Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. 2026/04/28 11:58:55 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 126.990449][ T6059] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 132.842235][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.842365][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.942460][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.942764][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.943035][ T6067] bridge_slave_0: entered allmulticast mode [ 132.964941][ T6067] bridge_slave_0: entered promiscuous mode [ 132.992661][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.025739][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.026753][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.044591][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.060956][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.130117][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.130414][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.130690][ T6067] bridge_slave_1: entered allmulticast mode [ 133.133885][ T6067] bridge_slave_1: entered promiscuous mode [ 133.306670][ T6067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.354132][ T6067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.520595][ T6067] team0: Port device team_slave_0 added [ 133.555668][ T6067] team0: Port device team_slave_1 added [ 133.662798][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.662808][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.662822][ T6067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.725929][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.725945][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.725968][ T6067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.226366][ T6067] hsr_slave_0: entered promiscuous mode [ 134.227642][ T6067] hsr_slave_1: entered promiscuous mode [ 134.331264][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.331291][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.844809][ T1510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.844827][ T1510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.405683][ T6067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.458956][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.468848][ T6067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.526623][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.527633][ T6067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.571837][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.572850][ T6067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.620582][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.851220][ T6067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.891290][ T6067] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.913325][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.913451][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.941401][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.941533][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.358470][ T6067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.435255][ T6067] veth0_vlan: entered promiscuous mode [ 136.461057][ T6067] veth1_vlan: entered promiscuous mode [ 136.521514][ T6067] veth0_macvtap: entered promiscuous mode [ 136.533656][ T6067] veth1_macvtap: entered promiscuous mode [ 136.570372][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.584381][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.603752][ T1076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.603990][ T1076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.604021][ T1076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.604052][ T1076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/28 11:59:09 executed programs: 0 [ 137.118559][ T4924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.138947][ T4924] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.145098][ T4924] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.155035][ T4924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.160468][ T4924] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.395182][ T4924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.415088][ T4924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.418317][ T4924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.447818][ T4924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.448547][ T4924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.504597][ T5701] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.525648][ T5701] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.527833][ T5701] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.534299][ T5701] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.538817][ T5701] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.676956][ T5701] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.697993][ T5701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.743775][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.747124][ T5701] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.752441][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.754831][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.774221][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.774889][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.785708][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.807753][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.146257][ T1510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.233482][ T60] Bluetooth: hci1: command tx timeout [ 139.709655][ T60] Bluetooth: hci0: command tx timeout [ 139.710084][ T60] Bluetooth: hci2: command tx timeout [ 139.813267][ T1510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.871721][ T60] Bluetooth: hci3: command tx timeout [ 139.879949][ T60] Bluetooth: hci4: command tx timeout [ 140.123072][ T1510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.441483][ T1510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.191707][ T6184] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.192203][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.192459][ T6184] bridge_slave_0: entered allmulticast mode [ 141.194930][ T6184] bridge_slave_0: entered promiscuous mode [ 141.287149][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.287361][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.287709][ T6184] bridge_slave_1: entered allmulticast mode [ 141.290149][ T6184] bridge_slave_1: entered promiscuous mode [ 141.309264][ T60] Bluetooth: hci1: command tx timeout [ 141.350647][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.350897][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.351053][ T6174] bridge_slave_0: entered allmulticast mode [ 141.352904][ T6174] bridge_slave_0: entered promiscuous mode [ 141.389664][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.389948][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.390213][ T6183] bridge_slave_0: entered allmulticast mode [ 141.392597][ T6183] bridge_slave_0: entered promiscuous mode [ 141.434364][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.434553][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.434715][ T6174] bridge_slave_1: entered allmulticast mode [ 141.437197][ T6174] bridge_slave_1: entered promiscuous mode [ 141.494745][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.495025][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.495647][ T6183] bridge_slave_1: entered allmulticast mode [ 141.497474][ T6183] bridge_slave_1: entered promiscuous mode [ 141.527042][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.527287][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.527478][ T6178] bridge_slave_0: entered allmulticast mode [ 141.534710][ T6178] bridge_slave_0: entered promiscuous mode [ 141.565919][ T6184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.594728][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.594925][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.595088][ T6178] bridge_slave_1: entered allmulticast mode [ 141.596864][ T6178] bridge_slave_1: entered promiscuous mode [ 141.639539][ T6184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.789613][ T60] Bluetooth: hci2: command tx timeout [ 141.789647][ T60] Bluetooth: hci0: command tx timeout [ 141.950982][ T60] Bluetooth: hci3: command tx timeout [ 141.951028][ T4924] Bluetooth: hci4: command tx timeout [ 141.960156][ T1510] bridge_slave_1: left allmulticast mode [ 141.960186][ T1510] bridge_slave_1: left promiscuous mode [ 141.960468][ T1510] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.020383][ T1510] bridge_slave_0: left allmulticast mode [ 142.020406][ T1510] bridge_slave_0: left promiscuous mode [ 142.020582][ T1510] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.820077][ T1510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.879844][ T1510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.921587][ T1510] bond0 (unregistering): Released all slaves [ 142.968197][ T6174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.991093][ T6183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.065359][ T6174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.103123][ T6183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.103464][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.103745][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.103991][ T6175] bridge_slave_0: entered allmulticast mode [ 143.106940][ T6175] bridge_slave_0: entered promiscuous mode [ 143.156056][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.215218][ T6184] team0: Port device team_slave_0 added [ 143.280709][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.281040][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.281303][ T6175] bridge_slave_1: entered allmulticast mode [ 143.286540][ T6175] bridge_slave_1: entered promiscuous mode [ 143.295321][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.351344][ T6184] team0: Port device team_slave_1 added [ 143.389334][ T60] Bluetooth: hci1: command tx timeout [ 143.456308][ T6174] team0: Port device team_slave_0 added [ 143.491337][ T6183] team0: Port device team_slave_0 added [ 143.533211][ T6174] team0: Port device team_slave_1 added [ 143.570574][ T6183] team0: Port device team_slave_1 added [ 143.588568][ T6175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.613668][ T6178] team0: Port device team_slave_0 added [ 143.656638][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.656648][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.656662][ T6184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.693425][ T6175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.697656][ T6178] team0: Port device team_slave_1 added [ 143.869603][ T60] Bluetooth: hci0: command tx timeout [ 143.882184][ T60] Bluetooth: hci2: command tx timeout [ 144.029552][ T60] Bluetooth: hci3: command tx timeout [ 144.042501][ T60] Bluetooth: hci4: command tx timeout [ 144.056042][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.056058][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.056082][ T6184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.343479][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.343490][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.343504][ T6174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.443990][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.444005][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.444022][ T6183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.497019][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.497032][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.497051][ T6174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.512759][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.512774][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.512797][ T6183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.522293][ T6175] team0: Port device team_slave_0 added [ 144.527456][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.527470][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.527492][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.566880][ T6175] team0: Port device team_slave_1 added [ 144.568847][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.568858][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.568881][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.042103][ T6184] hsr_slave_0: entered promiscuous mode [ 145.043349][ T6184] hsr_slave_1: entered promiscuous mode [ 145.044326][ T6184] debugfs: 'hsr0' already exists in 'hsr' [ 145.044348][ T6184] Cannot create hsr debugfs directory [ 145.128002][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.128018][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.128040][ T6175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.332264][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.332278][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.332300][ T6175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.390380][ T6174] hsr_slave_0: entered promiscuous mode [ 145.392547][ T6174] hsr_slave_1: entered promiscuous mode [ 145.394337][ T6174] debugfs: 'hsr0' already exists in 'hsr' [ 145.394359][ T6174] Cannot create hsr debugfs directory [ 145.433634][ T6183] hsr_slave_0: entered promiscuous mode [ 145.435745][ T6183] hsr_slave_1: entered promiscuous mode [ 145.437462][ T6183] debugfs: 'hsr0' already exists in 'hsr' [ 145.437484][ T6183] Cannot create hsr debugfs directory [ 145.469321][ T60] Bluetooth: hci1: command tx timeout [ 145.554563][ T6178] hsr_slave_0: entered promiscuous mode [ 145.556666][ T6178] hsr_slave_1: entered promiscuous mode [ 145.558414][ T6178] debugfs: 'hsr0' already exists in 'hsr' [ 145.558437][ T6178] Cannot create hsr debugfs directory [ 145.851040][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 145.873353][ T6175] hsr_slave_0: entered promiscuous mode [ 145.875119][ T6175] hsr_slave_1: entered promiscuous mode [ 145.876885][ T6175] debugfs: 'hsr0' already exists in 'hsr' [ 145.876906][ T6175] Cannot create hsr debugfs directory [ 145.949651][ T60] Bluetooth: hci2: command tx timeout [ 145.949679][ T60] Bluetooth: hci0: command tx timeout [ 146.039391][ T1510] hsr_slave_0: left promiscuous mode [ 146.079353][ T1510] hsr_slave_1: left promiscuous mode [ 146.080067][ T1510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.080083][ T1510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.100501][ T1510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.100527][ T1510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.109639][ T4924] Bluetooth: hci4: command tx timeout [ 146.109663][ T4924] Bluetooth: hci3: command tx timeout [ 146.191176][ T1510] veth1_macvtap: left promiscuous mode [ 146.191276][ T1510] veth0_macvtap: left promiscuous mode [ 146.191563][ T1510] veth1_vlan: left promiscuous mode [ 146.191741][ T1510] veth0_vlan: left promiscuous mode [ 146.901965][ T1510] team0 (unregistering): Port device team_slave_1 removed [ 146.949915][ T1510] team0 (unregistering): Port device team_slave_0 removed [ 148.405100][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 148.977621][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 149.430630][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 151.994217][ T6184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.034719][ T6184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.049605][ T6184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.093916][ T6184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.100033][ T6184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.143290][ T6184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.199374][ T6184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.237533][ T6184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.430105][ T6174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.501236][ T6174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.506674][ T6174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.537299][ T6174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.559353][ T6174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.599900][ T6174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.612959][ T6174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.655909][ T6174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.996994][ T6183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 153.034070][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.065589][ T6183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.102639][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.119846][ T6183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.166789][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.188840][ T6183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.232794][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.540567][ T6178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.584640][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.596430][ T6184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.605134][ T6178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.647490][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.661420][ T6178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.704782][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.751488][ T6178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.801991][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.084676][ T6184] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.162342][ T6175] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 154.194696][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.216637][ T6175] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 154.258023][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.302147][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.302373][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.333373][ T6175] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.364770][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.388718][ T6174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.408721][ T6175] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 154.447431][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.491033][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.491278][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.727163][ T6174] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.815640][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.815777][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.886533][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.886652][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.940681][ T6183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.190482][ T6183] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.254428][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.265779][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.387662][ T6178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.398361][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.398591][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.601922][ T6178] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.629416][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.726933][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.727023][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.820136][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.820544][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.903880][ T6175] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.025448][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.025686][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.156038][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.156201][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.430931][ T6184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.877537][ T6174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.538748][ T6174] veth0_vlan: entered promiscuous mode [ 157.633392][ T6174] veth1_vlan: entered promiscuous mode [ 157.815777][ T6183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.873056][ T6184] veth0_vlan: entered promiscuous mode [ 157.990374][ T6184] veth1_vlan: entered promiscuous mode [ 158.096085][ T6178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.126099][ T6174] veth0_macvtap: entered promiscuous mode [ 158.232551][ T6174] veth1_macvtap: entered promiscuous mode [ 158.392282][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.392710][ T6183] veth0_vlan: entered promiscuous mode [ 158.407902][ T6184] veth0_macvtap: entered promiscuous mode [ 158.427552][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.474556][ T6184] veth1_macvtap: entered promiscuous mode [ 158.490151][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.493423][ T6183] veth1_vlan: entered promiscuous mode [ 158.594376][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.605505][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.615412][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.630583][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.688640][ T6184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.758214][ T6178] veth0_vlan: entered promiscuous mode [ 158.830854][ T6184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.058740][ T6178] veth1_vlan: entered promiscuous mode [ 159.064904][ T65] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.197001][ T1076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.231358][ T1076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.265153][ T1076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.284513][ T6183] veth0_macvtap: entered promiscuous mode [ 159.294346][ T6175] veth0_vlan: entered promiscuous mode [ 159.411119][ T6183] veth1_macvtap: entered promiscuous mode [ 159.438046][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.438064][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.534939][ T6175] veth1_vlan: entered promiscuous mode [ 159.918607][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.947428][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.947446][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.026972][ T6178] veth0_macvtap: entered promiscuous mode [ 160.052081][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.083124][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.083143][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.122420][ T6178] veth1_macvtap: entered promiscuous mode 2026/04/28 11:59:32 executed programs: 10 [ 160.156116][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.174002][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.180832][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.192762][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.311510][ T6175] veth0_macvtap: entered promiscuous mode [ 160.426718][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.426738][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.463723][ T6175] veth1_macvtap: entered promiscuous mode [ 160.602121][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.801386][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.027759][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 161.114502][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.122454][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.169055][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.203034][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.216133][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.227705][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.255506][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.255525][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.279308][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 161.318124][ T32] usb 1-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 161.318151][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.318183][ T32] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 161.318202][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.397625][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 161.435692][ T32] usb 1-1: config 0 descriptor?? [ 161.487507][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.492720][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.494413][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.507668][ T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.649255][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 161.663935][ T9] usb 5-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 161.663966][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 161.663995][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 161.664014][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.916124][ T9] usb 5-1: config 0 descriptor?? [ 162.343891][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.343911][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.628768][ T32] corsair-psu 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 162.823537][ T32] corsair-psu 0003:1B1C:1C09.0001: unable to initialize device (-38) [ 162.894950][ T32] corsair-psu 0003:1B1C:1C09.0001: probe with driver corsair-psu failed with error -38 [ 163.080672][ T9] corsair-psu 0003:1B1C:1C09.0002: hidraw1: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 163.139354][ T9] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-38) [ 163.139839][ T9] corsair-psu 0003:1B1C:1C09.0002: probe with driver corsair-psu failed with error -38 [ 163.262747][ T32] usb 1-1: USB disconnect, device number 2 [ 163.265447][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.265466][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.567415][ T9] usb 5-1: USB disconnect, device number 2 [ 163.772377][ T821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 163.947049][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 163.969050][ T821] usb 4-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 163.969072][ T821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.969098][ T821] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 163.969113][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.092717][ T1463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.092736][ T1463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.141288][ T821] usb 4-1: config 0 descriptor?? [ 164.541005][ T32] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 164.661101][ T821] corsair-psu 0003:1B1C:1C09.0003: hidraw2: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 164.686285][ T1510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.686303][ T1510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.719425][ T821] corsair-psu 0003:1B1C:1C09.0003: unable to initialize device (-38) [ 164.722492][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 164.743212][ T32] usb 1-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 164.743238][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.743270][ T32] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 164.743290][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.746719][ T821] corsair-psu 0003:1B1C:1C09.0003: probe with driver corsair-psu failed with error -38 [ 164.792757][ T6670] =========================================================[ 164.792757][ T6670] ================================================================== [ 164.792772][ T6670] BUG: KASAN: slab-use-after-free in usbhid_power+0x56/0x170 [ 164.792802][ T6670] Read of size 8 at addr ffff88805a2e6988 by task syz.3.20/6670 [ 164.792817][ T6670] [ 164.792841][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.792861][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.792879][ T6670] Call Trace: [ 164.792886][ T6670] [ 164.792893][ T6670] dump_stack_lvl+0xe8/0x150 [ 164.792916][ T6670] print_address_description+0x55/0x1e0 [ 164.792939][ T6670] ? usbhid_power+0x56/0x170 [ 164.792961][ T6670] print_report+0x58/0x70 [ 164.792980][ T6670] kasan_report+0x117/0x150 [ 164.792998][ T6670] ? usbhid_power+0x56/0x170 [ 164.793024][ T6670] kasan_check_range+0x264/0x2c0 [ 164.793044][ T6670] usbhid_power+0x56/0x170 [ 164.793068][ T6670] hidraw_open+0x24d/0x8a0 [ 164.793094][ T6670] chrdev_open+0x4d0/0x5f0 [ 164.793116][ T6670] ? __pfx_chrdev_open+0x10/0x10 [ 164.793136][ T6670] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 164.793156][ T6670] ? __pfx_chrdev_open+0x10/0x10 [ 164.793175][ T6670] do_dentry_open+0x83d/0x13e0 [ 164.793202][ T6670] vfs_open+0x3b/0x350 [ 164.793225][ T6670] ? path_openat+0x2e2b/0x38a0 [ 164.793243][ T6670] path_openat+0x2e43/0x38a0 [ 164.793274][ T6670] ? __pfx_path_openat+0x10/0x10 [ 164.793291][ T6670] ? kasan_save_track+0x4f/0x80 [ 164.793314][ T6670] ? kasan_save_track+0x3e/0x80 [ 164.793337][ T6670] ? __kasan_slab_alloc+0x6c/0x80 [ 164.793350][ T6670] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 164.793378][ T6670] ? do_raw_spin_lock+0x12b/0x2f0 [ 164.793403][ T6670] do_file_open+0x23e/0x4a0 [ 164.793418][ T6670] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.793446][ T6670] ? __pfx_do_file_open+0x10/0x10 [ 164.793461][ T6670] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 164.793492][ T6670] ? alloc_fd+0x64e/0x6c0 [ 164.793518][ T6670] do_sys_openat2+0x113/0x200 [ 164.793549][ T6670] ? __se_sys_futex+0x3a8/0x450 [ 164.793566][ T6670] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.793591][ T6670] ? rcu_is_watching+0x15/0xb0 [ 164.793610][ T6670] __x64_sys_openat+0x138/0x170 [ 164.793634][ T6670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.793652][ T6670] do_syscall_64+0x15f/0xf80 [ 164.793668][ T6670] ? trace_irq_disable+0x3b/0x140 [ 164.793689][ T6670] ? clear_bhb_loop+0x40/0x90 [ 164.793709][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.793734][ T6670] RIP: 0033:0x7f6b2f1ad60e [ 164.793758][ T6670] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.793772][ T6670] RSP: 002b:00007f6b2e84db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.793799][ T6670] RAX: ffffffffffffffda RBX: 00007f6b2e84e6c0 RCX: 00007f6b2f1ad60e [ 164.793812][ T6670] RDX: 0000000000000002 RSI: 00007f6b2e84dc00 RDI: ffffffffffffff9c [ 164.793825][ T6670] RBP: 00007f6b2e84dc00 R08: 0000000000000000 R09: 0000000000000000 [ 164.793836][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 164.793848][ T6670] R13: 00007f6b2f466038 R14: 00007f6b2f465fa0 R15: 00007fff63a84eb8 [ 164.793868][ T6670] [ 164.793874][ T6670] [ 164.793878][ T6670] Allocated by task 16: [ 164.793886][ T6670] kasan_save_track+0x3e/0x80 [ 164.793909][ T6670] __kasan_slab_alloc+0x6c/0x80 [ 164.793922][ T6670] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 164.793946][ T6670] __alloc_skb+0x27d/0x7d0 [ 164.793965][ T6670] skb_copy+0x188/0x800 [ 164.793978][ T6670] mac80211_hwsim_tx_frame_no_nl+0xe82/0x1650 [ 164.793998][ T6670] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 164.794016][ T6670] mac80211_hwsim_beacon_tx+0x3e8/0x870 [ 164.794034][ T6670] __iterate_interfaces+0x2ab/0x590 [ 164.794058][ T6670] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 164.794082][ T6670] mac80211_hwsim_beacon+0xbb/0x180 [ 164.794106][ T6670] __hrtimer_run_queues+0x405/0xb10 [ 164.794122][ T6670] hrtimer_run_softirq+0x18f/0x260 [ 164.794140][ T6670] handle_softirqs+0x1de/0x6d0 [ 164.794158][ T6670] run_ktimerd+0x69/0x100 [ 164.794178][ T6670] smpboot_thread_fn+0x541/0xa50 [ 164.794198][ T6670] kthread+0x388/0x470 [ 164.794220][ T6670] ret_from_fork+0x514/0xb70 [ 164.794238][ T6670] ret_from_fork_asm+0x1a/0x30 [ 164.794258][ T6670] [ 164.794263][ T6670] Freed by task 1510: [ 164.794270][ T6670] kasan_save_track+0x3e/0x80 [ 164.794291][ T6670] kasan_save_free_info+0x46/0x50 [ 164.794310][ T6670] __kasan_slab_free+0x5c/0x80 [ 164.794323][ T6670] kfree+0x1c5/0x6c0 [ 164.794343][ T6670] skb_release_data+0x828/0xa60 [ 164.794366][ T6670] __kfree_skb+0x5d/0x210 [ 164.794388][ T6670] ieee80211_iface_work+0xbdb/0x1390 [ 164.794406][ T6670] cfg80211_wiphy_work+0x2cf/0x460 [ 164.794430][ T6670] process_one_work+0x9a3/0x1710 [ 164.794446][ T6670] worker_thread+0xba8/0x11e0 [ 164.794465][ T6670] kthread+0x388/0x470 [ 164.794486][ T6670] ret_from_fork+0x514/0xb70 [ 164.794504][ T6670] ret_from_fork_asm+0x1a/0x30 [ 164.794524][ T6670] [ 164.794528][ T6670] The buggy address belongs to the object at ffff88805a2e6700 [ 164.794528][ T6670] which belongs to the cache skbuff_small_head of size 704 [ 164.794549][ T6670] The buggy address is located 648 bytes inside of [ 164.794549][ T6670] freed 704-byte region [ffff88805a2e6700, ffff88805a2e69c0) [ 164.794567][ T6670] [ 164.794571][ T6670] The buggy address belongs to the physical page: [ 164.794589][ T6670] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a2e4 [ 164.794609][ T6670] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 164.794623][ T6670] flags: 0x80000000000040(head|node=0|zone=1) [ 164.794643][ T6670] page_type: f5(slab) [ 164.794659][ T6670] raw: 0080000000000040 ffff88801dac5c80 dead000000000100 dead000000000122 [ 164.794673][ T6670] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 164.794688][ T6670] head: 0080000000000040 ffff88801dac5c80 dead000000000100 dead000000000122 [ 164.794703][ T6670] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 164.794718][ T6670] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 164.794732][ T6670] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 164.794741][ T6670] page dumped because: kasan: bad access detected [ 164.794753][ T6670] page_owner tracks the page as allocated [ 164.794759][ T6670] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6675, tgid 6675 (udevd), ts 163875825764, free_ts 163818248807 [ 164.794788][ T6670] post_alloc_hook+0x22d/0x280 [ 164.794812][ T6670] get_page_from_freelist+0x27d6/0x2850 [ 164.794830][ T6670] __alloc_frozen_pages_noprof+0x18d/0x380 [ 164.794847][ T6670] allocate_slab+0x77/0x660 [ 164.794866][ T6670] refill_objects+0x33c/0x3d0 [ 164.794883][ T6670] __pcs_replace_empty_main+0x373/0x720 [ 164.794903][ T6670] kmem_cache_alloc_node_noprof+0x4f4/0x6e0 [ 164.794927][ T6670] __alloc_skb+0x27d/0x7d0 [ 164.794946][ T6670] netlink_sendmsg+0x5d4/0xb40 [ 164.794968][ T6670] sock_sendmsg_nosec+0x112/0x150 [ 164.794986][ T6670] ____sys_sendmsg+0x55c/0x870 [ 164.794999][ T6670] ___sys_sendmsg+0x2a5/0x360 [ 164.795012][ T6670] __x64_sys_sendmsg+0x1c3/0x2a0 [ 164.795026][ T6670] do_syscall_64+0x15f/0xf80 [ 164.795039][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.795055][ T6670] page last free pid 32 tgid 32 stack trace: [ 164.795065][ T6670] __free_frozen_pages+0xf9b/0x10f0 [ 164.795079][ T6670] usb_unbind_interface+0x26e/0x910 [ 164.795103][ T6670] device_release_driver_internal+0x4d9/0x870 [ 164.795119][ T6670] bus_remove_device+0x45a/0x570 [ 164.795137][ T6670] device_del+0x52b/0x900 [ 164.795159][ T6670] usb_disable_device+0x3d4/0x8d0 [ 164.795179][ T6670] usb_disconnect+0x315/0x970 [ 164.795198][ T6670] hub_event+0x1cf9/0x4f60 [ 164.795217][ T6670] process_one_work+0x9a3/0x1710 [ 164.795234][ T6670] worker_thread+0xbee/0x11e0 [ 164.795252][ T6670] kthread+0x388/0x470 [ 164.795273][ T6670] ret_from_fork+0x514/0xb70 [ 164.795291][ T6670] ret_from_fork_asm+0x1a/0x30 [ 164.795312][ T6670] [ 164.795316][ T6670] Memory state around the buggy address: [ 164.795324][ T6670] ffff88805a2e6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.795335][ T6670] ffff88805a2e6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.795347][ T6670] >ffff88805a2e6980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 164.795355][ T6670] ^ [ 164.795364][ T6670] ffff88805a2e6a00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 164.795375][ T6670] ffff88805a2e6a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.795384][ T6670] ================================================================== [ 164.799424][ T6670] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 164.799452][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.799474][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.799484][ T6670] Call Trace: [ 164.799491][ T6670] [ 164.799499][ T6670] vpanic+0x56c/0xa60 [ 164.799527][ T6670] ? __pfx_vpanic+0x10/0x10 [ 164.799561][ T6670] ? __pfx___schedule+0x10/0x10 [ 164.799588][ T6670] panic+0xc5/0xd0 [ 164.799609][ T6670] ? __pfx_panic+0x10/0x10 [ 164.799632][ T6670] ? preempt_schedule_thunk+0x16/0x30 [ 164.799654][ T6670] ? usbhid_power+0x56/0x170 [ 164.799676][ T6670] check_panic_on_warn+0x89/0xb0 [ 164.799708][ T6670] ? usbhid_power+0x56/0x170 [ 164.799730][ T6670] end_report+0x73/0x170 [ 164.799748][ T6670] ? usbhid_power+0x56/0x170 [ 164.799769][ T6670] kasan_report+0x128/0x150 [ 164.799786][ T6670] ? usbhid_power+0x56/0x170 [ 164.799813][ T6670] kasan_check_range+0x264/0x2c0 [ 164.799832][ T6670] usbhid_power+0x56/0x170 [ 164.799856][ T6670] hidraw_open+0x24d/0x8a0 [ 164.799883][ T6670] chrdev_open+0x4d0/0x5f0 [ 164.799904][ T6670] ? __pfx_chrdev_open+0x10/0x10 [ 164.799924][ T6670] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 164.799944][ T6670] ? __pfx_chrdev_open+0x10/0x10 [ 164.799963][ T6670] do_dentry_open+0x83d/0x13e0 [ 164.799990][ T6670] vfs_open+0x3b/0x350 [ 164.800009][ T6670] ? path_openat+0x2e2b/0x38a0 [ 164.800028][ T6670] path_openat+0x2e43/0x38a0 [ 164.800058][ T6670] ? __pfx_path_openat+0x10/0x10 [ 164.800077][ T6670] ? kasan_save_track+0x4f/0x80 [ 164.800100][ T6670] ? kasan_save_track+0x3e/0x80 [ 164.800122][ T6670] ? __kasan_slab_alloc+0x6c/0x80 [ 164.800137][ T6670] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 164.800166][ T6670] ? do_raw_spin_lock+0x12b/0x2f0 [ 164.800191][ T6670] do_file_open+0x23e/0x4a0 [ 164.800207][ T6670] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.800234][ T6670] ? __pfx_do_file_open+0x10/0x10 [ 164.800250][ T6670] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 164.800280][ T6670] ? alloc_fd+0x64e/0x6c0 [ 164.800306][ T6670] do_sys_openat2+0x113/0x200 [ 164.800328][ T6670] ? __se_sys_futex+0x3a8/0x450 [ 164.800346][ T6670] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.800370][ T6670] ? rcu_is_watching+0x15/0xb0 [ 164.800390][ T6670] __x64_sys_openat+0x138/0x170 [ 164.800413][ T6670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.800431][ T6670] do_syscall_64+0x15f/0xf80 [ 164.800447][ T6670] ? trace_irq_disable+0x3b/0x140 [ 164.800468][ T6670] ? clear_bhb_loop+0x40/0x90 [ 164.800487][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.800505][ T6670] RIP: 0033:0x7f6b2f1ad60e [ 164.800521][ T6670] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.800542][ T6670] RSP: 002b:00007f6b2e84db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.800561][ T6670] RAX: ffffffffffffffda RBX: 00007f6b2e84e6c0 RCX: 00007f6b2f1ad60e [ 164.800574][ T6670] RDX: 0000000000000002 RSI: 00007f6b2e84dc00 RDI: ffffffffffffff9c [ 164.800587][ T6670] RBP: 00007f6b2e84dc00 R08: 0000000000000000 R09: 0000000000000000 [ 164.800598][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 164.800610][ T6670] R13: 00007f6b2f466038 R14: 00007f6b2f465fa0 R15: 00007fff63a84eb8 [ 164.800629][ T6670] [ 164.801000][ T6670] Kernel Offset: disabled