Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. 2026/05/05 10:04:20 parsed 1 programs [ 63.264915][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 63.264931][ T30] audit: type=1400 audit(1777975460.431:129): avc: denied { node_bind } for pid=5610 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 65.373426][ T30] audit: type=1400 audit(1777975462.541:130): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.397508][ T30] audit: type=1400 audit(1777975462.561:131): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.400037][ T5616] cgroup: Unknown subsys name 'net' [ 65.426330][ T30] audit: type=1400 audit(1777975462.591:132): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.590883][ T5616] cgroup: Unknown subsys name 'cpuset' [ 65.598676][ T5616] cgroup: Unknown subsys name 'rlimit' [ 65.759182][ T30] audit: type=1400 audit(1777975462.931:133): avc: denied { setattr } for pid=5616 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.782854][ T30] audit: type=1400 audit(1777975462.931:134): avc: denied { create } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.815079][ T30] audit: type=1400 audit(1777975462.931:135): avc: denied { write } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.838844][ T30] audit: type=1400 audit(1777975462.931:136): avc: denied { read } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.841352][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.866112][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.868064][ T30] audit: type=1400 audit(1777975462.931:137): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.890253][ T5622] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 65.897598][ T30] audit: type=1400 audit(1777975462.931:138): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.822564][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.481103][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 68.481118][ T30] audit: type=1400 audit(1777975465.651:143): avc: denied { execmem } for pid=5627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.513157][ T30] audit: type=1400 audit(1777975465.681:144): avc: denied { mounton } for pid=5628 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 68.574986][ T30] audit: type=1400 audit(1777975465.681:145): avc: denied { mount } for pid=5628 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 68.618219][ T30] audit: type=1400 audit(1777975465.681:146): avc: denied { read } for pid=5628 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.661580][ T30] audit: type=1400 audit(1777975465.681:147): avc: denied { open } for pid=5628 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.685183][ T30] audit: type=1400 audit(1777975465.681:148): avc: denied { mounton } for pid=5628 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 68.798115][ T30] audit: type=1400 audit(1777975465.961:149): avc: denied { mounton } for pid=5628 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.825733][ T30] audit: type=1400 audit(1777975465.971:150): avc: denied { mount } for pid=5628 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.848702][ T30] audit: type=1401 audit(1777975465.971:151): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 68.884597][ T30] audit: type=1400 audit(1777975466.031:152): avc: denied { mounton } for pid=5631 comm="syz-executor" path="/root/syzkaller.mpo4Td/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.941362][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.434167][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.454080][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.650350][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.658247][ T5693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.658505][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.669758][ T5693] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.680065][ T5693] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.689152][ T5693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.696696][ T5693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.329655][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.337649][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.347709][ T5658] bridge_slave_0: entered allmulticast mode [ 71.355392][ T5658] bridge_slave_0: entered promiscuous mode [ 71.365437][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.379186][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.386546][ T5658] bridge_slave_1: entered allmulticast mode [ 71.395246][ T5658] bridge_slave_1: entered promiscuous mode [ 71.483856][ T5658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.495654][ T5658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.527276][ T5658] team0: Port device team_slave_0 added [ 71.536191][ T5658] team0: Port device team_slave_1 added [ 71.589978][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.596958][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.623361][ T5658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.636398][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.643547][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.669736][ T5658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.728144][ T5658] hsr_slave_0: entered promiscuous mode [ 71.734272][ T5658] hsr_slave_1: entered promiscuous mode [ 71.845521][ T5658] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.856496][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.864840][ T5658] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.874294][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.882152][ T5658] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.892086][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.900065][ T5658] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.910539][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.957708][ T5658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.977211][ T5658] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.988174][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.995532][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.010944][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.018082][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.232349][ T5658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.271286][ T5658] veth0_vlan: entered promiscuous mode [ 72.283476][ T5658] veth1_vlan: entered promiscuous mode [ 72.305511][ T5658] veth0_macvtap: entered promiscuous mode [ 72.315458][ T5658] veth1_macvtap: entered promiscuous mode [ 72.330770][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.344410][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.358932][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.368711][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.379687][ T137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.389006][ T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/05 10:04:29 executed programs: 0 [ 72.552507][ T4928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.567027][ T4928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.575515][ T4928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.600709][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.609079][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.618283][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.626803][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.627058][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.635143][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.642282][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.654697][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.656800][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.663450][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.669806][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.680134][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.738918][ T5752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.757593][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.765405][ T5693] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.775661][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.784754][ T5693] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.795085][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.804656][ T5693] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.804873][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.812516][ T5693] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.827600][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.239890][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.102654][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.109879][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.116996][ T5753] bridge_slave_0: entered allmulticast mode [ 74.124023][ T5753] bridge_slave_0: entered promiscuous mode [ 74.135795][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.143431][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.150872][ T5747] bridge_slave_0: entered allmulticast mode [ 74.157509][ T5747] bridge_slave_0: entered promiscuous mode [ 74.175739][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.182971][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.190722][ T5753] bridge_slave_1: entered allmulticast mode [ 74.197349][ T5753] bridge_slave_1: entered promiscuous mode [ 74.213989][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.221260][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.228462][ T5747] bridge_slave_1: entered allmulticast mode [ 74.235059][ T5747] bridge_slave_1: entered promiscuous mode [ 74.295632][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.302945][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.310346][ T5754] bridge_slave_0: entered allmulticast mode [ 74.316936][ T5754] bridge_slave_0: entered promiscuous mode [ 74.325799][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.334999][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.342219][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.349451][ T5742] bridge_slave_0: entered allmulticast mode [ 74.356054][ T5742] bridge_slave_0: entered promiscuous mode [ 74.369925][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.398948][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.410296][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.425057][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.432295][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.440225][ T5754] bridge_slave_1: entered allmulticast mode [ 74.446846][ T5754] bridge_slave_1: entered promiscuous mode [ 74.454811][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.464150][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.471473][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.478904][ T5742] bridge_slave_1: entered allmulticast mode [ 74.485567][ T5742] bridge_slave_1: entered promiscuous mode [ 74.540845][ T5747] team0: Port device team_slave_0 added [ 74.562714][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.576504][ T5747] team0: Port device team_slave_1 added [ 74.584180][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.595389][ T5753] team0: Port device team_slave_0 added [ 74.602893][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.626248][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.643097][ T5753] team0: Port device team_slave_1 added [ 74.667742][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.674941][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.701127][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.718642][ T50] Bluetooth: hci1: command tx timeout [ 74.728162][ T50] Bluetooth: hci3: command tx timeout [ 74.735580][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.742770][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.750065][ T5745] bridge_slave_0: entered allmulticast mode [ 74.756692][ T5745] bridge_slave_0: entered promiscuous mode [ 74.765209][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.772296][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.798912][ T50] Bluetooth: hci2: command tx timeout [ 74.804967][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.817630][ T5754] team0: Port device team_slave_0 added [ 74.831491][ T5742] team0: Port device team_slave_0 added [ 74.838348][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.845450][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.852690][ T5745] bridge_slave_1: entered allmulticast mode [ 74.859606][ T5745] bridge_slave_1: entered promiscuous mode [ 74.871281][ T5754] team0: Port device team_slave_1 added [ 74.877391][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.884807][ T50] Bluetooth: hci4: command tx timeout [ 74.884979][ T50] Bluetooth: hci5: command tx timeout [ 74.890524][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.921828][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.934248][ T5742] team0: Port device team_slave_1 added [ 74.967371][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.974419][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.000540][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.030555][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.047116][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.055026][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.081788][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.093852][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.101007][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.127020][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.144037][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.151155][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.177335][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.190498][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.218361][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.225406][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.251517][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.287763][ T5747] hsr_slave_0: entered promiscuous mode [ 75.294653][ T5747] hsr_slave_1: entered promiscuous mode [ 75.300865][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 75.306657][ T5747] Cannot create hsr debugfs directory [ 75.317960][ T5745] team0: Port device team_slave_0 added [ 75.325234][ T5745] team0: Port device team_slave_1 added [ 75.334166][ T5753] hsr_slave_0: entered promiscuous mode [ 75.340551][ T5753] hsr_slave_1: entered promiscuous mode [ 75.346782][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 75.352586][ T5753] Cannot create hsr debugfs directory [ 75.421617][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.428642][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.455507][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.467509][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.474658][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.500813][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.524678][ T5742] hsr_slave_0: entered promiscuous mode [ 75.530866][ T5742] hsr_slave_1: entered promiscuous mode [ 75.536725][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 75.542469][ T5742] Cannot create hsr debugfs directory [ 75.555614][ T5754] hsr_slave_0: entered promiscuous mode [ 75.561814][ T5754] hsr_slave_1: entered promiscuous mode [ 75.568263][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 75.574071][ T5754] Cannot create hsr debugfs directory [ 75.591676][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.706213][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.726639][ T5745] hsr_slave_0: entered promiscuous mode [ 75.733102][ T5745] hsr_slave_1: entered promiscuous mode [ 75.739315][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 75.745025][ T5745] Cannot create hsr debugfs directory [ 76.012781][ T57] bridge_slave_1: left allmulticast mode [ 76.018723][ T57] bridge_slave_1: left promiscuous mode [ 76.025494][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.035784][ T57] bridge_slave_0: left allmulticast mode [ 76.042521][ T57] bridge_slave_0: left promiscuous mode [ 76.048283][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.225271][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.236010][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.245869][ T57] bond0 (unregistering): Released all slaves [ 76.308625][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.331894][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.383660][ T57] hsr_slave_0: left promiscuous mode [ 76.390297][ T57] hsr_slave_1: left promiscuous mode [ 76.400261][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.407705][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.420460][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.428036][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.443293][ T57] veth1_macvtap: left promiscuous mode [ 76.449591][ T57] veth0_macvtap: left promiscuous mode [ 76.455270][ T57] veth1_vlan: left promiscuous mode [ 76.462752][ T57] veth0_vlan: left promiscuous mode [ 76.636916][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 76.636930][ T30] audit: type=1400 audit(1777975473.801:173): avc: denied { write } for pid=5838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.732309][ T57] team0 (unregistering): Port device team_slave_1 removed [ 76.744929][ T30] audit: type=1400 audit(1777975473.901:174): avc: denied { write } for pid=5849 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.777626][ T57] team0 (unregistering): Port device team_slave_0 removed [ 76.798089][ T5752] Bluetooth: hci1: command tx timeout [ 76.803591][ T50] Bluetooth: hci3: command tx timeout [ 76.850068][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.860051][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.878954][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 76.884295][ T50] Bluetooth: hci2: command tx timeout [ 76.894364][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.904795][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.922167][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.936244][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.958715][ T5752] Bluetooth: hci5: command tx timeout [ 76.964328][ T50] Bluetooth: hci4: command tx timeout [ 77.049563][ T5754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.069773][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.079242][ T5754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.090304][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.098331][ T5754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.115338][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.145221][ T5754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.172531][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.290242][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.302958][ T5753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.314461][ T30] audit: type=1400 audit(1777975474.481:175): avc: denied { write } for pid=5858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.345478][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.363261][ T5753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.373229][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.382618][ T5753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.394354][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.402307][ T5753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.415608][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.420829][ T30] audit: type=1400 audit(1777975474.591:176): avc: denied { write } for pid=5877 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.451654][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.516203][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 77.529267][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.554586][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.561665][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.574004][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.595623][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.602765][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.615559][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.624254][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.632070][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.641263][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.650084][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.657146][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.679956][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.690022][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.704406][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.711513][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.720499][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.732085][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.925390][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.043228][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.129289][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.136461][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.154880][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.162748][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.186755][ T30] audit: type=1400 audit(1777975475.351:177): avc: denied { write } for pid=5893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.292346][ T5745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.304103][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.315489][ T30] audit: type=1400 audit(1777975475.481:178): avc: denied { write } for pid=5912 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.315651][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.362632][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.383287][ T5745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.405234][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.433983][ T5745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.445298][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.458963][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.466111][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.481865][ T5745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.493805][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.519637][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.526738][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.741941][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.866902][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.877946][ T50] Bluetooth: hci3: command tx timeout [ 78.883372][ T5752] Bluetooth: hci1: command tx timeout [ 78.914908][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.958302][ T5752] Bluetooth: hci2: command tx timeout [ 79.001676][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.028132][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.035276][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.038596][ T5752] Bluetooth: hci4: command tx timeout [ 79.049016][ T50] Bluetooth: hci5: command tx timeout [ 79.083071][ T5747] veth0_vlan: entered promiscuous mode [ 79.120642][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.128359][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.161503][ T5747] veth1_vlan: entered promiscuous mode [ 79.173323][ T30] audit: type=1400 audit(1777975476.341:179): avc: denied { write } for pid=5930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.263778][ T5754] veth0_vlan: entered promiscuous mode [ 79.324110][ T5754] veth1_vlan: entered promiscuous mode [ 79.340962][ T30] audit: type=1400 audit(1777975476.511:180): avc: denied { write } for pid=5961 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.393436][ T5747] veth0_macvtap: entered promiscuous mode [ 79.439267][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.449022][ T5747] veth1_macvtap: entered promiscuous mode [ 79.467610][ T5754] veth0_macvtap: entered promiscuous mode [ 79.496904][ T5754] veth1_macvtap: entered promiscuous mode [ 79.513377][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.555325][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.585907][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.615582][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.640544][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.665079][ T1011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.725147][ T5742] veth0_vlan: entered promiscuous mode [ 79.739545][ T1011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.752724][ T1011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.784361][ T5742] veth1_vlan: entered promiscuous mode [ 79.795303][ T1011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.815392][ T1011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.857482][ T1011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.881333][ T1011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.910227][ T1011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.046806][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.071846][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.095248][ T5742] veth0_macvtap: entered promiscuous mode [ 80.125115][ T30] audit: type=1400 audit(1777975477.281:181): avc: denied { write } for pid=5972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.173852][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.189851][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.190765][ T5742] veth1_macvtap: entered promiscuous mode [ 80.206584][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.207002][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.221543][ T30] audit: type=1400 audit(1777975477.391:182): avc: denied { write } for pid=5994 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.248822][ T5753] veth0_vlan: entered promiscuous mode [ 80.308989][ T5753] veth1_vlan: entered promiscuous mode [ 80.325413][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.335600][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.352006][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 2026/05/05 10:04:37 executed programs: 10 [ 80.377576][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.436248][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.467625][ T1041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.504297][ T5753] veth0_macvtap: entered promiscuous mode [ 80.528150][ T1041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.536933][ T1041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.550333][ T5753] veth1_macvtap: entered promiscuous mode [ 80.563873][ T1041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.627225][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.637704][ T5745] veth0_vlan: entered promiscuous mode [ 80.653348][ T5735] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.668771][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.704229][ T5745] veth1_vlan: entered promiscuous mode [ 80.732642][ T1041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.745676][ T1041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.747851][ T5651] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.774420][ T1041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.788158][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.799387][ T1041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.805865][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.819337][ T5735] usb 4-1: Using ep0 maxpacket: 32 [ 80.848184][ T5735] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 80.869067][ T5735] usb 4-1: config 0 has no interface number 0 [ 80.884664][ T5735] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.919306][ T5651] usb 3-1: Using ep0 maxpacket: 32 [ 80.924462][ T5735] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 80.925285][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.942345][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.953625][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.961952][ T5752] Bluetooth: hci1: command tx timeout [ 80.964788][ T5745] veth0_macvtap: entered promiscuous mode [ 80.968343][ T50] Bluetooth: hci3: command tx timeout [ 80.976480][ T5735] usb 4-1: Product: syz [ 80.978964][ T5651] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 80.992944][ T5651] usb 3-1: config 0 has no interface number 0 [ 81.000138][ T5651] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.010229][ T5735] usb 4-1: Manufacturer: syz [ 81.017207][ T5651] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 81.032453][ T5745] veth1_macvtap: entered promiscuous mode [ 81.038201][ T50] Bluetooth: hci2: command tx timeout [ 81.038598][ T5651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.048408][ T5735] usb 4-1: SerialNumber: syz [ 81.059724][ T5651] usb 3-1: Product: syz [ 81.067892][ T5651] usb 3-1: Manufacturer: syz [ 81.081027][ T5651] usb 3-1: SerialNumber: syz [ 81.093089][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.097059][ T5651] usb 3-1: config 0 descriptor?? [ 81.106639][ T5735] usb 4-1: config 0 descriptor?? [ 81.119014][ T50] Bluetooth: hci4: command tx timeout [ 81.120193][ T5752] Bluetooth: hci5: command tx timeout [ 81.145756][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.166245][ T5651] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 81.176475][ T5735] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 81.176511][ T5735] em28xx 4-1:0.132: Video interface 132 found: [ 81.217151][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.232404][ T803] cfg80211: failed to load regulatory.db [ 81.252013][ T5651] em28xx 3-1:0.132: Video interface 132 found: [ 81.316916][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.345153][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.362957][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.387479][ T1041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.397287][ T1041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.406772][ T5651] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 81.419060][ T5735] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 81.439195][ T5998] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.473493][ T1041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.485904][ T5651] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 81.504580][ T5735] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 81.504983][ T1041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.540356][ T5651] em28xx 3-1:0.132: board has no eeprom [ 81.557030][ T5735] em28xx 4-1:0.132: board has no eeprom [ 81.608746][ T5998] usb 1-1: Using ep0 maxpacket: 32 [ 81.610577][ T5651] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 81.624100][ T5998] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 81.634692][ T5998] usb 1-1: config 0 has no interface number 0 [ 81.641638][ T5651] em28xx 3-1:0.132: analog set to bulk mode. [ 81.653117][ T5998] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.664614][ T5965] em28xx 3-1:0.132: Registering V4L2 extension [ 81.675916][ T5998] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 81.685779][ T5735] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 81.697146][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 81.697159][ T30] audit: type=1400 audit(1777975478.861:189): avc: denied { write } for pid=6031 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.704653][ T5735] em28xx 4-1:0.132: analog set to bulk mode. [ 81.731269][ T5651] usb 3-1: USB disconnect, device number 2 [ 81.733614][ T5998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.753639][ T5651] em28xx 3-1:0.132: Disconnecting em28xx [ 81.770875][ T5998] usb 1-1: Product: syz [ 81.778192][ T5717] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.778298][ T5998] usb 1-1: Manufacturer: syz [ 81.803392][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.823376][ T5998] usb 1-1: SerialNumber: syz [ 81.841217][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.867222][ T5735] usb 4-1: USB disconnect, device number 2 [ 81.882166][ T5998] usb 1-1: config 0 descriptor?? [ 81.909065][ T5735] em28xx 4-1:0.132: Disconnecting em28xx [ 81.938458][ T5717] usb 5-1: Using ep0 maxpacket: 32 [ 81.964690][ T5717] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 81.989863][ T5965] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 81.998119][ T5998] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 82.003851][ T5717] usb 5-1: config 0 has no interface number 0 [ 82.024070][ T5965] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 82.033811][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.036284][ T5965] em28xx 3-1:0.132: No AC97 audio processor [ 82.045310][ T5998] em28xx 1-1:0.132: Video interface 132 found: [ 82.053321][ T5717] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.062926][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.074112][ T5717] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 82.086131][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.109387][ T5965] usb 3-1: Decoder not found [ 82.114112][ T5717] usb 5-1: Product: syz [ 82.120891][ T5965] em28xx 3-1:0.132: failed to create media graph [ 82.129680][ T5717] usb 5-1: Manufacturer: syz [ 82.135124][ T5965] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 82.142177][ T5717] usb 5-1: SerialNumber: syz [ 82.154447][ T5965] em28xx 3-1:0.132: Remote control support is not available for this card. [ 82.164893][ T802] em28xx 4-1:0.132: Registering V4L2 extension [ 82.164990][ T5717] usb 5-1: config 0 descriptor?? [ 82.178223][ T5998] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 82.182591][ T5717] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 82.203139][ T5717] em28xx 5-1:0.132: Video interface 132 found: [ 82.254751][ T802] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 82.264813][ T5998] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 82.273607][ T802] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 82.283059][ T5998] em28xx 1-1:0.132: board has no eeprom [ 82.288768][ T802] em28xx 4-1:0.132: No AC97 audio processor [ 82.296023][ T802] usb 4-1: Decoder not found [ 82.300720][ T802] em28xx 4-1:0.132: failed to create media graph [ 82.307054][ T802] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 82.314897][ T802] em28xx 4-1:0.132: Remote control support is not available for this card. [ 82.324380][ T5735] em28xx 4-1:0.132: Closing input extension [ 82.332242][ T5651] em28xx 3-1:0.132: Closing input extension [ 82.347598][ T5651] em28xx 3-1:0.132: Freeing device [ 82.348693][ T5735] em28xx 4-1:0.132: Freeing device [ 82.358904][ T5998] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 82.368331][ T5998] em28xx 1-1:0.132: analog set to bulk mode. [ 82.374908][ T9] em28xx 1-1:0.132: Registering V4L2 extension [ 82.414657][ T5998] usb 1-1: USB disconnect, device number 2 [ 82.421129][ T5874] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.430584][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 82.440798][ T5717] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 82.452158][ T5998] em28xx 1-1:0.132: Disconnecting em28xx [ 82.530261][ T5717] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 82.558317][ T5717] em28xx 5-1:0.132: board has no eeprom [ 82.572458][ T9] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 82.583463][ T9] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 82.593487][ T9] em28xx 1-1:0.132: No AC97 audio processor [ 82.601346][ T9] usb 1-1: Decoder not found [ 82.605954][ T9] em28xx 1-1:0.132: failed to create media graph [ 82.612561][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 82.617732][ T9] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 82.626484][ T5874] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 82.628267][ T5717] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 82.636955][ T9] em28xx 1-1:0.132: Remote control support is not available for this card. [ 82.647848][ T5651] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.674752][ T5717] em28xx 5-1:0.132: analog set to bulk mode. [ 82.676388][ T5874] usb 2-1: config 0 has no interface number 0 [ 82.699522][ T5998] em28xx 1-1:0.132: Closing input extension [ 82.709106][ T5874] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.722482][ T5736] em28xx 5-1:0.132: Registering V4L2 extension [ 82.731395][ T5717] usb 5-1: USB disconnect, device number 2 [ 82.738766][ T5735] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.746581][ T5874] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 82.748883][ T5717] em28xx 5-1:0.132: Disconnecting em28xx [ 82.769718][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.793228][ T5998] em28xx 1-1:0.132: Freeing device [ 82.801188][ T5874] usb 2-1: Product: syz [ 82.809279][ T5874] usb 2-1: Manufacturer: syz [ 82.823701][ T5874] usb 2-1: SerialNumber: syz [ 82.837864][ T5651] usb 3-1: Using ep0 maxpacket: 32 [ 82.855465][ T5651] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 82.855650][ T5874] usb 2-1: config 0 descriptor?? [ 82.874549][ T5651] usb 3-1: config 0 has no interface number 0 [ 82.894204][ T5651] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.908019][ T5735] usb 4-1: Using ep0 maxpacket: 32 [ 82.916901][ T5874] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 82.928002][ T5736] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 82.945633][ T5735] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 82.949689][ T5736] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 82.957800][ T5874] em28xx 2-1:0.132: Video interface 132 found: [ 82.971768][ T5735] usb 4-1: config 0 has no interface number 0 [ 82.985759][ T5651] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 82.992080][ T5735] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.018719][ T5651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.026749][ T5736] em28xx 5-1:0.132: No AC97 audio processor [ 83.035230][ T5651] usb 3-1: Product: syz [ 83.041059][ T5735] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 83.045283][ T5736] usb 5-1: Decoder not found [ 83.057163][ T5651] usb 3-1: Manufacturer: syz [ 83.061728][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.062262][ T5651] usb 3-1: SerialNumber: syz [ 83.074261][ T5735] usb 4-1: Product: syz [ 83.074577][ T5736] em28xx 5-1:0.132: failed to create media graph [ 83.078891][ T5735] usb 4-1: Manufacturer: syz [ 83.088160][ T5736] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 83.090118][ T5735] usb 4-1: SerialNumber: syz [ 83.099480][ T5651] usb 3-1: config 0 descriptor?? [ 83.117133][ T5651] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 83.128501][ T5998] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.130003][ T5736] em28xx 5-1:0.132: Remote control support is not available for this card. [ 83.136602][ T6053] ================================================================== [ 83.146940][ T5651] em28xx 3-1:0.132: Video interface 132 found: [ 83.152839][ T6053] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 83.152869][ T6053] Read of size 4 at addr ffff888077b9c860 by task v4l_id/6053 [ 83.152891][ T6053] [ 83.152900][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 83.152919][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.152928][ T6053] Call Trace: [ 83.152935][ T6053] [ 83.152941][ T6053] dump_stack_lvl+0x100/0x190 [ 83.152959][ T6053] print_report+0x13d/0x4b0 [ 83.152980][ T6053] ? __virt_addr_valid+0x239/0x430 [ 83.152997][ T6053] ? v4l2_open+0x351/0x490 [ 83.153016][ T6053] kasan_report+0xdf/0x1d0 [ 83.153033][ T6053] ? v4l2_open+0x351/0x490 [ 83.153054][ T6053] v4l2_open+0x351/0x490 [ 83.153073][ T6053] ? __pfx_v4l2_open+0x10/0x10 [ 83.153092][ T6053] chrdev_open+0x234/0x6a0 [ 83.153111][ T6053] ? __pfx_chrdev_open+0x10/0x10 [ 83.153128][ T6053] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 83.153151][ T6053] do_dentry_open+0x6d8/0x1660 [ 83.153167][ T6053] ? __pfx_chrdev_open+0x10/0x10 [ 83.153186][ T6053] vfs_open+0x82/0x3f0 [ 83.153206][ T6053] path_openat+0x208c/0x31a0 [ 83.153226][ T6053] ? __pfx_path_openat+0x10/0x10 [ 83.153247][ T6053] do_file_open+0x20e/0x430 [ 83.153272][ T6053] ? __pfx_do_file_open+0x10/0x10 [ 83.153295][ T6053] ? alloc_fd+0x476/0x790 [ 83.153315][ T6053] ? do_getname+0x191/0x390 [ 83.153337][ T6053] do_sys_openat2+0x10d/0x1e0 [ 83.153357][ T6053] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.153394][ T6053] __x64_sys_openat+0x12d/0x210 [ 83.153414][ T6053] ? __pfx___x64_sys_openat+0x10/0x10 [ 83.153436][ T6053] ? rcu_is_watching+0x12/0xc0 [ 83.153464][ T6053] do_syscall_64+0x10b/0xf80 [ 83.153481][ T6053] ? clear_bhb_loop+0x40/0x90 [ 83.153497][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.153512][ T6053] RIP: 0033:0x7f2139dd5407 [ 83.153524][ T6053] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 83.153538][ T6053] RSP: 002b:00007ffdde755580 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 83.153553][ T6053] RAX: ffffffffffffffda RBX: 00007f2139d49880 RCX: 00007f2139dd5407 [ 83.153562][ T6053] RDX: 0000000000000000 RSI: 00007ffdde756f1c RDI: ffffffffffffff9c [ 83.153571][ T6053] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 83.153580][ T6053] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 83.153588][ T6053] R13: 00007ffdde7557d0 R14: 00007f213a02e000 R15: 000055e8680e04d8 [ 83.153602][ T6053] [ 83.153607][ T6053] [ 83.159222][ T5717] em28xx 5-1:0.132: Closing input extension [ 83.166223][ T6053] Allocated by task 5736: [ 83.166232][ T6053] kasan_save_stack+0x30/0x50 [ 83.426135][ T6053] kasan_save_track+0x14/0x30 [ 83.430806][ T6053] __kasan_kmalloc+0xaa/0xb0 [ 83.435390][ T6053] em28xx_v4l2_init.cold+0x94/0x3a40 [ 83.440658][ T6053] em28xx_init_extension+0x13a/0x200 [ 83.445933][ T6053] request_module_async+0x61/0x80 [ 83.450934][ T6053] process_one_work+0xa0e/0x1980 [ 83.455854][ T6053] worker_thread+0x5ef/0xe50 [ 83.460425][ T6053] kthread+0x370/0x450 [ 83.464473][ T6053] ret_from_fork+0x72b/0xd50 [ 83.469047][ T6053] ret_from_fork_asm+0x1a/0x30 [ 83.473795][ T6053] [ 83.476095][ T6053] Freed by task 5736: [ 83.480051][ T6053] kasan_save_stack+0x30/0x50 [ 83.484715][ T6053] kasan_save_track+0x14/0x30 [ 83.489379][ T6053] kasan_save_free_info+0x3b/0x70 [ 83.494462][ T6053] __kasan_slab_free+0x5f/0x80 [ 83.499202][ T6053] kfree+0x223/0x6c0 [ 83.503077][ T6053] kref_put.isra.0+0x53/0x75 [ 83.507644][ T6053] em28xx_v4l2_init.cold+0x280/0x3a40 [ 83.513007][ T6053] em28xx_init_extension+0x13a/0x200 [ 83.518287][ T6053] request_module_async+0x61/0x80 [ 83.523291][ T6053] process_one_work+0xa0e/0x1980 [ 83.528222][ T6053] worker_thread+0x5ef/0xe50 [ 83.532794][ T6053] kthread+0x370/0x450 [ 83.536840][ T6053] ret_from_fork+0x72b/0xd50 [ 83.541407][ T6053] ret_from_fork_asm+0x1a/0x30 [ 83.546153][ T6053] [ 83.548454][ T6053] The buggy address belongs to the object at ffff888077b9c000 [ 83.548454][ T6053] which belongs to the cache kmalloc-8k of size 8192 [ 83.562486][ T6053] The buggy address is located 2144 bytes inside of [ 83.562486][ T6053] freed 8192-byte region [ffff888077b9c000, ffff888077b9e000) [ 83.576432][ T6053] [ 83.578736][ T6053] The buggy address belongs to the physical page: [ 83.585119][ T6053] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77b98 [ 83.593858][ T6053] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 83.602345][ T6053] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 83.609872][ T6053] page_type: f5(slab) [ 83.613833][ T6053] raw: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 83.622392][ T6053] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 83.630953][ T6053] head: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 83.639600][ T6053] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 83.648245][ T6053] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 83.656893][ T6053] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 83.665537][ T6053] page dumped because: kasan: bad access detected [ 83.671921][ T6053] page_owner tracks the page as allocated [ 83.677609][ T6053] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5660, tgid 5660 (syz-executor), ts 69963065732, free_ts 69347213502 [ 83.698945][ T6053] post_alloc_hook+0x153/0x170 [ 83.703703][ T6053] get_page_from_freelist+0x11a6/0x33b0 [ 83.709230][ T6053] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 83.715109][ T6053] new_slab+0xa6/0x6c0 [ 83.719159][ T6053] refill_objects+0x277/0x420 [ 83.723819][ T6053] __pcs_replace_empty_main+0x375/0x650 [ 83.729348][ T6053] __kmalloc_noprof+0x688/0x850 [ 83.734180][ T6053] ops_init+0x77/0x5f0 [ 83.738225][ T6053] setup_net+0x118/0x3a0 [ 83.742440][ T6053] copy_net_ns+0x46f/0x7c0 [ 83.746832][ T6053] create_new_namespaces+0x3ea/0xac0 [ 83.752105][ T6053] unshare_nsproxy_namespaces+0xf2/0x220 [ 83.757716][ T6053] ksys_unshare+0x438/0xab0 [ 83.762195][ T6053] __x64_sys_unshare+0x31/0x40 [ 83.766935][ T6053] do_syscall_64+0x10b/0xf80 [ 83.771505][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.777375][ T6053] page last free pid 5655 tgid 5655 stack trace: [ 83.783676][ T6053] __free_frozen_pages+0x747/0x1040 [ 83.788856][ T6053] qlist_free_all+0x47/0xf0 [ 83.793359][ T6053] kasan_quarantine_reduce+0x1a0/0x1f0 [ 83.798800][ T6053] __kasan_slab_alloc+0x69/0x90 [ 83.803634][ T6053] __kmalloc_cache_node_noprof+0x287/0x770 [ 83.809418][ T6053] __get_vm_area_node+0x101/0x330 [ 83.814422][ T6053] __vmalloc_node_range_noprof+0x228/0x1630 [ 83.820296][ T6053] vmalloc_user_noprof+0x9e/0xe0 [ 83.825213][ T6053] kcov_ioctl+0x4c/0x720 [ 83.829434][ T6053] __x64_sys_ioctl+0x18e/0x210 [ 83.834178][ T6053] do_syscall_64+0x10b/0xf80 [ 83.838767][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.844643][ T6053] [ 83.846943][ T6053] Memory state around the buggy address: [ 83.852547][ T6053] ffff888077b9c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.860589][ T6053] ffff888077b9c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.868625][ T6053] >ffff888077b9c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.876658][ T6053] ^ [ 83.883911][ T6053] ffff888077b9c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.891952][ T6053] ffff888077b9c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.900005][ T6053] ================================================================== [ 83.913852][ T5735] usb 4-1: config 0 descriptor?? [ 83.929154][ T5874] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 83.942322][ T5735] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 83.945414][ T5717] em28xx 5-1:0.132: Freeing device [ 83.952128][ T5735] em28xx 4-1:0.132: Video interface 132 found: [ 83.953162][ T6053] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.953175][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 83.953193][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.953202][ T6053] Call Trace: [ 83.953207][ T6053] [ 83.953213][ T6053] dump_stack_lvl+0x100/0x190 [ 83.953234][ T6053] vpanic+0x552/0x970 [ 83.953252][ T6053] ? __pfx_vpanic+0x10/0x10 [ 83.953266][ T6053] ? rcu_is_watching+0x12/0xc0 [ 83.953291][ T6053] ? v4l2_open+0x351/0x490 [ 83.953310][ T6053] panic+0xd1/0xe0 [ 83.953324][ T6053] ? __pfx_panic+0x10/0x10 [ 83.953338][ T6053] ? v4l2_open+0x351/0x490 [ 83.953357][ T6053] ? preempt_schedule_common+0x42/0xc0 [ 83.953375][ T6053] ? check_panic_on_warn+0x1f/0x90 [ 83.953393][ T6053] check_panic_on_warn.cold+0x19/0x34 [ 83.953409][ T6053] end_report.part.0+0x3a/0x90 [ 83.953430][ T6053] kasan_report.cold+0xe/0x18 [ 83.953451][ T6053] ? v4l2_open+0x351/0x490 [ 83.953472][ T6053] v4l2_open+0x351/0x490 [ 83.953493][ T6053] ? __pfx_v4l2_open+0x10/0x10 [ 83.953512][ T6053] chrdev_open+0x234/0x6a0 [ 83.953531][ T6053] ? __pfx_chrdev_open+0x10/0x10 [ 83.953549][ T6053] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 83.953571][ T6053] do_dentry_open+0x6d8/0x1660 [ 83.953587][ T6053] ? __pfx_chrdev_open+0x10/0x10 [ 83.953607][ T6053] vfs_open+0x82/0x3f0 [ 83.953627][ T6053] path_openat+0x208c/0x31a0 [ 83.953648][ T6053] ? __pfx_path_openat+0x10/0x10 [ 83.953669][ T6053] do_file_open+0x20e/0x430 [ 83.953688][ T6053] ? __pfx_do_file_open+0x10/0x10 [ 83.953712][ T6053] ? alloc_fd+0x476/0x790 [ 83.953731][ T6053] ? do_getname+0x191/0x390 [ 83.953753][ T6053] do_sys_openat2+0x10d/0x1e0 [ 83.953773][ T6053] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.953796][ T6053] __x64_sys_openat+0x12d/0x210 [ 83.953817][ T6053] ? __pfx___x64_sys_openat+0x10/0x10 [ 83.953839][ T6053] ? rcu_is_watching+0x12/0xc0 [ 83.953862][ T6053] do_syscall_64+0x10b/0xf80 [ 83.953878][ T6053] ? clear_bhb_loop+0x40/0x90 [ 83.953896][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.953911][ T6053] RIP: 0033:0x7f2139dd5407 [ 83.953923][ T6053] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 83.953937][ T6053] RSP: 002b:00007ffdde755580 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 83.953952][ T6053] RAX: ffffffffffffffda RBX: 00007f2139d49880 RCX: 00007f2139dd5407 [ 83.953962][ T6053] RDX: 0000000000000000 RSI: 00007ffdde756f1c RDI: ffffffffffffff9c [ 83.953972][ T6053] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 83.953981][ T6053] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 83.953990][ T6053] R13: 00007ffdde7557d0 R14: 00007f213a02e000 R15: 000055e8680e04d8 [ 83.954009][ T6053] [ 83.957798][ T6053] Kernel Offset: disabled