Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. 2025/05/09 07:08:17 ignoring optional flag "sandboxArg"="0" 2025/05/09 07:08:18 parsed 1 programs [ 111.128249][ T6487] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.636142][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.650596][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.670463][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.680659][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.688399][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.292771][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.330230][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.510033][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.518087][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.576017][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 116.358051][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.365875][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.373809][ T6526] bridge_slave_0: entered allmulticast mode [ 116.381468][ T6526] bridge_slave_0: entered promiscuous mode [ 116.388887][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.396179][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.404368][ T6526] bridge_slave_1: entered allmulticast mode [ 116.414136][ T6526] bridge_slave_1: entered promiscuous mode [ 116.605133][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.630770][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.730566][ T6526] team0: Port device team_slave_0 added [ 116.751261][ T6526] team0: Port device team_slave_1 added [ 116.823386][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.832380][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.859704][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.892483][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.899576][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.939274][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.010414][ T6526] hsr_slave_0: entered promiscuous mode [ 117.017116][ T6526] hsr_slave_1: entered promiscuous mode [ 117.358304][ T6526] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.374390][ T6526] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.392771][ T6526] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.404296][ T6526] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.463140][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.488041][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.499691][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.507104][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.523027][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.530393][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.682503][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.721307][ T6526] veth0_vlan: entered promiscuous mode [ 117.734391][ T6526] veth1_vlan: entered promiscuous mode [ 117.761755][ T6526] veth0_macvtap: entered promiscuous mode [ 117.772014][ T6526] veth1_macvtap: entered promiscuous mode [ 117.786944][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.803222][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.814370][ T6526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.823557][ T6526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.832807][ T6526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.841940][ T6526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/05/09 07:08:28 executed programs: 0 [ 117.987048][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.010300][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.018758][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.028425][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.037064][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.119275][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.137788][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.146483][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.162988][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.172440][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.197927][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.215871][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.229720][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.238047][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.247175][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.257652][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.265254][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.274156][ T6596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.281728][ T6596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.291592][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.364191][ T6594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.373433][ T6594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.383640][ T6594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.399198][ T6594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.409928][ T6594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.825874][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.949317][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.061372][ T6583] chnl_net:caif_netlink_parms(): no params data found [ 119.226374][ T6588] chnl_net:caif_netlink_parms(): no params data found [ 119.329064][ T6592] chnl_net:caif_netlink_parms(): no params data found [ 119.353499][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.361040][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.368261][ T6583] bridge_slave_0: entered allmulticast mode [ 119.377205][ T6583] bridge_slave_0: entered promiscuous mode [ 119.454905][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.462508][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.470010][ T6583] bridge_slave_1: entered allmulticast mode [ 119.476987][ T6583] bridge_slave_1: entered promiscuous mode [ 119.548962][ T6590] chnl_net:caif_netlink_parms(): no params data found [ 119.582592][ T6583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.646479][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.654231][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.661651][ T6588] bridge_slave_0: entered allmulticast mode [ 119.669232][ T6588] bridge_slave_0: entered promiscuous mode [ 119.681314][ T6583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.719093][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.726360][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.736156][ T6592] bridge_slave_0: entered allmulticast mode [ 119.744278][ T6592] bridge_slave_0: entered promiscuous mode [ 119.761372][ T6597] chnl_net:caif_netlink_parms(): no params data found [ 119.783308][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.790939][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.798146][ T6588] bridge_slave_1: entered allmulticast mode [ 119.806047][ T6588] bridge_slave_1: entered promiscuous mode [ 119.852633][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.860013][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.867332][ T6592] bridge_slave_1: entered allmulticast mode [ 119.875890][ T6592] bridge_slave_1: entered promiscuous mode [ 119.927611][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.946134][ T6588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.959323][ T6583] team0: Port device team_slave_0 added [ 120.019083][ T6588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.044396][ T6583] team0: Port device team_slave_1 added [ 120.068115][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.081260][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.142534][ T6594] Bluetooth: hci0: command tx timeout [ 120.169320][ T6588] team0: Port device team_slave_0 added [ 120.188935][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.196516][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.222871][ T6583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.235552][ T6594] Bluetooth: hci1: command tx timeout [ 120.247741][ T6592] team0: Port device team_slave_0 added [ 120.256945][ T6592] team0: Port device team_slave_1 added [ 120.279142][ T6590] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.286817][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.294517][ T6590] bridge_slave_0: entered allmulticast mode [ 120.303630][ T6590] bridge_slave_0: entered promiscuous mode [ 120.331041][ T6588] team0: Port device team_slave_1 added [ 120.337692][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.344860][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.372285][ T6583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.383017][ T6594] Bluetooth: hci2: command tx timeout [ 120.383361][ T6594] Bluetooth: hci3: command tx timeout [ 120.421846][ T6590] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.429025][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.436810][ T6590] bridge_slave_1: entered allmulticast mode [ 120.443918][ T6590] bridge_slave_1: entered promiscuous mode [ 120.460555][ T6594] Bluetooth: hci4: command tx timeout [ 120.495043][ T6583] hsr_slave_0: entered promiscuous mode [ 120.501976][ T6583] hsr_slave_1: entered promiscuous mode [ 120.508157][ T6583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.516745][ T6583] Cannot create hsr debugfs directory [ 120.596159][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.603406][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.611312][ T6597] bridge_slave_0: entered allmulticast mode [ 120.618380][ T6597] bridge_slave_0: entered promiscuous mode [ 120.639308][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.646673][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.673086][ T6588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.685922][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.693218][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.719289][ T6588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.737416][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.745611][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.772158][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.786986][ T6590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.797034][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.804534][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.811824][ T6597] bridge_slave_1: entered allmulticast mode [ 120.818726][ T6597] bridge_slave_1: entered promiscuous mode [ 120.834555][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.872656][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.879713][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.906236][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.928034][ T6590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.049038][ T6588] hsr_slave_0: entered promiscuous mode [ 121.056541][ T6588] hsr_slave_1: entered promiscuous mode [ 121.063120][ T6588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.072183][ T6588] Cannot create hsr debugfs directory [ 121.087498][ T6590] team0: Port device team_slave_0 added [ 121.097775][ T6590] team0: Port device team_slave_1 added [ 121.106808][ T6597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.155515][ T6597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.288759][ T6597] team0: Port device team_slave_0 added [ 121.301167][ T6592] hsr_slave_0: entered promiscuous mode [ 121.307669][ T6592] hsr_slave_1: entered promiscuous mode [ 121.314443][ T6592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.322913][ T6592] Cannot create hsr debugfs directory [ 121.347399][ T6590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.355010][ T6590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.381458][ T6590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.394719][ T6590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.403151][ T6590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.431014][ T6590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.446478][ T6597] team0: Port device team_slave_1 added [ 121.523923][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.532105][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.559570][ T6597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.619133][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.626353][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.653230][ T6597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.747541][ T13] bridge_slave_1: left allmulticast mode [ 121.753352][ T13] bridge_slave_1: left promiscuous mode [ 121.759128][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.768475][ T13] bridge_slave_0: left allmulticast mode [ 121.774653][ T13] bridge_slave_0: left promiscuous mode [ 121.782886][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.104382][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.116582][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.126586][ T13] bond0 (unregistering): Released all slaves [ 122.220019][ T6594] Bluetooth: hci0: command tx timeout [ 122.220083][ T6590] hsr_slave_0: entered promiscuous mode [ 122.235076][ T6590] hsr_slave_1: entered promiscuous mode [ 122.242468][ T6590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.250295][ T6590] Cannot create hsr debugfs directory [ 122.312192][ T6594] Bluetooth: hci1: command tx timeout [ 122.423130][ T13] hsr_slave_0: left promiscuous mode [ 122.429215][ T13] hsr_slave_1: left promiscuous mode [ 122.435584][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.443371][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.451776][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.459383][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.466737][ T6594] Bluetooth: hci3: command tx timeout [ 122.466775][ T6594] Bluetooth: hci2: command tx timeout [ 122.486124][ T13] veth1_macvtap: left promiscuous mode [ 122.491898][ T13] veth0_macvtap: left promiscuous mode [ 122.497594][ T13] veth1_vlan: left promiscuous mode [ 122.503546][ T13] veth0_vlan: left promiscuous mode [ 122.540733][ T5852] Bluetooth: hci4: command tx timeout [ 122.818276][ T13] team0 (unregistering): Port device team_slave_1 removed [ 122.851530][ T13] team0 (unregistering): Port device team_slave_0 removed [ 123.137039][ T6597] hsr_slave_0: entered promiscuous mode [ 123.144015][ T6597] hsr_slave_1: entered promiscuous mode [ 123.596648][ T6583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.623616][ T6583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.638777][ T6583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.657742][ T6583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.802509][ T6588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.825386][ T6588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.836680][ T6588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.945729][ T6588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.287906][ T6583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.301536][ T5852] Bluetooth: hci0: command tx timeout [ 124.380185][ T5852] Bluetooth: hci1: command tx timeout [ 124.407786][ T6583] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.461176][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.468307][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.485587][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.492775][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.540472][ T5852] Bluetooth: hci2: command tx timeout [ 124.546011][ T5852] Bluetooth: hci3: command tx timeout [ 124.621163][ T5852] Bluetooth: hci4: command tx timeout [ 124.663446][ T6588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.723060][ T6588] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.734645][ T6592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.762768][ T6592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.786407][ T6592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.807970][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.815685][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.847030][ T6592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.871973][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.879210][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.158755][ T6583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.419365][ T6583] veth0_vlan: entered promiscuous mode [ 125.446817][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.470875][ T6590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.506444][ T6590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.539402][ T6590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.571640][ T6583] veth1_vlan: entered promiscuous mode [ 125.579166][ T6590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.608926][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.651476][ T6588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.688967][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.696192][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.740007][ T6597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.764340][ T6597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.787572][ T6583] veth0_macvtap: entered promiscuous mode [ 125.803988][ T6597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.823135][ T6583] veth1_macvtap: entered promiscuous mode [ 125.848625][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.856024][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.870682][ T6597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.963840][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.987045][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.045017][ T6583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.055491][ T6583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.065411][ T6583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.074676][ T6583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.175424][ T6588] veth0_vlan: entered promiscuous mode [ 126.247672][ T6590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.318706][ T6588] veth1_vlan: entered promiscuous mode [ 126.382608][ T5852] Bluetooth: hci0: command tx timeout [ 126.388399][ T6590] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.427084][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.448456][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.460150][ T5852] Bluetooth: hci1: command tx timeout [ 126.490893][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.498088][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.522927][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.530138][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.620646][ T5852] Bluetooth: hci3: command tx timeout [ 126.626180][ T5852] Bluetooth: hci2: command tx timeout [ 126.632304][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.640603][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.691520][ T6590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.702251][ T5852] Bluetooth: hci4: command tx timeout [ 126.707729][ T6590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 2025/05/09 07:08:37 executed programs: 10 [ 126.756366][ T6597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.856533][ T6588] veth0_macvtap: entered promiscuous mode [ 126.883799][ T6588] veth1_macvtap: entered promiscuous mode [ 126.899241][ T6597] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.917089][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.945893][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.953250][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.034853][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.042181][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.064588][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.080075][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.096340][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.110198][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.142340][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.153856][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.173357][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.213358][ T6588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.222426][ T6588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.233773][ T6588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.244955][ T6588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.269913][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 127.297382][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.311880][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 127.326390][ T6590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.327702][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 127.355375][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.370644][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 127.402344][ T6597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.422802][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 127.436006][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 127.446692][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 127.496145][ T6592] veth0_vlan: entered promiscuous mode [ 127.508602][ T24] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 127.526119][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.535866][ T24] usb 1-1: Product: syz [ 127.548508][ T24] usb 1-1: Manufacturer: syz [ 127.556417][ T24] usb 1-1: SerialNumber: syz [ 127.573499][ T6592] veth1_vlan: entered promiscuous mode [ 127.582332][ T24] usb 1-1: config 0 descriptor?? [ 127.597866][ T6700] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.628623][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.693972][ T6590] veth0_vlan: entered promiscuous mode [ 127.738666][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.763617][ T6592] veth0_macvtap: entered promiscuous mode [ 127.782095][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.824268][ T6592] veth1_macvtap: entered promiscuous mode [ 127.825550][ T24] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 127.845860][ T6590] veth1_vlan: entered promiscuous mode [ 127.924982][ T24] usb 1-1: USB disconnect, device number 2 [ 127.964098][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.985402][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.995131][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.009007][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.051944][ T6723] udevd[6723]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.070457][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.092330][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.113779][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.164190][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.189139][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.202025][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.213118][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.225877][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.264598][ T6592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.292930][ T6592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.322393][ T6592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.350439][ T6592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.379164][ T6590] veth0_macvtap: entered promiscuous mode [ 128.454154][ T6597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.463966][ T6590] veth1_macvtap: entered promiscuous mode [ 128.537588][ T975] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.589452][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.605730][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.616870][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.631341][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.641710][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.652706][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.666371][ T6590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.690389][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.708717][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.719997][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 128.733843][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.748983][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.768536][ T975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 128.777307][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.792444][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.805763][ T975] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 128.822582][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.833272][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 128.846188][ T6590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.854511][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 128.867200][ T975] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 128.890481][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 128.911496][ T6590] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.913381][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 128.922372][ T6590] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.943161][ T47] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.945656][ T6590] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.969783][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 128.981073][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 128.984096][ T6590] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.018451][ T975] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 129.026662][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.037924][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 129.057788][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.077418][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.100143][ T47] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 129.111070][ T975] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 129.130282][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.138320][ T975] usb 2-1: Product: syz [ 129.153699][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 129.164584][ T975] usb 2-1: Manufacturer: syz [ 129.169222][ T975] usb 2-1: SerialNumber: syz [ 129.187759][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 129.218118][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.222427][ T47] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 129.237128][ T975] usb 2-1: config 0 descriptor?? [ 129.252711][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.257762][ T6728] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.289131][ T975] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.304276][ T47] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 129.333220][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.355821][ T47] usb 1-1: Product: syz [ 129.376491][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.390704][ T47] usb 1-1: Manufacturer: syz [ 129.396575][ T47] usb 1-1: SerialNumber: syz [ 129.404479][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.428604][ T6597] veth0_vlan: entered promiscuous mode [ 129.471270][ T47] usb 1-1: config 0 descriptor?? [ 129.477200][ T6733] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 129.478153][ T975] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 129.535211][ T47] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.548468][ T975] usb 2-1: USB disconnect, device number 2 [ 129.556347][ T6597] veth1_vlan: entered promiscuous mode [ 129.609297][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.621879][ T6507] udevd[6507]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.644649][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.660046][ T5927] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.753174][ T6597] veth0_macvtap: entered promiscuous mode [ 129.795087][ T6597] veth1_macvtap: entered promiscuous mode [ 129.802354][ T47] ------------[ cut here ]------------ [ 129.808039][ T47] ODEBUG: free active (active state 0) object: ffff888060b4b840 object type: timer_list hint: snd_usbmidi_error_timer+0x0/0x660 [ 129.830141][ C1] ================================================================== [ 129.838258][ C1] BUG: KASAN: slab-use-after-free in snd_usbmidi_error_timer+0x602/0x660 [ 129.846699][ C1] Read of size 1 at addr ffff888033ed9543 by task udevd/5201 [ 129.854074][ C1] [ 129.856411][ C1] CPU: 1 UID: 0 PID: 5201 Comm: udevd Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904-dirty #0 PREEMPT(full) [ 129.856429][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 129.856442][ C1] Call Trace: [ 129.856452][ C1] [ 129.856459][ C1] dump_stack_lvl+0x189/0x250 [ 129.856481][ C1] ? __virt_addr_valid+0x18c/0x540 [ 129.856499][ C1] ? rcu_is_watching+0x15/0xb0 [ 129.856518][ C1] ? __kasan_check_byte+0x12/0x40 [ 129.856535][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.856552][ C1] ? rcu_is_watching+0x15/0xb0 [ 129.856571][ C1] ? lock_release+0x4b/0x3e0 [ 129.856591][ C1] ? __virt_addr_valid+0x18c/0x540 [ 129.856607][ C1] ? __virt_addr_valid+0x469/0x540 [ 129.856624][ C1] print_report+0xb4/0x290 [ 129.856640][ C1] ? snd_usbmidi_error_timer+0x602/0x660 [ 129.856655][ C1] kasan_report+0x118/0x150 [ 129.856672][ C1] ? snd_usbmidi_error_timer+0x602/0x660 [ 129.856688][ C1] snd_usbmidi_error_timer+0x602/0x660 [ 129.856703][ C1] call_timer_fn+0x17b/0x5f0 [ 129.856726][ C1] ? __pfx_snd_usbmidi_error_timer+0x10/0x10 [ 129.856740][ C1] ? call_timer_fn+0xbe/0x5f0 [ 129.856756][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 129.856776][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.856790][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.856804][ C1] ? __pfx_snd_usbmidi_error_timer+0x10/0x10 [ 129.856818][ C1] __run_timer_base+0x61a/0x860 [ 129.856833][ C1] ? ktime_get+0x3e/0x1f0 [ 129.856850][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 129.856864][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 129.856883][ C1] run_timer_softirq+0xb7/0x180 [ 129.856899][ C1] handle_softirqs+0x283/0x870 [ 129.856920][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 129.856933][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 129.856956][ C1] __irq_exit_rcu+0xca/0x1f0 [ 129.856968][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 129.856982][ C1] irq_exit_rcu+0x9/0x30 [ 129.856992][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 129.857008][ C1] [ 129.857012][ C1] [ 129.857018][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.857034][ C1] RIP: 0010:rcu_is_watching+0x9/0xb0 [ 129.857055][ C1] Code: 46 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 <65> ff 05 a0 48 ce 10 e8 fb 29 af 09 89 c3 83 f8 08 73 65 49 bf 00 [ 129.857068][ C1] RSP: 0018:ffffc90003daf828 EFLAGS: 00000297 [ 129.857088][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.857098][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e054920 [ 129.857107][ C1] RBP: ffffffff8214c37d R08: 0000000000000001 R09: 0000000000000000 [ 129.857116][ C1] R10: 0000000000000000 R11: ffffffff821706c4 R12: 0000000000000000 [ 129.857126][ C1] R13: ffffffff8e054920 R14: 0000000000000000 R15: 0000000000000001 [ 129.857136][ C1] ? fs_reclaim_acquire+0x7d/0x100 [ 129.857156][ C1] ? kmem_cache_alloc_noprof+0x44/0x3c0 [ 129.857177][ C1] lock_acquire+0x5f/0x360 [ 129.857197][ C1] ? fs_reclaim_acquire+0x7d/0x100 [ 129.857217][ C1] fs_reclaim_acquire+0x99/0x100 [ 129.857235][ C1] ? fs_reclaim_acquire+0x7d/0x100 [ 129.857254][ C1] kmem_cache_alloc_noprof+0x44/0x3c0 [ 129.857270][ C1] ? alloc_empty_file+0x55/0x1d0 [ 129.857290][ C1] alloc_empty_file+0x55/0x1d0 [ 129.857309][ C1] path_openat+0x107/0x3830 [ 129.857322][ C1] ? arch_stack_walk+0xfc/0x150 [ 129.857342][ C1] ? stack_trace_save+0x9c/0xe0 [ 129.857357][ C1] ? stack_depot_save_flags+0x40/0x910 [ 129.857371][ C1] ? kasan_save_track+0x4f/0x80 [ 129.857386][ C1] ? kasan_save_track+0x4f/0x80 [ 129.857400][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 129.857414][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 129.857430][ C1] ? getname_flags+0xb8/0x540 [ 129.857447][ C1] ? __pfx_path_openat+0x10/0x10 [ 129.857459][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.857478][ C1] do_filp_open+0x1fa/0x410 [ 129.857491][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 129.857511][ C1] ? _raw_spin_unlock+0x28/0x50 [ 129.857523][ C1] ? alloc_fd+0x64c/0x6c0 [ 129.857542][ C1] do_sys_openat2+0x121/0x1c0 [ 129.857563][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.857587][ C1] __x64_sys_openat+0x138/0x170 [ 129.857609][ C1] do_syscall_64+0xf6/0x210 [ 129.857625][ C1] ? clear_bhb_loop+0x45/0xa0 [ 129.857640][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.857653][ C1] RIP: 0033:0x7efc39515c3a [ 129.857669][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 129.857680][ C1] RSP: 002b:00007fff30d743b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 129.857693][ C1] RAX: ffffffffffffffda RBX: 000055eedcc30190 RCX: 00007efc39515c3a [ 129.857703][ C1] RDX: 0000000000090800 RSI: 000055eedca4f770 RDI: 00000000ffffff9c [ 129.857719][ C1] RBP: 000055eedca4f770 R08: 0000000000000000 R09: 0000000000000001 [ 129.857728][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000055eedca3f780 [ 129.857736][ C1] R13: 00000000000000fd R14: 000055eed6dd3be0 R15: 00007fff30d746c0 [ 129.857750][ C1] [ 129.857755][ C1] [ 130.363749][ C1] Allocated by task 47: [ 130.367891][ C1] kasan_save_track+0x3e/0x80 [ 130.372626][ C1] __kasan_kmalloc+0x93/0xb0 [ 130.377232][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 130.382601][ C1] snd_usbmidi_in_endpoint_create+0x7e/0xa30 [ 130.388616][ C1] __snd_usbmidi_create+0x21bd/0x29d0 [ 130.393979][ C1] snd_usb_midi_v2_create+0x43e1/0x4650 [ 130.399556][ C1] usb_audio_probe+0xb78/0x1e20 [ 130.404410][ C1] usb_probe_interface+0x641/0xbc0 [ 130.409519][ C1] really_probe+0x26a/0x9a0 [ 130.414028][ C1] __driver_probe_device+0x18c/0x2f0 [ 130.419307][ C1] driver_probe_device+0x4f/0x430 [ 130.424318][ C1] __device_attach_driver+0x2ce/0x530 [ 130.429724][ C1] bus_for_each_drv+0x24e/0x2e0 [ 130.434561][ C1] __device_attach+0x2b8/0x400 [ 130.439417][ C1] bus_probe_device+0x185/0x260 [ 130.444278][ C1] device_add+0x7b6/0xb50 [ 130.448621][ C1] usb_set_configuration+0x1a87/0x20e0 [ 130.454097][ C1] usb_generic_driver_probe+0x8d/0x150 [ 130.459563][ C1] usb_probe_device+0x1c1/0x390 [ 130.464411][ C1] really_probe+0x26a/0x9a0 [ 130.468914][ C1] __driver_probe_device+0x18c/0x2f0 [ 130.474276][ C1] driver_probe_device+0x4f/0x430 [ 130.479291][ C1] __device_attach_driver+0x2ce/0x530 [ 130.484651][ C1] bus_for_each_drv+0x24e/0x2e0 [ 130.489483][ C1] __device_attach+0x2b8/0x400 [ 130.494235][ C1] bus_probe_device+0x185/0x260 [ 130.499121][ C1] device_add+0x7b6/0xb50 [ 130.503442][ C1] usb_new_device+0xa39/0x16c0 [ 130.508209][ C1] hub_event+0x2941/0x4a00 [ 130.512623][ C1] process_scheduled_works+0xadb/0x17a0 [ 130.518165][ C1] worker_thread+0x8a0/0xda0 [ 130.522739][ C1] kthread+0x70e/0x8a0 [ 130.526798][ C1] ret_from_fork+0x4b/0x80 [ 130.531296][ C1] ret_from_fork_asm+0x1a/0x30 [ 130.536049][ C1] [ 130.538477][ C1] Freed by task 47: [ 130.542357][ C1] kasan_save_track+0x3e/0x80 [ 130.547028][ C1] kasan_save_free_info+0x46/0x50 [ 130.552051][ C1] __kasan_slab_free+0x62/0x70 [ 130.556803][ C1] kfree+0x193/0x440 [ 130.560773][ C1] snd_usbmidi_rawmidi_free+0xae/0x150 [ 130.566307][ C1] snd_rawmidi_free+0x3bc/0x410 [ 130.571157][ C1] snd_rawmidi_dev_free+0x38/0x50 [ 130.576169][ C1] __snd_device_free+0x1d2/0x2e0 [ 130.581096][ C1] snd_device_free_all+0xcf/0x180 [ 130.586113][ C1] release_card_device+0x75/0x1b0 [ 130.591126][ C1] device_release+0x99/0x1c0 [ 130.595725][ C1] kobject_put+0x228/0x480 [ 130.600133][ C1] snd_card_free+0x110/0x190 [ 130.604793][ C1] usb_audio_probe+0x1949/0x1e20 [ 130.609725][ C1] usb_probe_interface+0x641/0xbc0 [ 130.614925][ C1] really_probe+0x26a/0x9a0 [ 130.619419][ C1] __driver_probe_device+0x18c/0x2f0 [ 130.624691][ C1] driver_probe_device+0x4f/0x430 [ 130.629791][ C1] __device_attach_driver+0x2ce/0x530 [ 130.635238][ C1] bus_for_each_drv+0x24e/0x2e0 [ 130.640096][ C1] __device_attach+0x2b8/0x400 [ 130.644863][ C1] bus_probe_device+0x185/0x260 [ 130.649708][ C1] device_add+0x7b6/0xb50 [ 130.654025][ C1] usb_set_configuration+0x1a87/0x20e0 [ 130.659476][ C1] usb_generic_driver_probe+0x8d/0x150 [ 130.664942][ C1] usb_probe_device+0x1c1/0x390 [ 130.669782][ C1] really_probe+0x26a/0x9a0 [ 130.674275][ C1] __driver_probe_device+0x18c/0x2f0 [ 130.679581][ C1] driver_probe_device+0x4f/0x430 [ 130.684599][ C1] __device_attach_driver+0x2ce/0x530 [ 130.689961][ C1] bus_for_each_drv+0x24e/0x2e0 [ 130.694794][ C1] __device_attach+0x2b8/0x400 [ 130.699544][ C1] bus_probe_device+0x185/0x260 [ 130.704465][ C1] device_add+0x7b6/0xb50 [ 130.708779][ C1] usb_new_device+0xa39/0x16c0 [ 130.713535][ C1] hub_event+0x2941/0x4a00 [ 130.718030][ C1] process_scheduled_works+0xadb/0x17a0 [ 130.723572][ C1] worker_thread+0x8a0/0xda0 [ 130.728151][ C1] kthread+0x70e/0x8a0 [ 130.732221][ C1] ret_from_fork+0x4b/0x80 [ 130.736624][ C1] ret_from_fork_asm+0x1a/0x30 [ 130.741377][ C1] [ 130.743689][ C1] The buggy address belongs to the object at ffff888033ed9400 [ 130.743689][ C1] which belongs to the cache kmalloc-512 of size 512 [ 130.757752][ C1] The buggy address is located 323 bytes inside of [ 130.757752][ C1] freed 512-byte region [ffff888033ed9400, ffff888033ed9600) [ 130.771637][ C1] [ 130.773976][ C1] The buggy address belongs to the physical page: [ 130.780396][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33ed8 [ 130.789153][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 130.797648][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 130.805639][ C1] page_type: f5(slab) [ 130.809624][ C1] raw: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 130.818720][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 130.827298][ C1] head: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 130.836135][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 130.844892][ C1] head: 00fff00000000002 ffffea0000cfb601 00000000ffffffff 00000000ffffffff [ 130.853566][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 130.862310][ C1] page dumped because: kasan: bad access detected [ 130.868713][ C1] page_owner tracks the page as allocated [ 130.874419][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3563, tgid 3563 (kworker/u8:8), ts 81305274736, free_ts 81130187591 [ 130.895766][ C1] post_alloc_hook+0x1d8/0x230 [ 130.900639][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 130.906356][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 130.912155][ C1] alloc_pages_mpol+0x232/0x4a0 [ 130.916996][ C1] allocate_slab+0x8a/0x3b0 [ 130.921509][ C1] ___slab_alloc+0xbfc/0x1480 [ 130.926184][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 130.931564][ C1] __ipv6_dev_mc_inc+0x420/0xaf0 [ 130.936497][ C1] addrconf_dad_work+0x3d0/0x14b0 [ 130.941508][ C1] process_scheduled_works+0xadb/0x17a0 [ 130.947061][ C1] worker_thread+0x8a0/0xda0 [ 130.951638][ C1] kthread+0x70e/0x8a0 [ 130.955699][ C1] ret_from_fork+0x4b/0x80 [ 130.960100][ C1] ret_from_fork_asm+0x1a/0x30 [ 130.964851][ C1] page last free pid 5931 tgid 5931 stack trace: [ 130.971160][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 130.976267][ C1] __slab_free+0x326/0x400 [ 130.980777][ C1] qlist_free_all+0x9a/0x140 [ 130.985381][ C1] kasan_quarantine_reduce+0x148/0x160 [ 130.990841][ C1] __kasan_slab_alloc+0x22/0x80 [ 130.995686][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 131.001567][ C1] __alloc_skb+0x112/0x2d0 [ 131.006100][ C1] rtmsg_ifa+0xf8/0x1f0 [ 131.010269][ C1] __inet_insert_ifa+0x9ff/0xbf0 [ 131.015228][ C1] inet_rtm_newaddr+0xf3a/0x18b0 [ 131.020167][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 131.025112][ C1] netlink_rcv_skb+0x219/0x490 [ 131.029871][ C1] netlink_unicast+0x758/0x8d0 [ 131.034625][ C1] netlink_sendmsg+0x805/0xb30 [ 131.039411][ C1] __sock_sendmsg+0x219/0x270 [ 131.044110][ C1] __sys_sendto+0x3bd/0x520 [ 131.048714][ C1] [ 131.051040][ C1] Memory state around the buggy address: [ 131.056660][ C1] ffff888033ed9400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.064719][ C1] ffff888033ed9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.072780][ C1] >ffff888033ed9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.080825][ C1] ^ [ 131.087065][ C1] ffff888033ed9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.095134][ C1] ffff888033ed9600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.103304][ C1] ================================================================== [ 131.111552][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.118759][ C1] CPU: 1 UID: 0 PID: 5201 Comm: udevd Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904-dirty #0 PREEMPT(full) [ 131.131190][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 131.141354][ C1] Call Trace: [ 131.144651][ C1] [ 131.147606][ C1] dump_stack_lvl+0x99/0x250 [ 131.152213][ C1] ? __asan_memcpy+0x40/0x70 [ 131.156900][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.162097][ C1] ? __pfx__printk+0x10/0x10 [ 131.166681][ C1] panic+0x2db/0x790 [ 131.170662][ C1] ? __pfx_panic+0x10/0x10 [ 131.175072][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 131.180956][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 131.186844][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 131.193161][ C1] ? print_memory_metadata+0x314/0x400 [ 131.198614][ C1] ? snd_usbmidi_error_timer+0x602/0x660 [ 131.204336][ C1] check_panic_on_warn+0x89/0xb0 [ 131.209267][ C1] ? snd_usbmidi_error_timer+0x602/0x660 [ 131.214887][ C1] end_report+0x78/0x160 [ 131.219124][ C1] kasan_report+0x129/0x150 [ 131.223634][ C1] ? snd_usbmidi_error_timer+0x602/0x660 [ 131.229276][ C1] snd_usbmidi_error_timer+0x602/0x660 [ 131.234735][ C1] call_timer_fn+0x17b/0x5f0 [ 131.239321][ C1] ? __pfx_snd_usbmidi_error_timer+0x10/0x10 [ 131.245291][ C1] ? call_timer_fn+0xbe/0x5f0 [ 131.249961][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 131.255086][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 131.260273][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.265463][ C1] ? __pfx_snd_usbmidi_error_timer+0x10/0x10 [ 131.271478][ C1] __run_timer_base+0x61a/0x860 [ 131.276324][ C1] ? ktime_get+0x3e/0x1f0 [ 131.280652][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 131.286015][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 131.292249][ C1] run_timer_softirq+0xb7/0x180 [ 131.297098][ C1] handle_softirqs+0x283/0x870 [ 131.301858][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 131.306612][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 131.311904][ C1] __irq_exit_rcu+0xca/0x1f0 [ 131.316483][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 131.321671][ C1] irq_exit_rcu+0x9/0x30 [ 131.325992][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 131.331628][ C1] [ 131.334549][ C1] [ 131.337516][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.343490][ C1] RIP: 0010:rcu_is_watching+0x9/0xb0 [ 131.348772][ C1] Code: 46 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 <65> ff 05 a0 48 ce 10 e8 fb 29 af 09 89 c3 83 f8 08 73 65 49 bf 00 [ 131.368388][ C1] RSP: 0018:ffffc90003daf828 EFLAGS: 00000297 [ 131.374483][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.382471][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e054920 [ 131.390468][ C1] RBP: ffffffff8214c37d R08: 0000000000000001 R09: 0000000000000000 [ 131.398536][ C1] R10: 0000000000000000 R11: ffffffff821706c4 R12: 0000000000000000 [ 131.406539][ C1] R13: ffffffff8e054920 R14: 0000000000000000 R15: 0000000000000001 [ 131.414528][ C1] ? fs_reclaim_acquire+0x7d/0x100 [ 131.419661][ C1] ? kmem_cache_alloc_noprof+0x44/0x3c0 [ 131.425237][ C1] lock_acquire+0x5f/0x360 [ 131.429702][ C1] ? fs_reclaim_acquire+0x7d/0x100 [ 131.434843][ C1] fs_reclaim_acquire+0x99/0x100 [ 131.439794][ C1] ? fs_reclaim_acquire+0x7d/0x100 [ 131.444902][ C1] kmem_cache_alloc_noprof+0x44/0x3c0 [ 131.450276][ C1] ? alloc_empty_file+0x55/0x1d0 [ 131.455214][ C1] alloc_empty_file+0x55/0x1d0 [ 131.459975][ C1] path_openat+0x107/0x3830 [ 131.464468][ C1] ? arch_stack_walk+0xfc/0x150 [ 131.469312][ C1] ? stack_trace_save+0x9c/0xe0 [ 131.474267][ C1] ? stack_depot_save_flags+0x40/0x910 [ 131.479731][ C1] ? kasan_save_track+0x4f/0x80 [ 131.484776][ C1] ? kasan_save_track+0x4f/0x80 [ 131.489621][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 131.494635][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 131.500257][ C1] ? getname_flags+0xb8/0x540 [ 131.504927][ C1] ? __pfx_path_openat+0x10/0x10 [ 131.509851][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.516000][ C1] do_filp_open+0x1fa/0x410 [ 131.520601][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 131.525631][ C1] ? _raw_spin_unlock+0x28/0x50 [ 131.530485][ C1] ? alloc_fd+0x64c/0x6c0 [ 131.534871][ C1] do_sys_openat2+0x121/0x1c0 [ 131.539547][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.544757][ C1] __x64_sys_openat+0x138/0x170 [ 131.549653][ C1] do_syscall_64+0xf6/0x210 [ 131.554189][ C1] ? clear_bhb_loop+0x45/0xa0 [ 131.558881][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.564772][ C1] RIP: 0033:0x7efc39515c3a [ 131.569179][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 131.588870][ C1] RSP: 002b:00007fff30d743b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 131.597342][ C1] RAX: ffffffffffffffda RBX: 000055eedcc30190 RCX: 00007efc39515c3a [ 131.605304][ C1] RDX: 0000000000090800 RSI: 000055eedca4f770 RDI: 00000000ffffff9c [ 131.613443][ C1] RBP: 000055eedca4f770 R08: 0000000000000000 R09: 0000000000000001 [ 131.621491][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000055eedca3f780 [ 131.629455][ C1] R13: 00000000000000fd R14: 000055eed6dd3be0 R15: 00007fff30d746c0 [ 131.637430][ C1] [ 131.640819][ C1] Kernel Offset: disabled [ 131.645235][ C1] Rebooting in 86400 seconds..