Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. 1970/01/01 00:00:47 parsed 1 programs [ 48.154933][ T4331] cgroup: Unknown subsys name 'net' [ 48.380208][ T4331] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.652874][ T4331] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 56.677310][ T4352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.679198][ T4352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.680456][ T4352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.681847][ T4352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.683091][ T4352] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.684261][ T4352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.750704][ T4347] chnl_net:caif_netlink_parms(): no params data found [ 56.769184][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.770369][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.771881][ T4347] device bridge_slave_0 entered promiscuous mode [ 56.774243][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.775348][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.779951][ T4347] device bridge_slave_1 entered promiscuous mode [ 56.891867][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.898677][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.922641][ T4347] team0: Port device team_slave_0 added [ 56.924336][ T4347] team0: Port device team_slave_1 added [ 56.942363][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.943570][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.949495][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.960371][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.961517][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.965294][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.050633][ T4347] device hsr_slave_0 entered promiscuous mode [ 57.069306][ T4347] device hsr_slave_1 entered promiscuous mode [ 57.118390][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.119641][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.127261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.144216][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.145422][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.155765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.244004][ T4347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.291992][ T4347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.340691][ T4347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.398889][ T4347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.502135][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.507335][ T4347] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.511327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.513419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.524578][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.526584][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.527834][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.530942][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.532458][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.533645][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.536644][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.583799][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.585552][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.616106][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.669131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.673621][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.676822][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.759696][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.761103][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.765134][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.771774][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.773377][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.791232][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.793144][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.795042][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.796429][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.799708][ T4347] device veth0_vlan entered promiscuous mode [ 57.803033][ T4347] device veth1_vlan entered promiscuous mode [ 57.810671][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.812198][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.813684][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.815213][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.817929][ T4347] device veth0_macvtap entered promiscuous mode [ 57.820918][ T4347] device veth1_macvtap entered promiscuous mode [ 57.825690][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.827000][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.829934][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.831444][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.832955][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.848466][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.849720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.851802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.855844][ T4347] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.857232][ T4347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.860568][ T4347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.861916][ T4347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:57 executed programs: 0 [ 58.043544][ T4440] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.045010][ T4440] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.059984][ T4443] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.061569][ T4443] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.062977][ T4443] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.064338][ T4443] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.065774][ T4443] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.067706][ T4443] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.070278][ T4443] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.072389][ T4443] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.074403][ T4350] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.075700][ T4350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.092723][ T4352] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.094143][ T4352] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.097712][ T4350] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.100592][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.102757][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.104161][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.105410][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.111979][ T4443] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.113597][ T4443] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.115019][ T4443] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.128586][ T4352] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.130463][ T4352] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.139199][ T4352] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.141104][ T4352] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.142802][ T4352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.145252][ T4352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.146857][ T4352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.148516][ T4352] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.257885][ T4436] chnl_net:caif_netlink_parms(): no params data found [ 58.267219][ T4435] chnl_net:caif_netlink_parms(): no params data found [ 58.305752][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.306946][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.309163][ T4436] device bridge_slave_0 entered promiscuous mode [ 58.322247][ T4445] chnl_net:caif_netlink_parms(): no params data found [ 58.332906][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.334053][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.335545][ T4436] device bridge_slave_1 entered promiscuous mode [ 58.348895][ T4447] chnl_net:caif_netlink_parms(): no params data found [ 58.354103][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.355388][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.357407][ T4435] device bridge_slave_0 entered promiscuous mode [ 58.364131][ T4442] chnl_net:caif_netlink_parms(): no params data found [ 58.376963][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.379394][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.380802][ T4435] device bridge_slave_1 entered promiscuous mode [ 58.383134][ T4436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.385525][ T4436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.406962][ T4436] team0: Port device team_slave_0 added [ 58.419786][ T4435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.421324][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.422517][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.423967][ T4445] device bridge_slave_0 entered promiscuous mode [ 58.426640][ T4436] team0: Port device team_slave_1 added [ 58.435624][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.436749][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.438751][ T4442] device bridge_slave_0 entered promiscuous mode [ 58.443673][ T4435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.445182][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.446211][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.447561][ T4442] device bridge_slave_1 entered promiscuous mode [ 58.449223][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.450249][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.451689][ T4445] device bridge_slave_1 entered promiscuous mode [ 58.458422][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.459606][ T4447] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.461042][ T4447] device bridge_slave_0 entered promiscuous mode [ 58.471019][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.472206][ T4447] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.473626][ T4447] device bridge_slave_1 entered promiscuous mode [ 58.480713][ T4436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.481865][ T4436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.485763][ T4436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.490909][ T4442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.497429][ T4435] team0: Port device team_slave_0 added [ 58.499997][ T4436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.501115][ T4436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.504980][ T4436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.508358][ T4435] team0: Port device team_slave_1 added [ 58.510451][ T4442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.512846][ T4445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.523139][ T4445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.526188][ T4447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.534763][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.535839][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.541278][ T4435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.544062][ T4447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.551739][ T4442] team0: Port device team_slave_0 added [ 58.553021][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.554041][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.559356][ T4435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.564372][ T4445] team0: Port device team_slave_0 added [ 58.639131][ T4436] device hsr_slave_0 entered promiscuous mode [ 58.697970][ T4436] device hsr_slave_1 entered promiscuous mode [ 58.737743][ T4436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.739111][ T4436] Cannot create hsr debugfs directory [ 58.740636][ T4442] team0: Port device team_slave_1 added [ 58.758901][ T4447] team0: Port device team_slave_0 added [ 58.760576][ T4447] team0: Port device team_slave_1 added [ 58.773314][ T4445] team0: Port device team_slave_1 added [ 58.781876][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.783026][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.787185][ T4442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.800012][ T4447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.801194][ T4447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.805255][ T4447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.838915][ T4435] device hsr_slave_0 entered promiscuous mode [ 58.878171][ T4435] device hsr_slave_1 entered promiscuous mode [ 58.917695][ T4435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.918883][ T4435] Cannot create hsr debugfs directory [ 58.922848][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.923963][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.928771][ T4445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.930809][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.931967][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.935870][ T4442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.962930][ T4447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.964082][ T4447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.968397][ T4447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.972322][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.973482][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.980429][ T4445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.061465][ T4442] device hsr_slave_0 entered promiscuous mode [ 59.097913][ T4442] device hsr_slave_1 entered promiscuous mode [ 59.137701][ T4442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.138951][ T4442] Cannot create hsr debugfs directory [ 59.178810][ T4445] device hsr_slave_0 entered promiscuous mode [ 59.228112][ T4445] device hsr_slave_1 entered promiscuous mode [ 59.267708][ T4445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.268920][ T4445] Cannot create hsr debugfs directory [ 59.319432][ T4447] device hsr_slave_0 entered promiscuous mode [ 59.357893][ T4447] device hsr_slave_1 entered promiscuous mode [ 59.397675][ T4447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.398871][ T4447] Cannot create hsr debugfs directory [ 59.543635][ T4436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.624845][ T4436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.660464][ T4436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.727530][ T4435] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.769101][ T4436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.817060][ T4435] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.909447][ T4447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.913383][ T4435] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.949759][ T4435] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.158063][ T4443] Bluetooth: hci4: command 0x0409 tx timeout [ 60.158429][ T4350] Bluetooth: hci3: command 0x0409 tx timeout [ 60.159085][ T4443] Bluetooth: hci0: command 0x0409 tx timeout [ 60.160109][ T4350] Bluetooth: hci2: command 0x0409 tx timeout [ 60.161142][ T4443] Bluetooth: hci1: command 0x0409 tx timeout [ 60.297142][ T4436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.302362][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.303712][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.306603][ T4436] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.312647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.314082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.315507][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.316581][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.319132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.322011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.323537][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.324703][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.326099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.368680][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.370634][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.372272][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.374480][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.376062][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.383343][ T4435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.385363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.387111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.391561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.393234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.395128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.396541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.400515][ T4435] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.403259][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.406854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.410633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.412035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.413632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.415475][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.416496][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.420763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.422208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.423632][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.424797][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.426175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.762577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.764169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.771615][ T4435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.773284][ T4435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.781845][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.783576][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.785104][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.787023][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.789644][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.791147][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.792595][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.793973][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.795874][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.797299][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.857763][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.859159][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.865240][ T4436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.872193][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.873813][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.883522][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.885131][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.886663][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.888845][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.894029][ T4436] device veth0_vlan entered promiscuous mode [ 60.895933][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.897187][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.939809][ T4435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.039481][ T4436] device veth1_vlan entered promiscuous mode [ 61.117407][ T4436] device veth0_macvtap entered promiscuous mode [ 61.207970][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.209609][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.211045][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.212581][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.214121][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.215659][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.217073][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.218843][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.220347][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.221758][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.223227][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.224672][ T4435] device veth0_vlan entered promiscuous mode [ 61.308296][ T4436] device veth1_macvtap entered promiscuous mode [ 61.312970][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.314522][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.316562][ T4436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.318404][ T4435] device veth1_vlan entered promiscuous mode [ 61.321379][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.322774][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.324716][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.325993][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.327566][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.377737][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.379515][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.381814][ T4436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.383749][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.385357][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.391665][ T4436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.392921][ T4436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.394236][ T4436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.395715][ T4436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.419142][ T4479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.420387][ T4479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.438523][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.440159][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.441612][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.454559][ T1892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.455864][ T1892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.456581][ T4435] device veth0_macvtap entered promiscuous mode [ 61.459152][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.460726][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.469368][ T4435] device veth1_macvtap entered promiscuous mode [ 61.475201][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.476776][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.479066][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.481293][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.483565][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.486665][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.488702][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.490318][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.504216][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.505867][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.507460][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.509205][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.511495][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.512657][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.514393][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.521705][ T4435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.523146][ T4435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.524760][ T4435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.525989][ T4435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.551635][ T1892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.552897][ T1892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.554223][ T1892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.564428][ T1892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.565656][ T1892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.566976][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.592563][ T4493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.594114][ T4493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.777667][ T114] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.970362][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.971962][ T114] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 61.973467][ T114] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice= 1.a0 [ 61.974834][ T114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.978399][ T114] usb 1-1: config 0 descriptor?? [ 61.982453][ T114] em28xx 1-1:0.0: New device @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 61.983745][ T114] em28xx 1-1:0.0: Video interface 0 found: bulk [ 62.111033][ T4503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.112527][ T4503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.237653][ T4443] Bluetooth: hci2: command 0x041b tx timeout [ 62.238123][ T4352] Bluetooth: hci0: command 0x041b tx timeout [ 62.238669][ T4443] Bluetooth: hci3: command 0x041b tx timeout [ 62.239644][ T4352] Bluetooth: hci4: command 0x041b tx timeout [ 62.248184][ T4350] Bluetooth: hci1: command 0x041b tx timeout [ 62.250246][ T114] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 62.365309][ T114] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 62.366758][ T114] em28xx 1-1:0.0: board has no eeprom [ 62.439518][ T114] em28xx 1-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 62.440599][ T114] em28xx 1-1:0.0: analog set to bulk mode. [ 62.445339][ T114] usb 1-1: USB disconnect, device number 2 [ 62.446757][ T114] em28xx 1-1:0.0: Disconnecting em28xx [ 62.448181][ T4501] em28xx 1-1:0.0: Registering V4L2 extension [ 62.476446][ T4501] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 62.492015][ T4501] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 62.493812][ T4501] xc2028 1-0061: creating new instance [ 62.494641][ T4501] xc2028 1-0061: type set to XCeive xc2028/xc3028 tuner [ 62.495907][ T4501] em28xx 1-1:0.0: Config register raw data: 0xffffffed [ 62.496934][ T4501] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 62.498919][ T4501] em28xx 1-1:0.0: No AC97 audio processor [ 62.501225][ T4501] em28xx 1-1:0.0: Registered radio device as radio2 [ 62.502225][ T4501] usb 1-1: Decoder not found [ 62.502920][ T4501] em28xx 1-1:0.0: failed to create media graph [ 62.503846][ T4501] em28xx 1-1:0.0: V4L2 device radio2 deregistered [ 62.505818][ T4501] em28xx 1-1:0.0: V4L2 device video11 deregistered [ 62.507524][ T4501] xc2028 1-0061: destroying instance [ 62.509819][ T4501] em28xx 1-1:0.0: Registering input extension [ 62.512524][ T114] em28xx 1-1:0.0: Closing input extension [ 62.516315][ T114] em28xx 1-1:0.0: Freeing device [ 62.521048][ T4501] usb 1-1:0.0: Direct firmware load for xc3028-v27.fw failed with error -2 [ 62.526721][ T4501] usb 1-1:0.0: Falling back to sysfs fallback for: xc3028-v27.fw [ 62.530866][ T4501] kobject_add_internal failed for firmware (error: -2 parent: 1-1:0.0) [ 62.532267][ T4501] firmware xc3028-v27.fw: fw_load_sysfs_fallback: device_register failed [ 62.533709][ T4501] ================================================================== [ 62.534955][ T4501] BUG: KASAN: use-after-free in load_firmware_cb+0xc0/0x1524 [ 62.535995][ T4501] Read of size 8 at addr ffff0000eadb8318 by task kworker/1:14/4501 [ 62.537105][ T4501] [ 62.537454][ T4501] CPU: 1 PID: 4501 Comm: kworker/1:14 Not tainted syzkaller #0 [ 62.538653][ T4501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 62.540233][ T4501] Workqueue: events request_firmware_work_func [ 62.541213][ T4501] Call trace: [ 62.541735][ T4501] dump_backtrace+0x1c0/0x1ec [ 62.542449][ T4501] show_stack+0x2c/0x3c [ 62.543084][ T4501] __dump_stack+0x30/0x40 [ 62.543760][ T4501] dump_stack_lvl+0xf4/0x15c [ 62.544508][ T4501] print_address_description+0x88/0x218 [ 62.545472][ T4501] print_report+0x50/0x68 [ 62.546230][ T4501] kasan_report+0xa8/0xfc [ 62.546923][ T4501] __asan_report_load8_noabort+0x2c/0x38 [ 62.547816][ T4501] load_firmware_cb+0xc0/0x1524 [ 62.548664][ T4501] request_firmware_work_func+0xe8/0x19c [ 62.549600][ T4501] process_one_work+0x7f8/0x13a4 [ 62.550426][ T4501] worker_thread+0x8c4/0xfec [ 62.551200][ T4501] kthread+0x250/0x2d8 [ 62.551871][ T4501] ret_from_fork+0x10/0x20 [ 62.552599][ T4501] [ 62.552975][ T4501] Allocated by task 4501: [ 62.553684][ T4501] kasan_set_track+0x4c/0x80 [ 62.554465][ T4501] kasan_save_alloc_info+0x24/0x30 [ 62.555269][ T4501] __kasan_kmalloc+0xa0/0xb8 [ 62.556060][ T4501] kmalloc_trace+0x7c/0x94 [ 62.556792][ T4501] tuner_probe+0xc8/0x1698 [ 62.557495][ T4501] i2c_device_probe+0x690/0x8fc [ 62.558266][ T4501] really_probe+0x39c/0xacc [ 62.558955][ T4501] __driver_probe_device+0x180/0x310 [ 62.559743][ T4501] driver_probe_device+0x78/0x324 [ 62.560459][ T4501] __device_attach_driver+0x290/0x4d4 [ 62.561298][ T4501] bus_for_each_drv+0x154/0x1e4 [ 62.562053][ T4501] __device_attach+0x2ac/0x3dc [ 62.562839][ T4501] device_initial_probe+0x24/0x34 [ 62.563668][ T4501] bus_probe_device+0xbc/0x1c4 [ 62.564476][ T4501] device_add+0xb04/0xf90 [ 62.565230][ T4501] device_register+0x28/0x38 [ 62.566002][ T4501] i2c_new_client_device+0x87c/0xe68 [ 62.566858][ T4501] v4l2_i2c_new_subdev_board+0xb0/0x20c [ 62.567778][ T4501] v4l2_i2c_new_subdev+0x130/0x1b8 [ 62.568649][ T4501] em28xx_v4l2_init+0x6f4/0x2914 [ 62.569501][ T4501] em28xx_init_extension+0x10c/0x1b4 [ 62.570323][ T4501] request_module_async+0x68/0x98 [ 62.571140][ T4501] process_one_work+0x7f8/0x13a4 [ 62.571879][ T4501] worker_thread+0xb64/0xfec [ 62.572644][ T4501] kthread+0x250/0x2d8 [ 62.573302][ T4501] ret_from_fork+0x10/0x20 [ 62.574076][ T4501] [ 62.574453][ T4501] Freed by task 4501: [ 62.575109][ T4501] kasan_set_track+0x4c/0x80 [ 62.575853][ T4501] kasan_save_free_info+0x38/0x5c [ 62.576671][ T4501] ____kasan_slab_free+0x148/0x1b0 [ 62.577499][ T4501] __kasan_slab_free+0x18/0x28 [ 62.578196][ T4501] slab_free_freelist_hook+0x16c/0x1e8 [ 62.578982][ T4501] __kmem_cache_free+0xbc/0x218 [ 62.579744][ T4501] kfree+0xd0/0x1a8 [ 62.580327][ T4501] tuner_remove+0x1d8/0x1f4 [ 62.580979][ T4501] i2c_device_remove+0x8c/0x1bc [ 62.581686][ T4501] device_release_driver_internal+0x3d4/0x6d0 [ 62.582549][ T4501] device_release_driver+0x28/0x38 [ 62.583291][ T4501] bus_remove_device+0x294/0x384 [ 62.584083][ T4501] device_del+0x580/0x984 [ 62.584746][ T4501] device_unregister+0x2c/0xc8 [ 62.585485][ T4501] i2c_unregister_device+0x114/0x168 [ 62.586293][ T4501] v4l2_i2c_subdev_unregister+0xa8/0xbc [ 62.587217][ T4501] v4l2_device_unregister+0x170/0x248 [ 62.588112][ T4501] em28xx_v4l2_init+0x1328/0x2914 [ 62.588973][ T4501] em28xx_init_extension+0x10c/0x1b4 [ 62.589841][ T4501] request_module_async+0x68/0x98 [ 62.590664][ T4501] process_one_work+0x7f8/0x13a4 [ 62.591457][ T4501] worker_thread+0xb64/0xfec [ 62.592234][ T4501] kthread+0x250/0x2d8 [ 62.592874][ T4501] ret_from_fork+0x10/0x20 [ 62.593593][ T4501] [ 62.593974][ T4501] The buggy address belongs to the object at ffff0000eadb8000 [ 62.593974][ T4501] which belongs to the cache kmalloc-2k of size 2048 [ 62.596089][ T4501] The buggy address is located 792 bytes inside of [ 62.596089][ T4501] 2048-byte region [ffff0000eadb8000, ffff0000eadb8800) [ 62.598069][ T4501] [ 62.598441][ T4501] The buggy address belongs to the physical page: [ 62.599349][ T4501] page:00000000e6bf42ef refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12adb8 [ 62.600816][ T4501] head:00000000e6bf42ef order:3 compound_mapcount:0 compound_pincount:0 [ 62.602124][ T4501] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 62.603357][ T4501] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002900 [ 62.604681][ T4501] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 62.606031][ T4501] page dumped because: kasan: bad access detected [ 62.607031][ T4501] [ 62.607413][ T4501] Memory state around the buggy address: [ 62.608282][ T4501] ffff0000eadb8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.609513][ T4501] ffff0000eadb8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.610655][ T4501] >ffff0000eadb8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.611967][ T4501] ^ [ 62.612764][ T4501] ffff0000eadb8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.614088][ T4501] ffff0000eadb8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.615399][ T4501] ================================================================== [ 62.633087][ T4513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.634608][ T4513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.637071][ T4501] Disabling lock debugging due to kernel taint [ 62.639793][ T4501] Unable to handle kernel paging request at virtual address dfff800000000005 [ 62.641062][ T4501] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 62.642244][ T4501] Mem abort info: [ 62.642815][ T4501] ESR = 0x0000000096000006 [ 62.643592][ T4501] EC = 0x25: DABT (current EL), IL = 32 bits [ 62.644598][ T4501] SET = 0, FnV = 0 [ 62.645267][ T4501] EA = 0, S1PTW = 0 [ 62.645922][ T4501] FSC = 0x06: level 2 translation fault [ 62.646833][ T4501] Data abort info: [ 62.647421][ T4501] ISV = 0, ISS = 0x00000006 [ 62.650056][ T4501] CM = 0, WnR = 0 [ 62.650606][ T4501] [dfff800000000005] address between user and kernel address ranges [ 62.651841][ T4501] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 62.652890][ T4501] Modules linked in: [ 62.653465][ T4501] CPU: 1 PID: 4501 Comm: kworker/1:14 Tainted: G B syzkaller #0 [ 62.654929][ T4501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 62.656371][ T4501] Workqueue: events request_firmware_work_func [ 62.657237][ T4501] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 62.658399][ T4501] pc : load_firmware_cb+0x23c/0x1524 [ 62.659198][ T4501] lr : load_firmware_cb+0xe4/0x1524 [ 62.660100][ T4501] sp : ffff800021677940 [ 62.660774][ T4501] x29: ffff800021677a90 x28: ffff00019f56a800 x27: 0000000000000000 [ 62.662094][ T4501] x26: dfff800000000000 x25: ffff7000042cef3c x24: 1fffe0001d5b7063 [ 62.663436][ T4501] x23: ffff8000216779e0 x22: 0000000000000000 x21: 0000000000000000 [ 62.664785][ T4501] x20: 0000000000000000 x19: ffff0000eadb8318 x18: ffff800011b9bf60 [ 62.666061][ T4501] x17: 1fffe00033eaa57e x16: ffff80000804309c x15: 0000000040000000 [ 62.667334][ T4501] x14: 0000000000000001 x13: 1ffff00002fc1b6c x12: 0000000000ff0100 [ 62.668633][ T4501] x11: ff0080000e07d104 x10: 0000000000000000 x9 : ffff80000e07d104 [ 62.669868][ T4501] x8 : 0000000000000005 x7 : 0000000000000004 x6 : ffff800008257984 [ 62.671026][ T4501] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008193d18 [ 62.672215][ T4501] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000028 [ 62.673529][ T4501] Call trace: [ 62.674047][ T4501] load_firmware_cb+0x23c/0x1524 [ 62.674804][ T4501] request_firmware_work_func+0xe8/0x19c [ 62.675733][ T4501] process_one_work+0x7f8/0x13a4 [ 62.676518][ T4501] worker_thread+0x8c4/0xfec [ 62.677222][ T4501] kthread+0x250/0x2d8 [ 62.677845][ T4501] ret_from_fork+0x10/0x20 [ 62.678614][ T4501] Code: b5fff5fb f9403bf6 9100a2c0 d343fc08 (387a6908) [ 62.679690][ T4501] ---[ end trace 0000000000000000 ]--- [ 62.895435][ T4501] Kernel panic - not syncing: Oops: Fatal exception [ 62.896458][ T4501] SMP: stopping secondary CPUs [ 62.897223][ T4501] Kernel Offset: disabled [ 62.897908][ T4501] CPU features: 0x080000,000f0097,a65bfea7 [ 62.898797][ T4501] Memory Limit: none [ 63.112633][ T4501] Rebooting in 86400 seconds..