Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://39599 [ 31.224908][ T4726] cgroup: Unknown subsys name 'net' [ 31.344838][ T4726] cgroup: Unknown subsys name 'cpuset' [ 31.346210][ T4726] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.532526][ T4726] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.306189][ T4733] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.251081][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.251256][ T4776] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.251316][ T4776] bridge_slave_0: entered allmulticast mode [ 34.251788][ T4776] bridge_slave_0: entered promiscuous mode [ 34.254150][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.254178][ T4776] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.254225][ T4776] bridge_slave_1: entered allmulticast mode [ 34.254719][ T4776] bridge_slave_1: entered promiscuous mode [ 34.262509][ T4776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.267868][ T4776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.275860][ T4776] team0: Port device team_slave_0 added [ 34.289931][ T4776] team0: Port device team_slave_1 added [ 34.297113][ T4776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.297121][ T4776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.297134][ T4776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.298275][ T4776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.298283][ T4776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.298296][ T4776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.318808][ T4776] hsr_slave_0: entered promiscuous mode [ 34.319129][ T4776] hsr_slave_1: entered promiscuous mode [ 34.367399][ T4776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.369381][ T4776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.370176][ T4776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.371019][ T4776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.371586][ T4776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.372376][ T4776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.372635][ T4776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.374580][ T4776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.388435][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.388467][ T4776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.388609][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.388637][ T4776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.406690][ T4776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.410974][ T4776] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.412566][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.412961][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.425449][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.425491][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.425824][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.425842][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.516841][ T4776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.528756][ T4776] veth0_vlan: entered promiscuous mode [ 34.530870][ T4776] veth1_vlan: entered promiscuous mode [ 34.539970][ T4776] veth0_macvtap: entered promiscuous mode [ 34.541450][ T4776] veth1_macvtap: entered promiscuous mode [ 34.545776][ T4776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.548257][ T4776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.583492][ T1191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.583516][ T1191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.583530][ T1191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.583544][ T1191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.654996][ T1191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.661127][ T4738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.661385][ T4738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.661550][ T4738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.661905][ T4738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.662142][ T4738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.717730][ T1191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.748179][ T468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.748191][ T468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.756609][ T468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.756621][ T468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.816305][ T1191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.868440][ T1191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:35 executed programs: 0 [ 35.043016][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.044438][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.045207][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.048455][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.048684][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.177815][ T4828] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.177873][ T4828] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.177922][ T4828] bridge_slave_0: entered allmulticast mode [ 35.178346][ T4828] bridge_slave_0: entered promiscuous mode [ 35.184043][ T4828] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.184123][ T4828] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.184174][ T4828] bridge_slave_1: entered allmulticast mode [ 35.184587][ T4828] bridge_slave_1: entered promiscuous mode [ 35.192772][ T4828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.193905][ T4828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.200357][ T4828] team0: Port device team_slave_0 added [ 35.201082][ T4828] team0: Port device team_slave_1 added [ 35.209329][ T4828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.209337][ T4828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.209349][ T4828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.209828][ T4828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.209836][ T4828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.209849][ T4828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.220027][ T4828] hsr_slave_0: entered promiscuous mode [ 35.220299][ T4828] hsr_slave_1: entered promiscuous mode [ 35.220511][ T4828] debugfs: 'hsr0' already exists in 'hsr' [ 35.220552][ T4828] Cannot create hsr debugfs directory [ 37.063932][ T51] Bluetooth: hci0: command tx timeout [ 37.724915][ T1191] bridge_slave_1: left allmulticast mode [ 37.724940][ T1191] bridge_slave_1: left promiscuous mode [ 37.725192][ T1191] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.727005][ T1191] bridge_slave_0: left allmulticast mode [ 37.727019][ T1191] bridge_slave_0: left promiscuous mode [ 37.727085][ T1191] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.787954][ T1191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.814571][ T1191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.826225][ T1191] bond0 (unregistering): Released all slaves [ 37.887543][ T1191] hsr_slave_0: left promiscuous mode [ 37.887846][ T1191] hsr_slave_1: left promiscuous mode [ 37.888145][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.888159][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.888549][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.888559][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.891812][ T1191] veth1_macvtap: left promiscuous mode [ 37.891843][ T1191] veth0_macvtap: left promiscuous mode [ 37.891889][ T1191] veth1_vlan: left promiscuous mode [ 37.891927][ T1191] veth0_vlan: left promiscuous mode [ 37.985114][ T1191] team0 (unregistering): Port device team_slave_1 removed [ 37.989041][ T1191] team0 (unregistering): Port device team_slave_0 removed [ 38.034592][ T4404] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.306270][ T4828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.308215][ T4828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.308642][ T4828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.311512][ T4828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.312444][ T4828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.317123][ T4828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.317450][ T4828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.319326][ T4828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.415224][ T4828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.418883][ T4828] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.420329][ T668] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.420379][ T668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.421925][ T668] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.421946][ T668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.437019][ T4828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.437034][ T4828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.540954][ T4828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.571260][ T4828] veth0_vlan: entered promiscuous mode [ 38.573221][ T4828] veth1_vlan: entered promiscuous mode [ 38.595011][ T4828] veth0_macvtap: entered promiscuous mode [ 38.596057][ T4828] veth1_macvtap: entered promiscuous mode [ 38.599991][ T4828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.601679][ T4828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.647712][ T1978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.647725][ T1978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.654599][ T468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.654764][ T468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.654906][ T468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.655009][ T468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.662853][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.662863][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.943515][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.103528][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 39.104194][ T26] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 39.104990][ T26] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 39.105001][ T26] usb 1-1: config 0 has no interface number 0 [ 39.105015][ T26] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 39.106334][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.106342][ T26] usb 1-1: Product: syz [ 39.106348][ T26] usb 1-1: Manufacturer: syz [ 39.106354][ T26] usb 1-1: SerialNumber: syz [ 39.107962][ T26] usb 1-1: config 0 descriptor?? [ 39.110577][ T26] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 39.110593][ T26] em28xx 1-1:0.132: Video interface 132 found: [ 39.133644][ T51] Bluetooth: hci0: command tx timeout [ 39.363617][ T26] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 39.425755][ T26] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 39.425774][ T26] em28xx 1-1:0.132: board has no eeprom [ 39.483395][ T26] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 39.483412][ T26] em28xx 1-1:0.132: analog set to bulk mode. [ 39.484018][ T4798] em28xx 1-1:0.132: Registering V4L2 extension [ 39.485937][ T26] usb 1-1: USB disconnect, device number 2 [ 39.486575][ T26] em28xx 1-1:0.132: Disconnecting em28xx [ 39.509693][ T4798] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 39.509707][ T4798] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 39.509713][ T4798] em28xx 1-1:0.132: No AC97 audio processor [ 39.510620][ T4798] usb 1-1: Decoder not found [ 39.510630][ T4798] em28xx 1-1:0.132: failed to create media graph [ 39.510646][ T4798] em28xx 1-1:0.132: V4L2 device video11 deregistered [ 39.511362][ T4798] INFO: trying to register non-static key. [ 39.519225][ T4798] The code is fine but needs lockdep annotation, or maybe [ 39.520560][ T4798] you didn't initialize this object before use? [ 39.521756][ T4798] turning off the locking correctness validator. [ 39.522958][ T4798] CPU: 1 UID: 0 PID: 4798 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT [ 39.524522][ T4798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.526383][ T4798] Workqueue: events request_module_async [ 39.527485][ T4798] Call trace: [ 39.528095][ T4798] show_stack+0x2c/0x3c (C) [ 39.528957][ T4798] __dump_stack+0x30/0x40 [ 39.529752][ T4798] dump_stack_lvl+0xd8/0x12c [ 39.530644][ T4798] dump_stack+0x1c/0x28 [ 39.531447][ T4798] assign_lock_key+0xcc/0xdc [ 39.532316][ T4798] register_lock_class+0xf8/0x31c [ 39.533263][ T4798] __lock_acquire+0x140/0x2b08 [ 39.534201][ T4798] lock_acquire+0x13c/0x320 [ 39.535100][ T4798] _raw_spin_lock_irqsave+0x5c/0x7c [ 39.536082][ T4798] __wake_up_common_lock+0x30/0x78 [ 39.537067][ T4798] __wake_up+0x18/0x24 [ 39.537833][ T4798] __vb2_queue_cancel+0x248/0xa78 [ 39.538793][ T4798] vb2_core_queue_release+0x34/0x13c [ 39.539786][ T4798] vb2_video_unregister_device+0x12c/0x1d0 [ 39.540886][ T4798] em28xx_v4l2_init+0x1368/0x247c [ 39.541828][ T4798] em28xx_init_extension+0x10c/0x1b4 [ 39.542816][ T4798] request_module_async+0x24/0x34 [ 39.543764][ T4798] process_scheduled_works+0x91c/0x1250 [ 39.544784][ T4798] worker_thread+0x798/0xbd0 [ 39.545652][ T4798] kthread+0x304/0x3d4 [ 39.546375][ T4798] ret_from_fork+0x10/0x20 [ 39.547214][ T4798] Unable to handle kernel paging request at virtual address dfff800000000000 [ 39.547235][ T4798] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 39.547249][ T4798] Mem abort info: [ 39.547252][ T4798] ESR = 0x0000000096000005 [ 39.547256][ T4798] EC = 0x25: DABT (current EL), IL = 32 bits [ 39.547261][ T4798] SET = 0, FnV = 0 [ 39.547263][ T4798] EA = 0, S1PTW = 0 [ 39.547266][ T4798] FSC = 0x05: level 1 translation fault [ 39.547270][ T4798] Data abort info: [ 39.547271][ T4798] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 39.547275][ T4798] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 39.547279][ T4798] GCS = 0, Overlay = 0, DirtyBit = 0 [ 39.547282][ T4798] [dfff800000000000] address between user and kernel address ranges [ 39.547287][ T4798] Internal error: Oops: 0000000096000005 [#1] SMP [ 39.561686][ T4798] Modules linked in: [ 39.562399][ T4798] CPU: 1 UID: 0 PID: 4798 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT [ 39.564149][ T4798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.566103][ T4798] Workqueue: events request_module_async [ 39.567205][ T4798] pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 39.568644][ T4798] pc : __wake_up_common+0xac/0x180 [ 39.569611][ T4798] lr : __wake_up_common_lock+0x4c/0x78 [ 39.570664][ T4798] sp : ffff8000953c7880 [ 39.571435][ T4798] x29: ffff8000953c7880 x28: dfff800000000000 x27: dfff800000000000 [ 39.573024][ T4798] x26: dfff800000000000 x25: ffff0000cf83176c x24: 0000000000000000 [ 39.574653][ T4798] x23: ffff0000cf831800 x22: 0000000000000003 x21: 0000000000000000 [ 39.576155][ T4798] x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff [ 39.577677][ T4798] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 39.579186][ T4798] x14: 0000000000000542 x13: 0000000000000001 x12: 0000000000000004 [ 39.580673][ T4798] x11: ffff700012a78f00 x10: ffff700012a78f00 x9 : 0000000000000003 [ 39.582221][ T4798] x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff8000804823d8 [ 39.583733][ T4798] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 [ 39.585196][ T4798] x2 : 0000000000000000 x1 : 0000000000000003 x0 : ffff0000cf8317c0 [ 39.586679][ T4798] Call trace: [ 39.587272][ T4798] __wake_up_common+0xac/0x180 (P) [ 39.588215][ T4798] __wake_up_common_lock+0x4c/0x78 [ 39.589185][ T4798] __wake_up+0x18/0x24 [ 39.589933][ T4798] __vb2_queue_cancel+0x248/0xa78 [ 39.590883][ T4798] vb2_core_queue_release+0x34/0x13c [ 39.591962][ T4798] vb2_video_unregister_device+0x12c/0x1d0 [ 39.593111][ T4798] em28xx_v4l2_init+0x1368/0x247c [ 39.594099][ T4798] em28xx_init_extension+0x10c/0x1b4 [ 39.595136][ T4798] request_module_async+0x24/0x34 [ 39.596044][ T4798] process_scheduled_works+0x91c/0x1250 [ 39.597103][ T4798] worker_thread+0x798/0xbd0 [ 39.597966][ T4798] kthread+0x304/0x3d4 [ 39.598697][ T4798] ret_from_fork+0x10/0x20 [ 39.599526][ T4798] Code: f94002f8 eb17031f 54000500 d343ff08 (387b6908) [ 39.600813][ T4798] ---[ end trace 0000000000000000 ]--- [ 39.806214][ T4798] Kernel panic - not syncing: Oops: Fatal exception [ 39.807339][ T4798] SMP: stopping secondary CPUs [ 39.808188][ T4798] Kernel Offset: disabled [ 39.808936][ T4798] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 39.810162][ T4798] Memory Limit: none [ 40.013213][ T4798] Rebooting in 86400 seconds..