Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://34935 [ 31.652337][ T4723] cgroup: Unknown subsys name 'net' [ 31.792327][ T4723] cgroup: Unknown subsys name 'cpuset' [ 31.793890][ T4723] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.958982][ T4723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.083602][ T4730] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.418579][ T4746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.418843][ T4746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.419028][ T4746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.419352][ T4746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.419558][ T4746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.658132][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.658346][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.658407][ T4751] bridge_slave_0: entered allmulticast mode [ 34.659201][ T4751] bridge_slave_0: entered promiscuous mode [ 34.660364][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.660411][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.660455][ T4751] bridge_slave_1: entered allmulticast mode [ 34.661025][ T4751] bridge_slave_1: entered promiscuous mode [ 34.667450][ T4751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.668258][ T4751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.674790][ T4751] team0: Port device team_slave_0 added [ 34.675802][ T4751] team0: Port device team_slave_1 added [ 34.681450][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.681458][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.681468][ T4751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.682136][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.682144][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.682158][ T4751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.691936][ T4751] hsr_slave_0: entered promiscuous mode [ 34.692223][ T4751] hsr_slave_1: entered promiscuous mode [ 34.734681][ T4751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.736674][ T4751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.737086][ T4751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.737935][ T4751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.738352][ T4751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.739344][ T4751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.740024][ T4751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.741474][ T4751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.750435][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.750467][ T4751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.750617][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.750650][ T4751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.768394][ T4751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.772776][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.773185][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.776612][ T4751] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.785666][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.785697][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.786047][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.786066][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.795634][ T4751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.795647][ T4751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.877533][ T4751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.888478][ T4751] veth0_vlan: entered promiscuous mode [ 34.895206][ T4751] veth1_vlan: entered promiscuous mode [ 34.902940][ T4751] veth0_macvtap: entered promiscuous mode [ 34.904292][ T4751] veth1_macvtap: entered promiscuous mode [ 34.909889][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.911305][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.931618][ T1765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.950764][ T1765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.972155][ T1765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.972269][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.010110][ T1031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.094682][ T1031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.127363][ T1031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.177800][ T1031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.260163][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.260177][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.271257][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.271270][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:00:35 executed programs: 0 [ 35.729009][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.729435][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.729587][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.729889][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.730090][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.866669][ T4827] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.866727][ T4827] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.866791][ T4827] bridge_slave_0: entered allmulticast mode [ 35.867364][ T4827] bridge_slave_0: entered promiscuous mode [ 35.875104][ T4827] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.875129][ T4827] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.875195][ T4827] bridge_slave_1: entered allmulticast mode [ 35.875610][ T4827] bridge_slave_1: entered promiscuous mode [ 35.883198][ T4827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.884145][ T4827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.891222][ T4827] team0: Port device team_slave_0 added [ 35.891970][ T4827] team0: Port device team_slave_1 added [ 35.898186][ T4827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.898195][ T4827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.898211][ T4827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.898830][ T4827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.898836][ T4827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.898848][ T4827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.910353][ T4827] hsr_slave_0: entered promiscuous mode [ 35.910743][ T4827] hsr_slave_1: entered promiscuous mode [ 35.911191][ T4827] debugfs: 'hsr0' already exists in 'hsr' [ 35.911234][ T4827] Cannot create hsr debugfs directory [ 37.781052][ T51] Bluetooth: hci0: command tx timeout [ 38.201319][ T1031] bridge_slave_1: left allmulticast mode [ 38.201347][ T1031] bridge_slave_1: left promiscuous mode [ 38.201618][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.204484][ T1031] bridge_slave_0: left allmulticast mode [ 38.204499][ T1031] bridge_slave_0: left promiscuous mode [ 38.204562][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.257675][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.266030][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.266967][ T1031] bond0 (unregistering): Released all slaves [ 38.300400][ T1031] hsr_slave_0: left promiscuous mode [ 38.302290][ T1031] hsr_slave_1: left promiscuous mode [ 38.302657][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.302672][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.304584][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.304596][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.308578][ T1031] veth1_macvtap: left promiscuous mode [ 38.308615][ T1031] veth0_macvtap: left promiscuous mode [ 38.308660][ T1031] veth1_vlan: left promiscuous mode [ 38.308697][ T1031] veth0_vlan: left promiscuous mode [ 38.407673][ T1031] team0 (unregistering): Port device team_slave_1 removed [ 38.416153][ T1031] team0 (unregistering): Port device team_slave_0 removed [ 38.461844][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.698794][ T4827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.700247][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.700620][ T4827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.706288][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.706649][ T4827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.707704][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.708080][ T4827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.708948][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.903130][ T4827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.907461][ T4827] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.909393][ T1765] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.909421][ T1765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.916905][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.916929][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.034744][ T4827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.045327][ T4827] veth0_vlan: entered promiscuous mode [ 39.047039][ T4827] veth1_vlan: entered promiscuous mode [ 39.055867][ T4827] veth0_macvtap: entered promiscuous mode [ 39.057302][ T4827] veth1_macvtap: entered promiscuous mode [ 39.064456][ T4827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.088328][ T4827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.101577][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.101732][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.101749][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.101772][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.125269][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.125286][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.153611][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.153625][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.441050][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.600958][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 39.601418][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 39.602398][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 39.602411][ T10] usb 1-1: config 0 has no interface number 0 [ 39.602425][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 39.603768][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.603781][ T10] usb 1-1: Product: syz [ 39.603788][ T10] usb 1-1: Manufacturer: syz [ 39.603793][ T10] usb 1-1: SerialNumber: syz [ 39.606627][ T10] usb 1-1: config 0 descriptor?? [ 39.609172][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 39.609188][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 39.851375][ T51] Bluetooth: hci0: command tx timeout [ 39.862116][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 39.934563][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 39.934590][ T10] em28xx 1-1:0.132: board has no eeprom [ 39.990776][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 39.990792][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 39.991500][ T4787] em28xx 1-1:0.132: Registering V4L2 extension [ 39.995787][ T10] usb 1-1: USB disconnect, device number 2 [ 39.996481][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 40.019509][ T4787] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 40.019525][ T4787] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 40.019531][ T4787] em28xx 1-1:0.132: No AC97 audio processor [ 40.020607][ T4787] usb 1-1: Decoder not found [ 40.020617][ T4787] em28xx 1-1:0.132: failed to create media graph [ 40.020634][ T4787] em28xx 1-1:0.132: V4L2 device video11 deregistered [ 40.028669][ T4787] INFO: trying to register non-static key. [ 40.029768][ T4787] The code is fine but needs lockdep annotation, or maybe [ 40.030975][ T4787] you didn't initialize this object before use? [ 40.032096][ T4787] turning off the locking correctness validator. [ 40.033289][ T4787] CPU: 0 UID: 0 PID: 4787 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT [ 40.034900][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.036750][ T4787] Workqueue: events request_module_async [ 40.037773][ T4787] Call trace: [ 40.038372][ T4787] show_stack+0x2c/0x3c (C) [ 40.039225][ T4787] __dump_stack+0x30/0x40 [ 40.039987][ T4787] dump_stack_lvl+0xd8/0x12c [ 40.040872][ T4787] dump_stack+0x1c/0x28 [ 40.041596][ T4787] assign_lock_key+0xcc/0xdc [ 40.042421][ T4787] register_lock_class+0xf8/0x31c [ 40.043363][ T4787] __lock_acquire+0x140/0x2b08 [ 40.044248][ T4787] lock_acquire+0x13c/0x320 [ 40.045039][ T4787] _raw_spin_lock_irqsave+0x5c/0x7c [ 40.045968][ T4787] __wake_up_common_lock+0x30/0x78 [ 40.046891][ T4787] __wake_up+0x18/0x24 [ 40.047613][ T4787] __vb2_queue_cancel+0x248/0xa78 [ 40.048540][ T4787] vb2_core_queue_release+0x34/0x13c [ 40.049542][ T4787] vb2_video_unregister_device+0x12c/0x1d0 [ 40.050651][ T4787] em28xx_v4l2_init+0x1368/0x247c [ 40.051621][ T4787] em28xx_init_extension+0x10c/0x1b4 [ 40.052610][ T4787] request_module_async+0x24/0x34 [ 40.053563][ T4787] process_scheduled_works+0x91c/0x1250 [ 40.054563][ T4787] worker_thread+0x798/0xbd0 [ 40.055393][ T4787] kthread+0x304/0x3d4 [ 40.056132][ T4787] ret_from_fork+0x10/0x20 [ 40.056977][ T4787] Unable to handle kernel paging request at virtual address dfff800000000000 [ 40.056999][ T4787] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 40.057009][ T4787] Mem abort info: [ 40.057012][ T4787] ESR = 0x0000000096000005 [ 40.057016][ T4787] EC = 0x25: DABT (current EL), IL = 32 bits [ 40.057020][ T4787] SET = 0, FnV = 0 [ 40.057023][ T4787] EA = 0, S1PTW = 0 [ 40.057026][ T4787] FSC = 0x05: level 1 translation fault [ 40.057030][ T4787] Data abort info: [ 40.057031][ T4787] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 40.057035][ T4787] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 40.057039][ T4787] GCS = 0, Overlay = 0, DirtyBit = 0 [ 40.057043][ T4787] [dfff800000000000] address between user and kernel address ranges [ 40.057048][ T4787] Internal error: Oops: 0000000096000005 [#1] SMP [ 40.071672][ T4787] Modules linked in: [ 40.072382][ T4787] CPU: 0 UID: 0 PID: 4787 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT [ 40.073929][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.075727][ T4787] Workqueue: events request_module_async [ 40.076767][ T4787] pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 40.078131][ T4787] pc : __wake_up_common+0xac/0x180 [ 40.079082][ T4787] lr : __wake_up_common_lock+0x4c/0x78 [ 40.080095][ T4787] sp : ffff80009b467880 [ 40.080833][ T4787] x29: ffff80009b467880 x28: dfff800000000000 x27: dfff800000000000 [ 40.082267][ T4787] x26: dfff800000000000 x25: ffff0000c7d6176c x24: 0000000000000000 [ 40.083674][ T4787] x23: ffff0000c7d61800 x22: 0000000000000003 x21: 0000000000000000 [ 40.085142][ T4787] x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff [ 40.086634][ T4787] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 40.088078][ T4787] x14: 000000000000061d x13: 0000000000000001 x12: 0000000000000004 [ 40.089492][ T4787] x11: ffff70001368cf00 x10: ffff70001368cf00 x9 : 0000000000000003 [ 40.090899][ T4787] x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff8000804823d8 [ 40.092337][ T4787] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 [ 40.093745][ T4787] x2 : 0000000000000000 x1 : 0000000000000003 x0 : ffff0000c7d617c0 [ 40.095134][ T4787] Call trace: [ 40.095702][ T4787] __wake_up_common+0xac/0x180 (P) [ 40.096608][ T4787] __wake_up_common_lock+0x4c/0x78 [ 40.097551][ T4787] __wake_up+0x18/0x24 [ 40.098298][ T4787] __vb2_queue_cancel+0x248/0xa78 [ 40.099227][ T4787] vb2_core_queue_release+0x34/0x13c [ 40.100170][ T4787] vb2_video_unregister_device+0x12c/0x1d0 [ 40.101235][ T4787] em28xx_v4l2_init+0x1368/0x247c [ 40.102151][ T4787] em28xx_init_extension+0x10c/0x1b4 [ 40.103072][ T4787] request_module_async+0x24/0x34 [ 40.103936][ T4787] process_scheduled_works+0x91c/0x1250 [ 40.104910][ T4787] worker_thread+0x798/0xbd0 [ 40.105713][ T4787] kthread+0x304/0x3d4 [ 40.106528][ T4787] ret_from_fork+0x10/0x20 [ 40.107344][ T4787] Code: f94002f8 eb17031f 54000500 d343ff08 (387b6908) [ 40.108587][ T4787] ---[ end trace 0000000000000000 ]--- [ 40.287804][ T4787] Kernel panic - not syncing: Oops: Fatal exception [ 40.288916][ T4787] SMP: stopping secondary CPUs [ 40.289765][ T4787] Kernel Offset: disabled [ 40.290528][ T4787] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 40.291718][ T4787] Memory Limit: none [ 40.473193][ T4787] Rebooting in 86400 seconds..