Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. 2026/04/28 04:33:44 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 126.055900][ T6050] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 128.965158][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.985444][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.986922][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.990493][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.992655][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.413828][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.413846][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.731981][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.731997][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.807998][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.808759][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.380021][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.380271][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.380424][ T6092] bridge_slave_0: entered allmulticast mode [ 133.383179][ T6092] bridge_slave_0: entered promiscuous mode [ 133.409281][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.409464][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.409722][ T6092] bridge_slave_1: entered allmulticast mode [ 133.411605][ T6092] bridge_slave_1: entered promiscuous mode [ 133.826800][ T6092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.849967][ T6092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.967062][ T6092] team0: Port device team_slave_0 added [ 133.980254][ T6092] team0: Port device team_slave_1 added [ 134.086308][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.086322][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.086340][ T6092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.089822][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.089836][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.089860][ T6092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.307298][ T6092] hsr_slave_0: entered promiscuous mode [ 134.309391][ T6092] hsr_slave_1: entered promiscuous mode [ 135.046194][ T6092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.076751][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.077648][ T6092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.116579][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.117526][ T6092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.156799][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.157709][ T6092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.196027][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.288547][ T6092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.321331][ T6092] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.348220][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.348310][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.400845][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.400942][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.800908][ T6092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.878703][ T6092] veth0_vlan: entered promiscuous mode [ 135.897971][ T6092] veth1_vlan: entered promiscuous mode [ 135.941118][ T6092] veth0_macvtap: entered promiscuous mode [ 135.949192][ T6092] veth1_macvtap: entered promiscuous mode [ 135.973592][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.989182][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.015681][ T3122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.018060][ T3122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.018724][ T3122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.018954][ T3122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/28 04:33:59 executed programs: 0 [ 136.757775][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.831163][ T5676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.844762][ T6177] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.895579][ T6177] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.896796][ T6178] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.897902][ T6178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.899195][ T6180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.899416][ T6178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.901016][ T6180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.907975][ T6178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.920992][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.925777][ T4927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.049887][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.099097][ T6177] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.105150][ T6177] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.120070][ T6177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.124514][ T6177] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.124813][ T6177] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.172292][ T6175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.175515][ T6175] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.315034][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.356513][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.361029][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.388710][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.391885][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.202860][ T60] Bluetooth: hci2: command tx timeout [ 139.203067][ T60] Bluetooth: hci0: command tx timeout [ 139.364748][ T5676] Bluetooth: hci3: command tx timeout [ 139.448029][ T5676] Bluetooth: hci1: command tx timeout [ 139.524599][ T5676] Bluetooth: hci4: command tx timeout [ 140.067084][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.418522][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.776625][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.105600][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.282111][ T5676] Bluetooth: hci0: command tx timeout [ 141.282144][ T5676] Bluetooth: hci2: command tx timeout [ 141.452532][ T60] Bluetooth: hci3: command tx timeout [ 141.522611][ T60] Bluetooth: hci1: command tx timeout [ 141.602174][ T60] Bluetooth: hci4: command tx timeout [ 141.626998][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.627432][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.627682][ T6172] bridge_slave_0: entered allmulticast mode [ 141.631279][ T6172] bridge_slave_0: entered promiscuous mode [ 141.636469][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.636747][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.636985][ T6170] bridge_slave_0: entered allmulticast mode [ 141.640475][ T6170] bridge_slave_0: entered promiscuous mode [ 141.647033][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.647317][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.647547][ T6169] bridge_slave_0: entered allmulticast mode [ 141.654975][ T6169] bridge_slave_0: entered promiscuous mode [ 141.666791][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.667073][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.667333][ T6168] bridge_slave_0: entered allmulticast mode [ 141.670409][ T6168] bridge_slave_0: entered promiscuous mode [ 141.744995][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.745187][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.745365][ T6173] bridge_slave_0: entered allmulticast mode [ 141.747172][ T6173] bridge_slave_0: entered promiscuous mode [ 141.750081][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.750442][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.750696][ T6172] bridge_slave_1: entered allmulticast mode [ 141.757802][ T6172] bridge_slave_1: entered promiscuous mode [ 141.760141][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.760436][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.761029][ T6170] bridge_slave_1: entered allmulticast mode [ 141.768540][ T6170] bridge_slave_1: entered promiscuous mode [ 141.770735][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.771012][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.771553][ T6169] bridge_slave_1: entered allmulticast mode [ 141.775703][ T6169] bridge_slave_1: entered promiscuous mode [ 141.783421][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.783723][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.784004][ T6168] bridge_slave_1: entered allmulticast mode [ 141.792764][ T6168] bridge_slave_1: entered promiscuous mode [ 141.824496][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.826903][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.827203][ T6173] bridge_slave_1: entered allmulticast mode [ 141.840766][ T6173] bridge_slave_1: entered promiscuous mode [ 142.054976][ T6172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.059744][ T6170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.069639][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.094773][ T6168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.125006][ T6173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.128679][ T6172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.132802][ T6170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.141488][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.147320][ T6168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.153833][ T6173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.522522][ T13] bridge_slave_1: left allmulticast mode [ 142.522546][ T13] bridge_slave_1: left promiscuous mode [ 142.522725][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.603425][ T13] bridge_slave_0: left allmulticast mode [ 142.603450][ T13] bridge_slave_0: left promiscuous mode [ 142.603629][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.362213][ T5676] Bluetooth: hci0: command tx timeout [ 143.362308][ T60] Bluetooth: hci2: command tx timeout [ 143.362777][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.443061][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.464055][ T13] bond0 (unregistering): Released all slaves [ 143.522290][ T60] Bluetooth: hci3: command tx timeout [ 143.612778][ T60] Bluetooth: hci1: command tx timeout [ 143.682190][ T60] Bluetooth: hci4: command tx timeout [ 143.888451][ T6172] team0: Port device team_slave_0 added [ 143.891635][ T6170] team0: Port device team_slave_0 added [ 143.898836][ T6169] team0: Port device team_slave_0 added [ 143.904156][ T6168] team0: Port device team_slave_0 added [ 143.913068][ T6173] team0: Port device team_slave_0 added [ 143.918335][ T6172] team0: Port device team_slave_1 added [ 143.927425][ T6170] team0: Port device team_slave_1 added [ 143.929870][ T6169] team0: Port device team_slave_1 added [ 143.933842][ T6168] team0: Port device team_slave_1 added [ 143.937873][ T6173] team0: Port device team_slave_1 added [ 144.138836][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.138846][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.138859][ T6172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.140726][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.140735][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.140753][ T6170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.144879][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.144891][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.144913][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.167306][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.167321][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.167345][ T6168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.212810][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.212827][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.212851][ T6173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.216406][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.216420][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.216441][ T6172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.219385][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.219398][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.219422][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.223917][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.223929][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.223953][ T6168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.228334][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.228346][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.228368][ T6170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.231424][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.231436][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.231458][ T6173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.583667][ T6172] hsr_slave_0: entered promiscuous mode [ 144.584906][ T6172] hsr_slave_1: entered promiscuous mode [ 144.585881][ T6172] debugfs: 'hsr0' already exists in 'hsr' [ 144.585915][ T6172] Cannot create hsr debugfs directory [ 144.619109][ T6169] hsr_slave_0: entered promiscuous mode [ 144.620348][ T6169] hsr_slave_1: entered promiscuous mode [ 144.621345][ T6169] debugfs: 'hsr0' already exists in 'hsr' [ 144.621367][ T6169] Cannot create hsr debugfs directory [ 144.648541][ T6168] hsr_slave_0: entered promiscuous mode [ 144.649995][ T6168] hsr_slave_1: entered promiscuous mode [ 144.651086][ T6168] debugfs: 'hsr0' already exists in 'hsr' [ 144.651109][ T6168] Cannot create hsr debugfs directory [ 144.692999][ T6173] hsr_slave_0: entered promiscuous mode [ 144.695243][ T6173] hsr_slave_1: entered promiscuous mode [ 144.697266][ T6173] debugfs: 'hsr0' already exists in 'hsr' [ 144.697290][ T6173] Cannot create hsr debugfs directory [ 144.922343][ T13] hsr_slave_0: left promiscuous mode [ 144.962348][ T13] hsr_slave_1: left promiscuous mode [ 144.971016][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.971044][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.003283][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.003309][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.083273][ T13] veth1_macvtap: left promiscuous mode [ 145.083330][ T13] veth0_macvtap: left promiscuous mode [ 145.083479][ T13] veth1_vlan: left promiscuous mode [ 145.083599][ T13] veth0_vlan: left promiscuous mode [ 145.442133][ T60] Bluetooth: hci2: command tx timeout [ 145.442166][ T60] Bluetooth: hci0: command tx timeout [ 145.602095][ T5676] Bluetooth: hci3: command tx timeout [ 145.682392][ T5676] Bluetooth: hci1: command tx timeout [ 145.764785][ T5676] Bluetooth: hci4: command tx timeout [ 145.774289][ T13] team0 (unregistering): Port device team_slave_1 removed [ 145.822683][ T13] team0 (unregistering): Port device team_slave_0 removed [ 146.011673][ T6170] hsr_slave_0: entered promiscuous mode [ 146.017736][ T6170] hsr_slave_1: entered promiscuous mode [ 146.032470][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 147.203027][ T6172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.247576][ T6172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.255674][ T6172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.314081][ T6172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.555190][ T6172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.596669][ T6172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.601813][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 147.615308][ T6172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.656803][ T6172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.970026][ T6172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.281859][ T6172] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.295768][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.296171][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.323736][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.323892][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.419973][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 149.240821][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 150.245502][ T6172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.984888][ T6172] veth0_vlan: entered promiscuous mode [ 151.004677][ T6172] veth1_vlan: entered promiscuous mode [ 151.370822][ T6172] veth0_macvtap: entered promiscuous mode [ 151.423565][ T6172] veth1_macvtap: entered promiscuous mode [ 151.783856][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.798877][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.827976][ T3122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.831153][ T3122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.853834][ T3122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.875688][ T3122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.470230][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.470249][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.660823][ T6169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.697601][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.698224][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.698240][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.710003][ T6169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.740647][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.754737][ T6169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.801509][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.849536][ T6169] netdevsim netdevsim1 netdevsim3: renamed from eth3 2026/04/28 04:34:15 executed programs: 10 [ 152.888950][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.210999][ T6168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.265415][ T6168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.276319][ T6168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.349849][ T6168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.374070][ T6168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.411405][ T6168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.465647][ T5612] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.526363][ T6168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.575383][ T6168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.685188][ T5612] usb 5-1: Using ep0 maxpacket: 32 [ 153.730669][ T5612] usb 5-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 153.730694][ T5612] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.730727][ T5612] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 153.730747][ T5612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.871516][ T5612] usb 5-1: config 0 descriptor?? [ 154.129220][ T6173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.187362][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.288001][ T6173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.373668][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.403929][ T6173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.529434][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.618893][ T5612] corsair-psu 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 154.784608][ T5612] corsair-psu 0003:1B1C:1C09.0001: unable to initialize device (-38) [ 154.799340][ T5612] corsair-psu 0003:1B1C:1C09.0001: probe with driver corsair-psu failed with error -38 [ 154.820348][ T6173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.845720][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.955314][ T5767] usb 5-1: USB disconnect, device number 2 [ 155.198922][ T6170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.237759][ T6170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.267516][ T6170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 155.313659][ T6170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.319772][ T6170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.361782][ T6170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.390051][ T6170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 155.427124][ T6170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.503173][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.722487][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.760948][ T6169] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.873793][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.874014][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.910540][ T6168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.922448][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 155.924336][ T10] usb 5-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 155.924358][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.924383][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 155.924398][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.956407][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.956630][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.026254][ T10] usb 5-1: config 0 descriptor?? [ 156.225989][ T6168] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.368149][ T6173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.446757][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.470043][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.553878][ T10] corsair-psu 0003:1B1C:1C09.0002: hidraw1: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 156.587818][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.588006][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.617025][ T10] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-38) [ 156.618422][ T10] corsair-psu 0003:1B1C:1C09.0002: probe with driver corsair-psu failed with error -38 [ 156.642992][ T6495] ================================================================== [ 156.643004][ T6495] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 156.643035][ T6495] Read of size 1 at addr ffff888025619f40 by task syz.4.22/6495 [ 156.643048][ T6495] [ 156.643074][ T6495] CPU: 0 UID: 0 PID: 6495 Comm: syz.4.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 156.643093][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.643109][ T6495] Call Trace: [ 156.643116][ T6495] [ 156.643123][ T6495] dump_stack_lvl+0xe8/0x150 [ 156.643146][ T6495] print_address_description+0x55/0x1e0 [ 156.643169][ T6495] ? _raw_spin_lock_irqsave+0x40/0x60 [ 156.643202][ T6495] print_report+0x58/0x70 [ 156.643220][ T6495] kasan_report+0x117/0x150 [ 156.643238][ T6495] ? __lock_acquire+0x6b5/0x2cf0 [ 156.643265][ T6495] ? _raw_spin_lock_irqsave+0x40/0x60 [ 156.643295][ T6495] ? rt_spin_lock+0x157/0x400 [ 156.643316][ T6495] __kasan_check_byte+0x2a/0x40 [ 156.643334][ T6495] lock_acquire+0x84/0x350 [ 156.643359][ T6495] ? rcu_is_watching+0x15/0xb0 [ 156.643378][ T6495] _raw_spin_lock_irqsave+0x40/0x60 [ 156.643404][ T6495] ? rt_spin_lock+0x157/0x400 [ 156.643425][ T6495] rt_spin_lock+0x157/0x400 [ 156.643447][ T6495] ? __pfx_rt_spin_lock+0x10/0x10 [ 156.643467][ T6495] ? lockdep_hardirqs_on+0x7a/0x110 [ 156.643494][ T6495] ? rwbase_write_lock+0x568/0x730 [ 156.643513][ T6495] __pm_runtime_resume+0x10f/0x170 [ 156.643540][ T6495] usb_autopm_get_interface+0x20/0xf0 [ 156.643567][ T6495] hidraw_open+0x24d/0x8a0 [ 156.643597][ T6495] chrdev_open+0x4d0/0x5f0 [ 156.643619][ T6495] ? __pfx_chrdev_open+0x10/0x10 [ 156.643640][ T6495] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 156.643661][ T6495] ? __pfx_chrdev_open+0x10/0x10 [ 156.643681][ T6495] do_dentry_open+0x83d/0x13e0 [ 156.643710][ T6495] vfs_open+0x3b/0x350 [ 156.643731][ T6495] ? path_openat+0x2e2b/0x38a0 [ 156.643751][ T6495] path_openat+0x2e43/0x38a0 [ 156.643782][ T6495] ? __pfx_path_openat+0x10/0x10 [ 156.643800][ T6495] ? kasan_save_track+0x4f/0x80 [ 156.643824][ T6495] ? kasan_save_track+0x3e/0x80 [ 156.643848][ T6495] ? __kasan_slab_alloc+0x6c/0x80 [ 156.643864][ T6495] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 156.643895][ T6495] ? do_raw_spin_lock+0x12b/0x2f0 [ 156.643922][ T6495] do_file_open+0x23e/0x4a0 [ 156.643940][ T6495] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 156.643967][ T6495] ? __pfx_do_file_open+0x10/0x10 [ 156.643982][ T6495] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 156.644014][ T6495] ? alloc_fd+0x64e/0x6c0 [ 156.644042][ T6495] do_sys_openat2+0x113/0x200 [ 156.644065][ T6495] ? __se_sys_futex+0x3a8/0x450 [ 156.644083][ T6495] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.644106][ T6495] ? rcu_is_watching+0x15/0xb0 [ 156.644124][ T6495] __x64_sys_openat+0x138/0x170 [ 156.644146][ T6495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.644163][ T6495] do_syscall_64+0x15f/0xf80 [ 156.644179][ T6495] ? trace_irq_disable+0x3b/0x140 [ 156.644209][ T6495] ? clear_bhb_loop+0x40/0x90 [ 156.644229][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.644247][ T6495] RIP: 0033:0x7fc684ded60e [ 156.644273][ T6495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.644288][ T6495] RSP: 002b:00007fc684485b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 156.644316][ T6495] RAX: ffffffffffffffda RBX: 00007fc6844866c0 RCX: 00007fc684ded60e [ 156.644330][ T6495] RDX: 0000000000000002 RSI: 00007fc684485c00 RDI: ffffffffffffff9c [ 156.644344][ T6495] RBP: 00007fc684485c00 R08: 0000000000000000 R09: 0000000000000000 [ 156.644356][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 156.644368][ T6495] R13: 00007fc6850a6038 R14: 00007fc6850a5fa0 R15: 00007ffda357f558 [ 156.644389][ T6495] [ 156.644396][ T6495] [ 156.644400][ T6495] Allocated by task 10: [ 156.644410][ T6495] kasan_save_track+0x3e/0x80 [ 156.644433][ T6495] __kasan_kmalloc+0x93/0xb0 [ 156.644447][ T6495] __kmalloc_cache_noprof+0x3a6/0x690 [ 156.644463][ T6495] usbhid_start+0x94b/0x24b0 [ 156.644484][ T6495] hid_hw_start+0x65/0x120 [ 156.644499][ T6495] corsairpsu_probe+0xd9/0x3c0 [ 156.644524][ T6495] hid_device_probe+0x416/0x7a0 [ 156.644539][ T6495] really_probe+0x267/0xaf0 [ 156.644555][ T6495] __driver_probe_device+0x1ef/0x380 [ 156.644570][ T6495] driver_probe_device+0x4f/0x240 [ 156.644586][ T6495] __device_attach_driver+0x279/0x430 [ 156.644602][ T6495] bus_for_each_drv+0x25b/0x2f0 [ 156.644622][ T6495] __device_attach+0x2c8/0x450 [ 156.644636][ T6495] device_initial_probe+0xa1/0xd0 [ 156.644651][ T6495] bus_probe_device+0x12d/0x220 [ 156.644670][ T6495] device_add+0x7e9/0xbb0 [ 156.644691][ T6495] hid_add_device+0x272/0x3e0 [ 156.644707][ T6495] usbhid_probe+0xbb3/0x1080 [ 156.644730][ T6495] usb_probe_interface+0x659/0xc70 [ 156.644744][ T6495] really_probe+0x267/0xaf0 [ 156.644759][ T6495] __driver_probe_device+0x1ef/0x380 [ 156.644774][ T6495] driver_probe_device+0x4f/0x240 [ 156.644789][ T6495] __device_attach_driver+0x279/0x430 [ 156.644805][ T6495] bus_for_each_drv+0x25b/0x2f0 [ 156.644824][ T6495] __device_attach+0x2c8/0x450 [ 156.644838][ T6495] device_initial_probe+0xa1/0xd0 [ 156.644852][ T6495] bus_probe_device+0x12d/0x220 [ 156.644871][ T6495] device_add+0x7e9/0xbb0 [ 156.644891][ T6495] usb_set_configuration+0x1a87/0x2110 [ 156.644915][ T6495] usb_generic_driver_probe+0x8d/0x150 [ 156.644937][ T6495] usb_probe_device+0x1c4/0x3b0 [ 156.644960][ T6495] really_probe+0x267/0xaf0 [ 156.644975][ T6495] __driver_probe_device+0x1ef/0x380 [ 156.644990][ T6495] driver_probe_device+0x4f/0x240 [ 156.645006][ T6495] __device_attach_driver+0x279/0x430 [ 156.645021][ T6495] bus_for_each_drv+0x25b/0x2f0 [ 156.645041][ T6495] __device_attach+0x2c8/0x450 [ 156.645055][ T6495] device_initial_probe+0xa1/0xd0 [ 156.645069][ T6495] bus_probe_device+0x12d/0x220 [ 156.645088][ T6495] device_add+0x7e9/0xbb0 [ 156.645109][ T6495] usb_new_device+0x9f8/0x16e0 [ 156.645127][ T6495] hub_event+0x2a49/0x4f60 [ 156.645149][ T6495] process_one_work+0x9a3/0x1710 [ 156.645167][ T6495] worker_thread+0xba8/0x11e0 [ 156.645186][ T6495] kthread+0x388/0x470 [ 156.645216][ T6495] ret_from_fork+0x514/0xb70 [ 156.645235][ T6495] ret_from_fork_asm+0x1a/0x30 [ 156.645257][ T6495] [ 156.645261][ T6495] Freed by task 10: [ 156.645269][ T6495] kasan_save_track+0x3e/0x80 [ 156.645292][ T6495] kasan_save_free_info+0x46/0x50 [ 156.645311][ T6495] __kasan_slab_free+0x5c/0x80 [ 156.645325][ T6495] kfree+0x1c5/0x6c0 [ 156.645346][ T6495] usbhid_stop+0x6c1/0x890 [ 156.645368][ T6495] hid_hw_stop+0x64/0x1e0 [ 156.645383][ T6495] corsairpsu_probe+0x327/0x3c0 [ 156.645404][ T6495] hid_device_probe+0x416/0x7a0 [ 156.645420][ T6495] really_probe+0x267/0xaf0 [ 156.645434][ T6495] __driver_probe_device+0x1ef/0x380 [ 156.645449][ T6495] driver_probe_device+0x4f/0x240 [ 156.645464][ T6495] __device_attach_driver+0x279/0x430 [ 156.645479][ T6495] bus_for_each_drv+0x25b/0x2f0 [ 156.645497][ T6495] __device_attach+0x2c8/0x450 [ 156.645510][ T6495] device_initial_probe+0xa1/0xd0 [ 156.645523][ T6495] bus_probe_device+0x12d/0x220 [ 156.645540][ T6495] device_add+0x7e9/0xbb0 [ 156.645560][ T6495] hid_add_device+0x272/0x3e0 [ 156.645577][ T6495] usbhid_probe+0xbb3/0x1080 [ 156.645599][ T6495] usb_probe_interface+0x659/0xc70 [ 156.645614][ T6495] really_probe+0x267/0xaf0 [ 156.645629][ T6495] __driver_probe_device+0x1ef/0x380 [ 156.645644][ T6495] driver_probe_device+0x4f/0x240 [ 156.645659][ T6495] __device_attach_driver+0x279/0x430 [ 156.645673][ T6495] bus_for_each_drv+0x25b/0x2f0 [ 156.645689][ T6495] __device_attach+0x2c8/0x450 [ 156.645702][ T6495] device_initial_probe+0xa1/0xd0 [ 156.645715][ T6495] bus_probe_device+0x12d/0x220 [ 156.645733][ T6495] device_add+0x7e9/0xbb0 [ 156.645754][ T6495] usb_set_configuration+0x1a87/0x2110 [ 156.645777][ T6495] usb_generic_driver_probe+0x8d/0x150 [ 156.645798][ T6495] usb_probe_device+0x1c4/0x3b0 [ 156.645820][ T6495] really_probe+0x267/0xaf0 [ 156.645834][ T6495] __driver_probe_device+0x1ef/0x380 [ 156.645849][ T6495] driver_probe_device+0x4f/0x240 [ 156.645865][ T6495] __device_attach_driver+0x279/0x430 [ 156.645880][ T6495] bus_for_each_drv+0x25b/0x2f0 [ 156.645899][ T6495] __device_attach+0x2c8/0x450 [ 156.645912][ T6495] device_initial_probe+0xa1/0xd0 [ 156.645926][ T6495] bus_probe_device+0x12d/0x220 [ 156.645945][ T6495] device_add+0x7e9/0xbb0 [ 156.645966][ T6495] usb_new_device+0x9f8/0x16e0 [ 156.645985][ T6495] hub_event+0x2a49/0x4f60 [ 156.646007][ T6495] process_one_work+0x9a3/0x1710 [ 156.646025][ T6495] worker_thread+0xba8/0x11e0 [ 156.646044][ T6495] kthread+0x388/0x470 [ 156.646064][ T6495] ret_from_fork+0x514/0xb70 [ 156.646082][ T6495] ret_from_fork_asm+0x1a/0x30 [ 156.646104][ T6495] [ 156.646109][ T6495] The buggy address belongs to the object at ffff888025619f40 [ 156.646109][ T6495] which belongs to the cache kmalloc-8 of size 8 [ 156.646124][ T6495] The buggy address is located 0 bytes inside of [ 156.646124][ T6495] freed 8-byte region [ffff888025619f40, ffff888025619f48) [ 156.646141][ T6495] [ 156.646146][ T6495] The buggy address belongs to the physical page: [ 156.646165][ T6495] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025619ec0 pfn:0x25619 [ 156.646187][ T6495] flags: 0x80000000000200(workingset|node=0|zone=1) [ 156.646215][ T6495] page_type: f5(slab) [ 156.646232][ T6495] raw: 0080000000000200 ffff88813fe18500 ffffea0000ce7ed0 ffffea000095a890 [ 156.646247][ T6495] raw: ffff888025619ec0 000000080080007d 00000000f5000000 0000000000000000 [ 156.646256][ T6495] page dumped because: kasan: bad access detected [ 156.646269][ T6495] page_owner tracks the page as allocated [ 156.646276][ T6495] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10, tgid 10 (kworker/0:1), ts 12827494800, free_ts 5034338554 [ 156.646307][ T6495] post_alloc_hook+0x22d/0x280 [ 156.646331][ T6495] get_page_from_freelist+0x27d6/0x2850 [ 156.646350][ T6495] __alloc_frozen_pages_noprof+0x18d/0x380 [ 156.646368][ T6495] allocate_slab+0x77/0x660 [ 156.646387][ T6495] refill_objects+0x33c/0x3d0 [ 156.646406][ T6495] __pcs_replace_empty_main+0x373/0x720 [ 156.646428][ T6495] __kmalloc_cache_noprof+0x44e/0x690 [ 156.646444][ T6495] usb_control_msg+0x73/0x3e0 [ 156.646464][ T6495] hub_ext_port_status+0x116/0x820 [ 156.646482][ T6495] hub_activate+0x6eb/0x1a80 [ 156.646505][ T6495] process_one_work+0x9a3/0x1710 [ 156.646523][ T6495] worker_thread+0xba8/0x11e0 [ 156.646541][ T6495] kthread+0x388/0x470 [ 156.646562][ T6495] ret_from_fork+0x514/0xb70 [ 156.646580][ T6495] ret_from_fork_asm+0x1a/0x30 [ 156.646600][ T6495] page last free pid 10 tgid 10 stack trace: [ 156.646610][ T6495] __free_frozen_pages+0xf9b/0x10f0 [ 156.646626][ T6495] vfree+0x251/0x3b0 [ 156.646648][ T6495] delayed_vfree_work+0x55/0x80 [ 156.646664][ T6495] process_one_work+0x9a3/0x1710 [ 156.646682][ T6495] worker_thread+0xba8/0x11e0 [ 156.646700][ T6495] kthread+0x388/0x470 [ 156.646722][ T6495] ret_from_fork+0x514/0xb70 [ 156.646741][ T6495] ret_from_fork_asm+0x1a/0x30 [ 156.646762][ T6495] [ 156.646767][ T6495] Memory state around the buggy address: [ 156.646775][ T6495] ffff888025619e00: fa fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 156.646787][ T6495] ffff888025619e80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 156.646799][ T6495] >ffff888025619f00: fa fc fc fc 06 fc fc fc fa fc fc fc 00 fc fc fc [ 156.646808][ T6495] ^ [ 156.646816][ T6495] ffff888025619f80: 07 fc fc fc 07 fc fc fc 07 fc fc fc 07 fc fc fc [ 156.646827][ T6495] ffff88802561a000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 156.646835][ T6495] ================================================================== [ 156.646847][ T6495] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.646866][ T6495] CPU: 0 UID: 0 PID: 6495 Comm: syz.4.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 156.646886][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.646896][ T6495] Call Trace: [ 156.646904][ T6495] [ 156.646911][ T6495] vpanic+0x56c/0xa60 [ 156.646937][ T6495] ? __pfx_vpanic+0x10/0x10 [ 156.646962][ T6495] panic+0xc5/0xd0 [ 156.646983][ T6495] ? __pfx_panic+0x10/0x10 [ 156.647005][ T6495] ? _raw_spin_lock_irqsave+0x40/0x60 [ 156.647030][ T6495] ? rcu_is_watching+0x15/0xb0 [ 156.647049][ T6495] ? _raw_spin_lock_irqsave+0x40/0x60 [ 156.647076][ T6495] ? _raw_spin_lock_irqsave+0x40/0x60 [ 156.647101][ T6495] check_panic_on_warn+0x89/0xb0 [ 156.647127][ T6495] ? _raw_spin_lock_irqsave+0x40/0x60 [ 156.647153][ T6495] end_report+0x73/0x170 [ 156.647170][ T6495] ? _raw_spin_lock_irqsave+0x40/0x60 [ 156.647202][ T6495] kasan_report+0x128/0x150 [ 156.647219][ T6495] ? __lock_acquire+0x6b5/0x2cf0 [ 156.647244][ T6495] ? _raw_spin_lock_irqsave+0x40/0x60 [ 156.647274][ T6495] ? rt_spin_lock+0x157/0x400 [ 156.647295][ T6495] __kasan_check_byte+0x2a/0x40 [ 156.647313][ T6495] lock_acquire+0x84/0x350 [ 156.647340][ T6495] ? rcu_is_watching+0x15/0xb0 [ 156.647359][ T6495] _raw_spin_lock_irqsave+0x40/0x60 [ 156.647383][ T6495] ? rt_spin_lock+0x157/0x400 [ 156.647404][ T6495] rt_spin_lock+0x157/0x400 [ 156.647427][ T6495] ? __pfx_rt_spin_lock+0x10/0x10 [ 156.647450][ T6495] ? lockdep_hardirqs_on+0x7a/0x110 [ 156.647476][ T6495] ? rwbase_write_lock+0x568/0x730 [ 156.647497][ T6495] __pm_runtime_resume+0x10f/0x170 [ 156.647523][ T6495] usb_autopm_get_interface+0x20/0xf0 [ 156.647543][ T6495] hidraw_open+0x24d/0x8a0 [ 156.647572][ T6495] chrdev_open+0x4d0/0x5f0 [ 156.647593][ T6495] ? __pfx_chrdev_open+0x10/0x10 [ 156.647614][ T6495] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 156.647635][ T6495] ? __pfx_chrdev_open+0x10/0x10 [ 156.647656][ T6495] do_dentry_open+0x83d/0x13e0 [ 156.647682][ T6495] vfs_open+0x3b/0x350 [ 156.647703][ T6495] ? path_openat+0x2e2b/0x38a0 [ 156.647722][ T6495] path_openat+0x2e43/0x38a0 [ 156.647754][ T6495] ? __pfx_path_openat+0x10/0x10 [ 156.647773][ T6495] ? kasan_save_track+0x4f/0x80 [ 156.647797][ T6495] ? kasan_save_track+0x3e/0x80 [ 156.647821][ T6495] ? __kasan_slab_alloc+0x6c/0x80 [ 156.647836][ T6495] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 156.647865][ T6495] ? do_raw_spin_lock+0x12b/0x2f0 [ 156.647891][ T6495] do_file_open+0x23e/0x4a0 [ 156.647908][ T6495] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 156.647937][ T6495] ? __pfx_do_file_open+0x10/0x10 [ 156.647952][ T6495] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 156.647984][ T6495] ? alloc_fd+0x64e/0x6c0 [ 156.648011][ T6495] do_sys_openat2+0x113/0x200 [ 156.648034][ T6495] ? __se_sys_futex+0x3a8/0x450 [ 156.648053][ T6495] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.648079][ T6495] ? rcu_is_watching+0x15/0xb0 [ 156.648099][ T6495] __x64_sys_openat+0x138/0x170 [ 156.648124][ T6495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.648142][ T6495] do_syscall_64+0x15f/0xf80 [ 156.648158][ T6495] ? trace_irq_disable+0x3b/0x140 [ 156.648181][ T6495] ? clear_bhb_loop+0x40/0x90 [ 156.648208][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.648226][ T6495] RIP: 0033:0x7fc684ded60e [ 156.648242][ T6495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.648256][ T6495] RSP: 002b:00007fc684485b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 156.648275][ T6495] RAX: ffffffffffffffda RBX: 00007fc6844866c0 RCX: 00007fc684ded60e [ 156.648289][ T6495] RDX: 0000000000000002 RSI: 00007fc684485c00 RDI: ffffffffffffff9c [ 156.648302][ T6495] RBP: 00007fc684485c00 R08: 0000000000000000 R09: 0000000000000000 [ 156.648313][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 156.648326][ T6495] R13: 00007fc6850a6038 R14: 00007fc6850a5fa0 R15: 00007ffda357f558 [ 156.648345][ T6495] [ 156.648929][ T6495] Kernel Offset: disabled