Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. 2026/05/05 21:53:03 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 126.762430][ T6098] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 129.919817][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.927868][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.132123][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.150078][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.982677][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.993235][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.003240][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.011400][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.019670][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.326891][ T6108] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.339007][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.353483][ T6108] bridge_slave_0: entered allmulticast mode [ 132.388772][ T6108] bridge_slave_0: entered promiscuous mode [ 132.452275][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.467958][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.486104][ T6108] bridge_slave_1: entered allmulticast mode [ 132.515205][ T6108] bridge_slave_1: entered promiscuous mode [ 132.684507][ T6108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.920073][ T6108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.088265][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.097098][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.134835][ T6108] team0: Port device team_slave_0 added [ 133.165645][ T6108] team0: Port device team_slave_1 added [ 133.275590][ T6108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.293482][ T6108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.320521][ T6108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.336670][ T6108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.344857][ T6108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.371836][ T6108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.470697][ T6108] hsr_slave_0: entered promiscuous mode [ 133.478194][ T6108] hsr_slave_1: entered promiscuous mode [ 134.033496][ T50] Bluetooth: hci0: command tx timeout [ 134.277690][ T6108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.291944][ T6108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.307377][ T6108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.319960][ T6108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.329083][ T6108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.341382][ T6108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.349899][ T6108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.363769][ T6108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.470532][ T6108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.499773][ T6108] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.518268][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.525691][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.548128][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.555366][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.056774][ T6108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.113558][ T6108] veth0_vlan: entered promiscuous mode [ 135.130477][ T6108] veth1_vlan: entered promiscuous mode [ 135.176553][ T6108] veth0_macvtap: entered promiscuous mode [ 135.187460][ T6108] veth1_macvtap: entered promiscuous mode [ 135.210065][ T6108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.226778][ T6108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.245064][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.266993][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.291785][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.332489][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/05 21:53:16 executed programs: 0 [ 135.573175][ T5718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.582130][ T5718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.610419][ T4942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.618377][ T4942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.630915][ T4942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.643990][ T4942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.652340][ T4942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.680639][ T135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.681270][ T6273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.701467][ T6280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.701462][ T6273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.711665][ T6273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.724951][ T6281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.725241][ T6273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.740830][ T6273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.748363][ T6281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.762741][ T5718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.770492][ T5718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.783081][ T6283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.783259][ T6284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.794378][ T6283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.819800][ T6276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.829492][ T6276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.839408][ T6284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.853825][ T6283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.865524][ T6283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.050957][ T135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.930724][ T135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.793012][ T6283] Bluetooth: hci1: command tx timeout [ 137.793025][ T6284] Bluetooth: hci2: command tx timeout [ 137.889059][ T6283] Bluetooth: hci3: command tx timeout [ 137.962008][ T6283] Bluetooth: hci5: command tx timeout [ 137.962014][ T6284] Bluetooth: hci4: command tx timeout [ 138.163768][ T135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.405094][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.412549][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.420376][ T6282] bridge_slave_0: entered allmulticast mode [ 138.428595][ T6282] bridge_slave_0: entered promiscuous mode [ 138.539227][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.549464][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.558671][ T6282] bridge_slave_1: entered allmulticast mode [ 138.566895][ T6282] bridge_slave_1: entered promiscuous mode [ 138.576206][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.583920][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.591261][ T6270] bridge_slave_0: entered allmulticast mode [ 138.601182][ T6270] bridge_slave_0: entered promiscuous mode [ 138.630518][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.638711][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.646602][ T6268] bridge_slave_0: entered allmulticast mode [ 138.655562][ T6268] bridge_slave_0: entered promiscuous mode [ 138.719030][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.727035][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.735107][ T6270] bridge_slave_1: entered allmulticast mode [ 138.743487][ T6270] bridge_slave_1: entered promiscuous mode [ 138.767516][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.776238][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.784319][ T6268] bridge_slave_1: entered allmulticast mode [ 138.792395][ T6268] bridge_slave_1: entered promiscuous mode [ 138.938372][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.946312][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.954431][ T6278] bridge_slave_0: entered allmulticast mode [ 138.962299][ T6278] bridge_slave_0: entered promiscuous mode [ 138.972093][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.980896][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.988866][ T6275] bridge_slave_0: entered allmulticast mode [ 138.998402][ T6275] bridge_slave_0: entered promiscuous mode [ 139.011696][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.026848][ T6270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.075839][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.085655][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.093425][ T6278] bridge_slave_1: entered allmulticast mode [ 139.101328][ T6278] bridge_slave_1: entered promiscuous mode [ 139.126533][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.134211][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.141470][ T6275] bridge_slave_1: entered allmulticast mode [ 139.149889][ T6275] bridge_slave_1: entered promiscuous mode [ 139.182126][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.210524][ T6270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.227370][ T6268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.332636][ T6268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.364401][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.378974][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.392400][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.425215][ T6282] team0: Port device team_slave_0 added [ 139.442723][ T6282] team0: Port device team_slave_1 added [ 139.489385][ T135] bridge_slave_1: left allmulticast mode [ 139.495337][ T135] bridge_slave_1: left promiscuous mode [ 139.508938][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.527546][ T135] bridge_slave_0: left allmulticast mode [ 139.543385][ T135] bridge_slave_0: left promiscuous mode [ 139.550735][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.874232][ T6284] Bluetooth: hci2: command tx timeout [ 139.881149][ T6284] Bluetooth: hci1: command tx timeout [ 139.898277][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.911884][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.931231][ T135] bond0 (unregistering): Released all slaves [ 139.953242][ T6284] Bluetooth: hci3: command tx timeout [ 139.953490][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.029199][ T6270] team0: Port device team_slave_0 added [ 140.035082][ T6284] Bluetooth: hci5: command tx timeout [ 140.041467][ T6270] team0: Port device team_slave_1 added [ 140.044050][ T6268] team0: Port device team_slave_0 added [ 140.048845][ T6283] Bluetooth: hci4: command tx timeout [ 140.060768][ T6268] team0: Port device team_slave_1 added [ 140.097187][ T6275] team0: Port device team_slave_0 added [ 140.164967][ T6278] team0: Port device team_slave_0 added [ 140.172769][ T6275] team0: Port device team_slave_1 added [ 140.179977][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.187279][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.215363][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.239653][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.248710][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.279032][ T6270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.292643][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.301134][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.329740][ T6268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.343660][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.351016][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.379263][ T6268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.394673][ T6278] team0: Port device team_slave_1 added [ 140.431751][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.440544][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.467370][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.480059][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.488495][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.516546][ T6270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.534627][ T135] hsr_slave_0: left promiscuous mode [ 140.541257][ T135] hsr_slave_1: left promiscuous mode [ 140.547804][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.555587][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.565916][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.576620][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.591340][ T135] veth1_macvtap: left promiscuous mode [ 140.597987][ T135] veth0_macvtap: left promiscuous mode [ 140.604018][ T135] veth1_vlan: left promiscuous mode [ 140.610140][ T135] veth0_vlan: left promiscuous mode [ 140.899413][ T135] team0 (unregistering): Port device team_slave_1 removed [ 140.930101][ T135] team0 (unregistering): Port device team_slave_0 removed [ 141.151251][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.165819][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.202163][ T6275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.272241][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.284497][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.314233][ T6275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.406564][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.416604][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.448217][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.516911][ T6282] hsr_slave_0: entered promiscuous mode [ 141.526102][ T6282] hsr_slave_1: entered promiscuous mode [ 141.565176][ T6268] hsr_slave_0: entered promiscuous mode [ 141.572684][ T6268] hsr_slave_1: entered promiscuous mode [ 141.580466][ T6268] debugfs: 'hsr0' already exists in 'hsr' [ 141.588206][ T6268] Cannot create hsr debugfs directory [ 141.599763][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.608242][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.639500][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.724906][ T6270] hsr_slave_0: entered promiscuous mode [ 141.733203][ T6270] hsr_slave_1: entered promiscuous mode [ 141.740645][ T6270] debugfs: 'hsr0' already exists in 'hsr' [ 141.748735][ T6270] Cannot create hsr debugfs directory [ 141.850788][ T6275] hsr_slave_0: entered promiscuous mode [ 141.857769][ T6275] hsr_slave_1: entered promiscuous mode [ 141.865927][ T6275] debugfs: 'hsr0' already exists in 'hsr' [ 141.873216][ T6275] Cannot create hsr debugfs directory [ 141.953518][ T6283] Bluetooth: hci2: command tx timeout [ 141.960067][ T6284] Bluetooth: hci1: command tx timeout [ 142.021777][ T6278] hsr_slave_0: entered promiscuous mode [ 142.029138][ T6278] hsr_slave_1: entered promiscuous mode [ 142.036717][ T6278] debugfs: 'hsr0' already exists in 'hsr' [ 142.042667][ T6278] Cannot create hsr debugfs directory [ 142.043560][ T6284] Bluetooth: hci3: command tx timeout [ 142.113159][ T6284] Bluetooth: hci5: command tx timeout [ 142.113365][ T6283] Bluetooth: hci4: command tx timeout [ 142.801397][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 143.014812][ T6282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.035756][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.044624][ T6282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.057193][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.075814][ T6282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.094297][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.118376][ T6282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.133236][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.216605][ T6268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.229746][ T6268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.280938][ T6268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.296650][ T6268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.305357][ T6268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.332472][ T6268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.352147][ T6268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 143.364769][ T6268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.425455][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 143.605176][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.660027][ T6268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.671712][ T6282] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.694905][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.703173][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.749770][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.758170][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.779091][ T6268] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.816629][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.824558][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.900858][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.908222][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.991650][ T6275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.011860][ T6275] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.035594][ T6283] Bluetooth: hci1: command tx timeout [ 144.037055][ T6284] Bluetooth: hci2: command tx timeout [ 144.051243][ T6275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.069748][ T6275] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.113098][ T6284] Bluetooth: hci3: command tx timeout [ 144.119724][ T6275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.134184][ T6275] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.142438][ T6275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.154861][ T6275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.194934][ T6284] Bluetooth: hci5: command tx timeout [ 144.204051][ T6284] Bluetooth: hci4: command tx timeout [ 144.374993][ T6278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 144.398528][ T6278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.428685][ T6278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 144.466341][ T6278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.484135][ T6278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 144.518731][ T6278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.547418][ T6278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.561749][ T6278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.882582][ T6270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.911543][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.936070][ T6270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.999883][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.021366][ T6270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.037075][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.057702][ T6270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.086690][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.261198][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.295820][ T6275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.391450][ T6275] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.429697][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.462504][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.470182][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.541923][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.549254][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.593299][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.656406][ T6268] veth0_vlan: entered promiscuous mode [ 145.732522][ T6278] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.742726][ T6268] veth1_vlan: entered promiscuous mode [ 145.791961][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.799537][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.840223][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.847973][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.882395][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.967734][ T6268] veth0_macvtap: entered promiscuous mode [ 146.012114][ T6268] veth1_macvtap: entered promiscuous mode [ 146.031398][ T6270] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.084846][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.092431][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.161025][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.168261][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.188321][ T6282] veth0_vlan: entered promiscuous mode [ 146.197815][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.228516][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.269415][ T6282] veth1_vlan: entered promiscuous mode [ 146.311996][ T516] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.342466][ T516] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.365646][ T516] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.427530][ T516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.661091][ T6282] veth0_macvtap: entered promiscuous mode [ 146.712131][ T6282] veth1_macvtap: entered promiscuous mode [ 146.747296][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.790489][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.886565][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.925422][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.942047][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.954381][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.048725][ T1121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.087066][ T1121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/05 21:53:28 executed programs: 10 [ 147.130374][ T1121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.174316][ T1121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.296765][ T6275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.529311][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.562139][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.571222][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 147.661554][ T6275] veth0_vlan: entered promiscuous mode [ 147.678218][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.690291][ T6278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.698134][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.752179][ T6275] veth1_vlan: entered promiscuous mode [ 147.767112][ T10] usb 3-1: config 0 has an invalid interface number: 40 but max is 0 [ 147.802764][ T10] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 147.823801][ T10] usb 3-1: config 0 has no interface number 0 [ 147.851609][ T10] usb 3-1: New USB device found, idVendor=093b, idProduct=a003, bcdDevice=90.e5 [ 147.871861][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.898398][ T10] usb 3-1: Product: syz [ 147.913906][ T10] usb 3-1: Manufacturer: syz [ 147.924958][ T6275] veth0_macvtap: entered promiscuous mode [ 147.925394][ T10] usb 3-1: SerialNumber: syz [ 147.978154][ T6275] veth1_macvtap: entered promiscuous mode [ 147.981344][ T10] usb 3-1: config 0 descriptor?? [ 148.000575][ T6278] veth0_vlan: entered promiscuous mode [ 148.019804][ T6270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.043168][ T10] em28xx 3-1:0.40: New device syz syz @ 480 Mbps (093b:a003, interface 40, class 40) [ 148.058619][ T6278] veth1_vlan: entered promiscuous mode [ 148.065024][ T10] em28xx 3-1:0.40: Video interface 40 found: bulk [ 148.075507][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.089297][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.123010][ T808] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.127049][ T1121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.153825][ T1121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.200198][ T135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.242247][ T135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.284863][ T10] em28xx 3-1:0.40: unknown em28xx chip ID (0) [ 148.315322][ T808] usb 5-1: config 0 has an invalid interface number: 40 but max is 0 [ 148.323924][ T808] usb 5-1: config 0 has an invalid interface descriptor of length 2, skipping [ 148.331162][ T6278] veth0_macvtap: entered promiscuous mode [ 148.341691][ T808] usb 5-1: config 0 has no interface number 0 [ 148.351106][ T808] usb 5-1: New USB device found, idVendor=093b, idProduct=a003, bcdDevice=90.e5 [ 148.378139][ T10] em28xx 3-1:0.40: reading from i2c device at 0xa0 failed (error=-5) [ 148.393119][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.395544][ T6270] veth0_vlan: entered promiscuous mode [ 148.401456][ T808] usb 5-1: Product: syz [ 148.412731][ T10] em28xx 3-1:0.40: board has no eeprom [ 148.423239][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.426736][ T808] usb 5-1: Manufacturer: syz [ 148.447646][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.464086][ T808] usb 5-1: SerialNumber: syz [ 148.480582][ T6278] veth1_macvtap: entered promiscuous mode [ 148.485406][ T808] usb 5-1: config 0 descriptor?? [ 148.503608][ T10] em28xx 3-1:0.40: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 148.515536][ T6270] veth1_vlan: entered promiscuous mode [ 148.536602][ T808] em28xx 5-1:0.40: New device syz syz @ 480 Mbps (093b:a003, interface 40, class 40) [ 148.560708][ T10] em28xx 3-1:0.40: analog set to bulk mode. [ 148.568551][ T5812] em28xx 3-1:0.40: Registering V4L2 extension [ 148.575742][ T808] em28xx 5-1:0.40: Video interface 40 found: bulk [ 148.619090][ T10] usb 3-1: USB disconnect, device number 2 [ 148.668621][ T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.699447][ T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.706530][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.710537][ T10] em28xx 3-1:0.40: Disconnecting em28xx [ 148.734656][ T5812] em28xx 3-1:0.40: Config register raw data: 0xffffffed [ 148.776546][ T5812] em28xx 3-1:0.40: AC97 chip type couldn't be determined [ 148.780597][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.799130][ T5812] em28xx 3-1:0.40: No AC97 audio processor [ 148.806487][ T808] em28xx 5-1:0.40: unknown em28xx chip ID (0) [ 148.822802][ T5812] usb 3-1: Decoder not found [ 148.828578][ T5812] em28xx 3-1:0.40: failed to create media graph [ 148.860674][ T5812] em28xx 3-1:0.40: V4L2 device video103 deregistered [ 148.900131][ T808] em28xx 5-1:0.40: reading from i2c device at 0xa0 failed (error=-5) [ 148.919160][ T5812] em28xx 3-1:0.40: Remote control support is not available for this card. [ 148.932403][ T808] em28xx 5-1:0.40: board has no eeprom [ 148.940154][ T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.942536][ T10] em28xx 3-1:0.40: Closing input extension [ 148.992463][ T135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.996416][ T10] em28xx 3-1:0.40: Freeing device [ 149.015673][ T808] em28xx 5-1:0.40: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 149.033954][ T1121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.059024][ T1121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.080306][ T808] em28xx 5-1:0.40: analog set to bulk mode. [ 149.098378][ T5803] em28xx 5-1:0.40: Registering V4L2 extension [ 149.160368][ T808] usb 5-1: USB disconnect, device number 2 [ 149.204702][ T6270] veth0_macvtap: entered promiscuous mode [ 149.225271][ T808] em28xx 5-1:0.40: Disconnecting em28xx [ 149.270122][ T5803] em28xx 5-1:0.40: Config register raw data: 0xffffffed [ 149.301838][ T5803] em28xx 5-1:0.40: AC97 chip type couldn't be determined [ 149.322116][ T6592] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 149.342122][ T5803] em28xx 5-1:0.40: No AC97 audio processor [ 149.351093][ T6270] veth1_macvtap: entered promiscuous mode [ 149.396867][ T5803] usb 5-1: Decoder not found [ 149.411406][ T5803] em28xx 5-1:0.40: failed to create media graph [ 149.420032][ T5803] em28xx 5-1:0.40: V4L2 device video103 deregistered [ 149.436780][ T5803] em28xx 5-1:0.40: Remote control support is not available for this card. [ 149.439128][ T6692] ================================================================== [ 149.453610][ T6692] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0 [ 149.461177][ T6692] Read of size 4 at addr ffff88807e0ac860 by task v4l_id/6692 [ 149.468884][ T6692] [ 149.471235][ T6692] CPU: 1 UID: 0 PID: 6692 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 149.471253][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.471274][ T6692] Call Trace: [ 149.471283][ T6692] [ 149.471288][ T6692] dump_stack_lvl+0xe8/0x150 [ 149.471308][ T6692] print_address_description+0x55/0x1e0 [ 149.471324][ T6692] ? v4l2_open+0x395/0x3a0 [ 149.471342][ T6692] print_report+0x58/0x70 [ 149.471354][ T6692] kasan_report+0x117/0x150 [ 149.471376][ T6692] ? v4l2_open+0x395/0x3a0 [ 149.471395][ T6692] v4l2_open+0x395/0x3a0 [ 149.471413][ T6692] chrdev_open+0x4cd/0x5e0 [ 149.471428][ T6692] ? __pfx_chrdev_open+0x10/0x10 [ 149.471489][ T6692] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 149.471511][ T6692] ? __pfx_chrdev_open+0x10/0x10 [ 149.471523][ T6692] do_dentry_open+0x785/0x14e0 [ 149.471542][ T6692] vfs_open+0x3b/0x340 [ 149.471556][ T6692] ? path_openat+0x2df0/0x3860 [ 149.471575][ T6692] path_openat+0x2e08/0x3860 [ 149.471598][ T6692] ? __pfx_stack_trace_save+0x10/0x10 [ 149.471619][ T6692] ? stack_depot_save_flags+0x33/0x810 [ 149.471640][ T6692] ? __pfx_path_openat+0x10/0x10 [ 149.471658][ T6692] ? __x64_sys_openat+0x138/0x170 [ 149.471674][ T6692] ? __lock_acquire+0x6b5/0x2cf0 [ 149.471692][ T6692] do_file_open+0x23e/0x4a0 [ 149.471712][ T6692] ? __pfx_do_file_open+0x10/0x10 [ 149.471736][ T6692] ? _raw_spin_unlock+0x28/0x50 [ 149.471751][ T6692] ? alloc_fd+0x64b/0x6c0 [ 149.471769][ T6692] do_sys_openat2+0x113/0x200 [ 149.471786][ T6692] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.471801][ T6692] ? exc_page_fault+0x6a/0xc0 [ 149.471819][ T6692] ? do_user_addr_fault+0xc6f/0x1340 [ 149.471835][ T6692] __x64_sys_openat+0x138/0x170 [ 149.471851][ T6692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.471866][ T6692] do_syscall_64+0x15f/0xf80 [ 149.471883][ T6692] ? trace_irq_disable+0x3b/0x140 [ 149.471908][ T6692] ? clear_bhb_loop+0x40/0x90 [ 149.471925][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.471938][ T6692] RIP: 0033:0x7f60d48a7407 [ 149.471956][ T6692] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 149.471969][ T6692] RSP: 002b:00007fff964eaae0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 149.471990][ T6692] RAX: ffffffffffffffda RBX: 00007f60d4f90880 RCX: 00007f60d48a7407 [ 149.472000][ T6692] RDX: 0000000000000000 RSI: 00007fff964ebf1c RDI: ffffffffffffff9c [ 149.472010][ T6692] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 149.472018][ T6692] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 149.472026][ T6692] R13: 00007fff964ead30 R14: 00007f60d5095000 R15: 0000562195b484d8 [ 149.472042][ T6692] [ 149.472047][ T6692] [ 149.743761][ T6692] Allocated by task 5803: [ 149.748174][ T6692] kasan_save_track+0x3e/0x80 [ 149.752856][ T6692] __kasan_kmalloc+0x93/0xb0 [ 149.757448][ T6692] __kmalloc_cache_noprof+0x31c/0x660 [ 149.762811][ T6692] em28xx_v4l2_init+0x10b/0x2eb0 [ 149.767833][ T6692] em28xx_init_extension+0x120/0x1c0 [ 149.773107][ T6692] process_scheduled_works+0xb5d/0x1860 [ 149.778784][ T6692] worker_thread+0xa53/0xfc0 [ 149.783390][ T6692] kthread+0x388/0x470 [ 149.787641][ T6692] ret_from_fork+0x514/0xb70 [ 149.792310][ T6692] ret_from_fork_asm+0x1a/0x30 [ 149.797158][ T6692] [ 149.799472][ T6692] Freed by task 5803: [ 149.803526][ T6692] kasan_save_track+0x3e/0x80 [ 149.808208][ T6692] kasan_save_free_info+0x46/0x50 [ 149.813219][ T6692] __kasan_slab_free+0x5c/0x80 [ 149.817975][ T6692] kfree+0x1c5/0x640 [ 149.821912][ T6692] em28xx_v4l2_init+0x1685/0x2eb0 [ 149.827024][ T6692] em28xx_init_extension+0x120/0x1c0 [ 149.832735][ T6692] process_scheduled_works+0xb5d/0x1860 [ 149.838452][ T6692] worker_thread+0xa53/0xfc0 [ 149.843088][ T6692] kthread+0x388/0x470 [ 149.847320][ T6692] ret_from_fork+0x514/0xb70 [ 149.852069][ T6692] ret_from_fork_asm+0x1a/0x30 [ 149.856920][ T6692] [ 149.859230][ T6692] The buggy address belongs to the object at ffff88807e0ac000 [ 149.859230][ T6692] which belongs to the cache kmalloc-8k of size 8192 [ 149.873710][ T6692] The buggy address is located 2144 bytes inside of [ 149.873710][ T6692] freed 8192-byte region [ffff88807e0ac000, ffff88807e0ae000) [ 149.887765][ T6692] [ 149.890083][ T6692] The buggy address belongs to the physical page: [ 149.896493][ T6692] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e0a8 [ 149.905330][ T6692] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 149.913815][ T6692] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 149.921545][ T6692] page_type: f5(slab) [ 149.925512][ T6692] raw: 00fff00000000040 ffff88813fe1a280 dead000000000100 dead000000000122 [ 149.934173][ T6692] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 149.942751][ T6692] head: 00fff00000000040 ffff88813fe1a280 dead000000000100 dead000000000122 [ 149.951583][ T6692] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 149.960689][ T6692] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 149.969529][ T6692] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 149.978270][ T6692] page dumped because: kasan: bad access detected [ 149.984681][ T6692] page_owner tracks the page as allocated [ 149.990554][ T6692] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5360, tgid 5360 (S50crond), ts 50655391308, free_ts 50636981176 [ 150.010952][ T6692] post_alloc_hook+0x231/0x280 [ 150.015804][ T6692] get_page_from_freelist+0x24ba/0x2540 [ 150.021693][ T6692] __alloc_frozen_pages_noprof+0x18d/0x380 [ 150.027764][ T6692] allocate_slab+0x77/0x660 [ 150.032525][ T6692] refill_objects+0x339/0x3d0 [ 150.037367][ T6692] __pcs_replace_empty_main+0x321/0x720 [ 150.042910][ T6692] __kmalloc_cache_noprof+0x392/0x660 [ 150.048313][ T6692] tomoyo_init_log+0x112e/0x1fb0 [ 150.053282][ T6692] tomoyo_supervisor+0x353/0x1570 [ 150.058314][ T6692] tomoyo_env_perm+0x151/0x1f0 [ 150.063063][ T6692] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 150.068685][ T6692] tomoyo_bprm_check_security+0x11b/0x180 [ 150.074489][ T6692] security_bprm_check+0x85/0x240 [ 150.079604][ T6692] bprm_execve+0x8a4/0x1440 [ 150.084283][ T6692] do_execveat_common+0x50d/0x690 [ 150.089301][ T6692] __x64_sys_execve+0x97/0xc0 [ 150.094697][ T6692] page last free pid 5359 tgid 5359 stack trace: [ 150.101099][ T6692] __free_frozen_pages+0xbc7/0xd30 [ 150.106359][ T6692] __slab_free+0x274/0x2c0 [ 150.110950][ T6692] qlist_free_all+0x99/0x100 [ 150.115531][ T6692] kasan_quarantine_reduce+0x148/0x160 [ 150.121156][ T6692] __kasan_slab_alloc+0x22/0x80 [ 150.126013][ T6692] kmem_cache_alloc_noprof+0x2bc/0x650 [ 150.131985][ T6692] vm_area_dup+0x2b/0x680 [ 150.136310][ T6692] __split_vma+0x1dc/0xa40 [ 150.140724][ T6692] vma_modify+0x97e/0x1e10 [ 150.145215][ T6692] vma_modify_flags+0x24b/0x330 [ 150.150242][ T6692] mprotect_fixup+0x62a/0xb60 [ 150.155338][ T6692] do_mprotect_pkey+0x8d5/0xd20 [ 150.160547][ T6692] __x64_sys_mprotect+0x80/0x90 [ 150.165494][ T6692] do_syscall_64+0x15f/0xf80 [ 150.170170][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.176097][ T6692] [ 150.178407][ T6692] Memory state around the buggy address: [ 150.184028][ T6692] ffff88807e0ac700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.192165][ T6692] ffff88807e0ac780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.200218][ T6692] >ffff88807e0ac800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.208398][ T6692] ^ [ 150.215671][ T6692] ffff88807e0ac880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.223731][ T6692] ffff88807e0ac900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.232144][ T6692] ================================================================== [ 150.242780][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.266530][ T808] em28xx 5-1:0.40: Closing input extension [ 150.294519][ T6592] usb 2-1: config 0 has an invalid interface number: 40 but max is 0 [ 150.320255][ T808] em28xx 5-1:0.40: Freeing device [ 150.333862][ T6592] usb 2-1: config 0 has an invalid interface descriptor of length 2, skipping [ 150.368945][ T6592] usb 2-1: config 0 has no interface number 0 [ 150.390311][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.401956][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.433399][ T6692] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.440647][ T6692] CPU: 1 UID: 0 PID: 6692 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 150.449943][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.460193][ T6692] Call Trace: [ 150.463573][ T6692] [ 150.466526][ T6692] vpanic+0x56c/0xa60 [ 150.470631][ T6692] ? __pfx_vpanic+0x10/0x10 [ 150.475254][ T6692] ? __pfx___schedule+0x10/0x10 [ 150.480183][ T6692] panic+0xc5/0xd0 [ 150.484117][ T6692] ? __pfx_panic+0x10/0x10 [ 150.488825][ T6692] ? preempt_schedule_thunk+0x16/0x30 [ 150.494233][ T6692] ? v4l2_open+0x395/0x3a0 [ 150.498770][ T6692] check_panic_on_warn+0x89/0xb0 [ 150.503815][ T6692] ? v4l2_open+0x395/0x3a0 [ 150.508239][ T6692] end_report+0x73/0x170 [ 150.512498][ T6692] ? v4l2_open+0x395/0x3a0 [ 150.516917][ T6692] kasan_report+0x128/0x150 [ 150.521438][ T6692] ? v4l2_open+0x395/0x3a0 [ 150.525920][ T6692] v4l2_open+0x395/0x3a0 [ 150.530274][ T6692] chrdev_open+0x4cd/0x5e0 [ 150.534955][ T6692] ? __pfx_chrdev_open+0x10/0x10 [ 150.539913][ T6692] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 150.546366][ T6692] ? __pfx_chrdev_open+0x10/0x10 [ 150.551401][ T6692] do_dentry_open+0x785/0x14e0 [ 150.556344][ T6692] vfs_open+0x3b/0x340 [ 150.561030][ T6692] ? path_openat+0x2df0/0x3860 [ 150.565989][ T6692] path_openat+0x2e08/0x3860 [ 150.570630][ T6692] ? __pfx_stack_trace_save+0x10/0x10 [ 150.576439][ T6692] ? stack_depot_save_flags+0x33/0x810 [ 150.581898][ T6692] ? __pfx_path_openat+0x10/0x10 [ 150.587006][ T6692] ? __x64_sys_openat+0x138/0x170 [ 150.592027][ T6692] ? __lock_acquire+0x6b5/0x2cf0 [ 150.596981][ T6692] do_file_open+0x23e/0x4a0 [ 150.601517][ T6692] ? __pfx_do_file_open+0x10/0x10 [ 150.606733][ T6692] ? _raw_spin_unlock+0x28/0x50 [ 150.611582][ T6692] ? alloc_fd+0x64b/0x6c0 [ 150.616037][ T6692] do_sys_openat2+0x113/0x200 [ 150.620828][ T6692] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.626042][ T6692] ? exc_page_fault+0x6a/0xc0 [ 150.630989][ T6692] ? do_user_addr_fault+0xc6f/0x1340 [ 150.636362][ T6692] __x64_sys_openat+0x138/0x170 [ 150.641302][ T6692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.647375][ T6692] do_syscall_64+0x15f/0xf80 [ 150.651992][ T6692] ? trace_irq_disable+0x3b/0x140 [ 150.657112][ T6692] ? clear_bhb_loop+0x40/0x90 [ 150.661876][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.667856][ T6692] RIP: 0033:0x7f60d48a7407 [ 150.672457][ T6692] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 150.692233][ T6692] RSP: 002b:00007fff964eaae0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 150.700805][ T6692] RAX: ffffffffffffffda RBX: 00007f60d4f90880 RCX: 00007f60d48a7407 [ 150.709044][ T6692] RDX: 0000000000000000 RSI: 00007fff964ebf1c RDI: ffffffffffffff9c [ 150.717108][ T6692] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 150.725088][ T6692] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 150.733162][ T6692] R13: 00007fff964ead30 R14: 00007f60d5095000 R15: 0000562195b484d8 [ 150.741399][ T6692] [ 150.746875][ T6692] Kernel Offset: disabled [ 150.751226][ T6692] Rebooting in 86400 seconds..