Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. 2025/09/30 11:37:49 parsed 1 programs [ 103.225031][ T23] cfg80211: failed to load regulatory.db [ 105.541947][ T5792] cgroup: Unknown subsys name 'net' [ 105.712556][ T5792] cgroup: Unknown subsys name 'rlimit' [ 107.646554][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.703939][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.733763][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.742417][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.754718][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.762674][ T5810] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.780025][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.885124][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 112.323121][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.331411][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.339397][ T5842] bridge_slave_0: entered allmulticast mode [ 112.347107][ T5842] bridge_slave_0: entered promiscuous mode [ 112.368548][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.388986][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.397759][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.403159][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.405133][ T5842] bridge_slave_1: entered allmulticast mode [ 112.422158][ T5842] bridge_slave_1: entered promiscuous mode [ 112.547636][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.659386][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.776939][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.813047][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.907949][ T5842] team0: Port device team_slave_0 added [ 113.081981][ T5842] team0: Port device team_slave_1 added [ 113.233375][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.240391][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.267497][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.314316][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.321348][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.348423][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.706033][ T5842] hsr_slave_0: entered promiscuous mode [ 113.720590][ T5842] hsr_slave_1: entered promiscuous mode [ 114.259384][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.275513][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.297751][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.322820][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.476327][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.509869][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.523648][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.531349][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.553597][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.562241][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.821944][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.922021][ T5842] veth0_vlan: entered promiscuous mode [ 114.937637][ T5842] veth1_vlan: entered promiscuous mode [ 114.982446][ T5842] veth0_macvtap: entered promiscuous mode [ 115.009501][ T5842] veth1_macvtap: entered promiscuous mode [ 115.032279][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.050481][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.109815][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.120043][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.131595][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.141925][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/30 11:38:02 executed programs: 0 [ 115.480014][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.497844][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.514524][ T5842] syz-executor (5842) used greatest stack depth: 20552 bytes left [ 115.524848][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.537102][ T5912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.546594][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.567176][ T5912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.577035][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.587332][ T5912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.593650][ T5914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.595856][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.616203][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.630937][ T5909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.632306][ T5916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.639429][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.652259][ T5916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.663175][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.668969][ T5916] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.673303][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.679544][ T5916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.693491][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.719059][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.757302][ T5916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.773148][ T5916] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.783344][ T5916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.315901][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.454878][ T5913] chnl_net:caif_netlink_parms(): no params data found [ 116.612499][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 116.672414][ T5906] chnl_net:caif_netlink_parms(): no params data found [ 116.740072][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.750791][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.759789][ T5913] bridge_slave_0: entered allmulticast mode [ 116.767890][ T5913] bridge_slave_0: entered promiscuous mode [ 116.789248][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.798814][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.807269][ T5913] bridge_slave_1: entered allmulticast mode [ 116.815067][ T5913] bridge_slave_1: entered promiscuous mode [ 116.906941][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.947405][ T5910] chnl_net:caif_netlink_parms(): no params data found [ 116.974527][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.004187][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.012916][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.021956][ T5904] bridge_slave_0: entered allmulticast mode [ 117.031565][ T5904] bridge_slave_0: entered promiscuous mode [ 117.091379][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.099413][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.108354][ T5904] bridge_slave_1: entered allmulticast mode [ 117.118709][ T5904] bridge_slave_1: entered promiscuous mode [ 117.175877][ T5913] team0: Port device team_slave_0 added [ 117.210015][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.220480][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.230631][ T5906] bridge_slave_0: entered allmulticast mode [ 117.240427][ T5906] bridge_slave_0: entered promiscuous mode [ 117.258606][ T5913] team0: Port device team_slave_1 added [ 117.302887][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.319745][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.345109][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.355946][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.367003][ T5906] bridge_slave_1: entered allmulticast mode [ 117.377657][ T5906] bridge_slave_1: entered promiscuous mode [ 117.423665][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.430989][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.464193][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.540777][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.552310][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.589362][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.617269][ T5904] team0: Port device team_slave_0 added [ 117.629208][ T5906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.645003][ T5906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.670881][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.680219][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.692814][ T5910] bridge_slave_0: entered allmulticast mode [ 117.703164][ T5910] bridge_slave_0: entered promiscuous mode [ 117.731431][ T5904] team0: Port device team_slave_1 added [ 117.773908][ T5914] Bluetooth: hci1: command tx timeout [ 117.780114][ T5914] Bluetooth: hci0: command tx timeout [ 117.789924][ T5916] Bluetooth: hci2: command tx timeout [ 117.798812][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.808368][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.818257][ T5910] bridge_slave_1: entered allmulticast mode [ 117.828455][ T5910] bridge_slave_1: entered promiscuous mode [ 117.864558][ T5916] Bluetooth: hci3: command tx timeout [ 117.879218][ T5913] hsr_slave_0: entered promiscuous mode [ 117.887452][ T5913] hsr_slave_1: entered promiscuous mode [ 117.895950][ T5913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.906758][ T5913] Cannot create hsr debugfs directory [ 117.933542][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.944298][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.988279][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.006195][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.017351][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.054197][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.075812][ T5906] team0: Port device team_slave_0 added [ 118.102992][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.133558][ T5906] team0: Port device team_slave_1 added [ 118.144413][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.279072][ T5910] team0: Port device team_slave_0 added [ 118.292738][ T5904] hsr_slave_0: entered promiscuous mode [ 118.302902][ T5904] hsr_slave_1: entered promiscuous mode [ 118.311306][ T5904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.321346][ T5904] Cannot create hsr debugfs directory [ 118.328434][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.337154][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.378067][ T5906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.392785][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.401514][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.435699][ T5906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.462825][ T5910] team0: Port device team_slave_1 added [ 118.549493][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.558126][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.589885][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.607337][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.616274][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.651151][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.728709][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.780067][ T5906] hsr_slave_0: entered promiscuous mode [ 118.787982][ T5906] hsr_slave_1: entered promiscuous mode [ 118.801959][ T5906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.812799][ T5906] Cannot create hsr debugfs directory [ 118.916867][ T5910] hsr_slave_0: entered promiscuous mode [ 118.927445][ T5910] hsr_slave_1: entered promiscuous mode [ 118.937849][ T5910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.948261][ T5910] Cannot create hsr debugfs directory [ 119.854261][ T5916] Bluetooth: hci2: command tx timeout [ 119.859839][ T5101] Bluetooth: hci1: command tx timeout [ 119.861499][ T5914] Bluetooth: hci0: command tx timeout [ 119.933723][ T5914] Bluetooth: hci3: command tx timeout [ 120.100563][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.157695][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.355682][ T5913] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.433200][ T5913] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.452774][ T5913] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.517920][ T5913] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.618598][ T48] hsr_slave_0: left promiscuous mode [ 121.629269][ T48] hsr_slave_1: left promiscuous mode [ 121.647363][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.660159][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.673764][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.688333][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.700479][ T48] bridge_slave_1: left allmulticast mode [ 121.709126][ T48] bridge_slave_1: left promiscuous mode [ 121.717795][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.736007][ T48] bridge_slave_0: left allmulticast mode [ 121.744380][ T48] bridge_slave_0: left promiscuous mode [ 121.751864][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.790214][ T48] veth1_macvtap: left promiscuous mode [ 121.798302][ T48] veth0_macvtap: left promiscuous mode [ 121.806381][ T48] veth1_vlan: left promiscuous mode [ 121.815302][ T48] veth0_vlan: left promiscuous mode [ 121.933121][ T5914] Bluetooth: hci1: command tx timeout [ 121.943527][ T5101] Bluetooth: hci2: command tx timeout [ 121.949788][ T5914] Bluetooth: hci0: command tx timeout [ 122.013392][ T5914] Bluetooth: hci3: command tx timeout [ 122.437174][ T48] team0 (unregistering): Port device team_slave_1 removed [ 122.489205][ T48] team0 (unregistering): Port device team_slave_0 removed [ 122.534361][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.586038][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.024067][ T48] bond0 (unregistering): Released all slaves [ 123.181135][ T5904] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.203998][ T5904] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.234818][ T5904] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.282310][ T5904] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.418900][ T5906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.449847][ T5906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.519303][ T5906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.534786][ T5906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.591292][ T5910] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.611160][ T5910] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.632466][ T5910] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.650867][ T5910] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.712904][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.792017][ T5913] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.860073][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.870340][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.895194][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.904379][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.927465][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.992723][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.014235][ T5914] Bluetooth: hci0: command tx timeout [ 124.021125][ T5914] Bluetooth: hci2: command tx timeout [ 124.027695][ T5101] Bluetooth: hci1: command tx timeout [ 124.057824][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.065690][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.079352][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.087658][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.109991][ T5914] Bluetooth: hci3: command tx timeout [ 124.126079][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.200740][ T5906] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.251213][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.259968][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.276077][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.286429][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.307719][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.401498][ T5910] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.446149][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.457097][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.555775][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.568561][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.743565][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.918479][ T5913] veth0_vlan: entered promiscuous mode [ 125.001307][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.028844][ T5913] veth1_vlan: entered promiscuous mode [ 125.180696][ T5913] veth0_macvtap: entered promiscuous mode [ 125.219610][ T5913] veth1_macvtap: entered promiscuous mode [ 125.252037][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.271199][ T5904] veth0_vlan: entered promiscuous mode [ 125.320839][ T5904] veth1_vlan: entered promiscuous mode [ 125.340625][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.374214][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.399984][ T5913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.416430][ T5913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.430905][ T5913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.444025][ T5913] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.470795][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.580813][ T5906] veth0_vlan: entered promiscuous mode [ 125.638584][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.652820][ T5906] veth1_vlan: entered promiscuous mode [ 125.659997][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.738875][ T5904] veth0_macvtap: entered promiscuous mode [ 125.751939][ T5904] veth1_macvtap: entered promiscuous mode [ 125.775243][ T5910] veth0_vlan: entered promiscuous mode [ 125.789911][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.801557][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.822549][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.845033][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.865191][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.892734][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.908668][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.925197][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 2025/09/30 11:38:12 executed programs: 8 [ 125.956114][ T5910] veth1_vlan: entered promiscuous mode [ 125.988645][ T5906] veth0_macvtap: entered promiscuous mode [ 126.002845][ T5904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.019415][ T5904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.031539][ T5904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.042830][ T5904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.072875][ T5906] veth1_macvtap: entered promiscuous mode [ 126.152073][ T5910] veth0_macvtap: entered promiscuous mode [ 126.162270][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.178652][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.199789][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.219560][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.234610][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.272613][ T5910] veth1_macvtap: entered promiscuous mode [ 126.289021][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.293777][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.304539][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.326881][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.342462][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.360940][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.394673][ T5906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.408975][ T5906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.424248][ T5906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.436665][ T5906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.496724][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.509785][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.515458][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 126.524955][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.542286][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.542289][ T9] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 126.555593][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.576825][ T9] usb 3-1: config 0 has no interface number 0 [ 126.578259][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.600054][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.600414][ T9] usb 3-1: config 0 interface 89 has no altsetting 0 [ 126.623249][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.631766][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.647822][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 126.659300][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.668395][ T9] usb 3-1: Product: syz [ 126.686872][ T9] usb 3-1: Manufacturer: syz [ 126.702365][ T9] usb 3-1: SerialNumber: syz [ 126.716440][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.731497][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.741430][ T9] usb 3-1: config 0 descriptor?? [ 126.760521][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.773070][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.788855][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.799597][ T9] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 126.801501][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.823243][ T9] em28xx 3-1:0.89: Video interface 89 found: bulk [ 126.831676][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.852163][ T5910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.864315][ T5910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.879542][ T5910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.889526][ T5910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.948471][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.960128][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.020451][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.040027][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.075523][ T9] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 127.164690][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.181447][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.236142][ T9] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 127.251400][ T9] em28xx 3-1:0.89: board has no eeprom [ 127.270663][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.298960][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.333879][ T9] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 127.361760][ T9] em28xx 3-1:0.89: analog set to bulk mode. [ 127.379402][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.390633][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.400427][ T6020] em28xx 3-1:0.89: Registering V4L2 extension [ 127.405087][ T5988] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.432446][ T9] usb 3-1: USB disconnect, device number 2 [ 127.497313][ T9] em28xx 3-1:0.89: Disconnecting em28xx [ 127.607319][ T6020] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 127.624309][ T6017] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.644066][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 127.653119][ T6020] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 127.667850][ T5988] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 127.676343][ T6020] em28xx 3-1:0.89: No AC97 audio processor [ 127.688609][ T5988] usb 1-1: config 0 has no interface number 0 [ 127.722793][ T6020] usb 3-1: Decoder not found [ 127.724493][ T5988] usb 1-1: config 0 interface 89 has no altsetting 0 [ 127.728991][ T6020] em28xx 3-1:0.89: failed to create media graph [ 127.746045][ T6020] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 127.760985][ T6020] em28xx 3-1:0.89: Registering snapshot button... [ 127.778631][ T5988] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 127.791488][ T6020] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input5 [ 127.802256][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.814560][ T6017] usb 2-1: Using ep0 maxpacket: 32 [ 127.826275][ T5988] usb 1-1: Product: syz [ 127.835227][ T6020] em28xx 3-1:0.89: Remote control support is not available for this card. [ 127.839198][ T6017] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 127.849969][ T9] em28xx 3-1:0.89: Closing input extension [ 127.858651][ T5988] usb 1-1: Manufacturer: syz [ 127.871944][ T6017] usb 2-1: config 0 has no interface number 0 [ 127.880516][ T5988] usb 1-1: SerialNumber: syz [ 127.884169][ T9] em28xx 3-1:0.89: Deregistering snapshot button [ 127.887412][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.908347][ T6017] usb 2-1: config 0 interface 89 has no altsetting 0 [ 127.922055][ T5988] usb 1-1: config 0 descriptor?? [ 127.940130][ T6017] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 127.961279][ T5988] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 127.975116][ T6017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.988877][ T5988] em28xx 1-1:0.89: Video interface 89 found: bulk [ 128.000537][ T6017] usb 2-1: Product: syz [ 128.002013][ T9] em28xx 3-1:0.89: Freeing device [ 128.006387][ T6017] usb 2-1: Manufacturer: syz [ 128.006409][ T6017] usb 2-1: SerialNumber: syz [ 128.032215][ T6017] usb 2-1: config 0 descriptor?? [ 128.095257][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 128.114013][ T6017] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 128.146778][ T5917] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 128.158548][ T6017] em28xx 2-1:0.89: Video interface 89 found: bulk [ 128.167818][ T5917] usb 4-1: config 0 has no interface number 0 [ 128.181218][ T5917] usb 4-1: config 0 interface 89 has no altsetting 0 [ 128.197026][ T5917] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 128.208214][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.218975][ T5917] usb 4-1: Product: syz [ 128.225279][ T5917] usb 4-1: Manufacturer: syz [ 128.231080][ T5917] usb 4-1: SerialNumber: syz [ 128.240669][ T5917] usb 4-1: config 0 descriptor?? [ 128.248730][ T5988] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 128.267019][ T5917] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 128.279475][ T5917] em28xx 4-1:0.89: Video interface 89 found: bulk [ 128.324260][ T6017] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 128.361183][ T5988] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 128.374077][ T5988] em28xx 1-1:0.89: board has no eeprom [ 128.409662][ T6017] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 128.421505][ T6017] em28xx 2-1:0.89: board has no eeprom [ 128.424201][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.454687][ T5988] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 128.466317][ T5988] em28xx 1-1:0.89: analog set to bulk mode. [ 128.474836][ T27] em28xx 1-1:0.89: Registering V4L2 extension [ 128.494809][ T5988] usb 1-1: USB disconnect, device number 2 [ 128.512393][ T6017] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 128.539139][ T5988] em28xx 1-1:0.89: Disconnecting em28xx [ 128.562083][ T5917] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 128.572005][ T6017] em28xx 2-1:0.89: analog set to bulk mode. [ 128.581980][ T27] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 128.605380][ T27] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 128.616518][ T6017] usb 2-1: USB disconnect, device number 2 [ 128.633282][ T27] em28xx 1-1:0.89: No AC97 audio processor [ 128.635651][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 128.643717][ T6017] em28xx 2-1:0.89: Disconnecting em28xx [ 128.658785][ T27] usb 1-1: Decoder not found [ 128.671961][ T5917] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 128.692468][ T9] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 128.694032][ T27] em28xx 1-1:0.89: failed to create media graph [ 128.726860][ T5917] em28xx 4-1:0.89: board has no eeprom [ 128.728946][ T9] usb 3-1: config 0 has no interface number 0 [ 128.761529][ T27] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 128.770015][ T9] usb 3-1: config 0 interface 89 has no altsetting 0 [ 128.779091][ T27] em28xx 1-1:0.89: Registering snapshot button... [ 128.806019][ T27] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input6 [ 128.814434][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 128.832362][ T5917] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 128.851348][ T5917] em28xx 4-1:0.89: analog set to bulk mode. [ 128.862047][ T27] em28xx 1-1:0.89: Remote control support is not available for this card. [ 128.877872][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.888143][ T5917] usb 4-1: USB disconnect, device number 2 [ 128.904523][ T6024] em28xx 2-1:0.89: Registering V4L2 extension [ 128.929673][ T5917] em28xx 4-1:0.89: Disconnecting em28xx [ 128.943250][ T9] usb 3-1: Product: syz [ 128.967711][ T9] usb 3-1: Manufacturer: syz [ 129.009200][ T9] usb 3-1: SerialNumber: syz [ 129.046294][ T9] usb 3-1: config 0 descriptor?? [ 129.051418][ T6024] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 129.074853][ T9] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 129.088385][ T6024] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 129.090639][ T9] em28xx 3-1:0.89: Video interface 89 found: bulk [ 129.102146][ T6024] em28xx 2-1:0.89: No AC97 audio processor [ 129.114756][ T6024] usb 2-1: Decoder not found [ 129.121977][ T6024] em28xx 2-1:0.89: failed to create media graph [ 129.132796][ T6024] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 129.150767][ T6024] em28xx 2-1:0.89: Registering snapshot button... [ 129.161661][ T6024] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input7 [ 129.178177][ T6024] em28xx 2-1:0.89: Remote control support is not available for this card. [ 129.188710][ T5840] em28xx 4-1:0.89: Registering V4L2 extension [ 129.264271][ T5840] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 129.274017][ T5840] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 129.282290][ T5840] em28xx 4-1:0.89: No AC97 audio processor [ 129.294421][ T5840] usb 4-1: Decoder not found [ 129.299801][ T5840] em28xx 4-1:0.89: failed to create media graph [ 129.308401][ T5840] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 129.318698][ T5840] em28xx 4-1:0.89: Registering snapshot button... [ 129.329319][ T5840] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input8 [ 129.346345][ T5840] em28xx 4-1:0.89: Remote control support is not available for this card. [ 129.353885][ T9] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 129.360482][ T5988] em28xx 1-1:0.89: Closing input extension [ 129.379410][ T5988] em28xx 1-1:0.89: Deregistering snapshot button [ 129.394734][ T6017] em28xx 2-1:0.89: Closing input extension [ 129.402074][ T6017] em28xx 2-1:0.89: Deregistering snapshot button [ 129.417241][ T5988] em28xx 1-1:0.89: Freeing device [ 129.455349][ T5917] em28xx 4-1:0.89: Closing input extension [ 129.462320][ T5917] em28xx 4-1:0.89: Deregistering snapshot button [ 129.468251][ T9] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 129.500132][ T6017] em28xx 2-1:0.89: Freeing device [ 129.515302][ T9] em28xx 3-1:0.89: board has no eeprom [ 129.529372][ T5917] em28xx 4-1:0.89: Freeing device [ 129.616215][ T9] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 129.641880][ T9] em28xx 3-1:0.89: analog set to bulk mode. [ 129.660354][ T785] em28xx 3-1:0.89: Registering V4L2 extension [ 129.682122][ T9] usb 3-1: USB disconnect, device number 3 [ 129.697558][ T9] em28xx 3-1:0.89: Disconnecting em28xx [ 129.793459][ T5988] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.811045][ T785] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 129.837979][ T785] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 129.893345][ T6017] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.902001][ T785] em28xx 3-1:0.89: No AC97 audio processor [ 129.920215][ T785] usb 3-1: Decoder not found [ 129.927261][ T785] em28xx 3-1:0.89: failed to create media graph [ 129.949521][ T785] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 129.954588][ T5917] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.962535][ T785] em28xx 3-1:0.89: Registering snapshot button... [ 129.973809][ T6044] ================================================================== [ 129.988776][ T6044] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430 [ 129.999861][ T6044] Read of size 8 at addr ffff88802fd7c738 by task v4l_id/6044 [ 130.009388][ T6044] [ 130.012938][ T6044] CPU: 1 PID: 6044 Comm: v4l_id Not tainted syzkaller #0 [ 130.023067][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.036848][ T6044] Call Trace: [ 130.040855][ T6044] [ 130.044530][ T6044] dump_stack_lvl+0x16c/0x230 [ 130.050081][ T6044] ? __lock_acquire+0x7c80/0x7c80 [ 130.056282][ T6044] ? show_regs_print_info+0x20/0x20 [ 130.062310][ T6044] ? load_image+0x3b0/0x3b0 [ 130.067554][ T6044] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 130.074301][ T6044] ? __virt_addr_valid+0x18c/0x540 [ 130.080421][ T6044] ? __virt_addr_valid+0x469/0x540 [ 130.086984][ T6044] print_report+0xac/0x220 [ 130.092647][ T6044] ? v4l2_fh_open+0xca/0x430 [ 130.098865][ T6044] kasan_report+0x117/0x150 [ 130.104449][ T6044] ? v4l2_fh_open+0xca/0x430 [ 130.110303][ T6044] v4l2_fh_open+0xca/0x430 [ 130.115587][ T6044] em28xx_v4l2_open+0x157/0x980 [ 130.121844][ T6044] v4l2_open+0x212/0x360 [ 130.127053][ T6044] chrdev_open+0x59e/0x670 [ 130.132671][ T6044] ? cd_forget+0x160/0x160 [ 130.138087][ T6044] ? fsnotify_perm+0x3ed/0x5e0 [ 130.144196][ T6044] ? cd_forget+0x160/0x160 [ 130.150226][ T6044] do_dentry_open+0x8c6/0x1500 [ 130.155714][ T6044] path_openat+0x274b/0x3190 [ 130.161528][ T6044] ? __kasan_slab_alloc+0x6c/0x80 [ 130.167458][ T6044] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.177505][ T6044] ? verify_lock_unused+0x140/0x140 [ 130.184309][ T6044] ? do_filp_open+0x3d0/0x3d0 [ 130.191042][ T6044] ? __virt_addr_valid+0x18c/0x540 [ 130.196815][ T6044] do_filp_open+0x1c5/0x3d0 [ 130.201560][ T6044] ? vfs_tmpfile+0x490/0x490 [ 130.206805][ T6044] ? _raw_spin_unlock+0x28/0x40 [ 130.213091][ T6044] ? alloc_fd+0x58f/0x630 [ 130.217730][ T6044] do_sys_openat2+0x12c/0x1c0 [ 130.223488][ T6044] ? do_sys_open+0xe0/0xe0 [ 130.230137][ T6044] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 130.238604][ T6044] ? lock_chain_count+0x20/0x20 [ 130.246794][ T6044] ? lock_chain_count+0x20/0x20 [ 130.252724][ T6044] __x64_sys_openat+0x139/0x160 [ 130.259027][ T6044] do_syscall_64+0x55/0xb0 [ 130.264534][ T6044] ? clear_bhb_loop+0x40/0x90 [ 130.270318][ T6044] ? clear_bhb_loop+0x40/0x90 [ 130.275723][ T6044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.282633][ T6044] RIP: 0033:0x7f6498ea7407 [ 130.287453][ T6044] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 130.309541][ T6044] RSP: 002b:00007fff0c29f150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 130.318170][ T6044] RAX: ffffffffffffffda RBX: 00007f6499612880 RCX: 00007f6498ea7407 [ 130.327000][ T6044] RDX: 0000000000000000 RSI: 00007fff0c29ff1c RDI: ffffffffffffff9c [ 130.336013][ T6044] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 130.345522][ T6044] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 130.355749][ T6044] R13: 00007fff0c29f3a0 R14: 00007f6499771000 R15: 00005555783b64d8 [ 130.367636][ T6044] [ 130.373251][ T6044] [ 130.376392][ T6044] Allocated by task 785: [ 130.382058][ T6044] kasan_set_track+0x4e/0x70 [ 130.386828][ T6044] __kasan_kmalloc+0x8f/0xa0 [ 130.392431][ T6044] em28xx_v4l2_init+0x10b/0x2e70 [ 130.397937][ T6044] em28xx_init_extension+0x11c/0x1b0 [ 130.403529][ T6044] process_scheduled_works+0xa45/0x15b0 [ 130.410657][ T6044] worker_thread+0xa55/0xfc0 [ 130.416882][ T6044] kthread+0x2fa/0x390 [ 130.422556][ T6044] ret_from_fork+0x48/0x80 [ 130.427295][ T6044] ret_from_fork_asm+0x11/0x20 [ 130.432741][ T6044] [ 130.436040][ T6044] Freed by task 785: [ 130.440356][ T6044] kasan_set_track+0x4e/0x70 [ 130.445329][ T6044] kasan_save_free_info+0x2e/0x50 [ 130.451094][ T6044] ____kasan_slab_free+0x126/0x1e0 [ 130.458342][ T6044] slab_free_freelist_hook+0x130/0x1b0 [ 130.464987][ T6044] __kmem_cache_free+0xba/0x1f0 [ 130.470840][ T6044] em28xx_v4l2_init+0x1670/0x2e70 [ 130.477041][ T6044] em28xx_init_extension+0x11c/0x1b0 [ 130.483972][ T6044] process_scheduled_works+0xa45/0x15b0 [ 130.491770][ T6044] worker_thread+0xa55/0xfc0 [ 130.497103][ T6044] kthread+0x2fa/0x390 [ 130.502924][ T6044] ret_from_fork+0x48/0x80 [ 130.508182][ T6044] ret_from_fork_asm+0x11/0x20 [ 130.513532][ T6044] [ 130.516070][ T6044] The buggy address belongs to the object at ffff88802fd7c000 [ 130.516070][ T6044] which belongs to the cache kmalloc-8k of size 8192 [ 130.533148][ T6044] The buggy address is located 1848 bytes inside of [ 130.533148][ T6044] freed 8192-byte region [ffff88802fd7c000, ffff88802fd7e000) [ 130.554892][ T6044] [ 130.558308][ T6044] The buggy address belongs to the physical page: [ 130.567972][ T6044] page:ffffea0000bf5e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fd78 [ 130.582356][ T6044] head:ffffea0000bf5e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 130.596544][ T6044] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 130.610435][ T6044] page_type: 0xffffffff() [ 130.617593][ T6044] raw: 00fff00000000840 ffff888017842280 ffffea0000c00800 dead000000000005 [ 130.629777][ T6044] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 130.642606][ T6044] page dumped because: kasan: bad access detected [ 130.652753][ T6044] page_owner tracks the page as allocated [ 130.660599][ T6044] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5448, tgid 5448 (S41dhcpcd), ts 68130837616, free_ts 68128398538 [ 130.691589][ T6044] post_alloc_hook+0x1cd/0x210 [ 130.699807][ T6044] get_page_from_freelist+0x195c/0x19f0 [ 130.707111][ T6044] __alloc_pages+0x1e3/0x460 [ 130.713727][ T6044] alloc_slab_page+0x5d/0x170 [ 130.720724][ T6044] new_slab+0x87/0x2e0 [ 130.725358][ T6044] ___slab_alloc+0xc6d/0x1300 [ 130.732054][ T6044] __kmem_cache_alloc_node+0x1a2/0x260 [ 130.738626][ T6044] kmalloc_trace+0x2a/0xe0 [ 130.745114][ T6044] tomoyo_init_log+0x1104/0x1f10 [ 130.750636][ T6044] tomoyo_supervisor+0x32d/0x1080 [ 130.757177][ T6044] tomoyo_env_perm+0x14a/0x1e0 [ 130.762716][ T6044] tomoyo_find_next_domain+0x1594/0x1a60 [ 130.771746][ T6044] tomoyo_bprm_check_security+0x116/0x170 [ 130.778416][ T6044] security_bprm_check+0x62/0xa0 [ 130.785646][ T6044] bprm_execve+0xa51/0x16f0 [ 130.790804][ T6044] do_execveat_common+0x51b/0x6c0 [ 130.796459][ T6044] page last free stack trace: [ 130.802134][ T6044] free_unref_page_prepare+0x7ce/0x8e0 [ 130.808601][ T6044] free_unref_page+0x32/0x2e0 [ 130.814113][ T6044] __unfreeze_partials+0x1cf/0x210 [ 130.819740][ T6044] put_cpu_partial+0x17c/0x250 [ 130.824910][ T6044] __slab_free+0x31d/0x410 [ 130.829987][ T6044] qlist_free_all+0x75/0xe0 [ 130.835495][ T6044] kasan_quarantine_reduce+0x143/0x160 [ 130.843966][ T6044] __kasan_slab_alloc+0x22/0x80 [ 130.849480][ T6044] slab_post_alloc_hook+0x6e/0x4d0 [ 130.855603][ T6044] __kmem_cache_alloc_node+0x13e/0x260 [ 130.861824][ T6044] __kmalloc+0xa4/0x240 [ 130.866847][ T6044] tomoyo_supervisor+0xb70/0x1080 [ 130.872392][ T6044] tomoyo_find_next_domain+0x44c/0x1a60 [ 130.878528][ T6044] tomoyo_bprm_check_security+0x116/0x170 [ 130.884289][ T6044] security_bprm_check+0x62/0xa0 [ 130.890331][ T6044] bprm_execve+0xa51/0x16f0 [ 130.897060][ T6044] [ 130.900192][ T6044] Memory state around the buggy address: [ 130.907678][ T6044] ffff88802fd7c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.917197][ T6044] ffff88802fd7c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.926686][ T6044] >ffff88802fd7c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.936528][ T6044] ^ [ 130.944351][ T6044] ffff88802fd7c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.959763][ T6044] ffff88802fd7c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.971153][ T6044] ================================================================== [ 130.984827][ T785] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input9 [ 131.036436][ T785] em28xx 3-1:0.89: Remote control support is not available for this card. [ 131.037692][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 131.051031][ T6044] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.051050][ T6044] CPU: 0 PID: 6044 Comm: v4l_id Not tainted syzkaller #0 [ 131.051072][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.051087][ T6044] Call Trace: [ 131.051094][ T6044] [ 131.051104][ T6044] dump_stack_lvl+0x16c/0x230 [ 131.051142][ T6044] ? show_regs_print_info+0x20/0x20 [ 131.051172][ T6044] ? load_image+0x3b0/0x3b0 [ 131.051204][ T6044] panic+0x2c0/0x710 [ 131.051243][ T6044] ? bpf_jit_dump+0xd0/0xd0 [ 131.051283][ T6044] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 131.051308][ T6044] ? _raw_spin_unlock+0x40/0x40 [ 131.051329][ T6044] ? print_memory_metadata+0x314/0x400 [ 131.051360][ T6044] ? v4l2_fh_open+0xca/0x430 [ 131.051387][ T6044] check_panic_on_warn+0x84/0xa0 [ 131.051416][ T6044] ? v4l2_fh_open+0xca/0x430 [ 131.051444][ T6044] end_report+0x6f/0x140 [ 131.051471][ T6044] kasan_report+0x128/0x150 [ 131.051499][ T6044] ? v4l2_fh_open+0xca/0x430 [ 131.051534][ T6044] v4l2_fh_open+0xca/0x430 [ 131.051578][ T6044] em28xx_v4l2_open+0x157/0x980 [ 131.051623][ T6044] v4l2_open+0x212/0x360 [ 131.051647][ T6044] chrdev_open+0x59e/0x670 [ 131.051674][ T6044] ? cd_forget+0x160/0x160 [ 131.051697][ T6044] ? fsnotify_perm+0x3ed/0x5e0 [ 131.051730][ T6044] ? cd_forget+0x160/0x160 [ 131.051753][ T6044] do_dentry_open+0x8c6/0x1500 [ 131.051790][ T6044] path_openat+0x274b/0x3190 [ 131.051834][ T6044] ? __kasan_slab_alloc+0x6c/0x80 [ 131.051861][ T6044] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.051901][ T6044] ? verify_lock_unused+0x140/0x140 [ 131.051929][ T6044] ? do_filp_open+0x3d0/0x3d0 [ 131.051966][ T6044] ? __virt_addr_valid+0x18c/0x540 [ 131.052003][ T6044] do_filp_open+0x1c5/0x3d0 [ 131.052040][ T6044] ? vfs_tmpfile+0x490/0x490 [ 131.052088][ T6044] ? _raw_spin_unlock+0x28/0x40 [ 131.052109][ T6044] ? alloc_fd+0x58f/0x630 [ 131.052142][ T6044] do_sys_openat2+0x12c/0x1c0 [ 131.052171][ T6044] ? do_sys_open+0xe0/0xe0 [ 131.052198][ T6044] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 131.052226][ T6044] ? lock_chain_count+0x20/0x20 [ 131.052250][ T6044] ? lock_chain_count+0x20/0x20 [ 131.052275][ T6044] __x64_sys_openat+0x139/0x160 [ 131.052306][ T6044] do_syscall_64+0x55/0xb0 [ 131.052333][ T6044] ? clear_bhb_loop+0x40/0x90 [ 131.052357][ T6044] ? clear_bhb_loop+0x40/0x90 [ 131.052381][ T6044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.052419][ T6044] RIP: 0033:0x7f6498ea7407 [ 131.052439][ T6044] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 131.052458][ T6044] RSP: 002b:00007fff0c29f150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 131.052482][ T6044] RAX: ffffffffffffffda RBX: 00007f6499612880 RCX: 00007f6498ea7407 [ 131.052500][ T6044] RDX: 0000000000000000 RSI: 00007fff0c29ff1c RDI: ffffffffffffff9c [ 131.052516][ T6044] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 131.052529][ T6044] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 131.052549][ T6044] R13: 00007fff0c29f3a0 R14: 00007f6499771000 R15: 00005555783b64d8 [ 131.052576][ T6044] [ 131.056915][ T6044] Kernel Offset: disabled