Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. 2025/09/05 21:57:08 parsed 1 programs [ 90.340189][ T5872] cgroup: Unknown subsys name 'net' [ 90.471128][ T5872] cgroup: Unknown subsys name 'cpuset' [ 90.480873][ T5872] cgroup: Unknown subsys name 'rlimit' [ 92.069088][ T43] cfg80211: failed to load regulatory.db [ 92.283564][ T5872] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.547579][ T5892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.561245][ T5892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.569697][ T5892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.578770][ T5892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.587756][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.929902][ T5888] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.638257][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.657173][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.817535][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.826160][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.424554][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 99.625769][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.634218][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.655297][ T5947] bridge_slave_0: entered allmulticast mode [ 99.679231][ T5947] bridge_slave_0: entered promiscuous mode [ 99.693928][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.702263][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.710576][ T5947] bridge_slave_1: entered allmulticast mode [ 99.720691][ T5947] bridge_slave_1: entered promiscuous mode [ 99.775046][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.791600][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.838265][ T5947] team0: Port device team_slave_0 added [ 99.846342][ T5947] team0: Port device team_slave_1 added [ 99.876090][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.883202][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.909547][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.922238][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.929881][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.956487][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.000839][ T5947] hsr_slave_0: entered promiscuous mode [ 100.007580][ T5947] hsr_slave_1: entered promiscuous mode [ 100.155751][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.169858][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.181449][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.192231][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.275562][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.303114][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.317079][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.324519][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.340455][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.347852][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.531519][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.584362][ T5947] veth0_vlan: entered promiscuous mode [ 100.598550][ T5947] veth1_vlan: entered promiscuous mode [ 100.629772][ T5947] veth0_macvtap: entered promiscuous mode [ 100.640855][ T5947] veth1_macvtap: entered promiscuous mode [ 100.661776][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.679568][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.694066][ T2926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.704734][ T2926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.715615][ T2926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.725083][ T2926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/05 21:57:21 executed programs: 0 [ 100.911680][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.921492][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.930318][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.958122][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.968775][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.980289][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.989963][ T5987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.999290][ T5987] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.009548][ T5987] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.019968][ T5987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.034297][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.051533][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.067329][ T5892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.079154][ T5892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.087335][ T5892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.105833][ T5892] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.123235][ T5892] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.133613][ T5892] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.142576][ T5892] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.152447][ T5892] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.165542][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.346183][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.495973][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.608641][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.952795][ T5992] chnl_net:caif_netlink_parms(): no params data found [ 102.008495][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 102.044158][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 102.130556][ T5989] chnl_net:caif_netlink_parms(): no params data found [ 102.246480][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.254072][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.261928][ T5992] bridge_slave_0: entered allmulticast mode [ 102.269377][ T5992] bridge_slave_0: entered promiscuous mode [ 102.319935][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.327458][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.334727][ T5992] bridge_slave_1: entered allmulticast mode [ 102.342149][ T5992] bridge_slave_1: entered promiscuous mode [ 102.426417][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.434193][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.442091][ T5981] bridge_slave_0: entered allmulticast mode [ 102.449871][ T5981] bridge_slave_0: entered promiscuous mode [ 102.457990][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.465161][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.472966][ T5980] bridge_slave_0: entered allmulticast mode [ 102.480408][ T5980] bridge_slave_0: entered promiscuous mode [ 102.522937][ T5992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.532813][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.541086][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.548711][ T5981] bridge_slave_1: entered allmulticast mode [ 102.555872][ T5981] bridge_slave_1: entered promiscuous mode [ 102.582525][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.590190][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.597552][ T5980] bridge_slave_1: entered allmulticast mode [ 102.604703][ T5980] bridge_slave_1: entered promiscuous mode [ 102.663560][ T5992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.673409][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.681237][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.688768][ T5989] bridge_slave_0: entered allmulticast mode [ 102.697898][ T5989] bridge_slave_0: entered promiscuous mode [ 102.801638][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.810741][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.818294][ T5989] bridge_slave_1: entered allmulticast mode [ 102.825639][ T5989] bridge_slave_1: entered promiscuous mode [ 102.868160][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.881994][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.894231][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.908677][ T5992] team0: Port device team_slave_0 added [ 102.949888][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.020914][ T5992] team0: Port device team_slave_1 added [ 103.028222][ T5892] Bluetooth: hci0: command tx timeout [ 103.060539][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.107363][ T5892] Bluetooth: hci1: command tx timeout [ 103.117208][ T5892] Bluetooth: hci2: command tx timeout [ 103.133897][ T5981] team0: Port device team_slave_0 added [ 103.183593][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.193437][ T5892] Bluetooth: hci3: command tx timeout [ 103.221581][ T5981] team0: Port device team_slave_1 added [ 103.258355][ T5980] team0: Port device team_slave_0 added [ 103.264822][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.272071][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.300808][ T5992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.314799][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.322833][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.349590][ T5992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.392549][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.400440][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.427776][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.440858][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.448590][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.475012][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.490192][ T5980] team0: Port device team_slave_1 added [ 103.511957][ T5989] team0: Port device team_slave_0 added [ 103.521064][ T5989] team0: Port device team_slave_1 added [ 103.595849][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.603149][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.630855][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.706500][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.714024][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.740314][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.781274][ T5992] hsr_slave_0: entered promiscuous mode [ 103.788719][ T5992] hsr_slave_1: entered promiscuous mode [ 103.795173][ T5992] debugfs: 'hsr0' already exists in 'hsr' [ 103.801543][ T5992] Cannot create hsr debugfs directory [ 103.808029][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.814997][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.841714][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.925408][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.932776][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.960296][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.971427][ T62] bridge_slave_1: left allmulticast mode [ 103.978607][ T62] bridge_slave_1: left promiscuous mode [ 103.985147][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.996425][ T62] bridge_slave_0: left allmulticast mode [ 104.003338][ T62] bridge_slave_0: left promiscuous mode [ 104.009524][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.272199][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.283386][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.293528][ T62] bond0 (unregistering): Released all slaves [ 104.315674][ T5981] hsr_slave_0: entered promiscuous mode [ 104.322289][ T5981] hsr_slave_1: entered promiscuous mode [ 104.328637][ T5981] debugfs: 'hsr0' already exists in 'hsr' [ 104.334380][ T5981] Cannot create hsr debugfs directory [ 104.361760][ T5980] hsr_slave_0: entered promiscuous mode [ 104.369474][ T5980] hsr_slave_1: entered promiscuous mode [ 104.376037][ T5980] debugfs: 'hsr0' already exists in 'hsr' [ 104.382474][ T5980] Cannot create hsr debugfs directory [ 104.468521][ T62] hsr_slave_0: left promiscuous mode [ 104.474446][ T62] hsr_slave_1: left promiscuous mode [ 104.481253][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.489197][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.498049][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.505554][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.521555][ T62] veth1_macvtap: left promiscuous mode [ 104.528027][ T62] veth0_macvtap: left promiscuous mode [ 104.533854][ T62] veth1_vlan: left promiscuous mode [ 104.539361][ T62] veth0_vlan: left promiscuous mode [ 104.893607][ T62] team0 (unregistering): Port device team_slave_1 removed [ 104.923829][ T62] team0 (unregistering): Port device team_slave_0 removed [ 105.106962][ T5892] Bluetooth: hci0: command tx timeout [ 105.189616][ T5987] Bluetooth: hci1: command tx timeout [ 105.195238][ T5892] Bluetooth: hci2: command tx timeout [ 105.277437][ T5892] Bluetooth: hci3: command tx timeout [ 105.422278][ T5989] hsr_slave_0: entered promiscuous mode [ 105.429854][ T5989] hsr_slave_1: entered promiscuous mode [ 106.102665][ T5980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.139947][ T5980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.240804][ T5980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.335505][ T5980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.434469][ T5992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.495168][ T5992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.513741][ T5992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.562245][ T5992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.853398][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.001599][ T5992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.030383][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.043904][ T5981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.091956][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.099186][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.118355][ T5981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.170729][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.178517][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.191559][ T5892] Bluetooth: hci0: command tx timeout [ 107.209869][ T5981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.228823][ T5981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.264625][ T5992] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.277135][ T5892] Bluetooth: hci2: command tx timeout [ 107.278095][ T5987] Bluetooth: hci1: command tx timeout [ 107.335021][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.342221][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.353523][ T5987] Bluetooth: hci3: command tx timeout [ 107.414086][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.421346][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.502473][ T5989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.537044][ T5989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.550619][ T5989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.588993][ T5989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.779058][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.874862][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.921227][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.928477][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.982711][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.990026][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.066752][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.152800][ T5989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.384008][ T5992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.405231][ T5980] veth0_vlan: entered promiscuous mode [ 108.417845][ T5989] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.462115][ T5980] veth1_vlan: entered promiscuous mode [ 108.482496][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.489876][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.543271][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.550751][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.712188][ T5980] veth0_macvtap: entered promiscuous mode [ 108.760351][ T5980] veth1_macvtap: entered promiscuous mode [ 108.784970][ T5992] veth0_vlan: entered promiscuous mode [ 108.844191][ T5992] veth1_vlan: entered promiscuous mode [ 108.899482][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.929919][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.943112][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.999500][ T5992] veth0_macvtap: entered promiscuous mode [ 109.009480][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.021440][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.044233][ T5992] veth1_macvtap: entered promiscuous mode [ 109.065103][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.076319][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.126255][ T5981] veth0_vlan: entered promiscuous mode [ 109.194085][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.213094][ T5981] veth1_vlan: entered promiscuous mode [ 109.267149][ T5987] Bluetooth: hci0: command tx timeout [ 109.279969][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.351862][ T5987] Bluetooth: hci2: command tx timeout [ 109.351875][ T5892] Bluetooth: hci1: command tx timeout [ 109.405633][ T2979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.423590][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.435389][ T5987] Bluetooth: hci3: command tx timeout [ 109.443800][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.457273][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.521394][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.532708][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.533246][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.555074][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.571769][ T5981] veth0_macvtap: entered promiscuous mode 2025/09/05 21:57:30 executed programs: 8 [ 109.654664][ T5989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.666493][ T5981] veth1_macvtap: entered promiscuous mode [ 109.802855][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.830501][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.845875][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.893353][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.922676][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.941387][ T2979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.949092][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.970942][ T2979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.997820][ T5983] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.023344][ T2979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.045003][ T2979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.129308][ T5989] veth0_vlan: entered promiscuous mode [ 110.174284][ T5983] usb 2-1: Using ep0 maxpacket: 32 [ 110.191489][ T5983] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 110.214424][ T5983] usb 2-1: config 0 has no interface number 0 [ 110.222754][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.242160][ T5983] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 110.250362][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.273863][ T5989] veth1_vlan: entered promiscuous mode [ 110.274003][ T5983] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 110.307409][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.315463][ T5983] usb 2-1: Product: syz [ 110.320986][ T5983] usb 2-1: Manufacturer: syz [ 110.325633][ T5983] usb 2-1: SerialNumber: syz [ 110.326797][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.342407][ T5983] usb 2-1: config 0 descriptor?? [ 110.360239][ T6112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.377155][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.385063][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.414526][ T5983] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 110.436698][ T5983] em28xx 2-1:0.132: Video interface 132 found: bulk [ 110.462941][ T5989] veth0_macvtap: entered promiscuous mode [ 110.501090][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 110.528381][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 110.539642][ T5989] veth1_macvtap: entered promiscuous mode [ 110.564028][ T10] usb 4-1: config 0 has no interface number 0 [ 110.572007][ T10] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 110.602932][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 110.635457][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.649549][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.661860][ T10] usb 4-1: Product: syz [ 110.666070][ T10] usb 4-1: Manufacturer: syz [ 110.683099][ T5983] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 110.684110][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.701523][ T10] usb 4-1: SerialNumber: syz [ 110.710574][ T10] usb 4-1: config 0 descriptor?? [ 110.720475][ T6119] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 110.755868][ T2979] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.768308][ T5983] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 110.773127][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 110.786732][ T5983] em28xx 2-1:0.132: board has no eeprom [ 110.793135][ T2979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.802087][ T6050] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.810490][ T10] em28xx 4-1:0.132: Video interface 132 found: bulk [ 110.821975][ T2979] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.833720][ T2979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.857870][ T5983] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 110.873573][ T5983] em28xx 2-1:0.132: analog set to bulk mode. [ 110.881132][ T980] em28xx 2-1:0.132: Registering V4L2 extension [ 110.920489][ T5983] usb 2-1: USB disconnect, device number 2 [ 110.941535][ T5983] em28xx 2-1:0.132: Disconnecting em28xx [ 110.988499][ T6050] usb 1-1: Using ep0 maxpacket: 32 [ 111.010361][ T6050] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 111.022364][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 111.052451][ T6050] usb 1-1: config 0 has no interface number 0 [ 111.099147][ T6050] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 111.127765][ T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 111.146131][ T6050] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 111.177359][ T10] em28xx 4-1:0.132: board has no eeprom [ 111.179352][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.196235][ T6050] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.235090][ T6050] usb 1-1: Product: syz [ 111.240252][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.250887][ T6050] usb 1-1: Manufacturer: syz [ 111.270177][ T6050] usb 1-1: SerialNumber: syz [ 111.280547][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 111.314995][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.315494][ T6050] usb 1-1: config 0 descriptor?? [ 111.328996][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 111.332115][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.386369][ T10] usb 4-1: USB disconnect, device number 2 [ 111.394301][ T6125] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 111.416505][ T6050] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 111.436352][ T6050] em28xx 1-1:0.132: Video interface 132 found: bulk [ 111.472526][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 111.477331][ T980] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 111.485678][ T980] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 111.499139][ T980] em28xx 2-1:0.132: No AC97 audio processor [ 111.537311][ T980] usb 2-1: Decoder not found [ 111.551780][ T980] em28xx 2-1:0.132: failed to create media graph [ 111.561374][ T980] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 111.581843][ T980] em28xx 2-1:0.132: Remote control support is not available for this card. [ 111.601383][ T1589] em28xx 4-1:0.132: Registering V4L2 extension [ 111.677098][ T6050] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 111.735325][ T1589] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 111.745877][ T1589] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 111.756114][ T1589] em28xx 4-1:0.132: No AC97 audio processor [ 111.762358][ T6050] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 111.774951][ T6050] em28xx 1-1:0.132: board has no eeprom [ 111.781135][ T1589] usb 4-1: Decoder not found [ 111.785838][ T1589] em28xx 4-1:0.132: failed to create media graph [ 111.792461][ T1589] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 111.802338][ T1589] em28xx 4-1:0.132: Remote control support is not available for this card. [ 111.811177][ T10] em28xx 4-1:0.132: Closing input extension [ 111.817851][ T5983] em28xx 2-1:0.132: Closing input extension [ 111.825892][ T10] em28xx 4-1:0.132: Freeing device [ 111.831981][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.834644][ T5983] em28xx 2-1:0.132: Freeing device [ 111.856718][ T6050] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 111.864673][ T6050] em28xx 1-1:0.132: analog set to bulk mode. [ 111.877143][ T1589] em28xx 1-1:0.132: Registering V4L2 extension [ 111.939803][ T6050] usb 1-1: USB disconnect, device number 2 [ 111.971634][ T6050] em28xx 1-1:0.132: Disconnecting em28xx [ 111.996842][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 112.032021][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 112.058310][ T9] usb 3-1: config 0 has no interface number 0 [ 112.065188][ T9] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 112.099745][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 112.125182][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.135260][ T9] usb 3-1: Product: syz [ 112.139830][ T9] usb 3-1: Manufacturer: syz [ 112.144718][ T9] usb 3-1: SerialNumber: syz [ 112.162525][ T5983] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.177901][ T9] usb 3-1: config 0 descriptor?? [ 112.185623][ T6145] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 112.193567][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.225850][ T1589] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 112.235197][ T1589] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 112.251241][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 112.271223][ T9] em28xx 3-1:0.132: Video interface 132 found: bulk [ 112.278290][ T1589] em28xx 1-1:0.132: No AC97 audio processor [ 112.289869][ T1589] usb 1-1: Decoder not found [ 112.294607][ T1589] em28xx 1-1:0.132: failed to create media graph [ 112.301532][ T1589] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 112.313953][ T1589] em28xx 1-1:0.132: Remote control support is not available for this card. [ 112.315094][ T6156] ================================================================== [ 112.323522][ T6050] em28xx 1-1:0.132: Closing input extension [ 112.330656][ T6156] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 112.330691][ T6156] Read of size 8 at addr ffff88807a4cc740 by task v4l_id/6156 [ 112.330708][ T6156] [ 112.330721][ T6156] CPU: 1 UID: 0 PID: 6156 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 112.330750][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.330763][ T6156] Call Trace: [ 112.330770][ T6156] [ 112.330778][ T6156] dump_stack_lvl+0x189/0x250 [ 112.330798][ T6156] ? __virt_addr_valid+0x1c8/0x5c0 [ 112.330825][ T6156] ? rcu_is_watching+0x15/0xb0 [ 112.330847][ T6156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.330863][ T6156] ? rcu_is_watching+0x15/0xb0 [ 112.330884][ T6156] ? lock_release+0x4b/0x3e0 [ 112.330902][ T6156] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 112.330927][ T6156] ? __virt_addr_valid+0x1c8/0x5c0 [ 112.330952][ T6156] ? __virt_addr_valid+0x4a5/0x5c0 [ 112.330977][ T6156] print_report+0xca/0x240 [ 112.330994][ T6156] ? v4l2_fh_open+0xac/0x420 [ 112.331013][ T6156] kasan_report+0x118/0x150 [ 112.331035][ T6156] ? v4l2_fh_open+0xac/0x420 [ 112.331059][ T6156] v4l2_fh_open+0xac/0x420 [ 112.331079][ T6156] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.331099][ T6156] em28xx_v4l2_open+0x157/0x9a0 [ 112.331122][ T6156] v4l2_open+0x1bc/0x3a0 [ 112.331147][ T6156] chrdev_open+0x4cc/0x5e0 [ 112.331171][ T6156] ? __pfx_chrdev_open+0x10/0x10 [ 112.331194][ T6156] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 112.331220][ T6156] ? __pfx_chrdev_open+0x10/0x10 [ 112.331242][ T6156] do_dentry_open+0x950/0x13f0 [ 112.331272][ T6156] vfs_open+0x3b/0x340 [ 112.331295][ T6156] ? path_openat+0x2ecd/0x3830 [ 112.331314][ T6156] path_openat+0x2ee5/0x3830 [ 112.331343][ T6156] ? __pfx_path_openat+0x10/0x10 [ 112.331368][ T6156] do_filp_open+0x1fa/0x410 [ 112.331384][ T6156] ? __lock_acquire+0xab9/0xd20 [ 112.331403][ T6156] ? __pfx_do_filp_open+0x10/0x10 [ 112.331429][ T6156] ? _raw_spin_unlock+0x28/0x50 [ 112.331452][ T6156] ? alloc_fd+0x64c/0x6c0 [ 112.331476][ T6156] do_sys_openat2+0x121/0x1c0 [ 112.331494][ T6156] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.331510][ T6156] ? exc_page_fault+0x82/0x100 [ 112.331537][ T6156] ? do_user_addr_fault+0xc8a/0x1390 [ 112.331557][ T6156] __x64_sys_openat+0x138/0x170 [ 112.331575][ T6156] do_syscall_64+0xfa/0xfa0 [ 112.331590][ T6156] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.331605][ T6156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.331622][ T6156] ? clear_bhb_loop+0x60/0xb0 [ 112.331641][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.331657][ T6156] RIP: 0033:0x7fdf556a7407 [ 112.331673][ T6156] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 112.331687][ T6156] RSP: 002b:00007ffdd35a5aa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 112.331707][ T6156] RAX: ffffffffffffffda RBX: 00007fdf55d51880 RCX: 00007fdf556a7407 [ 112.331721][ T6156] RDX: 0000000000000000 RSI: 00007ffdd35a6f1b RDI: ffffffffffffff9c [ 112.331733][ T6156] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 112.331752][ T6156] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 112.331762][ T6156] R13: 00007ffdd35a5cf0 R14: 00007fdf55eb8000 R15: 000055c2d567b4d8 [ 112.331781][ T6156] [ 112.331787][ T6156] [ 112.367281][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 112.373844][ T6156] Allocated by task 1589: [ 112.373859][ T6156] kasan_save_track+0x3e/0x80 [ 112.373884][ T6156] __kasan_kmalloc+0x93/0xb0 [ 112.373903][ T6156] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 112.685808][ T6156] em28xx_v4l2_init+0x10b/0x2e70 [ 112.690784][ T6156] em28xx_init_extension+0x120/0x1c0 [ 112.696085][ T6156] process_scheduled_works+0xade/0x17b0 [ 112.701742][ T6156] worker_thread+0x8a0/0xda0 [ 112.706425][ T6156] kthread+0x70e/0x8a0 [ 112.710513][ T6156] ret_from_fork+0x47c/0x820 [ 112.715281][ T6156] ret_from_fork_asm+0x1a/0x30 [ 112.720081][ T6156] [ 112.722601][ T6156] Freed by task 1589: [ 112.726665][ T6156] kasan_save_track+0x3e/0x80 [ 112.731353][ T6156] __kasan_save_free_info+0x46/0x50 [ 112.736568][ T6156] __kasan_slab_free+0x5b/0x80 [ 112.741340][ T6156] kfree+0x199/0x6d0 [ 112.745238][ T6156] em28xx_v4l2_init+0x1683/0x2e70 [ 112.750265][ T6156] em28xx_init_extension+0x120/0x1c0 [ 112.755738][ T6156] process_scheduled_works+0xade/0x17b0 [ 112.761291][ T6156] worker_thread+0x8a0/0xda0 [ 112.765905][ T6156] kthread+0x70e/0x8a0 [ 112.769997][ T6156] ret_from_fork+0x47c/0x820 [ 112.774594][ T6156] ret_from_fork_asm+0x1a/0x30 [ 112.779358][ T6156] [ 112.781678][ T6156] The buggy address belongs to the object at ffff88807a4cc000 [ 112.781678][ T6156] which belongs to the cache kmalloc-8k of size 8192 [ 112.795730][ T6156] The buggy address is located 1856 bytes inside of [ 112.795730][ T6156] freed 8192-byte region [ffff88807a4cc000, ffff88807a4ce000) [ 112.809963][ T6156] [ 112.812292][ T6156] The buggy address belongs to the physical page: [ 112.818872][ T6156] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a4c8 [ 112.827747][ T6156] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.836260][ T6156] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 112.843799][ T6156] page_type: f5(slab) [ 112.847801][ T6156] raw: 00fff00000000040 ffff88801a842280 ffffea0000cefc00 dead000000000002 [ 112.856469][ T6156] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 112.865059][ T6156] head: 00fff00000000040 ffff88801a842280 ffffea0000cefc00 dead000000000002 [ 112.873733][ T6156] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 112.882401][ T6156] head: 00fff00000000003 ffffea0001e93201 00000000ffffffff 00000000ffffffff [ 112.891246][ T6156] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 112.899909][ T6156] page dumped because: kasan: bad access detected [ 112.906316][ T6156] page_owner tracks the page as allocated [ 112.912031][ T6156] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5533, tgid 5533 (dhcpcd), ts 57174705879, free_ts 57022618469 [ 112.932199][ T6156] post_alloc_hook+0x240/0x2a0 [ 112.936966][ T6156] get_page_from_freelist+0x21e4/0x22c0 [ 112.942600][ T6156] __alloc_frozen_pages_noprof+0x181/0x370 [ 112.948406][ T6156] alloc_pages_mpol+0x232/0x4a0 [ 112.953258][ T6156] allocate_slab+0x8a/0x330 [ 112.957768][ T6156] ___slab_alloc+0xbd1/0x13f0 [ 112.962455][ T6156] __slab_alloc+0x55/0xa0 [ 112.966874][ T6156] __kmalloc_cache_noprof+0x411/0x6f0 [ 112.972258][ T6156] tomoyo_init_log+0x111f/0x1f70 [ 112.977295][ T6156] tomoyo_supervisor+0x340/0x1480 [ 112.982318][ T6156] tomoyo_env_perm+0x149/0x1e0 [ 112.987080][ T6156] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 112.992809][ T6156] tomoyo_bprm_check_security+0x11c/0x180 [ 112.998610][ T6156] security_bprm_check+0x89/0x270 [ 113.003739][ T6156] bprm_execve+0x8ee/0x1450 [ 113.008246][ T6156] do_execveat_common+0x510/0x6a0 [ 113.013361][ T6156] page last free pid 5530 tgid 5530 stack trace: [ 113.019706][ T6156] __free_frozen_pages+0xbc4/0xd30 [ 113.024916][ T6156] __slab_free+0x2e7/0x390 [ 113.029377][ T6156] qlist_free_all+0x97/0x140 [ 113.034057][ T6156] kasan_quarantine_reduce+0x148/0x160 [ 113.039598][ T6156] __kasan_slab_alloc+0x22/0x80 [ 113.044469][ T6156] __kmalloc_noprof+0x3c3/0x7f0 [ 113.049409][ T6156] tomoyo_realpath_from_path+0xe3/0x5d0 [ 113.055050][ T6156] tomoyo_path_perm+0x213/0x4b0 [ 113.059904][ T6156] security_inode_getattr+0x12f/0x330 [ 113.065284][ T6156] vfs_statx+0x18e/0x550 [ 113.069622][ T6156] vfs_fstatat+0x118/0x170 [ 113.074058][ T6156] __x64_sys_newfstatat+0x116/0x190 [ 113.079526][ T6156] do_syscall_64+0xfa/0xfa0 [ 113.084036][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.089978][ T6156] [ 113.092308][ T6156] Memory state around the buggy address: [ 113.098030][ T6156] ffff88807a4cc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.106184][ T6156] ffff88807a4cc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.114249][ T6156] >ffff88807a4cc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.122310][ T6156] ^ [ 113.128462][ T6156] ffff88807a4cc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.136612][ T6156] ffff88807a4cc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.144702][ T6156] ================================================================== [ 113.201736][ T6156] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.209073][ T6156] CPU: 1 UID: 0 PID: 6156 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 113.218031][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.228288][ T6156] Call Trace: [ 113.231572][ T6156] [ 113.234513][ T6156] dump_stack_lvl+0x99/0x250 [ 113.239108][ T6156] ? __asan_memcpy+0x40/0x70 [ 113.243697][ T6156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.248894][ T6156] ? __pfx__printk+0x10/0x10 [ 113.253503][ T6156] vpanic+0x237/0x6d0 [ 113.257494][ T6156] ? __pfx_vpanic+0x10/0x10 [ 113.262002][ T6156] ? preempt_schedule+0xae/0xc0 [ 113.266966][ T6156] ? __pfx_preempt_schedule+0x10/0x10 [ 113.272352][ T6156] panic+0xb9/0xc0 [ 113.276076][ T6156] ? __pfx_panic+0x10/0x10 [ 113.280500][ T6156] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 113.286401][ T6156] ? is_module_address+0x17/0xf0 [ 113.291344][ T6156] ? v4l2_fh_open+0xac/0x420 [ 113.296025][ T6156] check_panic_on_warn+0x89/0xb0 [ 113.300965][ T6156] ? v4l2_fh_open+0xac/0x420 [ 113.305601][ T6156] end_report+0x78/0x160 [ 113.309933][ T6156] kasan_report+0x129/0x150 [ 113.314453][ T6156] ? v4l2_fh_open+0xac/0x420 [ 113.319225][ T6156] v4l2_fh_open+0xac/0x420 [ 113.323754][ T6156] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.329832][ T6156] em28xx_v4l2_open+0x157/0x9a0 [ 113.334694][ T6156] v4l2_open+0x1bc/0x3a0 [ 113.339030][ T6156] chrdev_open+0x4cc/0x5e0 [ 113.343453][ T6156] ? __pfx_chrdev_open+0x10/0x10 [ 113.348818][ T6156] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 113.355157][ T6156] ? __pfx_chrdev_open+0x10/0x10 [ 113.360109][ T6156] do_dentry_open+0x950/0x13f0 [ 113.364889][ T6156] vfs_open+0x3b/0x340 [ 113.368972][ T6156] ? path_openat+0x2ecd/0x3830 [ 113.373783][ T6156] path_openat+0x2ee5/0x3830 [ 113.378585][ T6156] ? __pfx_path_openat+0x10/0x10 [ 113.383762][ T6156] do_filp_open+0x1fa/0x410 [ 113.388403][ T6156] ? __lock_acquire+0xab9/0xd20 [ 113.393356][ T6156] ? __pfx_do_filp_open+0x10/0x10 [ 113.398388][ T6156] ? _raw_spin_unlock+0x28/0x50 [ 113.403420][ T6156] ? alloc_fd+0x64c/0x6c0 [ 113.407869][ T6156] do_sys_openat2+0x121/0x1c0 [ 113.412547][ T6156] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.417859][ T6156] ? exc_page_fault+0x82/0x100 [ 113.422650][ T6156] ? do_user_addr_fault+0xc8a/0x1390 [ 113.428062][ T6156] __x64_sys_openat+0x138/0x170 [ 113.432946][ T6156] do_syscall_64+0xfa/0xfa0 [ 113.437468][ T6156] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.442694][ T6156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.448899][ T6156] ? clear_bhb_loop+0x60/0xb0 [ 113.453692][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.459685][ T6156] RIP: 0033:0x7fdf556a7407 [ 113.464117][ T6156] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 113.483741][ T6156] RSP: 002b:00007ffdd35a5aa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 113.492173][ T6156] RAX: ffffffffffffffda RBX: 00007fdf55d51880 RCX: 00007fdf556a7407 [ 113.500252][ T6156] RDX: 0000000000000000 RSI: 00007ffdd35a6f1b RDI: ffffffffffffff9c [ 113.508245][ T6156] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 113.516309][ T6156] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 113.524277][ T6156] R13: 00007ffdd35a5cf0 R14: 00007fdf55eb8000 R15: 000055c2d567b4d8 [ 113.532256][ T6156] [ 113.535699][ T6156] Kernel Offset: disabled [ 113.540110][ T6156] Rebooting in 86400 seconds..