][ T10] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x935/0x9e0 [ 48.452173][ T10] Read of size 8 at addr ffff8880007b0008 by task kworker/0:1/10 [ 48.452186][ T10] [ 48.452193][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 48.452211][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.452222][ T10] Workqueue: usb_hub_wq hub_event [ 48.452250][ T10] Call Trace: [ 48.452256][ T10] [ 48.452262][ T10] dump_stack_lvl+0x100/0x190 [ 48.452284][ T10] print_report+0x13d/0x4b0 [ 48.452307][ T10] ? __virt_addr_valid+0x239/0x430 [ 48.452332][ T10] ? usb_unbind_interface+0x935/0x9e0 [ 48.452354][ T10] kasan_report+0xdf/0x1c0 [ 48.452378][ T10] ? usb_unbind_interface+0x935/0x9e0 [ 48.452402][ T10] usb_unbind_interface+0x935/0x9e0 [ 48.452425][ T10] ? __pfx_usb_unbind_interface+0x10/0x10 [ 48.452449][ T10] device_remove+0x12a/0x180 [ 48.452468][ T10] device_release_driver_internal+0x44e/0x620 [ 48.452490][ T10] bus_remove_device+0x2bc/0x560 [ 48.452506][ T10] ? __pfx_bus_remove_device+0x10/0x10 [ 48.452521][ T10] ? __pfx_device_remove_attrs+0x10/0x10 [ 48.452540][ T10] device_del+0x376/0x9b0 [ 48.452557][ T10] ? __pfx_device_del+0x10/0x10 [ 48.452574][ T10] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 48.452592][ T10] ? lock_acquire+0x1d1/0x380 [ 48.452616][ T10] usb_disable_device+0x367/0x810 [ 48.452636][ T10] ? mark_held_locks+0x40/0x70 [ 48.452660][ T10] usb_disconnect+0x2e2/0x9a0 [ 48.452681][ T10] hub_event+0x1bb1/0x4420 [ 48.452707][ T10] ? __lock_acquire+0x5c0/0x1f40 [ 48.452731][ T10] ? __pfx_hub_event+0x10/0x10 [ 48.452750][ T10] ? down_read_trylock+0x180/0x440 [ 48.452767][ T10] ? lock_acquire+0x1d1/0x380 [ 48.452789][ T10] ? process_one_work+0xa2c/0x1b10 [ 48.452809][ T10] ? process_one_work+0x906/0x1b10 [ 48.452828][ T10] ? process_one_work+0x906/0x1b10 [ 48.452848][ T10] process_one_work+0xac7/0x1b10 [ 48.452871][ T10] ? __pfx_process_one_work+0x10/0x10 [ 48.452892][ T10] ? lock_acquire+0x1d1/0x380 [ 48.452935][ T10] ? __pfx_hub_event+0x10/0x10 [ 48.452957][ T10] worker_thread+0x5ef/0xe50 [ 48.452979][ T10] ? kthread+0x13a/0x450 [ 48.452997][ T10] ? __pfx_worker_thread+0x10/0x10 [ 48.453015][ T10] kthread+0x373/0x450 [ 48.453032][ T10] ? __pfx_kthread+0x10/0x10 [ 48.453050][ T10] ret_from_fork+0x730/0xd60 [ 48.453065][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 48.453081][ T10] ? __switch_to+0x800/0x10f0 [ 48.453101][ T10] ? __pfx_kthread+0x10/0x10 [ 48.453119][ T10] ret_from_fork_asm+0x1a/0x30 [ 48.453159][ T10] [ 48.453165][ T10] [ 48.453169][ T10] Allocated by task 10: [ 48.453176][ T10] kasan_save_stack+0x30/0x50 [ 48.453197][ T10] kasan_save_track+0x14/0x30 [ 48.453216][ T10] __kasan_kmalloc+0xaa/0xb0 [ 48.453240][ T10] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 48.453257][ T10] usb_set_configuration+0x10d0/0x1dc0 [ 48.453276][ T10] usb_generic_driver_probe+0xa1/0xe0 [ 48.453301][ T10] usb_probe_device+0xef/0x400 [ 48.453327][ T10] really_probe+0x241/0xa60 [ 48.453346][ T10] __driver_probe_device+0x210/0x460 [ 48.453361][ T10] driver_probe_device+0x4a/0x140 [ 48.453377][ T10] __device_attach_driver+0x1df/0x320 [ 48.453394][ T10] bus_for_each_drv+0x159/0x1e0 [ 48.453415][ T10] __device_attach+0x1e4/0x4d0 [ 48.453431][ T10] device_initial_probe+0xaf/0xd0 [ 48.453447][ T10] bus_probe_device+0x64/0x160 [ 48.453460][ T10] device_add+0x121d/0x1970 [ 48.453478][ T10] usb_new_device.part.0+0xcc2/0x1686 [ 48.453504][ T10] hub_event.cold+0x1e3/0xe90 [ 48.453522][ T10] process_one_work+0xac7/0x1b10 [ 48.453539][ T10] worker_thread+0x5ef/0xe50 [ 48.453556][ T10] kthread+0x373/0x450 [ 48.453571][ T10] ret_from_fork+0x730/0xd60 [ 48.453584][ T10] ret_from_fork_asm+0x1a/0x30 [ 48.453597][ T10] [ 48.453601][ T10] Freed by task 10: [ 48.453607][ T10] kasan_save_stack+0x30/0x50 [ 48.453627][ T10] kasan_save_track+0x14/0x30 [ 48.453646][ T10] kasan_save_free_info+0x3b/0x70 [ 48.453662][ T10] __kasan_slab_free+0x5f/0x80 [ 48.453683][ T10] kfree+0x22b/0x6d0 [ 48.453697][ T10] device_release+0xd2/0x270 [ 48.453717][ T10] kobject_put+0x1f7/0x640 [ 48.453736][ T10] put_device+0x1f/0x30 [ 48.453756][ T10] v4l2_device_disconnect+0x60/0xc0 [ 48.453777][ T10] usbtv_video_free+0x25/0x30 [ 48.453799][ T10] usbtv_disconnect+0x58/0xa0 [ 48.453818][ T10] usb_unbind_interface+0x1dd/0x9e0 [ 48.453838][ T10] device_remove+0x12a/0x180 [ 48.453853][ T10] device_release_driver_internal+0x44e/0x620 [ 48.453871][ T10] bus_remove_device+0x2bc/0x560 [ 48.453884][ T10] device_del+0x376/0x9b0 [ 48.453899][ T10] usb_disable_device+0x367/0x810 [ 48.453917][ T10] usb_disconnect+0x2e2/0x9a0 [ 48.453934][ T10] hub_event+0x1bb1/0x4420 [ 48.453952][ T10] process_one_work+0xac7/0x1b10 [ 48.453969][ T10] worker_thread+0x5ef/0xe50 [ 48.453986][ T10] kthread+0x373/0x450 [ 48.454001][ T10] ret_from_fork+0x730/0xd60 [ 48.454014][ T10] ret_from_fork_asm+0x1a/0x30 [ 48.454028][ T10] [ 48.454032][ T10] The buggy address belongs to the object at ffff8880007b0000 [ 48.454032][ T10] which belongs to the cache kmalloc-2k of size 2048 [ 48.454043][ T10] The buggy address is located 8 bytes inside of [ 48.454043][ T10] freed 2048-byte region [ffff8880007b0000, ffff8880007b0800) [ 48.454058][ T10] [ 48.454062][ T10] The buggy address belongs to the physical page: [ 48.454069][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b0 [ 48.454082][ T10] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 48.454094][ T10] flags: 0x7ff00000000040(head|node=0|zone=0|lastcpupid=0x7ff) [ 48.454108][ T10] page_type: f5(slab) [ 48.454121][ T10] raw: 007ff00000000040 ffff88801d042f00 dead000000000100 dead000000000122 [ 48.454135][ T10] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 48.454148][ T10] head: 007ff00000000040 ffff88801d042f00 dead000000000100 dead000000000122 [ 48.454161][ T10] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 48.454175][ T10] head: 007ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 48.454188][ T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 48.454196][ T10] page dumped because: kasan: bad access detected [ 48.454203][ T10] page_owner tracks the page as allocated [ 48.454208][ T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5578, tgid 5578 (kworker/u32:2), ts 46344219131 [ 48.454237][ T10] post_alloc_hook+0xfd/0x120 [ 48.454253][ T10] get_page_from_freelist+0x110d/0x35d0 [ 48.454270][ T10] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 48.454288][ T10] new_slab+0xa9/0x6e0 [ 48.454304][ T10] refill_objects+0xe3/0x410 [ 48.454320][ T10] __pcs_replace_empty_main+0x35e/0x650 [ 48.454336][ T10] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 48.454356][ T10] kmalloc_reserve+0xe8/0x350 [ 48.454379][ T10] __alloc_skb+0x185/0x710 [ 48.454394][ T10] rtmsg_ifinfo_build_skb+0x81/0x260 [ 48.454415][ T10] unregister_netdevice_many_notify+0x11ea/0x2150 [ 48.454436][ T10] default_device_exit_batch+0x6c6/0x890 [ 48.454455][ T10] ops_undo_list+0x363/0xab0 [ 48.454473][ T10] cleanup_net+0x499/0x920 [ 48.454492][ T10] process_one_work+0xac7/0x1b10 [ 48.454509][ T10] worker_thread+0x5ef/0xe50 [ 48.454527][ T10] page last free pid 5578 tgid 5578 ts 46247526176 stack trace: [ 48.454537][ T10] __free_frozen_pages+0x79f/0x10f0 [ 48.454552][ T10] qlist_free_all+0x47/0xf0 [ 48.454570][ T10] kasan_quarantine_reduce+0x1a0/0x1f0 [ 48.454588][ T10] __kasan_slab_alloc+0x69/0x90 [ 48.454609][ T10] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 48.454628][ T10] __alloc_skb+0x140/0x710 [ 48.454643][ T10] mpls_netconf_notify_devconf+0x4a/0x100 [ 48.454658][ T10] mpls_dev_notify+0x6ce/0x920 [ 48.454672][ T10] notifier_call_chain+0x99/0x3f0 [ 48.454688][ T10] call_netdevice_notifiers_info+0xbe/0x110 [ 48.454709][ T10] unregister_netdevice_many_notify+0x1149/0x2150 [ 48.454729][ T10] default_device_exit_batch+0x6c6/0x890 [ 48.454749][ T10] ops_undo_list+0x363/0xab0 [ 48.454764][ T10] cleanup_net+0x499/0x920 [ 48.454777][ T10] process_one_work+0xac7/0x1b10 [ 48.454789][ T10] worker_thread+0x5ef/0xe50 [ 48.454801][ T10] [ 48.454804][ T10] Memory state around the buggy address: [ 48.454812][ T10] ffff8880007aff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.454821][ T10] ffff8880007aff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.454831][ T10] >ffff8880007b0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.454839][ T10] ^ [ 48.454847][ T10] ffff8880007b0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.454857][ T10] ffff8880007b0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.454864][ T10] ================================================================== [ 48.454973][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 48.832292][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 48.836415][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.840025][ T10] Workqueue: usb_hub_wq hub_event [ 48.841666][ T10] Call Trace: [ 48.842734][ T10] [ 48.843679][ T10] dump_stack_lvl+0x100/0x190 [ 48.845195][ T10] vpanic+0x553/0x970 [ 48.846465][ T10] ? __pfx_vpanic+0x10/0x10 [ 48.847897][ T10] ? rcu_is_watching+0x13/0xc0 [ 48.849423][ T10] ? trace_irq_enable.constprop.0+0x122/0x160 [ 48.851359][ T10] ? usb_unbind_interface+0x935/0x9e0 [ 48.853033][ T10] panic+0xd1/0xe0 [ 48.854229][ T10] ? __pfx_panic+0x10/0x10 [ 48.855644][ T10] ? usb_unbind_interface+0x935/0x9e0 [ 48.858393][ T10] ? preempt_schedule_common+0x3c/0xb0 [ 48.860270][ T10] check_panic_on_warn.cold+0x19/0x34 [ 48.861990][ T10] end_report.part.0+0x3a/0x90 [ 48.863515][ T10] kasan_report.cold+0xe/0x18 [ 48.865034][ T10] ? usb_unbind_interface+0x935/0x9e0 [ 48.866736][ T10] usb_unbind_interface+0x935/0x9e0 [ 48.868389][ T10] ? __pfx_usb_unbind_interface+0x10/0x10 [ 48.870193][ T10] device_remove+0x12a/0x180 [ 48.871692][ T10] device_release_driver_internal+0x44e/0x620 [ 48.873627][ T10] bus_remove_device+0x2bc/0x560 [ 48.875199][ T10] ? __pfx_bus_remove_device+0x10/0x10 [ 48.876923][ T10] ? __pfx_device_remove_attrs+0x10/0x10 [ 48.878710][ T10] device_del+0x376/0x9b0 [ 48.880080][ T10] ? __pfx_device_del+0x10/0x10 [ 48.881667][ T10] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 48.883468][ T10] ? lock_acquire+0x1d1/0x380 [ 48.884978][ T10] usb_disable_device+0x367/0x810 [ 48.886578][ T10] ? mark_held_locks+0x40/0x70 [ 48.888095][ T10] usb_disconnect+0x2e2/0x9a0 [ 48.889599][ T10] hub_event+0x1bb1/0x4420 [ 48.891047][ T10] ? __lock_acquire+0x5c0/0x1f40 [ 48.892610][ T10] ? __pfx_hub_event+0x10/0x10 [ 48.894133][ T10] ? down_read_trylock+0x180/0x440 [ 48.895747][ T10] ? lock_acquire+0x1d1/0x380 [ 48.897259][ T10] ? process_one_work+0xa2c/0x1b10 [ 48.898904][ T10] ? process_one_work+0x906/0x1b10 [ 48.900522][ T10] ? process_one_work+0x906/0x1b10 [ 48.902150][ T10] process_one_work+0xac7/0x1b10 [ 48.903721][ T10] ? __pfx_process_one_work+0x10/0x10 [ 48.905409][ T10] ? lock_acquire+0x1d1/0x380 [ 48.906891][ T10] ? __pfx_hub_event+0x10/0x10 [ 48.908403][ T10] worker_thread+0x5ef/0xe50 [ 48.909868][ T10] ? kthread+0x13a/0x450 [ 48.911209][ T10] ? __pfx_worker_thread+0x10/0x10 [ 48.912816][ T10] kthread+0x373/0x450 [ 48.914324][ T10] ? __pfx_kthread+0x10/0x10 [ 48.916631][ T10] ret_from_fork+0x730/0xd60 [ 48.918210][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 48.919827][ T10] ? __switch_to+0x800/0x10f0 [ 48.921357][ T10] ? __pfx_kthread+0x10/0x10 [ 48.922827][ T10] ret_from_fork_asm+0x1a/0x30 [ 48.924330][ T10] [ 48.925913][ T10] Kernel Offset: disabled [ 48.927120][ T10] Rebooting in 86400 seconds..