Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. 2025/08/21 16:32:17 parsed 1 programs [ 107.994093][ T5876] cgroup: Unknown subsys name 'net' [ 108.166087][ T5876] cgroup: Unknown subsys name 'cpuset' [ 108.174804][ T5876] cgroup: Unknown subsys name 'rlimit' [ 109.563930][ T5876] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 112.432546][ T5889] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 113.507264][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.517021][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.528373][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.544697][ T5928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.553119][ T5928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.381085][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 114.400157][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.409944][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.528733][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.548524][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.565007][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.573696][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.580951][ T5951] bridge_slave_0: entered allmulticast mode [ 114.591606][ T5951] bridge_slave_0: entered promiscuous mode [ 114.647184][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.670219][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.711409][ T5951] bridge_slave_1: entered allmulticast mode [ 114.723137][ T5951] bridge_slave_1: entered promiscuous mode [ 114.759961][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.771700][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.803528][ T5951] team0: Port device team_slave_0 added [ 114.811342][ T5951] team0: Port device team_slave_1 added [ 114.836112][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.843495][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.870638][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.882837][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.890142][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.916616][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.949752][ T5951] hsr_slave_0: entered promiscuous mode [ 114.957271][ T5951] hsr_slave_1: entered promiscuous mode [ 115.044195][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.056656][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.065790][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.075810][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.096939][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.105695][ T5951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.113581][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.121102][ T5951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.161384][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.169624][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.177737][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.197129][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.209026][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.216380][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.228362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.235889][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.364901][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.399648][ T5951] veth0_vlan: entered promiscuous mode [ 115.409668][ T5951] veth1_vlan: entered promiscuous mode [ 115.432443][ T5951] veth0_macvtap: entered promiscuous mode [ 115.441305][ T5951] veth1_macvtap: entered promiscuous mode [ 115.456780][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.469681][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.482224][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.492696][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.512576][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.524769][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/08/21 16:32:27 executed programs: 0 [ 115.625832][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.639242][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.650372][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.663884][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.677861][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.707627][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.722435][ T5993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.733877][ T5188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.746636][ T5996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.757120][ T5928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.766204][ T5928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.774662][ T5928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.784636][ T5998] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.793667][ T5928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.805035][ T5928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.814502][ T5998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.823518][ T5928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.834441][ T5998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.845767][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.845935][ T5998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.862579][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.888136][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.959986][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.022549][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.059351][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 116.209894][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.217438][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.225823][ T5987] bridge_slave_0: entered allmulticast mode [ 116.233213][ T5987] bridge_slave_0: entered promiscuous mode [ 116.242108][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.250281][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.258368][ T5987] bridge_slave_1: entered allmulticast mode [ 116.266999][ T5987] bridge_slave_1: entered promiscuous mode [ 116.331632][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.344780][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.395046][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 116.419194][ T5987] team0: Port device team_slave_0 added [ 116.427908][ T5987] team0: Port device team_slave_1 added [ 116.486534][ T5995] chnl_net:caif_netlink_parms(): no params data found [ 116.510493][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.517578][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.544788][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.586260][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.594316][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.621325][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.654729][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.662536][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.670568][ T5994] bridge_slave_0: entered allmulticast mode [ 116.677594][ T5994] bridge_slave_0: entered promiscuous mode [ 116.702757][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.710566][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.717885][ T5994] bridge_slave_1: entered allmulticast mode [ 116.724916][ T5994] bridge_slave_1: entered promiscuous mode [ 116.754076][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.785031][ T5991] chnl_net:caif_netlink_parms(): no params data found [ 116.796761][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.828137][ T5987] hsr_slave_0: entered promiscuous mode [ 116.834778][ T5987] hsr_slave_1: entered promiscuous mode [ 116.841302][ T5987] debugfs: 'hsr0' already exists in 'hsr' [ 116.847593][ T5987] Cannot create hsr debugfs directory [ 116.876536][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.884036][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.891447][ T5995] bridge_slave_0: entered allmulticast mode [ 116.898854][ T5995] bridge_slave_0: entered promiscuous mode [ 116.906958][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.914658][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.923192][ T5995] bridge_slave_1: entered allmulticast mode [ 116.930356][ T5995] bridge_slave_1: entered promiscuous mode [ 116.957002][ T5994] team0: Port device team_slave_0 added [ 116.965915][ T5994] team0: Port device team_slave_1 added [ 117.026695][ T5995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.056121][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.063793][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.090921][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.104073][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.111403][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.138943][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.151711][ T5995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.219615][ T5995] team0: Port device team_slave_0 added [ 117.228089][ T5995] team0: Port device team_slave_1 added [ 117.235202][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.243404][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.251178][ T5991] bridge_slave_0: entered allmulticast mode [ 117.258609][ T5991] bridge_slave_0: entered promiscuous mode [ 117.267449][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.275044][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.282325][ T5991] bridge_slave_1: entered allmulticast mode [ 117.289321][ T5991] bridge_slave_1: entered promiscuous mode [ 117.345565][ T5994] hsr_slave_0: entered promiscuous mode [ 117.352449][ T5994] hsr_slave_1: entered promiscuous mode [ 117.360047][ T5994] debugfs: 'hsr0' already exists in 'hsr' [ 117.366268][ T5994] Cannot create hsr debugfs directory [ 117.374158][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.381567][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.408541][ T5995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.421069][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.428350][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.455077][ T5995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.497144][ T5991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.509492][ T5991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.583851][ T5991] team0: Port device team_slave_0 added [ 117.609328][ T5995] hsr_slave_0: entered promiscuous mode [ 117.616452][ T5995] hsr_slave_1: entered promiscuous mode [ 117.622539][ T5995] debugfs: 'hsr0' already exists in 'hsr' [ 117.628496][ T5995] Cannot create hsr debugfs directory [ 117.637084][ T5991] team0: Port device team_slave_1 added [ 117.699916][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.708204][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.736716][ T5991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.765353][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.774253][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.776056][ T5998] Bluetooth: hci0: command tx timeout [ 117.808350][ T5991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.867221][ T5991] hsr_slave_0: entered promiscuous mode [ 117.873905][ T5991] hsr_slave_1: entered promiscuous mode [ 117.880034][ T5991] debugfs: 'hsr0' already exists in 'hsr' [ 117.886157][ T5991] Cannot create hsr debugfs directory [ 117.933053][ T5998] Bluetooth: hci3: command tx timeout [ 117.933246][ T5188] Bluetooth: hci2: command tx timeout [ 117.938764][ T5998] Bluetooth: hci1: command tx timeout [ 118.718867][ T12] bridge_slave_1: left allmulticast mode [ 118.726024][ T12] bridge_slave_1: left promiscuous mode [ 118.732283][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.746828][ T12] bridge_slave_0: left allmulticast mode [ 118.753163][ T12] bridge_slave_0: left promiscuous mode [ 118.760901][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.870507][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.883447][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.898105][ T12] bond0 (unregistering): Released all slaves [ 119.041230][ T12] hsr_slave_0: left promiscuous mode [ 119.058788][ T12] hsr_slave_1: left promiscuous mode [ 119.066689][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.078807][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.089483][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.101028][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.115673][ T12] veth1_macvtap: left promiscuous mode [ 119.121828][ T12] veth0_macvtap: left promiscuous mode [ 119.129788][ T12] veth1_vlan: left promiscuous mode [ 119.137614][ T12] veth0_vlan: left promiscuous mode [ 119.271473][ T12] team0 (unregistering): Port device team_slave_1 removed [ 119.286170][ T12] team0 (unregistering): Port device team_slave_0 removed [ 119.409484][ T5987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.427699][ T5987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.444360][ T5987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.458574][ T5987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.516035][ T5994] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.554171][ T5994] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.587580][ T5994] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.623234][ T5994] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.643424][ T5995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.658251][ T5995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.689380][ T5995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.702616][ T5995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.746631][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.782638][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.803430][ T5991] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.824614][ T5991] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.841035][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.848407][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.856317][ T5998] Bluetooth: hci0: command tx timeout [ 119.866583][ T5991] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.950457][ T5991] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.978191][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.985541][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.013460][ T5993] Bluetooth: hci2: command tx timeout [ 120.013467][ T5188] Bluetooth: hci3: command tx timeout [ 120.031272][ T5998] Bluetooth: hci1: command tx timeout [ 120.104244][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.120979][ T5987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.158001][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.181546][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.196476][ T5995] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.222128][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.229587][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.239543][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.247118][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.267846][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.275105][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.316237][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.323418][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.362715][ T5994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.404072][ T5991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.459783][ T5991] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.478511][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.515063][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.522722][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.546247][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.553584][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.652290][ T5987] veth0_vlan: entered promiscuous mode [ 120.688424][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.700954][ T5987] veth1_vlan: entered promiscuous mode [ 120.752162][ T5987] veth0_macvtap: entered promiscuous mode [ 120.771594][ T5994] veth0_vlan: entered promiscuous mode [ 120.797455][ T5987] veth1_macvtap: entered promiscuous mode [ 120.812528][ T5994] veth1_vlan: entered promiscuous mode [ 120.860315][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.870919][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.885799][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.910862][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.921105][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.932148][ T1159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.946295][ T5994] veth0_macvtap: entered promiscuous mode [ 120.954965][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.977822][ T5994] veth1_macvtap: entered promiscuous mode [ 121.021054][ T5991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.033820][ T5995] veth0_vlan: entered promiscuous mode [ 121.050517][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.071474][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.086881][ T5995] veth1_vlan: entered promiscuous mode [ 121.102673][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.112283][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.123232][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.139904][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.149629][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.180378][ T2973] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.204842][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.215037][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/21 16:32:33 executed programs: 8 [ 121.232266][ T5995] veth0_macvtap: entered promiscuous mode [ 121.240447][ T5991] veth0_vlan: entered promiscuous mode [ 121.252193][ T5991] veth1_vlan: entered promiscuous mode [ 121.265911][ T5995] veth1_macvtap: entered promiscuous mode [ 121.326217][ T5991] veth0_macvtap: entered promiscuous mode [ 121.340393][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.353434][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.361708][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.379579][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.400052][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.409936][ T5991] veth1_macvtap: entered promiscuous mode [ 121.413810][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.426140][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.437581][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.451394][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.461481][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.492548][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.531613][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.543357][ T5965] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.565396][ T2973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.575062][ T2973] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.591849][ T2973] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.602094][ T2973] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.625384][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.633799][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.677810][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.688804][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.703335][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 121.709365][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.724279][ T5965] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 121.736985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.738486][ T5965] usb 1-1: config 0 has no interface number 0 [ 121.744714][ T920] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.753881][ T5965] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.806747][ T5965] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 121.816384][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.822297][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.825875][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.837022][ T5965] usb 1-1: Product: syz [ 121.846209][ T5965] usb 1-1: Manufacturer: syz [ 121.850960][ T5965] usb 1-1: SerialNumber: syz [ 121.871917][ T5965] usb 1-1: config 0 descriptor?? [ 121.898984][ T5965] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 121.910749][ T5965] em28xx 1-1:0.132: Video interface 132 found: [ 121.923653][ T920] usb 4-1: Using ep0 maxpacket: 32 [ 121.932044][ T920] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 121.943375][ T5998] Bluetooth: hci0: command tx timeout [ 121.950408][ T920] usb 4-1: config 0 has no interface number 0 [ 121.956911][ T920] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.971226][ T920] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 121.981497][ T920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.990096][ T920] usb 4-1: Product: syz [ 121.994919][ T920] usb 4-1: Manufacturer: syz [ 122.000027][ T920] usb 4-1: SerialNumber: syz [ 122.006945][ T920] usb 4-1: config 0 descriptor?? [ 122.025852][ T920] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 122.036085][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.043783][ T920] em28xx 4-1:0.132: Video interface 132 found: [ 122.093182][ T5998] Bluetooth: hci3: command tx timeout [ 122.103784][ T5993] Bluetooth: hci2: command tx timeout [ 122.107129][ T5998] Bluetooth: hci1: command tx timeout [ 122.115846][ T6101] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.143652][ T5965] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 122.193159][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 122.199758][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 122.206535][ T5965] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 122.208491][ T9] usb 3-1: config 0 has no interface number 0 [ 122.224201][ T9] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.237662][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 122.238883][ T5965] em28xx 1-1:0.132: board has no eeprom [ 122.247318][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.262293][ T9] usb 3-1: Product: syz [ 122.268426][ T9] usb 3-1: Manufacturer: syz [ 122.273223][ T9] usb 3-1: SerialNumber: syz [ 122.273611][ T6101] usb 2-1: Using ep0 maxpacket: 32 [ 122.286628][ T9] usb 3-1: config 0 descriptor?? [ 122.293539][ T920] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 122.294429][ T6101] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 122.302523][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 122.310843][ T6101] usb 2-1: config 0 has no interface number 0 [ 122.319318][ T9] em28xx 3-1:0.132: Video interface 132 found: [ 122.327037][ T5965] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 122.347195][ T6101] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.357752][ T5965] em28xx 1-1:0.132: analog set to bulk mode. [ 122.364438][ T6098] em28xx 1-1:0.132: Registering V4L2 extension [ 122.375764][ T5965] usb 1-1: USB disconnect, device number 2 [ 122.381977][ T920] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 122.387582][ T5965] em28xx 1-1:0.132: Disconnecting em28xx [ 122.403283][ T6101] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 122.406871][ T920] em28xx 4-1:0.132: board has no eeprom [ 122.422881][ T6101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.434739][ T6101] usb 2-1: Product: syz [ 122.439320][ T6101] usb 2-1: Manufacturer: syz [ 122.445048][ T6101] usb 2-1: SerialNumber: syz [ 122.459449][ T6101] usb 2-1: config 0 descriptor?? [ 122.468822][ T6101] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 122.480056][ T6101] em28xx 2-1:0.132: Video interface 132 found: [ 122.483325][ T920] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 122.509889][ T920] em28xx 4-1:0.132: analog set to bulk mode. [ 122.531149][ T920] usb 4-1: USB disconnect, device number 2 [ 122.543917][ T920] em28xx 4-1:0.132: Disconnecting em28xx [ 122.560706][ T6098] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 122.569178][ T6098] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 122.580941][ T6098] em28xx 1-1:0.132: No AC97 audio processor [ 122.583690][ T9] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 122.590172][ T6098] usb 1-1: Decoder not found [ 122.607941][ T6098] em28xx 1-1:0.132: failed to create media graph [ 122.615356][ T6098] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 122.623922][ T6098] em28xx 1-1:0.132: Remote control support is not available for this card. [ 122.633299][ T5965] em28xx 1-1:0.132: Closing input extension [ 122.659122][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 122.666492][ T5965] em28xx 1-1:0.132: Freeing device [ 122.669635][ T6100] em28xx 4-1:0.132: Registering V4L2 extension [ 122.686792][ T9] em28xx 3-1:0.132: board has no eeprom [ 122.735583][ T6101] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 122.763289][ T9] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 122.800299][ T9] em28xx 3-1:0.132: analog set to bulk mode. [ 122.807173][ T6101] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 122.835103][ T9] usb 3-1: USB disconnect, device number 2 [ 122.850106][ T6101] em28xx 2-1:0.132: board has no eeprom [ 122.871886][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 122.891823][ T6100] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 122.900455][ T6100] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 122.909867][ T6100] em28xx 4-1:0.132: No AC97 audio processor [ 122.918908][ T6100] usb 4-1: Decoder not found [ 122.923819][ T6100] em28xx 4-1:0.132: failed to create media graph [ 122.924447][ T6101] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 122.930908][ T6100] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 122.947609][ T6100] em28xx 4-1:0.132: Remote control support is not available for this card. [ 122.957926][ T6073] em28xx 3-1:0.132: Registering V4L2 extension [ 122.966306][ T6101] em28xx 2-1:0.132: analog set to bulk mode. [ 122.987539][ T6101] usb 2-1: USB disconnect, device number 2 [ 122.995845][ T6101] em28xx 2-1:0.132: Disconnecting em28xx [ 123.004059][ T5965] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.112783][ T6073] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 123.120737][ T6073] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 123.130051][ T6073] em28xx 3-1:0.132: No AC97 audio processor [ 123.148562][ T6073] usb 3-1: Decoder not found [ 123.153813][ T6073] em28xx 3-1:0.132: failed to create media graph [ 123.160746][ T6073] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 123.163469][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 123.169580][ T6073] em28xx 3-1:0.132: Remote control support is not available for this card. [ 123.182533][ T920] em28xx 4-1:0.132: Closing input extension [ 123.190857][ T5965] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 123.199355][ T920] em28xx 4-1:0.132: Freeing device [ 123.200201][ T6098] em28xx 2-1:0.132: Registering V4L2 extension [ 123.233649][ T5965] usb 1-1: config 0 has no interface number 0 [ 123.240024][ T5965] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.276034][ T5965] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 123.304663][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.322578][ T5965] usb 1-1: Product: syz [ 123.328528][ T5965] usb 1-1: Manufacturer: syz [ 123.335581][ T5965] usb 1-1: SerialNumber: syz [ 123.353865][ T5965] usb 1-1: config 0 descriptor?? [ 123.377060][ T5965] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 123.388711][ T5965] em28xx 1-1:0.132: Video interface 132 found: [ 123.431644][ T6098] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 123.440180][ T6098] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 123.448057][ T6098] em28xx 2-1:0.132: No AC97 audio processor [ 123.459168][ T6098] usb 2-1: Decoder not found [ 123.464140][ T6098] em28xx 2-1:0.132: failed to create media graph [ 123.470785][ T6098] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 123.478725][ T6098] em28xx 2-1:0.132: Remote control support is not available for this card. [ 123.487914][ T9] em28xx 3-1:0.132: Closing input extension [ 123.494568][ T6101] em28xx 2-1:0.132: Closing input extension [ 123.500871][ T9] em28xx 3-1:0.132: Freeing device [ 123.514284][ T6101] em28xx 2-1:0.132: Freeing device [ 123.583185][ T920] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.615253][ T5965] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 123.675918][ T5965] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 123.685618][ T5965] em28xx 1-1:0.132: board has no eeprom [ 123.743148][ T5965] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 123.743148][ T920] usb 4-1: Using ep0 maxpacket: 32 [ 123.743184][ T5965] em28xx 1-1:0.132: analog set to bulk mode. [ 123.756402][ T920] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 123.756522][ T920] usb 4-1: config 0 has no interface number 0 [ 123.756554][ T920] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.759597][ T920] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 123.764186][ T5997] em28xx 1-1:0.132: Registering V4L2 extension [ 123.773615][ T920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.780933][ T5965] usb 1-1: USB disconnect, device number 3 [ 123.809900][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.823071][ T6101] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.831542][ T920] usb 4-1: Product: syz [ 123.849450][ T920] usb 4-1: Manufacturer: syz [ 123.856844][ T920] usb 4-1: SerialNumber: syz [ 123.862733][ T5965] em28xx 1-1:0.132: Disconnecting em28xx [ 123.873605][ T920] usb 4-1: config 0 descriptor?? [ 123.884455][ T920] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 123.894736][ T920] em28xx 4-1:0.132: Video interface 132 found: [ 123.956057][ T5997] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 123.963811][ T5997] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 123.971090][ T5997] em28xx 1-1:0.132: No AC97 audio processor [ 123.978351][ T5997] usb 1-1: Decoder not found [ 123.983469][ T5997] em28xx 1-1:0.132: failed to create media graph [ 123.990084][ T5997] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 123.998033][ T5997] em28xx 1-1:0.132: Remote control support is not available for this card. [ 124.006956][ T6101] usb 2-1: Using ep0 maxpacket: 32 [ 124.012830][ T5965] em28xx 1-1:0.132: Closing input extension [ 124.014865][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 124.022397][ T6101] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 124.027633][ T5998] Bluetooth: hci0: command tx timeout [ 124.032707][ T6101] usb 2-1: config 0 has no interface number 0 [ 124.045987][ T5965] em28xx 1-1:0.132: Freeing device [ 124.046365][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 124.058113][ T6101] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.090199][ T9] usb 3-1: config 0 has no interface number 0 [ 124.098783][ T6101] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 124.108323][ T9] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.130924][ T6101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.132184][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 124.149576][ T920] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 124.150150][ T6101] usb 2-1: Product: syz [ 124.161648][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.170287][ T9] usb 3-1: Product: syz [ 124.176068][ T5998] Bluetooth: hci1: command tx timeout [ 124.182040][ T5998] Bluetooth: hci2: command tx timeout [ 124.188037][ T6101] usb 2-1: Manufacturer: syz [ 124.188065][ T6101] usb 2-1: SerialNumber: syz [ 124.193282][ T5993] Bluetooth: hci3: command tx timeout [ 124.198688][ T9] usb 3-1: Manufacturer: syz [ 124.208449][ T9] usb 3-1: SerialNumber: syz [ 124.214461][ T6101] usb 2-1: config 0 descriptor?? [ 124.223390][ T920] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 124.226892][ T6101] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 124.244718][ T6101] em28xx 2-1:0.132: Video interface 132 found: [ 124.246226][ T9] usb 3-1: config 0 descriptor?? [ 124.260475][ T920] em28xx 4-1:0.132: board has no eeprom [ 124.270926][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 124.281302][ T9] em28xx 3-1:0.132: Video interface 132 found: [ 124.324890][ T920] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 124.333832][ T920] em28xx 4-1:0.132: analog set to bulk mode. [ 124.340319][ T6117] em28xx 4-1:0.132: Registering V4L2 extension [ 124.353261][ T920] usb 4-1: USB disconnect, device number 3 [ 124.360582][ T920] em28xx 4-1:0.132: Disconnecting em28xx [ 124.425723][ T5965] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.464705][ T6117] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 124.475183][ T6117] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 124.476419][ T6101] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 124.482539][ T6117] em28xx 4-1:0.132: No AC97 audio processor [ 124.496290][ T6117] usb 4-1: Decoder not found [ 124.501315][ T6117] em28xx 4-1:0.132: failed to create media graph [ 124.508401][ T6117] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 124.517829][ T6117] em28xx 4-1:0.132: Remote control support is not available for this card. [ 124.528585][ T920] em28xx 4-1:0.132: Closing input extension [ 124.535839][ T9] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 124.545389][ T920] em28xx 4-1:0.132: Freeing device [ 124.547632][ T6101] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 124.564615][ T6101] em28xx 2-1:0.132: board has no eeprom [ 124.583472][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 124.590907][ T5965] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 124.600451][ T5965] usb 1-1: config 0 has no interface number 0 [ 124.607883][ T5965] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.627929][ T6101] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 124.643321][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 124.647193][ T5965] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 124.652271][ T9] em28xx 3-1:0.132: board has no eeprom [ 124.665224][ T6101] em28xx 2-1:0.132: analog set to bulk mode. [ 124.690752][ T5997] em28xx 2-1:0.132: Registering V4L2 extension [ 124.703059][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.711554][ T5965] usb 1-1: Product: syz [ 124.716708][ T5965] usb 1-1: Manufacturer: syz [ 124.722700][ T5965] usb 1-1: SerialNumber: syz [ 124.737611][ T6101] usb 2-1: USB disconnect, device number 3 [ 124.745393][ T6101] em28xx 2-1:0.132: Disconnecting em28xx [ 124.753518][ T9] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 124.755125][ T5965] usb 1-1: config 0 descriptor?? [ 124.761578][ T9] em28xx 3-1:0.132: analog set to bulk mode. [ 124.777213][ T5965] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 124.787926][ T5965] em28xx 1-1:0.132: Video interface 132 found: [ 124.790288][ T9] usb 3-1: USB disconnect, device number 3 [ 124.807805][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 124.867382][ T5997] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 124.876478][ T5997] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 124.883985][ T5997] em28xx 2-1:0.132: No AC97 audio processor [ 124.891842][ T5997] usb 2-1: Decoder not found [ 124.903318][ T5997] em28xx 2-1:0.132: failed to create media graph [ 124.910139][ T5997] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 124.920659][ T5997] em28xx 2-1:0.132: Remote control support is not available for this card. [ 124.943128][ T6117] em28xx 3-1:0.132: Registering V4L2 extension [ 124.963282][ T920] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.033356][ T5965] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 125.076798][ T6117] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 125.084249][ T6117] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 125.091789][ T6117] em28xx 3-1:0.132: No AC97 audio processor [ 125.098437][ T5965] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 125.100355][ T6117] usb 3-1: Decoder not found [ 125.108673][ T5965] em28xx 1-1:0.132: board has no eeprom [ 125.112288][ T6117] em28xx 3-1:0.132: failed to create media graph [ 125.125880][ T6117] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 125.135369][ T6117] em28xx 3-1:0.132: Remote control support is not available for this card. [ 125.144234][ T920] usb 4-1: Using ep0 maxpacket: 32 [ 125.149849][ T9] em28xx 3-1:0.132: Closing input extension [ 125.156360][ T6101] em28xx 2-1:0.132: Closing input extension [ 125.157309][ T920] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.171402][ T920] usb 4-1: config 0 has no interface number 0 [ 125.173768][ T5965] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 125.178682][ T9] em28xx 3-1:0.132: Freeing device [ 125.187158][ T6101] em28xx 2-1:0.132: Freeing device [ 125.194418][ T920] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.216095][ T920] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 125.216423][ T5965] em28xx 1-1:0.132: analog set to bulk mode. [ 125.232056][ T920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.232600][ T5997] em28xx 1-1:0.132: Registering V4L2 extension [ 125.248309][ T920] usb 4-1: Product: syz [ 125.255014][ T920] usb 4-1: Manufacturer: syz [ 125.259874][ T920] usb 4-1: SerialNumber: syz [ 125.274821][ T5965] usb 1-1: USB disconnect, device number 4 [ 125.303698][ T920] usb 4-1: config 0 descriptor?? [ 125.319299][ T5965] em28xx 1-1:0.132: Disconnecting em28xx [ 125.330018][ T920] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 125.365052][ T920] em28xx 4-1:0.132: Video interface 132 found: [ 125.417983][ T5997] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 125.425794][ T5997] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 125.435692][ T5997] em28xx 1-1:0.132: No AC97 audio processor [ 125.444904][ T5997] usb 1-1: Decoder not found [ 125.449946][ T5997] em28xx 1-1:0.132: failed to create media graph [ 125.459417][ T5997] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 125.467521][ T5997] em28xx 1-1:0.132: Remote control support is not available for this card. [ 125.476464][ T5965] em28xx 1-1:0.132: Closing input extension [ 125.489590][ T5965] em28xx 1-1:0.132: Freeing device [ 125.526305][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.563099][ T6101] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.573842][ T920] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 125.635588][ T920] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 125.647491][ T920] em28xx 4-1:0.132: board has no eeprom [ 125.695081][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 125.705626][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.715323][ T920] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 125.728091][ T9] usb 3-1: config 0 has no interface number 0 [ 125.736972][ T9] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.737707][ T6101] usb 2-1: Using ep0 maxpacket: 32 [ 125.747668][ T920] em28xx 4-1:0.132: analog set to bulk mode. [ 125.751076][ T5927] em28xx 4-1:0.132: Registering V4L2 extension [ 125.769961][ T920] usb 4-1: USB disconnect, device number 4 [ 125.770723][ T6101] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.789910][ T6101] usb 2-1: config 0 has no interface number 0 [ 125.790469][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 125.803801][ T920] em28xx 4-1:0.132: Disconnecting em28xx [ 125.807438][ T6101] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.812592][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.826988][ T6101] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 125.831284][ T9] usb 3-1: Product: syz [ 125.845237][ T9] usb 3-1: Manufacturer: syz [ 125.849980][ T9] usb 3-1: SerialNumber: syz [ 125.851387][ T6101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.864895][ T5965] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.873089][ T6101] usb 2-1: Product: syz [ 125.877734][ T9] usb 3-1: config 0 descriptor?? [ 125.877975][ T6101] usb 2-1: Manufacturer: syz [ 125.890275][ T6101] usb 2-1: SerialNumber: syz [ 125.891689][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 125.906080][ T9] em28xx 3-1:0.132: Video interface 132 found: [ 125.909822][ T6101] usb 2-1: config 0 descriptor?? [ 125.923318][ T6101] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 125.939834][ T6101] em28xx 2-1:0.132: Video interface 132 found: [ 125.991588][ T5927] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 126.000058][ T5927] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 126.009368][ T5927] em28xx 4-1:0.132: No AC97 audio processor [ 126.019037][ T5927] usb 4-1: Decoder not found [ 126.026088][ T5927] em28xx 4-1:0.132: failed to create media graph [ 126.032803][ T5927] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 126.040908][ T5927] em28xx 4-1:0.132: Remote control support is not available for this card. [ 126.053225][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 126.053850][ T920] em28xx 4-1:0.132: Closing input extension [ 126.065366][ T5965] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 126.065394][ T5965] usb 1-1: config 0 has no interface number 0 [ 126.065426][ T5965] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.067698][ T5965] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 126.080137][ T920] em28xx 4-1:0.132: Freeing device [ 126.101051][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.101081][ T5965] usb 1-1: Product: syz [ 126.101096][ T5965] usb 1-1: Manufacturer: syz [ 126.101110][ T5965] usb 1-1: SerialNumber: syz [ 126.137251][ T5965] usb 1-1: config 0 descriptor?? [ 126.164098][ T5965] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 126.178317][ T6101] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 126.186950][ T5965] em28xx 1-1:0.132: Video interface 132 found: [ 126.193609][ T9] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 126.257190][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 126.269251][ T9] em28xx 3-1:0.132: board has no eeprom [ 126.276435][ T6101] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 126.285608][ T6101] em28xx 2-1:0.132: board has no eeprom [ 126.333226][ T9] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 126.341209][ T9] em28xx 3-1:0.132: analog set to bulk mode. [ 126.353775][ T5927] em28xx 3-1:0.132: Registering V4L2 extension [ 126.354102][ T6101] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 126.373370][ T9] usb 3-1: USB disconnect, device number 4 [ 126.386205][ T6101] em28xx 2-1:0.132: analog set to bulk mode. [ 126.390342][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 126.403284][ T5965] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 126.414817][ T6101] usb 2-1: USB disconnect, device number 4 [ 126.429401][ T6101] em28xx 2-1:0.132: Disconnecting em28xx [ 126.433665][ T920] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.491492][ T5927] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 126.499957][ T5965] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 126.500647][ T5927] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 126.517654][ T5927] em28xx 3-1:0.132: No AC97 audio processor [ 126.519372][ T5965] em28xx 1-1:0.132: board has no eeprom [ 126.530672][ T5927] usb 3-1: Decoder not found [ 126.535884][ T5927] em28xx 3-1:0.132: failed to create media graph [ 126.544525][ T5927] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 126.553006][ T5927] em28xx 3-1:0.132: Remote control support is not available for this card. [ 126.561991][ T6098] em28xx 2-1:0.132: Registering V4L2 extension [ 126.585171][ T5965] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 126.594511][ T5965] em28xx 1-1:0.132: analog set to bulk mode. [ 126.606389][ T5965] usb 1-1: USB disconnect, device number 5 [ 126.613818][ T5965] em28xx 1-1:0.132: Disconnecting em28xx [ 126.619727][ T920] usb 4-1: Using ep0 maxpacket: 32 2025/08/21 16:32:39 executed programs: 22 [ 126.635433][ T920] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 126.650367][ T920] usb 4-1: config 0 has no interface number 0 [ 126.674917][ T920] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.709080][ T920] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 126.722650][ T920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.732074][ T920] usb 4-1: Product: syz [ 126.737979][ T6098] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 126.739372][ T920] usb 4-1: Manufacturer: syz [ 126.750458][ T920] usb 4-1: SerialNumber: syz [ 126.756482][ T6098] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 126.763666][ T920] usb 4-1: config 0 descriptor?? [ 126.764700][ T6098] em28xx 2-1:0.132: No AC97 audio processor [ 126.778452][ T6098] usb 2-1: Decoder not found [ 126.779486][ T920] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 126.783525][ T6098] em28xx 2-1:0.132: failed to create media graph [ 126.795077][ T920] em28xx 4-1:0.132: Video interface 132 found: [ 126.800174][ T6098] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 126.815303][ T6098] em28xx 2-1:0.132: Remote control support is not available for this card. [ 126.824642][ T9] em28xx 3-1:0.132: Closing input extension [ 126.830733][ T6101] em28xx 2-1:0.132: Closing input extension [ 126.837363][ T24] em28xx 1-1:0.132: Registering V4L2 extension [ 126.838019][ T9] em28xx 3-1:0.132: Freeing device [ 126.853775][ T6101] em28xx 2-1:0.132: Freeing device [ 126.981614][ T24] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 126.989898][ T24] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 127.002478][ T24] em28xx 1-1:0.132: No AC97 audio processor [ 127.012088][ T24] usb 1-1: Decoder not found [ 127.017487][ T24] em28xx 1-1:0.132: failed to create media graph [ 127.027990][ T24] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 127.033403][ T920] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 127.037765][ T24] em28xx 1-1:0.132: Remote control support is not available for this card. [ 127.041805][ T6173] ================================================================== [ 127.050037][ T5965] em28xx 1-1:0.132: Closing input extension [ 127.058294][ T6173] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 127.058329][ T6173] Read of size 8 at addr ffff8880274d4740 by task v4l_id/6173 [ 127.079322][ T6173] [ 127.081703][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 127.081724][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.081734][ T6173] Call Trace: [ 127.081741][ T6173] [ 127.081748][ T6173] dump_stack_lvl+0x189/0x250 [ 127.081776][ T6173] ? __virt_addr_valid+0x1c8/0x5c0 [ 127.081798][ T6173] ? rcu_is_watching+0x15/0xb0 [ 127.081816][ T6173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.081837][ T6173] ? rcu_is_watching+0x15/0xb0 [ 127.081852][ T6173] ? lock_release+0x4b/0x3e0 [ 127.081866][ T6173] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 127.081886][ T6173] ? __virt_addr_valid+0x1c8/0x5c0 [ 127.081905][ T6173] ? __virt_addr_valid+0x4a5/0x5c0 [ 127.081925][ T6173] print_report+0xca/0x240 [ 127.081940][ T6173] ? v4l2_fh_open+0xac/0x420 [ 127.081956][ T6173] kasan_report+0x118/0x150 [ 127.081970][ T6173] ? v4l2_fh_open+0xac/0x420 [ 127.081989][ T6173] v4l2_fh_open+0xac/0x420 [ 127.082005][ T6173] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.082028][ T6173] em28xx_v4l2_open+0x157/0x9a0 [ 127.082048][ T6173] v4l2_open+0x1bc/0x3a0 [ 127.082067][ T6173] chrdev_open+0x4cc/0x5e0 [ 127.082085][ T6173] ? __pfx_chrdev_open+0x10/0x10 [ 127.082103][ T6173] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 127.082123][ T6173] ? __pfx_chrdev_open+0x10/0x10 [ 127.082139][ T6173] do_dentry_open+0x950/0x13f0 [ 127.082216][ T6173] vfs_open+0x3b/0x340 [ 127.082235][ T6173] ? path_openat+0x2ecd/0x3830 [ 127.082248][ T6173] path_openat+0x2ee5/0x3830 [ 127.082259][ T6173] ? arch_stack_walk+0xfc/0x150 [ 127.082285][ T6173] ? stack_depot_save_flags+0x40/0x860 [ 127.082312][ T6173] ? __pfx_path_openat+0x10/0x10 [ 127.082334][ T6173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.082355][ T6173] do_filp_open+0x1fa/0x410 [ 127.082378][ T6173] ? __pfx_do_filp_open+0x10/0x10 [ 127.082408][ T6173] ? _raw_spin_unlock+0x28/0x50 [ 127.082426][ T6173] ? alloc_fd+0x64c/0x6c0 [ 127.082447][ T6173] do_sys_openat2+0x121/0x1c0 [ 127.082468][ T6173] ? __pfx_do_sys_openat2+0x10/0x10 [ 127.082491][ T6173] ? do_user_addr_fault+0xc8a/0x1390 [ 127.082506][ T6173] __x64_sys_openat+0x138/0x170 [ 127.082528][ T6173] do_syscall_64+0xfa/0xfa0 [ 127.082549][ T6173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.082563][ T6173] ? clear_bhb_loop+0x60/0xb0 [ 127.082580][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.082594][ T6173] RIP: 0033:0x7f7ca66a7407 [ 127.082614][ T6173] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 127.082626][ T6173] RSP: 002b:00007ffc438af090 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 127.082642][ T6173] RAX: ffffffffffffffda RBX: 00007f7ca6d42880 RCX: 00007f7ca66a7407 [ 127.082652][ T6173] RDX: 0000000000000000 RSI: 00007ffc438aff1b RDI: ffffffffffffff9c [ 127.082662][ T6173] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 127.082675][ T6173] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 127.082684][ T6173] R13: 00007ffc438af2e0 R14: 00007f7ca6ea9000 R15: 000055a59555f4d8 [ 127.082701][ T6173] [ 127.082705][ T6173] [ 127.412259][ T6173] Allocated by task 24: [ 127.416432][ T6173] kasan_save_track+0x3e/0x80 [ 127.421336][ T6173] __kasan_kmalloc+0x93/0xb0 [ 127.426405][ T6173] __kmalloc_cache_noprof+0x21c/0x3a0 [ 127.431908][ T6173] em28xx_v4l2_init+0x10b/0x2e70 [ 127.436942][ T6173] em28xx_init_extension+0x11d/0x1c0 [ 127.442459][ T6173] process_scheduled_works+0xae1/0x17b0 [ 127.448037][ T6173] worker_thread+0x8a0/0xda0 [ 127.452672][ T6173] kthread+0x711/0x8a0 [ 127.456858][ T6173] ret_from_fork+0x47c/0x820 [ 127.461555][ T6173] ret_from_fork_asm+0x1a/0x30 [ 127.466685][ T6173] [ 127.469029][ T6173] Freed by task 24: [ 127.473024][ T6173] kasan_save_track+0x3e/0x80 [ 127.477731][ T6173] __kasan_save_free_info+0x46/0x50 [ 127.483145][ T6173] __kasan_slab_free+0x5b/0x80 [ 127.488047][ T6173] kfree+0x18e/0x440 [ 127.492147][ T6173] em28xx_v4l2_init+0x1683/0x2e70 [ 127.497867][ T6173] em28xx_init_extension+0x11d/0x1c0 [ 127.503799][ T6173] process_scheduled_works+0xae1/0x17b0 [ 127.509399][ T6173] worker_thread+0x8a0/0xda0 [ 127.514022][ T6173] kthread+0x711/0x8a0 [ 127.518262][ T6173] ret_from_fork+0x47c/0x820 [ 127.522962][ T6173] ret_from_fork_asm+0x1a/0x30 [ 127.527854][ T6173] [ 127.530403][ T6173] The buggy address belongs to the object at ffff8880274d4000 [ 127.530403][ T6173] which belongs to the cache kmalloc-8k of size 8192 [ 127.544747][ T6173] The buggy address is located 1856 bytes inside of [ 127.544747][ T6173] freed 8192-byte region [ffff8880274d4000, ffff8880274d6000) [ 127.559622][ T6173] [ 127.561982][ T6173] The buggy address belongs to the physical page: [ 127.568498][ T6173] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x274d0 [ 127.577274][ T6173] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 127.585970][ T6173] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 127.595488][ T6173] page_type: f5(slab) [ 127.599514][ T6173] raw: 00fff00000000040 ffff88801a842280 ffffea0001f45200 dead000000000004 [ 127.608292][ T6173] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 127.617240][ T6173] head: 00fff00000000040 ffff88801a842280 ffffea0001f45200 dead000000000004 [ 127.625936][ T6173] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 127.634808][ T6173] head: 00fff00000000003 ffffea00009d3401 00000000ffffffff 00000000ffffffff [ 127.644107][ T6173] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 127.653054][ T6173] page dumped because: kasan: bad access detected [ 127.659611][ T6173] page_owner tracks the page as allocated [ 127.665453][ T6173] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5627, tgid 5627 (init), ts 51138834013, free_ts 51102541752 [ 127.688867][ T6173] post_alloc_hook+0x240/0x2a0 [ 127.694026][ T6173] get_page_from_freelist+0x21e4/0x22c0 [ 127.699769][ T6173] __alloc_frozen_pages_noprof+0x181/0x370 [ 127.706244][ T6173] alloc_pages_mpol+0x232/0x4a0 [ 127.711472][ T6173] allocate_slab+0x8a/0x330 [ 127.716339][ T6173] ___slab_alloc+0xbd1/0x13e0 [ 127.721300][ T6173] __kmalloc_cache_noprof+0x282/0x3a0 [ 127.726874][ T6173] tomoyo_init_log+0x111f/0x1f70 [ 127.731841][ T6173] tomoyo_supervisor+0x340/0x1480 [ 127.736971][ T6173] tomoyo_find_next_domain+0x488/0x1aa0 [ 127.743416][ T6173] tomoyo_bprm_check_security+0x11c/0x180 [ 127.750222][ T6173] security_bprm_check+0x89/0x270 [ 127.756136][ T6173] bprm_execve+0x8ee/0x1450 [ 127.761633][ T6173] do_execveat_common+0x510/0x6a0 [ 127.767518][ T6173] __x64_sys_execve+0x94/0xb0 [ 127.772859][ T6173] do_syscall_64+0xfa/0xfa0 [ 127.778209][ T6173] page last free pid 5617 tgid 5617 stack trace: [ 127.785107][ T6173] __free_frozen_pages+0xbc4/0xd30 [ 127.790695][ T6173] __slab_free+0x2e7/0x390 [ 127.795391][ T6173] qlist_free_all+0x97/0x140 [ 127.800085][ T6173] kasan_quarantine_reduce+0x148/0x160 [ 127.805702][ T6173] __kasan_slab_alloc+0x22/0x80 [ 127.810679][ T6173] kmem_cache_alloc_noprof+0x1ad/0x390 [ 127.816176][ T6173] getname_flags+0xb8/0x540 [ 127.820700][ T6173] vfs_fstatat+0x43/0x170 [ 127.825276][ T6173] __x64_sys_newfstatat+0x116/0x190 [ 127.831128][ T6173] do_syscall_64+0xfa/0xfa0 [ 127.836296][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.842411][ T6173] [ 127.844844][ T6173] Memory state around the buggy address: [ 127.850657][ T6173] ffff8880274d4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.859349][ T6173] ffff8880274d4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.867712][ T6173] >ffff8880274d4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.876358][ T6173] ^ [ 127.882813][ T6173] ffff8880274d4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.891611][ T6173] ffff8880274d4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.900677][ T6173] ================================================================== [ 127.920501][ T6173] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.928618][ T6173] CPU: 1 UID: 0 PID: 6173 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 127.940459][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.954092][ T6173] Call Trace: [ 127.958069][ T6173] [ 127.962401][ T6173] dump_stack_lvl+0x99/0x250 [ 127.968948][ T6173] ? __asan_memcpy+0x40/0x70 [ 127.975147][ T6173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.982159][ T6173] ? __pfx__printk+0x10/0x10 [ 127.987842][ T6173] vpanic+0x281/0x750 [ 127.992470][ T6173] ? preempt_schedule+0xae/0xc0 [ 127.998926][ T6173] ? __pfx_vpanic+0x10/0x10 [ 128.005869][ T6173] ? preempt_schedule_common+0x83/0xd0 [ 128.012258][ T6173] ? preempt_schedule+0xae/0xc0 [ 128.017632][ T6173] ? __pfx_preempt_schedule+0x10/0x10 [ 128.023317][ T6173] panic+0xb9/0xc0 [ 128.027205][ T6173] ? __pfx_panic+0x10/0x10 [ 128.031779][ T6173] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 128.037716][ T6173] ? is_module_address+0x17/0xf0 [ 128.042906][ T6173] ? v4l2_fh_open+0xac/0x420 [ 128.047639][ T6173] check_panic_on_warn+0x89/0xb0 [ 128.052666][ T6173] ? v4l2_fh_open+0xac/0x420 [ 128.057496][ T6173] end_report+0x78/0x160 [ 128.062060][ T6173] kasan_report+0x129/0x150 [ 128.066877][ T6173] ? v4l2_fh_open+0xac/0x420 [ 128.071879][ T6173] v4l2_fh_open+0xac/0x420 [ 128.076366][ T6173] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.083396][ T6173] em28xx_v4l2_open+0x157/0x9a0 [ 128.089278][ T6173] v4l2_open+0x1bc/0x3a0 [ 128.095739][ T6173] chrdev_open+0x4cc/0x5e0 [ 128.102449][ T6173] ? __pfx_chrdev_open+0x10/0x10 [ 128.108343][ T6173] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 128.117252][ T6173] ? __pfx_chrdev_open+0x10/0x10 [ 128.123252][ T6173] do_dentry_open+0x950/0x13f0 [ 128.128960][ T6173] vfs_open+0x3b/0x340 [ 128.133443][ T6173] ? path_openat+0x2ecd/0x3830 [ 128.138531][ T6173] path_openat+0x2ee5/0x3830 [ 128.143792][ T6173] ? arch_stack_walk+0xfc/0x150 [ 128.148892][ T6173] ? stack_depot_save_flags+0x40/0x860 [ 128.154595][ T6173] ? __pfx_path_openat+0x10/0x10 [ 128.159814][ T6173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.166327][ T6173] do_filp_open+0x1fa/0x410 [ 128.171126][ T6173] ? __pfx_do_filp_open+0x10/0x10 [ 128.176717][ T6173] ? _raw_spin_unlock+0x28/0x50 [ 128.181722][ T6173] ? alloc_fd+0x64c/0x6c0 [ 128.186106][ T6173] do_sys_openat2+0x121/0x1c0 [ 128.191114][ T6173] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.196537][ T6173] ? do_user_addr_fault+0xc8a/0x1390 [ 128.202034][ T6173] __x64_sys_openat+0x138/0x170 [ 128.207079][ T6173] do_syscall_64+0xfa/0xfa0 [ 128.211789][ T6173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.217959][ T6173] ? clear_bhb_loop+0x60/0xb0 [ 128.222850][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.229328][ T6173] RIP: 0033:0x7f7ca66a7407 [ 128.234048][ T6173] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 128.254030][ T6173] RSP: 002b:00007ffc438af090 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 128.262655][ T6173] RAX: ffffffffffffffda RBX: 00007f7ca6d42880 RCX: 00007f7ca66a7407 [ 128.271000][ T6173] RDX: 0000000000000000 RSI: 00007ffc438aff1b RDI: ffffffffffffff9c [ 128.279087][ T6173] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 128.287084][ T6173] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 128.295280][ T6173] R13: 00007ffc438af2e0 R14: 00007f7ca6ea9000 R15: 000055a59555f4d8 [ 128.303474][ T6173] [ 128.306843][ T6173] Kernel Offset: disabled [ 128.311287][ T6173] Rebooting in 86400 seconds..