[ 71.236011][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.236107][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:50552' (ED25519) to the list of known hosts. [ 76.337013][ T42] cfg80211: failed to load regulatory.db 2026/09/14 12:34:53 parsed 1 programs 2026/09/14 12:34:53 serving rpc on tcp://33471 Setting up swapspace version 1, size = 127995904 bytes [ 79.962889][ T6028] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.853437][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.853448][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.907688][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.909122][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.909623][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.912495][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.913472][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.948856][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.948870][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.372661][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.372805][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.372900][ T6081] bridge_slave_0: entered allmulticast mode [ 83.373962][ T6081] bridge_slave_0: entered promiscuous mode [ 83.377276][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.377318][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.377377][ T6081] bridge_slave_1: entered allmulticast mode [ 83.380183][ T6081] bridge_slave_1: entered promiscuous mode [ 83.399736][ T6081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.401105][ T6081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.414633][ T6081] team0: Port device team_slave_0 added [ 83.416584][ T6081] team0: Port device team_slave_1 added [ 83.428807][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.428817][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.428829][ T6081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.429562][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.429569][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.429580][ T6081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.450655][ T6081] hsr_slave_0: entered promiscuous mode [ 83.451276][ T6081] hsr_slave_1: entered promiscuous mode [ 83.554795][ T6081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.558992][ T6081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.559746][ T6081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.564303][ T6081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.565997][ T6081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.570529][ T6081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.571411][ T6081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.576908][ T6081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.596758][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.596857][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.597392][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.597479][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.637595][ T6081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.646476][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.648013][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.656066][ T6081] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.659278][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.659323][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.662472][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.662571][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.921697][ T6081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.950896][ T6081] veth0_vlan: entered promiscuous mode [ 83.960258][ T6081] veth1_vlan: entered promiscuous mode [ 83.980176][ T6081] veth0_macvtap: entered promiscuous mode [ 83.982379][ T6081] veth1_macvtap: entered promiscuous mode [ 83.988798][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.993526][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.035026][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.035066][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.035095][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.035122][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/09/14 12:35:01 executed programs: 0 [ 84.151028][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.155569][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.156426][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.157165][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.157746][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.180913][ T6150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.186361][ T6154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.187085][ T6155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.190578][ T6155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.195589][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.197050][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.201669][ T6154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.201706][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.201981][ T6154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.202387][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.203673][ T6155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.205242][ T6155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.205758][ T6155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.208729][ T6155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.209404][ T6155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.453168][ T5808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.582956][ T5808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.682107][ T5808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.937154][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.937246][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.937362][ T6145] bridge_slave_0: entered allmulticast mode [ 84.938766][ T6145] bridge_slave_0: entered promiscuous mode [ 84.941484][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.941526][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.941587][ T6145] bridge_slave_1: entered allmulticast mode [ 84.943017][ T6145] bridge_slave_1: entered promiscuous mode [ 85.020205][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.041123][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.095391][ T6145] team0: Port device team_slave_0 added [ 85.095514][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.095575][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.095648][ T6149] bridge_slave_0: entered allmulticast mode [ 85.096828][ T6149] bridge_slave_0: entered promiscuous mode [ 85.115949][ T6143] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.115992][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.116146][ T6143] bridge_slave_0: entered allmulticast mode [ 85.116886][ T6143] bridge_slave_0: entered promiscuous mode [ 85.120280][ T6145] team0: Port device team_slave_1 added [ 85.132276][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.132348][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.132434][ T6149] bridge_slave_1: entered allmulticast mode [ 85.133646][ T6149] bridge_slave_1: entered promiscuous mode [ 85.147222][ T6143] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.147314][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.147398][ T6143] bridge_slave_1: entered allmulticast mode [ 85.148237][ T6143] bridge_slave_1: entered promiscuous mode [ 85.159003][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.159016][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.159032][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.174753][ T6149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.174865][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.174945][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.175016][ T6147] bridge_slave_0: entered allmulticast mode [ 85.176006][ T6147] bridge_slave_0: entered promiscuous mode [ 85.178594][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.178666][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.178754][ T6147] bridge_slave_1: entered allmulticast mode [ 85.180890][ T6147] bridge_slave_1: entered promiscuous mode [ 85.189460][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.189469][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.189482][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.199596][ T6143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.200685][ T6149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.232902][ T6143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.277382][ T6149] team0: Port device team_slave_0 added [ 85.288983][ T6147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.291348][ T6147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.300858][ T6149] team0: Port device team_slave_1 added [ 85.303729][ T6145] hsr_slave_0: entered promiscuous mode [ 85.304155][ T6145] hsr_slave_1: entered promiscuous mode [ 85.304687][ T6145] debugfs: 'hsr0' already exists in 'hsr' [ 85.304698][ T6145] Cannot create hsr debugfs directory [ 85.306029][ T6143] team0: Port device team_slave_0 added [ 85.335093][ T6143] team0: Port device team_slave_1 added [ 85.344836][ T6147] team0: Port device team_slave_0 added [ 85.358056][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.358072][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.358090][ T6149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.359490][ T6147] team0: Port device team_slave_1 added [ 85.359801][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.359810][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.359828][ T6149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.390777][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.390788][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.390800][ T6143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.411431][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.411446][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.411466][ T6147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.414314][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.414329][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.414349][ T6143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.428959][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.428974][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.428994][ T6147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.462505][ T6149] hsr_slave_0: entered promiscuous mode [ 85.463131][ T6149] hsr_slave_1: entered promiscuous mode [ 85.463424][ T6149] debugfs: 'hsr0' already exists in 'hsr' [ 85.463434][ T6149] Cannot create hsr debugfs directory [ 85.549320][ T6147] hsr_slave_0: entered promiscuous mode [ 85.550092][ T6147] hsr_slave_1: entered promiscuous mode [ 85.550700][ T6147] debugfs: 'hsr0' already exists in 'hsr' [ 85.550717][ T6147] Cannot create hsr debugfs directory [ 85.559259][ T6143] hsr_slave_0: entered promiscuous mode [ 85.559925][ T6143] hsr_slave_1: entered promiscuous mode [ 85.560224][ T6143] debugfs: 'hsr0' already exists in 'hsr' [ 85.560235][ T6143] Cannot create hsr debugfs directory [ 85.770646][ T5808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.254596][ T6155] Bluetooth: hci3: command tx timeout [ 86.255411][ T6150] Bluetooth: hci4: command tx timeout [ 86.255603][ T6150] Bluetooth: hci1: command tx timeout [ 86.255707][ T6155] Bluetooth: hci2: command tx timeout [ 87.170301][ T5808] bridge_slave_1: left allmulticast mode [ 87.170324][ T5808] bridge_slave_1: left promiscuous mode [ 87.170457][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.173288][ T5808] bridge_slave_0: left allmulticast mode [ 87.173302][ T5808] bridge_slave_0: left promiscuous mode [ 87.173436][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.320834][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.323233][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.325049][ T5808] bond0 (unregistering): Released all slaves [ 87.563185][ T5808] hsr_slave_0: left promiscuous mode [ 87.563878][ T5808] hsr_slave_1: left promiscuous mode [ 87.564628][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.564645][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.566069][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.566084][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.575098][ T5808] veth1_macvtap: left promiscuous mode [ 87.575152][ T5808] veth0_macvtap: left promiscuous mode [ 87.575281][ T5808] veth1_vlan: left promiscuous mode [ 87.575692][ T5808] veth0_vlan: left promiscuous mode [ 87.728545][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 87.733261][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 87.956701][ T6149] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.960715][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.994710][ T6149] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.997381][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.997888][ T6149] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.001140][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.002216][ T6149] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.010736][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.099902][ T6149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.130526][ T6149] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.137537][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.137583][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.143554][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.143632][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.329093][ T6147] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.332393][ T6147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.333724][ T6147] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.338028][ T6155] Bluetooth: hci1: command tx timeout [ 88.347081][ T6155] Bluetooth: hci2: command tx timeout [ 88.347112][ T6155] Bluetooth: hci4: command tx timeout [ 88.347125][ T5829] Bluetooth: hci3: command tx timeout [ 88.348778][ T6147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.350873][ T6147] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.352716][ T6147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.353143][ T6147] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.354911][ T6147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.410912][ T6145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.422847][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.423440][ T6145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.432780][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.440357][ T6145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.443339][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.444053][ T6145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.454184][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.517935][ T6149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.553791][ T6143] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.558313][ T6143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.569719][ T6143] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.579102][ T6143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.579983][ T6143] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.584053][ T6143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.593705][ T6143] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.598975][ T6143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.647178][ T6147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.652138][ T6149] veth0_vlan: entered promiscuous mode [ 88.666907][ T6147] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.670166][ T6149] veth1_vlan: entered promiscuous mode [ 88.688775][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.688820][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.690297][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.690339][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.702212][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.739929][ T6145] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.740394][ T6149] veth0_macvtap: entered promiscuous mode [ 88.753739][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.753784][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.756302][ T6149] veth1_macvtap: entered promiscuous mode [ 88.768412][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.768477][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.783049][ T6143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.801593][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.811361][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.840683][ T6143] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.876123][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.876171][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.883542][ T6145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.888370][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.888461][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.952595][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.952613][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.974974][ T6218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.018106][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.018120][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.035474][ T5855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.065568][ T5808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.065785][ T5808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 2026/09/14 12:35:06 executed programs: 8 [ 89.218389][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.270576][ T6147] veth0_vlan: entered promiscuous mode [ 89.273758][ T6147] veth1_vlan: entered promiscuous mode [ 89.292916][ T6147] veth0_macvtap: entered promiscuous mode [ 89.307665][ T6147] veth1_macvtap: entered promiscuous mode [ 89.325363][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.329804][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.356228][ T6145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.374591][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 89.384939][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.384956][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.394901][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.395900][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.430078][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.430100][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.436149][ T6145] veth0_vlan: entered promiscuous mode [ 89.443336][ T6145] veth1_vlan: entered promiscuous mode [ 89.477668][ T6145] veth0_macvtap: entered promiscuous mode [ 89.485091][ T6143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.488200][ T6145] veth1_macvtap: entered promiscuous mode [ 89.504164][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.505504][ T6218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.505565][ T6218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.521197][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.537054][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 89.539470][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 89.539486][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 89.539503][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.566026][ T9] usb 8-1: probing VID:PID(0424:012C) [ 89.568650][ T9] usb 8-1: vub300 testing BULK IN EndPoint(0) 81 [ 89.568670][ T9] usb 8-1: vub300 testing BULK OUT EndPoint(1) 02 [ 89.568685][ T9] usb 8-1: vub300 testing BULK IN EndPoint(2) 83 [ 89.568699][ T9] usb 8-1: vub300 testing BULK OUT EndPoint(3) 04 [ 89.568714][ T9] usb 8-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 89.570824][ T6143] veth0_vlan: entered promiscuous mode [ 89.574614][ T6218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.574637][ T6218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.574654][ T6218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.574670][ T6218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.581412][ T6143] veth1_vlan: entered promiscuous mode [ 89.620721][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.620740][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.653400][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.653413][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.653684][ T6143] veth0_macvtap: entered promiscuous mode [ 89.659768][ T6143] veth1_macvtap: entered promiscuous mode [ 89.679344][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.692574][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.726829][ T5808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.726856][ T5808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.726874][ T5808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.726892][ T5808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.760648][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.760663][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.764515][ T6305] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 89.778438][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.778451][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.935259][ T6305] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 89.937181][ T6305] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 89.937196][ T6305] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 89.937213][ T6305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.946052][ T6305] usb 7-1: probing VID:PID(0424:012C) [ 89.946875][ T6305] usb 7-1: vub300 testing BULK IN EndPoint(0) 81 [ 89.946887][ T6305] usb 7-1: vub300 testing BULK OUT EndPoint(1) 02 [ 89.946895][ T6305] usb 7-1: vub300 testing BULK IN EndPoint(2) 83 [ 89.946905][ T6305] usb 7-1: vub300 testing BULK OUT EndPoint(3) 04 [ 89.946913][ T6305] usb 7-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 89.967097][ T9] usb 8-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 89.984852][ T5610] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 90.065887][ T5933] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.148180][ T5610] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 90.149875][ T5610] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 90.149896][ T5610] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 90.149922][ T5610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.161415][ T5610] usb 6-1: probing VID:PID(0424:012C) [ 90.162644][ T5610] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 90.162664][ T5610] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 90.162680][ T5610] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 90.162695][ T5610] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 90.162710][ T5610] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 90.167680][ T9] usb 8-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 90.216067][ T5933] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 90.217354][ T5933] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 90.217372][ T5933] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 90.217395][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.223622][ T5933] usb 5-1: probing VID:PID(0424:012C) [ 90.224884][ T5933] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 90.224899][ T5933] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 90.224910][ T5933] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 90.224921][ T5933] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 90.224932][ T5933] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 90.350399][ T6305] usb 7-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 90.414605][ T6155] Bluetooth: hci3: command tx timeout [ 90.414629][ T6155] Bluetooth: hci2: command tx timeout [ 90.414641][ T6155] Bluetooth: hci1: command tx timeout [ 90.427224][ T6150] Bluetooth: hci4: command tx timeout [ 90.551082][ T6305] usb 7-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 90.555284][ T5610] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 90.629600][ T5933] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 90.755450][ T5610] usb 6-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 90.830168][ T5933] usb 5-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 92.129324][ T5610] usb 8-1: USB disconnect, device number 2 [ 92.494688][ T6150] Bluetooth: hci1: command tx timeout [ 92.494718][ T6150] Bluetooth: hci2: command tx timeout [ 92.494736][ T6150] Bluetooth: hci3: command tx timeout [ 92.494752][ T6150] Bluetooth: hci4: command tx timeout [ 92.507995][ T988] usb 7-1: USB disconnect, device number 2 [ 92.674186][ T5610] USB vub300 remote SDIO host controller[0] now disconnected [ 92.728095][ T1026] usb 6-1: USB disconnect, device number 2 [ 92.826605][ T5933] usb 5-1: USB disconnect, device number 2 [ 92.964543][ T5610] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 93.040224][ T988] USB vub300 remote SDIO host controller[0] now disconnected [ 93.128921][ T5933] USB vub300 remote SDIO host controller[0] now disconnected [ 93.137662][ T5610] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 93.140471][ T5610] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 93.140491][ T5610] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 93.140509][ T5610] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.147304][ T5610] usb 8-1: probing VID:PID(0424:012C) [ 93.150194][ T5610] usb 8-1: vub300 testing BULK IN EndPoint(0) 81 [ 93.150214][ T5610] usb 8-1: vub300 testing BULK OUT EndPoint(1) 02 [ 93.150227][ T5610] usb 8-1: vub300 testing BULK IN EndPoint(2) 83 [ 93.150243][ T5610] usb 8-1: vub300 testing BULK OUT EndPoint(3) 04 [ 93.150256][ T5610] usb 8-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 93.238834][ T1026] USB vub300 remote SDIO host controller[0] now disconnected [ 93.344535][ T988] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 93.434561][ T5933] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.495237][ T988] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 93.496193][ T988] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 93.496214][ T988] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 93.496245][ T988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.502394][ T988] usb 7-1: probing VID:PID(0424:012C) [ 93.506588][ T988] usb 7-1: vub300 testing BULK IN EndPoint(0) 81 [ 93.506608][ T988] usb 7-1: vub300 testing BULK OUT EndPoint(1) 02 [ 93.506621][ T988] usb 7-1: vub300 testing BULK IN EndPoint(2) 83 [ 93.506637][ T988] usb 7-1: vub300 testing BULK OUT EndPoint(3) 04 [ 93.506650][ T988] usb 7-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 93.535502][ T1026] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 93.548866][ T5610] usb 8-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 93.585266][ T5933] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 93.586269][ T5933] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 93.586290][ T5933] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 93.586321][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.594856][ T5933] usb 5-1: probing VID:PID(0424:012C) [ 93.595959][ T5933] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 93.595977][ T5933] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 93.595993][ T5933] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 93.596009][ T5933] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 93.596025][ T5933] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 93.685301][ T1026] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 93.686486][ T1026] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 93.686508][ T1026] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 93.686606][ T1026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.696807][ T1026] usb 6-1: probing VID:PID(0424:012C) [ 93.698456][ T1026] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 93.698477][ T1026] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 93.698493][ T1026] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 93.698510][ T1026] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 93.698525][ T1026] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 93.750136][ T5610] usb 8-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 93.900790][ T988] usb 7-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 93.993893][ T5933] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 94.093604][ T1026] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 94.101432][ T988] usb 7-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 94.194638][ T5933] usb 5-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 94.294042][ T1026] usb 6-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 95.172299][ T5610] usb 8-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 95.176321][ T1026] usb 8-1: USB disconnect, device number 3 2026/09/14 12:35:12 executed programs: 16 [ 95.536282][ T6305] usb 7-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 95.536783][ T30] usb 7-1: USB disconnect, device number 3 [ 95.757064][ T988] usb 6-1: USB disconnect, device number 3 [ 95.834107][ T1026] USB vub300 remote SDIO host controller[0] now disconnected [ 95.852644][ T5090] usb 5-1: USB disconnect, device number 3 [ 96.134618][ T1026] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 96.208964][ T30] USB vub300 remote SDIO host controller[0] now disconnected [ 96.285368][ T1026] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 96.286457][ T1026] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 96.286478][ T1026] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 96.286506][ T1026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.292944][ T1026] usb 8-1: probing VID:PID(0424:012C) [ 96.293558][ T1026] usb 8-1: vub300 testing BULK IN EndPoint(0) 81 [ 96.293570][ T1026] usb 8-1: vub300 testing BULK OUT EndPoint(1) 02 [ 96.293579][ T1026] usb 8-1: vub300 testing BULK IN EndPoint(2) 83 [ 96.293587][ T1026] usb 8-1: vub300 testing BULK OUT EndPoint(3) 04 [ 96.293596][ T1026] usb 8-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 96.420471][ T988] USB vub300 remote SDIO host controller[0] now disconnected [ 96.428312][ T5855] ================================================================== [ 96.428322][ T5855] BUG: KASAN: slab-use-after-free in mmc_host_classdev_release+0xfb/0x120 [ 96.428342][ T5855] Read of size 8 at addr ffff888029c334c8 by task kworker/u32:4/5855 [ 96.428350][ T5855] [ 96.428356][ T5855] CPU: 2 UID: 0 PID: 5855 Comm: kworker/u32:4 Not tainted syzkaller #0 PREEMPT(full) [ 96.428368][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.428375][ T5855] Workqueue: kvub300d vub300_deadwork_thread [ 96.428389][ T5855] Call Trace: [ 96.428393][ T5855] [ 96.428397][ T5855] dump_stack_lvl+0x100/0x190 [ 96.428412][ T5855] print_report+0x13d/0x4b0 [ 96.428428][ T5855] ? __virt_addr_valid+0x239/0x430 [ 96.428444][ T5855] ? mmc_host_classdev_release+0xfb/0x120 [ 96.428457][ T5855] kasan_report+0xdf/0x1c0 [ 96.428471][ T5855] ? mmc_host_classdev_release+0xfb/0x120 [ 96.428486][ T5855] mmc_host_classdev_release+0xfb/0x120 [ 96.428500][ T5855] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 96.428514][ T5855] device_release+0xd2/0x270 [ 96.428525][ T5855] kobject_put+0x1f7/0x640 [ 96.428538][ T5855] put_device+0x1f/0x30 [ 96.428548][ T5855] vub300_deadwork_thread+0x22c/0x550 [ 96.428561][ T5855] process_one_work+0xac7/0x1b10 [ 96.428576][ T5855] ? __pfx_process_one_work+0x10/0x10 [ 96.428589][ T5855] ? lock_acquire+0x1d1/0x380 [ 96.428605][ T5855] ? __pfx_vub300_deadwork_thread+0x10/0x10 [ 96.428618][ T5855] worker_thread+0x5ef/0xe50 [ 96.428632][ T5855] ? kthread+0x13a/0x450 [ 96.428643][ T5855] ? __pfx_worker_thread+0x10/0x10 [ 96.428655][ T5855] kthread+0x373/0x450 [ 96.428665][ T5855] ? __pfx_kthread+0x10/0x10 [ 96.428677][ T5855] ret_from_fork+0x730/0xd60 [ 96.428699][ T5855] ? __pfx_ret_from_fork+0x10/0x10 [ 96.428715][ T5855] ? __switch_to+0x800/0x10f0 [ 96.428728][ T5855] ? __pfx_kthread+0x10/0x10 [ 96.428739][ T5855] ret_from_fork_asm+0x1a/0x30 [ 96.428751][ T5855] [ 96.428755][ T5855] [ 96.428757][ T5855] Allocated by task 1026: [ 96.428763][ T5855] kasan_save_stack+0x30/0x50 [ 96.428774][ T5855] kasan_save_track+0x14/0x30 [ 96.428785][ T5855] __kasan_kmalloc+0xaa/0xb0 [ 96.428796][ T5855] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 96.428811][ T5855] usb_alloc_dev+0x55/0x1090 [ 96.428822][ T5855] hub_event+0x2b93/0x4420 [ 96.428836][ T5855] process_one_work+0xac7/0x1b10 [ 96.428847][ T5855] worker_thread+0x5ef/0xe50 [ 96.428858][ T5855] kthread+0x373/0x450 [ 96.428868][ T5855] ret_from_fork+0x730/0xd60 [ 96.428883][ T5855] ret_from_fork_asm+0x1a/0x30 [ 96.428895][ T5855] [ 96.428898][ T5855] Freed by task 5855: [ 96.428905][ T5855] kasan_save_stack+0x30/0x50 [ 96.428920][ T5855] kasan_save_track+0x14/0x30 [ 96.428935][ T5855] kasan_save_free_info+0x3b/0x70 [ 96.428959][ T5855] __kasan_slab_free+0x5f/0x80 [ 96.428978][ T5855] kfree+0x22b/0x6d0 [ 96.429000][ T5855] device_release+0xd2/0x270 [ 96.429014][ T5855] kobject_put+0x1f7/0x640 [ 96.429030][ T5855] put_device+0x1f/0x30 [ 96.429043][ T5855] usb_put_dev+0x23/0x30 [ 96.429056][ T5855] vub300_deadwork_thread+0x224/0x550 [ 96.429069][ T5855] process_one_work+0xac7/0x1b10 [ 96.429081][ T5855] worker_thread+0x5ef/0xe50 [ 96.429092][ T5855] kthread+0x373/0x450 [ 96.429101][ T5855] ret_from_fork+0x730/0xd60 [ 96.429116][ T5855] ret_from_fork_asm+0x1a/0x30 [ 96.429124][ T5855] [ 96.429126][ T5855] The buggy address belongs to the object at ffff888029c33000 [ 96.429126][ T5855] which belongs to the cache kmalloc-2k of size 2048 [ 96.429134][ T5855] The buggy address is located 1224 bytes inside of [ 96.429134][ T5855] freed 2048-byte region [ffff888029c33000, ffff888029c33800) [ 96.429144][ T5855] [ 96.429146][ T5855] The buggy address belongs to the physical page: [ 96.429151][ T5855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029c31000 pfn:0x29c30 [ 96.429160][ T5855] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 96.429168][ T5855] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 96.429178][ T5855] page_type: f5(slab) [ 96.429189][ T5855] raw: 00fff00000000240 ffff88801c042f00 ffffea0000965a10 ffffea0000854a10 [ 96.429199][ T5855] raw: ffff888029c31000 0000000000080006 00000000f5000000 0000000000000000 [ 96.429208][ T5855] head: 00fff00000000240 ffff88801c042f00 ffffea0000965a10 ffffea0000854a10 [ 96.429216][ T5855] head: ffff888029c31000 0000000000080006 00000000f5000000 0000000000000000 [ 96.429225][ T5855] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 96.429233][ T5855] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 96.429239][ T5855] page dumped because: kasan: bad access detected [ 96.429243][ T5855] page_owner tracks the page as allocated [ 96.429247][ T5855] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5136, tgid 5136 (klogd), ts 52095697133 [ 96.429262][ T5855] post_alloc_hook+0xfd/0x120 [ 96.429277][ T5855] get_page_from_freelist+0x110d/0x35d0 [ 96.429286][ T5855] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 96.429295][ T5855] new_slab+0xa9/0x6e0 [ 96.429303][ T5855] refill_objects+0xe3/0x410 [ 96.429311][ T5855] __pcs_replace_empty_main+0x35e/0x650 [ 96.429326][ T5855] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 96.429341][ T5855] syslog_print+0xf8/0x620 [ 96.429354][ T5855] do_syslog+0x5bd/0x6d0 [ 96.429369][ T5855] __x64_sys_syslog+0x74/0xb0 [ 96.429384][ T5855] do_syscall_64+0x121/0x770 [ 96.429397][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.429407][ T5855] page last free pid 5737 tgid 5737 ts 44841793649 stack trace: [ 96.429414][ T5855] __free_frozen_pages+0x79f/0x10f0 [ 96.429428][ T5855] qlist_free_all+0x47/0xf0 [ 96.429437][ T5855] kasan_quarantine_reduce+0x1a0/0x1f0 [ 96.429448][ T5855] __kasan_slab_alloc+0x69/0x90 [ 96.429459][ T5855] __kmalloc_noprof+0x2cc/0x840 [ 96.429469][ T5855] tomoyo_supervisor+0x65d/0x1340 [ 96.429481][ T5855] tomoyo_env_perm+0x191/0x200 [ 96.429492][ T5855] tomoyo_find_next_domain+0x13d7/0x2010 [ 96.429505][ T5855] tomoyo_bprm_check_security+0x12d/0x1d0 [ 96.429516][ T5855] security_bprm_check+0x87/0x1e0 [ 96.429528][ T5855] bprm_execve+0x80b/0x1940 [ 96.429537][ T5855] do_execveat_common.isra.0+0x4a5/0x580 [ 96.429546][ T5855] __x64_sys_execve+0x93/0xd0 [ 96.429555][ T5855] do_syscall_64+0x121/0x770 [ 96.429569][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.429579][ T5855] [ 96.429581][ T5855] Memory state around the buggy address: [ 96.429585][ T5855] ffff888029c33380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.429592][ T5855] ffff888029c33400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.429599][ T5855] >ffff888029c33480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.429604][ T5855] ^ [ 96.429609][ T5855] ffff888029c33500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.429615][ T5855] ffff888029c33580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.429620][ T5855] ================================================================== [ 96.429626][ T5855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.710175][ T5855] CPU: 2 UID: 0 PID: 5855 Comm: kworker/u32:4 Not tainted syzkaller #0 PREEMPT(full) [ 96.714176][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.718214][ T5855] Workqueue: kvub300d vub300_deadwork_thread [ 96.720806][ T5855] Call Trace: [ 96.722224][ T5855] [ 96.723510][ T5855] dump_stack_lvl+0x100/0x190 [ 96.725432][ T5855] vpanic+0x553/0x970 [ 96.727092][ T5855] ? __pfx_vpanic+0x10/0x10 [ 96.728976][ T5855] ? __pfx_vprintk_emit+0x10/0x10 [ 96.731132][ T5855] ? mmc_host_classdev_release+0xfb/0x120 [ 96.733484][ T5855] panic+0xd1/0xe0 [ 96.735091][ T5855] ? __pfx_panic+0x10/0x10 [ 96.736972][ T5855] ? mmc_host_classdev_release+0xfb/0x120 [ 96.739329][ T5855] check_panic_on_warn.cold+0x19/0x34 [ 96.741596][ T5855] end_report.part.0+0x3a/0x90 [ 96.743786][ T5855] kasan_report.cold+0xe/0x18 [ 96.745770][ T5855] ? mmc_host_classdev_release+0xfb/0x120 [ 96.748095][ T5855] mmc_host_classdev_release+0xfb/0x120 [ 96.750372][ T5855] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 96.752996][ T5855] device_release+0xd2/0x270 [ 96.754997][ T5855] kobject_put+0x1f7/0x640 [ 96.756888][ T5855] put_device+0x1f/0x30 [ 96.758649][ T5855] vub300_deadwork_thread+0x22c/0x550 [ 96.760930][ T5855] process_one_work+0xac7/0x1b10 [ 96.763071][ T5855] ? __pfx_process_one_work+0x10/0x10 [ 96.765371][ T5855] ? lock_acquire+0x1d1/0x380 [ 96.767391][ T5855] ? __pfx_vub300_deadwork_thread+0x10/0x10 [ 96.769935][ T5855] worker_thread+0x5ef/0xe50 [ 96.771916][ T5855] ? kthread+0x13a/0x450 [ 96.773700][ T5855] ? __pfx_worker_thread+0x10/0x10 [ 96.775909][ T5855] kthread+0x373/0x450 [ 96.777754][ T5855] ? __pfx_kthread+0x10/0x10 [ 96.779773][ T5855] ret_from_fork+0x730/0xd60 [ 96.781721][ T5855] ? __pfx_ret_from_fork+0x10/0x10 [ 96.783872][ T5855] ? __switch_to+0x800/0x10f0 [ 96.785873][ T5855] ? __pfx_kthread+0x10/0x10 [ 96.787768][ T5855] ret_from_fork_asm+0x1a/0x30 [ 96.789798][ T5855] [ 96.791873][ T5855] Kernel Offset: disabled [ 96.793728][ T5855] Rebooting in 86400 seconds..