Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. 2025/12/14 20:16:14 parsed 1 programs [ 76.053483][ T5836] cgroup: Unknown subsys name 'net' [ 76.180522][ T5836] cgroup: Unknown subsys name 'cpuset' [ 76.189647][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.611996][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.610435][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.278340][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.287515][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.296928][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.306690][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.317590][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.877423][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 83.322426][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.330301][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.337553][ T5867] bridge_slave_0: entered allmulticast mode [ 83.344640][ T5867] bridge_slave_0: entered promiscuous mode [ 83.368696][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.375919][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.383193][ T5867] bridge_slave_1: entered allmulticast mode [ 83.390266][ T5867] bridge_slave_1: entered promiscuous mode [ 83.680764][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.735537][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.828168][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.836132][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.006619][ T5867] team0: Port device team_slave_0 added [ 84.038350][ T5867] team0: Port device team_slave_1 added [ 84.100576][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.106449][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.117274][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.123522][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.151413][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.178944][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.185941][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.229428][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.393852][ T5867] hsr_slave_0: entered promiscuous mode [ 84.402116][ T5867] hsr_slave_1: entered promiscuous mode [ 84.574313][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.589001][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.599765][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.610745][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.684292][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.705578][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.717880][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.725103][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.741428][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.748592][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.905849][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.952317][ T5867] veth0_vlan: entered promiscuous mode [ 84.963239][ T5867] veth1_vlan: entered promiscuous mode [ 84.992463][ T5867] veth0_macvtap: entered promiscuous mode [ 85.001661][ T5867] veth1_macvtap: entered promiscuous mode [ 85.022162][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.034190][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.051947][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.062207][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.073194][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.082481][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/12/14 20:16:25 executed programs: 0 [ 85.278265][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.289033][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.299711][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.318226][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.376385][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.385880][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.400428][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.410681][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.419980][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.432631][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.476183][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.486750][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.495204][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.510135][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.519920][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.528865][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.559420][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.568691][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.579943][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.588726][ T5898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.597503][ T5898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.605440][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.613998][ T5898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.622132][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.629890][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.086269][ T1111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.171220][ T1111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.345853][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 86.555104][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 86.582923][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 86.593415][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 86.668318][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 86.759347][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.766628][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.774817][ T5952] bridge_slave_0: entered allmulticast mode [ 86.782806][ T5952] bridge_slave_0: entered promiscuous mode [ 86.826055][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.833352][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.841145][ T5952] bridge_slave_1: entered allmulticast mode [ 86.848520][ T5952] bridge_slave_1: entered promiscuous mode [ 86.946110][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.953753][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.961786][ T5949] bridge_slave_0: entered allmulticast mode [ 86.969496][ T24] cfg80211: failed to load regulatory.db [ 86.969930][ T5949] bridge_slave_0: entered promiscuous mode [ 86.998311][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.019899][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.027242][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.034416][ T5961] bridge_slave_0: entered allmulticast mode [ 87.041636][ T5961] bridge_slave_0: entered promiscuous mode [ 87.057870][ T1111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.072626][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.079980][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.087718][ T5956] bridge_slave_0: entered allmulticast mode [ 87.095416][ T5956] bridge_slave_0: entered promiscuous mode [ 87.111171][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.118989][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.126246][ T5949] bridge_slave_1: entered allmulticast mode [ 87.135213][ T5949] bridge_slave_1: entered promiscuous mode [ 87.145819][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.165132][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.172404][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.179726][ T5961] bridge_slave_1: entered allmulticast mode [ 87.186733][ T5961] bridge_slave_1: entered promiscuous mode [ 87.194556][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.202263][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.209882][ T5956] bridge_slave_1: entered allmulticast mode [ 87.217699][ T5956] bridge_slave_1: entered promiscuous mode [ 87.255607][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.263166][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.270739][ T5958] bridge_slave_0: entered allmulticast mode [ 87.278298][ T5958] bridge_slave_0: entered promiscuous mode [ 87.311955][ T1111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.363929][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.372267][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.379530][ T5958] bridge_slave_1: entered allmulticast mode [ 87.386521][ T5958] bridge_slave_1: entered promiscuous mode [ 87.407799][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.420132][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.433355][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.448158][ T5955] Bluetooth: hci0: command tx timeout [ 87.463477][ T5952] team0: Port device team_slave_0 added [ 87.483566][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.494994][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.527307][ T5955] Bluetooth: hci1: command tx timeout [ 87.536935][ T5952] team0: Port device team_slave_1 added [ 87.557966][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.583015][ T5949] team0: Port device team_slave_0 added [ 87.607018][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.607497][ T5955] Bluetooth: hci3: command tx timeout [ 87.646051][ T5956] team0: Port device team_slave_0 added [ 87.654262][ T5949] team0: Port device team_slave_1 added [ 87.674553][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.695379][ T5961] team0: Port device team_slave_0 added [ 87.697843][ T5953] Bluetooth: hci4: command tx timeout [ 87.705389][ T5956] team0: Port device team_slave_1 added [ 87.707324][ T5955] Bluetooth: hci2: command tx timeout [ 87.740972][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.747993][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.775170][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.801135][ T5961] team0: Port device team_slave_1 added [ 87.830424][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.837575][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.864710][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.883646][ T5958] team0: Port device team_slave_0 added [ 87.923636][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.933719][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.960376][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.974647][ T5958] team0: Port device team_slave_1 added [ 87.992728][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.999997][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.027311][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.051022][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.058042][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.084143][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.109663][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.117003][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.143219][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.155289][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.163043][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.189532][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.253707][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.261287][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.287809][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.346955][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.354029][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.380788][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.394144][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.401582][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.428441][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.457810][ T1111] bridge_slave_1: left allmulticast mode [ 88.463671][ T1111] bridge_slave_1: left promiscuous mode [ 88.470837][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.481879][ T1111] bridge_slave_0: left allmulticast mode [ 88.488166][ T1111] bridge_slave_0: left promiscuous mode [ 88.494159][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.794327][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.806384][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.817685][ T1111] bond0 (unregistering): Released all slaves [ 88.833998][ T5952] hsr_slave_0: entered promiscuous mode [ 88.842193][ T5952] hsr_slave_1: entered promiscuous mode [ 88.848859][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 88.854723][ T5952] Cannot create hsr debugfs directory [ 88.873135][ T5956] hsr_slave_0: entered promiscuous mode [ 88.880489][ T5956] hsr_slave_1: entered promiscuous mode [ 88.886994][ T5956] debugfs: 'hsr0' already exists in 'hsr' [ 88.893024][ T5956] Cannot create hsr debugfs directory [ 89.062184][ T5949] hsr_slave_0: entered promiscuous mode [ 89.069247][ T5949] hsr_slave_1: entered promiscuous mode [ 89.075343][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 89.081436][ T5949] Cannot create hsr debugfs directory [ 89.115465][ T5961] hsr_slave_0: entered promiscuous mode [ 89.122813][ T5961] hsr_slave_1: entered promiscuous mode [ 89.129648][ T5961] debugfs: 'hsr0' already exists in 'hsr' [ 89.135422][ T5961] Cannot create hsr debugfs directory [ 89.190039][ T5958] hsr_slave_0: entered promiscuous mode [ 89.198123][ T5958] hsr_slave_1: entered promiscuous mode [ 89.204249][ T5958] debugfs: 'hsr0' already exists in 'hsr' [ 89.211991][ T5958] Cannot create hsr debugfs directory [ 89.527328][ T5955] Bluetooth: hci0: command tx timeout [ 89.580642][ T1111] hsr_slave_0: left promiscuous mode [ 89.586710][ T1111] hsr_slave_1: left promiscuous mode [ 89.592787][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.600550][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.607725][ T5955] Bluetooth: hci1: command tx timeout [ 89.614074][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.622218][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.638800][ T1111] veth1_macvtap: left promiscuous mode [ 89.644470][ T1111] veth0_macvtap: left promiscuous mode [ 89.650294][ T1111] veth1_vlan: left promiscuous mode [ 89.655671][ T1111] veth0_vlan: left promiscuous mode [ 89.697384][ T5955] Bluetooth: hci3: command tx timeout [ 89.777295][ T5953] Bluetooth: hci4: command tx timeout [ 89.783293][ T5955] Bluetooth: hci2: command tx timeout [ 89.974367][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 90.003812][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 90.432862][ T5956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.498962][ T5956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.523575][ T5956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.566232][ T5956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.646224][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.729803][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.757176][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.777816][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.080158][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.096160][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.110993][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.129388][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.143125][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.230589][ T5961] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.242710][ T5961] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.259704][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.268698][ T5961] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.283735][ T5961] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.313446][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.322170][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.329357][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.369492][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.376658][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.448967][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.462469][ T5958] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.482721][ T5958] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.494299][ T5958] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.524319][ T5958] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.565205][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.572448][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.607375][ T5955] Bluetooth: hci0: command tx timeout [ 91.622288][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.629498][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.687525][ T5955] Bluetooth: hci1: command tx timeout [ 91.762072][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.781666][ T5955] Bluetooth: hci3: command tx timeout [ 91.830179][ T5952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.847439][ T5953] Bluetooth: hci4: command tx timeout [ 91.850111][ T5952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.852946][ T5955] Bluetooth: hci2: command tx timeout [ 91.941693][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.044621][ T3689] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.051877][ T3689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.104620][ T3689] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.111928][ T3689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.189482][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.232222][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.285951][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.315277][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.322527][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.360602][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.367810][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.383773][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.423720][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.448046][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.513377][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.520668][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.580010][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.587195][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.680581][ T5956] veth0_vlan: entered promiscuous mode [ 92.736737][ T5956] veth1_vlan: entered promiscuous mode [ 92.771830][ T5952] veth0_vlan: entered promiscuous mode [ 92.895115][ T5952] veth1_vlan: entered promiscuous mode [ 92.930761][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.981246][ T5956] veth0_macvtap: entered promiscuous mode [ 93.010311][ T5956] veth1_macvtap: entered promiscuous mode [ 93.111246][ T5952] veth0_macvtap: entered promiscuous mode [ 93.154008][ T5952] veth1_macvtap: entered promiscuous mode [ 93.163126][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.201441][ T5949] veth0_vlan: entered promiscuous mode [ 93.214277][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.246552][ T1111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.256283][ T1111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.266234][ T1111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.277515][ T5949] veth1_vlan: entered promiscuous mode [ 93.288487][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.295968][ T1111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.320031][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.336542][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.358413][ T1111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.369812][ T1111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.390800][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.398628][ T1111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.410917][ T1111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.589337][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.613910][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.658357][ T5949] veth0_macvtap: entered promiscuous mode [ 93.682269][ T3689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.690655][ T3689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.700459][ T5955] Bluetooth: hci0: command tx timeout [ 93.728162][ T3689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.737265][ T5958] veth0_vlan: entered promiscuous mode [ 93.746683][ T3689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.767481][ T5955] Bluetooth: hci1: command tx timeout 2025/12/14 20:16:34 executed programs: 10 [ 93.784308][ T5949] veth1_macvtap: entered promiscuous mode [ 93.808680][ T5958] veth1_vlan: entered promiscuous mode [ 93.848364][ T5955] Bluetooth: hci3: command tx timeout [ 93.885486][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.894255][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.910600][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.921719][ T5961] veth0_vlan: entered promiscuous mode [ 93.928033][ T5955] Bluetooth: hci2: command tx timeout [ 93.928235][ T5953] Bluetooth: hci4: command tx timeout [ 93.944213][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.981821][ T5961] veth1_vlan: entered promiscuous mode [ 93.994505][ T5958] veth0_macvtap: entered promiscuous mode [ 94.006495][ T3689] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.039782][ T3689] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.070018][ T3471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.081351][ T5958] veth1_macvtap: entered promiscuous mode [ 94.091108][ T3471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.101382][ T5925] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.159303][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.194618][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.225136][ T5961] veth0_macvtap: entered promiscuous mode [ 94.236530][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.240016][ T5961] veth1_macvtap: entered promiscuous mode [ 94.251325][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.263241][ T4428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.272495][ T4428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.282811][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 94.291463][ T5944] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.293946][ T5925] usb 4-1: config 53 has an invalid interface number: 4 but max is 0 [ 94.309048][ T5925] usb 4-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 94.319803][ T4428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.329161][ T4428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.338234][ T5925] usb 4-1: config 53 has no interface number 0 [ 94.344457][ T5925] usb 4-1: config 53 interface 4 altsetting 1 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 94.357450][ T5925] usb 4-1: config 53 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 67, changing to 10 [ 94.372448][ T5925] usb 4-1: config 53 interface 4 altsetting 1 endpoint 0x82 has invalid maxpacket 16628, setting to 1024 [ 94.379944][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.383957][ T5925] usb 4-1: config 53 interface 4 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 94.401044][ T5925] usb 4-1: config 53 interface 4 has no altsetting 0 [ 94.410248][ T5925] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0033, bcdDevice=9c.09 [ 94.421981][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.442404][ T5925] usb 4-1: Product: syz [ 94.448033][ T5925] usb 4-1: Manufacturer: syz [ 94.448632][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 94.452749][ T5925] usb 4-1: SerialNumber: syz [ 94.461768][ T5944] usb 2-1: config 53 has an invalid interface number: 4 but max is 0 [ 94.471639][ T5944] usb 2-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 94.504227][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.519869][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.520404][ T5944] usb 2-1: config 53 has no interface number 0 [ 94.534183][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.535636][ T5944] usb 2-1: config 53 interface 4 altsetting 1 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 94.569080][ T3471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.574146][ T5944] usb 2-1: config 53 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 67, changing to 10 [ 94.589607][ T3471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.599706][ T5944] usb 2-1: config 53 interface 4 altsetting 1 endpoint 0x82 has invalid maxpacket 16628, setting to 1024 [ 94.611800][ T5944] usb 2-1: config 53 interface 4 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 94.622575][ T5944] usb 2-1: config 53 interface 4 has no altsetting 0 [ 94.632054][ T5944] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0033, bcdDevice=9c.09 [ 94.634223][ T3471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.654341][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.662865][ T5944] usb 2-1: Product: syz [ 94.669732][ T5944] usb 2-1: Manufacturer: syz [ 94.674386][ T5944] usb 2-1: SerialNumber: syz [ 94.726278][ T3471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.727497][ T5925] em28xx 4-1:53.4: New device syz syz @ 480 Mbps (0fd9:0033, interface 4, class 4) [ 94.748839][ T4428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.760248][ T5925] em28xx 4-1:53.4: Video interface 4 found: [ 94.779280][ T4428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.821765][ T4428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.842144][ T4428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.859149][ T5925] em28xx 4-1:53.4: unknown em28xx chip ID (0) [ 94.917338][ T50] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.925546][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.936638][ T5944] em28xx 2-1:53.4: New device syz syz @ 480 Mbps (0fd9:0033, interface 4, class 4) [ 94.953522][ T5944] em28xx 2-1:53.4: Video interface 4 found: [ 94.963369][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.976726][ T5925] em28xx 4-1:53.4: reading from i2c device at 0xa0 failed (error=-5) [ 95.002143][ T5925] em28xx 4-1:53.4: board has no eeprom [ 95.018257][ T5944] em28xx 2-1:53.4: unknown em28xx chip ID (0) [ 95.045618][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.055199][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.067768][ T5925] em28xx 4-1:53.4: Identified as Elgato Video Capture (card=33) [ 95.068418][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 95.083180][ T5925] em28xx 4-1:53.4: analog set to bulk mode. [ 95.090253][ T50] usb 1-1: config 53 has an invalid interface number: 4 but max is 0 [ 95.090278][ T50] usb 1-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 95.090297][ T50] usb 1-1: config 53 has no interface number 0 [ 95.090334][ T50] usb 1-1: config 53 interface 4 altsetting 1 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 95.090358][ T50] usb 1-1: config 53 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 67, changing to 10 [ 95.090383][ T50] usb 1-1: config 53 interface 4 altsetting 1 endpoint 0x82 has invalid maxpacket 16628, setting to 1024 [ 95.090410][ T50] usb 1-1: config 53 interface 4 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 95.090431][ T50] usb 1-1: config 53 interface 4 has no altsetting 0 [ 95.092639][ T50] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0033, bcdDevice=9c.09 [ 95.131102][ T6025] em28xx 4-1:53.4: Registering V4L2 extension [ 95.165878][ T5944] em28xx 2-1:53.4: reading from i2c device at 0xa0 failed (error=-5) [ 95.214397][ T5925] usb 4-1: USB disconnect, device number 2 [ 95.226131][ T5925] em28xx 4-1:53.4: Disconnecting em28xx [ 95.283253][ T5944] em28xx 2-1:53.4: board has no eeprom [ 95.298021][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.323470][ T6025] em28xx 4-1:53.4: Config register raw data: 0xffffffed [ 95.323643][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.343806][ T6025] em28xx 4-1:53.4: AC97 chip type couldn't be determined [ 95.353952][ T6025] em28xx 4-1:53.4: No AC97 audio processor [ 95.370418][ T5944] em28xx 2-1:53.4: Identified as Elgato Video Capture (card=33) [ 95.386300][ T5944] em28xx 2-1:53.4: analog set to bulk mode. [ 95.393366][ T50] usb 1-1: Product: syz [ 95.401260][ T50] usb 1-1: Manufacturer: syz [ 95.405947][ T50] usb 1-1: SerialNumber: syz [ 95.411026][ T6025] usb 4-1: Decoder not found [ 95.420906][ T5944] usb 2-1: USB disconnect, device number 2 [ 95.429506][ T6025] em28xx 4-1:53.4: failed to create media graph [ 95.433536][ T5944] em28xx 2-1:53.4: Disconnecting em28xx [ 95.448529][ T6025] em28xx 4-1:53.4: V4L2 device video103 deregistered [ 95.463928][ T6025] em28xx 4-1:53.4: Remote control support is not available for this card. [ 95.473132][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 95.492710][ T9] usb 3-1: config 53 has an invalid interface number: 4 but max is 0 [ 95.512912][ T9] usb 3-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 95.524394][ T5925] em28xx 4-1:53.4: Closing input extension [ 95.543866][ T6088] em28xx 2-1:53.4: Registering V4L2 extension [ 95.552644][ T9] usb 3-1: config 53 has no interface number 0 [ 95.559121][ T6093] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.584971][ T9] usb 3-1: config 53 interface 4 altsetting 1 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 95.603854][ T5925] em28xx 4-1:53.4: Freeing device [ 95.629946][ T9] usb 3-1: config 53 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 67, changing to 10 [ 95.648682][ T50] em28xx 1-1:53.4: New device syz syz @ 480 Mbps (0fd9:0033, interface 4, class 4) [ 95.661975][ T9] usb 3-1: config 53 interface 4 altsetting 1 endpoint 0x82 has invalid maxpacket 16628, setting to 1024 [ 95.679057][ T50] em28xx 1-1:53.4: Video interface 4 found: [ 95.679909][ T9] usb 3-1: config 53 interface 4 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 95.685177][ T6088] em28xx 2-1:53.4: Config register raw data: 0xffffffed [ 95.704358][ T9] usb 3-1: config 53 interface 4 has no altsetting 0 [ 95.719430][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0033, bcdDevice=9c.09 [ 95.727581][ T6088] em28xx 2-1:53.4: AC97 chip type couldn't be determined [ 95.731447][ T6093] usb 5-1: Using ep0 maxpacket: 16 [ 95.742629][ T6088] em28xx 2-1:53.4: No AC97 audio processor [ 95.742857][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.759751][ T9] usb 3-1: Product: syz [ 95.760320][ T6088] usb 2-1: Decoder not found [ 95.764018][ T9] usb 3-1: Manufacturer: syz [ 95.771657][ T50] em28xx 1-1:53.4: unknown em28xx chip ID (0) [ 95.788752][ T6093] usb 5-1: config 53 has an invalid interface number: 4 but max is 0 [ 95.791562][ T6088] em28xx 2-1:53.4: failed to create media graph [ 95.804672][ T6093] usb 5-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 95.816912][ T9] usb 3-1: SerialNumber: syz [ 95.818412][ T6088] em28xx 2-1:53.4: V4L2 device video103 deregistered [ 95.828555][ T6093] usb 5-1: config 53 has no interface number 0 [ 95.835231][ T6093] usb 5-1: config 53 interface 4 altsetting 1 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 95.853770][ T6093] usb 5-1: config 53 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 67, changing to 10 [ 95.860002][ T6088] em28xx 2-1:53.4: Remote control support is not available for this card. [ 95.874666][ T6101] ================================================================== [ 95.874759][ T6093] usb 5-1: config 53 interface 4 altsetting 1 endpoint 0x82 has invalid maxpacket 16628, setting to 1024 [ 95.882752][ T6101] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 95.882802][ T6101] Read of size 8 at addr ffff8880311bc740 by task v4l_id/6101 [ 95.882816][ T6101] [ 95.882834][ T6101] CPU: 1 UID: 0 PID: 6101 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 95.882853][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.882871][ T6101] Call Trace: [ 95.882878][ T6101] [ 95.882886][ T6101] dump_stack_lvl+0x189/0x250 [ 95.882909][ T6101] ? __virt_addr_valid+0x1c8/0x5c0 [ 95.882933][ T6101] ? rcu_is_watching+0x15/0xb0 [ 95.882954][ T6101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.882973][ T6101] ? rcu_is_watching+0x15/0xb0 [ 95.882991][ T6101] ? lock_release+0x4b/0x3b0 [ 95.883008][ T6101] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 95.883038][ T6101] ? __virt_addr_valid+0x1c8/0x5c0 [ 95.883063][ T6101] ? __virt_addr_valid+0x4a5/0x5c0 [ 95.883087][ T6101] print_report+0xca/0x240 [ 95.883104][ T6101] ? v4l2_fh_open+0xac/0x420 [ 95.883128][ T6101] kasan_report+0x118/0x150 [ 95.883151][ T6101] ? v4l2_fh_open+0xac/0x420 [ 95.883179][ T6101] v4l2_fh_open+0xac/0x420 [ 95.883204][ T6101] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 95.883227][ T6101] em28xx_v4l2_open+0x157/0x9a0 [ 95.883257][ T6101] v4l2_open+0x1bf/0x3a0 [ 95.883286][ T6101] chrdev_open+0x4cc/0x5e0 [ 95.883308][ T6101] ? __pfx_chrdev_open+0x10/0x10 [ 95.883328][ T6101] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 95.883358][ T6101] ? __pfx_chrdev_open+0x10/0x10 [ 95.883376][ T6101] do_dentry_open+0x7ce/0x1420 [ 95.883405][ T6101] vfs_open+0x3b/0x340 [ 95.883425][ T6101] ? path_openat+0x33f3/0x3dd0 [ 95.883443][ T6101] path_openat+0x340e/0x3dd0 [ 95.883464][ T6101] ? __pfx_stack_trace_save+0x10/0x10 [ 95.883493][ T6101] ? stack_depot_save_flags+0x40/0x850 [ 95.883525][ T6101] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 95.883552][ T6101] ? getname_flags+0xb8/0x540 [ 95.883573][ T6101] ? __pfx_path_openat+0x10/0x10 [ 95.883590][ T6101] ? __lock_acquire+0x6b6/0x2cf0 [ 95.883614][ T6101] do_filp_open+0x1fa/0x410 [ 95.883631][ T6101] ? __pfx_do_filp_open+0x10/0x10 [ 95.883656][ T6101] ? _raw_spin_unlock+0x28/0x50 [ 95.883682][ T6101] ? alloc_fd+0x64c/0x6c0 [ 95.883707][ T6101] do_sys_openat2+0x121/0x200 [ 95.883732][ T6101] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.883757][ T6101] ? exc_page_fault+0x82/0x100 [ 95.883784][ T6101] __x64_sys_openat+0x138/0x170 [ 95.883810][ T6101] do_syscall_64+0xfa/0xf80 [ 95.883829][ T6101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.883848][ T6101] ? clear_bhb_loop+0x60/0xb0 [ 95.883868][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.883886][ T6101] RIP: 0033:0x7fb5b90a7407 [ 95.883909][ T6101] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 95.883925][ T6101] RSP: 002b:00007fff3a9a7000 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 95.883946][ T6101] RAX: ffffffffffffffda RBX: 00007fb5b9804880 RCX: 00007fb5b90a7407 [ 95.883960][ T6101] RDX: 0000000000000000 RSI: 00007fff3a9a7f1d RDI: ffffffffffffff9c [ 95.883973][ T6101] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 95.883983][ T6101] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 95.883994][ T6101] R13: 00007fff3a9a7250 R14: 00007fb5b996b000 R15: 000055df041844d8 [ 95.884015][ T6101] [ 95.884021][ T6101] [ 95.899069][ T6093] usb 5-1: config 53 interface 4 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 95.901546][ T6101] Allocated by task 6088: [ 95.909344][ T6093] usb 5-1: config 53 interface 4 has no altsetting 0 [ 95.911405][ T6101] kasan_save_track+0x3e/0x80 [ 95.911429][ T6101] __kasan_kmalloc+0x93/0xb0 [ 95.923127][ T6093] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0033, bcdDevice=9c.09 [ 95.930483][ T6101] __kmalloc_cache_noprof+0x3e2/0x700 [ 95.930506][ T6101] em28xx_v4l2_init+0x10b/0x2e70 [ 95.930526][ T6101] em28xx_init_extension+0x120/0x1c0 [ 95.930542][ T6101] process_scheduled_works+0xad1/0x1770 [ 95.930558][ T6101] worker_thread+0x8a0/0xda0 [ 95.930573][ T6101] kthread+0x711/0x8a0 [ 95.930593][ T6101] ret_from_fork+0x599/0xb30 [ 95.930607][ T6101] ret_from_fork_asm+0x1a/0x30 [ 95.930629][ T6101] [ 95.930634][ T6101] Freed by task 6088: [ 95.930644][ T6101] kasan_save_track+0x3e/0x80 [ 95.930660][ T6101] kasan_save_free_info+0x46/0x50 [ 95.930684][ T6101] __kasan_slab_free+0x5c/0x80 [ 95.930702][ T6101] kfree+0x1c0/0x660 [ 95.930724][ T6101] em28xx_v4l2_init+0x1683/0x2e70 [ 95.930745][ T6101] em28xx_init_extension+0x120/0x1c0 [ 95.930769][ T6101] process_scheduled_works+0xad1/0x1770 [ 95.930785][ T6101] worker_thread+0x8a0/0xda0 [ 95.930803][ T6101] kthread+0x711/0x8a0 [ 95.930823][ T6101] ret_from_fork+0x599/0xb30 [ 95.930838][ T6101] ret_from_fork_asm+0x1a/0x30 [ 95.930862][ T6101] [ 95.930867][ T6101] The buggy address belongs to the object at ffff8880311bc000 [ 95.930867][ T6101] which belongs to the cache kmalloc-8k of size 8192 [ 95.930884][ T6101] The buggy address is located 1856 bytes inside of [ 95.930884][ T6101] freed 8192-byte region [ffff8880311bc000, ffff8880311be000) [ 95.930904][ T6101] [ 95.930911][ T6101] The buggy address belongs to the physical page: [ 95.930931][ T6101] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x311b8 [ 95.930948][ T6101] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 95.930963][ T6101] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 95.930989][ T6101] page_type: f5(slab) [ 96.429157][ T6101] raw: 00fff00000000040 ffff88813ffa7280 ffffea0000c0a200 dead000000000004 [ 96.437752][ T6101] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 96.446429][ T6101] head: 00fff00000000040 ffff88813ffa7280 ffffea0000c0a200 dead000000000004 [ 96.455098][ T6101] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 96.463759][ T6101] head: 00fff00000000003 ffffea0000c46e01 00000000ffffffff 00000000ffffffff [ 96.472420][ T6101] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 96.481074][ T6101] page dumped because: kasan: bad access detected [ 96.487489][ T6101] page_owner tracks the page as allocated [ 96.493194][ T6101] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5491, tgid 5491 (rcS), ts 48095884756, free_ts 48062241845 [ 96.512996][ T6101] post_alloc_hook+0x234/0x290 [ 96.517776][ T6101] get_page_from_freelist+0x2365/0x2440 [ 96.523324][ T6101] __alloc_frozen_pages_noprof+0x181/0x370 [ 96.529118][ T6101] alloc_pages_mpol+0x232/0x4a0 [ 96.533965][ T6101] allocate_slab+0x86/0x3b0 [ 96.538458][ T6101] ___slab_alloc+0xf2b/0x1960 [ 96.543143][ T6101] __slab_alloc+0x65/0x100 [ 96.547578][ T6101] __kmalloc_cache_noprof+0x41e/0x700 [ 96.552941][ T6101] tomoyo_init_log+0x111f/0x1f70 [ 96.557881][ T6101] tomoyo_supervisor+0x340/0x1480 [ 96.562901][ T6101] tomoyo_env_perm+0x149/0x1e0 [ 96.567660][ T6101] tomoyo_find_next_domain+0x15ce/0x1aa0 [ 96.573372][ T6101] tomoyo_bprm_check_security+0x11c/0x180 [ 96.579108][ T6101] security_bprm_check+0x89/0x270 [ 96.584143][ T6101] bprm_execve+0x887/0x1400 [ 96.588642][ T6101] do_execveat_common+0x510/0x6a0 [ 96.593740][ T6101] page last free pid 5490 tgid 5490 stack trace: [ 96.600063][ T6101] __free_frozen_pages+0xbc8/0xd30 [ 96.605180][ T6101] __slab_free+0x21b/0x2a0 [ 96.609606][ T6101] qlist_free_all+0x97/0x100 [ 96.614190][ T6101] kasan_quarantine_reduce+0x148/0x160 [ 96.619905][ T6101] __kasan_slab_alloc+0x22/0x80 [ 96.624771][ T6101] __kmalloc_noprof+0x3cf/0x800 [ 96.629638][ T6101] tomoyo_supervisor+0xbd5/0x1480 [ 96.634665][ T6101] tomoyo_path_permission+0x25a/0x380 [ 96.640028][ T6101] tomoyo_check_open_permission+0x24d/0x3b0 [ 96.645994][ T6101] security_file_open+0xb1/0x270 [ 96.650937][ T6101] do_dentry_open+0x34e/0x1420 [ 96.655721][ T6101] vfs_open+0x3b/0x340 [ 96.659788][ T6101] path_openat+0x340e/0x3dd0 [ 96.664375][ T6101] do_filp_open+0x1fa/0x410 [ 96.668876][ T6101] do_sys_openat2+0x121/0x200 [ 96.673555][ T6101] __x64_sys_openat+0x138/0x170 [ 96.678412][ T6101] [ 96.680730][ T6101] Memory state around the buggy address: [ 96.686349][ T6101] ffff8880311bc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.694417][ T6101] ffff8880311bc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.702500][ T6101] >ffff8880311bc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.710559][ T6101] ^ [ 96.716844][ T6101] ffff8880311bc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.724917][ T6101] ffff8880311bc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.733069][ T6101] ================================================================== [ 96.747516][ T50] em28xx 1-1:53.4: reading from i2c device at 0xa0 failed (error=-5) [ 96.751886][ T9] em28xx 3-1:53.4: New device syz syz @ 480 Mbps (0fd9:0033, interface 4, class 4) [ 96.755689][ T50] em28xx 1-1:53.4: board has no eeprom [ 96.773333][ T5944] em28xx 2-1:53.4: Closing input extension [ 96.783580][ T6093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.791887][ T6093] usb 5-1: Product: syz [ 96.796078][ T6093] usb 5-1: Manufacturer: syz [ 96.800790][ T6093] usb 5-1: SerialNumber: syz [ 96.818269][ T9] em28xx 3-1:53.4: Video interface 4 found: [ 96.885725][ T6101] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.892973][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 96.901924][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.911997][ T6101] Call Trace: [ 96.915297][ T6101] [ 96.918326][ T6101] dump_stack_lvl+0x99/0x250 [ 96.923028][ T6101] ? __asan_memcpy+0x40/0x70 [ 96.927636][ T6101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.932852][ T6101] ? __pfx__printk+0x10/0x10 [ 96.937444][ T6101] vpanic+0x237/0x6d0 [ 96.941437][ T6101] ? __pfx_vpanic+0x10/0x10 [ 96.945934][ T6101] ? preempt_schedule+0xae/0xc0 [ 96.950785][ T6101] ? __pfx_preempt_schedule+0x10/0x10 [ 96.956185][ T6101] panic+0xb9/0xc0 [ 96.959908][ T6101] ? __pfx_panic+0x10/0x10 [ 96.964321][ T6101] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 96.970215][ T6101] ? is_module_address+0x17/0xf0 [ 96.975146][ T6101] ? v4l2_fh_open+0xac/0x420 [ 96.979731][ T6101] check_panic_on_warn+0x89/0xb0 [ 96.984664][ T6101] ? v4l2_fh_open+0xac/0x420 [ 96.989251][ T6101] end_report+0x6f/0x140 [ 96.993489][ T6101] kasan_report+0x129/0x150 [ 96.997982][ T6101] ? v4l2_fh_open+0xac/0x420 [ 97.002570][ T6101] v4l2_fh_open+0xac/0x420 [ 97.006988][ T6101] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.012965][ T6101] em28xx_v4l2_open+0x157/0x9a0 [ 97.017920][ T6101] v4l2_open+0x1bf/0x3a0 [ 97.022184][ T6101] chrdev_open+0x4cc/0x5e0 [ 97.026599][ T6101] ? __pfx_chrdev_open+0x10/0x10 [ 97.031534][ T6101] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 97.037874][ T6101] ? __pfx_chrdev_open+0x10/0x10 [ 97.042830][ T6101] do_dentry_open+0x7ce/0x1420 [ 97.047629][ T6101] vfs_open+0x3b/0x340 [ 97.051732][ T6101] ? path_openat+0x33f3/0x3dd0 [ 97.056518][ T6101] path_openat+0x340e/0x3dd0 [ 97.061139][ T6101] ? __pfx_stack_trace_save+0x10/0x10 [ 97.066545][ T6101] ? stack_depot_save_flags+0x40/0x850 [ 97.072047][ T6101] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 97.077709][ T6101] ? getname_flags+0xb8/0x540 [ 97.082419][ T6101] ? __pfx_path_openat+0x10/0x10 [ 97.087422][ T6101] ? __lock_acquire+0x6b6/0x2cf0 [ 97.092390][ T6101] do_filp_open+0x1fa/0x410 [ 97.096914][ T6101] ? __pfx_do_filp_open+0x10/0x10 [ 97.101943][ T6101] ? _raw_spin_unlock+0x28/0x50 [ 97.106827][ T6101] ? alloc_fd+0x64c/0x6c0 [ 97.111155][ T6101] do_sys_openat2+0x121/0x200 [ 97.115864][ T6101] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.121061][ T6101] ? exc_page_fault+0x82/0x100 [ 97.125826][ T6101] __x64_sys_openat+0x138/0x170 [ 97.130777][ T6101] do_syscall_64+0xfa/0xf80 [ 97.135371][ T6101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.141606][ T6101] ? clear_bhb_loop+0x60/0xb0 [ 97.146366][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.152427][ T6101] RIP: 0033:0x7fb5b90a7407 [ 97.156833][ T6101] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 97.176608][ T6101] RSP: 002b:00007fff3a9a7000 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 97.185024][ T6101] RAX: ffffffffffffffda RBX: 00007fb5b9804880 RCX: 00007fb5b90a7407 [ 97.192991][ T6101] RDX: 0000000000000000 RSI: 00007fff3a9a7f1d RDI: ffffffffffffff9c [ 97.200969][ T6101] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 97.208951][ T6101] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 97.216931][ T6101] R13: 00007fff3a9a7250 R14: 00007fb5b996b000 R15: 000055df041844d8 [ 97.224999][ T6101] [ 97.228641][ T6101] Kernel Offset: disabled [ 97.232965][ T6101] Rebooting in 86400 seconds..