Warning: Permanently added '10.128.1.235' (ED25519) to the list of known hosts.
2026/01/16 19:56:17 parsed 1 programs
[ 91.443726][ T5776] cgroup: Unknown subsys name 'net'
[ 91.609721][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 92.352023][ T9] cfg80211: failed to load regulatory.db
[ 93.384733][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.252774][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.261862][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.270028][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.280670][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.290917][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 95.299862][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.653190][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.684343][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.848790][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.882974][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.462207][ T5845] chnl_net:caif_netlink_parms(): no params data found
[ 98.782874][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.799433][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.806832][ T5845] bridge_slave_0: entered allmulticast mode
[ 98.816454][ T5845] bridge_slave_0: entered promiscuous mode
[ 98.858610][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.877402][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.884826][ T5845] bridge_slave_1: entered allmulticast mode
[ 98.898165][ T5845] bridge_slave_1: entered promiscuous mode
[ 99.030239][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.043634][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.093278][ T5845] team0: Port device team_slave_0 added
[ 99.112032][ T5845] team0: Port device team_slave_1 added
[ 99.203685][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.215517][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.248815][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.280973][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.287996][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.315415][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.432073][ T5845] hsr_slave_0: entered promiscuous mode
[ 99.442136][ T5845] hsr_slave_1: entered promiscuous mode
[ 99.795951][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 99.808451][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 99.819560][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 99.831061][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.002107][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.026919][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.041825][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.049293][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.070187][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.077860][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.356018][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.443968][ T5845] veth0_vlan: entered promiscuous mode
[ 100.458468][ T5845] veth1_vlan: entered promiscuous mode
[ 100.513855][ T5845] veth0_macvtap: entered promiscuous mode
[ 100.524602][ T5845] veth1_macvtap: entered promiscuous mode
[ 100.565371][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.583477][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.598948][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.608066][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.628315][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.637427][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/01/16 19:56:29 executed programs: 0
[ 100.855815][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.873599][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.884116][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.902957][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.914382][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 100.922139][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.970966][ T5890] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 100.981141][ T5890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 100.991412][ T5890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 101.033210][ T5890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 101.051472][ T5890] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 101.064713][ T5890] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 101.111139][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 101.121115][ T5082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 101.130248][ T5082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 101.140771][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 101.159776][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 101.169958][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 101.229832][ T5890] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 101.252274][ T5890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 101.261348][ T5890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 101.271288][ T5890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 101.280060][ T5890] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 101.290042][ T5890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 101.714166][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.748440][ T5887] chnl_net:caif_netlink_parms(): no params data found
[ 101.941779][ T5884] chnl_net:caif_netlink_parms(): no params data found
[ 102.008038][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.015461][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.022804][ T5887] bridge_slave_0: entered allmulticast mode
[ 102.031774][ T5887] bridge_slave_0: entered promiscuous mode
[ 102.065440][ T5892] chnl_net:caif_netlink_parms(): no params data found
[ 102.084243][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.092977][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.101196][ T5887] bridge_slave_1: entered allmulticast mode
[ 102.108291][ T5887] bridge_slave_1: entered promiscuous mode
[ 102.203968][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.272447][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.294038][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.301675][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.308921][ T5884] bridge_slave_0: entered allmulticast mode
[ 102.316477][ T5884] bridge_slave_0: entered promiscuous mode
[ 102.368547][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.376020][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.383837][ T5884] bridge_slave_1: entered allmulticast mode
[ 102.391638][ T5884] bridge_slave_1: entered promiscuous mode
[ 102.425974][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.436223][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.444359][ T5892] bridge_slave_0: entered allmulticast mode
[ 102.453018][ T5892] bridge_slave_0: entered promiscuous mode
[ 102.474248][ T5887] team0: Port device team_slave_0 added
[ 102.484279][ T5887] team0: Port device team_slave_1 added
[ 102.510384][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.519778][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.526975][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.536422][ T5892] bridge_slave_1: entered allmulticast mode
[ 102.543689][ T5892] bridge_slave_1: entered promiscuous mode
[ 102.575082][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.618006][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.625090][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.651851][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.699083][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.712559][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.720563][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.746906][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.758791][ T5894] chnl_net:caif_netlink_parms(): no params data found
[ 102.801196][ T5884] team0: Port device team_slave_0 added
[ 102.810538][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.878599][ T5884] team0: Port device team_slave_1 added
[ 102.916110][ T5892] team0: Port device team_slave_0 added
[ 102.942460][ T5887] hsr_slave_0: entered promiscuous mode
[ 102.949242][ T5887] hsr_slave_1: entered promiscuous mode
[ 102.955736][ T5887] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 102.965293][ T5887] Cannot create hsr debugfs directory
[ 102.988832][ T5892] team0: Port device team_slave_1 added
[ 103.000886][ T5890] Bluetooth: hci0: command tx timeout
[ 103.023926][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.031522][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.059261][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.145254][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.153904][ T5890] Bluetooth: hci1: command tx timeout
[ 103.160189][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.187246][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.211388][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.218608][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.245965][ T5890] Bluetooth: hci2: command tx timeout
[ 103.254926][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.282747][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.290768][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.298048][ T5894] bridge_slave_0: entered allmulticast mode
[ 103.305990][ T5894] bridge_slave_0: entered promiscuous mode
[ 103.314761][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.322451][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.330291][ T5894] bridge_slave_1: entered allmulticast mode
[ 103.337952][ T5894] bridge_slave_1: entered promiscuous mode
[ 103.361105][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.368375][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.396461][ T5890] Bluetooth: hci3: command tx timeout
[ 103.402624][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.498308][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 103.518371][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.536407][ T5884] hsr_slave_0: entered promiscuous mode
[ 103.543659][ T5884] hsr_slave_1: entered promiscuous mode
[ 103.558146][ T5884] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 103.566206][ T5884] Cannot create hsr debugfs directory
[ 103.694489][ T5892] hsr_slave_0: entered promiscuous mode
[ 103.701903][ T5892] hsr_slave_1: entered promiscuous mode
[ 103.708423][ T5892] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 103.716500][ T5892] Cannot create hsr debugfs directory
[ 103.741614][ T5894] team0: Port device team_slave_0 added
[ 103.797702][ T5894] team0: Port device team_slave_1 added
[ 103.865689][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.873376][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.899949][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.939292][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.963723][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.974023][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.001645][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.060935][ T5894] hsr_slave_0: entered promiscuous mode
[ 104.067411][ T5894] hsr_slave_1: entered promiscuous mode
[ 104.074536][ T5894] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 104.083374][ T5894] Cannot create hsr debugfs directory
[ 104.280063][ T5887] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 104.300513][ T5887] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 104.318288][ T5887] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 104.346740][ T5887] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 104.486807][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.518611][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.532901][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.541555][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.560313][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.567550][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.803551][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.864131][ T5887] veth0_vlan: entered promiscuous mode
[ 104.879244][ T5887] veth1_vlan: entered promiscuous mode
[ 104.915287][ T5887] veth0_macvtap: entered promiscuous mode
[ 104.926710][ T5887] veth1_macvtap: entered promiscuous mode
[ 104.952739][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 104.964133][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 104.976225][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.997542][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 105.016915][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 105.034693][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.057172][ T5887] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.067223][ T5887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.076955][ T5890] Bluetooth: hci0: command tx timeout
[ 105.086140][ T5887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.096829][ T5887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.216466][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.228446][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.237447][ T5890] Bluetooth: hci1: command tx timeout
[ 105.299058][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.309340][ T5890] Bluetooth: hci2: command tx timeout
[ 105.317236][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.470171][ T5890] Bluetooth: hci3: command tx timeout
[ 105.710717][ T5097] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 105.746690][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.827714][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.909449][ T5097] usb 2-1: Using ep0 maxpacket: 32
[ 105.935433][ T5097] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 105.959687][ T5097] usb 2-1: config 0 has no interface number 0
[ 105.966065][ T5097] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 105.998298][ T5097] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 106.015256][ T5097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 106.025342][ T5097] usb 2-1: Product: syz
[ 106.049807][ T5097] usb 2-1: Manufacturer: syz
[ 106.054512][ T5097] usb 2-1: SerialNumber: syz
[ 106.096983][ T5097] usb 2-1: config 0 descriptor??
[ 106.145265][ T5097] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 106.180975][ T5097] em28xx 2-1:0.132: Video interface 132 found:
[ 106.518992][ T5930] syz.1.18[5930]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 106.565738][ T5930] loop1: detected capacity change from 0 to 128
[ 106.626191][ T5930] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 106.675648][ T5097] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 106.803934][ T5097] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 106.827639][ T5097] em28xx 2-1:0.132: board has no eeprom
[ 106.899395][ T5097] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 106.907844][ T5097] em28xx 2-1:0.132: analog set to bulk mode.
[ 106.935618][ T5879] em28xx 2-1:0.132: Registering V4L2 extension
[ 106.965379][ T5097] usb 2-1: USB disconnect, device number 2
[ 106.980979][ T5097] em28xx 2-1:0.132: Disconnecting em28xx
[ 107.152653][ T5890] Bluetooth: hci0: command tx timeout
[ 107.161713][ T5879] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 107.173467][ T5879] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 107.181937][ T5879] em28xx 2-1:0.132: No AC97 audio processor
2026/01/16 19:56:35 executed programs: 9
[ 107.201816][ T5879] usb 2-1: Decoder not found
[ 107.206758][ T5879] em28xx 2-1:0.132: failed to create media graph
[ 107.213935][ T5879] em28xx 2-1:0.132: V4L2 device video103 deregistered
[ 107.236047][ T5879] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 107.245682][ T5097] em28xx 2-1:0.132: Closing input extension
[ 107.292367][ T5097] em28xx 2-1:0.132: Freeing device
[ 107.310721][ T5890] Bluetooth: hci1: command tx timeout
[ 107.400477][ T5890] Bluetooth: hci2: command tx timeout
[ 107.428704][ T5884] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 107.455618][ T5884] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 107.524260][ T5884] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 107.549764][ T5890] Bluetooth: hci3: command tx timeout
[ 107.565851][ T12] hsr_slave_0: left promiscuous mode
[ 107.576028][ T12] hsr_slave_1: left promiscuous mode
[ 107.586639][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 107.596094][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 107.606812][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 107.615164][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 107.624022][ T12] bridge_slave_1: left allmulticast mode
[ 107.630198][ T12] bridge_slave_1: left promiscuous mode
[ 107.637629][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.654104][ T12] bridge_slave_0: left allmulticast mode
[ 107.663686][ T12] bridge_slave_0: left promiscuous mode
[ 107.670836][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.707097][ T12] veth1_macvtap: left promiscuous mode
[ 107.714421][ T12] veth0_macvtap: left promiscuous mode
[ 107.720549][ T5097] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 107.725588][ T12] veth1_vlan: left promiscuous mode
[ 107.736327][ T12] veth0_vlan: left promiscuous mode
[ 107.929280][ T5097] usb 2-1: Using ep0 maxpacket: 32
[ 107.960750][ T5097] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 107.972394][ T5097] usb 2-1: config 0 has no interface number 0
[ 107.979041][ T5097] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 108.018374][ T5097] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 108.041179][ T5097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 108.054021][ T5097] usb 2-1: Product: syz
[ 108.058367][ T5097] usb 2-1: Manufacturer: syz
[ 108.065923][ T5097] usb 2-1: SerialNumber: syz
[ 108.082401][ T5097] usb 2-1: config 0 descriptor??
[ 108.116261][ T5097] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 108.131506][ T5097] em28xx 2-1:0.132: Video interface 132 found:
[ 108.433563][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 108.482157][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 108.505648][ T5950] loop1: detected capacity change from 0 to 128
[ 108.552986][ T5950] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 108.569084][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 108.588153][ T5097] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 108.663181][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 108.704209][ T5097] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 108.713737][ T5097] em28xx 2-1:0.132: board has no eeprom
[ 108.787636][ T5097] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 108.798962][ T5097] em28xx 2-1:0.132: analog set to bulk mode.
[ 108.809914][ T5784] em28xx 2-1:0.132: Registering V4L2 extension
[ 108.855920][ T5097] usb 2-1: USB disconnect, device number 3
[ 108.873406][ T5097] em28xx 2-1:0.132: Disconnecting em28xx
[ 109.058104][ T5784] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 109.065573][ T5784] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 109.073074][ T5784] em28xx 2-1:0.132: No AC97 audio processor
[ 109.135551][ T5784] usb 2-1: Decoder not found
[ 109.146523][ T5784] em28xx 2-1:0.132: failed to create media graph
[ 109.153361][ T5784] em28xx 2-1:0.132: V4L2 device video103 deregistered
[ 109.177486][ T5784] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 109.188138][ T5097] em28xx 2-1:0.132: Closing input extension
[ 109.229482][ T5890] Bluetooth: hci0: command tx timeout
[ 109.249119][ T5097] em28xx 2-1:0.132: Freeing device
[ 109.401224][ T5890] Bluetooth: hci1: command tx timeout
[ 109.436728][ T12] bond0 (unregistering): Released all slaves
[ 109.479986][ T5890] Bluetooth: hci2: command tx timeout
[ 109.522459][ T5884] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 109.629851][ T5890] Bluetooth: hci3: command tx timeout
[ 109.640906][ T5097] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 109.689432][ T5894] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 109.714936][ T5894] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 109.727372][ T5894] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 109.746623][ T5894] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 109.870157][ T5097] usb 2-1: Using ep0 maxpacket: 32
[ 109.903569][ T5097] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 109.921617][ T5097] usb 2-1: config 0 has no interface number 0
[ 109.928075][ T5097] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 109.991414][ T5097] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 110.011326][ T5097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 110.029280][ T5097] usb 2-1: Product: syz
[ 110.036741][ T5097] usb 2-1: Manufacturer: syz
[ 110.069267][ T5097] usb 2-1: SerialNumber: syz
[ 110.074310][ T5892] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 110.099753][ T5097] usb 2-1: config 0 descriptor??
[ 110.112802][ T5892] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 110.131020][ T5097] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 110.149854][ T5097] em28xx 2-1:0.132: Video interface 132 found:
[ 110.163451][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.180390][ T5892] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 110.218797][ T5892] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 110.261834][ T5884] 8021q: adding VLAN 0 to HW filter on device team0
[ 110.327833][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.335197][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 110.391568][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.398858][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 110.506543][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.517098][ T5956] loop1: detected capacity change from 0 to 128
[ 110.553765][ T5956] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 110.601916][ T5097] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 110.631783][ T5884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 110.643072][ T5884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 110.727531][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[ 110.733190][ T5097] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 110.779894][ T5097] em28xx 2-1:0.132: board has no eeprom
[ 110.813197][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.820492][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 110.843891][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.858709][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.866024][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 110.874341][ T5097] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 110.891239][ T5097] em28xx 2-1:0.132: analog set to bulk mode.
[ 110.897752][ T5885] em28xx 2-1:0.132: Registering V4L2 extension
[ 110.914142][ T5097] usb 2-1: USB disconnect, device number 4
[ 110.925560][ T5097] em28xx 2-1:0.132: Disconnecting em28xx
[ 111.004346][ T5892] 8021q: adding VLAN 0 to HW filter on device team0
[ 111.042775][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.050140][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 111.090399][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.097737][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.327292][ T5885] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 111.334647][ T5885] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 111.359864][ T5885] em28xx 2-1:0.132: No AC97 audio processor
[ 111.374446][ T5885] usb 2-1: Decoder not found
[ 111.383571][ T5885] em28xx 2-1:0.132: failed to create media graph
[ 111.391375][ T5885] em28xx 2-1:0.132: V4L2 device video103 deregistered
[ 111.427661][ T5885] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 111.453194][ T5097] em28xx 2-1:0.132: Closing input extension
[ 111.482444][ T5097] em28xx 2-1:0.132: Freeing device
[ 111.508208][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.674361][ T5884] veth0_vlan: entered promiscuous mode
[ 111.714013][ T5884] veth1_vlan: entered promiscuous mode
[ 111.769588][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.786541][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.834551][ T5884] veth0_macvtap: entered promiscuous mode
[ 111.861731][ T5884] veth1_macvtap: entered promiscuous mode
[ 111.882154][ T5097] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 111.921119][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 111.933213][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 111.944718][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 111.965903][ T5894] veth0_vlan: entered promiscuous mode
[ 111.984787][ T5892] veth0_vlan: entered promiscuous mode
[ 111.994697][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 112.009668][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 112.023621][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 112.036962][ T5884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.046129][ T5884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.055216][ T5884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.064265][ T5884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.078096][ T5894] veth1_vlan: entered promiscuous mode
[ 112.084799][ T5097] usb 2-1: Using ep0 maxpacket: 32
[ 112.101779][ T5097] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 112.118592][ T5097] usb 2-1: config 0 has no interface number 0
[ 112.126196][ T5097] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 112.140830][ T5097] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 112.150312][ T5097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 112.158370][ T5097] usb 2-1: Product: syz
[ 112.164798][ T5097] usb 2-1: Manufacturer: syz
[ 112.169624][ T5097] usb 2-1: SerialNumber: syz
[ 112.177612][ T5097] usb 2-1: config 0 descriptor??
[ 112.216463][ T5892] veth1_vlan: entered promiscuous mode
[ 112.240657][ T5097] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 112.256551][ T5097] em28xx 2-1:0.132: Video interface 132 found:
[ 112.277502][ T5894] veth0_macvtap: entered promiscuous mode
[ 112.302577][ T5894] veth1_macvtap: entered promiscuous mode
[ 112.367204][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.387234][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.400843][ T5892] veth0_macvtap: entered promiscuous mode
[ 112.415716][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 112.429010][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 112.439563][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 112.450362][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 112.464969][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 112.504954][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 112.511408][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.524125][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 112.527284][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.541783][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 112.541834][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 112.548193][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 112.575746][ T5892] veth1_macvtap: entered promiscuous mode
[ 112.607587][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 112.623411][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 112.633586][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 112.645073][ T5997] loop1: detected capacity change from 0 to 128
[ 112.645540][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 112.668155][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 112.682446][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
2026/01/16 19:56:41 executed programs: 12
[ 112.702211][ T5997] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 112.718485][ T5097] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 112.762217][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 112.783035][ T5894] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.799389][ T5894] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.804279][ T5097] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 112.816283][ T5894] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.826063][ T5894] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.844586][ T5097] em28xx 2-1:0.132: board has no eeprom
[ 112.867178][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 112.878235][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 112.888826][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 112.901259][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 112.915648][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 112.926273][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 112.938149][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 112.942377][ T5097] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 112.957366][ T5892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.967547][ T5892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.967943][ T5097] em28xx 2-1:0.132: analog set to bulk mode.
[ 112.976581][ T5892] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.976613][ T5892] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.009417][ T8] em28xx 2-1:0.132: Registering V4L2 extension
[ 113.050331][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 113.075745][ T5097] usb 2-1: USB disconnect, device number 5
[ 113.097185][ T5097] em28xx 2-1:0.132: Disconnecting em28xx
[ 113.219645][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.227587][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.242046][ T27] usb 1-1: Using ep0 maxpacket: 32
[ 113.272716][ T27] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 113.299694][ T27] usb 1-1: config 0 has no interface number 0
[ 113.305916][ T27] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 113.356281][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.371123][ T27] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 113.389745][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.390332][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 113.445003][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.459280][ T27] usb 1-1: Product: syz
[ 113.463533][ T27] usb 1-1: Manufacturer: syz
[ 113.468200][ T27] usb 1-1: SerialNumber: syz
[ 113.485659][ T8] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 113.494393][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.504545][ T8] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 113.518137][ T8] em28xx 2-1:0.132: No AC97 audio processor
[ 113.531865][ T27] usb 1-1: config 0 descriptor??
[ 113.547184][ T8] usb 2-1: Decoder not found
[ 113.552654][ T8] em28xx 2-1:0.132: failed to create media graph
[ 113.563378][ T27] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 113.563605][ T8] em28xx 2-1:0.132: V4L2 device video103 deregistered
[ 113.590660][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.590699][ T8] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 113.598576][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.612054][ T27] em28xx 1-1:0.132: Video interface 132 found:
[ 113.641630][ T5097] em28xx 2-1:0.132: Closing input extension
[ 113.673140][ T5097] em28xx 2-1:0.132: Freeing device
[ 113.954695][ T6007] loop0: detected capacity change from 0 to 128
[ 113.976096][ T6007] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 114.003946][ T27] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[ 114.014329][ T5868] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 114.059419][ T5097] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 114.071997][ T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 114.094901][ T27] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 114.107766][ T27] em28xx 1-1:0.132: board has no eeprom
[ 114.180290][ T27] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 114.188903][ T27] em28xx 1-1:0.132: analog set to bulk mode.
[ 114.196774][ T6017] em28xx 1-1:0.132: Registering V4L2 extension
[ 114.203294][ T5868] usb 4-1: Using ep0 maxpacket: 32
[ 114.222106][ T5868] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 114.234159][ T27] usb 1-1: USB disconnect, device number 2
[ 114.243161][ T27] em28xx 1-1:0.132: Disconnecting em28xx
[ 114.249103][ T5868] usb 4-1: config 0 has no interface number 0
[ 114.263774][ T5868] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 114.269372][ T5097] usb 2-1: Using ep0 maxpacket: 32
[ 114.280189][ T788] usb 3-1: Using ep0 maxpacket: 32
[ 114.292000][ T5097] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 114.292297][ T5868] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 114.309353][ T5097] usb 2-1: config 0 has no interface number 0
[ 114.320284][ T788] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 114.326828][ T5097] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 114.328705][ T788] usb 3-1: config 0 has no interface number 0
[ 114.356808][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 114.368381][ T5868] usb 4-1: Product: syz
[ 114.374003][ T5097] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 114.377357][ T5868] usb 4-1: Manufacturer: syz
[ 114.388821][ T5097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 114.397242][ T788] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 114.407508][ T5097] usb 2-1: Product: syz
[ 114.414001][ T5097] usb 2-1: Manufacturer: syz
[ 114.416258][ T5868] usb 4-1: SerialNumber: syz
[ 114.425469][ T5097] usb 2-1: SerialNumber: syz
[ 114.436876][ T788] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 114.447456][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 114.457731][ T788] usb 3-1: Product: syz
[ 114.462176][ T788] usb 3-1: Manufacturer: syz
[ 114.468213][ T788] usb 3-1: SerialNumber: syz
[ 114.481493][ T5097] usb 2-1: config 0 descriptor??
[ 114.481664][ T5868] usb 4-1: config 0 descriptor??
[ 114.493490][ T788] usb 3-1: config 0 descriptor??
[ 114.505532][ T5868] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 114.522187][ T788] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 114.530314][ T5097] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 114.535986][ T5868] em28xx 4-1:0.132: Video interface 132 found:
[ 114.552510][ T788] em28xx 3-1:0.132: Video interface 132 found:
[ 114.576213][ T5097] em28xx 2-1:0.132: Video interface 132 found:
[ 114.733368][ T6017] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[ 114.742077][ T6017] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[ 114.769897][ T6017] em28xx 1-1:0.132: No AC97 audio processor
[ 114.778577][ T6017] usb 1-1: Decoder not found
[ 114.788032][ T6017] em28xx 1-1:0.132: failed to create media graph
[ 114.797599][ T6017] em28xx 1-1:0.132: V4L2 device video103 deregistered
[ 114.816280][ T6017] em28xx 1-1:0.132: Remote control support is not available for this card.
[ 114.825471][ T27] em28xx 1-1:0.132: Closing input extension
[ 114.854616][ T27] em28xx 1-1:0.132: Freeing device
[ 114.914799][ T6015] loop2: detected capacity change from 0 to 128
[ 114.925032][ T6013] loop1: detected capacity change from 0 to 128
[ 114.943005][ T6013] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 114.953731][ T6014] loop3: detected capacity change from 0 to 128
[ 114.971004][ T6015] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 114.983029][ T6014] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 114.997560][ T5097] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 115.019816][ T788] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 115.043315][ T5868] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[ 115.121516][ T5097] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 115.125156][ T788] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 115.159533][ T5097] em28xx 2-1:0.132: board has no eeprom
[ 115.169910][ T5868] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 115.195665][ T788] em28xx 3-1:0.132: board has no eeprom
[ 115.209122][ T5868] em28xx 4-1:0.132: board has no eeprom
[ 115.239420][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 115.274733][ T5097] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 115.300599][ T5097] em28xx 2-1:0.132: analog set to bulk mode.
[ 115.309903][ T5868] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 115.318158][ T5868] em28xx 4-1:0.132: analog set to bulk mode.
[ 115.323137][ T5784] em28xx 2-1:0.132: Registering V4L2 extension
[ 115.324595][ T788] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 115.346547][ T788] em28xx 3-1:0.132: analog set to bulk mode.
[ 115.346934][ T5097] usb 2-1: USB disconnect, device number 6
[ 115.385635][ T5097] em28xx 2-1:0.132: Disconnecting em28xx
[ 115.410163][ T5868] usb 4-1: USB disconnect, device number 2
[ 115.417069][ T5868] em28xx 4-1:0.132: Disconnecting em28xx
[ 115.424754][ T788] usb 3-1: USB disconnect, device number 2
[ 115.442433][ T27] usb 1-1: Using ep0 maxpacket: 32
[ 115.467702][ T27] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 115.478457][ T788] em28xx 3-1:0.132: Disconnecting em28xx
[ 115.492014][ T27] usb 1-1: config 0 has no interface number 0
[ 115.498456][ T27] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 115.526885][ T27] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 115.536377][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 115.549964][ T27] usb 1-1: Product: syz
[ 115.554231][ T27] usb 1-1: Manufacturer: syz
[ 115.560181][ T27] usb 1-1: SerialNumber: syz
[ 115.608464][ T27] usb 1-1: config 0 descriptor??
[ 115.645418][ T27] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 115.663284][ T27] em28xx 1-1:0.132: Video interface 132 found:
[ 115.837862][ T5784] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 115.848714][ T5784] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 115.858062][ T5784] em28xx 2-1:0.132: No AC97 audio processor
[ 115.866407][ T5784] usb 2-1: Decoder not found
[ 115.871726][ T5784] em28xx 2-1:0.132: failed to create media graph
[ 115.880542][ T5784] em28xx 2-1:0.132: V4L2 device video103 deregistered
[ 115.888971][ T5784] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 115.899485][ T6017] em28xx 3-1:0.132: Registering V4L2 extension
[ 116.049822][ T6022] loop0: detected capacity change from 0 to 128
[ 116.072863][ T6022] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 116.092854][ T6017] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 116.105305][ T27] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[ 116.118267][ T6017] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 116.137125][ T6017] em28xx 3-1:0.132: No AC97 audio processor
[ 116.145604][ T6017] usb 3-1: Decoder not found
[ 116.151134][ T6017] em28xx 3-1:0.132: failed to create media graph
[ 116.157585][ T6017] em28xx 3-1:0.132: V4L2 device video103 deregistered
[ 116.165918][ T6017] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 116.176350][ T6018] em28xx 4-1:0.132: Registering V4L2 extension
[ 116.202802][ T27] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 116.219631][ T27] em28xx 1-1:0.132: board has no eeprom
[ 116.312245][ T27] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 116.320563][ T27] em28xx 1-1:0.132: analog set to bulk mode.
[ 116.336812][ T6018] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[ 116.347556][ T27] usb 1-1: USB disconnect, device number 3
[ 116.354119][ T6018] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[ 116.362548][ T27] em28xx 1-1:0.132: Disconnecting em28xx
[ 116.368704][ T6018] em28xx 4-1:0.132: No AC97 audio processor
[ 116.377795][ T6018] usb 4-1: Decoder not found
[ 116.382923][ T6018] em28xx 4-1:0.132: failed to create media graph
[ 116.391894][ T6018] em28xx 4-1:0.132: V4L2 device video103 deregistered
[ 116.404575][ T6018] em28xx 4-1:0.132: Remote control support is not available for this card.
[ 116.413982][ T5868] em28xx 4-1:0.132: Closing input extension
[ 116.424200][ T5097] em28xx 2-1:0.132: Closing input extension
[ 116.434406][ T788] em28xx 3-1:0.132: Closing input extension
[ 116.441527][ T6010] em28xx 1-1:0.132: Registering V4L2 extension
[ 116.450092][ T5868] em28xx 4-1:0.132: Freeing device
[ 116.470613][ T5097] em28xx 2-1:0.132: Freeing device
[ 116.471642][ T788] em28xx 3-1:0.132: Freeing device
[ 116.753419][ T6010] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[ 116.764537][ T6010] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[ 116.773104][ T6010] em28xx 1-1:0.132: No AC97 audio processor
[ 116.790176][ T6010] usb 1-1: Decoder not found
[ 116.799330][ T6010] em28xx 1-1:0.132: failed to create media graph
[ 116.805833][ T6010] em28xx 1-1:0.132: V4L2 device video103 deregistered
[ 116.829918][ T5868] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 116.843291][ T6010] em28xx 1-1:0.132: Remote control support is not available for this card.
[ 116.850637][ T6047] ==================================================================
[ 116.854384][ T27] em28xx 1-1:0.132: Closing input extension
[ 116.861177][ T6047] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430
[ 116.861228][ T6047] Read of size 8 at addr ffff88807b840738 by task v4l_id/6047
[ 116.861244][ T6047]
[ 116.861259][ T6047] CPU: 0 PID: 6047 Comm: v4l_id Not tainted syzkaller #0
[ 116.861276][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 116.861296][ T6047] Call Trace:
[ 116.900339][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 116.902995][ T6047]
[ 116.919462][ T6047] dump_stack_lvl+0x16c/0x230
[ 116.924515][ T6047] ? __lock_acquire+0x7c80/0x7c80
[ 116.930091][ T6047] ? show_regs_print_info+0x20/0x20
[ 116.936483][ T6047] ? load_image+0x3b0/0x3b0
[ 116.941506][ T6047] ? _raw_spin_lock_irqsave+0xb4/0xf0
[ 116.948369][ T6047] ? __virt_addr_valid+0x18c/0x540
[ 116.953926][ T6047] ? __virt_addr_valid+0x469/0x540
[ 116.960058][ T6047] print_report+0xac/0x220
[ 116.965059][ T6047] ? v4l2_fh_open+0xca/0x430
[ 116.970328][ T6047] kasan_report+0x117/0x150
[ 116.975658][ T6047] ? v4l2_fh_open+0xca/0x430
[ 116.981725][ T6047] v4l2_fh_open+0xca/0x430
[ 116.987425][ T6047] em28xx_v4l2_open+0x157/0x980
[ 116.993005][ T6047] v4l2_open+0x212/0x360
[ 116.998227][ T6047] chrdev_open+0x59e/0x670
[ 117.004041][ T6047] ? cd_forget+0x160/0x160
[ 117.009869][ T6047] ? fsnotify_perm+0x3ed/0x5e0
[ 117.015801][ T6047] ? cd_forget+0x160/0x160
[ 117.019825][ T5868] usb 4-1: Using ep0 maxpacket: 32
[ 117.020867][ T6047] do_dentry_open+0x8c6/0x1500
[ 117.032154][ T6047] path_openat+0x274b/0x3190
[ 117.036848][ T6047] ? __kasan_slab_alloc+0x6c/0x80
[ 117.041973][ T5868] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 117.042260][ T6047] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 117.056775][ T5868] usb 4-1: config 0 has no interface number 0
[ 117.059777][ T6047] ? verify_lock_unused+0x140/0x140
[ 117.059809][ T6047] ? do_filp_open+0x3d0/0x3d0
[ 117.059840][ T6047] ? __virt_addr_valid+0x18c/0x540
[ 117.059870][ T6047] do_filp_open+0x1c5/0x3d0
[ 117.059902][ T6047] ? vfs_tmpfile+0x490/0x490
[ 117.059970][ T6047] ? _raw_spin_unlock+0x28/0x40
[ 117.073361][ T5868] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 117.074023][ T6047] ? alloc_fd+0x58f/0x630
[ 117.090257][ T5868] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 117.090967][ T6047] do_sys_openat2+0x12c/0x1c0
[ 117.091001][ T6047] ? do_sys_open+0xe0/0xe0
[ 117.096408][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 117.102457][ T6047] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 117.102495][ T6047] ? lock_chain_count+0x20/0x20
[ 117.102514][ T6047] ? lock_chain_count+0x20/0x20
[ 117.102556][ T6047] __x64_sys_openat+0x139/0x160
[ 117.102585][ T6047] do_syscall_64+0x55/0xb0
[ 117.102604][ T6047] ? clear_bhb_loop+0x40/0x90
[ 117.102628][ T6047] ? clear_bhb_loop+0x40/0x90
[ 117.102651][ T6047] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 117.102674][ T6047] RIP: 0033:0x7f30806a7407
[ 117.102706][ T6047] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 117.102727][ T6047] RSP: 002b:00007ffcd1ef6860 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 117.102747][ T6047] RAX: ffffffffffffffda RBX: 00007f3080ead880 RCX: 00007f30806a7407
[ 117.102762][ T6047] RDX: 0000000000000000 RSI: 00007ffcd1ef6f1b RDI: ffffffffffffff9c
[ 117.102775][ T6047] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 117.102786][ T6047] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 117.102797][ T6047] R13: 00007ffcd1ef6ab0 R14: 00007f308100c000 R15: 0000561bf81354d8
[ 117.102818][ T6047]
[ 117.102825][ T6047]
[ 117.102833][ T6047] Allocated by task 6010:
[ 117.102842][ T6047] kasan_set_track+0x4e/0x70
[ 117.102862][ T6047] __kasan_kmalloc+0x8f/0xa0
[ 117.102880][ T6047] em28xx_v4l2_init+0x10b/0x2e70
[ 117.102896][ T6047] em28xx_init_extension+0x11c/0x1b0
[ 117.102924][ T6047] process_scheduled_works+0xa45/0x15b0
[ 117.102947][ T6047] worker_thread+0xa55/0xfc0
[ 117.102966][ T6047] kthread+0x2fa/0x390
[ 117.102979][ T6047] ret_from_fork+0x48/0x80
[ 117.103410][ T6047] ret_from_fork_asm+0x11/0x20
[ 117.103449][ T6047]
[ 117.103453][ T6047] Freed by task 6010:
[ 117.103462][ T6047] kasan_set_track+0x4e/0x70
[ 117.103481][ T6047] kasan_save_free_info+0x2e/0x50
[ 117.103504][ T6047] ____kasan_slab_free+0x126/0x1e0
[ 117.103521][ T6047] slab_free_freelist_hook+0x130/0x1b0
[ 117.103536][ T6047] __kmem_cache_free+0xba/0x1f0
[ 117.103560][ T6047] em28xx_v4l2_init+0x1670/0x2e70
[ 117.103576][ T6047] em28xx_init_extension+0x11c/0x1b0
[ 117.103602][ T6047] process_scheduled_works+0xa45/0x15b0
[ 117.103623][ T6047] worker_thread+0xa55/0xfc0
[ 117.103643][ T6047] kthread+0x2fa/0x390
[ 117.103657][ T6047] ret_from_fork+0x48/0x80
[ 117.103676][ T6047] ret_from_fork_asm+0x11/0x20
[ 117.103699][ T6047]
[ 117.103703][ T6047] The buggy address belongs to the object at ffff88807b840000
[ 117.103703][ T6047] which belongs to the cache kmalloc-8k of size 8192
[ 117.103717][ T6047] The buggy address is located 1848 bytes inside of
[ 117.103717][ T6047] freed 8192-byte region [ffff88807b840000, ffff88807b842000)
[ 117.144176][ T5868] usb 4-1: Product: syz
[ 117.144777][ T6047]
[ 117.144784][ T6047] The buggy address belongs to the physical page:
[ 117.144824][ T6047] page:ffffea0001ee1000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b840
[ 117.155454][ T788] usb 3-1: Using ep0 maxpacket: 32
[ 117.162891][ T6047] head:ffffea0001ee1000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 117.162917][ T6047] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 117.162947][ T6047] page_type: 0xffffffff()
[ 117.162971][ T6047] raw: 00fff00000000840 ffff888017842280 ffffea0000be0c00 dead000000000004
[ 117.162993][ T6047] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[ 117.163014][ T6047] page dumped because: kasan: bad access detected
[ 117.163036][ T6047] page_owner tracks the page as allocated
[ 117.163042][ T6047] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5524, tgid 5524 (S50sshd), ts 58329439710, free_ts 58233715521
[ 117.163081][ T6047] post_alloc_hook+0x1cd/0x210
[ 117.163113][ T6047] get_page_from_freelist+0x195c/0x19f0
[ 117.163140][ T6047] __alloc_pages+0x1e3/0x460
[ 117.174844][ T5868] usb 4-1: Manufacturer: syz
[ 117.181042][ T6047] alloc_slab_page+0x5d/0x170
[ 117.181083][ T6047] new_slab+0x87/0x2e0
[ 117.181107][ T6047] ___slab_alloc+0xc6d/0x1300
[ 117.181131][ T6047] __kmem_cache_alloc_node+0x1a2/0x260
[ 117.181155][ T6047] kmalloc_trace+0x2a/0xe0
[ 117.181179][ T6047] tomoyo_init_log+0x1104/0x1f10
[ 117.181200][ T6047] tomoyo_supervisor+0x32d/0x1080
[ 117.181221][ T6047] tomoyo_env_perm+0x14a/0x1e0
[ 117.181244][ T6047] tomoyo_find_next_domain+0x1594/0x1a60
[ 117.181268][ T6047] tomoyo_bprm_check_security+0x116/0x170
[ 117.181284][ T6047] security_bprm_check+0x62/0xa0
[ 117.181306][ T6047] bprm_execve+0xa51/0x16f0
[ 117.220969][ T5868] usb 4-1: SerialNumber: syz
[ 117.233596][ T6047] do_execveat_common+0x51b/0x6c0
[ 117.233632][ T6047] page last free stack trace:
[ 117.233638][ T6047] free_unref_page_prepare+0x7ce/0x8e0
[ 117.233665][ T6047] free_unref_page+0x32/0x2e0
[ 117.233689][ T6047] __unfreeze_partials+0x1cf/0x210
[ 117.233716][ T6047] put_cpu_partial+0x17c/0x250
[ 117.233741][ T6047] __slab_free+0x31d/0x410
[ 117.233785][ T6047] qlist_free_all+0x75/0xe0
[ 117.233808][ T6047] kasan_quarantine_reduce+0x143/0x160
[ 117.233831][ T6047] __kasan_slab_alloc+0x22/0x80
[ 117.233849][ T6047] slab_post_alloc_hook+0x6e/0x4d0
[ 117.233875][ T6047] __kmem_cache_alloc_node+0x13e/0x260
[ 117.233900][ T6047] __kmalloc+0xa4/0x240
[ 117.234159][ T6047] tomoyo_realpath_from_path+0xe3/0x5d0
[ 117.234182][ T6047] tomoyo_path_perm+0x20f/0x4b0
[ 117.234206][ T6047] security_inode_getattr+0xd3/0x120
[ 117.234230][ T6047] __x64_sys_newfstat+0x101/0x1f0
[ 117.266408][ T788] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 117.275664][ T6047] do_syscall_64+0x55/0xb0
[ 117.275770][ T6047]
[ 117.275775][ T6047] Memory state around the buggy address:
[ 117.275785][ T6047] ffff88807b840600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.275797][ T6047] ffff88807b840680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.275808][ T6047] >ffff88807b840700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.275816][ T6047] ^
[ 117.275826][ T6047] ffff88807b840780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.275836][ T6047] ffff88807b840800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.275845][ T6047] ==================================================================
[ 117.313170][ T5097] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 117.550028][ T6047] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 117.550044][ T6047] CPU: 0 PID: 6047 Comm: v4l_id Not tainted syzkaller #0
[ 117.550064][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 117.550074][ T6047] Call Trace:
[ 117.550082][ T6047]
[ 117.550088][ T6047] dump_stack_lvl+0x16c/0x230
[ 117.550114][ T6047] ? show_regs_print_info+0x20/0x20
[ 117.550132][ T6047] ? load_image+0x3b0/0x3b0
[ 117.550164][ T6047] panic+0x2c0/0x710
[ 117.550190][ T6047] ? bpf_jit_dump+0xd0/0xd0
[ 117.550225][ T6047] ? _raw_spin_unlock_irqrestore+0xfa/0x110
[ 117.550250][ T6047] ? _raw_spin_unlock+0x40/0x40
[ 117.550271][ T6047] ? print_memory_metadata+0x314/0x400
[ 117.550302][ T6047] ? v4l2_fh_open+0xca/0x430
[ 117.550326][ T6047] check_panic_on_warn+0x84/0xa0
[ 117.550348][ T6047] ? v4l2_fh_open+0xca/0x430
[ 117.550371][ T6047] end_report+0x6f/0x140
[ 117.550392][ T6047] kasan_report+0x128/0x150
[ 117.550414][ T6047] ? v4l2_fh_open+0xca/0x430
[ 117.550442][ T6047] v4l2_fh_open+0xca/0x430
[ 117.550472][ T6047] em28xx_v4l2_open+0x157/0x980
[ 117.550497][ T6047] v4l2_open+0x212/0x360
[ 117.550520][ T6047] chrdev_open+0x59e/0x670
[ 117.550542][ T6047] ? cd_forget+0x160/0x160
[ 117.550563][ T6047] ? fsnotify_perm+0x3ed/0x5e0
[ 117.550590][ T6047] ? cd_forget+0x160/0x160
[ 117.550610][ T6047] do_dentry_open+0x8c6/0x1500
[ 117.550638][ T6047] path_openat+0x274b/0x3190
[ 117.550676][ T6047] ? __kasan_slab_alloc+0x6c/0x80
[ 117.550698][ T6047] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 117.550723][ T6047] ? verify_lock_unused+0x140/0x140
[ 117.550747][ T6047] ? do_filp_open+0x3d0/0x3d0
[ 117.550778][ T6047] ? __virt_addr_valid+0x18c/0x540
[ 117.550808][ T6047] do_filp_open+0x1c5/0x3d0
[ 117.550838][ T6047] ? vfs_tmpfile+0x490/0x490
[ 117.550878][ T6047] ? _raw_spin_unlock+0x28/0x40
[ 117.550899][ T6047] ? alloc_fd+0x58f/0x630
[ 117.550927][ T6047] do_sys_openat2+0x12c/0x1c0
[ 117.550951][ T6047] ? do_sys_open+0xe0/0xe0
[ 117.550973][ T6047] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 117.550995][ T6047] ? lock_chain_count+0x20/0x20
[ 117.551015][ T6047] ? lock_chain_count+0x20/0x20
[ 117.551036][ T6047] __x64_sys_openat+0x139/0x160
[ 117.551061][ T6047] do_syscall_64+0x55/0xb0
[ 117.551079][ T6047] ? clear_bhb_loop+0x40/0x90
[ 117.551102][ T6047] ? clear_bhb_loop+0x40/0x90
[ 117.551126][ T6047] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 117.551149][ T6047] RIP: 0033:0x7f30806a7407
[ 117.551166][ T6047] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 117.551182][ T6047] RSP: 002b:00007ffcd1ef6860 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 117.551211][ T6047] RAX: ffffffffffffffda RBX: 00007f3080ead880 RCX: 00007f30806a7407
[ 117.551224][ T6047] RDX: 0000000000000000 RSI: 00007ffcd1ef6f1b RDI: ffffffffffffff9c
[ 117.551236][ T6047] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 117.551246][ T6047] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 117.551257][ T6047] R13: 00007ffcd1ef6ab0 R14: 00007f308100c000 R15: 0000561bf81354d8
[ 117.551277][ T6047]
[ 117.551493][ T6047] Kernel Offset: disabled