Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. 2026/04/17 09:32:30 parsed 1 programs [ 63.137796][ T29] audit: type=1400 audit(1776418350.717:62): avc: denied { node_bind } for pid=5803 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 65.278435][ T29] audit: type=1400 audit(1776418352.857:63): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.302044][ T29] audit: type=1400 audit(1776418352.887:64): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.304833][ T5810] cgroup: Unknown subsys name 'net' [ 65.330774][ T29] audit: type=1400 audit(1776418352.907:65): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.497122][ T5810] cgroup: Unknown subsys name 'cpuset' [ 65.504864][ T5810] cgroup: Unknown subsys name 'rlimit' [ 65.635660][ T29] audit: type=1400 audit(1776418353.217:66): avc: denied { setattr } for pid=5810 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.669239][ T29] audit: type=1400 audit(1776418353.217:67): avc: denied { create } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.690023][ T29] audit: type=1400 audit(1776418353.217:68): avc: denied { write } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.710748][ T29] audit: type=1400 audit(1776418353.217:69): avc: denied { read } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.740758][ T29] audit: type=1400 audit(1776418353.227:70): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.756699][ T5813] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 65.765994][ T29] audit: type=1400 audit(1776418353.227:71): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.846751][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.853866][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.704495][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.298361][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 68.298376][ T29] audit: type=1400 audit(1776418355.877:76): avc: denied { execmem } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.334444][ T29] audit: type=1400 audit(1776418355.907:77): avc: denied { read } for pid=5824 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.394408][ T29] audit: type=1400 audit(1776418355.907:78): avc: denied { open } for pid=5824 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.421802][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.432051][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.439651][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.448429][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.456162][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.464777][ T29] audit: type=1400 audit(1776418355.907:79): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 68.504545][ T29] audit: type=1400 audit(1776418355.947:80): avc: denied { create } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 68.524550][ T29] audit: type=1400 audit(1776418355.957:81): avc: denied { sys_admin } for pid=5821 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 68.552340][ T29] audit: type=1400 audit(1776418355.957:82): avc: denied { create } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.572677][ T29] audit: type=1400 audit(1776418355.957:83): avc: denied { read write } for pid=5825 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.596542][ T29] audit: type=1400 audit(1776418355.957:84): avc: denied { open } for pid=5825 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.620508][ T29] audit: type=1400 audit(1776418355.977:85): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="socket:[5303]" dev="sockfs" ino=5303 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.672364][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.018096][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.036941][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.140046][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.155209][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.966780][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 71.083089][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.091059][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.098312][ T5879] bridge_slave_0: entered allmulticast mode [ 71.105581][ T5879] bridge_slave_0: entered promiscuous mode [ 71.115600][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.123373][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.131139][ T5879] bridge_slave_1: entered allmulticast mode [ 71.138499][ T5879] bridge_slave_1: entered promiscuous mode [ 71.168493][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.179218][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.200938][ T5879] team0: Port device team_slave_0 added [ 71.207949][ T5879] team0: Port device team_slave_1 added [ 71.224456][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.231407][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.257331][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.269261][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.276229][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.302206][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.349847][ T5879] hsr_slave_0: entered promiscuous mode [ 71.356626][ T5879] hsr_slave_1: entered promiscuous mode [ 71.470420][ T5879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.481116][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.490037][ T5879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.499698][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.507347][ T5879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.515883][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.523436][ T5879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.533028][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.556252][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.563669][ T5879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.571426][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.578524][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.619356][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.637110][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.647064][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.662809][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.676701][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.683868][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.697431][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.704594][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.827141][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.859333][ T5879] veth0_vlan: entered promiscuous mode [ 71.868973][ T5879] veth1_vlan: entered promiscuous mode [ 71.891027][ T5879] veth0_macvtap: entered promiscuous mode [ 71.899651][ T5879] veth1_macvtap: entered promiscuous mode [ 71.915811][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.928040][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.941094][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.951627][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.961100][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.973925][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/17 09:32:39 executed programs: 0 [ 72.108955][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.117652][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.129593][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.141345][ T5927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.151848][ T5927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.162653][ T5927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.171666][ T5927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.181099][ T5927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.190290][ T5927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.197902][ T5927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.208063][ T5927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.221399][ T5927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.229734][ T5927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.232752][ T5932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.248593][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.258742][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.271503][ T5927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.276213][ T5932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.286452][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.286599][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.301242][ T5932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.315824][ T5932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.326399][ T5932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.345038][ T5932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.353274][ T5932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.871028][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.888778][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 72.953699][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 72.971834][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 73.016854][ T5922] chnl_net:caif_netlink_parms(): no params data found [ 73.059398][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 73.114937][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.122060][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.129351][ T5930] bridge_slave_0: entered allmulticast mode [ 73.136112][ T5930] bridge_slave_0: entered promiscuous mode [ 73.169754][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.176986][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.184158][ T5930] bridge_slave_1: entered allmulticast mode [ 73.190826][ T5930] bridge_slave_1: entered promiscuous mode [ 73.261559][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.272884][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.282332][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.289781][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.297001][ T5938] bridge_slave_0: entered allmulticast mode [ 73.303653][ T5938] bridge_slave_0: entered promiscuous mode [ 73.343491][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.350714][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.358484][ T5938] bridge_slave_1: entered allmulticast mode [ 73.365323][ T5938] bridge_slave_1: entered promiscuous mode [ 73.380728][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.387893][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.396018][ T5935] bridge_slave_0: entered allmulticast mode [ 73.402673][ T5935] bridge_slave_0: entered promiscuous mode [ 73.416687][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.423774][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.430988][ T5923] bridge_slave_0: entered allmulticast mode [ 73.437833][ T5923] bridge_slave_0: entered promiscuous mode [ 73.446134][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.453201][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.460655][ T5922] bridge_slave_0: entered allmulticast mode [ 73.467374][ T5922] bridge_slave_0: entered promiscuous mode [ 73.486601][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.493759][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.501016][ T5935] bridge_slave_1: entered allmulticast mode [ 73.507720][ T5935] bridge_slave_1: entered promiscuous mode [ 73.521734][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.529152][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.536798][ T5923] bridge_slave_1: entered allmulticast mode [ 73.543471][ T5923] bridge_slave_1: entered promiscuous mode [ 73.550141][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.557297][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.564500][ T5922] bridge_slave_1: entered allmulticast mode [ 73.571178][ T5922] bridge_slave_1: entered promiscuous mode [ 73.579133][ T5930] team0: Port device team_slave_0 added [ 73.586464][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.617228][ T5930] team0: Port device team_slave_1 added [ 73.624489][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.636913][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.679331][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.690491][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.701938][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.720215][ T5938] team0: Port device team_slave_0 added [ 73.733833][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.744883][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.754767][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.761714][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.788343][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.800148][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.807303][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.833263][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.846004][ T5938] team0: Port device team_slave_1 added [ 73.888903][ T5935] team0: Port device team_slave_0 added [ 73.909237][ T5922] team0: Port device team_slave_0 added [ 73.925671][ T5935] team0: Port device team_slave_1 added [ 73.932452][ T5923] team0: Port device team_slave_0 added [ 73.949641][ T5922] team0: Port device team_slave_1 added [ 73.963954][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.971078][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.997201][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.023768][ T5923] team0: Port device team_slave_1 added [ 74.041947][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.062799][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.070095][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.096912][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.114436][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.121417][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.147914][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.176479][ T5930] hsr_slave_0: entered promiscuous mode [ 74.182528][ T5930] hsr_slave_1: entered promiscuous mode [ 74.188768][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 74.194582][ T5930] Cannot create hsr debugfs directory [ 74.200519][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.207701][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.233735][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.245081][ T5932] Bluetooth: hci0: command tx timeout [ 74.246725][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.257591][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.283621][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.307108][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.321979][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.329031][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.329037][ T5932] Bluetooth: hci1: command tx timeout [ 74.355269][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.372393][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.379474][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.406339][ T5932] Bluetooth: hci2: command tx timeout [ 74.412611][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.423154][ T5932] Bluetooth: hci4: command tx timeout [ 74.423172][ T5927] Bluetooth: hci3: command tx timeout [ 74.443622][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.450917][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.477089][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.501721][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.554786][ T5922] hsr_slave_0: entered promiscuous mode [ 74.560964][ T5922] hsr_slave_1: entered promiscuous mode [ 74.567511][ T5922] debugfs: 'hsr0' already exists in 'hsr' [ 74.573264][ T5922] Cannot create hsr debugfs directory [ 74.583612][ T5938] hsr_slave_0: entered promiscuous mode [ 74.589981][ T5938] hsr_slave_1: entered promiscuous mode [ 74.596153][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 74.601892][ T5938] Cannot create hsr debugfs directory [ 74.640018][ T5935] hsr_slave_0: entered promiscuous mode [ 74.646845][ T5935] hsr_slave_1: entered promiscuous mode [ 74.652732][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 74.658621][ T5935] Cannot create hsr debugfs directory [ 74.700282][ T5923] hsr_slave_0: entered promiscuous mode [ 74.707318][ T5923] hsr_slave_1: entered promiscuous mode [ 74.713215][ T5923] debugfs: 'hsr0' already exists in 'hsr' [ 74.719200][ T5923] Cannot create hsr debugfs directory [ 75.052010][ T12] bridge_slave_1: left allmulticast mode [ 75.057962][ T12] bridge_slave_1: left promiscuous mode [ 75.064855][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.074754][ T12] bridge_slave_0: left allmulticast mode [ 75.080402][ T12] bridge_slave_0: left promiscuous mode [ 75.087585][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.259283][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.269706][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.279148][ T12] bond0 (unregistering): Released all slaves [ 75.348760][ T5930] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.363358][ T5930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.372572][ T5930] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.394767][ T5930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.403183][ T5930] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.418359][ T5930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.431087][ T5930] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.459424][ T5930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.500055][ T12] hsr_slave_0: left promiscuous mode [ 75.506118][ T12] hsr_slave_1: left promiscuous mode [ 75.512813][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.520485][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.528687][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.538545][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.552513][ T12] veth1_macvtap: left promiscuous mode [ 75.560300][ T12] veth0_macvtap: left promiscuous mode [ 75.566254][ T12] veth1_vlan: left promiscuous mode [ 75.571691][ T12] veth0_vlan: left promiscuous mode [ 75.817377][ T12] team0 (unregistering): Port device team_slave_1 removed [ 75.829412][ T12] team0 (unregistering): Port device team_slave_0 removed [ 75.906051][ T5477] 8021q: adding VLAN 0 to HW filter on device eth1 [ 75.964336][ T5938] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.987829][ T5938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.995933][ T5938] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.007699][ T5938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.022607][ T5938] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.043254][ T5938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.062089][ T5938] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.075104][ T5938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.219735][ T5922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.230500][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.252161][ T5922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.266236][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.300043][ T5922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.324184][ T5932] Bluetooth: hci0: command tx timeout [ 76.333021][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.378484][ T5922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.393565][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.404232][ T5932] Bluetooth: hci1: command tx timeout [ 76.414497][ T5477] 8021q: adding VLAN 0 to HW filter on device eth2 [ 76.441916][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.484105][ T5932] Bluetooth: hci4: command tx timeout [ 76.484203][ T5927] Bluetooth: hci2: command tx timeout [ 76.490242][ T5133] Bluetooth: hci3: command tx timeout [ 76.505524][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.529463][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.536563][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.580699][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.587814][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.599785][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.699619][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.737908][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.745069][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.758987][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.776651][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.783822][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.853888][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.883718][ T5923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.905152][ T5923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.928576][ T5923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.946698][ T5923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.970125][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.977291][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.021837][ T5923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.039271][ T5923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.070311][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.077482][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.100120][ T5923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.111676][ T5923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.229124][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.268779][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.280484][ T5935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.301169][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.313932][ T5935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.322339][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.333936][ T5935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.354302][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.372852][ T5935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.495609][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.594607][ T5930] veth0_vlan: entered promiscuous mode [ 77.652342][ T5930] veth1_vlan: entered promiscuous mode [ 77.665276][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.722180][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.738098][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.758487][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.765654][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.775160][ T5930] veth0_macvtap: entered promiscuous mode [ 77.801284][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.808471][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.818013][ T5930] veth1_macvtap: entered promiscuous mode [ 77.831199][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.850226][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.865057][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.872169][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.894858][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.901951][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.928813][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.952492][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.981928][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.990942][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.001965][ T5938] veth0_vlan: entered promiscuous mode [ 78.013394][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.022773][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.079592][ T5938] veth1_vlan: entered promiscuous mode [ 78.093306][ T5922] veth0_vlan: entered promiscuous mode [ 78.133713][ T5922] veth1_vlan: entered promiscuous mode [ 78.213532][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.250370][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.261207][ T5938] veth0_macvtap: entered promiscuous mode [ 78.271006][ T5938] veth1_macvtap: entered promiscuous mode [ 78.312212][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.334280][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.351415][ T5922] veth0_macvtap: entered promiscuous mode 2026/04/17 09:32:45 executed programs: 10 [ 78.369594][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.382492][ T5922] veth1_macvtap: entered promiscuous mode [ 78.397383][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.414156][ T5927] Bluetooth: hci0: command tx timeout [ 78.425993][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 78.426007][ T29] audit: type=1400 audit(1776418366.007:107): avc: denied { read write } for pid=6085 comm="syz.2.19" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.452891][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.455491][ T29] audit: type=1400 audit(1776418366.007:108): avc: denied { open } for pid=6085 comm="syz.2.19" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.467039][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.487154][ T5927] Bluetooth: hci1: command tx timeout [ 78.499925][ T29] audit: type=1400 audit(1776418366.007:109): avc: denied { ioctl } for pid=6085 comm="syz.2.19" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.527076][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.542503][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.551587][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.564489][ T5927] Bluetooth: hci4: command tx timeout [ 78.564876][ T5133] Bluetooth: hci2: command tx timeout [ 78.573710][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.576228][ T5932] Bluetooth: hci3: command tx timeout [ 78.602077][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.636977][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.664904][ T6048] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.673607][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.692965][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.702358][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.719080][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.734525][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.743344][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.748189][ T5935] veth0_vlan: entered promiscuous mode [ 78.774966][ T5923] veth0_vlan: entered promiscuous mode [ 78.792537][ T5935] veth1_vlan: entered promiscuous mode [ 78.819142][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.820333][ T5923] veth1_vlan: entered promiscuous mode [ 78.829300][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.866062][ T6048] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.891005][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.898565][ T6048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.901571][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.931214][ T6048] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.960014][ T6048] usb 3-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 78.970294][ T6048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.981277][ T6048] usb 3-1: Product: syz [ 78.985854][ T6048] usb 3-1: Manufacturer: syz [ 78.992070][ T5935] veth0_macvtap: entered promiscuous mode [ 78.992504][ T6048] usb 3-1: SerialNumber: syz [ 79.006057][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.014759][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.016359][ T6048] usb 3-1: config 0 descriptor?? [ 79.032739][ T5923] veth0_macvtap: entered promiscuous mode [ 79.042624][ T6048] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 79.043300][ T5935] veth1_macvtap: entered promiscuous mode [ 79.053924][ T6048] em28xx 3-1:0.0: Video interface 0 found: isoc [ 79.066840][ T5923] veth1_macvtap: entered promiscuous mode [ 79.114365][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.143805][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.155841][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.168988][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.178158][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.194123][ T5834] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.202566][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.215555][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.224878][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.244894][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.257978][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.267243][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.285846][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.296470][ T6048] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 79.344519][ T5910] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.373277][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 79.398869][ T6048] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 79.402187][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.416508][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.418155][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.435725][ T6048] em28xx 3-1:0.0: board has no eeprom [ 79.441867][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.457319][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.469912][ T5834] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 79.474935][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.480509][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.499210][ T5834] usb 5-1: Product: syz [ 79.504929][ T5834] usb 5-1: Manufacturer: syz [ 79.513584][ T5834] usb 5-1: SerialNumber: syz [ 79.518407][ T6048] em28xx 3-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 79.527416][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 79.540607][ T6048] em28xx 3-1:0.0: analog set to isoc mode. [ 79.553396][ T5834] usb 5-1: config 0 descriptor?? [ 79.559433][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.564289][ T6033] em28xx 3-1:0.0: Registering V4L2 extension [ 79.578544][ T5834] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 79.581883][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.598054][ T5834] em28xx 5-1:0.0: Video interface 0 found: isoc [ 79.612598][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.614960][ T6048] usb 3-1: USB disconnect, device number 2 [ 79.657883][ T6048] em28xx 3-1:0.0: Disconnecting em28xx [ 79.676510][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.683014][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.687804][ T6033] em28xx 3-1:0.0: Config register raw data: 0xffffffed [ 79.710383][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.737126][ T6033] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 79.744973][ T6033] em28xx 3-1:0.0: No AC97 audio processor [ 79.762467][ T6033] usb 3-1: Decoder not found [ 79.766298][ T5910] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 79.788249][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.811813][ T6033] em28xx 3-1:0.0: failed to create media graph [ 79.815363][ T5910] usb 1-1: Product: syz [ 79.831919][ T6033] em28xx 3-1:0.0: V4L2 device video103 deregistered [ 79.839562][ T5834] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 79.840433][ T5910] usb 1-1: Manufacturer: syz [ 79.852383][ T5910] usb 1-1: SerialNumber: syz [ 79.861851][ T5910] usb 1-1: config 0 descriptor?? [ 79.881146][ T5910] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 79.881573][ T6033] em28xx 3-1:0.0: Remote control support is not available for this card. [ 79.903780][ T6048] em28xx 3-1:0.0: Closing input extension [ 79.908079][ T5910] em28xx 1-1:0.0: Video interface 0 found: isoc [ 79.923481][ T6048] em28xx 3-1:0.0: Freeing device [ 79.933266][ T5834] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 79.957150][ T5834] em28xx 5-1:0.0: board has no eeprom [ 80.025505][ T5834] em28xx 5-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 80.042818][ T5834] em28xx 5-1:0.0: analog set to isoc mode. [ 80.049067][ T24] em28xx 5-1:0.0: Registering V4L2 extension [ 80.073608][ T5834] usb 5-1: USB disconnect, device number 2 [ 80.074192][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.089821][ T5834] em28xx 5-1:0.0: Disconnecting em28xx [ 80.103282][ T5143] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.116570][ T24] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 80.125623][ T24] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 80.133159][ T24] em28xx 5-1:0.0: No AC97 audio processor [ 80.141750][ T24] usb 5-1: Decoder not found [ 80.145470][ T5910] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 80.146639][ T24] em28xx 5-1:0.0: failed to create media graph [ 80.158769][ T24] em28xx 5-1:0.0: V4L2 device video103 deregistered [ 80.168497][ T24] em28xx 5-1:0.0: Remote control support is not available for this card. [ 80.177261][ T5834] em28xx 5-1:0.0: Closing input extension [ 80.187125][ T5834] em28xx 5-1:0.0: Freeing device [ 80.208833][ T5910] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 80.217685][ T5910] em28xx 1-1:0.0: board has no eeprom [ 80.249377][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.260522][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.272474][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.278108][ T6048] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.286831][ T5910] em28xx 1-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 80.316259][ T5910] em28xx 1-1:0.0: analog set to isoc mode. [ 80.320913][ T5143] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.322409][ T797] em28xx 1-1:0.0: Registering V4L2 extension [ 80.345746][ T10] usb 4-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 80.358589][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.360771][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.366842][ T10] usb 4-1: Product: syz [ 80.381874][ T5143] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.389625][ T5910] usb 1-1: USB disconnect, device number 2 [ 80.406305][ T5910] em28xx 1-1:0.0: Disconnecting em28xx [ 80.436563][ T10] usb 4-1: Manufacturer: syz [ 80.448178][ T10] usb 4-1: SerialNumber: syz [ 80.449328][ T5143] usb 2-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 80.465143][ T6048] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.476104][ T797] em28xx 1-1:0.0: Config register raw data: 0xffffffed [ 80.480940][ T6048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.485582][ T10] usb 4-1: config 0 descriptor?? [ 80.501684][ T5932] Bluetooth: hci0: command tx timeout [ 80.508631][ T797] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 80.511147][ T5143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.524996][ T797] em28xx 1-1:0.0: No AC97 audio processor [ 80.535610][ T6048] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.536778][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 80.548636][ T5143] usb 2-1: Product: syz [ 80.548652][ T5143] usb 2-1: Manufacturer: syz [ 80.548664][ T5143] usb 2-1: SerialNumber: syz [ 80.551082][ T5143] usb 2-1: config 0 descriptor?? [ 80.571076][ T10] em28xx 4-1:0.0: Video interface 0 found: isoc [ 80.573901][ T5932] Bluetooth: hci1: command tx timeout [ 80.577729][ T797] usb 1-1: Decoder not found [ 80.587289][ T6048] usb 3-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 80.589432][ T797] em28xx 1-1:0.0: failed to create media graph [ 80.593595][ T6048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.620708][ T5143] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 80.624510][ T5916] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.630035][ T5143] em28xx 2-1:0.0: Video interface 0 found: isoc [ 80.643706][ T6048] usb 3-1: Product: syz [ 80.648907][ T5932] Bluetooth: hci4: command tx timeout [ 80.654371][ T5932] Bluetooth: hci3: command tx timeout [ 80.660607][ T5133] Bluetooth: hci2: command tx timeout [ 80.666164][ T6048] usb 3-1: Manufacturer: syz [ 80.670915][ T6048] usb 3-1: SerialNumber: syz [ 80.680031][ T6048] usb 3-1: config 0 descriptor?? [ 80.690746][ T797] em28xx 1-1:0.0: V4L2 device video103 deregistered [ 80.692164][ T6048] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 80.707031][ T6048] em28xx 3-1:0.0: Video interface 0 found: isoc [ 80.720797][ T797] em28xx 1-1:0.0: Remote control support is not available for this card. [ 80.745520][ T5910] em28xx 1-1:0.0: Closing input extension [ 80.756513][ T5910] em28xx 1-1:0.0: Freeing device [ 80.805478][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 80.835617][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.849880][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.855241][ T5143] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 80.861157][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.883143][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 80.893495][ T10] em28xx 4-1:0.0: board has no eeprom [ 80.900011][ T5916] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 80.909469][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.917785][ T5916] usb 5-1: Product: syz [ 80.923126][ T5916] usb 5-1: Manufacturer: syz [ 80.928294][ T5916] usb 5-1: SerialNumber: syz [ 80.934415][ T6048] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 80.934883][ T5916] usb 5-1: config 0 descriptor?? [ 80.950271][ T5143] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 80.950491][ T5916] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 80.959861][ T5143] em28xx 2-1:0.0: board has no eeprom [ 80.968104][ T10] em28xx 4-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 80.989973][ T5916] em28xx 5-1:0.0: Video interface 0 found: isoc [ 80.996879][ T10] em28xx 4-1:0.0: analog set to isoc mode. [ 81.002783][ T6106] em28xx 4-1:0.0: Registering V4L2 extension [ 81.016431][ T10] usb 4-1: USB disconnect, device number 2 [ 81.022134][ T6048] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 81.026637][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 81.031455][ T5143] em28xx 2-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 81.062975][ T5910] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.086717][ T6048] em28xx 3-1:0.0: board has no eeprom [ 81.092548][ T6106] em28xx 4-1:0.0: Config register raw data: 0xffffffed [ 81.092595][ T5143] em28xx 2-1:0.0: analog set to isoc mode. [ 81.101401][ T6106] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 81.121889][ T6106] em28xx 4-1:0.0: No AC97 audio processor [ 81.131955][ T5143] usb 2-1: USB disconnect, device number 2 [ 81.143499][ T5143] em28xx 2-1:0.0: Disconnecting em28xx [ 81.148536][ T6106] usb 4-1: Decoder not found [ 81.153798][ T6106] em28xx 4-1:0.0: failed to create media graph [ 81.161400][ T6106] em28xx 4-1:0.0: V4L2 device video103 deregistered [ 81.169231][ T6106] em28xx 4-1:0.0: Remote control support is not available for this card. [ 81.175098][ T6048] em28xx 3-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 81.178706][ T10] em28xx 4-1:0.0: Closing input extension [ 81.201586][ T6017] em28xx 2-1:0.0: Registering V4L2 extension [ 81.209629][ T6048] em28xx 3-1:0.0: analog set to isoc mode. [ 81.214508][ T5916] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 81.236488][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.249931][ T46] cfg80211: failed to load regulatory.db [ 81.254527][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.262246][ T6017] em28xx 2-1:0.0: Config register raw data: 0xffffffed [ 81.284388][ T6048] usb 3-1: USB disconnect, device number 3 [ 81.294469][ T10] em28xx 4-1:0.0: Freeing device [ 81.305407][ T6017] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 81.314133][ T6048] em28xx 3-1:0.0: Disconnecting em28xx [ 81.333687][ T6017] em28xx 2-1:0.0: No AC97 audio processor [ 81.340744][ T5916] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 81.359585][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.385715][ T6017] usb 2-1: Decoder not found [ 81.396227][ T5916] em28xx 5-1:0.0: board has no eeprom [ 81.407241][ T6017] em28xx 2-1:0.0: failed to create media graph [ 81.442098][ T6017] em28xx 2-1:0.0: V4L2 device video103 deregistered [ 81.464397][ T5910] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 81.482722][ T6017] em28xx 2-1:0.0: Remote control support is not available for this card. [ 81.484676][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.515761][ T5916] em28xx 5-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 81.530888][ T5834] em28xx 3-1:0.0: Registering V4L2 extension [ 81.545987][ T5910] usb 1-1: Product: syz [ 81.556685][ T5910] usb 1-1: Manufacturer: syz [ 81.573684][ T5910] usb 1-1: SerialNumber: syz [ 81.582572][ T5916] em28xx 5-1:0.0: analog set to isoc mode. [ 81.610273][ T5910] usb 1-1: config 0 descriptor?? [ 81.634997][ T5916] usb 5-1: USB disconnect, device number 3 [ 81.652984][ T5910] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 81.667709][ T5916] em28xx 5-1:0.0: Disconnecting em28xx [ 81.668179][ T5834] em28xx 3-1:0.0: Config register raw data: 0xffffffed [ 81.693053][ T5910] em28xx 1-1:0.0: Video interface 0 found: isoc [ 81.716614][ T5834] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 81.744083][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.760291][ T5834] em28xx 3-1:0.0: No AC97 audio processor [ 81.789560][ T5834] usb 3-1: Decoder not found [ 81.796437][ T5834] em28xx 3-1:0.0: failed to create media graph [ 81.810727][ T5834] em28xx 3-1:0.0: V4L2 device video103 deregistered [ 81.821581][ T5834] em28xx 3-1:0.0: Remote control support is not available for this card. [ 81.837893][ T5143] em28xx 2-1:0.0: Closing input extension [ 81.858592][ T6106] em28xx 5-1:0.0: Registering V4L2 extension [ 81.865882][ T5143] em28xx 2-1:0.0: Freeing device [ 81.891572][ T6106] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 81.898763][ T6106] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 81.906103][ T6106] em28xx 5-1:0.0: No AC97 audio processor [ 81.912271][ T5910] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 81.919893][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.935504][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.948584][ T6106] usb 5-1: Decoder not found [ 81.953239][ T6106] em28xx 5-1:0.0: failed to create media graph [ 81.959528][ T6106] em28xx 5-1:0.0: V4L2 device video103 deregistered [ 81.966177][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.980372][ T6106] em28xx 5-1:0.0: Remote control support is not available for this card. [ 81.989010][ T5916] em28xx 5-1:0.0: Closing input extension [ 81.997797][ T5910] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 81.997962][ T6048] em28xx 3-1:0.0: Closing input extension [ 82.007007][ T5910] em28xx 1-1:0.0: board has no eeprom [ 82.017590][ T10] usb 4-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 82.032036][ T5916] em28xx 5-1:0.0: Freeing device [ 82.033892][ T6048] em28xx 3-1:0.0: Freeing device [ 82.037364][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.037383][ T10] usb 4-1: Product: syz [ 82.037396][ T10] usb 4-1: Manufacturer: syz [ 82.037408][ T10] usb 4-1: SerialNumber: syz [ 82.043896][ T10] usb 4-1: config 0 descriptor?? [ 82.083263][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 82.093879][ T10] em28xx 4-1:0.0: Video interface 0 found: isoc [ 82.100843][ T5910] em28xx 1-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 82.117296][ T5910] em28xx 1-1:0.0: analog set to isoc mode. [ 82.124184][ T6106] em28xx 1-1:0.0: Registering V4L2 extension [ 82.137421][ T5910] usb 1-1: USB disconnect, device number 3 [ 82.154410][ T5910] em28xx 1-1:0.0: Disconnecting em28xx [ 82.184156][ T5143] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.193481][ T6106] em28xx 1-1:0.0: Config register raw data: 0xffffffed [ 82.212798][ T6106] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 82.220119][ T6106] em28xx 1-1:0.0: No AC97 audio processor [ 82.227774][ T6106] usb 1-1: Decoder not found [ 82.232431][ T6106] em28xx 1-1:0.0: failed to create media graph [ 82.241374][ T6106] em28xx 1-1:0.0: V4L2 device video103 deregistered [ 82.251033][ T6106] em28xx 1-1:0.0: Remote control support is not available for this card. [ 82.251356][ T6124] ================================================================== [ 82.260953][ T5910] em28xx 1-1:0.0: Closing input extension [ 82.267545][ T6124] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 82.267569][ T6124] Read of size 4 at addr ffff88802a7ec858 by task v4l_id/6124 [ 82.267581][ T6124] [ 82.267589][ T6124] CPU: 1 UID: 0 PID: 6124 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 82.267607][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 82.267617][ T6124] Call Trace: [ 82.267623][ T6124] [ 82.267629][ T6124] dump_stack_lvl+0x100/0x190 [ 82.267649][ T6124] print_report+0x13d/0x4b0 [ 82.267670][ T6124] ? __virt_addr_valid+0x239/0x430 [ 82.267688][ T6124] ? v4l2_open+0x351/0x490 [ 82.267706][ T6124] kasan_report+0xdf/0x1d0 [ 82.267728][ T6124] ? v4l2_open+0x351/0x490 [ 82.267743][ T6124] v4l2_open+0x351/0x490 [ 82.267756][ T6124] ? __pfx_v4l2_open+0x10/0x10 [ 82.267769][ T6124] chrdev_open+0x234/0x6a0 [ 82.267783][ T6124] ? __pfx_chrdev_open+0x10/0x10 [ 82.267797][ T6124] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 82.267817][ T6124] do_dentry_open+0x6d8/0x1660 [ 82.267838][ T6124] ? __pfx_chrdev_open+0x10/0x10 [ 82.267853][ T6124] vfs_open+0x82/0x3f0 [ 82.267869][ T6124] path_openat+0x208c/0x31a0 [ 82.267886][ T6124] ? __pfx_path_openat+0x10/0x10 [ 82.267903][ T6124] do_file_open+0x20e/0x430 [ 82.267917][ T6124] ? __pfx_do_file_open+0x10/0x10 [ 82.267937][ T6124] ? alloc_fd+0x476/0x790 [ 82.267951][ T6124] ? do_getname+0x191/0x390 [ 82.267969][ T6124] do_sys_openat2+0x10d/0x1e0 [ 82.267985][ T6124] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.268004][ T6124] __x64_sys_openat+0x12d/0x210 [ 82.268021][ T6124] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.268040][ T6124] ? rcu_is_watching+0x12/0xc0 [ 82.268062][ T6124] do_syscall_64+0x10b/0xf80 [ 82.268077][ T6124] ? clear_bhb_loop+0x40/0x90 [ 82.268094][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.268109][ T6124] RIP: 0033:0x7fbad5ca7407 [ 82.268121][ T6124] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 82.268135][ T6124] RSP: 002b:00007ffde0193f80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 82.268150][ T6124] RAX: ffffffffffffffda RBX: 00007fbad6427880 RCX: 00007fbad5ca7407 [ 82.268159][ T6124] RDX: 0000000000000000 RSI: 00007ffde0195f1e RDI: ffffffffffffff9c [ 82.268169][ T6124] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 82.268177][ T6124] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 82.268186][ T6124] R13: 00007ffde01941d0 R14: 00007fbad658e000 R15: 00005599508da4d8 [ 82.268200][ T6124] [ 82.268205][ T6124] [ 82.280741][ T5910] em28xx 1-1:0.0: Freeing device [ 82.287950][ T6124] Allocated by task 6106: [ 82.287961][ T6124] kasan_save_stack+0x30/0x50 [ 82.287985][ T6124] kasan_save_track+0x14/0x30 [ 82.288004][ T6124] __kasan_kmalloc+0xaa/0xb0 [ 82.288022][ T6124] em28xx_v4l2_init.cold+0x94/0x3a40 [ 82.288039][ T6124] em28xx_init_extension+0x13a/0x200 [ 82.288056][ T6124] request_module_async+0x61/0x80 [ 82.288072][ T6124] process_one_work+0xa0e/0x1980 [ 82.288091][ T6124] worker_thread+0x5ef/0xe50 [ 82.288108][ T6124] kthread+0x370/0x450 [ 82.334405][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 82.338528][ T6124] ret_from_fork+0x72b/0xd50 [ 82.364097][ T5916] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.367546][ T6124] ret_from_fork_asm+0x1a/0x30 [ 82.398650][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 82.400167][ T6124] [ 82.400173][ T6124] Freed by task 6106: [ 82.405743][ T10] em28xx 4-1:0.0: board has no eeprom [ 82.408957][ T6124] kasan_save_stack+0x30/0x50 [ 82.474090][ T10] em28xx 4-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 82.481063][ T6124] kasan_save_track+0x14/0x30 [ 82.481089][ T6124] kasan_save_free_info+0x3b/0x70 [ 82.490835][ T10] em28xx 4-1:0.0: analog set to isoc mode. [ 82.496995][ T6124] __kasan_slab_free+0x5f/0x80 [ 82.497020][ T6124] kfree+0x223/0x6c0 [ 82.497036][ T6124] kref_put.isra.0+0x53/0x75 [ 82.497051][ T6124] em28xx_v4l2_init.cold+0x280/0x3a40 [ 82.497066][ T6124] em28xx_init_extension+0x13a/0x200 [ 82.505979][ T5910] em28xx 4-1:0.0: Registering V4L2 extension [ 82.512966][ T6124] request_module_async+0x61/0x80 [ 82.512990][ T6124] process_one_work+0xa0e/0x1980 [ 82.526280][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.531156][ T6124] worker_thread+0x5ef/0xe50 [ 82.531180][ T6124] kthread+0x370/0x450 [ 82.537486][ T10] usb 4-1: USB disconnect, device number 3 [ 82.540132][ T6124] ret_from_fork+0x72b/0xd50 [ 82.544911][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.549380][ T6124] ret_from_fork_asm+0x1a/0x30 [ 82.549404][ T6124] [ 82.556119][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 82.559914][ T6124] The buggy address belongs to the object at ffff88802a7ec000 [ 82.559914][ T6124] which belongs to the cache kmalloc-8k of size 8192 [ 82.559929][ T6124] The buggy address is located 2136 bytes inside of [ 82.559929][ T6124] freed 8192-byte region [ffff88802a7ec000, ffff88802a7ee000) [ 82.559945][ T6124] [ 82.559949][ T6124] The buggy address belongs to the physical page: [ 82.559957][ T6124] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a7e8 [ 82.559972][ T6124] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 82.559984][ T6124] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 82.559999][ T6124] page_type: f5(slab) [ 82.560013][ T6124] raw: 00fff00000000040 ffff88813fe89280 dead000000000100 dead000000000122 [ 82.560027][ T6124] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 82.560041][ T6124] head: 00fff00000000040 ffff88813fe89280 dead000000000100 dead000000000122 [ 82.560055][ T6124] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 82.560070][ T6124] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 82.560084][ T6124] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 82.560093][ T6124] page dumped because: kasan: bad access detected [ 82.560101][ T6124] page_owner tracks the page as allocated [ 82.560107][ T6124] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5853, tgid 5853 (syz-executor), ts 69572784932, free_ts 69563868225 [ 82.560136][ T6124] post_alloc_hook+0x153/0x170 [ 82.560157][ T6124] get_page_from_freelist+0x11a6/0x33b0 [ 82.560179][ T6124] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 82.560200][ T6124] new_slab+0xa6/0x6c0 [ 82.560217][ T6124] refill_objects+0x277/0x420 [ 82.560235][ T6124] __pcs_replace_empty_main+0x375/0x650 [ 82.560255][ T6124] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 82.560277][ T6124] kmemdup_noprof+0x29/0x60 [ 82.560300][ T6124] ipv4_sysctl_init_net+0x3e/0x360 [ 82.560324][ T6124] ops_init+0x1e2/0x5f0 [ 82.560341][ T6124] setup_net+0x118/0x3a0 [ 82.560358][ T6124] copy_net_ns+0x46f/0x7c0 [ 82.560377][ T6124] create_new_namespaces+0x3ea/0xac0 [ 82.560400][ T6124] unshare_nsproxy_namespaces+0xf2/0x220 [ 82.560424][ T6124] ksys_unshare+0x438/0xa90 [ 82.560448][ T6124] __x64_sys_unshare+0x31/0x40 [ 82.560471][ T6124] page last free pid 5860 tgid 5860 stack trace: [ 82.560485][ T6124] __free_frozen_pages+0x747/0x1040 [ 82.560502][ T6124] qlist_free_all+0x47/0xf0 [ 82.560522][ T6124] kasan_quarantine_reduce+0x1a0/0x1f0 [ 82.560542][ T6124] __kasan_slab_alloc+0x69/0x90 [ 82.560564][ T6124] __kvmalloc_node_noprof+0x316/0xa00 [ 82.560585][ T6124] proc_sys_call_handler+0x2c7/0x5a0 [ 82.560602][ T6124] vfs_write+0x6ac/0x1070 [ 82.560624][ T6124] ksys_write+0x12a/0x250 [ 82.560646][ T6124] do_syscall_64+0x10b/0xf80 [ 82.560661][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.560677][ T6124] [ 82.560681][ T6124] Memory state around the buggy address: [ 82.560689][ T6124] ffff88802a7ec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.560700][ T6124] ffff88802a7ec780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.560712][ T6124] >ffff88802a7ec800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.560721][ T6124] ^ [ 82.560729][ T6124] ffff88802a7ec880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.560739][ T6124] ffff88802a7ec900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.560747][ T6124] ================================================================== [ 82.655410][ T6124] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.655426][ T6124] CPU: 1 UID: 0 PID: 6124 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 82.655445][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 82.655453][ T6124] Call Trace: [ 82.655459][ T6124] [ 82.655464][ T6124] dump_stack_lvl+0x100/0x190 [ 82.655490][ T6124] vpanic+0x552/0x970 [ 82.655504][ T6124] ? __pfx_vpanic+0x10/0x10 [ 82.655518][ T6124] ? rcu_is_watching+0x12/0xc0 [ 82.655541][ T6124] ? v4l2_open+0x351/0x490 [ 82.655557][ T6124] panic+0xd1/0xe0 [ 82.655570][ T6124] ? __pfx_panic+0x10/0x10 [ 82.655584][ T6124] ? v4l2_open+0x351/0x490 [ 82.655597][ T6124] ? preempt_schedule_common+0x42/0xc0 [ 82.655621][ T6124] ? check_panic_on_warn+0x1f/0x90 [ 82.655637][ T6124] check_panic_on_warn.cold+0x19/0x34 [ 82.655653][ T6124] end_report.part.0+0x3a/0x90 [ 82.655675][ T6124] kasan_report.cold+0xe/0x18 [ 82.655695][ T6124] ? v4l2_open+0x351/0x490 [ 82.655711][ T6124] v4l2_open+0x351/0x490 [ 82.655724][ T6124] ? __pfx_v4l2_open+0x10/0x10 [ 82.655737][ T6124] chrdev_open+0x234/0x6a0 [ 82.655752][ T6124] ? __pfx_chrdev_open+0x10/0x10 [ 82.655767][ T6124] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 82.655787][ T6124] do_dentry_open+0x6d8/0x1660 [ 82.655808][ T6124] ? __pfx_chrdev_open+0x10/0x10 [ 82.655824][ T6124] vfs_open+0x82/0x3f0 [ 82.655841][ T6124] path_openat+0x208c/0x31a0 [ 82.655858][ T6124] ? __pfx_path_openat+0x10/0x10 [ 82.655875][ T6124] do_file_open+0x20e/0x430 [ 82.655890][ T6124] ? __pfx_do_file_open+0x10/0x10 [ 82.655910][ T6124] ? alloc_fd+0x476/0x790 [ 82.655925][ T6124] ? do_getname+0x191/0x390 [ 82.655943][ T6124] do_sys_openat2+0x10d/0x1e0 [ 82.655960][ T6124] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.655980][ T6124] __x64_sys_openat+0x12d/0x210 [ 82.655997][ T6124] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.656016][ T6124] ? rcu_is_watching+0x12/0xc0 [ 82.656036][ T6124] do_syscall_64+0x10b/0xf80 [ 82.656050][ T6124] ? clear_bhb_loop+0x40/0x90 [ 82.656067][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.656082][ T6124] RIP: 0033:0x7fbad5ca7407 [ 82.656094][ T6124] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 82.656108][ T6124] RSP: 002b:00007ffde0193f80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 82.656124][ T6124] RAX: ffffffffffffffda RBX: 00007fbad6427880 RCX: 00007fbad5ca7407 [ 82.656133][ T6124] RDX: 0000000000000000 RSI: 00007ffde0195f1e RDI: ffffffffffffff9c [ 82.656143][ T6124] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 82.656151][ T6124] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 82.656160][ T6124] R13: 00007ffde01941d0 R14: 00007fbad658e000 R15: 00005599508da4d8 [ 82.656174][ T6124] [ 82.660364][ T6124] Kernel Offset: disabled