Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. 2026/01/03 16:28:04 parsed 1 programs [ 93.427356][ T5831] cgroup: Unknown subsys name 'net' [ 93.625507][ T5831] cgroup: Unknown subsys name 'cpuset' [ 93.635866][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.439586][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.182961][ T24] cfg80211: failed to load regulatory.db [ 99.022224][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.227484][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.260030][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.386989][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.410612][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.189635][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 101.441448][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.450472][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.458872][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.467554][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.475395][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.820148][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.830295][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.838262][ T5884] bridge_slave_0: entered allmulticast mode [ 101.846534][ T5884] bridge_slave_0: entered promiscuous mode [ 101.870879][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.878358][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.887035][ T5884] bridge_slave_1: entered allmulticast mode [ 101.896238][ T5884] bridge_slave_1: entered promiscuous mode [ 101.969896][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.987147][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.076090][ T5884] team0: Port device team_slave_0 added [ 102.103160][ T5884] team0: Port device team_slave_1 added [ 102.492601][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.499620][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.558009][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.578946][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.594736][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.621563][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.805511][ T5884] hsr_slave_0: entered promiscuous mode [ 102.814547][ T5884] hsr_slave_1: entered promiscuous mode [ 103.107179][ T5884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.122564][ T5884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.134600][ T5884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.145873][ T5884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.236681][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.263123][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.278282][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.286068][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.306338][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.313698][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.501697][ T53] Bluetooth: hci0: command tx timeout [ 103.520202][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.577800][ T5884] veth0_vlan: entered promiscuous mode [ 103.600108][ T5884] veth1_vlan: entered promiscuous mode [ 103.634675][ T5884] veth0_macvtap: entered promiscuous mode [ 103.646308][ T5884] veth1_macvtap: entered promiscuous mode [ 103.672448][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.688458][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.708665][ T80] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.718998][ T80] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.729964][ T80] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.739539][ T80] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/03 16:28:18 executed programs: 0 [ 103.963827][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.973494][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.983436][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.994080][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.002751][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.035684][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.045924][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.059939][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.069281][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.082068][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.089615][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.096914][ T5908] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.105034][ T5908] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.118347][ T5908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.126604][ T5908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.151526][ T5908] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.162116][ T5908] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.171043][ T5908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.184239][ T5908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.193037][ T5908] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.684594][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.855709][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.907719][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 104.978816][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.050305][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 105.250109][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 105.292393][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 105.338012][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.345817][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.353705][ T5950] bridge_slave_0: entered allmulticast mode [ 105.361469][ T5950] bridge_slave_0: entered promiscuous mode [ 105.418730][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.427465][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.435275][ T5950] bridge_slave_1: entered allmulticast mode [ 105.443019][ T5950] bridge_slave_1: entered promiscuous mode [ 105.479656][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.487118][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.494957][ T5941] bridge_slave_0: entered allmulticast mode [ 105.506537][ T5941] bridge_slave_0: entered promiscuous mode [ 105.549384][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.579294][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.587028][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.594498][ T5941] bridge_slave_1: entered allmulticast mode [ 105.603389][ T5941] bridge_slave_1: entered promiscuous mode [ 105.708372][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.724012][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.752681][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.759984][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.768148][ T5943] bridge_slave_0: entered allmulticast mode [ 105.776544][ T5943] bridge_slave_0: entered promiscuous mode [ 105.833265][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.842822][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.850380][ T5943] bridge_slave_1: entered allmulticast mode [ 105.859987][ T5943] bridge_slave_1: entered promiscuous mode [ 105.872333][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.962122][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.976255][ T5950] team0: Port device team_slave_0 added [ 105.983694][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.993491][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.002223][ T5944] bridge_slave_0: entered allmulticast mode [ 106.010823][ T5944] bridge_slave_0: entered promiscuous mode [ 106.089808][ T5950] team0: Port device team_slave_1 added [ 106.122953][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.130295][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.138633][ T5944] bridge_slave_1: entered allmulticast mode [ 106.145953][ T5948] Bluetooth: hci3: command tx timeout [ 106.151979][ T5908] Bluetooth: hci1: command tx timeout [ 106.159352][ T5944] bridge_slave_1: entered promiscuous mode [ 106.170408][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.220928][ T5948] Bluetooth: hci2: command tx timeout [ 106.226928][ T5908] Bluetooth: hci4: command tx timeout [ 106.254520][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.267220][ T5941] team0: Port device team_slave_0 added [ 106.276905][ T5941] team0: Port device team_slave_1 added [ 106.298501][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.306680][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.333742][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.390279][ T5943] team0: Port device team_slave_0 added [ 106.424277][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.431470][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.458245][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.473563][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.486155][ T5943] team0: Port device team_slave_1 added [ 106.492945][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.499952][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.526378][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.547449][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.597454][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.605461][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.632311][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.683205][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.690344][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.718038][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.750146][ T5944] team0: Port device team_slave_0 added [ 106.782623][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.790380][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.817323][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.854965][ T5944] team0: Port device team_slave_1 added [ 106.902344][ T5950] hsr_slave_0: entered promiscuous mode [ 106.909213][ T5950] hsr_slave_1: entered promiscuous mode [ 106.916188][ T5950] debugfs: 'hsr0' already exists in 'hsr' [ 106.922245][ T5950] Cannot create hsr debugfs directory [ 106.930304][ T13] bridge_slave_1: left allmulticast mode [ 106.938716][ T13] bridge_slave_1: left promiscuous mode [ 106.945497][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.956988][ T13] bridge_slave_0: left allmulticast mode [ 106.963968][ T13] bridge_slave_0: left promiscuous mode [ 106.969923][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.302704][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.314641][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.325263][ T13] bond0 (unregistering): Released all slaves [ 107.389032][ T5941] hsr_slave_0: entered promiscuous mode [ 107.402402][ T5941] hsr_slave_1: entered promiscuous mode [ 107.409327][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 107.416057][ T5941] Cannot create hsr debugfs directory [ 107.466221][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.473775][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.500399][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.554172][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.561628][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.588365][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.623009][ T5943] hsr_slave_0: entered promiscuous mode [ 107.629768][ T5943] hsr_slave_1: entered promiscuous mode [ 107.636560][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 107.643093][ T5943] Cannot create hsr debugfs directory [ 107.699858][ T13] hsr_slave_0: left promiscuous mode [ 107.706909][ T13] hsr_slave_1: left promiscuous mode [ 107.713607][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.721680][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.730141][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.737884][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.761825][ T13] veth1_macvtap: left promiscuous mode [ 107.767512][ T13] veth0_macvtap: left promiscuous mode [ 107.774038][ T13] veth1_vlan: left promiscuous mode [ 107.779469][ T13] veth0_vlan: left promiscuous mode [ 108.136307][ T13] team0 (unregistering): Port device team_slave_1 removed [ 108.168816][ T13] team0 (unregistering): Port device team_slave_0 removed [ 108.221776][ T5948] Bluetooth: hci3: command tx timeout [ 108.227532][ T5908] Bluetooth: hci1: command tx timeout [ 108.310870][ T5908] Bluetooth: hci4: command tx timeout [ 108.317061][ T5948] Bluetooth: hci2: command tx timeout [ 108.631898][ T5944] hsr_slave_0: entered promiscuous mode [ 108.638783][ T5944] hsr_slave_1: entered promiscuous mode [ 109.041583][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.073307][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.143706][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.199313][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.344409][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.365255][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.422183][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.446816][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.788205][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.840899][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.854470][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.866971][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.879387][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.899167][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.949391][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.018629][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.026017][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.062720][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.082790][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.095886][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.103220][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.117581][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.130798][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.158604][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.166281][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.183180][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.198133][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.205386][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.301782][ T5948] Bluetooth: hci3: command tx timeout [ 110.307271][ T5948] Bluetooth: hci1: command tx timeout [ 110.383849][ T5948] Bluetooth: hci2: command tx timeout [ 110.383857][ T5908] Bluetooth: hci4: command tx timeout [ 110.552461][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.643462][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.726667][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.733950][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.773479][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.780834][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.875433][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.016196][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.048615][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.055921][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.085433][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.099504][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.106783][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.161135][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.355370][ T5950] veth0_vlan: entered promiscuous mode [ 111.380492][ T5941] veth0_vlan: entered promiscuous mode [ 111.418159][ T5950] veth1_vlan: entered promiscuous mode [ 111.428954][ T5941] veth1_vlan: entered promiscuous mode [ 111.508831][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.522620][ T5941] veth0_macvtap: entered promiscuous mode [ 111.551776][ T5941] veth1_macvtap: entered promiscuous mode [ 111.598127][ T5950] veth0_macvtap: entered promiscuous mode [ 111.634394][ T5950] veth1_macvtap: entered promiscuous mode [ 111.669502][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.680451][ T5943] veth0_vlan: entered promiscuous mode [ 111.698620][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.715246][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.743783][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.753634][ T1136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.763928][ T1136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.781602][ T1136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.791600][ T5943] veth1_vlan: entered promiscuous mode [ 111.806885][ T1136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.816356][ T1136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.831560][ T1136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.841803][ T1136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.857164][ T1136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.875003][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.968384][ T5943] veth0_macvtap: entered promiscuous mode [ 112.015266][ T5943] veth1_macvtap: entered promiscuous mode [ 112.057658][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.071366][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.105753][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.123072][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.153927][ T5944] veth0_vlan: entered promiscuous mode [ 112.171821][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.184756][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.205211][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.217315][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.242334][ T5944] veth1_vlan: entered promiscuous mode [ 112.259553][ T4125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.276837][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/01/03 16:28:27 executed programs: 8 [ 112.302421][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.310315][ T4125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.319816][ T4125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.371731][ T4125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.382685][ T5948] Bluetooth: hci1: command tx timeout [ 112.390747][ T5948] Bluetooth: hci3: command tx timeout [ 112.463329][ T5948] Bluetooth: hci4: command tx timeout [ 112.463339][ T5908] Bluetooth: hci2: command tx timeout [ 112.554499][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.575666][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.583172][ T5944] veth0_macvtap: entered promiscuous mode [ 112.606475][ T5944] veth1_macvtap: entered promiscuous mode [ 112.645294][ T4125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.653897][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.660250][ T4125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.704543][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.726749][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.751032][ T5977] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.761248][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.792457][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.804428][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.821221][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 112.827142][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.838788][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 112.847607][ T9] usb 1-1: config 0 has no interface number 0 [ 112.858553][ T9] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 112.879428][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 112.888906][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.905400][ T9] usb 1-1: Product: syz [ 112.909753][ T9] usb 1-1: Manufacturer: syz [ 112.916451][ T9] usb 1-1: SerialNumber: syz [ 112.942002][ T5977] usb 4-1: Using ep0 maxpacket: 32 [ 112.954549][ T9] usb 1-1: config 0 descriptor?? [ 112.963086][ T6047] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.979988][ T5977] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 113.003162][ T5977] usb 4-1: config 0 has no interface number 0 [ 113.013987][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 113.022221][ T5977] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 113.039854][ T9] em28xx 1-1:0.132: Video interface 132 found: bulk [ 113.050030][ T5977] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 113.051603][ T5934] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.077695][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.087190][ T5977] usb 4-1: Product: syz [ 113.093512][ T5977] usb 4-1: Manufacturer: syz [ 113.098860][ T5977] usb 4-1: SerialNumber: syz [ 113.105711][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.131034][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.140336][ T5977] usb 4-1: config 0 descriptor?? [ 113.148907][ T6048] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 113.168620][ T5977] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 113.200733][ T5977] em28xx 4-1:0.132: Video interface 132 found: bulk [ 113.229713][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.239818][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 113.246604][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.262018][ T5934] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 113.272948][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 113.281438][ T5934] usb 3-1: config 0 has no interface number 0 [ 113.287630][ T5934] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 113.318936][ T5934] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 113.328500][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.337584][ T5934] usb 3-1: Product: syz [ 113.357174][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 113.368581][ T5934] usb 3-1: Manufacturer: syz [ 113.382484][ T5934] usb 3-1: SerialNumber: syz [ 113.402161][ T9] em28xx 1-1:0.132: board has no eeprom [ 113.409943][ T5934] usb 3-1: config 0 descriptor?? [ 113.423866][ T6051] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 113.446046][ T5977] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 113.456458][ T5934] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 113.490089][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 113.511090][ T5934] em28xx 3-1:0.132: Video interface 132 found: bulk [ 113.519033][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 113.527508][ T6050] em28xx 1-1:0.132: Registering V4L2 extension [ 113.538640][ T5977] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 113.560848][ T5977] em28xx 4-1:0.132: board has no eeprom [ 113.572481][ T9] usb 1-1: USB disconnect, device number 2 [ 113.599446][ T9] em28xx 1-1:0.132: Disconnecting em28xx [ 113.630864][ T5977] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 113.639101][ T5977] em28xx 4-1:0.132: analog set to bulk mode. [ 113.674513][ T5977] usb 4-1: USB disconnect, device number 2 [ 113.682408][ T5977] em28xx 4-1:0.132: Disconnecting em28xx [ 113.711270][ T5934] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 113.741425][ T37] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.781728][ T6050] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 113.793218][ T6050] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 113.802893][ T5934] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 113.811978][ T6050] em28xx 1-1:0.132: No AC97 audio processor [ 113.829294][ T5934] em28xx 3-1:0.132: board has no eeprom [ 113.836067][ T6050] usb 1-1: Decoder not found [ 113.841234][ T6050] em28xx 1-1:0.132: failed to create media graph [ 113.848022][ T6050] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 113.857583][ T6050] em28xx 1-1:0.132: Remote control support is not available for this card. [ 113.867447][ T6046] em28xx 4-1:0.132: Registering V4L2 extension [ 113.902010][ T5934] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 113.913661][ T5934] em28xx 3-1:0.132: analog set to bulk mode. [ 113.922249][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 113.933788][ T37] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 113.948064][ T5934] usb 3-1: USB disconnect, device number 2 [ 113.956653][ T5934] em28xx 3-1:0.132: Disconnecting em28xx [ 113.964289][ T37] usb 2-1: config 0 has no interface number 0 [ 114.007768][ T37] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 114.052191][ T37] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 114.071777][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.092839][ T37] usb 2-1: Product: syz [ 114.097081][ T37] usb 2-1: Manufacturer: syz [ 114.103235][ T37] usb 2-1: SerialNumber: syz [ 114.117322][ T6046] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 114.129697][ T37] usb 2-1: config 0 descriptor?? [ 114.135134][ T6046] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 114.144813][ T6046] em28xx 4-1:0.132: No AC97 audio processor [ 114.151613][ T6055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.166942][ T6046] usb 4-1: Decoder not found [ 114.176221][ T37] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 114.188030][ T6046] em28xx 4-1:0.132: failed to create media graph [ 114.195274][ T6046] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 114.202414][ T37] em28xx 2-1:0.132: Video interface 132 found: bulk [ 114.213958][ T6046] em28xx 4-1:0.132: Remote control support is not available for this card. [ 114.231879][ T9] em28xx 1-1:0.132: Closing input extension [ 114.249196][ T6049] em28xx 3-1:0.132: Registering V4L2 extension [ 114.278816][ T9] em28xx 1-1:0.132: Freeing device [ 114.441581][ T37] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 114.480116][ T6049] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 114.497248][ T6049] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 114.505875][ T6049] em28xx 3-1:0.132: No AC97 audio processor [ 114.514475][ T6049] usb 3-1: Decoder not found [ 114.519142][ T6049] em28xx 3-1:0.132: failed to create media graph [ 114.526431][ T6049] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 114.535253][ T37] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 114.545926][ T6049] em28xx 3-1:0.132: Remote control support is not available for this card. [ 114.555644][ T5934] em28xx 3-1:0.132: Closing input extension [ 114.562205][ T37] em28xx 2-1:0.132: board has no eeprom [ 114.571420][ T5977] em28xx 4-1:0.132: Closing input extension [ 114.579683][ T5934] em28xx 3-1:0.132: Freeing device [ 114.605757][ T5977] em28xx 4-1:0.132: Freeing device [ 114.621434][ T37] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 114.629241][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.650051][ T37] em28xx 2-1:0.132: analog set to bulk mode. [ 114.657793][ T6058] em28xx 2-1:0.132: Registering V4L2 extension [ 114.679254][ T37] usb 2-1: USB disconnect, device number 2 [ 114.713260][ T37] em28xx 2-1:0.132: Disconnecting em28xx [ 114.783082][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 114.797242][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 114.820185][ T9] usb 1-1: config 0 has no interface number 0 [ 114.830435][ T9] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 114.855400][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 114.866234][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.876656][ T9] usb 1-1: Product: syz [ 114.881525][ T9] usb 1-1: Manufacturer: syz [ 114.896426][ T9] usb 1-1: SerialNumber: syz [ 114.912691][ T5934] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.934360][ T6058] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 114.947965][ T9] usb 1-1: config 0 descriptor?? [ 114.962827][ T5977] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.971733][ T6062] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 114.979067][ T6058] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 114.997602][ T6058] em28xx 2-1:0.132: No AC97 audio processor [ 115.018387][ T6058] usb 2-1: Decoder not found [ 115.020271][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 115.047373][ T6058] em28xx 2-1:0.132: failed to create media graph [ 115.053830][ T9] em28xx 1-1:0.132: Video interface 132 found: bulk [ 115.062056][ T6058] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 115.072017][ T6058] em28xx 2-1:0.132: Remote control support is not available for this card. [ 115.072722][ T6077] ================================================================== [ 115.084151][ T37] em28xx 2-1:0.132: Closing input extension [ 115.088996][ T6077] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 115.102880][ T6077] Read of size 8 at addr ffff8880340ec740 by task v4l_id/6077 [ 115.110672][ T6077] [ 115.113311][ T6077] CPU: 0 UID: 0 PID: 6077 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 115.113334][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.113354][ T6077] Call Trace: [ 115.113362][ T6077] [ 115.113369][ T6077] dump_stack_lvl+0x189/0x250 [ 115.113392][ T6077] ? __virt_addr_valid+0x1c8/0x5c0 [ 115.113414][ T6077] ? rcu_is_watching+0x15/0xb0 [ 115.113435][ T6077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.113454][ T6077] ? rcu_is_watching+0x15/0xb0 [ 115.113481][ T6077] ? lock_release+0x4b/0x3b0 [ 115.113509][ T6077] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 115.113531][ T6077] ? __virt_addr_valid+0x1c8/0x5c0 [ 115.113553][ T6077] ? __virt_addr_valid+0x4a5/0x5c0 [ 115.113576][ T6077] print_report+0xca/0x240 [ 115.113599][ T6077] ? v4l2_fh_open+0xac/0x420 [ 115.113624][ T6077] kasan_report+0x118/0x150 [ 115.113646][ T6077] ? v4l2_fh_open+0xac/0x420 [ 115.113675][ T6077] v4l2_fh_open+0xac/0x420 [ 115.113701][ T6077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.113728][ T6077] em28xx_v4l2_open+0x157/0x9a0 [ 115.113759][ T6077] v4l2_open+0x1bf/0x3a0 [ 115.113788][ T6077] chrdev_open+0x4cc/0x5e0 [ 115.113809][ T6077] ? __pfx_chrdev_open+0x10/0x10 [ 115.113829][ T6077] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 115.113858][ T6077] ? __pfx_chrdev_open+0x10/0x10 [ 115.113876][ T6077] do_dentry_open+0x785/0x14e0 [ 115.113906][ T6077] vfs_open+0x3b/0x340 [ 115.113926][ T6077] ? path_openat+0x2dc8/0x3840 [ 115.113955][ T6077] path_openat+0x2de0/0x3840 [ 115.113986][ T6077] ? stack_trace_save+0x9c/0xe0 [ 115.114020][ T6077] ? kasan_save_track+0x3e/0x80 [ 115.114052][ T6077] ? __pfx_path_openat+0x10/0x10 [ 115.114080][ T6077] ? __lock_acquire+0x6b6/0x2cf0 [ 115.114116][ T6077] do_filp_open+0x1fa/0x410 [ 115.114144][ T6077] ? __pfx_do_filp_open+0x10/0x10 [ 115.114183][ T6077] ? _raw_spin_unlock+0x28/0x50 [ 115.114201][ T6077] ? alloc_fd+0x64c/0x6c0 [ 115.114227][ T6077] do_sys_openat2+0x121/0x200 [ 115.114251][ T6077] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.114276][ T6077] ? exc_page_fault+0x82/0x100 [ 115.114301][ T6077] __x64_sys_openat+0x138/0x170 [ 115.114327][ T6077] do_syscall_64+0xfa/0xf80 [ 115.114349][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.114370][ T6077] ? clear_bhb_loop+0x60/0xb0 [ 115.114392][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.114411][ T6077] RIP: 0033:0x7ff8cfca7407 [ 115.114437][ T6077] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 115.114454][ T6077] RSP: 002b:00007fff56844430 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 115.114489][ T6077] RAX: ffffffffffffffda RBX: 00007ff8d042e880 RCX: 00007ff8cfca7407 [ 115.114504][ T6077] RDX: 0000000000000000 RSI: 00007fff56845f1b RDI: ffffffffffffff9c [ 115.114518][ T6077] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 115.114529][ T6077] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 115.114541][ T6077] R13: 00007fff56844680 R14: 00007ff8d0595000 R15: 0000561e9b4724d8 [ 115.114565][ T6077] [ 115.114572][ T6077] [ 115.419359][ T6077] Allocated by task 6058: [ 115.423842][ T6077] kasan_save_track+0x3e/0x80 [ 115.428751][ T6077] __kasan_kmalloc+0x93/0xb0 [ 115.433378][ T6077] __kmalloc_cache_noprof+0x3e2/0x700 [ 115.438792][ T6077] em28xx_v4l2_init+0x10b/0x2e70 [ 115.443762][ T6077] em28xx_init_extension+0x120/0x1c0 [ 115.449068][ T6077] process_one_work+0x93a/0x15a0 [ 115.454036][ T6077] worker_thread+0x9b0/0xee0 [ 115.458742][ T6077] kthread+0x711/0x8a0 [ 115.462842][ T6077] ret_from_fork+0x599/0xb30 [ 115.467463][ T6077] ret_from_fork_asm+0x1a/0x30 [ 115.472344][ T6077] [ 115.474700][ T6077] Freed by task 6058: [ 115.478788][ T6077] kasan_save_track+0x3e/0x80 [ 115.483516][ T6077] kasan_save_free_info+0x46/0x50 [ 115.488591][ T6077] __kasan_slab_free+0x5c/0x80 [ 115.493393][ T6077] kfree+0x1c0/0x660 [ 115.497322][ T6077] em28xx_v4l2_init+0x1683/0x2e70 [ 115.502368][ T6077] em28xx_init_extension+0x120/0x1c0 [ 115.507702][ T6077] process_one_work+0x93a/0x15a0 [ 115.512765][ T6077] worker_thread+0x9b0/0xee0 [ 115.517391][ T6077] kthread+0x711/0x8a0 [ 115.521484][ T6077] ret_from_fork+0x599/0xb30 [ 115.526248][ T6077] ret_from_fork_asm+0x1a/0x30 [ 115.531043][ T6077] [ 115.533385][ T6077] The buggy address belongs to the object at ffff8880340ec000 [ 115.533385][ T6077] which belongs to the cache kmalloc-8k of size 8192 [ 115.547461][ T6077] The buggy address is located 1856 bytes inside of [ 115.547461][ T6077] freed 8192-byte region [ffff8880340ec000, ffff8880340ee000) [ 115.561626][ T6077] [ 115.563981][ T6077] The buggy address belongs to the physical page: [ 115.570414][ T6077] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x340e8 [ 115.579195][ T6077] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 115.587801][ T6077] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 115.595805][ T6077] page_type: f5(slab) [ 115.599918][ T6077] raw: 00fff00000000040 ffff88813fe27280 ffffea0000d39c00 0000000000000005 [ 115.608558][ T6077] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 115.617163][ T6077] head: 00fff00000000040 ffff88813fe27280 ffffea0000d39c00 0000000000000005 [ 115.625868][ T6077] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 115.634663][ T6077] head: 00fff00000000003 ffffea0000d03a01 00000000ffffffff 00000000ffffffff [ 115.643348][ T6077] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 115.652026][ T6077] page dumped because: kasan: bad access detected [ 115.658553][ T6077] page_owner tracks the page as allocated [ 115.664378][ T6077] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5851, tgid 5851 (syz-executor), ts 99046296840, free_ts 98999794559 [ 115.685940][ T6077] post_alloc_hook+0x234/0x290 [ 115.691024][ T6077] get_page_from_freelist+0x2365/0x2440 [ 115.696683][ T6077] __alloc_frozen_pages_noprof+0x181/0x370 [ 115.702609][ T6077] alloc_pages_mpol+0x232/0x4a0 [ 115.707503][ T6077] allocate_slab+0x86/0x3b0 [ 115.712076][ T6077] ___slab_alloc+0xf2b/0x1960 [ 115.716791][ T6077] __slab_alloc+0x65/0x100 [ 115.721260][ T6077] __kmalloc_noprof+0x47d/0x800 [ 115.726602][ T6077] ops_init+0x7b/0x5c0 [ 115.730796][ T6077] setup_net+0x110/0x330 [ 115.735150][ T6077] copy_net_ns+0x3e3/0x570 [ 115.739678][ T6077] create_new_namespaces+0x3e7/0x6a0 [ 115.745186][ T6077] unshare_nsproxy_namespaces+0x11c/0x170 [ 115.751041][ T6077] ksys_unshare+0x4c8/0x8c0 [ 115.755584][ T6077] __x64_sys_unshare+0x38/0x50 [ 115.760465][ T6077] do_syscall_64+0xfa/0xf80 [ 115.765266][ T6077] page last free pid 5850 tgid 5850 stack trace: [ 115.771778][ T6077] __free_frozen_pages+0xbc8/0xd30 [ 115.777089][ T6077] __put_partials+0x146/0x170 [ 115.781882][ T6077] put_cpu_partial+0x1f2/0x2d0 [ 115.786783][ T6077] __slab_free+0x288/0x2a0 [ 115.791327][ T6077] qlist_free_all+0x97/0x100 [ 115.796320][ T6077] kasan_quarantine_reduce+0x148/0x160 [ 115.801912][ T6077] __kasan_slab_alloc+0x22/0x80 [ 115.807134][ T6077] __kmalloc_cache_noprof+0x37c/0x700 [ 115.812976][ T6077] kernfs_fop_open+0x397/0xca0 [ 115.817763][ T6077] do_dentry_open+0x785/0x14e0 [ 115.822563][ T6077] vfs_open+0x3b/0x340 [ 115.826657][ T6077] path_openat+0x2de0/0x3840 [ 115.831356][ T6077] do_filp_open+0x1fa/0x410 [ 115.835885][ T6077] do_sys_openat2+0x121/0x200 [ 115.840668][ T6077] __x64_sys_openat+0x138/0x170 [ 115.845631][ T6077] do_syscall_64+0xfa/0xf80 [ 115.850157][ T6077] [ 115.852495][ T6077] Memory state around the buggy address: [ 115.858150][ T6077] ffff8880340ec600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.866230][ T6077] ffff8880340ec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.874305][ T6077] >ffff8880340ec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.882551][ T6077] ^ [ 115.888731][ T6077] ffff8880340ec780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.897087][ T6077] ffff8880340ec800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.905174][ T6077] ================================================================== [ 115.925603][ T5977] usb 4-1: Using ep0 maxpacket: 32 [ 115.936054][ T5977] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 115.944544][ T5977] usb 4-1: config 0 has no interface number 0 [ 115.950927][ T5977] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 115.962076][ T6077] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.969583][ T6077] CPU: 1 UID: 0 PID: 6077 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 115.978908][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.989435][ T6077] Call Trace: [ 115.992748][ T6077] [ 115.996135][ T6077] dump_stack_lvl+0x99/0x250 [ 116.000763][ T6077] ? __asan_memcpy+0x40/0x70 [ 116.005566][ T6077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.011062][ T6077] ? __pfx__printk+0x10/0x10 [ 116.016221][ T6077] vpanic+0x237/0x6d0 [ 116.020320][ T6077] ? __pfx_vpanic+0x10/0x10 [ 116.024944][ T6077] ? preempt_schedule+0xae/0xc0 [ 116.030340][ T6077] ? __pfx_preempt_schedule+0x10/0x10 [ 116.035742][ T6077] panic+0xb9/0xc0 [ 116.039549][ T6077] ? __pfx_panic+0x10/0x10 [ 116.043997][ T6077] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 116.049934][ T6077] ? is_module_address+0x17/0xf0 [ 116.055158][ T6077] ? v4l2_fh_open+0xac/0x420 [ 116.059890][ T6077] check_panic_on_warn+0x89/0xb0 [ 116.064863][ T6077] ? v4l2_fh_open+0xac/0x420 [ 116.069487][ T6077] end_report+0x6f/0x140 [ 116.073843][ T6077] kasan_report+0x129/0x150 [ 116.078410][ T6077] ? v4l2_fh_open+0xac/0x420 [ 116.083052][ T6077] v4l2_fh_open+0xac/0x420 [ 116.087734][ T6077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.093761][ T6077] em28xx_v4l2_open+0x157/0x9a0 [ 116.098758][ T6077] v4l2_open+0x1bf/0x3a0 [ 116.103041][ T6077] chrdev_open+0x4cc/0x5e0 [ 116.107500][ T6077] ? __pfx_chrdev_open+0x10/0x10 [ 116.112551][ T6077] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 116.118944][ T6077] ? __pfx_chrdev_open+0x10/0x10 [ 116.123944][ T6077] do_dentry_open+0x785/0x14e0 [ 116.129029][ T6077] vfs_open+0x3b/0x340 [ 116.133140][ T6077] ? path_openat+0x2dc8/0x3840 [ 116.137947][ T6077] path_openat+0x2de0/0x3840 [ 116.142580][ T6077] ? stack_trace_save+0x9c/0xe0 [ 116.147479][ T6077] ? kasan_save_track+0x3e/0x80 [ 116.152369][ T6077] ? __pfx_path_openat+0x10/0x10 [ 116.157433][ T6077] ? __lock_acquire+0x6b6/0x2cf0 [ 116.162415][ T6077] do_filp_open+0x1fa/0x410 [ 116.166993][ T6077] ? __pfx_do_filp_open+0x10/0x10 [ 116.172167][ T6077] ? _raw_spin_unlock+0x28/0x50 [ 116.177054][ T6077] ? alloc_fd+0x64c/0x6c0 [ 116.181598][ T6077] do_sys_openat2+0x121/0x200 [ 116.186400][ T6077] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.191711][ T6077] ? exc_page_fault+0x82/0x100 [ 116.196532][ T6077] __x64_sys_openat+0x138/0x170 [ 116.202020][ T6077] do_syscall_64+0xfa/0xf80 [ 116.206578][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.212665][ T6077] ? clear_bhb_loop+0x60/0xb0 [ 116.217385][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.223304][ T6077] RIP: 0033:0x7ff8cfca7407 [ 116.227764][ T6077] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 116.247436][ T6077] RSP: 002b:00007fff56844430 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 116.255894][ T6077] RAX: ffffffffffffffda RBX: 00007ff8d042e880 RCX: 00007ff8cfca7407 [ 116.263894][ T6077] RDX: 0000000000000000 RSI: 00007fff56845f1b RDI: ffffffffffffff9c [ 116.271884][ T6077] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 116.279963][ T6077] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 116.288042][ T6077] R13: 00007fff56844680 R14: 00007ff8d0595000 R15: 0000561e9b4724d8 [ 116.296173][ T6077] [ 116.299828][ T6077] Kernel Offset: disabled [ 116.304265][ T6077] Rebooting in 86400 seconds..