Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts.
2025/11/18 14:53:04 parsed 1 programs
[ 125.818192][ T5840] cgroup: Unknown subsys name 'net'
[ 125.919655][ T5840] cgroup: Unknown subsys name 'cpuset'
[ 125.929408][ T5840] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 127.655887][ T5840] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 130.541139][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 131.087560][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 131.107272][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 131.116931][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 131.142958][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 131.156457][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 134.231591][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 134.254692][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 134.354450][ T5906] chnl_net:caif_netlink_parms(): no params data found
[ 134.382753][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 134.391745][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 134.523616][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state
[ 134.532220][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state
[ 134.541579][ T5906] bridge_slave_0: entered allmulticast mode
[ 134.552049][ T5906] bridge_slave_0: entered promiscuous mode
[ 134.567393][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state
[ 134.574538][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state
[ 134.582850][ T5906] bridge_slave_1: entered allmulticast mode
[ 134.590701][ T5906] bridge_slave_1: entered promiscuous mode
[ 134.655857][ T5906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 134.669456][ T5906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 134.712982][ T5906] team0: Port device team_slave_0 added
[ 134.721915][ T5906] team0: Port device team_slave_1 added
[ 134.769021][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 134.777987][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 134.804359][ T5906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 134.817679][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 134.824674][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 134.850983][ T5906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 134.906421][ T5906] hsr_slave_0: entered promiscuous mode
[ 134.913257][ T5906] hsr_slave_1: entered promiscuous mode
[ 135.110799][ T5906] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 135.124260][ T5906] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 135.136550][ T5906] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 135.148052][ T5906] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 135.185248][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state
[ 135.192704][ T5906] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 135.200838][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state
[ 135.207995][ T5906] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 135.274409][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0
[ 135.297714][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state
[ 135.307158][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state
[ 135.326933][ T5906] 8021q: adding VLAN 0 to HW filter on device team0
[ 135.340288][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 135.347494][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 135.361821][ T78] bridge0: port 2(bridge_slave_1) entered blocking state
[ 135.368992][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 135.622458][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 135.901667][ T5906] veth0_vlan: entered promiscuous mode
[ 135.914504][ T5906] veth1_vlan: entered promiscuous mode
[ 135.950779][ T5906] veth0_macvtap: entered promiscuous mode
[ 135.965450][ T5906] veth1_macvtap: entered promiscuous mode
[ 135.988898][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 136.007330][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 136.027510][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.038096][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.047967][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.064515][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/11/18 14:53:20 executed programs: 0
[ 136.277643][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 136.290721][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 136.302354][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 136.325180][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 136.335053][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 136.344044][ T5965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 136.344738][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 136.358558][ T5965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 136.422851][ T5965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 136.432379][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 136.515545][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 136.529098][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 136.547005][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 136.558335][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 136.575777][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 136.583415][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 136.585151][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 136.599670][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 136.607728][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 136.611726][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 136.844999][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 136.856441][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 136.865487][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 136.873265][ T5877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 136.880813][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 136.882040][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 136.889677][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 136.896979][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 136.903829][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 136.930184][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 137.595526][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 137.895341][ T5966] chnl_net:caif_netlink_parms(): no params data found
[ 137.919951][ T5962] chnl_net:caif_netlink_parms(): no params data found
[ 138.037691][ T5967] chnl_net:caif_netlink_parms(): no params data found
[ 138.143359][ T5974] chnl_net:caif_netlink_parms(): no params data found
[ 138.415794][ T5877] Bluetooth: hci0: command tx timeout
[ 138.469486][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state
[ 138.477260][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state
[ 138.484511][ T5966] bridge_slave_0: entered allmulticast mode
[ 138.493136][ T5966] bridge_slave_0: entered promiscuous mode
[ 138.499655][ T5877] Bluetooth: hci1: command tx timeout
[ 138.503649][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state
[ 138.512855][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state
[ 138.521512][ T5966] bridge_slave_1: entered allmulticast mode
[ 138.529508][ T5966] bridge_slave_1: entered promiscuous mode
[ 138.538589][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state
[ 138.545826][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state
[ 138.553005][ T5962] bridge_slave_0: entered allmulticast mode
[ 138.560640][ T5962] bridge_slave_0: entered promiscuous mode
[ 138.569179][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state
[ 138.576434][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state
[ 138.583629][ T5962] bridge_slave_1: entered allmulticast mode
[ 138.593058][ T5962] bridge_slave_1: entered promiscuous mode
[ 138.623753][ T5958] chnl_net:caif_netlink_parms(): no params data found
[ 138.684811][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 138.735033][ T5877] Bluetooth: hci2: command tx timeout
[ 138.741001][ T5877] Bluetooth: hci3: command tx timeout
[ 138.760364][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 138.787235][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 138.797898][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state
[ 138.805665][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state
[ 138.812915][ T5967] bridge_slave_0: entered allmulticast mode
[ 138.821424][ T5967] bridge_slave_0: entered promiscuous mode
[ 138.843358][ T5975] chnl_net:caif_netlink_parms(): no params data found
[ 138.882902][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 138.895449][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 138.924440][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state
[ 138.932211][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state
[ 138.939499][ T5967] bridge_slave_1: entered allmulticast mode
[ 138.947167][ T5967] bridge_slave_1: entered promiscuous mode
[ 138.976356][ T5143] Bluetooth: hci5: command tx timeout
[ 138.982041][ T5877] Bluetooth: hci4: command tx timeout
[ 139.027331][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 139.102127][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state
[ 139.109418][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state
[ 139.116907][ T5974] bridge_slave_0: entered allmulticast mode
[ 139.124468][ T5974] bridge_slave_0: entered promiscuous mode
[ 139.166734][ T5962] team0: Port device team_slave_0 added
[ 139.175087][ T5966] team0: Port device team_slave_0 added
[ 139.205562][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 139.232733][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state
[ 139.240214][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state
[ 139.247909][ T5974] bridge_slave_1: entered allmulticast mode
[ 139.255957][ T5974] bridge_slave_1: entered promiscuous mode
[ 139.280021][ T5962] team0: Port device team_slave_1 added
[ 139.307794][ T5966] team0: Port device team_slave_1 added
[ 139.317961][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 139.361362][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state
[ 139.368904][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 139.376726][ T5958] bridge_slave_0: entered allmulticast mode
[ 139.384419][ T5958] bridge_slave_0: entered promiscuous mode
[ 139.394354][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 139.401600][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 139.409720][ T5958] bridge_slave_1: entered allmulticast mode
[ 139.417698][ T5958] bridge_slave_1: entered promiscuous mode
[ 139.458536][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 139.540009][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 139.565442][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 139.572502][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 139.598931][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 139.628449][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 139.635659][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 139.662877][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 139.692607][ T5967] team0: Port device team_slave_0 added
[ 139.698827][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state
[ 139.706372][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state
[ 139.713913][ T5975] bridge_slave_0: entered allmulticast mode
[ 139.722365][ T5975] bridge_slave_0: entered promiscuous mode
[ 139.733694][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 139.760535][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 139.767588][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 139.794546][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 139.806761][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 139.813715][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 139.840566][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 139.854030][ T5967] team0: Port device team_slave_1 added
[ 139.874987][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state
[ 139.882144][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state
[ 139.889788][ T5975] bridge_slave_1: entered allmulticast mode
[ 139.897451][ T5975] bridge_slave_1: entered promiscuous mode
[ 139.924100][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 140.039059][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 140.087569][ T5958] team0: Port device team_slave_0 added
[ 140.095589][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 140.102651][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 140.129493][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 140.158258][ T5974] team0: Port device team_slave_0 added
[ 140.167706][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 140.197707][ T5958] team0: Port device team_slave_1 added
[ 140.228562][ T5962] hsr_slave_0: entered promiscuous mode
[ 140.236040][ T5962] hsr_slave_1: entered promiscuous mode
[ 140.242298][ T5962] debugfs: 'hsr0' already exists in 'hsr'
[ 140.249552][ T5962] Cannot create hsr debugfs directory
[ 140.265395][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 140.273590][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 140.299772][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 140.316072][ T5974] team0: Port device team_slave_1 added
[ 140.325549][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 140.455381][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 140.462541][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 140.488645][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 140.499735][ T5877] Bluetooth: hci0: command tx timeout
[ 140.503061][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 140.512358][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 140.539268][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 140.575318][ T5877] Bluetooth: hci1: command tx timeout
[ 140.627618][ T5966] hsr_slave_0: entered promiscuous mode
[ 140.634247][ T5966] hsr_slave_1: entered promiscuous mode
[ 140.641829][ T5966] debugfs: 'hsr0' already exists in 'hsr'
[ 140.648495][ T5966] Cannot create hsr debugfs directory
[ 140.694426][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 140.701742][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 140.727929][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 140.742188][ T5975] team0: Port device team_slave_0 added
[ 140.751847][ T5975] team0: Port device team_slave_1 added
[ 140.761074][ T12] bridge_slave_1: left allmulticast mode
[ 140.767364][ T12] bridge_slave_1: left promiscuous mode
[ 140.773959][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 140.786766][ T12] bridge_slave_0: left allmulticast mode
[ 140.792510][ T12] bridge_slave_0: left promiscuous mode
[ 140.798997][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 140.815189][ T5877] Bluetooth: hci3: command tx timeout
[ 140.815594][ T5143] Bluetooth: hci2: command tx timeout
[ 141.051099][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 141.055092][ T5143] Bluetooth: hci4: command tx timeout
[ 141.060073][ T5877] Bluetooth: hci5: command tx timeout
[ 141.074912][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 141.086063][ T12] bond0 (unregistering): Released all slaves
[ 141.220306][ T5967] hsr_slave_0: entered promiscuous mode
[ 141.229378][ T5967] hsr_slave_1: entered promiscuous mode
[ 141.236268][ T5967] debugfs: 'hsr0' already exists in 'hsr'
[ 141.242093][ T5967] Cannot create hsr debugfs directory
[ 141.249143][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 141.256706][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 141.283094][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 141.472302][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 141.480066][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 141.506344][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 141.519168][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 141.526650][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 141.553186][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 141.571291][ T5958] hsr_slave_0: entered promiscuous mode
[ 141.578066][ T5958] hsr_slave_1: entered promiscuous mode
[ 141.584403][ T5958] debugfs: 'hsr0' already exists in 'hsr'
[ 141.590197][ T5958] Cannot create hsr debugfs directory
[ 141.660846][ T5974] hsr_slave_0: entered promiscuous mode
[ 141.667733][ T5974] hsr_slave_1: entered promiscuous mode
[ 141.674049][ T5974] debugfs: 'hsr0' already exists in 'hsr'
[ 141.680577][ T5974] Cannot create hsr debugfs directory
[ 141.920153][ T5975] hsr_slave_0: entered promiscuous mode
[ 141.928032][ T5975] hsr_slave_1: entered promiscuous mode
[ 141.934241][ T5975] debugfs: 'hsr0' already exists in 'hsr'
[ 141.940085][ T5975] Cannot create hsr debugfs directory
[ 142.025201][ T12] hsr_slave_0: left promiscuous mode
[ 142.031463][ T12] hsr_slave_1: left promiscuous mode
[ 142.038015][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 142.045459][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 142.053571][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 142.061106][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 142.081373][ T12] veth1_macvtap: left promiscuous mode
[ 142.087064][ T12] veth0_macvtap: left promiscuous mode
[ 142.092667][ T12] veth1_vlan: left promiscuous mode
[ 142.098174][ T12] veth0_vlan: left promiscuous mode
[ 142.409677][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 142.428370][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 142.435293][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 142.447349][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 142.585132][ T5877] Bluetooth: hci0: command tx timeout
[ 142.654791][ T5877] Bluetooth: hci1: command tx timeout
[ 142.895093][ T5877] Bluetooth: hci3: command tx timeout
[ 142.895525][ T5143] Bluetooth: hci2: command tx timeout
[ 143.135306][ T5143] Bluetooth: hci5: command tx timeout
[ 143.140765][ T5143] Bluetooth: hci4: command tx timeout
[ 143.166902][ T5962] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 143.227618][ T5962] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 143.241307][ T5962] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 143.281357][ T5962] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 143.402658][ T5966] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 143.456546][ T5966] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 143.493630][ T5966] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 143.507113][ T5966] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 143.559010][ T5958] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 143.587859][ T5958] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 143.627275][ T5958] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 143.669501][ T5958] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 143.760172][ T5967] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 143.827448][ T5967] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 143.842052][ T5967] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 143.881462][ T5967] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 144.003589][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0
[ 144.013044][ T5974] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 144.028069][ T5974] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 144.079511][ T5974] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 144.090480][ T5974] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 144.117499][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0
[ 144.211260][ T5966] 8021q: adding VLAN 0 to HW filter on device team0
[ 144.247616][ T5962] 8021q: adding VLAN 0 to HW filter on device team0
[ 144.289989][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.297187][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 144.411950][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.419273][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.432459][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.439666][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 144.488784][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.496186][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.521506][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0
[ 144.563182][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0
[ 144.654930][ T5143] Bluetooth: hci0: command tx timeout
[ 144.715858][ T5967] 8021q: adding VLAN 0 to HW filter on device team0
[ 144.735364][ T5143] Bluetooth: hci1: command tx timeout
[ 144.750599][ T5958] 8021q: adding VLAN 0 to HW filter on device team0
[ 144.816573][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.823738][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 144.843125][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.850387][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 144.861338][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.868556][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.957544][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.964758][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.974874][ T5143] Bluetooth: hci2: command tx timeout
[ 144.980397][ T5143] Bluetooth: hci3: command tx timeout
[ 144.997855][ T5962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 145.026102][ T5975] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 145.075251][ T5975] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 145.088800][ T5975] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 145.132741][ T5975] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 145.215105][ T5143] Bluetooth: hci5: command tx timeout
[ 145.215205][ T5877] Bluetooth: hci4: command tx timeout
[ 145.274488][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0
[ 145.312231][ T5967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 145.398693][ T5958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 145.518661][ T5974] 8021q: adding VLAN 0 to HW filter on device team0
[ 145.592114][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state
[ 145.599313][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 145.689253][ T50] bridge0: port 2(bridge_slave_1) entered blocking state
[ 145.696509][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 145.853484][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 145.982430][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0
[ 146.009701][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 146.122252][ T5975] 8021q: adding VLAN 0 to HW filter on device team0
[ 146.153516][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 146.203234][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 146.210464][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 146.297592][ T50] bridge0: port 2(bridge_slave_1) entered blocking state
[ 146.304798][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 146.438805][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 146.536415][ T5966] veth0_vlan: entered promiscuous mode
[ 146.583982][ T5967] veth0_vlan: entered promiscuous mode
[ 146.596268][ T5962] veth0_vlan: entered promiscuous mode
[ 146.617655][ T5966] veth1_vlan: entered promiscuous mode
[ 146.643817][ T5962] veth1_vlan: entered promiscuous mode
[ 146.668590][ T5967] veth1_vlan: entered promiscuous mode
[ 146.693582][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 146.838092][ T5966] veth0_macvtap: entered promiscuous mode
[ 146.911160][ T5966] veth1_macvtap: entered promiscuous mode
[ 146.949110][ T5958] veth0_vlan: entered promiscuous mode
[ 146.961480][ T5962] veth0_macvtap: entered promiscuous mode
[ 147.008104][ T5958] veth1_vlan: entered promiscuous mode
[ 147.029788][ T5967] veth0_macvtap: entered promiscuous mode
[ 147.046729][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 147.091340][ T5962] veth1_macvtap: entered promiscuous mode
[ 147.120619][ T5967] veth1_macvtap: entered promiscuous mode
[ 147.141901][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 147.291154][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 147.306720][ T78] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.334907][ T78] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.350646][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 147.380629][ T5958] veth0_macvtap: entered promiscuous mode
[ 147.418019][ T78] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.440637][ T78] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.464392][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 147.481785][ T5958] veth1_macvtap: entered promiscuous mode
[ 147.512542][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 147.577643][ T4361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.590425][ T4361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.625289][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 147.644241][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 147.656952][ T4361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.666812][ T4361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.712986][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 147.723739][ T4361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.746488][ T4361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.802397][ T4361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.861990][ T4361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.885092][ T4361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.893875][ T4361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.932854][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 147.963778][ T4361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.977657][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 147.985673][ T4361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 148.128731][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 148.135157][ T5974] veth0_vlan: entered promiscuous mode
[ 148.153187][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 148.219371][ T5974] veth1_vlan: entered promiscuous mode
2025/11/18 14:53:32 executed programs: 12
[ 148.356570][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 148.364434][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 148.458765][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 148.484682][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 148.533048][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 148.549726][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 148.616172][ T5974] veth0_macvtap: entered promiscuous mode
[ 148.640502][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 148.652385][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 148.660961][ T6111] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 148.673759][ T5974] veth1_macvtap: entered promiscuous mode
[ 148.797727][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 148.813613][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 148.834406][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 148.845816][ T6111] usb 4-1: Using ep0 maxpacket: 32
[ 148.876943][ T6111] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[ 148.880316][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 148.898964][ T5975] veth0_vlan: entered promiscuous mode
[ 148.900253][ T6111] usb 4-1: config 0 has no interface number 0
[ 148.913136][ T6111] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 148.926589][ T6111] usb 4-1: config 0 interface 89 has no altsetting 0
[ 148.957518][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 148.968360][ T6111] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 148.974559][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.006522][ T6111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 149.019142][ T5975] veth1_vlan: entered promiscuous mode
[ 149.025557][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 149.034440][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 149.039057][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.055063][ T6111] usb 4-1: Product: syz
[ 149.059254][ T6111] usb 4-1: Manufacturer: syz
[ 149.064043][ T6111] usb 4-1: SerialNumber: syz
[ 149.070367][ T6128] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 149.104828][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.107284][ T6111] usb 4-1: config 0 descriptor??
[ 149.151098][ T6111] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 149.187048][ T6111] em28xx 4-1:0.89: Video interface 89 found:
[ 149.236217][ T6128] usb 1-1: Using ep0 maxpacket: 32
[ 149.254362][ T6128] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 149.287988][ T6128] usb 1-1: config 0 has no interface number 0
[ 149.305683][ T6128] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 149.339569][ T6128] usb 1-1: config 0 interface 89 has no altsetting 0
[ 149.344336][ T5975] veth0_macvtap: entered promiscuous mode
[ 149.359152][ T6128] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 149.368705][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 149.372871][ T5975] veth1_macvtap: entered promiscuous mode
[ 149.384852][ T6128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 149.397510][ T6128] usb 1-1: Product: syz
[ 149.401708][ T6128] usb 1-1: Manufacturer: syz
[ 149.407181][ T6128] usb 1-1: SerialNumber: syz
[ 149.417097][ T6111] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[ 149.421078][ T6128] usb 1-1: config 0 descriptor??
[ 149.445373][ T6128] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 149.450481][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 149.473754][ T6128] em28xx 1-1:0.89: Video interface 89 found:
[ 149.481044][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 149.524137][ T6111] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 149.546254][ T24] usb 3-1: Using ep0 maxpacket: 32
[ 149.553727][ T6111] em28xx 4-1:0.89: board has no eeprom
[ 149.561017][ T24] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[ 149.569625][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 149.585396][ T24] usb 3-1: config 0 has no interface number 0
[ 149.591556][ T24] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 149.612446][ T24] usb 3-1: config 0 interface 89 has no altsetting 0
[ 149.634331][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 149.634498][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 149.651122][ T6111] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[ 149.667491][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 149.675546][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 149.676077][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 149.684056][ T24] usb 3-1: Product: syz
[ 149.691939][ T6111] em28xx 4-1:0.89: analog set to bulk mode.
[ 149.698086][ T24] usb 3-1: Manufacturer: syz
[ 149.707001][ T24] usb 3-1: SerialNumber: syz
[ 149.709090][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 149.721773][ T6128] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[ 149.722526][ T10] em28xx 4-1:0.89: Registering V4L2 extension
[ 149.731148][ T24] usb 3-1: config 0 descriptor??
[ 149.749370][ T6111] usb 4-1: USB disconnect, device number 2
[ 149.755477][ T43] usb 2-1: Using ep0 maxpacket: 32
[ 149.770732][ T43] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[ 149.787183][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.796420][ T43] usb 2-1: config 0 has no interface number 0
[ 149.802545][ T43] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 149.820420][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.825102][ T24] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 149.846248][ T6128] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 149.851628][ T6111] em28xx 4-1:0.89: Disconnecting em28xx
[ 149.862504][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.871550][ T6128] em28xx 1-1:0.89: board has no eeprom
[ 149.877370][ T43] usb 2-1: config 0 interface 89 has no altsetting 0
[ 149.884103][ T24] em28xx 3-1:0.89: Video interface 89 found:
[ 149.898076][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.907514][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 149.933744][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 149.951130][ T43] usb 2-1: Product: syz
[ 149.953627][ T10] em28xx 4-1:0.89: Config register raw data: 0xffffffed
[ 149.959081][ T6128] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[ 149.964242][ T10] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[ 149.972531][ T43] usb 2-1: Manufacturer: syz
[ 149.996243][ T6128] em28xx 1-1:0.89: analog set to bulk mode.
[ 150.006314][ T24] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[ 150.024643][ T10] em28xx 4-1:0.89: No AC97 audio processor
[ 150.026055][ T43] usb 2-1: SerialNumber: syz
[ 150.061967][ T10] usb 4-1: Decoder not found
[ 150.072366][ T6128] usb 1-1: USB disconnect, device number 2
[ 150.083716][ T10] em28xx 4-1:0.89: failed to create media graph
[ 150.090092][ T24] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 150.090148][ T24] em28xx 3-1:0.89: board has no eeprom
[ 150.142064][ T43] usb 2-1: config 0 descriptor??
[ 150.144473][ T10] em28xx 4-1:0.89: V4L2 device video103 deregistered
[ 150.149575][ T6128] em28xx 1-1:0.89: Disconnecting em28xx
[ 150.186353][ T24] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[ 150.218966][ T24] em28xx 3-1:0.89: analog set to bulk mode.
[ 150.223496][ T10] em28xx 4-1:0.89: Registering snapshot button...
[ 150.247234][ T43] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 150.268287][ T24] usb 3-1: USB disconnect, device number 2
[ 150.277005][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input5
[ 150.286608][ T24] em28xx 3-1:0.89: Disconnecting em28xx
[ 150.294466][ T43] em28xx 2-1:0.89: Video interface 89 found:
[ 150.305845][ T5900] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 150.339168][ T10] em28xx 4-1:0.89: Remote control support is not available for this card.
[ 150.353648][ T5960] em28xx 1-1:0.89: Registering V4L2 extension
[ 150.444419][ T5960] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[ 150.454799][ T43] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[ 150.462029][ T5960] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[ 150.475722][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 150.483642][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 150.495625][ T5900] usb 5-1: Using ep0 maxpacket: 32
[ 150.509214][ T5900] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[ 150.517859][ T5960] em28xx 1-1:0.89: No AC97 audio processor
[ 150.520498][ T5960] usb 1-1: Decoder not found
[ 150.536394][ T43] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 150.541091][ T5900] usb 5-1: config 0 has no interface number 0
[ 150.558757][ T43] em28xx 2-1:0.89: board has no eeprom
[ 150.568033][ T5960] em28xx 1-1:0.89: failed to create media graph
[ 150.582511][ T5960] em28xx 1-1:0.89: V4L2 device video103 deregistered
[ 150.586289][ T5900] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 150.593475][ T5960] em28xx 1-1:0.89: Registering snapshot button...
[ 150.608131][ T5960] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input6
[ 150.615404][ T5900] usb 5-1: config 0 interface 89 has no altsetting 0
[ 150.631796][ T5960] em28xx 1-1:0.89: Remote control support is not available for this card.
[ 150.639672][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 150.640823][ T43] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[ 150.650743][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 150.658920][ T6069] em28xx 3-1:0.89: Registering V4L2 extension
[ 150.669889][ T43] em28xx 2-1:0.89: analog set to bulk mode.
[ 150.673160][ T5900] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 150.712183][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 150.713764][ T43] usb 2-1: USB disconnect, device number 2
[ 150.745157][ T5900] usb 5-1: Product: syz
[ 150.761826][ T5900] usb 5-1: Manufacturer: syz
[ 150.784273][ T5900] usb 5-1: SerialNumber: syz
[ 150.788272][ T43] em28xx 2-1:0.89: Disconnecting em28xx
[ 150.810531][ T5900] usb 5-1: config 0 descriptor??
[ 150.830128][ T6069] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[ 150.839352][ T6069] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[ 150.840198][ T5900] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 150.852631][ T6069] em28xx 3-1:0.89: No AC97 audio processor
[ 150.874121][ T5900] em28xx 5-1:0.89: Video interface 89 found:
[ 150.912048][ T6069] usb 3-1: Decoder not found
[ 150.922612][ T6069] em28xx 3-1:0.89: failed to create media graph
[ 150.939456][ T6069] em28xx 3-1:0.89: V4L2 device video103 deregistered
[ 150.981363][ T6069] em28xx 3-1:0.89: Registering snapshot button...
[ 151.008075][ T6069] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input7
[ 151.024525][ T6069] em28xx 3-1:0.89: Remote control support is not available for this card.
[ 151.046187][ T24] em28xx 3-1:0.89: Closing input extension
[ 151.052989][ T24] em28xx 3-1:0.89: Deregistering snapshot button
[ 151.087650][ T6111] em28xx 4-1:0.89: Closing input extension
[ 151.095634][ T6111] em28xx 4-1:0.89: Deregistering snapshot button
[ 151.100025][ T24] em28xx 3-1:0.89: Freeing device
[ 151.106530][ T5900] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[ 151.137060][ T6128] em28xx 1-1:0.89: Closing input extension
[ 151.143067][ T6128] em28xx 1-1:0.89: Deregistering snapshot button
[ 151.160497][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 151.163702][ T5960] em28xx 2-1:0.89: Registering V4L2 extension
[ 151.172226][ T6111] em28xx 4-1:0.89: Freeing device
[ 151.195989][ T6128] em28xx 1-1:0.89: Freeing device
[ 151.196982][ T5900] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 151.255446][ T5900] em28xx 5-1:0.89: board has no eeprom
[ 151.294558][ T5960] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[ 151.324437][ T5960] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[ 151.339795][ T5900] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[ 151.348694][ T5960] em28xx 2-1:0.89: No AC97 audio processor
[ 151.355963][ T5900] em28xx 5-1:0.89: analog set to bulk mode.
[ 151.365278][ T10] usb 6-1: Using ep0 maxpacket: 32
[ 151.366553][ T5960] usb 2-1: Decoder not found
[ 151.382810][ T10] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 151.403929][ T5900] usb 5-1: USB disconnect, device number 2
[ 151.411042][ T10] usb 6-1: config 0 has no interface number 0
[ 151.415234][ T5960] em28xx 2-1:0.89: failed to create media graph
[ 151.421209][ T5900] em28xx 5-1:0.89: Disconnecting em28xx
[ 151.432946][ T10] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 151.434455][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 151.446777][ T10] usb 6-1: config 0 interface 89 has no altsetting 0
[ 151.451694][ T5960] em28xx 2-1:0.89: V4L2 device video103 deregistered
[ 151.475807][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 151.485932][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 151.497677][ T6185] ==================================================================
[ 151.505744][ T6185] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 151.513222][ T6185] Read of size 8 at addr ffff8880327e8740 by task v4l_id/6185
[ 151.520762][ T6185]
[ 151.523105][ T6185] CPU: 1 UID: 0 PID: 6185 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 151.523144][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 151.523165][ T6185] Call Trace:
[ 151.523177][ T6185]
[ 151.523189][ T6185] dump_stack_lvl+0x116/0x1f0
[ 151.523235][ T6185] print_report+0xcd/0x630
[ 151.523267][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 151.523308][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 151.523349][ T6185] ? __phys_addr+0xe8/0x180
[ 151.523398][ T6185] ? v4l2_fh_init+0x27d/0x2c0
[ 151.523441][ T6185] kasan_report+0xe0/0x110
[ 151.523474][ T6185] ? v4l2_fh_init+0x27d/0x2c0
[ 151.523521][ T6185] v4l2_fh_init+0x27d/0x2c0
[ 151.523565][ T6185] v4l2_fh_open+0x64/0xa0
[ 151.523608][ T6185] em28xx_v4l2_open+0x24e/0x7e0
[ 151.523657][ T6185] v4l2_open+0x1d2/0x5e0
[ 151.523695][ T6185] ? __pfx_v4l2_open+0x10/0x10
[ 151.523732][ T6185] chrdev_open+0x234/0x6a0
[ 151.523765][ T6185] ? __pfx_chrdev_open+0x10/0x10
[ 151.523796][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 151.523837][ T6185] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 151.523904][ T6185] do_dentry_open+0x982/0x1530
[ 151.523956][ T6185] ? __pfx_chrdev_open+0x10/0x10
[ 151.523987][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 151.524031][ T6185] vfs_open+0x82/0x3f0
[ 151.524065][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 151.524109][ T6185] path_openat+0x1de4/0x2cb0
[ 151.524169][ T6185] ? __pfx_path_openat+0x10/0x10
[ 151.524223][ T6185] ? __lock_acquire+0xb8a/0x1c90
[ 151.524281][ T6185] do_filp_open+0x20b/0x470
[ 151.524334][ T6185] ? __pfx_do_filp_open+0x10/0x10
[ 151.524402][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 151.524442][ T6185] ? alloc_fd+0x471/0x7d0
[ 151.524499][ T6185] do_sys_openat2+0x11b/0x1d0
[ 151.524537][ T6185] ? __pfx_do_sys_openat2+0x10/0x10
[ 151.524575][ T6185] ? find_held_lock+0x2b/0x80
[ 151.524622][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 151.524674][ T6185] __x64_sys_openat+0x174/0x210
[ 151.524717][ T6185] ? __pfx___x64_sys_openat+0x10/0x10
[ 151.524759][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 151.524800][ T6185] ? do_user_addr_fault+0x843/0x1370
[ 151.524841][ T6185] do_syscall_64+0xcd/0xfa0
[ 151.524914][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 151.524948][ T6185] RIP: 0033:0x7f8a946a7407
[ 151.524974][ T6185] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 151.525007][ T6185] RSP: 002b:00007ffdc2878a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 151.525038][ T6185] RAX: ffffffffffffffda RBX: 00007f8a94df9880 RCX: 00007f8a946a7407
[ 151.525060][ T6185] RDX: 0000000000000000 RSI: 00007ffdc2878f1d RDI: ffffffffffffff9c
[ 151.525082][ T6185] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 151.525103][ T6185] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 151.525123][ T6185] R13: 00007ffdc2878cd0 R14: 00007f8a94f60000 R15: 000055bb0f6d84d8
[ 151.525157][ T6185]
[ 151.525169][ T6185]
[ 151.820136][ T6185] Allocated by task 5960:
[ 151.824546][ T6185] kasan_save_stack+0x33/0x60
[ 151.829263][ T6185] kasan_save_track+0x14/0x30
[ 151.833958][ T6185] __kasan_kmalloc+0xaa/0xb0
[ 151.838566][ T6185] em28xx_v4l2_init+0x114/0x4080
[ 151.843519][ T6185] em28xx_init_extension+0x13a/0x200
[ 151.848829][ T6185] request_module_async+0x61/0x70
[ 151.853863][ T6185] process_one_work+0x9cf/0x1b70
[ 151.858812][ T6185] worker_thread+0x6c8/0xf10
[ 151.863414][ T6185] kthread+0x3c5/0x780
[ 151.867479][ T6185] ret_from_fork+0x675/0x7d0
[ 151.872069][ T6185] ret_from_fork_asm+0x1a/0x30
[ 151.876850][ T6185]
[ 151.879165][ T6185] Freed by task 5960:
[ 151.883132][ T6185] kasan_save_stack+0x33/0x60
[ 151.887828][ T6185] kasan_save_track+0x14/0x30
[ 151.892531][ T6185] __kasan_save_free_info+0x3b/0x60
[ 151.897738][ T6185] __kasan_slab_free+0x5f/0x80
[ 151.902524][ T6185] kfree+0x2b8/0x6d0
[ 151.906436][ T6185] em28xx_v4l2_init+0x22b5/0x4080
[ 151.911478][ T6185] em28xx_init_extension+0x13a/0x200
[ 151.916791][ T6185] request_module_async+0x61/0x70
[ 151.921817][ T6185] process_one_work+0x9cf/0x1b70
[ 151.926771][ T6185] worker_thread+0x6c8/0xf10
[ 151.931367][ T6185] kthread+0x3c5/0x780
[ 151.935438][ T6185] ret_from_fork+0x675/0x7d0
[ 151.940030][ T6185] ret_from_fork_asm+0x1a/0x30
[ 151.944819][ T6185]
[ 151.947134][ T6185] The buggy address belongs to the object at ffff8880327e8000
[ 151.947134][ T6185] which belongs to the cache kmalloc-8k of size 8192
[ 151.961194][ T6185] The buggy address is located 1856 bytes inside of
[ 151.961194][ T6185] freed 8192-byte region [ffff8880327e8000, ffff8880327ea000)
[ 151.975176][ T6185]
[ 151.977493][ T6185] The buggy address belongs to the physical page:
[ 151.983897][ T6185] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x327e8
[ 151.992659][ T6185] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 152.001947][ T6185] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 152.009937][ T6185] page_type: f5(slab)
[ 152.013937][ T6185] raw: 00fff00000000040 ffff88813ffa7280 0000000000000000 dead000000000001
[ 152.022701][ T6185] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 152.031302][ T6185] head: 00fff00000000040 ffff88813ffa7280 0000000000000000 dead000000000001
[ 152.039983][ T6185] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 152.048659][ T6185] head: 00fff00000000003 ffffea0000c9fa01 00000000ffffffff 00000000ffffffff
[ 152.057339][ T6185] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 152.066006][ T6185] page dumped because: kasan: bad access detected
[ 152.072514][ T6185] page_owner tracks the page as allocated
[ 152.078217][ T6185] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5565, tgid 5565 (S50crond), ts 71350001964, free_ts 66622108096
[ 152.098475][ T6185] post_alloc_hook+0x1c0/0x230
[ 152.103263][ T6185] get_page_from_freelist+0x10a3/0x3a30
[ 152.108829][ T6185] __alloc_frozen_pages_noprof+0x25f/0x2470
[ 152.114748][ T6185] alloc_pages_mpol+0x1fb/0x550
[ 152.119611][ T6185] new_slab+0x24a/0x360
[ 152.123780][ T6185] ___slab_alloc+0xd79/0x1a50
[ 152.128471][ T6185] __slab_alloc.constprop.0+0x63/0x110
[ 152.133955][ T6185] __kmalloc_cache_noprof+0x477/0x780
[ 152.139351][ T6185] tomoyo_init_log+0xc8a/0x2140
[ 152.144214][ T6185] tomoyo_supervisor+0x302/0x13b0
[ 152.149257][ T6185] tomoyo_env_perm+0x191/0x200
[ 152.154058][ T6185] tomoyo_find_next_domain+0xec2/0x20b0
[ 152.159628][ T6185] tomoyo_bprm_check_security+0x12e/0x1d0
[ 152.165367][ T6185] security_bprm_check+0x1b9/0x1e0
[ 152.170500][ T6185] bprm_execve+0x81a/0x1640
[ 152.175021][ T6185] do_execveat_common.isra.0+0x4a5/0x610
[ 152.180684][ T6185] page last free pid 5473 tgid 5473 stack trace:
[ 152.187002][ T6185] __free_frozen_pages+0x7df/0x1160
[ 152.192207][ T6185] qlist_free_all+0x4d/0x120
[ 152.196815][ T6185] kasan_quarantine_reduce+0x195/0x1e0
[ 152.202292][ T6185] __kasan_slab_alloc+0x69/0x90
[ 152.207169][ T6185] __kmalloc_cache_noprof+0x274/0x780
[ 152.212555][ T6185] tomoyo_init_log+0x197/0x2140
[ 152.217413][ T6185] tomoyo_supervisor+0x302/0x13b0
[ 152.222454][ T6185] tomoyo_path_permission+0x270/0x3b0
[ 152.227847][ T6185] tomoyo_check_open_permission+0x37b/0x3c0
[ 152.233768][ T6185] tomoyo_file_open+0x6b/0x90
[ 152.238457][ T6185] security_file_open+0x84/0x1e0
[ 152.243399][ T6185] do_dentry_open+0x596/0x1530
[ 152.248186][ T6185] vfs_open+0x82/0x3f0
[ 152.252341][ T6185] path_openat+0x1de4/0x2cb0
[ 152.256968][ T6185] do_filp_open+0x20b/0x470
[ 152.261516][ T6185] do_sys_openat2+0x11b/0x1d0
[ 152.266206][ T6185]
[ 152.268516][ T6185] Memory state around the buggy address:
[ 152.274139][ T6185] ffff8880327e8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 152.282204][ T6185] ffff8880327e8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 152.290267][ T6185] >ffff8880327e8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 152.298326][ T6185] ^
[ 152.304479][ T6185] ffff8880327e8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 152.312632][ T6185] ffff8880327e8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 152.320698][ T6185] ==================================================================
[ 152.334015][ T5960] em28xx 2-1:0.89: Registering snapshot button...
[ 152.348417][ T5960] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input8
[ 152.350983][ T10] usb 6-1: Product: syz
[ 152.372571][ T10] usb 6-1: Manufacturer: syz
[ 152.377284][ T10] usb 6-1: SerialNumber: syz
[ 152.386992][ T6128] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 152.388029][ T10] usb 6-1: config 0 descriptor??
[ 152.406934][ T10] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 152.418535][ T10] em28xx 6-1:0.89: Video interface 89 found:
[ 152.444866][ T6111] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 152.453132][ T5960] em28xx 2-1:0.89: Remote control support is not available for this card.
[ 152.468737][ T43] em28xx 2-1:0.89: Closing input extension
[ 152.474717][ T43] em28xx 2-1:0.89: Deregistering snapshot button
[ 152.482505][ T6185] Disabling lock debugging due to kernel taint
[ 152.491043][ T6185] ==================================================================
[ 152.499151][ T6185] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0xd4/0x2c0
[ 152.506558][ T6185] Write of size 8 at addr ffff8880327e87a8 by task v4l_id/6185
[ 152.514116][ T6185]
[ 152.516468][ T6185] CPU: 1 UID: 0 PID: 6185 Comm: v4l_id Tainted: G B syzkaller #0 PREEMPT(full)
[ 152.516522][ T6185] Tainted: [B]=BAD_PAGE
[ 152.516535][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 152.516557][ T6185] Call Trace:
[ 152.516569][ T6185]
[ 152.516582][ T6185] dump_stack_lvl+0x116/0x1f0
[ 152.516634][ T6185] print_report+0xcd/0x630
[ 152.516669][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.516714][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.516758][ T6185] ? __phys_addr+0xe8/0x180
[ 152.516812][ T6185] ? v4l2_fh_init+0xd4/0x2c0
[ 152.516859][ T6185] kasan_report+0xe0/0x110
[ 152.516900][ T6185] ? v4l2_fh_init+0xd4/0x2c0
[ 152.516951][ T6185] kasan_check_range+0x100/0x1b0
[ 152.516995][ T6185] v4l2_fh_init+0xd4/0x2c0
[ 152.517042][ T6185] v4l2_fh_open+0x64/0xa0
[ 152.517090][ T6185] em28xx_v4l2_open+0x24e/0x7e0
[ 152.517143][ T6185] v4l2_open+0x1d2/0x5e0
[ 152.517184][ T6185] ? __pfx_v4l2_open+0x10/0x10
[ 152.517225][ T6185] chrdev_open+0x234/0x6a0
[ 152.517259][ T6185] ? __pfx_chrdev_open+0x10/0x10
[ 152.517293][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.517339][ T6185] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 152.517407][ T6185] do_dentry_open+0x982/0x1530
[ 152.517463][ T6185] ? __pfx_chrdev_open+0x10/0x10
[ 152.517499][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.517546][ T6185] vfs_open+0x82/0x3f0
[ 152.517583][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.517631][ T6185] path_openat+0x1de4/0x2cb0
[ 152.517697][ T6185] ? __pfx_path_openat+0x10/0x10
[ 152.517755][ T6185] ? __lock_acquire+0xb8a/0x1c90
[ 152.517819][ T6185] do_filp_open+0x20b/0x470
[ 152.517877][ T6185] ? __pfx_do_filp_open+0x10/0x10
[ 152.517954][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.517998][ T6185] ? alloc_fd+0x471/0x7d0
[ 152.518060][ T6185] do_sys_openat2+0x11b/0x1d0
[ 152.518101][ T6185] ? __pfx_do_sys_openat2+0x10/0x10
[ 152.518141][ T6185] ? find_held_lock+0x2b/0x80
[ 152.518186][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.518237][ T6185] __x64_sys_openat+0x174/0x210
[ 152.518281][ T6185] ? __pfx___x64_sys_openat+0x10/0x10
[ 152.518325][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.518370][ T6185] ? do_user_addr_fault+0x843/0x1370
[ 152.518415][ T6185] do_syscall_64+0xcd/0xfa0
[ 152.518464][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 152.518503][ T6185] RIP: 0033:0x7f8a946a7407
[ 152.518531][ T6185] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 152.518567][ T6185] RSP: 002b:00007ffdc2878a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 152.518600][ T6185] RAX: ffffffffffffffda RBX: 00007f8a94df9880 RCX: 00007f8a946a7407
[ 152.518625][ T6185] RDX: 0000000000000000 RSI: 00007ffdc2878f1d RDI: ffffffffffffff9c
[ 152.518648][ T6185] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 152.518669][ T6185] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 152.518691][ T6185] R13: 00007ffdc2878cd0 R14: 00007f8a94f60000 R15: 000055bb0f6d84d8
[ 152.518727][ T6185]
[ 152.518739][ T6185]
[ 152.825244][ T6185] Allocated by task 5960:
[ 152.829743][ T6185] kasan_save_stack+0x33/0x60
[ 152.834621][ T6185] kasan_save_track+0x14/0x30
[ 152.839323][ T6185] __kasan_kmalloc+0xaa/0xb0
[ 152.843933][ T6185] em28xx_v4l2_init+0x114/0x4080
[ 152.848892][ T6185] em28xx_init_extension+0x13a/0x200
[ 152.854205][ T6185] request_module_async+0x61/0x70
[ 152.859237][ T6185] process_one_work+0x9cf/0x1b70
[ 152.864185][ T6185] worker_thread+0x6c8/0xf10
[ 152.868783][ T6185] kthread+0x3c5/0x780
[ 152.872857][ T6185] ret_from_fork+0x675/0x7d0
[ 152.877457][ T6185] ret_from_fork_asm+0x1a/0x30
[ 152.882241][ T6185]
[ 152.884553][ T6185] Freed by task 5960:
[ 152.888525][ T6185] kasan_save_stack+0x33/0x60
[ 152.893238][ T6185] kasan_save_track+0x14/0x30
[ 152.897973][ T6185] __kasan_save_free_info+0x3b/0x60
[ 152.903292][ T6185] __kasan_slab_free+0x5f/0x80
[ 152.908085][ T6185] kfree+0x2b8/0x6d0
[ 152.912007][ T6185] em28xx_v4l2_init+0x22b5/0x4080
[ 152.917155][ T6185] em28xx_init_extension+0x13a/0x200
[ 152.922473][ T6185] request_module_async+0x61/0x70
[ 152.927504][ T6185] process_one_work+0x9cf/0x1b70
[ 152.932460][ T6185] worker_thread+0x6c8/0xf10
[ 152.937054][ T6185] kthread+0x3c5/0x780
[ 152.941122][ T6185] ret_from_fork+0x675/0x7d0
[ 152.945890][ T6185] ret_from_fork_asm+0x1a/0x30
[ 152.950678][ T6185]
[ 152.952991][ T6185] The buggy address belongs to the object at ffff8880327e8000
[ 152.952991][ T6185] which belongs to the cache kmalloc-8k of size 8192
[ 152.967216][ T6185] The buggy address is located 1960 bytes inside of
[ 152.967216][ T6185] freed 8192-byte region [ffff8880327e8000, ffff8880327ea000)
[ 152.981201][ T6185]
[ 152.983524][ T6185] The buggy address belongs to the physical page:
[ 152.990016][ T6185] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x327e8
[ 152.998786][ T6185] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 153.007441][ T6185] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 153.015435][ T6185] page_type: f5(slab)
[ 153.019455][ T6185] raw: 00fff00000000040 ffff88813ffa7280 0000000000000000 dead000000000001
[ 153.028058][ T6185] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 153.036751][ T6185] head: 00fff00000000040 ffff88813ffa7280 0000000000000000 dead000000000001
[ 153.045437][ T6185] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 153.054118][ T6185] head: 00fff00000000003 ffffea0000c9fa01 00000000ffffffff 00000000ffffffff
[ 153.062803][ T6185] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 153.071479][ T6185] page dumped because: kasan: bad access detected
[ 153.077930][ T6185] page_owner tracks the page as allocated
[ 153.083636][ T6185] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5565, tgid 5565 (S50crond), ts 71350001964, free_ts 66622108096
[ 153.103944][ T6185] post_alloc_hook+0x1c0/0x230
[ 153.108738][ T6185] get_page_from_freelist+0x10a3/0x3a30
[ 153.114309][ T6185] __alloc_frozen_pages_noprof+0x25f/0x2470
[ 153.120230][ T6185] alloc_pages_mpol+0x1fb/0x550
[ 153.125095][ T6185] new_slab+0x24a/0x360
[ 153.129272][ T6185] ___slab_alloc+0xd79/0x1a50
[ 153.133976][ T6185] __slab_alloc.constprop.0+0x63/0x110
[ 153.139469][ T6185] __kmalloc_cache_noprof+0x477/0x780
[ 153.144862][ T6185] tomoyo_init_log+0xc8a/0x2140
[ 153.149725][ T6185] tomoyo_supervisor+0x302/0x13b0
[ 153.154765][ T6185] tomoyo_env_perm+0x191/0x200
[ 153.159555][ T6185] tomoyo_find_next_domain+0xec2/0x20b0
[ 153.165132][ T6185] tomoyo_bprm_check_security+0x12e/0x1d0
[ 153.170925][ T6185] security_bprm_check+0x1b9/0x1e0
[ 153.176070][ T6185] bprm_execve+0x81a/0x1640
[ 153.180604][ T6185] do_execveat_common.isra.0+0x4a5/0x610
[ 153.186271][ T6185] page last free pid 5473 tgid 5473 stack trace:
[ 153.192617][ T6185] __free_frozen_pages+0x7df/0x1160
[ 153.197885][ T6185] qlist_free_all+0x4d/0x120
[ 153.202502][ T6185] kasan_quarantine_reduce+0x195/0x1e0
[ 153.207993][ T6185] __kasan_slab_alloc+0x69/0x90
[ 153.212909][ T6185] __kmalloc_cache_noprof+0x274/0x780
[ 153.218298][ T6185] tomoyo_init_log+0x197/0x2140
[ 153.223161][ T6185] tomoyo_supervisor+0x302/0x13b0
[ 153.228203][ T6185] tomoyo_path_permission+0x270/0x3b0
[ 153.233609][ T6185] tomoyo_check_open_permission+0x37b/0x3c0
[ 153.239534][ T6185] tomoyo_file_open+0x6b/0x90
[ 153.244234][ T6185] security_file_open+0x84/0x1e0
[ 153.249193][ T6185] do_dentry_open+0x596/0x1530
[ 153.254024][ T6185] vfs_open+0x82/0x3f0
[ 153.258124][ T6185] path_openat+0x1de4/0x2cb0
[ 153.262755][ T6185] do_filp_open+0x20b/0x470
[ 153.267386][ T6185] do_sys_openat2+0x11b/0x1d0
[ 153.272090][ T6185]
[ 153.274417][ T6185] Memory state around the buggy address:
[ 153.280050][ T6185] ffff8880327e8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 153.288123][ T6185] ffff8880327e8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 153.296293][ T6185] >ffff8880327e8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 153.304359][ T6185] ^
[ 153.309729][ T6185] ffff8880327e8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 153.317794][ T6185] ffff8880327e8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 153.325852][ T6185] ==================================================================
2025/11/18 14:53:37 executed programs: 22
[ 153.410633][ T6185] Kernel panic - not syncing: kasan.fault=panic_on_write set ...
[ 153.418408][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: v4l_id Tainted: G B syzkaller #0 PREEMPT(full)
[ 153.428959][ T6185] Tainted: [B]=BAD_PAGE
[ 153.433142][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 153.443213][ T6185] Call Trace:
[ 153.446494][ T6185]
[ 153.449439][ T6185] dump_stack_lvl+0x3d/0x1f0
[ 153.454079][ T6185] vpanic+0x640/0x6f0
[ 153.458110][ T6185] panic+0xca/0xd0
[ 153.461889][ T6185] ? __pfx_panic+0x10/0x10
[ 153.466347][ T6185] ? v4l2_fh_init+0xd4/0x2c0
[ 153.470972][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.476638][ T6185] ? preempt_schedule_thunk+0x16/0x30
[ 153.482066][ T6185] end_report+0x159/0x170
[ 153.486413][ T6185] kasan_report+0xee/0x110
[ 153.490843][ T6185] ? v4l2_fh_init+0xd4/0x2c0
[ 153.495476][ T6185] kasan_check_range+0x100/0x1b0
[ 153.500434][ T6185] v4l2_fh_init+0xd4/0x2c0
[ 153.504873][ T6185] v4l2_fh_open+0x64/0xa0
[ 153.509226][ T6185] em28xx_v4l2_open+0x24e/0x7e0
[ 153.514104][ T6185] v4l2_open+0x1d2/0x5e0
[ 153.518361][ T6185] ? __pfx_v4l2_open+0x10/0x10
[ 153.523138][ T6185] chrdev_open+0x234/0x6a0
[ 153.527564][ T6185] ? __pfx_chrdev_open+0x10/0x10
[ 153.532512][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.538163][ T6185] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 153.544534][ T6185] do_dentry_open+0x982/0x1530
[ 153.549333][ T6185] ? __pfx_chrdev_open+0x10/0x10
[ 153.554331][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.559999][ T6185] vfs_open+0x82/0x3f0
[ 153.564085][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.569740][ T6185] path_openat+0x1de4/0x2cb0
[ 153.574456][ T6185] ? __pfx_path_openat+0x10/0x10
[ 153.579424][ T6185] ? __lock_acquire+0xb8a/0x1c90
[ 153.584396][ T6185] do_filp_open+0x20b/0x470
[ 153.588929][ T6185] ? __pfx_do_filp_open+0x10/0x10
[ 153.593996][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.599645][ T6185] ? alloc_fd+0x471/0x7d0
[ 153.604015][ T6185] do_sys_openat2+0x11b/0x1d0
[ 153.608711][ T6185] ? __pfx_do_sys_openat2+0x10/0x10
[ 153.613926][ T6185] ? find_held_lock+0x2b/0x80
[ 153.618625][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.624292][ T6185] __x64_sys_openat+0x174/0x210
[ 153.629161][ T6185] ? __pfx___x64_sys_openat+0x10/0x10
[ 153.634561][ T6185] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.640213][ T6185] ? do_user_addr_fault+0x843/0x1370
[ 153.645514][ T6185] do_syscall_64+0xcd/0xfa0
[ 153.650040][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 153.655942][ T6185] RIP: 0033:0x7f8a946a7407
[ 153.660363][ T6185] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 153.679988][ T6185] RSP: 002b:00007ffdc2878a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 153.688430][ T6185] RAX: ffffffffffffffda RBX: 00007f8a94df9880 RCX: 00007f8a946a7407
[ 153.696423][ T6185] RDX: 0000000000000000 RSI: 00007ffdc2878f1d RDI: ffffffffffffff9c
[ 153.704411][ T6185] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 153.712392][ T6185] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 153.720368][ T6185] R13: 00007ffdc2878cd0 R14: 00007f8a94f60000 R15: 000055bb0f6d84d8
[ 153.728361][ T6185]
[ 153.731635][ T6185] Kernel Offset: disabled
[ 153.735951][ T6185] Rebooting in 86400 seconds..