Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. 2026/05/08 02:35:16 parsed 1 programs [ 71.104304][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 71.104319][ T29] audit: type=1400 audit(1778207716.940:129): avc: denied { node_bind } for pid=5610 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 73.373453][ T29] audit: type=1400 audit(1778207719.210:130): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 73.397678][ T29] audit: type=1400 audit(1778207719.230:131): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.401318][ T5616] cgroup: Unknown subsys name 'net' [ 73.427931][ T29] audit: type=1400 audit(1778207719.260:132): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.565492][ T5616] cgroup: Unknown subsys name 'cpuset' [ 73.573528][ T5616] cgroup: Unknown subsys name 'rlimit' [ 73.670827][ T29] audit: type=1400 audit(1778207719.500:133): avc: denied { setattr } for pid=5616 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.705174][ T29] audit: type=1400 audit(1778207719.500:134): avc: denied { create } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.736649][ T29] audit: type=1400 audit(1778207719.500:135): avc: denied { write } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.763989][ T29] audit: type=1400 audit(1778207719.500:136): avc: denied { read } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.784610][ T29] audit: type=1400 audit(1778207719.520:137): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 73.792364][ T5621] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 73.809763][ T29] audit: type=1400 audit(1778207719.520:138): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 74.819143][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.734688][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 76.734705][ T29] audit: type=1400 audit(1778207722.570:143): avc: denied { execmem } for pid=5628 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.793390][ T29] audit: type=1400 audit(1778207722.620:144): avc: denied { mounton } for pid=5630 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 76.862668][ T29] audit: type=1400 audit(1778207722.620:145): avc: denied { mount } for pid=5630 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.912131][ T29] audit: type=1400 audit(1778207722.630:146): avc: denied { read } for pid=5633 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.962673][ T29] audit: type=1400 audit(1778207722.630:147): avc: denied { open } for pid=5633 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.022537][ T29] audit: type=1400 audit(1778207722.640:148): avc: denied { mounton } for pid=5630 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.072336][ T29] audit: type=1400 audit(1778207722.900:149): avc: denied { mounton } for pid=5633 comm="syz-executor" path="/root/syzkaller.gPOkWn/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 77.119425][ T29] audit: type=1400 audit(1778207722.910:150): avc: denied { mount } for pid=5633 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.155366][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.170760][ T29] audit: type=1400 audit(1778207722.910:151): avc: denied { mounton } for pid=5633 comm="syz-executor" path="/root/syzkaller.gPOkWn/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.202013][ T29] audit: type=1400 audit(1778207722.910:152): avc: denied { mount } for pid=5633 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.420995][ T5682] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.437411][ T5682] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.445688][ T5682] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.457728][ T5682] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.472031][ T5682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.622305][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.639996][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.698414][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.718074][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.075097][ T5679] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.083992][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.091163][ T5679] bridge_slave_0: entered allmulticast mode [ 80.098358][ T5679] bridge_slave_0: entered promiscuous mode [ 80.107293][ T5679] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.114448][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.121573][ T5679] bridge_slave_1: entered allmulticast mode [ 80.128874][ T5679] bridge_slave_1: entered promiscuous mode [ 80.155336][ T5679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.166231][ T5679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.188751][ T5679] team0: Port device team_slave_0 added [ 80.195740][ T5679] team0: Port device team_slave_1 added [ 80.215114][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.222037][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.249198][ T5679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.262494][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.269842][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.295803][ T5679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.331963][ T5679] hsr_slave_0: entered promiscuous mode [ 80.338221][ T5679] hsr_slave_1: entered promiscuous mode [ 80.447008][ T5679] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.458566][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.466984][ T5679] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.476045][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.483881][ T5679] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.494297][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.502266][ T5679] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.511365][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.535882][ T5679] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.543330][ T5679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.550884][ T5679] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.557987][ T5679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.604061][ T5679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.619163][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.628230][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.644267][ T5679] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.655544][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.663259][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.676250][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.683335][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.922536][ T5679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.966088][ T5679] veth0_vlan: entered promiscuous mode [ 80.978129][ T5679] veth1_vlan: entered promiscuous mode [ 81.001417][ T5679] veth0_macvtap: entered promiscuous mode [ 81.012469][ T5679] veth1_macvtap: entered promiscuous mode [ 81.028380][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.040966][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.058881][ T138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.068373][ T138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.079553][ T138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.088401][ T138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/08 02:35:27 executed programs: 0 [ 81.320628][ T5755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.330730][ T5755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.338315][ T4928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.348183][ T4928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.364256][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.378420][ T5758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.387613][ T5761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.397507][ T5764] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.398523][ T5761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.406105][ T5764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.415050][ T5761] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.420497][ T5764] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.434474][ T5766] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.438263][ T5764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.451645][ T5764] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.454118][ T5682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.466148][ T5682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.467555][ T5768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.473884][ T5682] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.481516][ T5768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.490994][ T5682] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.496413][ T5768] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.502483][ T5682] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.509973][ T5768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.516404][ T5682] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.080485][ T138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.140728][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.147926][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.155366][ T5760] bridge_slave_0: entered allmulticast mode [ 83.162107][ T5760] bridge_slave_0: entered promiscuous mode [ 83.218449][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.225758][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.233014][ T5760] bridge_slave_1: entered allmulticast mode [ 83.240365][ T5760] bridge_slave_1: entered promiscuous mode [ 83.255655][ T138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.333240][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.379184][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.442518][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.449745][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.457090][ T5754] bridge_slave_0: entered allmulticast mode [ 83.463652][ T5768] Bluetooth: hci1: command tx timeout [ 83.464354][ T5754] bridge_slave_0: entered promiscuous mode [ 83.476050][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.483682][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.490908][ T5749] bridge_slave_0: entered allmulticast mode [ 83.497827][ T5749] bridge_slave_0: entered promiscuous mode [ 83.508906][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.516572][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.523828][ T5759] bridge_slave_0: entered allmulticast mode [ 83.530598][ T5759] bridge_slave_0: entered promiscuous mode [ 83.549024][ T5760] team0: Port device team_slave_0 added [ 83.554802][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.561886][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.569051][ T5754] bridge_slave_1: entered allmulticast mode [ 83.576537][ T5754] bridge_slave_1: entered promiscuous mode [ 83.584308][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.591361][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.598841][ T5749] bridge_slave_1: entered allmulticast mode [ 83.606073][ T5749] bridge_slave_1: entered promiscuous mode [ 83.612945][ T5682] Bluetooth: hci4: command tx timeout [ 83.619078][ T5758] Bluetooth: hci3: command tx timeout [ 83.619095][ T5755] Bluetooth: hci0: command tx timeout [ 83.630775][ T5768] Bluetooth: hci2: command tx timeout [ 83.631805][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.643734][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.650867][ T5759] bridge_slave_1: entered allmulticast mode [ 83.657975][ T5759] bridge_slave_1: entered promiscuous mode [ 83.673315][ T5760] team0: Port device team_slave_1 added [ 83.733086][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.740274][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.747503][ T5753] bridge_slave_0: entered allmulticast mode [ 83.754284][ T5753] bridge_slave_0: entered promiscuous mode [ 83.761963][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.769338][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.776705][ T5753] bridge_slave_1: entered allmulticast mode [ 83.784012][ T5753] bridge_slave_1: entered promiscuous mode [ 83.793687][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.811771][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.825090][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.836110][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.855232][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.872571][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.880265][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.906271][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.918983][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.963187][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.970156][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.996104][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.024435][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.035584][ T5759] team0: Port device team_slave_0 added [ 84.048237][ T5754] team0: Port device team_slave_0 added [ 84.055490][ T5749] team0: Port device team_slave_0 added [ 84.063053][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.075764][ T5759] team0: Port device team_slave_1 added [ 84.090965][ T5754] team0: Port device team_slave_1 added [ 84.098358][ T5749] team0: Port device team_slave_1 added [ 84.152435][ T5753] team0: Port device team_slave_0 added [ 84.158729][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.165984][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.193256][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.227414][ T5753] team0: Port device team_slave_1 added [ 84.234083][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.241307][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.268316][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.279926][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.287276][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.313316][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.324781][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.331788][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.358489][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.371123][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.378508][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.404817][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.420720][ T5760] hsr_slave_0: entered promiscuous mode [ 84.427143][ T5760] hsr_slave_1: entered promiscuous mode [ 84.433292][ T5760] debugfs: 'hsr0' already exists in 'hsr' [ 84.439078][ T5760] Cannot create hsr debugfs directory [ 84.456657][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.463619][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.489542][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.541392][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.548402][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.575234][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.587468][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.594485][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.620450][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.689628][ T138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.725385][ T5759] hsr_slave_0: entered promiscuous mode [ 84.731499][ T5759] hsr_slave_1: entered promiscuous mode [ 84.739493][ T5759] debugfs: 'hsr0' already exists in 'hsr' [ 84.745572][ T5759] Cannot create hsr debugfs directory [ 84.767280][ T5754] hsr_slave_0: entered promiscuous mode [ 84.773510][ T5754] hsr_slave_1: entered promiscuous mode [ 84.779499][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 84.785359][ T5754] Cannot create hsr debugfs directory [ 84.795268][ T5749] hsr_slave_0: entered promiscuous mode [ 84.801401][ T5749] hsr_slave_1: entered promiscuous mode [ 84.807559][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 84.815530][ T5749] Cannot create hsr debugfs directory [ 84.848885][ T138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.903539][ T5753] hsr_slave_0: entered promiscuous mode [ 84.910611][ T5753] hsr_slave_1: entered promiscuous mode [ 84.916876][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 84.923070][ T5753] Cannot create hsr debugfs directory [ 85.262153][ T138] bridge_slave_1: left allmulticast mode [ 85.268119][ T138] bridge_slave_1: left promiscuous mode [ 85.274941][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.285678][ T138] bridge_slave_0: left allmulticast mode [ 85.291508][ T138] bridge_slave_0: left promiscuous mode [ 85.298794][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.500366][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.510891][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.520602][ T138] bond0 (unregistering): Released all slaves [ 85.532929][ T5758] Bluetooth: hci1: command tx timeout [ 85.693144][ T5758] Bluetooth: hci3: command tx timeout [ 85.698588][ T5768] Bluetooth: hci0: command tx timeout [ 85.702695][ T5682] Bluetooth: hci2: command tx timeout [ 85.704240][ T5768] Bluetooth: hci4: command tx timeout [ 85.918716][ T138] hsr_slave_0: left promiscuous mode [ 85.926743][ T138] hsr_slave_1: left promiscuous mode [ 85.933380][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.940801][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.949061][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.956480][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.970939][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 85.970953][ T29] audit: type=1400 audit(1778207731.800:174): avc: denied { write } for pid=5848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.971223][ T138] veth1_macvtap: left promiscuous mode [ 86.009300][ T138] veth0_macvtap: left promiscuous mode [ 86.015909][ T138] veth1_vlan: left promiscuous mode [ 86.021265][ T138] veth0_vlan: left promiscuous mode [ 86.056218][ T29] audit: type=1400 audit(1778207731.890:175): avc: denied { write } for pid=5859 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.214514][ T138] team0 (unregistering): Port device team_slave_1 removed [ 86.227282][ T138] team0 (unregistering): Port device team_slave_0 removed [ 86.378293][ T5760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.404034][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.411825][ T5760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.424215][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.433747][ T5760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.454732][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.466869][ T5760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.486825][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.498515][ T42] cfg80211: failed to load regulatory.db [ 86.626450][ T5759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.650314][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.670359][ T5759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.676903][ T29] audit: type=1400 audit(1778207732.510:176): avc: denied { write } for pid=5861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.703822][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.711661][ T5759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.723107][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.751983][ T5759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.762309][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.796131][ T29] audit: type=1400 audit(1778207732.630:177): avc: denied { write } for pid=5878 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.891147][ T5749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.910809][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.918712][ T5749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.927946][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.935990][ T5749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.945428][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.960305][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.968686][ T5749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.977573][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.030519][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.068633][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.075835][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.090835][ T5753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.100459][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.108454][ T5753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.121015][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.130339][ T5753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.140106][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.148466][ T5753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.157195][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.171423][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.178568][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.282952][ T5754] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.291671][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.309459][ T5754] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.318786][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.327003][ T5754] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.337327][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.352222][ T5754] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.361687][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.397709][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.468944][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.499374][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.510346][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.517500][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.555293][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.562376][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.585873][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.595513][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.613041][ T5768] Bluetooth: hci1: command tx timeout [ 87.624948][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.632079][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.668269][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.675419][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.695669][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.725954][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.733117][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.768176][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.775333][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.786284][ T5682] Bluetooth: hci2: command tx timeout [ 87.788017][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.791693][ T5758] Bluetooth: hci3: command tx timeout [ 87.800202][ T5755] Bluetooth: hci0: command tx timeout [ 87.804355][ T5768] Bluetooth: hci4: command tx timeout [ 87.859911][ T5759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.902222][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.921314][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.928402][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.939358][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.946456][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.961763][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.175960][ T5760] veth0_vlan: entered promiscuous mode [ 88.225442][ T5760] veth1_vlan: entered promiscuous mode [ 88.351351][ T5760] veth0_macvtap: entered promiscuous mode [ 88.396083][ T5760] veth1_macvtap: entered promiscuous mode [ 88.498227][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.540405][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.583375][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.616595][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.655023][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.665695][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.863547][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.878475][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.888453][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.904819][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.001960][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.031026][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.065448][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 2026/05/08 02:35:34 executed programs: 10 [ 89.121178][ T5749] veth0_vlan: entered promiscuous mode [ 89.162230][ T29] audit: type=1400 audit(1778207734.990:178): avc: denied { read write } for pid=5959 comm="syz.3.20" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.223982][ T29] audit: type=1400 audit(1778207734.990:179): avc: denied { open } for pid=5959 comm="syz.3.20" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.251022][ T5749] veth1_vlan: entered promiscuous mode [ 89.268784][ T29] audit: type=1400 audit(1778207735.030:180): avc: denied { ioctl } for pid=5959 comm="syz.3.20" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.301353][ T5753] veth0_vlan: entered promiscuous mode [ 89.322018][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.340104][ T5749] veth0_macvtap: entered promiscuous mode [ 89.350706][ T5749] veth1_macvtap: entered promiscuous mode [ 89.370296][ T5753] veth1_vlan: entered promiscuous mode [ 89.394800][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.418808][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.437894][ T1162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.452904][ T42] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.466905][ T1162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.475748][ T1162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.497217][ T1162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.550755][ T5759] veth0_vlan: entered promiscuous mode [ 89.566661][ T5753] veth0_macvtap: entered promiscuous mode [ 89.577734][ T5754] veth0_vlan: entered promiscuous mode [ 89.586661][ T5759] veth1_vlan: entered promiscuous mode [ 89.610407][ T5754] veth1_vlan: entered promiscuous mode [ 89.612845][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 89.625985][ T5753] veth1_macvtap: entered promiscuous mode [ 89.651344][ T42] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 89.661135][ T42] usb 4-1: config 0 has no interface number 0 [ 89.675362][ T42] usb 4-1: config 0 interface 191 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.693665][ T5768] Bluetooth: hci1: command tx timeout [ 89.697487][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.704415][ T42] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 89.716798][ T42] usb 4-1: New USB device strings: Mfr=1, Product=226, SerialNumber=2 [ 89.725805][ T42] usb 4-1: Product: syz [ 89.730522][ T42] usb 4-1: Manufacturer: syz [ 89.735398][ T42] usb 4-1: SerialNumber: syz [ 89.750400][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.759001][ T42] usb 4-1: config 0 descriptor?? [ 89.777471][ T42] em28xx 4-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 89.787595][ T42] em28xx 4-1:0.191: Video interface 191 found: isoc [ 89.834162][ T1162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.846574][ T1162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.853335][ T5768] Bluetooth: hci4: command tx timeout [ 89.860686][ T5755] Bluetooth: hci3: command tx timeout [ 89.860712][ T5755] Bluetooth: hci2: command tx timeout [ 89.860732][ T5755] Bluetooth: hci0: command tx timeout [ 89.879830][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.899724][ T1162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.909177][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.921764][ T1162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.942572][ T5759] veth0_macvtap: entered promiscuous mode [ 89.951742][ T5754] veth0_macvtap: entered promiscuous mode [ 89.993938][ T5759] veth1_macvtap: entered promiscuous mode [ 90.008520][ T5754] veth1_macvtap: entered promiscuous mode [ 90.025403][ T42] em28xx 4-1:0.191: unknown em28xx chip ID (0) [ 90.032809][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.042549][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.062327][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.103851][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.139652][ T42] em28xx 4-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 90.140939][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.149843][ T42] em28xx 4-1:0.191: board has no eeprom [ 90.161871][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.177018][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.190020][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.221329][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.230856][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.235510][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.247586][ T138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.258485][ T42] em28xx 4-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 90.266511][ T42] em28xx 4-1:0.191: analog set to isoc mode. [ 90.274888][ T804] em28xx 4-1:0.191: Registering V4L2 extension [ 90.289677][ T138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.300052][ T138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.320040][ T42] usb 4-1: USB disconnect, device number 2 [ 90.336333][ T42] em28xx 4-1:0.191: Disconnecting em28xx [ 90.340088][ T138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.363054][ T5965] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.379480][ T138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.444701][ T138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.469703][ T138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.505051][ T804] em28xx 4-1:0.191: Config register raw data: 0xffffffed [ 90.513163][ T804] em28xx 4-1:0.191: AC97 chip type couldn't be determined [ 90.531107][ T804] em28xx 4-1:0.191: No AC97 audio processor [ 90.546579][ T5965] usb 1-1: Using ep0 maxpacket: 8 [ 90.556130][ T804] usb 4-1: Decoder not found [ 90.563252][ T5965] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 90.565908][ T804] em28xx 4-1:0.191: failed to create media graph [ 90.573548][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.585040][ T804] em28xx 4-1:0.191: V4L2 device video103 deregistered [ 90.597709][ T804] em28xx 4-1:0.191: Remote control support is not available for this card. [ 90.598653][ T5965] usb 1-1: config 0 has no interface number 0 [ 90.607332][ T42] em28xx 4-1:0.191: Closing input extension [ 90.616484][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.626583][ T5965] usb 1-1: config 0 interface 191 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.631698][ T42] em28xx 4-1:0.191: Freeing device [ 90.651388][ T5965] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 90.668485][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=226, SerialNumber=2 [ 90.689485][ T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.703626][ T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.711253][ T5965] usb 1-1: Product: syz [ 90.715513][ T5965] usb 1-1: Manufacturer: syz [ 90.728028][ T5965] usb 1-1: SerialNumber: syz [ 90.742898][ T5744] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.754226][ T5965] usb 1-1: config 0 descriptor?? [ 90.778213][ T5965] em28xx 1-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 90.791787][ T5965] em28xx 1-1:0.191: Video interface 191 found: isoc [ 90.803928][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.814460][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.849407][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.857584][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.903535][ T5744] usb 2-1: Using ep0 maxpacket: 8 [ 90.924332][ T5744] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 90.938885][ T5744] usb 2-1: config 0 has no interface number 0 [ 90.953922][ T42] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.971983][ T5744] usb 2-1: config 0 interface 191 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.000708][ T5744] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 91.010805][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=226, SerialNumber=2 [ 91.019037][ T5744] usb 2-1: Product: syz [ 91.023862][ T5965] em28xx 1-1:0.191: unknown em28xx chip ID (0) [ 91.030094][ T5744] usb 2-1: Manufacturer: syz [ 91.035539][ T5744] usb 2-1: SerialNumber: syz [ 91.042174][ T5744] usb 2-1: config 0 descriptor?? [ 91.051266][ T5744] em28xx 2-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 91.065243][ T5744] em28xx 2-1:0.191: Video interface 191 found: isoc [ 91.108051][ T5965] em28xx 1-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 91.117404][ T5965] em28xx 1-1:0.191: board has no eeprom [ 91.122730][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 91.130166][ T42] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 91.139579][ T42] usb 4-1: config 0 has no interface number 0 [ 91.146037][ T42] usb 4-1: config 0 interface 191 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.159138][ T42] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 91.168511][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.176283][ T42] usb 4-1: New USB device strings: Mfr=1, Product=226, SerialNumber=2 [ 91.184613][ T42] usb 4-1: Product: syz [ 91.189283][ T42] usb 4-1: Manufacturer: syz [ 91.192806][ T5965] em28xx 1-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 91.194906][ T42] usb 4-1: SerialNumber: syz [ 91.202873][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.210737][ T42] usb 4-1: config 0 descriptor?? [ 91.225855][ T5965] em28xx 1-1:0.191: analog set to isoc mode. [ 91.232277][ T5733] em28xx 1-1:0.191: Registering V4L2 extension [ 91.237889][ T42] em28xx 4-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 91.246497][ T5965] usb 1-1: USB disconnect, device number 2 [ 91.267246][ T5965] em28xx 1-1:0.191: Disconnecting em28xx [ 91.274086][ T42] em28xx 4-1:0.191: Video interface 191 found: isoc [ 91.314349][ T5744] em28xx 2-1:0.191: unknown em28xx chip ID (0) [ 91.343289][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 91.351037][ T5892] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 91.366747][ T5892] usb 3-1: config 0 has no interface number 0 [ 91.370467][ T5733] em28xx 1-1:0.191: Config register raw data: 0xffffffed [ 91.374298][ T5892] usb 3-1: config 0 interface 191 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.384913][ T5744] em28xx 2-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 91.396008][ T5892] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 91.401745][ T5733] em28xx 1-1:0.191: AC97 chip type couldn't be determined [ 91.412142][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=226, SerialNumber=2 [ 91.417483][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 91.431949][ T5744] em28xx 2-1:0.191: board has no eeprom [ 91.435013][ T5892] usb 3-1: Product: syz [ 91.441166][ T5733] em28xx 1-1:0.191: No AC97 audio processor [ 91.441851][ T5892] usb 3-1: Manufacturer: syz [ 91.457777][ T5892] usb 3-1: SerialNumber: syz [ 91.458395][ T9] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 91.473880][ T5733] usb 1-1: Decoder not found [ 91.478498][ T5733] em28xx 1-1:0.191: failed to create media graph [ 91.482458][ T5892] usb 3-1: config 0 descriptor?? [ 91.486798][ T9] usb 5-1: config 0 has no interface number 0 [ 91.490213][ T42] em28xx 4-1:0.191: unknown em28xx chip ID (0) [ 91.504122][ T5733] em28xx 1-1:0.191: V4L2 device video103 deregistered [ 91.514365][ T5892] em28xx 3-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 91.522797][ T9] usb 5-1: config 0 interface 191 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.535518][ T5744] em28xx 2-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 91.540224][ T5892] em28xx 3-1:0.191: Video interface 191 found: isoc [ 91.546511][ T5733] em28xx 1-1:0.191: Remote control support is not available for this card. [ 91.562947][ T5744] em28xx 2-1:0.191: analog set to isoc mode. [ 91.572914][ T9] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 91.582542][ T42] em28xx 4-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 91.583820][ T5732] em28xx 2-1:0.191: Registering V4L2 extension [ 91.597499][ T42] em28xx 4-1:0.191: board has no eeprom [ 91.607140][ T9] usb 5-1: New USB device strings: Mfr=1, Product=226, SerialNumber=2 [ 91.618478][ T5744] usb 2-1: USB disconnect, device number 2 [ 91.624727][ T9] usb 5-1: Product: syz [ 91.631513][ T9] usb 5-1: Manufacturer: syz [ 91.636657][ T5744] em28xx 2-1:0.191: Disconnecting em28xx [ 91.642767][ T9] usb 5-1: SerialNumber: syz [ 91.652819][ T42] em28xx 4-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 91.654869][ T9] usb 5-1: config 0 descriptor?? [ 91.675543][ T42] em28xx 4-1:0.191: analog set to isoc mode. [ 91.690972][ T9] em28xx 5-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 91.701513][ T9] em28xx 5-1:0.191: Video interface 191 found: isoc [ 91.719513][ T42] usb 4-1: USB disconnect, device number 3 [ 91.744268][ T42] em28xx 4-1:0.191: Disconnecting em28xx [ 91.774103][ T5892] em28xx 3-1:0.191: unknown em28xx chip ID (0) [ 91.815866][ T5732] em28xx 2-1:0.191: Config register raw data: 0xffffffed [ 91.823116][ T5732] em28xx 2-1:0.191: AC97 chip type couldn't be determined [ 91.840210][ T5732] em28xx 2-1:0.191: No AC97 audio processor [ 91.848871][ T5732] usb 2-1: Decoder not found [ 91.860552][ T5892] em28xx 3-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 91.871095][ T5892] em28xx 3-1:0.191: board has no eeprom [ 91.876060][ T5732] em28xx 2-1:0.191: failed to create media graph [ 91.883591][ T5732] em28xx 2-1:0.191: V4L2 device video103 deregistered [ 91.897414][ T5732] em28xx 2-1:0.191: Remote control support is not available for this card. [ 91.906966][ T5965] em28xx 1-1:0.191: Closing input extension [ 91.914083][ T804] em28xx 4-1:0.191: Registering V4L2 extension [ 91.925900][ T5965] em28xx 1-1:0.191: Freeing device [ 91.933496][ T5892] em28xx 3-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 91.944100][ T9] em28xx 5-1:0.191: unknown em28xx chip ID (0) [ 91.945103][ T5892] em28xx 3-1:0.191: analog set to isoc mode. [ 91.990322][ T5892] usb 3-1: USB disconnect, device number 2 [ 92.043783][ T5892] em28xx 3-1:0.191: Disconnecting em28xx [ 92.055837][ T9] em28xx 5-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 92.098676][ T9] em28xx 5-1:0.191: board has no eeprom [ 92.155202][ T804] em28xx 4-1:0.191: Config register raw data: 0xffffffed [ 92.162342][ T804] em28xx 4-1:0.191: AC97 chip type couldn't be determined [ 92.171174][ T804] em28xx 4-1:0.191: No AC97 audio processor [ 92.179013][ T804] usb 4-1: Decoder not found [ 92.183497][ T9] em28xx 5-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 92.183979][ T804] em28xx 4-1:0.191: failed to create media graph [ 92.191807][ T9] em28xx 5-1:0.191: analog set to isoc mode. [ 92.198208][ T804] em28xx 4-1:0.191: V4L2 device video103 deregistered [ 92.214429][ T804] em28xx 4-1:0.191: Remote control support is not available for this card. [ 92.221270][ T9] usb 5-1: USB disconnect, device number 2 [ 92.233743][ T9] em28xx 5-1:0.191: Disconnecting em28xx [ 92.250577][ T42] em28xx 4-1:0.191: Closing input extension [ 92.263907][ T5965] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.273637][ T5744] em28xx 2-1:0.191: Closing input extension [ 92.280623][ T24] em28xx 3-1:0.191: Registering V4L2 extension [ 92.298039][ T42] em28xx 4-1:0.191: Freeing device [ 92.316514][ T5744] em28xx 2-1:0.191: Freeing device [ 92.432807][ T5965] usb 1-1: Using ep0 maxpacket: 8 [ 92.455866][ T24] em28xx 3-1:0.191: Config register raw data: 0xffffffed [ 92.461835][ T5965] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 92.463526][ T24] em28xx 3-1:0.191: AC97 chip type couldn't be determined [ 92.479779][ T24] em28xx 3-1:0.191: No AC97 audio processor [ 92.492302][ T5965] usb 1-1: config 0 has no interface number 0 [ 92.506727][ T5965] usb 1-1: config 0 interface 191 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.513833][ T24] usb 3-1: Decoder not found [ 92.534052][ T24] em28xx 3-1:0.191: failed to create media graph [ 92.539792][ T5965] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 92.540425][ T24] em28xx 3-1:0.191: V4L2 device video103 deregistered [ 92.556906][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=226, SerialNumber=2 [ 92.568119][ T5965] usb 1-1: Product: syz [ 92.571135][ T24] em28xx 3-1:0.191: Remote control support is not available for this card. [ 92.573101][ T6000] ================================================================== [ 92.581320][ T5892] em28xx 3-1:0.191: Closing input extension [ 92.588890][ T6000] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 92.588924][ T6000] Read of size 4 at addr ffff88807b07c860 by task v4l_id/6000 [ 92.588939][ T6000] [ 92.588959][ T6000] CPU: 0 UID: 0 PID: 6000 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 92.588981][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.588997][ T6000] Call Trace: [ 92.589005][ T6000] [ 92.589012][ T6000] dump_stack_lvl+0x100/0x190 [ 92.589042][ T6000] print_report+0x13d/0x4b0 [ 92.589070][ T6000] ? __virt_addr_valid+0x239/0x430 [ 92.589093][ T6000] ? v4l2_open+0x351/0x490 [ 92.589118][ T6000] kasan_report+0xdf/0x1d0 [ 92.589140][ T6000] ? v4l2_open+0x351/0x490 [ 92.589168][ T6000] v4l2_open+0x351/0x490 [ 92.589195][ T6000] ? __pfx_v4l2_open+0x10/0x10 [ 92.589221][ T6000] chrdev_open+0x234/0x6a0 [ 92.589245][ T6000] ? __pfx_chrdev_open+0x10/0x10 [ 92.589269][ T6000] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 92.589300][ T6000] do_dentry_open+0x6d8/0x1660 [ 92.589321][ T6000] ? __pfx_chrdev_open+0x10/0x10 [ 92.589348][ T6000] vfs_open+0x82/0x3f0 [ 92.589375][ T6000] path_openat+0x208c/0x31a0 [ 92.589404][ T6000] ? __pfx_path_openat+0x10/0x10 [ 92.589432][ T6000] do_file_open+0x20e/0x430 [ 92.589457][ T6000] ? __pfx_do_file_open+0x10/0x10 [ 92.589490][ T6000] ? alloc_fd+0x476/0x790 [ 92.589515][ T6000] ? do_getname+0x191/0x390 [ 92.589544][ T6000] do_sys_openat2+0x10d/0x1e0 [ 92.589571][ T6000] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.589602][ T6000] __x64_sys_openat+0x12d/0x210 [ 92.589630][ T6000] ? __pfx___x64_sys_openat+0x10/0x10 [ 92.589660][ T6000] ? rcu_is_watching+0x12/0xc0 [ 92.589690][ T6000] do_syscall_64+0x10b/0xf80 [ 92.589713][ T6000] ? clear_bhb_loop+0x40/0x90 [ 92.589735][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.589754][ T6000] RIP: 0033:0x7f85572a7407 [ 92.589772][ T6000] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 92.589790][ T6000] RSP: 002b:00007ffcd65918d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 92.589812][ T6000] RAX: ffffffffffffffda RBX: 00007f8557996880 RCX: 00007f85572a7407 [ 92.589825][ T6000] RDX: 0000000000000000 RSI: 00007ffcd6591f1c RDI: ffffffffffffff9c [ 92.589838][ T6000] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 92.589849][ T6000] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 92.589860][ T6000] R13: 00007ffcd6591b20 R14: 00007f8557a9b000 R15: 00005585618334d8 [ 92.589879][ T6000] [ 92.589886][ T6000] [ 92.607152][ T5892] em28xx 3-1:0.191: Freeing device [ 92.609402][ T6000] Allocated by task 24: [ 92.609420][ T6000] kasan_save_stack+0x30/0x50 [ 92.652904][ T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.655329][ T6000] kasan_save_track+0x14/0x30 [ 92.872844][ T6000] __kasan_kmalloc+0xaa/0xb0 [ 92.877436][ T6000] em28xx_v4l2_init.cold+0x94/0x3a40 [ 92.882710][ T6000] em28xx_init_extension+0x13a/0x200 [ 92.887983][ T6000] request_module_async+0x61/0x80 [ 92.892989][ T6000] process_one_work+0xa0e/0x1980 [ 92.897912][ T6000] worker_thread+0x5ef/0xe50 [ 92.902485][ T6000] kthread+0x370/0x450 [ 92.906535][ T6000] ret_from_fork+0x72b/0xd50 [ 92.911106][ T6000] ret_from_fork_asm+0x1a/0x30 [ 92.915865][ T6000] [ 92.918164][ T6000] Freed by task 24: [ 92.921943][ T6000] kasan_save_stack+0x30/0x50 [ 92.926602][ T6000] kasan_save_track+0x14/0x30 [ 92.931261][ T6000] kasan_save_free_info+0x3b/0x70 [ 92.936283][ T6000] __kasan_slab_free+0x5f/0x80 [ 92.941040][ T6000] kfree+0x223/0x6c0 [ 92.944926][ T6000] kref_put.isra.0+0x53/0x75 [ 92.949502][ T6000] em28xx_v4l2_init.cold+0x280/0x3a40 [ 92.954863][ T6000] em28xx_init_extension+0x13a/0x200 [ 92.960137][ T6000] request_module_async+0x61/0x80 [ 92.965145][ T6000] process_one_work+0xa0e/0x1980 [ 92.970070][ T6000] worker_thread+0x5ef/0xe50 [ 92.974642][ T6000] kthread+0x370/0x450 [ 92.978693][ T6000] ret_from_fork+0x72b/0xd50 [ 92.983264][ T6000] ret_from_fork_asm+0x1a/0x30 [ 92.988012][ T6000] [ 92.990309][ T6000] The buggy address belongs to the object at ffff88807b07c000 [ 92.990309][ T6000] which belongs to the cache kmalloc-8k of size 8192 [ 93.004336][ T6000] The buggy address is located 2144 bytes inside of [ 93.004336][ T6000] freed 8192-byte region [ffff88807b07c000, ffff88807b07e000) [ 93.018279][ T6000] [ 93.020578][ T6000] The buggy address belongs to the physical page: [ 93.026957][ T6000] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b078 [ 93.035706][ T6000] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 93.044180][ T6000] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 93.051700][ T6000] page_type: f5(slab) [ 93.055658][ T6000] raw: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 93.064227][ T6000] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 93.072786][ T6000] head: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 93.081430][ T6000] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 93.090074][ T6000] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 93.098720][ T6000] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 93.107361][ T6000] page dumped because: kasan: bad access detected [ 93.113747][ T6000] page_owner tracks the page as allocated [ 93.119517][ T6000] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5655, tgid 5655 (syz-executor), ts 77700851291, free_ts 77596964112 [ 93.140855][ T6000] post_alloc_hook+0x153/0x170 [ 93.145621][ T6000] get_page_from_freelist+0x11a6/0x33b0 [ 93.151155][ T6000] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 93.157031][ T6000] new_slab+0xa6/0x6c0 [ 93.161080][ T6000] refill_objects+0x277/0x420 [ 93.165745][ T6000] __pcs_replace_empty_main+0x375/0x650 [ 93.171277][ T6000] __kmalloc_cache_noprof+0x493/0x6f0 [ 93.176632][ T6000] mr_table_alloc+0x61/0x3e0 [ 93.181203][ T6000] ipmr_net_init+0x41c/0x5e0 [ 93.185772][ T6000] ops_init+0x1e2/0x5f0 [ 93.189902][ T6000] setup_net+0x118/0x3a0 [ 93.194119][ T6000] copy_net_ns+0x46f/0x7c0 [ 93.198511][ T6000] create_new_namespaces+0x3ea/0xac0 [ 93.203769][ T6000] unshare_nsproxy_namespaces+0xf2/0x220 [ 93.209380][ T6000] ksys_unshare+0x438/0xab0 [ 93.213863][ T6000] __x64_sys_unshare+0x31/0x40 [ 93.218607][ T6000] page last free pid 5635 tgid 5635 stack trace: [ 93.224903][ T6000] __free_frozen_pages+0x747/0x1040 [ 93.230085][ T6000] qlist_free_all+0x47/0xf0 [ 93.234569][ T6000] kasan_quarantine_reduce+0x1a0/0x1f0 [ 93.240011][ T6000] __kasan_slab_alloc+0x69/0x90 [ 93.244836][ T6000] kmem_cache_alloc_noprof+0x241/0x6e0 [ 93.250278][ T6000] do_getname+0x35/0x390 [ 93.254507][ T6000] do_readlinkat+0xa9/0x370 [ 93.258994][ T6000] __x64_sys_readlink+0x78/0xc0 [ 93.263831][ T6000] do_syscall_64+0x10b/0xf80 [ 93.268400][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.274269][ T6000] [ 93.276570][ T6000] Memory state around the buggy address: [ 93.282172][ T6000] ffff88807b07c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.290207][ T6000] ffff88807b07c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.298244][ T6000] >ffff88807b07c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.306277][ T6000] ^ [ 93.313441][ T6000] ffff88807b07c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.321474][ T6000] ffff88807b07c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.329505][ T6000] ================================================================== [ 93.342476][ T5965] usb 1-1: Manufacturer: syz [ 93.349700][ T5966] em28xx 5-1:0.191: Registering V4L2 extension [ 93.357055][ T5965] usb 1-1: SerialNumber: syz [ 93.390990][ T29] audit: type=1400 audit(1778207739.210:181): avc: denied { read } for pid=4958 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 93.404719][ T6000] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.404739][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 93.404764][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 93.404776][ T6000] Call Trace: [ 93.404782][ T6000] [ 93.404790][ T6000] dump_stack_lvl+0x100/0x190 [ 93.404817][ T6000] vpanic+0x552/0x970 [ 93.404835][ T6000] ? __pfx_vpanic+0x10/0x10 [ 93.404854][ T6000] ? rcu_is_watching+0x12/0xc0 [ 93.404886][ T6000] ? v4l2_open+0x351/0x490 [ 93.404914][ T6000] panic+0xd1/0xe0 [ 93.404931][ T6000] ? __pfx_panic+0x10/0x10 [ 93.404949][ T6000] ? v4l2_open+0x351/0x490 [ 93.404975][ T6000] ? preempt_schedule_common+0x42/0xc0 [ 93.405000][ T6000] ? check_panic_on_warn+0x1f/0x90 [ 93.405024][ T6000] check_panic_on_warn.cold+0x19/0x34 [ 93.405045][ T6000] end_report.part.0+0x3a/0x90 [ 93.405072][ T6000] kasan_report.cold+0xe/0x18 [ 93.405099][ T6000] ? v4l2_open+0x351/0x490 [ 93.405128][ T6000] v4l2_open+0x351/0x490 [ 93.405154][ T6000] ? __pfx_v4l2_open+0x10/0x10 [ 93.405186][ T6000] chrdev_open+0x234/0x6a0 [ 93.405211][ T6000] ? __pfx_chrdev_open+0x10/0x10 [ 93.405235][ T6000] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 93.405268][ T6000] do_dentry_open+0x6d8/0x1660 [ 93.405290][ T6000] ? __pfx_chrdev_open+0x10/0x10 [ 93.405316][ T6000] vfs_open+0x82/0x3f0 [ 93.405344][ T6000] path_openat+0x208c/0x31a0 [ 93.405373][ T6000] ? __pfx_path_openat+0x10/0x10 [ 93.405402][ T6000] do_file_open+0x20e/0x430 [ 93.405427][ T6000] ? __pfx_do_file_open+0x10/0x10 [ 93.405461][ T6000] ? alloc_fd+0x476/0x790 [ 93.405486][ T6000] ? do_getname+0x191/0x390 [ 93.405515][ T6000] do_sys_openat2+0x10d/0x1e0 [ 93.405543][ T6000] ? __pfx_do_sys_openat2+0x10/0x10 [ 93.405574][ T6000] __x64_sys_openat+0x12d/0x210 [ 93.405602][ T6000] ? __pfx___x64_sys_openat+0x10/0x10 [ 93.405633][ T6000] ? rcu_is_watching+0x12/0xc0 [ 93.405662][ T6000] do_syscall_64+0x10b/0xf80 [ 93.405685][ T6000] ? clear_bhb_loop+0x40/0x90 [ 93.405707][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.405727][ T6000] RIP: 0033:0x7f85572a7407 [ 93.405742][ T6000] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 93.405761][ T6000] RSP: 002b:00007ffcd65918d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 93.405780][ T6000] RAX: ffffffffffffffda RBX: 00007f8557996880 RCX: 00007f85572a7407 [ 93.405794][ T6000] RDX: 0000000000000000 RSI: 00007ffcd6591f1c RDI: ffffffffffffff9c [ 93.405806][ T6000] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 93.405818][ T6000] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 93.405829][ T6000] R13: 00007ffcd6591b20 R14: 00007f8557a9b000 R15: 00005585618334d8 [ 93.405849][ T6000] [ 93.413308][ T6000] Kernel Offset: disabled