Warning: Permanently added '10.128.10.18' (ED25519) to the list of known hosts. 1970/01/01 00:01:25 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:25 parsed 1 programs [ 88.655685][ T6985] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 91.395713][ T703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.395777][ T703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.636147][ T761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.636207][ T761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.917361][ T6094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.920932][ T6094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.928011][ T6094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.941393][ T6094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.945385][ T6094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.433019][ T7196] chnl_net:caif_netlink_parms(): no params data found [ 92.857919][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.857992][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.858153][ T7196] bridge_slave_0: entered allmulticast mode [ 92.859093][ T7196] bridge_slave_0: entered promiscuous mode [ 92.906415][ T7196] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.909028][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.911490][ T7196] bridge_slave_1: entered allmulticast mode [ 92.919709][ T7196] bridge_slave_1: entered promiscuous mode [ 93.014098][ T7196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.018582][ T7196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.037251][ T7196] team0: Port device team_slave_0 added [ 93.040221][ T7196] team0: Port device team_slave_1 added [ 93.053950][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.054006][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.054039][ T7196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.055056][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.055087][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.055116][ T7196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.084305][ T7196] hsr_slave_0: entered promiscuous mode [ 93.084856][ T7196] hsr_slave_1: entered promiscuous mode [ 93.276190][ T7196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.280938][ T7196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.284688][ T7196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.289651][ T7196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.320759][ T7196] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.320832][ T7196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.320941][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.320996][ T7196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.343257][ T7196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.356935][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.361555][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.441326][ T7196] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.523254][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.523330][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.529193][ T703] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.529271][ T703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.645048][ T7196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.671355][ T7196] veth0_vlan: entered promiscuous mode [ 93.674334][ T7196] veth1_vlan: entered promiscuous mode [ 93.692371][ T7196] veth0_macvtap: entered promiscuous mode [ 93.694134][ T7196] veth1_macvtap: entered promiscuous mode [ 93.701053][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.702808][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.704250][ T7196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.704288][ T7196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.704317][ T7196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.704345][ T7196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:33 executed programs: 0 [ 93.918926][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.935898][ T7314] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.945894][ T7318] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.952011][ T7315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.952616][ T7315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.953400][ T7315] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.953705][ T7315] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.953905][ T7315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.954360][ T7318] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.954762][ T7318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.955964][ T7315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.956644][ T7318] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.956729][ T7318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.964739][ T7318] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.965307][ T7315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.965470][ T7315] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.965660][ T7315] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.965803][ T7315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.968612][ T7315] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.968827][ T7318] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.971519][ T7315] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.971758][ T7318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.971898][ T7318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.980322][ T7318] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.003874][ T7320] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.570610][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 94.613565][ T761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.749563][ T761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.769423][ T7306] chnl_net:caif_netlink_parms(): no params data found [ 94.784366][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.786468][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.786652][ T7301] bridge_slave_0: entered allmulticast mode [ 94.787505][ T7301] bridge_slave_0: entered promiscuous mode [ 94.790292][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.790344][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.790462][ T7301] bridge_slave_1: entered allmulticast mode [ 94.791617][ T7301] bridge_slave_1: entered promiscuous mode [ 94.866226][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.892159][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.951951][ T7301] team0: Port device team_slave_0 added [ 94.952767][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.952841][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.952949][ T7306] bridge_slave_0: entered allmulticast mode [ 94.953918][ T7306] bridge_slave_0: entered promiscuous mode [ 94.955337][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.955383][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.955488][ T7306] bridge_slave_1: entered allmulticast mode [ 94.956403][ T7306] bridge_slave_1: entered promiscuous mode [ 94.972885][ T7303] chnl_net:caif_netlink_parms(): no params data found [ 94.975218][ T7304] chnl_net:caif_netlink_parms(): no params data found [ 94.984866][ T7301] team0: Port device team_slave_1 added [ 95.006991][ T7316] chnl_net:caif_netlink_parms(): no params data found [ 95.043859][ T7306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.069329][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.069379][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.069420][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.070569][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.070595][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.070626][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.098335][ T7306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.136508][ T7301] hsr_slave_0: entered promiscuous mode [ 95.137006][ T7301] hsr_slave_1: entered promiscuous mode [ 95.137348][ T7301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.137378][ T7301] Cannot create hsr debugfs directory [ 95.154424][ T7306] team0: Port device team_slave_0 added [ 95.176497][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.176612][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.176747][ T7304] bridge_slave_0: entered allmulticast mode [ 95.178683][ T7304] bridge_slave_0: entered promiscuous mode [ 95.189235][ T7306] team0: Port device team_slave_1 added [ 95.216474][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.216555][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.217086][ T7304] bridge_slave_1: entered allmulticast mode [ 95.218171][ T7304] bridge_slave_1: entered promiscuous mode [ 95.249599][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.249685][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.249825][ T7316] bridge_slave_0: entered allmulticast mode [ 95.250652][ T7316] bridge_slave_0: entered promiscuous mode [ 95.273783][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.275807][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.277720][ T7306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.287452][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.288129][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.288265][ T7316] bridge_slave_1: entered allmulticast mode [ 95.289139][ T7316] bridge_slave_1: entered promiscuous mode [ 95.296050][ T7304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.299326][ T7304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.303037][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.303361][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.303404][ T7306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.352185][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.352288][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.352390][ T7303] bridge_slave_0: entered allmulticast mode [ 95.353277][ T7303] bridge_slave_0: entered promiscuous mode [ 95.355109][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.355155][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.355274][ T7303] bridge_slave_1: entered allmulticast mode [ 95.356178][ T7303] bridge_slave_1: entered promiscuous mode [ 95.361053][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.373711][ T7304] team0: Port device team_slave_0 added [ 95.392929][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.401180][ T7304] team0: Port device team_slave_1 added [ 95.410369][ T7306] hsr_slave_0: entered promiscuous mode [ 95.410992][ T7306] hsr_slave_1: entered promiscuous mode [ 95.411620][ T7306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.411650][ T7306] Cannot create hsr debugfs directory [ 95.432228][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.459969][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.468192][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.468246][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.468297][ T7304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.469833][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.469859][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.469895][ T7304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.478545][ T7316] team0: Port device team_slave_0 added [ 95.511489][ T7316] team0: Port device team_slave_1 added [ 95.521761][ T7303] team0: Port device team_slave_0 added [ 95.559336][ T761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.671266][ T7303] team0: Port device team_slave_1 added [ 95.695857][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.695914][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.695965][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.697186][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.697211][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.697249][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.793599][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.793662][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.794037][ T7303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.797193][ T7304] hsr_slave_0: entered promiscuous mode [ 95.799218][ T7304] hsr_slave_1: entered promiscuous mode [ 95.799607][ T7304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.799637][ T7304] Cannot create hsr debugfs directory [ 95.919322][ T7316] hsr_slave_0: entered promiscuous mode [ 95.919866][ T7316] hsr_slave_1: entered promiscuous mode [ 95.920206][ T7316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.920235][ T7316] Cannot create hsr debugfs directory [ 95.941224][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.943303][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.948118][ T7303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.008027][ T7320] Bluetooth: hci1: command tx timeout [ 96.078001][ T7320] Bluetooth: hci4: command tx timeout [ 96.078223][ T7314] Bluetooth: hci2: command tx timeout [ 96.078429][ T7319] Bluetooth: hci5: command tx timeout [ 96.078501][ T7314] Bluetooth: hci3: command tx timeout [ 96.215779][ T7303] hsr_slave_0: entered promiscuous mode [ 96.216375][ T7303] hsr_slave_1: entered promiscuous mode [ 96.216789][ T7303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.216820][ T7303] Cannot create hsr debugfs directory [ 96.410820][ T761] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.570273][ T7301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.580768][ T7301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.700226][ T7301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.703927][ T7301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.883804][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.893425][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.901868][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.901943][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.912566][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.912642][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.311300][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.313905][ T761] bridge_slave_1: left allmulticast mode [ 97.313977][ T761] bridge_slave_1: left promiscuous mode [ 97.314139][ T761] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.322070][ T761] bridge_slave_0: left allmulticast mode [ 97.322129][ T761] bridge_slave_0: left promiscuous mode [ 97.322260][ T761] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.088259][ T7320] Bluetooth: hci1: command tx timeout [ 98.157818][ T7320] Bluetooth: hci4: command tx timeout [ 98.157861][ T7314] Bluetooth: hci5: command tx timeout [ 98.168005][ T7314] Bluetooth: hci3: command tx timeout [ 98.168085][ T7314] Bluetooth: hci2: command tx timeout [ 98.940144][ T761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.980164][ T761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.019495][ T761] bond0 (unregistering): Released all slaves [ 99.071100][ T7301] veth0_vlan: entered promiscuous mode [ 99.089939][ T7301] veth1_vlan: entered promiscuous mode [ 99.111599][ T7301] veth0_macvtap: entered promiscuous mode [ 99.115280][ T7301] veth1_macvtap: entered promiscuous mode [ 99.125736][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.134091][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.141050][ T7301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.144852][ T7301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.144916][ T7301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.144953][ T7301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.247300][ T761] hsr_slave_0: left promiscuous mode [ 99.250654][ T761] hsr_slave_1: left promiscuous mode [ 99.251056][ T761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.251107][ T761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.252790][ T761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.252831][ T761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.265088][ T761] veth1_macvtap: left promiscuous mode [ 99.266227][ T761] veth0_macvtap: left promiscuous mode [ 99.266330][ T761] veth1_vlan: left promiscuous mode [ 99.266401][ T761] veth0_vlan: left promiscuous mode [ 100.157785][ T7320] Bluetooth: hci1: command tx timeout [ 100.237759][ T7320] Bluetooth: hci4: command tx timeout [ 100.237836][ T7320] Bluetooth: hci2: command tx timeout [ 100.237865][ T7314] Bluetooth: hci3: command tx timeout [ 100.237924][ T7314] Bluetooth: hci5: command tx timeout [ 101.079859][ T761] team0 (unregistering): Port device team_slave_1 removed [ 101.249196][ T761] team0 (unregistering): Port device team_slave_0 removed [ 102.237931][ T7320] Bluetooth: hci1: command tx timeout [ 102.318124][ T7320] Bluetooth: hci5: command tx timeout [ 102.328226][ T7314] Bluetooth: hci3: command tx timeout [ 102.328295][ T7314] Bluetooth: hci4: command tx timeout [ 102.328358][ T7320] Bluetooth: hci2: command tx timeout [ 103.552446][ T627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.552502][ T627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.627124][ T7306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.645925][ T703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.645992][ T703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.653514][ T7306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.682250][ T7316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.684361][ T7306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.700295][ T7316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.705493][ T7316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.709050][ T7306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.712719][ T7316] netdevsim netdevsim4 netdevsim3: renamed from eth3 1970/01/01 00:01:43 executed programs: 10 [ 103.998063][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.112031][ T7306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.144823][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.151627][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 104.160386][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.160476][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.160503][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 104.160539][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 104.160566][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.160603][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.160638][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.167161][ T7316] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.203520][ T7306] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.248669][ T7316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.251957][ T7316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.299698][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.299785][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.300784][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.300830][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.306757][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.306804][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.315108][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.315192][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.370611][ T7306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.392720][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 104.392827][ T24] usbtmc 1-1:16.0: can't read capabilities [ 104.425296][ T7303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.433335][ T7303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.440685][ T7303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.444514][ T7303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.516286][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.565862][ T7304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.582232][ T7304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.588959][ T7304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.601923][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 104.608077][ T6552] usb 1-1: USB disconnect, device number 2 [ 104.621917][ T7303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.638230][ T7304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.663092][ T7306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.700740][ T7303] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.746429][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.746547][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.747382][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.747428][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.766453][ T7306] veth0_vlan: entered promiscuous mode [ 104.833034][ T7306] veth1_vlan: entered promiscuous mode [ 104.888296][ T7306] veth0_macvtap: entered promiscuous mode [ 104.892034][ T7306] veth1_macvtap: entered promiscuous mode [ 104.912167][ T7316] veth0_vlan: entered promiscuous mode [ 104.917444][ T7316] veth1_vlan: entered promiscuous mode [ 104.944876][ T7304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.953471][ T7304] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.958580][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.958663][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.966339][ T761] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.966418][ T761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.973742][ T7306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.983084][ T7306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.000402][ T7304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.003461][ T7304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.015751][ T7316] veth0_macvtap: entered promiscuous mode [ 105.025898][ T7306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.034649][ T7306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.037355][ T7306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.045452][ T7306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.056239][ T7316] veth1_macvtap: entered promiscuous mode [ 105.095955][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.121115][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.176588][ T7303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.191578][ T7316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.191662][ T7316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.191692][ T7316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.191721][ T7316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.217225][ T761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.217282][ T761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.327414][ T338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.327483][ T338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.354883][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.373059][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.373120][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.395722][ T7303] veth0_vlan: entered promiscuous mode [ 105.410306][ T4568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.410370][ T4568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.423060][ T7303] veth1_vlan: entered promiscuous mode [ 105.450190][ T6552] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.486661][ T7304] veth0_vlan: entered promiscuous mode [ 105.508052][ T7303] veth0_macvtap: entered promiscuous mode [ 105.511007][ T7304] veth1_vlan: entered promiscuous mode [ 105.515446][ T7303] veth1_macvtap: entered promiscuous mode [ 105.524293][ T7304] veth0_macvtap: entered promiscuous mode [ 105.526121][ T7304] veth1_macvtap: entered promiscuous mode [ 105.545375][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.545793][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.554918][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.556815][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.561803][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.562078][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.574134][ T7303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.574202][ T7303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.575842][ T7303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.575874][ T7303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.602932][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.607802][ T6552] usb 1-1: Using ep0 maxpacket: 8 [ 105.611591][ T6552] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.611652][ T6552] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.611685][ T6552] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 105.611712][ T6552] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 105.611737][ T6552] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.611772][ T6552] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.611796][ T6552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.662666][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.674880][ T7304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.677440][ T7304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.680056][ T7304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.680089][ T7304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.701613][ T761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.701674][ T761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.733778][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.733861][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.784698][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.784767][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.816949][ T6552] usb 1-1: GET_CAPABILITIES returned 0 [ 105.817017][ T6552] usbtmc 1-1:16.0: can't read capabilities [ 105.829655][ T703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.829710][ T703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.832208][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.832471][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.841097][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 105.911219][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.911509][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.913622][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 106.018887][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 106.022562][ T6566] usb 1-1: USB disconnect, device number 3 [ 106.100215][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.100549][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.122544][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.122872][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.367270][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.367577][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.443209][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.443548][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.641595][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.643352][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.673586][ T7711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.673917][ T7711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.808121][ T6552] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.902218][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.902545][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.958032][ T6552] usb 1-1: Using ep0 maxpacket: 8 [ 106.959162][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.959461][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.961690][ T6552] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.961726][ T6552] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.961752][ T6552] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 106.961779][ T6552] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 106.961804][ T6552] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.961838][ T6552] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.961863][ T6552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.169120][ T6552] usb 1-1: GET_CAPABILITIES returned 0 [ 107.169196][ T6552] usbtmc 1-1:16.0: can't read capabilities [ 107.184101][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.184397][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.213499][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.214049][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.222310][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 107.371959][ C1] ================================================================== [ 107.371995][ C1] BUG: KASAN: slab-use-after-free in usb_anchor_suspend_wakeups+0x2c/0x74 [ 107.372023][ C1] Write of size 4 at addr ffff0000c6ad2910 by task sed/7763 [ 107.372039][ C1] [ 107.372049][ C1] CPU: 1 UID: 0 PID: 7763 Comm: sed Not tainted 6.16.0-rc6-syzkaller-gaaef6f251176 #0 PREEMPT [ 107.372063][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.372070][ C1] Call trace: [ 107.372074][ C1] show_stack+0x2c/0x3c (C) [ 107.372088][ C1] __dump_stack+0x30/0x40 [ 107.372103][ C1] dump_stack_lvl+0xd8/0x12c [ 107.372118][ C1] print_address_description+0xa8/0x220 [ 107.372133][ C1] print_report+0x68/0x84 [ 107.372146][ C1] kasan_report+0xb0/0x110 [ 107.372157][ C1] kasan_check_range+0x264/0x2a4 [ 107.372169][ C1] __kasan_check_write+0x20/0x30 [ 107.372181][ C1] usb_anchor_suspend_wakeups+0x2c/0x74 [ 107.372194][ C1] __usb_hcd_giveback_urb+0x1f4/0x570 [ 107.372207][ C1] usb_hcd_giveback_urb+0x100/0x364 [ 107.372220][ C1] dummy_timer+0x648/0x33c8 [ 107.372232][ C1] __hrtimer_run_queues+0x41c/0xb78 [ 107.372246][ C1] hrtimer_run_softirq+0x160/0x400 [ 107.372260][ C1] handle_softirqs+0x328/0xc88 [ 107.372274][ C1] __do_softirq+0x14/0x20 [ 107.372286][ C1] ____do_softirq+0x14/0x20 [ 107.372297][ C1] call_on_irq_stack+0x24/0x30 [ 107.372308][ C1] do_softirq_own_stack+0x20/0x2c [ 107.372320][ C1] __irq_exit_rcu+0x1b0/0x478 [ 107.372334][ C1] irq_exit_rcu+0x14/0x84 [ 107.372347][ C1] el1_interrupt+0x38/0x54 [ 107.372359][ C1] el1h_64_irq_handler+0x18/0x24 [ 107.372370][ C1] el1h_64_irq+0x6c/0x70 [ 107.372380][ C1] finish_lock_switch+0xb4/0x1c0 (P) [ 107.372396][ C1] finish_task_switch+0x120/0x5a4 [ 107.372408][ C1] __schedule+0x1418/0x2a28 [ 107.372422][ C1] preempt_schedule_irq+0x80/0x188 [ 107.372436][ C1] arm64_preempt_schedule_irq+0x44/0x58 [ 107.372450][ C1] el1_interrupt+0x3c/0x54 [ 107.372461][ C1] el1h_64_irq_handler+0x18/0x24 [ 107.372480][ C1] el1h_64_irq+0x6c/0x70 [ 107.372491][ C1] kasan_check_range+0x1dc/0x2a4 (P) [ 107.372503][ C1] __kasan_check_write+0x20/0x30 [ 107.372515][ C1] mt_validate+0x3b40/0x3ff4 [ 107.372530][ C1] validate_mm+0xb8/0x41c [ 107.372553][ C1] __split_vma+0x7e4/0x924 [ 107.372567][ C1] vms_gather_munmap_vmas+0x2a0/0xf54 [ 107.372582][ C1] mmap_region+0x54c/0x1c0c [ 107.372596][ C1] do_mmap+0x968/0xfac [ 107.372607][ T6566] usb 1-1: USB disconnect, device number 4 [ 107.372609][ C1] vm_mmap_pgoff+0x2b8/0x43c [ 107.372623][ C1] ksys_mmap_pgoff+0x394/0x5b8 [ 107.372636][ C1] __arm64_sys_mmap+0xf8/0x110 [ 107.372647][ C1] invoke_syscall+0x98/0x2b8 [ 107.372657][ C1] el0_svc_common+0x130/0x23c [ 107.372668][ C1] do_el0_svc+0x48/0x58 [ 107.372678][ C1] el0_svc+0x58/0x180 [ 107.372688][ C1] el0t_64_sync_handler+0x84/0x12c [ 107.372700][ C1] el0t_64_sync+0x198/0x19c [ 107.372711][ C1] [ 107.372715][ C1] Allocated by task 7701: [ 107.372721][ C1] kasan_save_track+0x40/0x78 [ 107.372736][ C1] kasan_save_alloc_info+0x44/0x54 [ 107.372906][ C1] __kasan_kmalloc+0x9c/0xb4 [ 107.372920][ C1] __kmalloc_cache_noprof+0x2a4/0x3fc [ 107.372935][ C1] usbtmc_open+0xa8/0x78c [ 107.372952][ C1] usb_open+0x138/0x1c8 [ 107.372966][ C1] chrdev_open+0x1b0/0x4b0 [ 107.372982][ C1] do_dentry_open+0xb7c/0x1544 [ 107.372999][ C1] vfs_open+0x44/0x2d4 [ 107.373015][ C1] path_openat+0x2424/0x2c40 [ 107.373030][ C1] do_filp_open+0x18c/0x36c [ 107.373044][ C1] do_sys_openat2+0x11c/0x1b4 [ 107.373063][ C1] __arm64_sys_openat+0x120/0x158 [ 107.373080][ C1] invoke_syscall+0x98/0x2b8 [ 107.373094][ C1] el0_svc_common+0x130/0x23c [ 107.373108][ C1] do_el0_svc+0x48/0x58 [ 107.373121][ C1] el0_svc+0x58/0x180 [ 107.373135][ C1] el0t_64_sync_handler+0x84/0x12c [ 107.373150][ C1] el0t_64_sync+0x198/0x19c [ 107.373164][ C1] [ 107.373172][ C1] Freed by task 7701: [ 107.373183][ C1] kasan_save_track+0x40/0x78 [ 107.373201][ C1] kasan_save_free_info+0x58/0x70 [ 107.373216][ C1] __kasan_slab_free+0x68/0x88 [ 107.373230][ C1] kfree+0x17c/0x474 [ 107.373243][ C1] usbtmc_release+0x238/0x298 [ 107.373260][ C1] __fput+0x340/0x75c [ 107.373273][ C1] ____fput+0x20/0x58 [ 107.373287][ C1] task_work_run+0x1dc/0x260 [ 107.373302][ C1] do_notify_resume+0x174/0x1f4 [ 107.373319][ C1] el0_svc+0xb8/0x180 [ 107.373333][ C1] el0t_64_sync_handler+0x84/0x12c [ 107.373348][ C1] el0t_64_sync+0x198/0x19c [ 107.373362][ C1] [ 107.373370][ C1] The buggy address belongs to the object at ffff0000c6ad2800 [ 107.373370][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 107.373385][ C1] The buggy address is located 272 bytes inside of [ 107.373385][ C1] freed 1024-byte region [ffff0000c6ad2800, ffff0000c6ad2c00) [ 107.373403][ C1] [ 107.373412][ C1] The buggy address belongs to the physical page: [ 107.373423][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106ad0 [ 107.373440][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 107.373455][ C1] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 107.373476][ C1] page_type: f5(slab) [ 107.373493][ C1] raw: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 107.373508][ C1] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 107.373524][ C1] head: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 107.373545][ C1] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 107.373561][ C1] head: 05ffc00000000003 fffffdffc31ab401 00000000ffffffff 00000000ffffffff [ 107.373577][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 107.373588][ C1] page dumped because: kasan: bad access detected [ 107.373599][ C1] [ 107.373607][ C1] Memory state around the buggy address: [ 107.373618][ C1] ffff0000c6ad2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.373631][ C1] ffff0000c6ad2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.373645][ C1] >ffff0000c6ad2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.373656][ C1] ^ [ 107.373667][ C1] ffff0000c6ad2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.373680][ C1] ffff0000c6ad2a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.373691][ C1] ================================================================== [ 107.373702][ C1] Disabling lock debugging due to kernel taint [ 107.373722][ C1] Unable to handle kernel paging request at virtual address dfff800000000000 [ 107.373735][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 107.373747][ C1] Mem abort info: [ 107.373756][ C1] ESR = 0x0000000096000005 [ 107.373766][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 107.373779][ C1] SET = 0, FnV = 0 [ 107.373789][ C1] EA = 0, S1PTW = 0 [ 107.373799][ C1] FSC = 0x05: level 1 translation fault [ 107.373810][ C1] Data abort info: [ 107.373819][ C1] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 107.373831][ C1] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 107.373843][ C1] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 107.373856][ C1] [dfff800000000000] address between user and kernel address ranges [ 107.373869][ C1] Internal error: Oops: 0000000096000005 [#1] SMP [ 107.572266][ C1] Modules linked in: [ 107.573311][ C1] CPU: 1 UID: 0 PID: 7763 Comm: sed Tainted: G B 6.16.0-rc6-syzkaller-gaaef6f251176 #0 PREEMPT [ 107.576565][ C1] Tainted: [B]=BAD_PAGE [ 107.577698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.580562][ C1] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 107.582725][ C1] pc : dev_vprintk_emit+0x108/0x390 [ 107.584152][ C1] lr : dev_vprintk_emit+0xdc/0x390 [ 107.585668][ C1] sp : ffff800080017500 [ 107.586803][ C1] x29: ffff800080017600 x28: dfff800000000000 x27: ffff800080017520 [ 107.589021][ C1] x26: ffff700010002ea4 x25: 0000000000000033 x24: 0000000000000002 [ 107.591249][ C1] x23: ffff80008ff59bf8 x22: ffff800080017540 x21: ffff8000800176a0 [ 107.593559][ C1] x20: 0000000000000003 x19: ffff80008c482ac0 x18: 1fffe000337d6476 [ 107.595797][ C1] x17: 0000000000000000 x16: ffff80008ae67e88 x15: 0000000000000008 [ 107.598179][ C1] x14: 1ffff00010002ea8 x13: 0000000000000000 x12: 0000000000000000 [ 107.600354][ C1] x11: ffff700010002eb0 x10: 0000000000ff0100 x9 : 0000000000000000 [ 107.602595][ C1] x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff800080017790 [ 107.604800][ C1] x5 : ffff8000800176c0 x4 : 0000000000000000 x3 : ffff8000801590d8 [ 107.607001][ C1] x2 : ffffffffffffffc0 x1 : 0000000000000000 x0 : ffff800080017540 [ 107.609370][ C1] Call trace: [ 107.610288][ C1] dev_vprintk_emit+0x108/0x390 (P) [ 107.611782][ C1] dev_printk_emit+0xd4/0x11c [ 107.613074][ C1] __dev_printk+0x16c/0x1a0 [ 107.614324][ C1] _dev_err+0xec/0x138 [ 107.615477][ C1] usbtmc_read_bulk_cb+0x214/0x394 [ 107.616916][ C1] __usb_hcd_giveback_urb+0x308/0x570 [ 107.618565][ C1] usb_hcd_giveback_urb+0x100/0x364 [ 107.620031][ C1] dummy_timer+0x648/0x33c8 [ 107.621344][ C1] __hrtimer_run_queues+0x41c/0xb78 [ 107.622815][ C1] hrtimer_run_softirq+0x160/0x400 [ 107.624286][ C1] handle_softirqs+0x328/0xc88 [ 107.625624][ C1] __do_softirq+0x14/0x20 [ 107.626861][ C1] ____do_softirq+0x14/0x20 [ 107.628169][ C1] call_on_irq_stack+0x24/0x30 [ 107.629487][ C1] do_softirq_own_stack+0x20/0x2c [ 107.630917][ C1] __irq_exit_rcu+0x1b0/0x478 [ 107.632227][ C1] irq_exit_rcu+0x14/0x84 [ 107.633499][ C1] el1_interrupt+0x38/0x54 [ 107.634733][ C1] el1h_64_irq_handler+0x18/0x24 [ 107.636195][ C1] el1h_64_irq+0x6c/0x70 [ 107.637335][ C1] finish_lock_switch+0xb4/0x1c0 (P) [ 107.638877][ C1] finish_task_switch+0x120/0x5a4 [ 107.640275][ C1] __schedule+0x1418/0x2a28 [ 107.641564][ C1] preempt_schedule_irq+0x80/0x188 [ 107.642955][ C1] arm64_preempt_schedule_irq+0x44/0x58 [ 107.644501][ C1] el1_interrupt+0x3c/0x54 [ 107.645731][ C1] el1h_64_irq_handler+0x18/0x24 [ 107.647094][ C1] el1h_64_irq+0x6c/0x70 [ 107.648259][ C1] kasan_check_range+0x1dc/0x2a4 (P) [ 107.649777][ C1] __kasan_check_write+0x20/0x30 [ 107.651148][ C1] mt_validate+0x3b40/0x3ff4 [ 107.652501][ C1] validate_mm+0xb8/0x41c [ 107.653763][ C1] __split_vma+0x7e4/0x924 [ 107.654958][ C1] vms_gather_munmap_vmas+0x2a0/0xf54 [ 107.656433][ C1] mmap_region+0x54c/0x1c0c [ 107.657645][ C1] do_mmap+0x968/0xfac [ 107.658789][ C1] vm_mmap_pgoff+0x2b8/0x43c [ 107.660165][ C1] ksys_mmap_pgoff+0x394/0x5b8 [ 107.661479][ C1] __arm64_sys_mmap+0xf8/0x110 [ 107.662849][ C1] invoke_syscall+0x98/0x2b8 [ 107.664197][ C1] el0_svc_common+0x130/0x23c [ 107.665555][ C1] do_el0_svc+0x48/0x58 [ 107.666714][ C1] el0_svc+0x58/0x180 [ 107.667832][ C1] el0t_64_sync_handler+0x84/0x12c [ 107.669288][ C1] el0t_64_sync+0x198/0x19c [ 107.670527][ C1] Code: f9400318 b4000b98 941716bf d343ff08 (387c6908) [ 107.672517][ C1] ---[ end trace 0000000000000000 ]--- [ 107.752917][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.753086][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.120443][ C1] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 108.127154][ C1] SMP: stopping secondary CPUs [ 108.128498][ C1] Kernel Offset: disabled [ 108.129752][ C1] CPU features: 0x10000,00040e00,040008a1,04017203 [ 108.131601][ C1] Memory Limit: none [ 108.553318][ C1] Rebooting in 86400 seconds..