Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts.
2026/03/27 05:06:45 parsed 1 programs
[ 71.987388][ T5840] cgroup: Unknown subsys name 'net'
[ 72.118387][ T5840] cgroup: Unknown subsys name 'cpuset'
[ 72.128218][ T5840] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 73.633714][ T5840] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 76.509485][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 76.521607][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 76.531864][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 76.544253][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 76.552882][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 76.931501][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 78.375712][ T5880] chnl_net:caif_netlink_parms(): no params data found
[ 78.613097][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.621882][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.629201][ T5880] bridge_slave_0: entered allmulticast mode
[ 78.637772][ T5880] bridge_slave_0: entered promiscuous mode
[ 78.674797][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.682993][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.691308][ T5880] bridge_slave_1: entered allmulticast mode
[ 78.698317][ T5880] bridge_slave_1: entered promiscuous mode
[ 78.958964][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.973372][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.120471][ T5880] team0: Port device team_slave_0 added
[ 79.174364][ T5880] team0: Port device team_slave_1 added
[ 79.321465][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.341801][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 79.378488][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.414456][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.421463][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 79.447850][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.805482][ T5880] hsr_slave_0: entered promiscuous mode
[ 79.811769][ T5880] hsr_slave_1: entered promiscuous mode
[ 80.012393][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.021701][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.124138][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.146998][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.356094][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 80.371569][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 80.383008][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 80.399120][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 80.664848][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[ 80.707918][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[ 80.725797][ T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.733474][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 80.750675][ T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.757806][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 80.912013][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 80.958018][ T5880] veth0_vlan: entered promiscuous mode
[ 80.969374][ T5880] veth1_vlan: entered promiscuous mode
[ 80.999537][ T5880] veth0_macvtap: entered promiscuous mode
[ 81.010240][ T5880] veth1_macvtap: entered promiscuous mode
[ 81.030356][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 81.042939][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 81.060630][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.071000][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.082411][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.097652][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/03/27 05:06:56 executed programs: 0
[ 81.269552][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.280187][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.290068][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 81.298495][ T5960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 81.321411][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 81.328631][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 81.339521][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.346639][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 81.358477][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 81.362579][ T5964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 81.367938][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 81.373590][ T5964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 81.381733][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 81.396110][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 81.404047][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 81.457627][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.461770][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 81.477954][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 81.486652][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 81.495441][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 81.503016][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 81.524064][ T9] cfg80211: failed to load regulatory.db
[ 81.571242][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.705677][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.788706][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 82.049215][ T5954] chnl_net:caif_netlink_parms(): no params data found
[ 82.065354][ T5966] chnl_net:caif_netlink_parms(): no params data found
[ 82.157717][ T5963] chnl_net:caif_netlink_parms(): no params data found
[ 82.219509][ T5959] chnl_net:caif_netlink_parms(): no params data found
[ 82.330958][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.338293][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.345792][ T5966] bridge_slave_0: entered allmulticast mode
[ 82.352664][ T5966] bridge_slave_0: entered promiscuous mode
[ 82.360045][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.367458][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.374642][ T5954] bridge_slave_0: entered allmulticast mode
[ 82.382675][ T5954] bridge_slave_0: entered promiscuous mode
[ 82.407315][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.414495][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.421870][ T5966] bridge_slave_1: entered allmulticast mode
[ 82.429022][ T5966] bridge_slave_1: entered promiscuous mode
[ 82.436604][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.443680][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.451366][ T5954] bridge_slave_1: entered allmulticast mode
[ 82.459031][ T5954] bridge_slave_1: entered promiscuous mode
[ 82.477946][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.485169][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.492345][ T5963] bridge_slave_0: entered allmulticast mode
[ 82.499658][ T5963] bridge_slave_0: entered promiscuous mode
[ 82.542577][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.549982][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.557662][ T5963] bridge_slave_1: entered allmulticast mode
[ 82.564611][ T5963] bridge_slave_1: entered promiscuous mode
[ 82.573614][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.599704][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.628476][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.660664][ T5966] team0: Port device team_slave_0 added
[ 82.668319][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.688833][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.696097][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.703225][ T5959] bridge_slave_0: entered allmulticast mode
[ 82.710415][ T5959] bridge_slave_0: entered promiscuous mode
[ 82.729882][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.742258][ T5966] team0: Port device team_slave_1 added
[ 82.760241][ T5954] team0: Port device team_slave_0 added
[ 82.766449][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.773564][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.781303][ T5959] bridge_slave_1: entered allmulticast mode
[ 82.788501][ T5959] bridge_slave_1: entered promiscuous mode
[ 82.811312][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.831101][ T5954] team0: Port device team_slave_1 added
[ 82.880314][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.887336][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 82.913582][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.937109][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.944070][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 82.970394][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.983802][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.002920][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.009928][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.036047][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.065140][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.072112][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.098367][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.111165][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.123197][ T5963] team0: Port device team_slave_0 added
[ 83.180996][ T5963] team0: Port device team_slave_1 added
[ 83.213159][ T5966] hsr_slave_0: entered promiscuous mode
[ 83.219543][ T5966] hsr_slave_1: entered promiscuous mode
[ 83.225996][ T5966] debugfs: 'hsr0' already exists in 'hsr'
[ 83.231798][ T5966] Cannot create hsr debugfs directory
[ 83.291496][ T5959] team0: Port device team_slave_0 added
[ 83.298238][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.305394][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.332478][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.345380][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.352352][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.379441][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.423449][ T5959] team0: Port device team_slave_1 added
[ 83.453813][ T5954] hsr_slave_0: entered promiscuous mode
[ 83.460246][ T5954] hsr_slave_1: entered promiscuous mode
[ 83.466418][ T5954] debugfs: 'hsr0' already exists in 'hsr'
[ 83.472141][ T5954] Cannot create hsr debugfs directory
[ 83.476778][ T5960] Bluetooth: hci1: command tx timeout
[ 83.483982][ T51] Bluetooth: hci0: command tx timeout
[ 83.490156][ T5861] Bluetooth: hci2: command tx timeout
[ 83.510654][ T48] bridge_slave_1: left allmulticast mode
[ 83.516544][ T48] bridge_slave_1: left promiscuous mode
[ 83.523795][ T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.534830][ T48] bridge_slave_0: left allmulticast mode
[ 83.540575][ T48] bridge_slave_0: left promiscuous mode
[ 83.546373][ T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.555950][ T5861] Bluetooth: hci3: command tx timeout
[ 83.724037][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 83.738087][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 83.748008][ T48] bond0 (unregistering): Released all slaves
[ 83.804321][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.811320][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.837278][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.849730][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.856714][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.882721][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.903974][ T5963] hsr_slave_0: entered promiscuous mode
[ 83.911738][ T5963] hsr_slave_1: entered promiscuous mode
[ 83.918337][ T5963] debugfs: 'hsr0' already exists in 'hsr'
[ 83.924143][ T5963] Cannot create hsr debugfs directory
[ 83.986622][ T48] hsr_slave_0: left promiscuous mode
[ 83.992454][ T48] hsr_slave_1: left promiscuous mode
[ 83.999726][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 84.007234][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 84.015326][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 84.022709][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 84.037623][ T48] veth1_macvtap: left promiscuous mode
[ 84.043554][ T48] veth0_macvtap: left promiscuous mode
[ 84.049458][ T48] veth1_vlan: left promiscuous mode
[ 84.054714][ T48] veth0_vlan: left promiscuous mode
[ 84.224899][ T48] team0 (unregistering): Port device team_slave_1 removed
[ 84.238879][ T48] team0 (unregistering): Port device team_slave_0 removed
[ 84.444413][ T5959] hsr_slave_0: entered promiscuous mode
[ 84.451575][ T5959] hsr_slave_1: entered promiscuous mode
[ 84.800473][ T5966] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 84.857434][ T5966] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 84.873430][ T5966] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 85.100053][ T5966] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 85.399331][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.460993][ T5966] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.513565][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.520755][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.554384][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.555893][ T5861] Bluetooth: hci2: command tx timeout
[ 85.561571][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.574710][ T51] Bluetooth: hci0: command tx timeout
[ 85.580162][ T51] Bluetooth: hci1: command tx timeout
[ 85.635069][ T5861] Bluetooth: hci3: command tx timeout
[ 85.657556][ T5963] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 85.676213][ T5963] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 85.718162][ T5963] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 85.754562][ T5963] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 85.850699][ T5959] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 85.893449][ T5959] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 85.911754][ T5959] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 85.978542][ T5959] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 86.080841][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.093029][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.111184][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.123879][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.172954][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 86.269384][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.294887][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.303416][ T5966] veth0_vlan: entered promiscuous mode
[ 86.338119][ T5963] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.347650][ T5966] veth1_vlan: entered promiscuous mode
[ 86.358415][ T5959] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.371939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.379113][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.399323][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.406443][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.429724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.436849][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.460436][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.467548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.487208][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.552998][ T5954] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.561989][ T5966] veth0_macvtap: entered promiscuous mode
[ 86.587601][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.594739][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.606541][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.613644][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.623425][ T5966] veth1_macvtap: entered promiscuous mode
[ 86.695121][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 86.737662][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 86.792311][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.839913][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.859505][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.895507][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.057938][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.079662][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.105918][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.113656][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.167820][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.176396][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/03/27 05:07:02 executed programs: 8
[ 87.221020][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.272389][ T5963] veth0_vlan: entered promiscuous mode
[ 87.283278][ T5959] veth0_vlan: entered promiscuous mode
[ 87.303760][ T5963] veth1_vlan: entered promiscuous mode
[ 87.312697][ T5959] veth1_vlan: entered promiscuous mode
[ 87.382155][ T5954] veth0_vlan: entered promiscuous mode
[ 87.390153][ T5959] veth0_macvtap: entered promiscuous mode
[ 87.409916][ T5954] veth1_vlan: entered promiscuous mode
[ 87.416867][ T5959] veth1_macvtap: entered promiscuous mode
[ 87.427166][ T5963] veth0_macvtap: entered promiscuous mode
[ 87.447036][ T5963] veth1_macvtap: entered promiscuous mode
[ 87.480905][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.500633][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.511780][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.530209][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.546947][ T112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.556423][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 87.565294][ T112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.578811][ T5954] veth0_macvtap: entered promiscuous mode
[ 87.586257][ T112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.595254][ T112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.611870][ T112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.620759][ T112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.630987][ T5954] veth1_macvtap: entered promiscuous mode
[ 87.635533][ T51] Bluetooth: hci1: command tx timeout
[ 87.642823][ T5960] Bluetooth: hci0: command tx timeout
[ 87.648706][ T5861] Bluetooth: hci2: command tx timeout
[ 87.659149][ T112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.668461][ T112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.715733][ T9] usb 4-1: Using ep0 maxpacket: 32
[ 87.715840][ T5861] Bluetooth: hci3: command tx timeout
[ 87.747259][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 87.772009][ T9] usb 4-1: config 0 has no interface number 0
[ 87.775449][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.779705][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 87.803315][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 87.816056][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 87.826277][ T9] usb 4-1: Product: syz
[ 87.831554][ T9] usb 4-1: Manufacturer: syz
[ 87.840497][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.840892][ T9] usb 4-1: SerialNumber: syz
[ 87.852741][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.863427][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.893204][ T9] usb 4-1: config 0 descriptor??
[ 87.919768][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 87.932011][ T9] em28xx 4-1:0.132: Video interface 132 found:
[ 87.935806][ T1350] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.947622][ T1350] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.958154][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.968515][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.982452][ T1350] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.992046][ T1350] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.003054][ T1350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.014584][ T1350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.078711][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.087969][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.177189][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[ 88.208900][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.224583][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.272143][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 88.286254][ T9] em28xx 4-1:0.132: board has no eeprom
[ 88.291880][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.302003][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.345394][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 88.362122][ T9] em28xx 4-1:0.132: analog set to bulk mode.
[ 88.384423][ T10] em28xx 4-1:0.132: Registering V4L2 extension
[ 88.391612][ T5190] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 88.412309][ T9] usb 4-1: USB disconnect, device number 2
[ 88.423053][ T9] em28xx 4-1:0.132: Disconnecting em28xx
[ 88.494333][ T10] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[ 88.495076][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 88.502833][ T10] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[ 88.518170][ T10] em28xx 4-1:0.132: No AC97 audio processor
[ 88.530806][ T10] usb 4-1: Decoder not found
[ 88.537229][ T10] em28xx 4-1:0.132: failed to create media graph
[ 88.543681][ T10] em28xx 4-1:0.132: V4L2 device video103 deregistered
[ 88.554366][ T10] em28xx 4-1:0.132: Remote control support is not available for this card.
[ 88.563668][ T9] em28xx 4-1:0.132: Closing input extension
[ 88.570311][ T5190] usb 2-1: Using ep0 maxpacket: 32
[ 88.581201][ T5190] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 88.596498][ T9] em28xx 4-1:0.132: Freeing device
[ 88.606369][ T5190] usb 2-1: config 0 has no interface number 0
[ 88.606697][ T6064] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 88.614005][ T5190] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 88.655943][ T24] usb 3-1: Using ep0 maxpacket: 32
[ 88.665231][ T5190] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 88.671009][ T24] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 88.681166][ T5190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 88.693810][ T5190] usb 2-1: Product: syz
[ 88.700190][ T5190] usb 2-1: Manufacturer: syz
[ 88.706244][ T5190] usb 2-1: SerialNumber: syz
[ 88.714542][ T5190] usb 2-1: config 0 descriptor??
[ 88.717780][ T24] usb 3-1: config 0 has no interface number 0
[ 88.730458][ T24] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 88.748092][ T5190] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 88.748752][ T24] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 88.770720][ T5190] em28xx 2-1:0.132: Video interface 132 found:
[ 88.785077][ T6064] usb 1-1: Using ep0 maxpacket: 32
[ 88.790270][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 88.801733][ T24] usb 3-1: Product: syz
[ 88.807422][ T6064] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 88.816832][ T6064] usb 1-1: config 0 has no interface number 0
[ 88.822959][ T24] usb 3-1: Manufacturer: syz
[ 88.827695][ T6064] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 88.841671][ T24] usb 3-1: SerialNumber: syz
[ 88.854058][ T6064] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 88.864864][ T24] usb 3-1: config 0 descriptor??
[ 88.869907][ T6064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 88.878156][ T6064] usb 1-1: Product: syz
[ 88.882383][ T6064] usb 1-1: Manufacturer: syz
[ 88.891266][ T24] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 88.901086][ T6064] usb 1-1: SerialNumber: syz
[ 88.911163][ T6064] usb 1-1: config 0 descriptor??
[ 88.921607][ T24] em28xx 3-1:0.132: Video interface 132 found:
[ 88.934701][ T6064] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 88.944557][ T6064] em28xx 1-1:0.132: Video interface 132 found:
[ 88.985339][ T5190] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 88.995236][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 89.049948][ T5190] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 89.059368][ T5190] em28xx 2-1:0.132: board has no eeprom
[ 89.125927][ T5190] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 89.133912][ T5190] em28xx 2-1:0.132: analog set to bulk mode.
[ 89.140936][ T5949] em28xx 2-1:0.132: Registering V4L2 extension
[ 89.145363][ T24] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 89.156705][ T9] usb 4-1: Using ep0 maxpacket: 32
[ 89.168742][ T5190] usb 2-1: USB disconnect, device number 2
[ 89.185486][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 89.185817][ T6064] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[ 89.198756][ T9] usb 4-1: config 0 has no interface number 0
[ 89.222634][ T5190] em28xx 2-1:0.132: Disconnecting em28xx
[ 89.231377][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 89.252207][ T24] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 89.273760][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 89.274593][ T24] em28xx 3-1:0.132: board has no eeprom
[ 89.289236][ T6064] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 89.293751][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 89.302720][ T6064] em28xx 1-1:0.132: board has no eeprom
[ 89.314898][ T9] usb 4-1: Product: syz
[ 89.323779][ T9] usb 4-1: Manufacturer: syz
[ 89.328817][ T9] usb 4-1: SerialNumber: syz
[ 89.338798][ T9] usb 4-1: config 0 descriptor??
[ 89.351904][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 89.364664][ T9] em28xx 4-1:0.132: Video interface 132 found:
[ 89.365099][ T24] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 89.379367][ T6064] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 89.389874][ T24] em28xx 3-1:0.132: analog set to bulk mode.
[ 89.392144][ T5949] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 89.396546][ T6064] em28xx 1-1:0.132: analog set to bulk mode.
[ 89.413043][ T5949] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 89.426301][ T6064] usb 1-1: USB disconnect, device number 2
[ 89.438358][ T24] usb 3-1: USB disconnect, device number 2
[ 89.442382][ T5949] em28xx 2-1:0.132: No AC97 audio processor
[ 89.465434][ T24] em28xx 3-1:0.132: Disconnecting em28xx
[ 89.478022][ T5949] usb 2-1: Decoder not found
[ 89.483293][ T5949] em28xx 2-1:0.132: failed to create media graph
[ 89.483983][ T6064] em28xx 1-1:0.132: Disconnecting em28xx
[ 89.494551][ T5949] em28xx 2-1:0.132: V4L2 device video103 deregistered
[ 89.510899][ T5949] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 89.521697][ T5948] em28xx 1-1:0.132: Registering V4L2 extension
[ 89.606050][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[ 89.620246][ T5948] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[ 89.636427][ T5948] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[ 89.643591][ T5948] em28xx 1-1:0.132: No AC97 audio processor
[ 89.664268][ T5948] usb 1-1: Decoder not found
[ 89.675654][ T5948] em28xx 1-1:0.132: failed to create media graph
[ 89.688054][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 89.688263][ T5948] em28xx 1-1:0.132: V4L2 device video103 deregistered
[ 89.711048][ T9] em28xx 4-1:0.132: board has no eeprom
[ 89.715500][ T5861] Bluetooth: hci2: command tx timeout
[ 89.721557][ T51] Bluetooth: hci0: command tx timeout
[ 89.722364][ T5960] Bluetooth: hci1: command tx timeout
[ 89.739738][ T5948] em28xx 1-1:0.132: Remote control support is not available for this card.
[ 89.749498][ T5956] em28xx 3-1:0.132: Registering V4L2 extension
[ 89.785233][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 89.796168][ T5960] Bluetooth: hci3: command tx timeout
[ 89.798434][ T9] em28xx 4-1:0.132: analog set to bulk mode.
[ 89.821977][ T9] usb 4-1: USB disconnect, device number 3
[ 89.837892][ T9] em28xx 4-1:0.132: Disconnecting em28xx
[ 89.846676][ T5956] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 89.853728][ T5956] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 89.867117][ T5956] em28xx 3-1:0.132: No AC97 audio processor
[ 89.874056][ T5956] usb 3-1: Decoder not found
[ 89.879724][ T5956] em28xx 3-1:0.132: failed to create media graph
[ 89.886244][ T5956] em28xx 3-1:0.132: V4L2 device video103 deregistered
[ 89.894134][ T5956] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 89.902865][ T5190] em28xx 2-1:0.132: Closing input extension
[ 89.910953][ T6064] em28xx 1-1:0.132: Closing input extension
[ 89.917441][ T5949] em28xx 4-1:0.132: Registering V4L2 extension
[ 89.934282][ T6064] em28xx 1-1:0.132: Freeing device
[ 89.937244][ T5190] em28xx 2-1:0.132: Freeing device
[ 90.063234][ T5949] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[ 90.073347][ T5949] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[ 90.081509][ T5949] em28xx 4-1:0.132: No AC97 audio processor
[ 90.091269][ T5949] usb 4-1: Decoder not found
[ 90.116942][ T5949] em28xx 4-1:0.132: failed to create media graph
[ 90.140720][ T5949] em28xx 4-1:0.132: V4L2 device video103 deregistered
[ 90.156729][ T5949] em28xx 4-1:0.132: Remote control support is not available for this card.
[ 90.156766][ T6096] ==================================================================
[ 90.166834][ T9] em28xx 4-1:0.132: Closing input extension
[ 90.174074][ T6096] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0
[ 90.187145][ T6096] Read of size 4 at addr ffff888036d30858 by task v4l_id/6096
[ 90.188515][ T9] em28xx 4-1:0.132: Freeing device
[ 90.194593][ T6096]
[ 90.194626][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 90.194645][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 90.194660][ T6096] Call Trace:
[ 90.194668][ T6096]
[ 90.194675][ T6096] dump_stack_lvl+0xe8/0x150
[ 90.194703][ T6096] print_address_description+0x55/0x1e0
[ 90.194728][ T6096] ? v4l2_open+0x395/0x3a0
[ 90.194742][ T6096] print_report+0x58/0x70
[ 90.194763][ T6096] kasan_report+0x117/0x150
[ 90.194781][ T6096] ? v4l2_open+0x395/0x3a0
[ 90.194799][ T6096] v4l2_open+0x395/0x3a0
[ 90.194816][ T6096] chrdev_open+0x4cd/0x5e0
[ 90.194834][ T6096] ? __pfx_chrdev_open+0x10/0x10
[ 90.194850][ T6096] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[ 90.194877][ T6096] ? __pfx_chrdev_open+0x10/0x10
[ 90.194894][ T6096] do_dentry_open+0x785/0x14e0
[ 90.194918][ T6096] vfs_open+0x3b/0x340
[ 90.194936][ T6096] ? path_openat+0x2df0/0x3860
[ 90.194960][ T6096] path_openat+0x2e08/0x3860
[ 90.194989][ T6096] ? __pfx_stack_trace_save+0x10/0x10
[ 90.195010][ T6096] ? stack_depot_save_flags+0x33/0x810
[ 90.195034][ T6096] ? __pfx_path_openat+0x10/0x10
[ 90.195059][ T6096] ? __x64_sys_openat+0x138/0x170
[ 90.195081][ T6096] ? __lock_acquire+0x6b5/0x2cf0
[ 90.195112][ T6096] do_file_open+0x23e/0x4a0
[ 90.195137][ T6096] ? __pfx_do_file_open+0x10/0x10
[ 90.195168][ T6096] ? _raw_spin_unlock+0x28/0x50
[ 90.195190][ T6096] ? alloc_fd+0x64b/0x6c0
[ 90.195212][ T6096] do_sys_openat2+0x113/0x200
[ 90.195234][ T6096] ? __pfx_do_sys_openat2+0x10/0x10
[ 90.195253][ T6096] ? exc_page_fault+0x6a/0xc0
[ 90.195276][ T6096] ? do_user_addr_fault+0xc6f/0x1340
[ 90.195300][ T6096] __x64_sys_openat+0x138/0x170
[ 90.195322][ T6096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.195338][ T6096] do_syscall_64+0x15f/0xf80
[ 90.195361][ T6096] ? trace_irq_disable+0x3b/0x140
[ 90.195380][ T6096] ? clear_bhb_loop+0x40/0x90
[ 90.195398][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.195415][ T6096] RIP: 0033:0x7f085d2a7407
[ 90.195435][ T6096] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 90.195449][ T6096] RSP: 002b:00007ffc2917e3b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 90.195467][ T6096] RAX: ffffffffffffffda RBX: 00007f085d9d2880 RCX: 00007f085d2a7407
[ 90.195480][ T6096] RDX: 0000000000000000 RSI: 00007ffc2917ef1c RDI: ffffffffffffff9c
[ 90.195491][ T6096] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 90.195501][ T6096] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 90.195511][ T6096] R13: 00007ffc2917e600 R14: 00007f085db39000 R15: 000055aeefbf64d8
[ 90.195530][ T6096]
[ 90.195535][ T6096]
[ 90.316242][ T5190] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 90.318229][ T6096] Allocated by task 5949:
[ 90.318241][ T6096] kasan_save_track+0x3e/0x80
[ 90.486074][ T6096] __kasan_kmalloc+0x93/0xb0
[ 90.490653][ T6096] __kmalloc_cache_noprof+0x31c/0x660
[ 90.496004][ T6096] em28xx_v4l2_init+0x10b/0x2e70
[ 90.500921][ T6096] em28xx_init_extension+0x120/0x1c0
[ 90.506188][ T6096] process_scheduled_works+0xb5d/0x1860
[ 90.511730][ T6096] worker_thread+0xa53/0xfc0
[ 90.516307][ T6096] kthread+0x388/0x470
[ 90.520371][ T6096] ret_from_fork+0x514/0xb70
[ 90.524943][ T6096] ret_from_fork_asm+0x1a/0x30
[ 90.529696][ T6096]
[ 90.531998][ T6096] Freed by task 5949:
[ 90.535976][ T6096] kasan_save_track+0x3e/0x80
[ 90.540639][ T6096] kasan_save_free_info+0x46/0x50
[ 90.545648][ T6096] __kasan_slab_free+0x5c/0x80
[ 90.550399][ T6096] kfree+0x1c5/0x640
[ 90.554279][ T6096] em28xx_v4l2_init+0x1683/0x2e70
[ 90.559280][ T6096] em28xx_init_extension+0x120/0x1c0
[ 90.564540][ T6096] process_scheduled_works+0xb5d/0x1860
[ 90.565242][ T5190] usb 2-1: Using ep0 maxpacket: 32
[ 90.570063][ T6096] worker_thread+0xa53/0xfc0
[ 90.570088][ T6096] kthread+0x388/0x470
[ 90.570103][ T6096] ret_from_fork+0x514/0xb70
[ 90.578564][ T5190] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 90.579770][ T6096] ret_from_fork_asm+0x1a/0x30
[ 90.583955][ T5190] usb 2-1: config 0 has no interface number 0
[ 90.588396][ T6096]
[ 90.588402][ T6096] The buggy address belongs to the object at ffff888036d30000
[ 90.588402][ T6096] which belongs to the cache kmalloc-8k of size 8192
[ 90.588416][ T6096] The buggy address is located 2136 bytes inside of
[ 90.588416][ T6096] freed 8192-byte region [ffff888036d30000, ffff888036d32000)
[ 90.588432][ T6096]
[ 90.588437][ T6096] The buggy address belongs to the physical page:
[ 90.588458][ T6096] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888036d34000 pfn:0x36d30
[ 90.599384][ T5190] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 90.601332][ T6096] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 90.601347][ T6096] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 90.610009][ T5190] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 90.623730][ T6096] page_type: f5(slab)
[ 90.623747][ T6096] raw: 00fff00000000240 ffff88813fe33280 ffffea0001ed7210 ffffea0001faf010
[ 90.623760][ T6096] raw: ffff888036d34000 0000000800020001 00000000f5000000 0000000000000000
[ 90.623774][ T6096] head: 00fff00000000240 ffff88813fe33280 ffffea0001ed7210 ffffea0001faf010
[ 90.623787][ T6096] head: ffff888036d34000 0000000800020001 00000000f5000000 0000000000000000
[ 90.623801][ T6096] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 90.623815][ T6096] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 90.623823][ T6096] page dumped because: kasan: bad access detected
[ 90.623842][ T6096] page_owner tracks the page as allocated
[ 90.623848][ T6096] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5858, tgid 5858 (syz-executor), ts 76537370240, free_ts 74734255365
[ 90.623876][ T6096] post_alloc_hook+0x231/0x280
[ 90.623900][ T6096] get_page_from_freelist+0x239b/0x2440
[ 90.623917][ T6096] __alloc_frozen_pages_noprof+0x233/0x3d0
[ 90.623932][ T6096] allocate_slab+0x77/0x660
[ 90.623950][ T6096] refill_objects+0x339/0x3d0
[ 90.623966][ T6096] __pcs_replace_empty_main+0x321/0x720
[ 90.623982][ T6096] __kmalloc_noprof+0x474/0x760
[ 90.624003][ T6096] cache_create_net+0x98/0x230
[ 90.624020][ T6096] gss_svc_init_net+0x58/0x570
[ 90.624037][ T6096] ops_init+0x35c/0x5c0
[ 90.624056][ T6096] setup_net+0x118/0x340
[ 90.624074][ T6096] copy_net_ns+0x50e/0x730
[ 90.624091][ T6096] create_new_namespaces+0x3e7/0x6a0
[ 90.624112][ T6096] unshare_nsproxy_namespaces+0x11a/0x160
[ 90.624131][ T6096] ksys_unshare+0x521/0x980
[ 90.624144][ T6096] __x64_sys_unshare+0x38/0x50
[ 90.624159][ T6096] page last free pid 5840 tgid 5840 stack trace:
[ 90.624169][ T6096] __free_frozen_pages+0xbc7/0xd30
[ 90.624191][ T6096] __folio_put+0x4a2/0x580
[ 90.624212][ T6096] skb_release_data+0x62f/0xa80
[ 90.624233][ T6096] __kfree_skb+0x5d/0x210
[ 90.624253][ T6096] tcp_ack+0x2818/0x7dd0
[ 90.624276][ T6096] tcp_rcv_established+0x1430/0x26b0
[ 90.624299][ T6096] tcp_v4_do_rcv+0x964/0x13c0
[ 90.624316][ T6096] __release_sock+0x265/0x3a0
[ 90.624330][ T6096] __sk_flush_backlog+0x36/0xc0
[ 90.624344][ T6096] tcp_sendmsg_locked+0x4161/0x5360
[ 90.624359][ T6096] tcp_sendmsg+0x2f/0x50
[ 90.624372][ T6096] sock_write_iter+0x406/0x4f0
[ 90.624388][ T6096] vfs_write+0x61d/0xb90
[ 90.624411][ T6096] ksys_write+0x150/0x270
[ 90.624432][ T6096] do_syscall_64+0x15f/0xf80
[ 90.624451][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.624467][ T6096]
[ 90.639473][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 90.640721][ T6096] Memory state around the buggy address:
[ 90.640733][ T6096] ffff888036d30700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 90.640744][ T6096] ffff888036d30780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 90.658022][ T5190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 90.667027][ T6096] >ffff888036d30800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 90.667038][ T6096] ^
[ 90.667047][ T6096] ffff888036d30880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 90.667058][ T6096] ffff888036d30900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 90.667065][ T6096] ==================================================================
[ 90.668415][ T24] em28xx 3-1:0.132: Closing input extension
[ 90.696917][ T5190] usb 2-1: Product: syz
[ 90.712321][ T24] em28xx 3-1:0.132: Freeing device
[ 90.719429][ T5190] usb 2-1: Manufacturer: syz
[ 90.732148][ T6096] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 90.732165][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 90.732184][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 90.732198][ T6096] Call Trace:
[ 90.732206][ T6096]
[ 90.732214][ T6096] vpanic+0x56c/0xa60
[ 90.732236][ T6096] ? __pfx_vpanic+0x10/0x10
[ 90.732253][ T6096] ? __pfx___schedule+0x10/0x10
[ 90.732278][ T6096] panic+0xc5/0xd0
[ 90.732292][ T6096] ? __pfx_panic+0x10/0x10
[ 90.732307][ T6096] ? preempt_schedule_thunk+0x16/0x30
[ 90.732330][ T6096] ? v4l2_open+0x395/0x3a0
[ 90.732346][ T6096] check_panic_on_warn+0x89/0xb0
[ 90.732367][ T6096] ? v4l2_open+0x395/0x3a0
[ 90.732385][ T6096] end_report+0x73/0x170
[ 90.732402][ T6096] ? v4l2_open+0x395/0x3a0
[ 90.732416][ T6096] kasan_report+0x128/0x150
[ 90.732433][ T6096] ? v4l2_open+0x395/0x3a0
[ 90.732451][ T6096] v4l2_open+0x395/0x3a0
[ 90.732468][ T6096] chrdev_open+0x4cd/0x5e0
[ 90.732487][ T6096] ? __pfx_chrdev_open+0x10/0x10
[ 90.732512][ T6096] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[ 90.732540][ T6096] ? __pfx_chrdev_open+0x10/0x10
[ 90.732557][ T6096] do_dentry_open+0x785/0x14e0
[ 90.732583][ T6096] vfs_open+0x3b/0x340
[ 90.732601][ T6096] ? path_openat+0x2df0/0x3860
[ 90.732627][ T6096] path_openat+0x2e08/0x3860
[ 90.732657][ T6096] ? __pfx_stack_trace_save+0x10/0x10
[ 90.732678][ T6096] ? stack_depot_save_flags+0x33/0x810
[ 90.732704][ T6096] ? __pfx_path_openat+0x10/0x10
[ 90.732726][ T6096] ? __x64_sys_openat+0x138/0x170
[ 90.732749][ T6096] ? __lock_acquire+0x6b5/0x2cf0
[ 90.732776][ T6096] do_file_open+0x23e/0x4a0
[ 90.732802][ T6096] ? __pfx_do_file_open+0x10/0x10
[ 90.732834][ T6096] ? _raw_spin_unlock+0x28/0x50
[ 90.732854][ T6096] ? alloc_fd+0x64b/0x6c0
[ 90.732877][ T6096] do_sys_openat2+0x113/0x200
[ 90.732900][ T6096] ? __pfx_do_sys_openat2+0x10/0x10
[ 90.732920][ T6096] ? exc_page_fault+0x6a/0xc0
[ 90.732944][ T6096] ? do_user_addr_fault+0xc6f/0x1340
[ 90.732968][ T6096] __x64_sys_openat+0x138/0x170
[ 90.732990][ T6096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.733008][ T6096] do_syscall_64+0x15f/0xf80
[ 90.733031][ T6096] ? trace_irq_disable+0x3b/0x140
[ 90.733050][ T6096] ? clear_bhb_loop+0x40/0x90
[ 90.733068][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.733086][ T6096] RIP: 0033:0x7f085d2a7407
[ 90.733102][ T6096] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 90.733116][ T6096] RSP: 002b:00007ffc2917e3b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 90.733136][ T6096] RAX: ffffffffffffffda RBX: 00007f085d9d2880 RCX: 00007f085d2a7407
[ 90.733149][ T6096] RDX: 0000000000000000 RSI: 00007ffc2917ef1c RDI: ffffffffffffff9c
[ 90.733161][ T6096] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 90.733171][ T6096] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 90.733182][ T6096] R13: 00007ffc2917e600 R14: 00007f085db39000 R15: 000055aeefbf64d8
[ 90.733201][ T6096]
[ 90.736120][ T6096] Kernel Offset: disabled