Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. 2026/03/21 18:34:28 parsed 1 programs [ 88.909127][ T5844] cgroup: Unknown subsys name 'net' [ 89.021971][ T5844] cgroup: Unknown subsys name 'cpuset' [ 89.031186][ T5844] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.796607][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.924358][ T9] cfg80211: failed to load regulatory.db [ 94.272288][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.520944][ T5891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.529749][ T5891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.537731][ T5891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.546302][ T5891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.555713][ T5891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.633076][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 96.165771][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.173714][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.181214][ T5868] bridge_slave_0: entered allmulticast mode [ 96.192129][ T5868] bridge_slave_0: entered promiscuous mode [ 96.206591][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.214078][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.221514][ T5868] bridge_slave_1: entered allmulticast mode [ 96.230141][ T5868] bridge_slave_1: entered promiscuous mode [ 96.325582][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.339531][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.534146][ T5868] team0: Port device team_slave_0 added [ 96.593859][ T5868] team0: Port device team_slave_1 added [ 96.690414][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.697412][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.723927][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.789831][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.796834][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.823468][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.341696][ T5868] hsr_slave_0: entered promiscuous mode [ 97.349246][ T5868] hsr_slave_1: entered promiscuous mode [ 97.400352][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.410053][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.622981][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.652455][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.321444][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.340607][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.355218][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.374271][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.583596][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.624962][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.645070][ T1743] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.652839][ T1743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.676830][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.684115][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.953398][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.020383][ T5868] veth0_vlan: entered promiscuous mode [ 99.036531][ T5868] veth1_vlan: entered promiscuous mode [ 99.082429][ T5868] veth0_macvtap: entered promiscuous mode [ 99.094608][ T5868] veth1_macvtap: entered promiscuous mode [ 99.126883][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.148760][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.166587][ T181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.176475][ T181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.191226][ T181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.206681][ T181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/03/21 18:34:42 executed programs: 0 [ 99.395843][ T5891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.408043][ T5891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.420626][ T5891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.438283][ T5891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.448055][ T5891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.538931][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.559881][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.569380][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.579226][ T5964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.584155][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.594071][ T5964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.602488][ T5964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.610897][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.622880][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.633943][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.663259][ T5964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.674461][ T5964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.682830][ T5964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.697398][ T5964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.713061][ T5964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.434624][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 100.448693][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 100.540048][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.559134][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 100.718673][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 100.913725][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.921531][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.929373][ T5965] bridge_slave_0: entered allmulticast mode [ 100.940510][ T5965] bridge_slave_0: entered promiscuous mode [ 100.973591][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.062215][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.070221][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.077898][ T5960] bridge_slave_0: entered allmulticast mode [ 101.085722][ T5960] bridge_slave_0: entered promiscuous mode [ 101.099499][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.107167][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.114852][ T5960] bridge_slave_1: entered allmulticast mode [ 101.123359][ T5960] bridge_slave_1: entered promiscuous mode [ 101.131617][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.139182][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.146451][ T5965] bridge_slave_1: entered allmulticast mode [ 101.154691][ T5965] bridge_slave_1: entered promiscuous mode [ 101.175462][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.183290][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.190793][ T5959] bridge_slave_0: entered allmulticast mode [ 101.200398][ T5959] bridge_slave_0: entered promiscuous mode [ 101.250201][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.257819][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.265128][ T5959] bridge_slave_1: entered allmulticast mode [ 101.273162][ T5959] bridge_slave_1: entered promiscuous mode [ 101.292081][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.344555][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.359690][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.403507][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.447249][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.456917][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.464983][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.472393][ T5955] bridge_slave_0: entered allmulticast mode [ 101.481006][ T5955] bridge_slave_0: entered promiscuous mode [ 101.493211][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.512448][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.528860][ T5891] Bluetooth: hci0: command tx timeout [ 101.554680][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.564466][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.572769][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.581469][ T5955] bridge_slave_1: entered allmulticast mode [ 101.589604][ T5955] bridge_slave_1: entered promiscuous mode [ 101.631227][ T5965] team0: Port device team_slave_0 added [ 101.678348][ T5964] Bluetooth: hci1: command tx timeout [ 101.684703][ T5891] Bluetooth: hci2: command tx timeout [ 101.707941][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.722128][ T5960] team0: Port device team_slave_0 added [ 101.731614][ T5965] team0: Port device team_slave_1 added [ 101.743208][ T5959] team0: Port device team_slave_0 added [ 101.755128][ T5959] team0: Port device team_slave_1 added [ 101.767729][ T5891] Bluetooth: hci3: command tx timeout [ 101.782695][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.795154][ T5960] team0: Port device team_slave_1 added [ 101.886382][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.893642][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.920272][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.935004][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.942166][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.968514][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.981450][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.988576][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.014732][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.067647][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.074686][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.101226][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.122962][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.130150][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.156322][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.169559][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.176613][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.202798][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.216826][ T5955] team0: Port device team_slave_0 added [ 102.227432][ T5955] team0: Port device team_slave_1 added [ 102.301992][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.309218][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.336112][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.385120][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.392204][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.419074][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.503817][ T5960] hsr_slave_0: entered promiscuous mode [ 102.511607][ T5960] hsr_slave_1: entered promiscuous mode [ 102.518684][ T5960] debugfs: 'hsr0' already exists in 'hsr' [ 102.524504][ T5960] Cannot create hsr debugfs directory [ 102.569610][ T5965] hsr_slave_0: entered promiscuous mode [ 102.576810][ T5965] hsr_slave_1: entered promiscuous mode [ 102.583936][ T5965] debugfs: 'hsr0' already exists in 'hsr' [ 102.589883][ T5965] Cannot create hsr debugfs directory [ 102.608754][ T5959] hsr_slave_0: entered promiscuous mode [ 102.615761][ T5959] hsr_slave_1: entered promiscuous mode [ 102.622774][ T5959] debugfs: 'hsr0' already exists in 'hsr' [ 102.628655][ T5959] Cannot create hsr debugfs directory [ 102.634610][ T37] bridge_slave_1: left allmulticast mode [ 102.640816][ T37] bridge_slave_1: left promiscuous mode [ 102.648153][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.661378][ T37] bridge_slave_0: left allmulticast mode [ 102.667983][ T37] bridge_slave_0: left promiscuous mode [ 102.673992][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.906431][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.918290][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.928844][ T37] bond0 (unregistering): Released all slaves [ 103.161346][ T5955] hsr_slave_0: entered promiscuous mode [ 103.169088][ T5955] hsr_slave_1: entered promiscuous mode [ 103.175864][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 103.181724][ T5955] Cannot create hsr debugfs directory [ 103.264103][ T37] hsr_slave_0: left promiscuous mode [ 103.270281][ T37] hsr_slave_1: left promiscuous mode [ 103.277335][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.285543][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.294012][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.301590][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.315905][ T37] veth1_macvtap: left promiscuous mode [ 103.322729][ T37] veth0_macvtap: left promiscuous mode [ 103.328415][ T37] veth1_vlan: left promiscuous mode [ 103.333766][ T37] veth0_vlan: left promiscuous mode [ 103.567342][ T37] team0 (unregistering): Port device team_slave_1 removed [ 103.584246][ T37] team0 (unregistering): Port device team_slave_0 removed [ 103.597869][ T5891] Bluetooth: hci0: command tx timeout [ 103.757697][ T5891] Bluetooth: hci2: command tx timeout [ 103.764040][ T5964] Bluetooth: hci1: command tx timeout [ 103.837687][ T5964] Bluetooth: hci3: command tx timeout [ 104.305641][ T5960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.359524][ T5960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.372677][ T5960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.391046][ T5960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.686760][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.771413][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.806075][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.813341][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.825865][ T5959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.838830][ T5959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.856856][ T5959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.872887][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.880151][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.904258][ T5959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.006988][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.021923][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.050910][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.075095][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.351050][ T5965] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.393359][ T5965] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.436560][ T5965] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.472498][ T5965] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.682957][ T5964] Bluetooth: hci0: command tx timeout [ 105.695271][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.796009][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.837843][ T5964] Bluetooth: hci1: command tx timeout [ 105.840987][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.845418][ T5891] Bluetooth: hci2: command tx timeout [ 105.863136][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.870375][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.889277][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.914908][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.922160][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.929245][ T5891] Bluetooth: hci3: command tx timeout [ 105.997062][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.049124][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.056324][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.092278][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.099608][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.240929][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.259321][ T5960] veth0_vlan: entered promiscuous mode [ 106.347164][ T5960] veth1_vlan: entered promiscuous mode [ 106.374410][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.446155][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.453462][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.485316][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.492603][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.625470][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.646134][ T5960] veth0_macvtap: entered promiscuous mode [ 106.682991][ T5960] veth1_macvtap: entered promiscuous mode [ 106.783115][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.824722][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.864344][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.896382][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.906524][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.938301][ T181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.948448][ T181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.979758][ T5959] veth0_vlan: entered promiscuous mode [ 107.049263][ T5959] veth1_vlan: entered promiscuous mode [ 107.196699][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.211948][ T5955] veth0_vlan: entered promiscuous mode [ 107.219255][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.271537][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.300189][ T5955] veth1_vlan: entered promiscuous mode [ 107.315973][ T1743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.326619][ T1743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.349335][ T5959] veth0_macvtap: entered promiscuous mode 2026/03/21 18:34:50 executed programs: 8 [ 107.376109][ T5959] veth1_macvtap: entered promiscuous mode [ 107.503213][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.513666][ T5955] veth0_macvtap: entered promiscuous mode [ 107.547398][ T5955] veth1_macvtap: entered promiscuous mode [ 107.560687][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.570822][ T5965] veth0_vlan: entered promiscuous mode [ 107.602643][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.612371][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.634205][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.644795][ T1743] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.665282][ T5965] veth1_vlan: entered promiscuous mode [ 107.691091][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.718810][ T5945] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.733264][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.768572][ T5891] Bluetooth: hci0: command tx timeout [ 107.782781][ T181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.792291][ T181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.810045][ T181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.819877][ T181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.882058][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.894963][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 107.910541][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.921531][ T5964] Bluetooth: hci1: command tx timeout [ 107.926998][ T5891] Bluetooth: hci2: command tx timeout [ 107.940497][ T5945] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 107.951391][ T5945] usb 2-1: config 0 has no interface number 0 [ 107.957955][ T5945] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.974422][ T5945] usb 2-1: config 0 interface 89 has no altsetting 0 [ 107.990789][ T5945] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 108.000213][ T5891] Bluetooth: hci3: command tx timeout [ 108.007339][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.018708][ T5945] usb 2-1: Product: syz [ 108.025952][ T5945] usb 2-1: Manufacturer: syz [ 108.032249][ T5965] veth0_macvtap: entered promiscuous mode [ 108.037163][ T5945] usb 2-1: SerialNumber: syz [ 108.068961][ T5945] usb 2-1: config 0 descriptor?? [ 108.096255][ T5945] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 108.107395][ T5965] veth1_macvtap: entered promiscuous mode [ 108.113774][ T5945] em28xx 2-1:0.89: Video interface 89 found: [ 108.137853][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.145936][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.179571][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.192959][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.280913][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.316260][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.324883][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.336379][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.349361][ T5945] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 108.379516][ T181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.392018][ T181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.427879][ T181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.440522][ T181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.470862][ T5945] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 108.494781][ T5945] em28xx 2-1:0.89: board has no eeprom [ 108.506776][ T6011] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.577958][ T5945] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 108.596059][ T5945] em28xx 2-1:0.89: analog set to bulk mode. [ 108.605406][ T6063] em28xx 2-1:0.89: Registering V4L2 extension [ 108.635952][ T5945] usb 2-1: USB disconnect, device number 2 [ 108.656931][ T1743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.680988][ T6060] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.697755][ T6011] usb 3-1: Using ep0 maxpacket: 32 [ 108.703431][ T1743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.719415][ T6011] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 108.732807][ T6011] usb 3-1: config 0 has no interface number 0 [ 108.750145][ T5945] em28xx 2-1:0.89: Disconnecting em28xx [ 108.758951][ T6063] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 108.777076][ T6011] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.787336][ T6063] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 108.805713][ T6063] em28xx 2-1:0.89: No AC97 audio processor [ 108.812723][ T6011] usb 3-1: config 0 interface 89 has no altsetting 0 [ 108.831855][ T6011] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 108.844688][ T6063] usb 2-1: Decoder not found [ 108.849466][ T6063] em28xx 2-1:0.89: failed to create media graph [ 108.856241][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.864615][ T6060] usb 1-1: Using ep0 maxpacket: 32 [ 108.881301][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.889651][ T6063] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 108.893695][ T6060] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 108.914364][ T6011] usb 3-1: Product: syz [ 108.920220][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.932171][ T6060] usb 1-1: config 0 has no interface number 0 [ 108.938395][ T6011] usb 3-1: Manufacturer: syz [ 108.938418][ T6011] usb 3-1: SerialNumber: syz [ 108.954074][ T6063] em28xx 2-1:0.89: Registering snapshot button... [ 108.965565][ T6011] usb 3-1: config 0 descriptor?? [ 108.991686][ T6060] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.009809][ T6060] usb 1-1: config 0 interface 89 has no altsetting 0 [ 109.024686][ T6060] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 109.036461][ T6011] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 109.053106][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.054649][ T6063] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input5 [ 109.074507][ T6011] em28xx 3-1:0.89: Video interface 89 found: [ 109.087050][ T6060] usb 1-1: Product: syz [ 109.096726][ T6063] em28xx 2-1:0.89: Remote control support is not available for this card. [ 109.103354][ T6060] usb 1-1: Manufacturer: syz [ 109.125724][ T5945] em28xx 2-1:0.89: Closing input extension [ 109.128478][ T6060] usb 1-1: SerialNumber: syz [ 109.160528][ T5945] em28xx 2-1:0.89: Deregistering snapshot button [ 109.161736][ T6060] usb 1-1: config 0 descriptor?? [ 109.195177][ T6060] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 109.221534][ T6060] em28xx 1-1:0.89: Video interface 89 found: [ 109.290756][ T6011] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 109.300461][ T5945] em28xx 2-1:0.89: Freeing device [ 109.374494][ T6011] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 109.385551][ T6011] em28xx 3-1:0.89: board has no eeprom [ 109.417665][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.448849][ T6011] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 109.450490][ T6060] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 109.456164][ T6011] em28xx 3-1:0.89: analog set to bulk mode. [ 109.456335][ T24] em28xx 3-1:0.89: Registering V4L2 extension [ 109.491060][ T6011] usb 3-1: USB disconnect, device number 2 [ 109.499517][ T6011] em28xx 3-1:0.89: Disconnecting em28xx [ 109.536299][ T6060] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 109.544764][ T6060] em28xx 1-1:0.89: board has no eeprom [ 109.547989][ T24] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 109.561665][ T24] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 109.571131][ T24] em28xx 3-1:0.89: No AC97 audio processor [ 109.580127][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 109.586774][ T24] usb 3-1: Decoder not found [ 109.592760][ T24] em28xx 3-1:0.89: failed to create media graph [ 109.603715][ T24] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 109.613214][ T10] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 109.614319][ T24] em28xx 3-1:0.89: Registering snapshot button... [ 109.622415][ T6060] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 109.637022][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input6 [ 109.648449][ T5945] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.655246][ T10] usb 4-1: config 0 has no interface number 0 [ 109.666176][ T24] em28xx 3-1:0.89: Remote control support is not available for this card. [ 109.675529][ T6011] em28xx 3-1:0.89: Closing input extension [ 109.676941][ T6060] em28xx 1-1:0.89: analog set to bulk mode. [ 109.693985][ T10] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.699015][ T6011] em28xx 3-1:0.89: Deregistering snapshot button [ 109.709665][ T10] usb 4-1: config 0 interface 89 has no altsetting 0 [ 109.727221][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 109.739509][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.748798][ T10] usb 4-1: Product: syz [ 109.753826][ T10] usb 4-1: Manufacturer: syz [ 109.760836][ T10] usb 4-1: SerialNumber: syz [ 109.772122][ T6060] usb 1-1: USB disconnect, device number 2 [ 109.787304][ T6061] em28xx 1-1:0.89: Registering V4L2 extension [ 109.815277][ T10] usb 4-1: config 0 descriptor?? [ 109.821373][ T6060] em28xx 1-1:0.89: Disconnecting em28xx [ 109.828064][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 109.853874][ T5945] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 109.879309][ T6011] em28xx 3-1:0.89: Freeing device [ 109.881431][ T10] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 109.899981][ T5945] usb 2-1: config 0 has no interface number 0 [ 109.926125][ T5945] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.950873][ T6061] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 109.962081][ T10] em28xx 4-1:0.89: Video interface 89 found: [ 109.970600][ T5945] usb 2-1: config 0 interface 89 has no altsetting 0 [ 109.980131][ T6061] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 110.000622][ T5945] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 110.013460][ T6061] em28xx 1-1:0.89: No AC97 audio processor [ 110.029190][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.039657][ T5945] usb 2-1: Product: syz [ 110.043897][ T5945] usb 2-1: Manufacturer: syz [ 110.061465][ T5945] usb 2-1: SerialNumber: syz [ 110.071783][ T6061] usb 1-1: Decoder not found [ 110.076941][ T6061] em28xx 1-1:0.89: failed to create media graph [ 110.092748][ T5945] usb 2-1: config 0 descriptor?? [ 110.102508][ T6061] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 110.112415][ T10] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 110.114996][ T5945] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 110.133326][ T5945] em28xx 2-1:0.89: Video interface 89 found: [ 110.143760][ T6061] em28xx 1-1:0.89: Registering snapshot button... [ 110.154156][ T6061] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input7 [ 110.184884][ T6061] em28xx 1-1:0.89: Remote control support is not available for this card. [ 110.206692][ T6060] em28xx 1-1:0.89: Closing input extension [ 110.215037][ T10] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 110.226609][ T10] em28xx 4-1:0.89: board has no eeprom [ 110.233629][ T6060] em28xx 1-1:0.89: Deregistering snapshot button [ 110.289539][ T6060] em28xx 1-1:0.89: Freeing device [ 110.309307][ T6011] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.309327][ T10] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 110.309352][ T10] em28xx 4-1:0.89: analog set to bulk mode. [ 110.337377][ T1222] em28xx 4-1:0.89: Registering V4L2 extension [ 110.358611][ T5945] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 110.390906][ T10] usb 4-1: USB disconnect, device number 2 [ 110.433850][ T10] em28xx 4-1:0.89: Disconnecting em28xx [ 110.452992][ T1222] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 110.472780][ T1222] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 110.474473][ T5945] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 110.492770][ T6011] usb 3-1: Using ep0 maxpacket: 32 [ 110.504767][ T5945] em28xx 2-1:0.89: board has no eeprom [ 110.515032][ T6011] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 110.515802][ T1222] em28xx 4-1:0.89: No AC97 audio processor [ 110.523499][ T6011] usb 3-1: config 0 has no interface number 0 [ 110.523542][ T6011] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 110.523564][ T6011] usb 3-1: config 0 interface 89 has no altsetting 0 [ 110.537860][ T6011] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 110.571009][ T1222] usb 4-1: Decoder not found [ 110.576106][ T1222] em28xx 4-1:0.89: failed to create media graph [ 110.583495][ T1222] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 110.611284][ T1222] em28xx 4-1:0.89: Registering snapshot button... [ 110.612398][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.643707][ T5945] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 110.652890][ T1222] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input8 [ 110.670233][ T5945] em28xx 2-1:0.89: analog set to bulk mode. [ 110.683120][ T6011] usb 3-1: Product: syz [ 110.687895][ T6060] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.692996][ T6011] usb 3-1: Manufacturer: syz [ 110.700931][ T6011] usb 3-1: SerialNumber: syz [ 110.722868][ T1222] em28xx 4-1:0.89: Remote control support is not available for this card. [ 110.735243][ T6011] usb 3-1: config 0 descriptor?? [ 110.740871][ T24] em28xx 2-1:0.89: Registering V4L2 extension [ 110.751148][ T5945] usb 2-1: USB disconnect, device number 3 [ 110.775261][ T5945] em28xx 2-1:0.89: Disconnecting em28xx [ 110.789652][ T6011] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 110.821089][ T6011] em28xx 3-1:0.89: Video interface 89 found: [ 110.840794][ T24] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 110.848008][ T24] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 110.855128][ T24] em28xx 2-1:0.89: No AC97 audio processor [ 110.859823][ T6060] usb 1-1: Using ep0 maxpacket: 32 [ 110.869528][ T6060] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 110.882348][ T24] usb 2-1: Decoder not found [ 110.889793][ T6060] usb 1-1: config 0 has no interface number 0 [ 110.904422][ T24] em28xx 2-1:0.89: failed to create media graph [ 110.906623][ T6060] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 110.931909][ T24] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 110.939256][ T6060] usb 1-1: config 0 interface 89 has no altsetting 0 [ 110.953076][ T24] em28xx 2-1:0.89: Registering snapshot button... [ 110.955280][ T6060] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 110.972691][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.984153][ T6060] usb 1-1: Product: syz [ 110.985594][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input9 [ 110.988577][ T6060] usb 1-1: Manufacturer: syz [ 110.988597][ T6060] usb 1-1: SerialNumber: syz [ 111.001486][ T6060] usb 1-1: config 0 descriptor?? [ 111.017025][ T24] em28xx 2-1:0.89: Remote control support is not available for this card. [ 111.030203][ T6011] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 111.034285][ T10] em28xx 4-1:0.89: Closing input extension [ 111.044536][ T10] em28xx 4-1:0.89: Deregistering snapshot button [ 111.056357][ T6060] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 111.066237][ T6060] em28xx 1-1:0.89: Video interface 89 found: [ 111.076529][ T5945] em28xx 2-1:0.89: Closing input extension [ 111.084577][ T5945] em28xx 2-1:0.89: Deregistering snapshot button [ 111.102060][ T6011] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 111.106215][ T10] em28xx 4-1:0.89: Freeing device [ 111.122152][ T6011] em28xx 3-1:0.89: board has no eeprom [ 111.166596][ T5945] em28xx 2-1:0.89: Freeing device [ 111.198508][ T6011] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 111.225113][ T6011] em28xx 3-1:0.89: analog set to bulk mode. [ 111.243436][ T24] em28xx 3-1:0.89: Registering V4L2 extension [ 111.282367][ T6011] usb 3-1: USB disconnect, device number 3 [ 111.316925][ T6011] em28xx 3-1:0.89: Disconnecting em28xx [ 111.319752][ T6060] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 111.362200][ T24] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 111.373108][ T24] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 111.385793][ T24] em28xx 3-1:0.89: No AC97 audio processor [ 111.395299][ T24] usb 3-1: Decoder not found [ 111.400363][ T24] em28xx 3-1:0.89: failed to create media graph [ 111.406788][ T24] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 111.416601][ T24] em28xx 3-1:0.89: Registering snapshot button... [ 111.441057][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input10 [ 111.453821][ T6060] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 111.460940][ T24] em28xx 3-1:0.89: Remote control support is not available for this card. [ 111.465563][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.481986][ T6011] em28xx 3-1:0.89: Closing input extension [ 111.488668][ T6011] em28xx 3-1:0.89: Deregistering snapshot button [ 111.492136][ T6060] em28xx 1-1:0.89: board has no eeprom [ 111.517751][ T5945] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.528680][ T6011] em28xx 3-1:0.89: Freeing device [ 111.580600][ T6060] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 111.612345][ T6060] em28xx 1-1:0.89: analog set to bulk mode. [ 111.622119][ T6080] em28xx 1-1:0.89: Registering V4L2 extension [ 111.642494][ T6060] usb 1-1: USB disconnect, device number 3 [ 111.659117][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 111.676178][ T10] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 111.688099][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 111.695951][ T6060] em28xx 1-1:0.89: Disconnecting em28xx [ 111.702817][ T10] usb 4-1: config 0 has no interface number 0 [ 111.710857][ T5945] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 111.721819][ T10] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.744001][ T5945] usb 2-1: config 0 has no interface number 0 [ 111.744256][ T10] usb 4-1: config 0 interface 89 has no altsetting 0 [ 111.759200][ T5945] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.777041][ T6080] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 111.784670][ T5945] usb 2-1: config 0 interface 89 has no altsetting 0 [ 111.786530][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 111.801757][ T5945] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 111.812795][ T6080] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 111.827805][ T6080] em28xx 1-1:0.89: No AC97 audio processor [ 111.833874][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.850816][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.860882][ T10] usb 4-1: Product: syz [ 111.866097][ T6080] usb 1-1: Decoder not found [ 111.874517][ T5945] usb 2-1: Product: syz [ 111.879980][ T5945] usb 2-1: Manufacturer: syz [ 111.881605][ T10] usb 4-1: Manufacturer: syz [ 111.884647][ T5945] usb 2-1: SerialNumber: syz [ 111.892226][ T6080] em28xx 1-1:0.89: failed to create media graph [ 111.898641][ T6011] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.914876][ T10] usb 4-1: SerialNumber: syz [ 111.921923][ T5945] usb 2-1: config 0 descriptor?? [ 111.927694][ T6080] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 111.956189][ T6080] em28xx 1-1:0.89: Registering snapshot button... [ 111.964570][ T10] usb 4-1: config 0 descriptor?? [ 111.972791][ T5945] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 111.986478][ T5945] em28xx 2-1:0.89: Video interface 89 found: [ 111.994056][ T10] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 112.004402][ T6080] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input11 [ 112.017182][ T10] em28xx 4-1:0.89: Video interface 89 found: [ 112.025566][ T6080] em28xx 1-1:0.89: Remote control support is not available for this card. [ 112.034852][ T6060] em28xx 1-1:0.89: Closing input extension [ 112.041048][ T6060] em28xx 1-1:0.89: Deregistering snapshot button [ 112.063871][ T6060] em28xx 1-1:0.89: Freeing device [ 112.079709][ T6011] usb 3-1: Using ep0 maxpacket: 32 [ 112.093912][ T6011] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 112.121233][ T6011] usb 3-1: config 0 has no interface number 0 [ 112.135381][ T6011] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.155635][ T6011] usb 3-1: config 0 interface 89 has no altsetting 0 [ 112.172639][ T6011] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 112.181940][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.202617][ T6011] usb 3-1: Product: syz [ 112.206954][ T6011] usb 3-1: Manufacturer: syz [ 112.212082][ T5945] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 112.218592][ T6011] usb 3-1: SerialNumber: syz [ 112.233432][ T6011] usb 3-1: config 0 descriptor?? [ 112.245949][ T6011] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 112.251911][ T10] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 112.262623][ T6011] em28xx 3-1:0.89: Video interface 89 found: [ 112.292805][ T5945] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 112.302173][ T5945] em28xx 2-1:0.89: board has no eeprom [ 112.331705][ T10] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 112.339981][ T10] em28xx 4-1:0.89: board has no eeprom [ 112.359516][ T6060] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.378093][ T5945] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 112.385517][ T5945] em28xx 2-1:0.89: analog set to bulk mode. [ 112.391774][ T29] em28xx 2-1:0.89: Registering V4L2 extension [ 112.399628][ T10] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 112.407181][ T10] em28xx 4-1:0.89: analog set to bulk mode. [ 112.427503][ T10] usb 4-1: USB disconnect, device number 3 [ 112.433990][ T5945] usb 2-1: USB disconnect, device number 4 [ 112.458550][ T10] em28xx 4-1:0.89: Disconnecting em28xx [ 112.489091][ T5945] em28xx 2-1:0.89: Disconnecting em28xx [ 112.508991][ T6011] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 112.515276][ T29] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 112.517890][ T6060] usb 1-1: Using ep0 maxpacket: 32 [ 112.523153][ T29] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 112.536845][ T29] em28xx 2-1:0.89: No AC97 audio processor [ 112.548601][ T6060] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 112.549167][ T29] usb 2-1: Decoder not found [ 112.565826][ T29] em28xx 2-1:0.89: failed to create media graph [ 112.572961][ T29] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 112.576560][ T6060] usb 1-1: config 0 has no interface number 0 [ 112.586187][ T6060] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.589597][ T29] em28xx 2-1:0.89: Registering snapshot button... [ 112.597152][ T6060] usb 1-1: config 0 interface 89 has no altsetting 0 [ 112.612170][ T6011] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 112.614843][ T6060] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 112.630714][ T29] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input12 [ 112.634863][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.651267][ T6011] em28xx 3-1:0.89: board has no eeprom [ 112.664863][ T29] em28xx 2-1:0.89: Remote control support is not available for this card. [ 112.676035][ T6060] usb 1-1: Product: syz [ 112.687705][ T5945] em28xx 2-1:0.89: Closing input extension [ 112.696581][ T6060] usb 1-1: Manufacturer: syz [ 112.696826][ T5945] em28xx 2-1:0.89: Deregistering snapshot button 2026/03/21 18:34:56 executed programs: 19 [ 112.712689][ T6060] usb 1-1: SerialNumber: syz [ 112.718720][ T6011] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 112.729435][ T6011] em28xx 3-1:0.89: analog set to bulk mode. [ 112.756538][ T6060] usb 1-1: config 0 descriptor?? [ 112.763170][ T6011] usb 3-1: USB disconnect, device number 4 [ 112.781351][ T6011] em28xx 3-1:0.89: Disconnecting em28xx [ 112.791545][ T6060] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 112.802463][ T5846] em28xx 4-1:0.89: Registering V4L2 extension [ 112.814566][ T6060] em28xx 1-1:0.89: Video interface 89 found: [ 112.823991][ T5945] em28xx 2-1:0.89: Freeing device [ 112.948586][ T5846] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 112.955730][ T5846] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 112.969489][ T5846] em28xx 4-1:0.89: No AC97 audio processor [ 112.986548][ T5846] usb 4-1: Decoder not found [ 112.992790][ T5846] em28xx 4-1:0.89: failed to create media graph [ 113.000339][ T5846] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 113.008848][ T5846] em28xx 4-1:0.89: Registering snapshot button... [ 113.016974][ T5846] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input13 [ 113.034663][ T5846] em28xx 4-1:0.89: Remote control support is not available for this card. [ 113.047177][ T6060] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 113.054259][ T6063] em28xx 3-1:0.89: Registering V4L2 extension [ 113.113848][ T6060] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 113.122967][ T6060] em28xx 1-1:0.89: board has no eeprom [ 113.133467][ T6063] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 113.140607][ T6063] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 113.148535][ T6063] em28xx 3-1:0.89: No AC97 audio processor [ 113.157453][ T6063] usb 3-1: Decoder not found [ 113.164398][ T6063] em28xx 3-1:0.89: failed to create media graph [ 113.172097][ T6063] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 113.181741][ T6063] em28xx 3-1:0.89: Registering snapshot button... [ 113.188004][ T6060] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 113.188572][ T5945] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.203222][ T6060] em28xx 1-1:0.89: analog set to bulk mode. [ 113.213340][ T6063] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input14 [ 113.226617][ T6060] usb 1-1: USB disconnect, device number 4 [ 113.236367][ T6060] em28xx 1-1:0.89: Disconnecting em28xx [ 113.241969][ T6063] em28xx 3-1:0.89: Remote control support is not available for this card. [ 113.242041][ T6011] em28xx 3-1:0.89: Closing input extension [ 113.242064][ T6011] em28xx 3-1:0.89: Deregistering snapshot button [ 113.282179][ T10] em28xx 4-1:0.89: Closing input extension [ 113.288919][ T10] em28xx 4-1:0.89: Deregistering snapshot button [ 113.303033][ T6011] em28xx 3-1:0.89: Freeing device [ 113.317882][ T5846] em28xx 1-1:0.89: Registering V4L2 extension [ 113.338316][ T10] em28xx 4-1:0.89: Freeing device [ 113.387599][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 113.404067][ T5945] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 113.416919][ T5945] usb 2-1: config 0 has no interface number 0 [ 113.417086][ T5846] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 113.423170][ T5945] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.423197][ T5945] usb 2-1: config 0 interface 89 has no altsetting 0 [ 113.457065][ T5945] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 113.471032][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.486021][ T5945] usb 2-1: Product: syz [ 113.486445][ T5846] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 113.491249][ T5945] usb 2-1: Manufacturer: syz [ 113.502719][ T5945] usb 2-1: SerialNumber: syz [ 113.524976][ T5945] usb 2-1: config 0 descriptor?? [ 113.537443][ T5846] em28xx 1-1:0.89: No AC97 audio processor [ 113.554590][ T5846] usb 1-1: Decoder not found [ 113.567775][ T5846] em28xx 1-1:0.89: failed to create media graph [ 113.574134][ T5846] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 113.584589][ T5846] em28xx 1-1:0.89: Registering snapshot button... [ 113.588976][ T5945] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 113.602133][ T6106] ================================================================== [ 113.610252][ T6106] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0 [ 113.617509][ T6106] Read of size 4 at addr ffff88807cc0c858 by task v4l_id/6106 [ 113.625080][ T6106] [ 113.627444][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 113.627464][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.627481][ T6106] Call Trace: [ 113.627489][ T6106] [ 113.627496][ T6106] dump_stack_lvl+0xe8/0x150 [ 113.627527][ T6106] print_address_description+0x55/0x1e0 [ 113.627558][ T6106] ? v4l2_open+0x395/0x3a0 [ 113.627585][ T6106] print_report+0x58/0x70 [ 113.627608][ T6106] kasan_report+0x117/0x150 [ 113.627628][ T6106] ? v4l2_open+0x395/0x3a0 [ 113.627655][ T6106] v4l2_open+0x395/0x3a0 [ 113.627681][ T6106] chrdev_open+0x4cd/0x5e0 [ 113.627702][ T6106] ? __pfx_chrdev_open+0x10/0x10 [ 113.627721][ T6106] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 113.627751][ T6106] ? __pfx_chrdev_open+0x10/0x10 [ 113.627769][ T6106] do_dentry_open+0x785/0x14e0 [ 113.627802][ T6106] vfs_open+0x3b/0x340 [ 113.627822][ T6106] ? path_openat+0x2df0/0x3860 [ 113.627839][ T6106] path_openat+0x2e08/0x3860 [ 113.627861][ T6106] ? __pfx_stack_trace_save+0x10/0x10 [ 113.627884][ T6106] ? stack_depot_save_flags+0x33/0x810 [ 113.627910][ T6106] ? __pfx_path_openat+0x10/0x10 [ 113.627925][ T6106] ? __x64_sys_openat+0x138/0x170 [ 113.627950][ T6106] ? __lock_acquire+0x6b5/0x2cf0 [ 113.627980][ T6106] do_file_open+0x23e/0x4a0 [ 113.627999][ T6106] ? __pfx_do_file_open+0x10/0x10 [ 113.628024][ T6106] ? _raw_spin_unlock+0x28/0x50 [ 113.628041][ T6106] ? alloc_fd+0x64b/0x6c0 [ 113.628067][ T6106] do_sys_openat2+0x113/0x200 [ 113.628093][ T6106] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.628118][ T6106] ? exc_page_fault+0x6a/0xc0 [ 113.628138][ T6106] ? do_user_addr_fault+0xc6f/0x1340 [ 113.628164][ T6106] __x64_sys_openat+0x138/0x170 [ 113.628189][ T6106] do_syscall_64+0x14d/0xf80 [ 113.628209][ T6106] ? trace_irq_disable+0x3b/0x140 [ 113.628230][ T6106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.628248][ T6106] ? clear_bhb_loop+0x40/0x90 [ 113.628267][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.628290][ T6106] RIP: 0033:0x7f07658a7407 [ 113.628311][ T6106] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 113.628325][ T6106] RSP: 002b:00007fffa6721d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 113.628343][ T6106] RAX: ffffffffffffffda RBX: 00007f0765fad880 RCX: 00007f07658a7407 [ 113.628356][ T6106] RDX: 0000000000000000 RSI: 00007fffa6722f1c RDI: ffffffffffffff9c [ 113.628368][ T6106] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 113.628377][ T6106] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 113.628387][ T6106] R13: 00007fffa6721f60 R14: 00007f0766114000 R15: 00005644e71564d8 [ 113.628407][ T6106] [ 113.628413][ T6106] [ 113.899573][ T6106] Allocated by task 5846: [ 113.903912][ T6106] kasan_save_track+0x3e/0x80 [ 113.908613][ T6106] __kasan_kmalloc+0x93/0xb0 [ 113.913238][ T6106] __kmalloc_cache_noprof+0x31c/0x660 [ 113.918628][ T6106] em28xx_v4l2_init+0x10b/0x2e70 [ 113.923679][ T6106] em28xx_init_extension+0x120/0x1c0 [ 113.928991][ T6106] process_one_work+0x9a3/0x1710 [ 113.933965][ T6106] worker_thread+0xba8/0x11e0 [ 113.938670][ T6106] kthread+0x388/0x470 [ 113.942761][ T6106] ret_from_fork+0x51e/0xb90 [ 113.947367][ T6106] ret_from_fork_asm+0x1a/0x30 [ 113.952143][ T6106] [ 113.954481][ T6106] Freed by task 5846: [ 113.958476][ T6106] kasan_save_track+0x3e/0x80 [ 113.963167][ T6106] kasan_save_free_info+0x46/0x50 [ 113.968208][ T6106] __kasan_slab_free+0x5c/0x80 [ 113.972983][ T6106] kfree+0x1c5/0x640 [ 113.976944][ T6106] em28xx_v4l2_init+0x1683/0x2e70 [ 113.982017][ T6106] em28xx_init_extension+0x120/0x1c0 [ 113.987331][ T6106] process_one_work+0x9a3/0x1710 [ 113.992290][ T6106] worker_thread+0xba8/0x11e0 [ 113.996989][ T6106] kthread+0x388/0x470 [ 114.001085][ T6106] ret_from_fork+0x51e/0xb90 [ 114.005723][ T6106] ret_from_fork_asm+0x1a/0x30 [ 114.010508][ T6106] [ 114.012843][ T6106] The buggy address belongs to the object at ffff88807cc0c000 [ 114.012843][ T6106] which belongs to the cache kmalloc-8k of size 8192 [ 114.026911][ T6106] The buggy address is located 2136 bytes inside of [ 114.026911][ T6106] freed 8192-byte region [ffff88807cc0c000, ffff88807cc0e000) [ 114.040906][ T6106] [ 114.043259][ T6106] The buggy address belongs to the physical page: [ 114.049695][ T6106] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cc08 [ 114.058471][ T6106] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 114.067070][ T6106] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 114.074998][ T6106] page_type: f5(slab) [ 114.079012][ T6106] raw: 00fff00000000040 ffff88813ff1d280 dead000000000100 dead000000000122 [ 114.087628][ T6106] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 114.096246][ T6106] head: 00fff00000000040 ffff88813ff1d280 dead000000000100 dead000000000122 [ 114.104953][ T6106] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 114.113648][ T6106] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 114.122341][ T6106] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 114.131020][ T6106] page dumped because: kasan: bad access detected [ 114.137459][ T6106] page_owner tracks the page as allocated [ 114.143181][ T6106] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5862, tgid 5862 (syz-executor), ts 94017172522, free_ts 92254383191 [ 114.164561][ T6106] post_alloc_hook+0x231/0x280 [ 114.169363][ T6106] get_page_from_freelist+0x2418/0x24b0 [ 114.174927][ T6106] __alloc_frozen_pages_noprof+0x233/0x3d0 [ 114.180752][ T6106] allocate_slab+0x77/0x660 [ 114.185279][ T6106] refill_objects+0x339/0x3d0 [ 114.189977][ T6106] __pcs_replace_empty_main+0x321/0x720 [ 114.195546][ T6106] __kmalloc_noprof+0x474/0x760 [ 114.200423][ T6106] cache_create_net+0x98/0x230 [ 114.205211][ T6106] gss_svc_init_net+0x58/0x570 [ 114.209988][ T6106] ops_init+0x35c/0x5c0 [ 114.214163][ T6106] setup_net+0x118/0x340 [ 114.218428][ T6106] copy_net_ns+0x50e/0x730 [ 114.222867][ T6106] create_new_namespaces+0x3e7/0x6a0 [ 114.228179][ T6106] unshare_nsproxy_namespaces+0x11a/0x160 [ 114.233931][ T6106] ksys_unshare+0x521/0x980 [ 114.238449][ T6106] __x64_sys_unshare+0x38/0x50 [ 114.243255][ T6106] page last free pid 5837 tgid 5835 stack trace: [ 114.249769][ T6106] __free_frozen_pages+0xbc7/0xd30 [ 114.254898][ T6106] __folio_put+0x4a2/0x580 [ 114.259382][ T6106] skb_release_data+0x62f/0xa80 [ 114.264253][ T6106] __kfree_skb+0x5d/0x210 [ 114.268608][ T6106] tcp_ack+0x2818/0x7dd0 [ 114.272867][ T6106] tcp_rcv_established+0xbac/0x26b0 [ 114.278081][ T6106] tcp_v4_do_rcv+0x964/0x13c0 [ 114.282797][ T6106] tcp_v4_rcv+0x2825/0x31f0 [ 114.287316][ T6106] ip_protocol_deliver_rcu+0x221/0x440 [ 114.292891][ T6106] ip_local_deliver_finish+0x3bb/0x6f0 [ 114.298364][ T6106] NF_HOOK+0x336/0x3c0 [ 114.303072][ T6106] NF_HOOK+0x336/0x3c0 [ 114.307189][ T6106] process_backlog+0xaa3/0x1950 [ 114.312235][ T6106] __napi_poll+0xae/0x340 [ 114.316578][ T6106] net_rx_action+0x627/0xf70 [ 114.321191][ T6106] handle_softirqs+0x22a/0x840 [ 114.326006][ T6106] [ 114.328353][ T6106] Memory state around the buggy address: [ 114.334305][ T6106] ffff88807cc0c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.342381][ T6106] ffff88807cc0c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.350730][ T6106] >ffff88807cc0c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.358816][ T6106] ^ [ 114.365815][ T6106] ffff88807cc0c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.373892][ T6106] ffff88807cc0c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.382004][ T6106] ================================================================== [ 114.397644][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.410495][ T5846] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input15 [ 114.430510][ T5945] em28xx 2-1:0.89: Video interface 89 found: [ 114.439209][ T6011] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.460451][ T5846] em28xx 1-1:0.89: Remote control support is not available for this card. [ 114.464950][ T6106] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 114.465012][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 114.465074][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.465113][ T6106] Call Trace: [ 114.465134][ T6106] [ 114.465156][ T6106] vpanic+0x56c/0xa60 [ 114.465233][ T6106] ? __pfx_vpanic+0x10/0x10 [ 114.465286][ T6106] ? __pfx___schedule+0x10/0x10 [ 114.465358][ T6106] panic+0xc5/0xd0 [ 114.465402][ T6106] ? __pfx_panic+0x10/0x10 [ 114.465454][ T6106] ? preempt_schedule_thunk+0x16/0x30 [ 114.465529][ T6106] ? v4l2_open+0x395/0x3a0 [ 114.465617][ T6106] check_panic_on_warn+0x89/0xb0 [ 114.465681][ T6106] ? v4l2_open+0x395/0x3a0 [ 114.465755][ T6106] end_report+0x73/0x170 [ 114.465815][ T6106] ? v4l2_open+0x395/0x3a0 [ 114.465887][ T6106] kasan_report+0x128/0x150 [ 114.465950][ T6106] ? v4l2_open+0x395/0x3a0 [ 114.466053][ T6106] v4l2_open+0x395/0x3a0 [ 114.466135][ T6106] chrdev_open+0x4cd/0x5e0 [ 114.466228][ T6106] ? __pfx_chrdev_open+0x10/0x10 [ 114.466303][ T6106] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 114.466399][ T6106] ? __pfx_chrdev_open+0x10/0x10 [ 114.466460][ T6106] do_dentry_open+0x785/0x14e0 [ 114.466544][ T6106] vfs_open+0x3b/0x340 [ 114.466609][ T6106] ? path_openat+0x2df0/0x3860 [ 114.466668][ T6106] path_openat+0x2e08/0x3860 [ 114.466735][ T6106] ? __pfx_stack_trace_save+0x10/0x10 [ 114.466814][ T6106] ? stack_depot_save_flags+0x33/0x810 [ 114.466897][ T6106] ? __pfx_path_openat+0x10/0x10 [ 114.466942][ T6106] ? __x64_sys_openat+0x138/0x170 [ 114.467034][ T6106] ? __lock_acquire+0x6b5/0x2cf0 [ 114.467129][ T6106] do_file_open+0x23e/0x4a0 [ 114.467191][ T6106] ? __pfx_do_file_open+0x10/0x10 [ 114.467261][ T6106] ? _raw_spin_unlock+0x28/0x50 [ 114.467313][ T6106] ? alloc_fd+0x64b/0x6c0 [ 114.467396][ T6106] do_sys_openat2+0x113/0x200 [ 114.467471][ T6106] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.467558][ T6106] ? exc_page_fault+0x6a/0xc0 [ 114.467642][ T6106] ? do_user_addr_fault+0xc6f/0x1340 [ 114.467731][ T6106] __x64_sys_openat+0x138/0x170 [ 114.467813][ T6106] do_syscall_64+0x14d/0xf80 [ 114.467875][ T6106] ? trace_irq_disable+0x3b/0x140 [ 114.467946][ T6106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.468008][ T6106] ? clear_bhb_loop+0x40/0x90 [ 114.468070][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.468122][ T6106] RIP: 0033:0x7f07658a7407 [ 114.468173][ T6106] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 114.468220][ T6106] RSP: 002b:00007fffa6721d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 114.468280][ T6106] RAX: ffffffffffffffda RBX: 00007f0765fad880 RCX: 00007f07658a7407 [ 114.468322][ T6106] RDX: 0000000000000000 RSI: 00007fffa6722f1c RDI: ffffffffffffff9c [ 114.468372][ T6106] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 114.468397][ T6106] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 114.468429][ T6106] R13: 00007fffa6721f60 R14: 00007f0766114000 R15: 00005644e71564d8 [ 114.468492][ T6106] [ 114.469900][ T6106] Kernel Offset: disabled