Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. 2025/11/24 20:05:43 parsed 1 programs [ 78.212346][ T5833] cgroup: Unknown subsys name 'net' [ 78.362253][ T5833] cgroup: Unknown subsys name 'cpuset' [ 78.371033][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.780417][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.646014][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.655706][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.671272][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.693852][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.702894][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.987237][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.249834][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.257801][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.417961][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.431184][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.339468][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 84.893268][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.930895][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.938182][ T5864] bridge_slave_0: entered allmulticast mode [ 84.953690][ T5864] bridge_slave_0: entered promiscuous mode [ 85.351683][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.371541][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.403342][ T5864] bridge_slave_1: entered allmulticast mode [ 85.415368][ T5864] bridge_slave_1: entered promiscuous mode [ 85.544634][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.571321][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.639573][ T5864] team0: Port device team_slave_0 added [ 85.652341][ T5864] team0: Port device team_slave_1 added [ 85.762982][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.770092][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.796043][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.845294][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.852595][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.879317][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.063724][ T5864] hsr_slave_0: entered promiscuous mode [ 86.070771][ T5864] hsr_slave_1: entered promiscuous mode [ 86.802441][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.849005][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.858523][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.875849][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.883949][ T89] cfg80211: failed to load regulatory.db [ 86.999077][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.017357][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.037840][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.045174][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.061415][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.068541][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.225125][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.270580][ T5864] veth0_vlan: entered promiscuous mode [ 87.281598][ T5864] veth1_vlan: entered promiscuous mode [ 87.307980][ T5864] veth0_macvtap: entered promiscuous mode [ 87.318173][ T5864] veth1_macvtap: entered promiscuous mode [ 87.337587][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.352638][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.367152][ T3505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.376722][ T3505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.391390][ T3505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.400223][ T3505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/11/24 20:05:54 executed programs: 0 [ 87.633549][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.643307][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.654190][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.666261][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.674779][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.686442][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.690601][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.701563][ T5959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.702032][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.717184][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.730849][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.739305][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.739452][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.747585][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.761280][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.788183][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.796009][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.803824][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.812292][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.821050][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.825880][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.845120][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.878121][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.886123][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.894088][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.193056][ T3470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.496478][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 88.524327][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 88.599302][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 88.810384][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 88.881062][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.888248][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.895928][ T5947] bridge_slave_0: entered allmulticast mode [ 88.903271][ T5947] bridge_slave_0: entered promiscuous mode [ 88.925454][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.932856][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.940371][ T5946] bridge_slave_0: entered allmulticast mode [ 88.947449][ T5946] bridge_slave_0: entered promiscuous mode [ 88.968400][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.975717][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.983013][ T5948] bridge_slave_0: entered allmulticast mode [ 88.990188][ T5948] bridge_slave_0: entered promiscuous mode [ 88.997895][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.005363][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.012964][ T5948] bridge_slave_1: entered allmulticast mode [ 89.020960][ T5948] bridge_slave_1: entered promiscuous mode [ 89.028012][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.035725][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.042986][ T5947] bridge_slave_1: entered allmulticast mode [ 89.050086][ T5947] bridge_slave_1: entered promiscuous mode [ 89.078152][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.085494][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.092784][ T5946] bridge_slave_1: entered allmulticast mode [ 89.100009][ T5946] bridge_slave_1: entered promiscuous mode [ 89.132316][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 89.195418][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.234095][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.246651][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.258078][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.311969][ T3470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.330308][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.343046][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.395805][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.403122][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.410956][ T5953] bridge_slave_0: entered allmulticast mode [ 89.417890][ T5953] bridge_slave_0: entered promiscuous mode [ 89.463695][ T3470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.480551][ T5947] team0: Port device team_slave_0 added [ 89.497480][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.505236][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.513265][ T5953] bridge_slave_1: entered allmulticast mode [ 89.520317][ T5953] bridge_slave_1: entered promiscuous mode [ 89.538351][ T5948] team0: Port device team_slave_0 added [ 89.546237][ T5947] team0: Port device team_slave_1 added [ 89.589067][ T3470] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.616279][ T5946] team0: Port device team_slave_0 added [ 89.624054][ T5948] team0: Port device team_slave_1 added [ 89.678166][ T5946] team0: Port device team_slave_1 added [ 89.708610][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.716040][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.743056][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.754567][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.762106][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.769982][ T5961] bridge_slave_0: entered allmulticast mode [ 89.776894][ T5961] bridge_slave_0: entered promiscuous mode [ 89.787939][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.810915][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.817889][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.829919][ T5959] Bluetooth: hci1: command tx timeout [ 89.845394][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.850164][ T5150] Bluetooth: hci0: command tx timeout [ 89.867809][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.875304][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.901636][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.912311][ T5959] Bluetooth: hci4: command tx timeout [ 89.918937][ T5150] Bluetooth: hci3: command tx timeout [ 89.919143][ T52] Bluetooth: hci2: command tx timeout [ 89.928981][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.937133][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.944987][ T5961] bridge_slave_1: entered allmulticast mode [ 89.952071][ T5961] bridge_slave_1: entered promiscuous mode [ 89.961801][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.972883][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.980277][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.006361][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.020673][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.027633][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.053651][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.065539][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.073462][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.099821][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.167140][ T5953] team0: Port device team_slave_0 added [ 90.222690][ T5947] hsr_slave_0: entered promiscuous mode [ 90.230522][ T5947] hsr_slave_1: entered promiscuous mode [ 90.236957][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 90.243166][ T5947] Cannot create hsr debugfs directory [ 90.263276][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.274290][ T5953] team0: Port device team_slave_1 added [ 90.326615][ T5948] hsr_slave_0: entered promiscuous mode [ 90.333590][ T5948] hsr_slave_1: entered promiscuous mode [ 90.340278][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 90.346035][ T5948] Cannot create hsr debugfs directory [ 90.355217][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.381018][ T5946] hsr_slave_0: entered promiscuous mode [ 90.387298][ T5946] hsr_slave_1: entered promiscuous mode [ 90.393688][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 90.399472][ T5946] Cannot create hsr debugfs directory [ 90.503414][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.510595][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.537196][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.597040][ T5961] team0: Port device team_slave_0 added [ 90.603609][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.611740][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.638259][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.710402][ T5961] team0: Port device team_slave_1 added [ 90.787664][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.795138][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.821509][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.870902][ T3470] bridge_slave_1: left allmulticast mode [ 90.876662][ T3470] bridge_slave_1: left promiscuous mode [ 90.883933][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.894773][ T3470] bridge_slave_0: left allmulticast mode [ 90.901610][ T3470] bridge_slave_0: left promiscuous mode [ 90.907306][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.132945][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.146258][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.156547][ T3470] bond0 (unregistering): Released all slaves [ 91.215743][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.223028][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.249065][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.317387][ T5953] hsr_slave_0: entered promiscuous mode [ 91.324166][ T5953] hsr_slave_1: entered promiscuous mode [ 91.330664][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 91.339827][ T5953] Cannot create hsr debugfs directory [ 91.571062][ T3470] hsr_slave_0: left promiscuous mode [ 91.577051][ T3470] hsr_slave_1: left promiscuous mode [ 91.583213][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.592359][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.601825][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.609587][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.632223][ T3470] veth1_macvtap: left promiscuous mode [ 91.638457][ T3470] veth0_macvtap: left promiscuous mode [ 91.644563][ T3470] veth1_vlan: left promiscuous mode [ 91.650224][ T3470] veth0_vlan: left promiscuous mode [ 91.909329][ T5959] Bluetooth: hci0: command tx timeout [ 91.916847][ T52] Bluetooth: hci1: command tx timeout [ 91.985801][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 91.993064][ T52] Bluetooth: hci2: command tx timeout [ 92.003509][ T52] Bluetooth: hci4: command tx timeout [ 92.004428][ T5959] Bluetooth: hci3: command tx timeout [ 92.034091][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 92.284021][ T5961] hsr_slave_0: entered promiscuous mode [ 92.291129][ T5961] hsr_slave_1: entered promiscuous mode [ 92.624946][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.680216][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.707790][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.787950][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.891700][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.916703][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.930974][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.942803][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.060921][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.078238][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.091943][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.106580][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.184362][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.307236][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.361978][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.369169][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.411917][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.419112][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.511006][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.616883][ T5953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.645481][ T5953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.676041][ T5953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.705434][ T5953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.725325][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.848412][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.855623][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.865145][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.872423][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.926408][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.947444][ T5961] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.957593][ T5961] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.968459][ T5961] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.980532][ T5961] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.990399][ T5959] Bluetooth: hci1: command tx timeout [ 93.990865][ T52] Bluetooth: hci0: command tx timeout [ 94.032866][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.068293][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.075520][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.080166][ T52] Bluetooth: hci4: command tx timeout [ 94.085098][ T5959] Bluetooth: hci2: command tx timeout [ 94.088103][ T5150] Bluetooth: hci3: command tx timeout [ 94.112058][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.162481][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.169737][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.395084][ T5946] veth0_vlan: entered promiscuous mode [ 94.425221][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.459311][ T5946] veth1_vlan: entered promiscuous mode [ 94.521212][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.565179][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.617186][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.633341][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.640562][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.680940][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.688105][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.716025][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.723303][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.776067][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.783272][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.831627][ T5946] veth0_macvtap: entered promiscuous mode [ 94.851955][ T5946] veth1_macvtap: entered promiscuous mode [ 94.896578][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.936935][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.976498][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.025377][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.074154][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.133520][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.154880][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.185175][ T5947] veth0_vlan: entered promiscuous mode [ 95.216563][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.303270][ T5947] veth1_vlan: entered promiscuous mode [ 95.335586][ T5948] veth0_vlan: entered promiscuous mode [ 95.408419][ T5948] veth1_vlan: entered promiscuous mode [ 95.530071][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.537929][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.622148][ T5947] veth0_macvtap: entered promiscuous mode [ 95.647851][ T5948] veth0_macvtap: entered promiscuous mode [ 95.653971][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.661152][ T5948] veth1_macvtap: entered promiscuous mode [ 95.673473][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.681010][ T5947] veth1_macvtap: entered promiscuous mode [ 95.720736][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 2025/11/24 20:06:03 executed programs: 10 [ 95.763526][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.802723][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.843992][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.880178][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.906460][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.963648][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.992153][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.001735][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.031109][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.062598][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.075549][ T5150] Bluetooth: hci1: command tx timeout [ 96.082788][ T52] Bluetooth: hci0: command tx timeout [ 96.099430][ T5861] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.109598][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.151516][ T5150] Bluetooth: hci3: command tx timeout [ 96.156997][ T52] Bluetooth: hci4: command tx timeout [ 96.157052][ T5959] Bluetooth: hci2: command tx timeout [ 96.192461][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.244541][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.301542][ T5861] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 96.317210][ T5861] usb 1-1: config 0 has no interface number 0 [ 96.333847][ T5861] usb 1-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 96.371673][ T5861] usb 1-1: config 0 interface 244 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 96.405989][ T5861] usb 1-1: config 0 interface 244 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.412426][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.427498][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.432062][ T5953] veth0_vlan: entered promiscuous mode [ 96.445503][ T5861] usb 1-1: New USB device found, idVendor=2040, idProduct=026d, bcdDevice=57.6a [ 96.456698][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.465576][ T5861] usb 1-1: Product: syz [ 96.471927][ T5861] usb 1-1: Manufacturer: syz [ 96.476624][ T5861] usb 1-1: SerialNumber: syz [ 96.496486][ T5861] usb 1-1: config 0 descriptor?? [ 96.515302][ T5861] em28xx 1-1:0.244: New device syz syz @ 480 Mbps (2040:026d, interface 244, class 244) [ 96.530639][ T5861] em28xx 1-1:0.244: Audio interface 244 found (Vendor Class) [ 96.555841][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.567529][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.580968][ T5953] veth1_vlan: entered promiscuous mode [ 96.678351][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.692958][ T5961] veth0_vlan: entered promiscuous mode [ 96.703148][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.711107][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.751970][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.775842][ T5953] veth0_macvtap: entered promiscuous mode [ 96.792091][ T5861] em28xx 1-1:0.244: unknown em28xx chip ID (0) [ 96.816468][ T5961] veth1_vlan: entered promiscuous mode [ 96.828950][ T5861] em28xx 1-1:0.244: Config register raw data: 0xfffffffb [ 96.842404][ T5953] veth1_macvtap: entered promiscuous mode [ 96.858160][ T5861] em28xx 1-1:0.244: AC97 chip type couldn't be determined [ 96.887649][ T5861] em28xx 1-1:0.244: No AC97 audio processor [ 96.915369][ T5861] em28xx 1-1:0.244: We currently don't support analog TV or stream capture on dual tuners. [ 96.936626][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.972538][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.014297][ T3505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.024975][ T5861] em28xx 1-1:0.244: unknown em28xx chip ID (0) [ 97.043906][ T5861] em28xx 1-1:0.244: Config register raw data: 0xfffffffb [ 97.048791][ T3505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052515][ T5861] em28xx 1-1:0.244: AC97 chip type couldn't be determined [ 97.063511][ T3505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.070082][ T5861] em28xx 1-1:0.244: No AC97 audio processor [ 97.087334][ T5961] veth0_macvtap: entered promiscuous mode [ 97.105321][ T3505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.148333][ T5961] veth1_macvtap: entered promiscuous mode [ 97.218472][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.226599][ T89] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.228899][ T1168] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.243776][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.254249][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.295782][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.348260][ T3505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.370993][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.373491][ T3505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.389306][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.400116][ T89] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 97.401923][ T3505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.408480][ T89] usb 3-1: config 0 has no interface number 0 [ 97.435668][ T3505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.446440][ T1168] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 97.448982][ T89] usb 3-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.457965][ T1168] usb 2-1: config 0 has no interface number 0 [ 97.478967][ T89] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 97.479329][ T1168] usb 2-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.502628][ T89] usb 3-1: config 0 interface 244 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.505909][ T1168] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 97.538222][ T1168] usb 2-1: config 0 interface 244 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.561166][ T5861] usb 1-1: USB disconnect, device number 2 [ 97.575194][ T89] usb 3-1: New USB device found, idVendor=2040, idProduct=026d, bcdDevice=57.6a [ 97.586810][ T5861] em28xx 1-1:0.244: Disconnecting em28xx #1 [ 97.594684][ T1168] usb 2-1: New USB device found, idVendor=2040, idProduct=026d, bcdDevice=57.6a [ 97.603744][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.603767][ T89] usb 3-1: Product: syz [ 97.603779][ T89] usb 3-1: Manufacturer: syz [ 97.603791][ T89] usb 3-1: SerialNumber: syz [ 97.606611][ T89] usb 3-1: config 0 descriptor?? [ 97.641364][ T5861] em28xx 1-1:0.244: Disconnecting em28xx [ 97.648799][ T1168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.677410][ T5861] em28xx 1-1:0.244: Freeing device [ 97.683820][ T1168] usb 2-1: Product: syz [ 97.686203][ T5861] em28xx 1-1:0.244: Freeing device [ 97.696657][ T1168] usb 2-1: Manufacturer: syz [ 97.706613][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.720383][ T89] em28xx 3-1:0.244: New device syz syz @ 480 Mbps (2040:026d, interface 244, class 244) [ 97.729399][ T1168] usb 2-1: SerialNumber: syz [ 97.749377][ T89] em28xx 3-1:0.244: Audio interface 244 found (Vendor Class) [ 97.755189][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.769646][ T1168] usb 2-1: config 0 descriptor?? [ 97.793622][ T1168] em28xx 2-1:0.244: New device syz syz @ 480 Mbps (2040:026d, interface 244, class 244) [ 97.816609][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.828299][ T1168] em28xx 2-1:0.244: Audio interface 244 found (Vendor Class) [ 97.840766][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.992939][ T89] em28xx 3-1:0.244: unknown em28xx chip ID (0) [ 98.000692][ T6107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.010164][ T89] em28xx 3-1:0.244: Config register raw data: 0xfffffffb [ 98.019001][ T89] em28xx 3-1:0.244: AC97 chip type couldn't be determined [ 98.026136][ T89] em28xx 3-1:0.244: No AC97 audio processor [ 98.033088][ T89] ================================================================== [ 98.041211][ T89] BUG: KASAN: use-after-free in __list_add_valid_or_report+0x6a/0x130 [ 98.049366][ T89] Read of size 8 at addr ffff888063cb0250 by task kworker/0:2/89 [ 98.057066][ T89] [ 98.059386][ T89] CPU: 0 UID: 0 PID: 89 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 98.059398][ T89] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.059406][ T89] Workqueue: usb_hub_wq hub_event [ 98.059425][ T89] Call Trace: [ 98.059431][ T89] [ 98.059437][ T89] dump_stack_lvl+0x189/0x250 [ 98.059451][ T89] ? __kasan_check_byte+0x12/0x40 [ 98.059461][ T89] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.059472][ T89] ? lock_release+0x4b/0x3e0 [ 98.059483][ T89] ? __virt_addr_valid+0x4a5/0x5c0 [ 98.059496][ T89] print_report+0xca/0x240 [ 98.059507][ T89] ? __list_add_valid_or_report+0x6a/0x130 [ 98.059520][ T89] kasan_report+0x118/0x150 [ 98.059530][ T89] ? __list_add_valid_or_report+0x6a/0x130 [ 98.059544][ T89] __list_add_valid_or_report+0x6a/0x130 [ 98.059557][ T89] em28xx_init_extension+0x56/0x1c0 [ 98.059570][ T89] ? media_device_init+0x280/0x450 [ 98.059583][ T89] em28xx_init_dev+0x9bd/0x20b0 [ 98.059597][ T89] ? __pfx_em28xx_init_dev+0x10/0x10 [ 98.059609][ T89] ? __pfx__dev_info+0x10/0x10 [ 98.059625][ T89] em28xx_usb_probe+0x14e9/0x2a20 [ 98.059660][ T89] usb_probe_interface+0x668/0xc30 [ 98.059672][ T89] ? __pfx_usb_probe_interface+0x10/0x10 [ 98.059682][ T89] really_probe+0x26d/0x9e0 [ 98.059696][ T89] __driver_probe_device+0x18c/0x2f0 [ 98.059708][ T89] driver_probe_device+0x4f/0x430 [ 98.059721][ T89] __device_attach_driver+0x2ce/0x530 [ 98.059733][ T89] bus_for_each_drv+0x251/0x2e0 [ 98.059742][ T89] ? __pfx___device_attach_driver+0x10/0x10 [ 98.059754][ T89] ? __pfx_bus_for_each_drv+0x10/0x10 [ 98.059770][ T89] __device_attach+0x2b8/0x400 [ 98.059782][ T89] ? __pfx___device_attach+0x10/0x10 [ 98.059794][ T89] ? do_raw_spin_unlock+0x122/0x240 [ 98.059806][ T89] bus_probe_device+0x185/0x260 [ 98.059816][ T89] device_add+0x7b6/0xb50 [ 98.059828][ T89] usb_set_configuration+0x1a87/0x20e0 [ 98.059843][ T89] usb_generic_driver_probe+0x8d/0x150 [ 98.059854][ T89] usb_probe_device+0x1c4/0x390 [ 98.059865][ T89] ? __pfx_usb_probe_device+0x10/0x10 [ 98.059874][ T89] really_probe+0x26d/0x9e0 [ 98.059886][ T89] __driver_probe_device+0x18c/0x2f0 [ 98.059898][ T89] driver_probe_device+0x4f/0x430 [ 98.059910][ T89] __device_attach_driver+0x2ce/0x530 [ 98.059923][ T89] bus_for_each_drv+0x251/0x2e0 [ 98.059931][ T89] ? __pfx___device_attach_driver+0x10/0x10 [ 98.059943][ T89] ? __pfx_bus_for_each_drv+0x10/0x10 [ 98.059954][ T89] __device_attach+0x2b8/0x400 [ 98.059965][ T89] ? __pfx___device_attach+0x10/0x10 [ 98.059977][ T89] ? do_raw_spin_unlock+0x122/0x240 [ 98.059989][ T89] bus_probe_device+0x185/0x260 [ 98.059998][ T89] device_add+0x7b6/0xb50 [ 98.060009][ T89] usb_new_device+0xa39/0x16f0 [ 98.060024][ T89] ? __pfx_usb_new_device+0x10/0x10 [ 98.060037][ T89] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.060049][ T89] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.060062][ T89] hub_event+0x2958/0x4a20 [ 98.060080][ T89] ? __pfx_hub_event+0x10/0x10 [ 98.060089][ T89] ? process_scheduled_works+0x9ef/0x17b0 [ 98.060100][ T89] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.060111][ T89] ? process_scheduled_works+0x9ef/0x17b0 [ 98.060120][ T89] ? process_scheduled_works+0x9ef/0x17b0 [ 98.060130][ T89] process_scheduled_works+0xae1/0x17b0 [ 98.060145][ T89] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.060158][ T89] worker_thread+0x8a0/0xda0 [ 98.060169][ T89] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 98.060182][ T89] ? __kthread_parkme+0x7b/0x200 [ 98.060194][ T89] kthread+0x711/0x8a0 [ 98.060206][ T89] ? __pfx_worker_thread+0x10/0x10 [ 98.060216][ T89] ? __pfx_kthread+0x10/0x10 [ 98.060227][ T89] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.060238][ T89] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.060250][ T89] ? __pfx_kthread+0x10/0x10 [ 98.060261][ T89] ret_from_fork+0x4bc/0x870 [ 98.060271][ T89] ? __pfx_ret_from_fork+0x10/0x10 [ 98.060281][ T89] ? __switch_to_asm+0x39/0x70 [ 98.060289][ T89] ? __switch_to_asm+0x33/0x70 [ 98.060296][ T89] ? __pfx_kthread+0x10/0x10 [ 98.060307][ T89] ret_from_fork_asm+0x1a/0x30 [ 98.060319][ T89] [ 98.060323][ T89] [ 98.092810][ T1168] em28xx 2-1:0.244: unknown em28xx chip ID (0) [ 98.095353][ T89] The buggy address belongs to the physical page: [ 98.095384][ T89] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888063cb0000 pfn:0x63cb0 [ 98.104537][ T1168] em28xx 2-1:0.244: Config register raw data: 0xfffffffb [ 98.105551][ T89] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 98.111074][ T1168] em28xx 2-1:0.244: AC97 chip type couldn't be determined [ 98.115237][ T89] raw: 00fff00000000000 ffffea0001f0c108 ffffea000150f908 0000000000000000 [ 98.115253][ T89] raw: ffff888063cb0000 0000000000000000 00000000ffffffff 0000000000000000 [ 98.119758][ T1168] em28xx 2-1:0.244: No AC97 audio processor [ 98.125454][ T89] page dumped because: kasan: bad access detected [ 98.125477][ T89] page_owner tracks the page as freed [ 98.125483][ T89] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40cc0(GFP_KERNEL|__GFP_COMP), pid 5861, tgid 5861 (kworker/0:4), ts 96953271017, free_ts 97686167728 [ 98.125510][ T89] post_alloc_hook+0x234/0x290 [ 98.565853][ T89] get_page_from_freelist+0x2365/0x2440 [ 98.571416][ T89] __alloc_frozen_pages_noprof+0x181/0x370 [ 98.577208][ T89] alloc_pages_mpol+0x232/0x4a0 [ 98.582042][ T89] ___kmalloc_large_node+0x5f/0x1b0 [ 98.587224][ T89] __kmalloc_large_node_noprof+0x18/0x90 [ 98.592849][ T89] __kmalloc_node_track_caller_noprof+0x133/0x800 [ 98.599268][ T89] kmemdup_noprof+0x2b/0x70 [ 98.603772][ T89] em28xx_duplicate_dev+0x2e/0x200 [ 98.608874][ T89] em28xx_usb_probe+0x171b/0x2a20 [ 98.613893][ T89] usb_probe_interface+0x668/0xc30 [ 98.618986][ T89] really_probe+0x26d/0x9e0 [ 98.623476][ T89] __driver_probe_device+0x18c/0x2f0 [ 98.628779][ T89] driver_probe_device+0x4f/0x430 [ 98.633799][ T89] __device_attach_driver+0x2ce/0x530 [ 98.639164][ T89] bus_for_each_drv+0x251/0x2e0 [ 98.644009][ T89] page last free pid 5861 tgid 5861 stack trace: [ 98.650324][ T89] __free_frozen_pages+0xbc4/0xd30 [ 98.655429][ T89] free_large_kmalloc+0x13a/0x1f0 [ 98.660437][ T89] em28xx_usb_disconnect+0x27f/0x2f0 [ 98.665707][ T89] usb_unbind_interface+0x26e/0x910 [ 98.670886][ T89] device_release_driver_internal+0x4d9/0x800 [ 98.677028][ T89] bus_remove_device+0x34d/0x410 [ 98.681985][ T89] device_del+0x511/0x8e0 [ 98.686308][ T89] usb_disable_device+0x3e9/0x8a0 [ 98.691319][ T89] usb_disconnect+0x330/0x950 [ 98.695992][ T89] hub_event+0x1cf5/0x4a20 [ 98.700396][ T89] process_scheduled_works+0xae1/0x17b0 [ 98.705933][ T89] worker_thread+0x8a0/0xda0 [ 98.710543][ T89] kthread+0x711/0x8a0 [ 98.714605][ T89] ret_from_fork+0x4bc/0x870 [ 98.719178][ T89] ret_from_fork_asm+0x1a/0x30 [ 98.723929][ T89] [ 98.726239][ T89] Memory state around the buggy address: [ 98.731934][ T89] ffff888063cb0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 98.739981][ T89] ffff888063cb0180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 98.748024][ T89] >ffff888063cb0200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 98.756066][ T89] ^ [ 98.762719][ T89] ffff888063cb0280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 98.770765][ T89] ffff888063cb0300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 98.778809][ T89] ================================================================== [ 98.819800][ T5861] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.836405][ T89] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.843723][ T89] CPU: 0 UID: 0 PID: 89 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 98.852933][ T89] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.863358][ T89] Workqueue: usb_hub_wq hub_event [ 98.868404][ T89] Call Trace: [ 98.871688][ T89] [ 98.874608][ T89] dump_stack_lvl+0x99/0x250 [ 98.879184][ T89] ? __asan_memcpy+0x40/0x70 [ 98.883775][ T89] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.888971][ T89] ? __pfx__printk+0x10/0x10 [ 98.893575][ T89] vpanic+0x237/0x6d0 [ 98.897565][ T89] ? __pfx_vpanic+0x10/0x10 [ 98.902089][ T89] ? preempt_schedule+0xae/0xc0 [ 98.906948][ T89] ? __pfx_preempt_schedule+0x10/0x10 [ 98.912308][ T89] panic+0xb9/0xc0 [ 98.916016][ T89] ? __pfx_panic+0x10/0x10 [ 98.920470][ T89] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 98.926349][ T89] ? __list_add_valid_or_report+0x6a/0x130 [ 98.932147][ T89] check_panic_on_warn+0x89/0xb0 [ 98.937085][ T89] ? __list_add_valid_or_report+0x6a/0x130 [ 98.942884][ T89] end_report+0x78/0x160 [ 98.947109][ T89] kasan_report+0x129/0x150 [ 98.951625][ T89] ? __list_add_valid_or_report+0x6a/0x130 [ 98.957435][ T89] __list_add_valid_or_report+0x6a/0x130 [ 98.963086][ T89] em28xx_init_extension+0x56/0x1c0 [ 98.968290][ T89] ? media_device_init+0x280/0x450 [ 98.973394][ T89] em28xx_init_dev+0x9bd/0x20b0 [ 98.978241][ T89] ? __pfx_em28xx_init_dev+0x10/0x10 [ 98.983522][ T89] ? __pfx__dev_info+0x10/0x10 [ 98.988284][ T89] em28xx_usb_probe+0x14e9/0x2a20 [ 98.993309][ T89] usb_probe_interface+0x668/0xc30 [ 98.998413][ T89] ? __pfx_usb_probe_interface+0x10/0x10 [ 99.004033][ T89] really_probe+0x26d/0x9e0 [ 99.008537][ T89] __driver_probe_device+0x18c/0x2f0 [ 99.013818][ T89] driver_probe_device+0x4f/0x430 [ 99.018838][ T89] __device_attach_driver+0x2ce/0x530 [ 99.024202][ T89] bus_for_each_drv+0x251/0x2e0 [ 99.029042][ T89] ? __pfx___device_attach_driver+0x10/0x10 [ 99.034938][ T89] ? __pfx_bus_for_each_drv+0x10/0x10 [ 99.040311][ T89] __device_attach+0x2b8/0x400 [ 99.045067][ T89] ? __pfx___device_attach+0x10/0x10 [ 99.050339][ T89] ? do_raw_spin_unlock+0x122/0x240 [ 99.055537][ T89] bus_probe_device+0x185/0x260 [ 99.060372][ T89] device_add+0x7b6/0xb50 [ 99.064688][ T89] usb_set_configuration+0x1a87/0x20e0 [ 99.070140][ T89] usb_generic_driver_probe+0x8d/0x150 [ 99.075586][ T89] usb_probe_device+0x1c4/0x390 [ 99.080511][ T89] ? __pfx_usb_probe_device+0x10/0x10 [ 99.085867][ T89] really_probe+0x26d/0x9e0 [ 99.090366][ T89] __driver_probe_device+0x18c/0x2f0 [ 99.095643][ T89] driver_probe_device+0x4f/0x430 [ 99.100656][ T89] __device_attach_driver+0x2ce/0x530 [ 99.106018][ T89] bus_for_each_drv+0x251/0x2e0 [ 99.110856][ T89] ? __pfx___device_attach_driver+0x10/0x10 [ 99.116741][ T89] ? __pfx_bus_for_each_drv+0x10/0x10 [ 99.122127][ T89] __device_attach+0x2b8/0x400 [ 99.126885][ T89] ? __pfx___device_attach+0x10/0x10 [ 99.132158][ T89] ? do_raw_spin_unlock+0x122/0x240 [ 99.137347][ T89] bus_probe_device+0x185/0x260 [ 99.142193][ T89] device_add+0x7b6/0xb50 [ 99.146516][ T89] usb_new_device+0xa39/0x16f0 [ 99.151275][ T89] ? __pfx_usb_new_device+0x10/0x10 [ 99.156470][ T89] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.161658][ T89] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.166848][ T89] hub_event+0x2958/0x4a20 [ 99.171263][ T89] ? __pfx_hub_event+0x10/0x10 [ 99.176007][ T89] ? process_scheduled_works+0x9ef/0x17b0 [ 99.181721][ T89] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.186941][ T89] ? process_scheduled_works+0x9ef/0x17b0 [ 99.192644][ T89] ? process_scheduled_works+0x9ef/0x17b0 [ 99.198391][ T89] process_scheduled_works+0xae1/0x17b0 [ 99.203932][ T89] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.209904][ T89] worker_thread+0x8a0/0xda0 [ 99.214484][ T89] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 99.220805][ T89] ? __kthread_parkme+0x7b/0x200 [ 99.225771][ T89] kthread+0x711/0x8a0 [ 99.229830][ T89] ? __pfx_worker_thread+0x10/0x10 [ 99.234929][ T89] ? __pfx_kthread+0x10/0x10 [ 99.239508][ T89] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.244712][ T89] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.249900][ T89] ? __pfx_kthread+0x10/0x10 [ 99.254485][ T89] ret_from_fork+0x4bc/0x870 [ 99.259060][ T89] ? __pfx_ret_from_fork+0x10/0x10 [ 99.264159][ T89] ? __switch_to_asm+0x39/0x70 [ 99.268903][ T89] ? __switch_to_asm+0x33/0x70 [ 99.273648][ T89] ? __pfx_kthread+0x10/0x10 [ 99.278236][ T89] ret_from_fork_asm+0x1a/0x30 [ 99.282994][ T89] [ 99.286340][ T89] Kernel Offset: disabled [ 99.290672][ T89] Rebooting in 86400 seconds..