Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. 2025/09/30 12:20:39 parsed 1 programs [ 73.621611][ T5845] cgroup: Unknown subsys name 'net' [ 73.787826][ T5845] cgroup: Unknown subsys name 'cpuset' [ 73.797089][ T5845] cgroup: Unknown subsys name 'rlimit' [ 75.229112][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.252136][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.352305][ T5905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.364594][ T5905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.376799][ T5905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.387407][ T5905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.395025][ T5905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.414664][ T5903] chnl_net:caif_netlink_parms(): no params data found [ 81.007156][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.024543][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.031776][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.045826][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.057776][ T5903] bridge_slave_0: entered allmulticast mode [ 81.067954][ T5903] bridge_slave_0: entered promiscuous mode [ 81.091751][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.106429][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.126627][ T5903] bridge_slave_1: entered allmulticast mode [ 81.146879][ T5903] bridge_slave_1: entered promiscuous mode [ 81.238365][ T5903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.272425][ T5903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.347324][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.358527][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.377240][ T5903] team0: Port device team_slave_0 added [ 81.389927][ T5903] team0: Port device team_slave_1 added [ 81.456496][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.463436][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.490394][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.503773][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.511053][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.537208][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.580879][ T5903] hsr_slave_0: entered promiscuous mode [ 81.587285][ T5903] hsr_slave_1: entered promiscuous mode [ 81.799680][ T5903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.813477][ T5903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.825509][ T5903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.838510][ T5903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.938178][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.958614][ T5903] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.972320][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.979743][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.995240][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.002354][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.156065][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.193929][ T5903] veth0_vlan: entered promiscuous mode [ 82.206906][ T5903] veth1_vlan: entered promiscuous mode [ 82.232763][ T5903] veth0_macvtap: entered promiscuous mode [ 82.242214][ T5903] veth1_macvtap: entered promiscuous mode [ 82.259196][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.273452][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.289413][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.298990][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.309331][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.318876][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/30 12:20:50 executed programs: 0 [ 82.461373][ T5162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.472769][ T5162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.485760][ T5162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.506099][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.515028][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.522664][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.543264][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.552028][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.566661][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.577232][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.609060][ T5162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.617853][ T5162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.623615][ T5966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.630483][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.636465][ T5966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.655183][ T5966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.663156][ T5966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.677937][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.688816][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.703383][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.726845][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.769927][ T5905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.777977][ T5905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.786337][ T5905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.796098][ T5905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.803888][ T5905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.907549][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.045110][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.130202][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.537248][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 83.609556][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 83.624353][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 83.851569][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.866044][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.873304][ T5967] bridge_slave_0: entered allmulticast mode [ 83.881553][ T5967] bridge_slave_0: entered promiscuous mode [ 83.890012][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.897504][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.905205][ T5967] bridge_slave_1: entered allmulticast mode [ 83.912170][ T5967] bridge_slave_1: entered promiscuous mode [ 83.953215][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.960763][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.968267][ T5959] bridge_slave_0: entered allmulticast mode [ 83.976253][ T5959] bridge_slave_0: entered promiscuous mode [ 84.016112][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 84.041227][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.049204][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.057518][ T5959] bridge_slave_1: entered allmulticast mode [ 84.064822][ T5959] bridge_slave_1: entered promiscuous mode [ 84.083491][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 84.119760][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.127541][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.136083][ T5960] bridge_slave_0: entered allmulticast mode [ 84.143646][ T5960] bridge_slave_0: entered promiscuous mode [ 84.176685][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.220536][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.228245][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.235899][ T5960] bridge_slave_1: entered allmulticast mode [ 84.242801][ T5960] bridge_slave_1: entered promiscuous mode [ 84.273988][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.340123][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.352567][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.376911][ T5967] team0: Port device team_slave_0 added [ 84.386405][ T5967] team0: Port device team_slave_1 added [ 84.405075][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.490381][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.500602][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.507983][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.518634][ T5972] bridge_slave_0: entered allmulticast mode [ 84.527241][ T5972] bridge_slave_0: entered promiscuous mode [ 84.536159][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.543278][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.550578][ T5972] bridge_slave_1: entered allmulticast mode [ 84.558446][ T5972] bridge_slave_1: entered promiscuous mode [ 84.575140][ T5905] Bluetooth: hci0: command tx timeout [ 84.584993][ T5959] team0: Port device team_slave_0 added [ 84.603482][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.610888][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.618490][ T5970] bridge_slave_0: entered allmulticast mode [ 84.626915][ T5970] bridge_slave_0: entered promiscuous mode [ 84.634924][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.642040][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.649662][ T5970] bridge_slave_1: entered allmulticast mode [ 84.656007][ T5905] Bluetooth: hci1: command tx timeout [ 84.662799][ T5970] bridge_slave_1: entered promiscuous mode [ 84.700669][ T5960] team0: Port device team_slave_0 added [ 84.722906][ T5959] team0: Port device team_slave_1 added [ 84.730256][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.734910][ T5905] Bluetooth: hci2: command tx timeout [ 84.741886][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.770991][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.810744][ T5960] team0: Port device team_slave_1 added [ 84.816840][ T5905] Bluetooth: hci3: command tx timeout [ 84.834072][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.856365][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.863365][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.889870][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.903532][ T5905] Bluetooth: hci4: command tx timeout [ 84.949154][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.962453][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.999652][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.076593][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.083561][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.110563][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.134833][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.141786][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.168050][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.201126][ T5970] team0: Port device team_slave_0 added [ 85.211210][ T5970] team0: Port device team_slave_1 added [ 85.218200][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.226135][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.252502][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.274925][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.281885][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.308421][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.325827][ T5967] hsr_slave_0: entered promiscuous mode [ 85.332069][ T5967] hsr_slave_1: entered promiscuous mode [ 85.338382][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 85.344989][ T5967] Cannot create hsr debugfs directory [ 85.371031][ T5972] team0: Port device team_slave_0 added [ 85.391426][ T67] bridge_slave_1: left allmulticast mode [ 85.398595][ T67] bridge_slave_1: left promiscuous mode [ 85.409255][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.421713][ T67] bridge_slave_0: left allmulticast mode [ 85.430151][ T67] bridge_slave_0: left promiscuous mode [ 85.436760][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.787328][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.801523][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.812301][ T67] bond0 (unregistering): Released all slaves [ 85.860157][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.890820][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.918269][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.940545][ T5972] team0: Port device team_slave_1 added [ 86.001151][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.008491][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.034824][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.080087][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.087210][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.113990][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.172379][ T67] hsr_slave_0: left promiscuous mode [ 86.178622][ T67] hsr_slave_1: left promiscuous mode [ 86.185682][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.193077][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.201939][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.209556][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.225300][ T67] veth1_macvtap: left promiscuous mode [ 86.230939][ T67] veth0_macvtap: left promiscuous mode [ 86.236647][ T67] veth1_vlan: left promiscuous mode [ 86.242137][ T67] veth0_vlan: left promiscuous mode [ 86.507410][ T67] team0 (unregistering): Port device team_slave_1 removed [ 86.532695][ T67] team0 (unregistering): Port device team_slave_0 removed [ 86.664196][ T5905] Bluetooth: hci0: command tx timeout [ 86.735983][ T982] cfg80211: failed to load regulatory.db [ 86.744834][ T5905] Bluetooth: hci1: command tx timeout [ 86.810199][ T5959] hsr_slave_0: entered promiscuous mode [ 86.815866][ T5905] Bluetooth: hci2: command tx timeout [ 86.826306][ T5959] hsr_slave_1: entered promiscuous mode [ 86.833222][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.840419][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.866546][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.882864][ T5960] hsr_slave_0: entered promiscuous mode [ 86.889214][ T5960] hsr_slave_1: entered promiscuous mode [ 86.894694][ T5905] Bluetooth: hci3: command tx timeout [ 86.896593][ T5960] debugfs: 'hsr0' already exists in 'hsr' [ 86.905862][ T5960] Cannot create hsr debugfs directory [ 86.936651][ T5970] hsr_slave_0: entered promiscuous mode [ 86.942855][ T5970] hsr_slave_1: entered promiscuous mode [ 86.949300][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 86.955207][ T5970] Cannot create hsr debugfs directory [ 86.975021][ T5905] Bluetooth: hci4: command tx timeout [ 87.163541][ T5972] hsr_slave_0: entered promiscuous mode [ 87.170902][ T5972] hsr_slave_1: entered promiscuous mode [ 87.177514][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 87.183249][ T5972] Cannot create hsr debugfs directory [ 87.661926][ T5967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.678340][ T5967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.700252][ T5967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.723836][ T5967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.068670][ T5960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.092251][ T5960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.115888][ T5960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.133039][ T5960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.299127][ T5970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.320092][ T5970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.339727][ T5970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.375219][ T5970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.473095][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.623387][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.743029][ T5905] Bluetooth: hci0: command tx timeout [ 88.749881][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.757068][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.817036][ T5905] Bluetooth: hci1: command tx timeout [ 88.853657][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.860847][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.895430][ T5905] Bluetooth: hci2: command tx timeout [ 88.921738][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.975548][ T5905] Bluetooth: hci3: command tx timeout [ 89.054295][ T5905] Bluetooth: hci4: command tx timeout [ 89.101041][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.115708][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.150582][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.169337][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.176532][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.217821][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.258183][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.275319][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.343719][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.350942][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.423833][ T5972] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.469237][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.481786][ T5972] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.511644][ T5972] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.538579][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.545767][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.581609][ T5972] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.621596][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.640455][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.647645][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.867252][ T5967] veth0_vlan: entered promiscuous mode [ 89.893899][ T5970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.972087][ T5967] veth1_vlan: entered promiscuous mode [ 90.048331][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.140614][ T5967] veth0_macvtap: entered promiscuous mode [ 90.162186][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.187291][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.207843][ T5967] veth1_macvtap: entered promiscuous mode [ 90.238615][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.245809][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.276256][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.283408][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.331800][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.378307][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.392869][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.408564][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.441600][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.448798][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.489579][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.496772][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.555659][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.564822][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.573637][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.613491][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.733787][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.759974][ T5960] veth0_vlan: entered promiscuous mode [ 90.802268][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.816033][ T5905] Bluetooth: hci0: command tx timeout [ 90.824163][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.894392][ T5905] Bluetooth: hci1: command tx timeout [ 90.916154][ T5960] veth1_vlan: entered promiscuous mode [ 90.979504][ T5905] Bluetooth: hci2: command tx timeout [ 90.990130][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.050279][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.064400][ T5905] Bluetooth: hci3: command tx timeout [ 91.135027][ T5905] Bluetooth: hci4: command tx timeout [ 91.153325][ T5970] veth0_vlan: entered promiscuous mode 2025/09/30 12:20:59 executed programs: 10 [ 91.221008][ T5960] veth0_macvtap: entered promiscuous mode [ 91.276861][ T5960] veth1_macvtap: entered promiscuous mode [ 91.327520][ T5970] veth1_vlan: entered promiscuous mode [ 91.388086][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.408628][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.503750][ T5970] veth0_macvtap: entered promiscuous mode [ 91.512471][ T6062] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.541454][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.577876][ T5970] veth1_macvtap: entered promiscuous mode [ 91.589666][ T1141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.632227][ T1141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.645898][ T1141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.663435][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.684930][ T6062] usb 3-1: Using ep0 maxpacket: 32 [ 91.693907][ T1141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.707048][ T6062] usb 3-1: config index 0 descriptor too short (expected 55, got 27) [ 91.716038][ T6062] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 91.726364][ T5959] veth0_vlan: entered promiscuous mode [ 91.737821][ T6062] usb 3-1: config 0 has no interface number 0 [ 91.743957][ T6062] usb 3-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 91.761433][ T5959] veth1_vlan: entered promiscuous mode [ 91.773639][ T6062] usb 3-1: config 0 interface 106 has no altsetting 0 [ 91.791784][ T6062] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 91.810530][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.814152][ T6062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.833617][ T6062] usb 3-1: Product: syz [ 91.856348][ T6062] usb 3-1: Manufacturer: syz [ 91.860986][ T6062] usb 3-1: SerialNumber: syz [ 91.866282][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.889104][ T6062] usb 3-1: config 0 descriptor?? [ 91.914522][ T6130] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.920957][ T5959] veth0_macvtap: entered promiscuous mode [ 91.973417][ T2974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.020189][ T5959] veth1_macvtap: entered promiscuous mode [ 92.030610][ T2974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.062922][ T2974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.078271][ T2974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.136729][ T469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.156121][ T469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.160994][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.185827][ T6062] em28xx 3-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 92.219119][ T6062] em28xx 3-1:0.106: Video interface 106 found: bulk [ 92.243465][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.290199][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.312669][ T6062] em28xx 3-1:0.106: unknown em28xx chip ID (0) [ 92.321627][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.335115][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.372234][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.398704][ T6062] em28xx 3-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 92.409570][ T2939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.410991][ T6062] em28xx 3-1:0.106: board has no eeprom [ 92.445058][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.453200][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.461002][ T2939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.486648][ T6062] em28xx 3-1:0.106: Identified as Terratec Grabby (card=67) [ 92.496209][ T6062] em28xx 3-1:0.106: analog set to bulk mode. [ 92.504422][ T5935] em28xx 3-1:0.106: Registering V4L2 extension [ 92.542175][ T6062] usb 3-1: USB disconnect, device number 2 [ 92.572052][ T6062] em28xx 3-1:0.106: Disconnecting em28xx [ 92.596332][ T469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.605595][ T469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.612739][ T5972] veth0_vlan: entered promiscuous mode [ 92.639049][ T5935] em28xx 3-1:0.106: Config register raw data: 0xffffffed [ 92.648050][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.658562][ T5935] em28xx 3-1:0.106: AC97 chip type couldn't be determined [ 92.670961][ T5935] em28xx 3-1:0.106: No AC97 audio processor [ 92.679273][ T469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.699183][ T5972] veth1_vlan: entered promiscuous mode [ 92.721334][ T469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.737159][ T5935] usb 3-1: Decoder not found [ 92.762799][ T5935] em28xx 3-1:0.106: failed to create media graph [ 92.774570][ T5935] em28xx 3-1:0.106: V4L2 device video103 deregistered [ 92.798145][ T5935] em28xx 3-1:0.106: Registering snapshot button... [ 92.824726][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 92.842465][ T5935] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.106/input/input5 [ 92.852071][ T5972] veth0_macvtap: entered promiscuous mode [ 92.863943][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.867957][ T10] usb 2-1: config index 0 descriptor too short (expected 55, got 27) [ 92.883501][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.887406][ T10] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 92.900685][ T5935] em28xx 3-1:0.106: Remote control support is not available for this card. [ 92.906511][ T5972] veth1_macvtap: entered promiscuous mode [ 92.915851][ T6062] em28xx 3-1:0.106: Closing input extension [ 92.923133][ T6062] em28xx 3-1:0.106: Deregistering snapshot button [ 92.930019][ T10] usb 2-1: config 0 has no interface number 0 [ 92.937806][ T10] usb 2-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 92.949981][ T10] usb 2-1: config 0 interface 106 has no altsetting 0 [ 92.967327][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 92.984468][ T6105] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.985413][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.000902][ T10] usb 2-1: Product: syz [ 93.005906][ T10] usb 2-1: Manufacturer: syz [ 93.015170][ T6062] em28xx 3-1:0.106: Freeing device [ 93.016736][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.021894][ T10] usb 2-1: SerialNumber: syz [ 93.069320][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.080570][ T10] usb 2-1: config 0 descriptor?? [ 93.107927][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.118723][ T6150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.136091][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.154408][ T6105] usb 4-1: Using ep0 maxpacket: 32 [ 93.167962][ T6105] usb 4-1: config index 0 descriptor too short (expected 55, got 27) [ 93.186800][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.197610][ T6105] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 93.207829][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.224432][ T6105] usb 4-1: config 0 has no interface number 0 [ 93.233203][ T6105] usb 4-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 93.253487][ T6105] usb 4-1: config 0 interface 106 has no altsetting 0 [ 93.269165][ T6105] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 93.283415][ T6105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.293083][ T6105] usb 4-1: Product: syz [ 93.299222][ T6105] usb 4-1: Manufacturer: syz [ 93.304008][ T6105] usb 4-1: SerialNumber: syz [ 93.309447][ T6115] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.325662][ T6105] usb 4-1: config 0 descriptor?? [ 93.341571][ T6153] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.365470][ T6062] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.373634][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.382075][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.385522][ T10] em28xx 2-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 93.422567][ T10] em28xx 2-1:0.106: Video interface 106 found: bulk [ 93.448733][ T469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.457617][ T469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.464418][ T6115] usb 1-1: Using ep0 maxpacket: 32 [ 93.473594][ T6115] usb 1-1: config index 0 descriptor too short (expected 55, got 27) [ 93.482799][ T6115] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 93.491898][ T6115] usb 1-1: config 0 has no interface number 0 [ 93.496588][ T10] em28xx 2-1:0.106: unknown em28xx chip ID (0) [ 93.501640][ T6115] usb 1-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 93.556987][ T6115] usb 1-1: config 0 interface 106 has no altsetting 0 [ 93.564254][ T6062] usb 3-1: Using ep0 maxpacket: 32 [ 93.570431][ T6115] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 93.573217][ T6062] usb 3-1: config index 0 descriptor too short (expected 55, got 27) [ 93.582121][ T6105] em28xx 4-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 93.598715][ T6062] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 93.598866][ T6115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.607560][ T10] em28xx 2-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 93.616542][ T6105] em28xx 4-1:0.106: Video interface 106 found: bulk [ 93.632182][ T6115] usb 1-1: Product: syz [ 93.638713][ T6062] usb 3-1: config 0 has no interface number 0 [ 93.638794][ T6115] usb 1-1: Manufacturer: syz [ 93.649926][ T10] em28xx 2-1:0.106: board has no eeprom [ 93.650940][ T6115] usb 1-1: SerialNumber: syz [ 93.658041][ T6062] usb 3-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 93.664727][ T6115] usb 1-1: config 0 descriptor?? [ 93.676418][ T6156] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 93.683777][ T6062] usb 3-1: config 0 interface 106 has no altsetting 0 [ 93.693370][ T6062] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 93.703856][ T6062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.713057][ T6062] usb 3-1: Product: syz [ 93.714736][ T6105] em28xx 4-1:0.106: unknown em28xx chip ID (0) [ 93.718776][ T6062] usb 3-1: Manufacturer: syz [ 93.729298][ T6062] usb 3-1: SerialNumber: syz [ 93.734296][ T10] em28xx 2-1:0.106: Identified as Terratec Grabby (card=67) [ 93.742450][ T10] em28xx 2-1:0.106: analog set to bulk mode. [ 93.750252][ T5935] em28xx 2-1:0.106: Registering V4L2 extension [ 93.757796][ T6062] usb 3-1: config 0 descriptor?? [ 93.775574][ T6154] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 93.787373][ T6148] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.788660][ T6105] em28xx 4-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 93.799583][ T10] usb 2-1: USB disconnect, device number 2 [ 93.820162][ T6105] em28xx 4-1:0.106: board has no eeprom [ 93.837071][ T10] em28xx 2-1:0.106: Disconnecting em28xx [ 93.869921][ T5935] em28xx 2-1:0.106: Config register raw data: 0xffffffed [ 93.886002][ T5935] em28xx 2-1:0.106: AC97 chip type couldn't be determined [ 93.893811][ T5935] em28xx 2-1:0.106: No AC97 audio processor [ 93.896909][ T6105] em28xx 4-1:0.106: Identified as Terratec Grabby (card=67) [ 93.914042][ T6115] em28xx 1-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 93.927163][ T6105] em28xx 4-1:0.106: analog set to bulk mode. [ 93.933991][ T6115] em28xx 1-1:0.106: Video interface 106 found: bulk [ 93.949488][ T5935] usb 2-1: Decoder not found [ 93.949844][ T6105] usb 4-1: USB disconnect, device number 2 [ 93.963124][ T6105] em28xx 4-1:0.106: Disconnecting em28xx [ 93.970296][ T5935] em28xx 2-1:0.106: failed to create media graph [ 93.982896][ T5935] em28xx 2-1:0.106: V4L2 device video103 deregistered [ 93.999928][ T5935] em28xx 2-1:0.106: Registering snapshot button... [ 94.007070][ T6148] usb 5-1: Using ep0 maxpacket: 32 [ 94.014214][ T6148] usb 5-1: config index 0 descriptor too short (expected 55, got 27) [ 94.015813][ T6115] em28xx 1-1:0.106: unknown em28xx chip ID (0) [ 94.022312][ T6148] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 94.022330][ T6148] usb 5-1: config 0 has no interface number 0 [ 94.022368][ T6148] usb 5-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 94.058053][ T6148] usb 5-1: config 0 interface 106 has no altsetting 0 [ 94.060713][ T5935] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.106/input/input6 [ 94.085517][ T6062] em28xx 3-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 94.098507][ T6062] em28xx 3-1:0.106: Video interface 106 found: bulk [ 94.110063][ T5935] em28xx 2-1:0.106: Remote control support is not available for this card. [ 94.115265][ T6115] em28xx 1-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 94.119982][ T10] em28xx 2-1:0.106: Closing input extension [ 94.133449][ T6148] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 94.143021][ T6148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.153162][ T10] em28xx 2-1:0.106: Deregistering snapshot button [ 94.166770][ T6148] usb 5-1: Product: syz [ 94.170418][ T6115] em28xx 1-1:0.106: board has no eeprom [ 94.174483][ T6062] em28xx 3-1:0.106: unknown em28xx chip ID (0) [ 94.193815][ T43] em28xx 4-1:0.106: Registering V4L2 extension [ 94.199747][ T6148] usb 5-1: Manufacturer: syz [ 94.209247][ T10] em28xx 2-1:0.106: Freeing device [ 94.216868][ T6148] usb 5-1: SerialNumber: syz [ 94.238642][ T6115] em28xx 1-1:0.106: Identified as Terratec Grabby (card=67) [ 94.244637][ T6148] usb 5-1: config 0 descriptor?? [ 94.274000][ T6115] em28xx 1-1:0.106: analog set to bulk mode. [ 94.287718][ T6159] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.295793][ T6062] em28xx 3-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 94.309679][ T6062] em28xx 3-1:0.106: board has no eeprom [ 94.320141][ T6115] usb 1-1: USB disconnect, device number 2 [ 94.349070][ T43] em28xx 4-1:0.106: Config register raw data: 0xffffffed [ 94.369863][ T6115] em28xx 1-1:0.106: Disconnecting em28xx [ 94.388144][ T43] em28xx 4-1:0.106: AC97 chip type couldn't be determined [ 94.404132][ T6062] em28xx 3-1:0.106: Identified as Terratec Grabby (card=67) [ 94.411498][ T6062] em28xx 3-1:0.106: analog set to bulk mode. [ 94.430491][ T43] em28xx 4-1:0.106: No AC97 audio processor [ 94.440871][ T43] usb 4-1: Decoder not found [ 94.448379][ T43] em28xx 4-1:0.106: failed to create media graph [ 94.456928][ T6062] usb 3-1: USB disconnect, device number 3 [ 94.462415][ T43] em28xx 4-1:0.106: V4L2 device video103 deregistered [ 94.497087][ T6062] em28xx 3-1:0.106: Disconnecting em28xx [ 94.511670][ T43] em28xx 4-1:0.106: Registering snapshot button... [ 94.522604][ T6148] em28xx 5-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 94.540150][ T43] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.106/input/input7 [ 94.540317][ T6148] em28xx 5-1:0.106: Video interface 106 found: bulk [ 94.560355][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.598528][ T43] em28xx 4-1:0.106: Remote control support is not available for this card. [ 94.610187][ T6164] em28xx 1-1:0.106: Registering V4L2 extension [ 94.637468][ T6148] em28xx 5-1:0.106: unknown em28xx chip ID (0) [ 94.651051][ T6164] em28xx 1-1:0.106: Config register raw data: 0xffffffed [ 94.661561][ T6164] em28xx 1-1:0.106: AC97 chip type couldn't be determined [ 94.669351][ T6164] em28xx 1-1:0.106: No AC97 audio processor [ 94.678947][ T6164] usb 1-1: Decoder not found [ 94.683582][ T6164] em28xx 1-1:0.106: failed to create media graph [ 94.691041][ T6164] em28xx 1-1:0.106: V4L2 device video103 deregistered [ 94.699249][ T6164] em28xx 1-1:0.106: Registering snapshot button... [ 94.707242][ T6164] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.106/input/input8 [ 94.719128][ T6148] em28xx 5-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 94.720213][ T6164] em28xx 1-1:0.106: Remote control support is not available for this card. [ 94.728814][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 94.738440][ T6115] em28xx 1-1:0.106: Closing input extension [ 94.750262][ T6148] em28xx 5-1:0.106: board has no eeprom [ 94.750879][ T6115] em28xx 1-1:0.106: Deregistering snapshot button [ 94.762732][ T10] usb 2-1: config index 0 descriptor too short (expected 55, got 27) [ 94.762754][ T10] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 94.762772][ T10] usb 2-1: config 0 has no interface number 0 [ 94.762806][ T10] usb 2-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 94.762827][ T10] usb 2-1: config 0 interface 106 has no altsetting 0 [ 94.765700][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 94.813803][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.822425][ T10] usb 2-1: Product: syz [ 94.827260][ T6145] em28xx 3-1:0.106: Registering V4L2 extension [ 94.829326][ T6115] em28xx 1-1:0.106: Freeing device [ 94.838854][ T10] usb 2-1: Manufacturer: syz [ 94.838870][ T10] usb 2-1: SerialNumber: syz [ 94.845338][ T10] usb 2-1: config 0 descriptor?? [ 94.856207][ T6161] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 94.874554][ T6148] em28xx 5-1:0.106: Identified as Terratec Grabby (card=67) [ 94.881928][ T6148] em28xx 5-1:0.106: analog set to bulk mode. [ 94.911848][ T6145] em28xx 3-1:0.106: Config register raw data: 0xffffffed [ 94.921466][ T6145] em28xx 3-1:0.106: AC97 chip type couldn't be determined [ 94.932015][ T6148] usb 5-1: USB disconnect, device number 2 [ 94.939377][ T6148] em28xx 5-1:0.106: Disconnecting em28xx [ 94.951271][ T6145] em28xx 3-1:0.106: No AC97 audio processor [ 94.959097][ T6145] usb 3-1: Decoder not found [ 94.963731][ T6145] em28xx 3-1:0.106: failed to create media graph [ 94.970963][ T6145] em28xx 3-1:0.106: V4L2 device video103 deregistered [ 94.981286][ T6145] em28xx 3-1:0.106: Registering snapshot button... [ 94.989539][ T6145] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.106/input/input9 [ 95.002839][ T6145] em28xx 3-1:0.106: Remote control support is not available for this card. [ 95.011645][ T6062] em28xx 3-1:0.106: Closing input extension [ 95.017766][ T6062] em28xx 3-1:0.106: Deregistering snapshot button [ 95.048004][ T6105] em28xx 4-1:0.106: Closing input extension [ 95.060064][ T6105] em28xx 4-1:0.106: Deregistering snapshot button [ 95.085781][ T5935] em28xx 5-1:0.106: Registering V4L2 extension [ 95.088752][ T6105] em28xx 4-1:0.106: Freeing device [ 95.095308][ T6062] em28xx 3-1:0.106: Freeing device [ 95.105601][ T10] em28xx 2-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 95.123788][ T10] em28xx 2-1:0.106: Video interface 106 found: bulk [ 95.182829][ T5935] em28xx 5-1:0.106: Config register raw data: 0xffffffed [ 95.184495][ T6115] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.197659][ T5935] em28xx 5-1:0.106: AC97 chip type couldn't be determined [ 95.197678][ T5935] em28xx 5-1:0.106: No AC97 audio processor [ 95.207689][ T5935] usb 5-1: Decoder not found [ 95.229460][ T10] em28xx 2-1:0.106: unknown em28xx chip ID (0) [ 95.244286][ T5935] em28xx 5-1:0.106: failed to create media graph [ 95.251177][ T5935] em28xx 5-1:0.106: V4L2 device video103 deregistered [ 95.263447][ T5935] em28xx 5-1:0.106: Registering snapshot button... [ 95.272628][ T5935] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.106/input/input10 [ 95.288106][ T5935] em28xx 5-1:0.106: Remote control support is not available for this card. [ 95.298697][ T6148] em28xx 5-1:0.106: Closing input extension [ 95.309007][ T6148] em28xx 5-1:0.106: Deregistering snapshot button [ 95.323763][ T10] em28xx 2-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 95.345404][ T10] em28xx 2-1:0.106: board has no eeprom [ 95.363649][ T6148] em28xx 5-1:0.106: Freeing device [ 95.386096][ T6115] usb 1-1: Using ep0 maxpacket: 32 [ 95.407245][ T6115] usb 1-1: config index 0 descriptor too short (expected 55, got 27) [ 95.415601][ T6105] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.424507][ T6062] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.432812][ T10] em28xx 2-1:0.106: Identified as Terratec Grabby (card=67) [ 95.433586][ T6115] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 95.448866][ T10] em28xx 2-1:0.106: analog set to bulk mode. [ 95.456039][ T5935] em28xx 2-1:0.106: Registering V4L2 extension [ 95.477918][ T6115] usb 1-1: config 0 has no interface number 0 [ 95.479672][ T10] usb 2-1: USB disconnect, device number 3 [ 95.506556][ T10] em28xx 2-1:0.106: Disconnecting em28xx [ 95.513922][ T6115] usb 1-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 95.545950][ T6115] usb 1-1: config 0 interface 106 has no altsetting 0 [ 95.553491][ T5935] em28xx 2-1:0.106: Config register raw data: 0xffffffed [ 95.561104][ T5935] em28xx 2-1:0.106: AC97 chip type couldn't be determined [ 95.570373][ T5935] em28xx 2-1:0.106: No AC97 audio processor [ 95.579723][ T5935] usb 2-1: Decoder not found [ 95.579868][ T6115] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 95.585341][ T6062] usb 3-1: Using ep0 maxpacket: 32 [ 95.588693][ T5935] em28xx 2-1:0.106: failed to create media graph [ 95.606438][ T6115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.616951][ T6105] usb 4-1: Using ep0 maxpacket: 32 [ 95.619987][ T6062] usb 3-1: config index 0 descriptor too short (expected 55, got 27) [ 95.628619][ T6115] usb 1-1: Product: syz [ 95.636585][ T6115] usb 1-1: Manufacturer: syz [ 95.641855][ T6105] usb 4-1: config index 0 descriptor too short (expected 55, got 27) [ 95.650562][ T6062] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 95.660623][ T6115] usb 1-1: SerialNumber: syz [ 95.670756][ T6105] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 95.671839][ T6062] usb 3-1: config 0 has no interface number 0 [ 95.687413][ T5935] em28xx 2-1:0.106: V4L2 device video103 deregistered [ 95.702650][ T6115] usb 1-1: config 0 descriptor?? [ 95.711398][ T6062] usb 3-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 95.718522][ T6105] usb 4-1: config 0 has no interface number 0 [ 95.722232][ T6148] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.735729][ T6169] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 95.743390][ T6105] usb 4-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 95.748574][ T5935] em28xx 2-1:0.106: Registering snapshot button... [ 95.760413][ T6062] usb 3-1: config 0 interface 106 has no altsetting 0 [ 95.763570][ T6105] usb 4-1: config 0 interface 106 has no altsetting 0 [ 95.769790][ T5935] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.106/input/input11 [ 95.791453][ T6062] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 95.804687][ T6062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.807512][ T6105] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 95.815216][ T5935] em28xx 2-1:0.106: Remote control support is not available for this card. [ 95.832364][ T6105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.836138][ T6062] usb 3-1: Product: syz [ 95.848719][ T6062] usb 3-1: Manufacturer: syz [ 95.850351][ T6105] usb 4-1: Product: syz [ 95.854716][ T6062] usb 3-1: SerialNumber: syz [ 95.859240][ T6105] usb 4-1: Manufacturer: syz [ 95.867615][ T6105] usb 4-1: SerialNumber: syz [ 95.870585][ T10] em28xx 2-1:0.106: Closing input extension [ 95.877581][ T6105] usb 4-1: config 0 descriptor?? [ 95.879814][ T6062] usb 3-1: config 0 descriptor?? [ 95.896827][ T10] em28xx 2-1:0.106: Deregistering snapshot button [ 95.899326][ T6165] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 95.905100][ T6172] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.930041][ T10] em28xx 2-1:0.106: Freeing device [ 95.935537][ T6148] usb 5-1: Using ep0 maxpacket: 32 [ 95.943510][ T6148] usb 5-1: config index 0 descriptor too short (expected 55, got 27) [ 95.952922][ T6148] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 95.966045][ T6115] em28xx 1-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 95.967653][ T6148] usb 5-1: config 0 has no interface number 0 [ 95.983027][ T6115] em28xx 1-1:0.106: Video interface 106 found: bulk [ 95.990231][ T6148] usb 5-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 96.012121][ T6148] usb 5-1: config 0 interface 106 has no altsetting 0 [ 96.043559][ T6148] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 96.057327][ T6148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.065948][ T6148] usb 5-1: Product: syz [ 96.067246][ T6115] em28xx 1-1:0.106: unknown em28xx chip ID (0) [ 96.070223][ T6148] usb 5-1: Manufacturer: syz [ 96.081702][ T6148] usb 5-1: SerialNumber: syz [ 96.098517][ T6148] usb 5-1: config 0 descriptor?? [ 96.116329][ T6175] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 96.129430][ T6062] em28xx 3-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 96.130242][ T6105] em28xx 4-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 96.152391][ T6105] em28xx 4-1:0.106: Video interface 106 found: bulk [ 96.160909][ T6062] em28xx 3-1:0.106: Video interface 106 found: bulk [ 96.170582][ T6115] em28xx 1-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 96.180075][ T6115] em28xx 1-1:0.106: board has no eeprom [ 96.225244][ T6105] em28xx 4-1:0.106: unknown em28xx chip ID (0) [ 96.237193][ T6062] em28xx 3-1:0.106: unknown em28xx chip ID (0) [ 96.245272][ T6115] em28xx 1-1:0.106: Identified as Terratec Grabby (card=67) [ 96.252771][ T6115] em28xx 1-1:0.106: analog set to bulk mode. [ 96.261559][ T982] em28xx 1-1:0.106: Registering V4L2 extension [ 96.277592][ T6115] usb 1-1: USB disconnect, device number 3 [ 96.294444][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.303053][ T6105] em28xx 4-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 96.312364][ T6115] em28xx 1-1:0.106: Disconnecting em28xx [ 96.321566][ T6105] em28xx 4-1:0.106: board has no eeprom [ 96.326665][ T6062] em28xx 3-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 96.355643][ T6148] em28xx 5-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 96.361828][ T982] em28xx 1-1:0.106: Config register raw data: 0xffffffed [ 96.368261][ T6062] em28xx 3-1:0.106: board has no eeprom [ 96.372719][ T982] em28xx 1-1:0.106: AC97 chip type couldn't be determined [ 96.378843][ T6148] em28xx 5-1:0.106: Video interface 106 found: bulk [ 96.392268][ T6105] em28xx 4-1:0.106: Identified as Terratec Grabby (card=67) [ 96.403266][ T6105] em28xx 4-1:0.106: analog set to bulk mode. [ 96.409376][ T982] em28xx 1-1:0.106: No AC97 audio processor [ 96.424938][ T6105] usb 4-1: USB disconnect, device number 3 [ 96.435009][ T982] usb 1-1: Decoder not found [ 96.441083][ T982] em28xx 1-1:0.106: failed to create media graph [ 96.448146][ T6105] em28xx 4-1:0.106: Disconnecting em28xx [ 96.453826][ T982] em28xx 1-1:0.106: V4L2 device video103 deregistered [ 96.454705][ T6062] em28xx 3-1:0.106: Identified as Terratec Grabby (card=67) [ 96.467516][ T982] em28xx 1-1:0.106: Registering snapshot button... [ 96.475072][ T6148] em28xx 5-1:0.106: unknown em28xx chip ID (0) [ 96.480039][ T982] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.106/input/input12 [ 96.486262][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 96.494377][ T982] em28xx 1-1:0.106: Remote control support is not available for this card. [ 96.499101][ T6062] em28xx 3-1:0.106: analog set to bulk mode. [ 96.518237][ T10] usb 2-1: config index 0 descriptor too short (expected 55, got 27) 2025/09/30 12:21:04 executed programs: 22 [ 96.526685][ T10] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 96.528735][ T6157] em28xx 4-1:0.106: Registering V4L2 extension [ 96.541818][ T10] usb 2-1: config 0 has no interface number 0 [ 96.553415][ T6062] usb 3-1: USB disconnect, device number 4 [ 96.571778][ T6148] em28xx 5-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 96.591402][ T6062] em28xx 3-1:0.106: Disconnecting em28xx [ 96.594325][ T6157] em28xx 4-1:0.106: Config register raw data: 0xffffffed [ 96.600234][ T10] usb 2-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 96.610560][ T6157] em28xx 4-1:0.106: AC97 chip type couldn't be determined [ 96.621801][ T6148] em28xx 5-1:0.106: board has no eeprom [ 96.622210][ T6157] em28xx 4-1:0.106: No AC97 audio processor [ 96.628638][ T10] usb 2-1: config 0 interface 106 has no altsetting 0 [ 96.647865][ T6157] usb 4-1: Decoder not found [ 96.652491][ T6157] em28xx 4-1:0.106: failed to create media graph [ 96.684790][ T6157] em28xx 4-1:0.106: V4L2 device video103 deregistered [ 96.687374][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 96.705137][ T6148] em28xx 5-1:0.106: Identified as Terratec Grabby (card=67) [ 96.713661][ T6148] em28xx 5-1:0.106: analog set to bulk mode. [ 96.722677][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.727440][ T6157] em28xx 4-1:0.106: Registering snapshot button... [ 96.734288][ T10] usb 2-1: Product: syz [ 96.745663][ T6148] usb 5-1: USB disconnect, device number 3 [ 96.758595][ T6148] em28xx 5-1:0.106: Disconnecting em28xx [ 96.765158][ T10] usb 2-1: Manufacturer: syz [ 96.769583][ T6157] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.106/input/input13 [ 96.770591][ T10] usb 2-1: SerialNumber: syz [ 96.790335][ T6157] em28xx 4-1:0.106: Remote control support is not available for this card. [ 96.800863][ T6105] em28xx 4-1:0.106: Closing input extension [ 96.807744][ T6105] em28xx 4-1:0.106: Deregistering snapshot button [ 96.811787][ T10] usb 2-1: config 0 descriptor?? [ 96.822118][ T6181] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.837799][ T5935] em28xx 3-1:0.106: Registering V4L2 extension [ 96.841777][ T6105] em28xx 4-1:0.106: Freeing device [ 96.918474][ T5935] em28xx 3-1:0.106: Config register raw data: 0xffffffed [ 96.929650][ T5935] em28xx 3-1:0.106: AC97 chip type couldn't be determined [ 96.937762][ T5935] em28xx 3-1:0.106: No AC97 audio processor [ 96.952898][ T5935] usb 3-1: Decoder not found [ 96.957698][ T5935] em28xx 3-1:0.106: failed to create media graph [ 96.966466][ T5935] em28xx 3-1:0.106: V4L2 device video103 deregistered [ 96.976116][ T5935] em28xx 3-1:0.106: Registering snapshot button... [ 96.983663][ T5935] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.106/input/input14 [ 96.998603][ T5935] em28xx 3-1:0.106: Remote control support is not available for this card. [ 97.007666][ T6115] em28xx 1-1:0.106: Closing input extension [ 97.013621][ T6115] em28xx 1-1:0.106: Deregistering snapshot button [ 97.027017][ T6145] em28xx 5-1:0.106: Registering V4L2 extension [ 97.031906][ T6115] em28xx 1-1:0.106: Freeing device [ 97.038049][ T10] em28xx 2-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 97.053140][ T10] em28xx 2-1:0.106: Video interface 106 found: bulk [ 97.097863][ T6145] em28xx 5-1:0.106: Config register raw data: 0xffffffed [ 97.113871][ T6145] em28xx 5-1:0.106: AC97 chip type couldn't be determined [ 97.133415][ T10] em28xx 2-1:0.106: unknown em28xx chip ID (0) [ 97.149645][ T6145] em28xx 5-1:0.106: No AC97 audio processor [ 97.163514][ T6145] usb 5-1: Decoder not found [ 97.173722][ T6145] em28xx 5-1:0.106: failed to create media graph [ 97.181247][ T6145] em28xx 5-1:0.106: V4L2 device video103 deregistered [ 97.195950][ T6145] em28xx 5-1:0.106: Registering snapshot button... [ 97.208755][ T6145] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.106/input/input15 [ 97.225419][ T6105] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.236021][ T6145] em28xx 5-1:0.106: Remote control support is not available for this card. [ 97.250222][ T6062] em28xx 3-1:0.106: Closing input extension [ 97.256406][ T10] em28xx 2-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 97.265961][ T10] em28xx 2-1:0.106: board has no eeprom [ 97.272384][ T6062] em28xx 3-1:0.106: Deregistering snapshot button [ 97.284876][ T6148] em28xx 5-1:0.106: Closing input extension [ 97.290862][ T6148] em28xx 5-1:0.106: Deregistering snapshot button [ 97.303271][ T6062] em28xx 3-1:0.106: Freeing device [ 97.312074][ T6148] em28xx 5-1:0.106: Freeing device [ 97.334569][ T10] em28xx 2-1:0.106: Identified as Terratec Grabby (card=67) [ 97.342065][ T10] em28xx 2-1:0.106: analog set to bulk mode. [ 97.360213][ T6145] em28xx 2-1:0.106: Registering V4L2 extension [ 97.379776][ T10] usb 2-1: USB disconnect, device number 4 [ 97.396794][ T6115] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.396943][ T10] em28xx 2-1:0.106: Disconnecting em28xx [ 97.424439][ T6105] usb 4-1: Using ep0 maxpacket: 32 [ 97.440020][ T6105] usb 4-1: config index 0 descriptor too short (expected 55, got 27) [ 97.466974][ T6145] em28xx 2-1:0.106: Config register raw data: 0xffffffed [ 97.468623][ T6105] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 97.477582][ T6145] em28xx 2-1:0.106: AC97 chip type couldn't be determined [ 97.490783][ T6145] em28xx 2-1:0.106: No AC97 audio processor [ 97.499827][ T6105] usb 4-1: config 0 has no interface number 0 [ 97.514360][ T6105] usb 4-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 97.519544][ T6145] usb 2-1: Decoder not found [ 97.533196][ T6145] em28xx 2-1:0.106: failed to create media graph [ 97.541470][ T6145] em28xx 2-1:0.106: V4L2 device video103 deregistered [ 97.550340][ T6105] usb 4-1: config 0 interface 106 has no altsetting 0 [ 97.551943][ T6145] em28xx 2-1:0.106: Registering snapshot button... [ 97.564292][ T6115] usb 1-1: Using ep0 maxpacket: 32 [ 97.576454][ T6115] usb 1-1: config index 0 descriptor too short (expected 55, got 27) [ 97.591837][ T6115] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 97.603837][ T6105] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 97.606412][ T6145] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.106/input/input16 [ 97.619112][ T6115] usb 1-1: config 0 has no interface number 0 [ 97.637583][ T6148] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.641724][ T6105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.651788][ T6062] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.656185][ T6115] usb 1-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 97.672563][ T6105] usb 4-1: Product: syz [ 97.678544][ T6105] usb 4-1: Manufacturer: syz [ 97.683356][ T6105] usb 4-1: SerialNumber: syz [ 97.688625][ T6115] usb 1-1: config 0 interface 106 has no altsetting 0 [ 97.697119][ T6145] em28xx 2-1:0.106: Remote control support is not available for this card. [ 97.700655][ T6115] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 97.709028][ T10] em28xx 2-1:0.106: Closing input extension [ 97.716857][ T6105] usb 4-1: config 0 descriptor?? [ 97.722086][ T10] em28xx 2-1:0.106: Deregistering snapshot button [ 97.744652][ T6115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.753857][ T6187] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 97.763872][ T6115] usb 1-1: Product: syz [ 97.768554][ T6115] usb 1-1: Manufacturer: syz [ 97.773191][ T6115] usb 1-1: SerialNumber: syz [ 97.786863][ T6115] usb 1-1: config 0 descriptor?? [ 97.793082][ T6185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.793419][ T10] em28xx 2-1:0.106: Freeing device [ 97.835456][ T6148] usb 5-1: Using ep0 maxpacket: 32 [ 97.841823][ T6062] usb 3-1: Using ep0 maxpacket: 32 [ 97.850317][ T6148] usb 5-1: config index 0 descriptor too short (expected 55, got 27) [ 97.867142][ T6062] usb 3-1: config index 0 descriptor too short (expected 55, got 27) [ 97.876679][ T6148] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 97.885083][ T6062] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 97.893244][ T6062] usb 3-1: config 0 has no interface number 0 [ 97.899449][ T6148] usb 5-1: config 0 has no interface number 0 [ 97.906321][ T6148] usb 5-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 97.919845][ T6062] usb 3-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 97.930970][ T6148] usb 5-1: config 0 interface 106 has no altsetting 0 [ 97.943475][ T6062] usb 3-1: config 0 interface 106 has no altsetting 0 [ 97.953618][ T6062] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 97.968890][ T6062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.972711][ T6105] em28xx 4-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 97.977324][ T6062] usb 3-1: Product: syz [ 97.992825][ T6105] em28xx 4-1:0.106: Video interface 106 found: bulk [ 97.994213][ T6148] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 98.012275][ T6062] usb 3-1: Manufacturer: syz [ 98.018063][ T6148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.019778][ T6115] em28xx 1-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 98.030478][ T6062] usb 3-1: SerialNumber: syz [ 98.036749][ T6115] em28xx 1-1:0.106: Video interface 106 found: bulk [ 98.043956][ T6148] usb 5-1: Product: syz [ 98.056838][ T6148] usb 5-1: Manufacturer: syz [ 98.062275][ T6062] usb 3-1: config 0 descriptor?? [ 98.067568][ T6148] usb 5-1: SerialNumber: syz [ 98.073651][ T6188] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 98.082513][ T6148] usb 5-1: config 0 descriptor?? [ 98.087956][ T6105] em28xx 4-1:0.106: unknown em28xx chip ID (0) [ 98.088481][ T6190] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 98.114841][ T6115] em28xx 1-1:0.106: unknown em28xx chip ID (0) [ 98.144381][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.154192][ T6105] em28xx 4-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 98.162375][ T6105] em28xx 4-1:0.106: board has no eeprom [ 98.179249][ T6115] em28xx 1-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 98.188143][ T6115] em28xx 1-1:0.106: board has no eeprom [ 98.224204][ T6105] em28xx 4-1:0.106: Identified as Terratec Grabby (card=67) [ 98.231539][ T6105] em28xx 4-1:0.106: analog set to bulk mode. [ 98.237659][ T6157] em28xx 4-1:0.106: Registering V4L2 extension [ 98.258228][ T6115] em28xx 1-1:0.106: Identified as Terratec Grabby (card=67) [ 98.268219][ T6105] usb 4-1: USB disconnect, device number 4 [ 98.293140][ T6105] em28xx 4-1:0.106: Disconnecting em28xx [ 98.299046][ T6115] em28xx 1-1:0.106: analog set to bulk mode. [ 98.305333][ T6157] em28xx 4-1:0.106: Config register raw data: 0xffffffed [ 98.306209][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 98.313555][ T6157] em28xx 4-1:0.106: AC97 chip type couldn't be determined [ 98.328160][ T6062] em28xx 3-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 98.328941][ T6115] usb 1-1: USB disconnect, device number 4 [ 98.347175][ T6148] em28xx 5-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 98.359220][ T6157] em28xx 4-1:0.106: No AC97 audio processor [ 98.367831][ T6062] em28xx 3-1:0.106: Video interface 106 found: bulk [ 98.379299][ T6148] em28xx 5-1:0.106: Video interface 106 found: bulk [ 98.383892][ T6157] usb 4-1: Decoder not found [ 98.395237][ T10] usb 2-1: config index 0 descriptor too short (expected 55, got 27) [ 98.396320][ T6115] em28xx 1-1:0.106: Disconnecting em28xx [ 98.404492][ T10] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 98.409948][ T6157] em28xx 4-1:0.106: failed to create media graph [ 98.433607][ T10] usb 2-1: config 0 has no interface number 0 [ 98.435751][ T6157] em28xx 4-1:0.106: V4L2 device video103 deregistered [ 98.440424][ T10] usb 2-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 98.458597][ T6157] em28xx 4-1:0.106: Registering snapshot button... [ 98.459184][ T6148] em28xx 5-1:0.106: unknown em28xx chip ID (0) [ 98.467994][ T6157] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.106/input/input17 [ 98.473514][ T6062] em28xx 3-1:0.106: unknown em28xx chip ID (0) [ 98.489986][ T6157] em28xx 4-1:0.106: Remote control support is not available for this card. [ 98.490840][ T10] usb 2-1: config 0 interface 106 has no altsetting 0 [ 98.500564][ T6164] em28xx 1-1:0.106: Registering V4L2 extension [ 98.534150][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 98.550363][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.576308][ T6062] em28xx 3-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 98.587963][ T6148] em28xx 5-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 98.599187][ T6062] em28xx 3-1:0.106: board has no eeprom [ 98.605155][ T10] usb 2-1: Product: syz [ 98.609473][ T6148] em28xx 5-1:0.106: board has no eeprom [ 98.612732][ T6164] em28xx 1-1:0.106: Config register raw data: 0xffffffed [ 98.615775][ T10] usb 2-1: Manufacturer: syz [ 98.628304][ T10] usb 2-1: SerialNumber: syz [ 98.633036][ T6164] em28xx 1-1:0.106: AC97 chip type couldn't be determined [ 98.636258][ T10] usb 2-1: config 0 descriptor?? [ 98.646256][ T6197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.648307][ T6164] em28xx 1-1:0.106: No AC97 audio processor [ 98.668987][ T6164] usb 1-1: Decoder not found [ 98.673614][ T6164] em28xx 1-1:0.106: failed to create media graph [ 98.680509][ T6164] em28xx 1-1:0.106: V4L2 device video103 deregistered [ 98.688524][ T6164] em28xx 1-1:0.106: Registering snapshot button... [ 98.694338][ T6148] em28xx 5-1:0.106: Identified as Terratec Grabby (card=67) [ 98.696515][ T6164] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.106/input/input18 [ 98.702473][ T6062] em28xx 3-1:0.106: Identified as Terratec Grabby (card=67) [ 98.721252][ T6148] em28xx 5-1:0.106: analog set to bulk mode. [ 98.721360][ T6164] em28xx 1-1:0.106: Remote control support is not available for this card. [ 98.734822][ T6062] em28xx 3-1:0.106: analog set to bulk mode. [ 98.748912][ T6148] usb 5-1: USB disconnect, device number 4 [ 98.753475][ T6105] em28xx 4-1:0.106: Closing input extension [ 98.759205][ T6148] em28xx 5-1:0.106: Disconnecting em28xx [ 98.774332][ T6105] em28xx 4-1:0.106: Deregistering snapshot button [ 98.782139][ T6062] usb 3-1: USB disconnect, device number 5 [ 98.792212][ T6145] em28xx 5-1:0.106: Registering V4L2 extension [ 98.799427][ T6105] em28xx 4-1:0.106: Freeing device [ 98.806179][ T6062] em28xx 3-1:0.106: Disconnecting em28xx [ 98.898038][ T10] em28xx 2-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 98.921541][ T10] em28xx 2-1:0.106: Video interface 106 found: bulk [ 98.933109][ T6145] em28xx 5-1:0.106: Config register raw data: 0xffffffed [ 98.941245][ T6145] em28xx 5-1:0.106: AC97 chip type couldn't be determined [ 98.950765][ T6145] em28xx 5-1:0.106: No AC97 audio processor [ 98.959408][ T6145] usb 5-1: Decoder not found [ 98.985263][ T6145] em28xx 5-1:0.106: failed to create media graph [ 98.992782][ T6145] em28xx 5-1:0.106: V4L2 device video103 deregistered [ 99.007829][ T10] em28xx 2-1:0.106: unknown em28xx chip ID (0) [ 99.019923][ T6145] em28xx 5-1:0.106: Registering snapshot button... [ 99.020341][ T6206] ================================================================== [ 99.028430][ T6145] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.106/input/input19 [ 99.034491][ T6206] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 99.034529][ T6206] Read of size 8 at addr ffff88807aaf0740 by task v4l_id/6206 [ 99.034542][ T6206] [ 99.034562][ T6206] CPU: 1 UID: 0 PID: 6206 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 99.034579][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.034595][ T6206] Call Trace: [ 99.034606][ T6206] [ 99.034613][ T6206] dump_stack_lvl+0x189/0x250 [ 99.034634][ T6206] ? rcu_is_watching+0x15/0xb0 [ 99.034649][ T6206] ? __kasan_check_byte+0x12/0x40 [ 99.034671][ T6206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.034688][ T6206] ? rcu_is_watching+0x15/0xb0 [ 99.034704][ T6206] ? lock_release+0x4b/0x3e0 [ 99.034719][ T6206] ? __virt_addr_valid+0x1c8/0x5c0 [ 99.034738][ T6206] ? __virt_addr_valid+0x4a5/0x5c0 [ 99.034758][ T6206] print_report+0xca/0x240 [ 99.034775][ T6206] ? v4l2_fh_open+0xc7/0x430 [ 99.034790][ T6206] kasan_report+0x118/0x150 [ 99.034812][ T6206] ? v4l2_fh_open+0xc7/0x430 [ 99.034836][ T6206] v4l2_fh_open+0xc7/0x430 [ 99.034855][ T6206] em28xx_v4l2_open+0x157/0x9a0 [ 99.034875][ T6206] v4l2_open+0x20c/0x360 [ 99.034894][ T6206] chrdev_open+0x4c9/0x5e0 [ 99.034910][ T6206] ? __pfx_chrdev_open+0x10/0x10 [ 99.034924][ T6206] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 99.034943][ T6206] ? __pfx_chrdev_open+0x10/0x10 [ 99.034956][ T6206] do_dentry_open+0x950/0x13f0 [ 99.034977][ T6206] vfs_open+0x3b/0x340 [ 99.034991][ T6206] ? path_openat+0x2ecd/0x3830 [ 99.035011][ T6206] path_openat+0x2ee5/0x3830 [ 99.035028][ T6206] ? arch_stack_walk+0xfc/0x150 [ 99.035052][ T6206] ? stack_depot_save_flags+0x40/0x860 [ 99.035072][ T6206] ? __pfx_path_openat+0x10/0x10 [ 99.035089][ T6206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.035111][ T6206] do_filp_open+0x1fa/0x410 [ 99.035128][ T6206] ? __lock_acquire+0xab9/0xd20 [ 99.035142][ T6206] ? __pfx_do_filp_open+0x10/0x10 [ 99.035168][ T6206] ? _raw_spin_unlock+0x28/0x50 [ 99.035182][ T6206] ? alloc_fd+0x64c/0x6c0 [ 99.035210][ T6206] do_sys_openat2+0x121/0x1c0 [ 99.035227][ T6206] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.035248][ T6206] ? exc_page_fault+0x76/0xf0 [ 99.035266][ T6206] ? do_user_addr_fault+0xc8a/0x1390 [ 99.035282][ T6206] __x64_sys_openat+0x138/0x170 [ 99.035300][ T6206] do_syscall_64+0xfa/0x3b0 [ 99.035317][ T6206] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.035335][ T6206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.035350][ T6206] ? clear_bhb_loop+0x60/0xb0 [ 99.035367][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.035381][ T6206] RIP: 0033:0x7fccfa6a7407 [ 99.035400][ T6206] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 99.035413][ T6206] RSP: 002b:00007ffd3369da10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 99.035429][ T6206] RAX: ffffffffffffffda RBX: 00007fccfae2b880 RCX: 00007fccfa6a7407 [ 99.035441][ T6206] RDX: 0000000000000000 RSI: 00007ffd3369ef1c RDI: ffffffffffffff9c [ 99.035452][ T6206] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 99.035461][ T6206] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 99.035474][ T6206] R13: 00007ffd3369dc60 R14: 00007fccfaf92000 R15: 000055913be654d8 [ 99.035492][ T6206] [ 99.035497][ T6206] [ 99.053363][ T6145] em28xx 5-1:0.106: Remote control support is not available for this card. [ 99.059906][ T6206] Allocated by task 6145: [ 99.059921][ T6206] kasan_save_track+0x3e/0x80 [ 99.059943][ T6206] __kasan_kmalloc+0x93/0xb0 [ 99.059961][ T6206] __kmalloc_cache_noprof+0x230/0x3d0 [ 99.059980][ T6206] em28xx_v4l2_init+0x10b/0x2e70 [ 99.069493][ T5935] em28xx 3-1:0.106: Registering V4L2 extension [ 99.071217][ T6206] em28xx_init_extension+0x11d/0x1c0 [ 99.125020][ T10] em28xx 2-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 99.126529][ T6206] process_scheduled_works+0xade/0x17b0 [ 99.130941][ T10] em28xx 2-1:0.106: board has no eeprom [ 99.135499][ T6206] worker_thread+0x8a0/0xda0 [ 99.135519][ T6206] kthread+0x70e/0x8a0 [ 99.135534][ T6206] ret_from_fork+0x439/0x7d0 [ 99.135548][ T6206] ret_from_fork_asm+0x1a/0x30 [ 99.135566][ T6206] [ 99.135571][ T6206] Freed by task 6145: [ 99.135579][ T6206] kasan_save_track+0x3e/0x80 [ 99.135597][ T6206] kasan_save_free_info+0x46/0x50 [ 99.141431][ T5935] em28xx 3-1:0.106: Config register raw data: 0xffffffed [ 99.144637][ T6206] __kasan_slab_free+0x5b/0x80 [ 99.144660][ T6206] kfree+0x18e/0x440 [ 99.144678][ T6206] em28xx_v4l2_init+0x1683/0x2e70 [ 99.149076][ T5935] em28xx 3-1:0.106: AC97 chip type couldn't be determined [ 99.153887][ T6206] em28xx_init_extension+0x11d/0x1c0 [ 99.153907][ T6206] process_scheduled_works+0xade/0x17b0 [ 99.153921][ T6206] worker_thread+0x8a0/0xda0 [ 99.153934][ T6206] kthread+0x70e/0x8a0 [ 99.159238][ T5935] em28xx 3-1:0.106: No AC97 audio processor [ 99.162539][ T6206] ret_from_fork+0x439/0x7d0 [ 99.162560][ T6206] ret_from_fork_asm+0x1a/0x30 [ 99.162579][ T6206] [ 99.162583][ T6206] The buggy address belongs to the object at ffff88807aaf0000 [ 99.162583][ T6206] which belongs to the cache kmalloc-8k of size 8192 [ 99.162596][ T6206] The buggy address is located 1856 bytes inside of [ 99.162596][ T6206] freed 8192-byte region [ffff88807aaf0000, ffff88807aaf2000) [ 99.174684][ T5935] videodev: could not get a free minor [ 99.178819][ T6206] [ 99.178826][ T6206] The buggy address belongs to the physical page: [ 99.178847][ T6206] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7aaf0 [ 99.178863][ T6206] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 99.183682][ T5935] em28xx 3-1:0.106: unable to register video device (error=-23). [ 99.187645][ T6206] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 99.187665][ T6206] page_type: f5(slab) [ 99.187679][ T6206] raw: 00fff00000000040 ffff88801a042280 ffffea0001e34200 0000000000000002 [ 99.187692][ T6206] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 99.194558][ T5935] em28xx 3-1:0.106: Registering snapshot button... [ 99.196992][ T6206] head: 00fff00000000040 ffff88801a042280 ffffea0001e34200 0000000000000002 [ 99.204033][ T5935] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.106/input/input20 [ 99.207245][ T6206] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 99.207260][ T6206] head: 00fff00000000003 ffffea0001eabc01 00000000ffffffff 00000000ffffffff [ 99.207272][ T6206] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 99.207280][ T6206] page dumped because: kasan: bad access detected [ 99.207299][ T6206] page_owner tracks the page as allocated [ 99.207306][ T6206] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5972, tgid 5972 (syz-executor), ts 89422877312, free_ts 89300939828 [ 99.221860][ T5935] em28xx 3-1:0.106: Remote control support is not available for this card. [ 99.222741][ T6206] post_alloc_hook+0x240/0x2a0 [ 99.222767][ T6206] get_page_from_freelist+0x21e4/0x22c0 [ 99.222783][ T6206] __alloc_frozen_pages_noprof+0x181/0x370 [ 99.229751][ T6062] em28xx 3-1:0.106: Closing input extension [ 99.232601][ T6206] alloc_pages_mpol+0x232/0x4a0 [ 99.237808][ T6062] em28xx 3-1:0.106: Deregistering snapshot button [ 99.241724][ T6206] allocate_slab+0x8a/0x370 [ 99.241743][ T6206] ___slab_alloc+0xbeb/0x1420 [ 99.241756][ T6206] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 99.264408][ T10] em28xx 2-1:0.106: Identified as Terratec Grabby (card=67) [ 99.266287][ T6206] kmalloc_reserve+0x136/0x290 [ 99.277184][ T10] em28xx 2-1:0.106: analog set to bulk mode. [ 99.282151][ T6206] __alloc_skb+0x142/0x2d0 [ 99.293033][ T10] usb 2-1: USB disconnect, device number 5 [ 99.297068][ T6206] netlink_dump+0x167/0xe90 [ 99.297089][ T6206] __netlink_dump_start+0x5cb/0x7e0 [ 99.297103][ T6206] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 99.318116][ T10] em28xx 2-1:0.106: Disconnecting em28xx [ 99.325085][ T6206] genl_rcv_msg+0x5da/0x790 [ 99.325108][ T6206] netlink_rcv_skb+0x208/0x470 [ 99.325123][ T6206] genl_rcv+0x28/0x40 [ 99.325139][ T6206] netlink_unicast+0x82c/0x9e0 [ 99.325152][ T6206] page last free pid 5972 tgid 5972 stack trace: [ 99.325162][ T6206] __free_frozen_pages+0xbc4/0xd30 [ 99.325175][ T6206] __put_partials+0x156/0x1a0 [ 99.325188][ T6206] put_cpu_partial+0x17c/0x250 [ 99.325202][ T6206] __slab_free+0x2d5/0x3c0 [ 99.325217][ T6206] qlist_free_all+0x97/0x140 [ 99.325235][ T6206] kasan_quarantine_reduce+0x148/0x160 [ 99.325253][ T6206] __kasan_slab_alloc+0x22/0x80 [ 99.325272][ T6206] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 99.325292][ T6206] alloc_inode+0x6a/0x1b0 [ 99.325312][ T6206] new_inode+0x22/0x170 [ 99.325323][ T6206] __debugfs_create_file+0x14d/0x4f0 [ 99.325336][ T6206] debugfs_create_file_unsafe+0x3a/0x50 [ 99.325351][ T6206] nsim_ethtool_init+0x2b5/0x4d0 [ 99.325367][ T6206] nsim_create+0x245/0xf10 [ 99.325385][ T6206] __nsim_dev_port_add+0x6b6/0xb10 [ 99.325398][ T6206] nsim_dev_port_add_all+0x37/0xf0 [ 99.325412][ T6206] [ 99.325417][ T6206] Memory state around the buggy address: [ 99.325427][ T6206] ffff88807aaf0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.325438][ T6206] ffff88807aaf0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.325449][ T6206] >ffff88807aaf0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.325457][ T6206] ^ [ 99.325467][ T6206] ffff88807aaf0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.325477][ T6206] ffff88807aaf0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.325484][ T6206] ================================================================== [ 99.440248][ T6206] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 99.440281][ T6206] CPU: 1 UID: 0 PID: 6206 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 99.440299][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.440309][ T6206] Call Trace: [ 99.440317][ T6206] [ 99.440324][ T6206] dump_stack_lvl+0x99/0x250 [ 99.440349][ T6206] ? __asan_memcpy+0x40/0x70 [ 99.440368][ T6206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.440386][ T6206] ? __pfx__printk+0x10/0x10 [ 99.440405][ T6206] vpanic+0x281/0x750 [ 99.440428][ T6206] ? preempt_schedule+0xae/0xc0 [ 99.440444][ T6206] ? __pfx_vpanic+0x10/0x10 [ 99.440461][ T6206] ? preempt_schedule_common+0x83/0xd0 [ 99.440477][ T6206] ? preempt_schedule+0xae/0xc0 [ 99.440492][ T6206] ? __pfx_preempt_schedule+0x10/0x10 [ 99.440510][ T6206] panic+0xb9/0xc0 [ 99.440528][ T6206] ? __pfx_panic+0x10/0x10 [ 99.440548][ T6206] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 99.440567][ T6206] ? v4l2_fh_open+0xc7/0x430 [ 99.440585][ T6206] check_panic_on_warn+0x89/0xb0 [ 99.440605][ T6206] ? v4l2_fh_open+0xc7/0x430 [ 99.440622][ T6206] end_report+0x78/0x160 [ 99.440642][ T6206] kasan_report+0x129/0x150 [ 99.440664][ T6206] ? v4l2_fh_open+0xc7/0x430 [ 99.440683][ T6206] v4l2_fh_open+0xc7/0x430 [ 99.440703][ T6206] em28xx_v4l2_open+0x157/0x9a0 [ 99.440723][ T6206] v4l2_open+0x20c/0x360 [ 99.440743][ T6206] chrdev_open+0x4c9/0x5e0 [ 99.440758][ T6206] ? __pfx_chrdev_open+0x10/0x10 [ 99.440774][ T6206] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 99.440792][ T6206] ? __pfx_chrdev_open+0x10/0x10 [ 99.440806][ T6206] do_dentry_open+0x950/0x13f0 [ 99.440829][ T6206] vfs_open+0x3b/0x340 [ 99.440844][ T6206] ? path_openat+0x2ecd/0x3830 [ 99.440864][ T6206] path_openat+0x2ee5/0x3830 [ 99.440882][ T6206] ? arch_stack_walk+0xfc/0x150 [ 99.440907][ T6206] ? stack_depot_save_flags+0x40/0x860 [ 99.440929][ T6206] ? __pfx_path_openat+0x10/0x10 [ 99.440946][ T6206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.440969][ T6206] do_filp_open+0x1fa/0x410 [ 99.440987][ T6206] ? __lock_acquire+0xab9/0xd20 [ 99.441002][ T6206] ? __pfx_do_filp_open+0x10/0x10 [ 99.441029][ T6206] ? _raw_spin_unlock+0x28/0x50 [ 99.441048][ T6206] ? alloc_fd+0x64c/0x6c0 [ 99.441073][ T6206] do_sys_openat2+0x121/0x1c0 [ 99.441092][ T6206] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.441109][ T6206] ? exc_page_fault+0x76/0xf0 [ 99.441126][ T6206] ? do_user_addr_fault+0xc8a/0x1390 [ 99.441144][ T6206] __x64_sys_openat+0x138/0x170 [ 99.441163][ T6206] do_syscall_64+0xfa/0x3b0 [ 99.441180][ T6206] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.441196][ T6206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.441212][ T6206] ? clear_bhb_loop+0x60/0xb0 [ 99.441228][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.441244][ T6206] RIP: 0033:0x7fccfa6a7407 [ 99.441258][ T6206] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 99.441271][ T6206] RSP: 002b:00007ffd3369da10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 99.441289][ T6206] RAX: ffffffffffffffda RBX: 00007fccfae2b880 RCX: 00007fccfa6a7407 [ 99.441301][ T6206] RDX: 0000000000000000 RSI: 00007ffd3369ef1c RDI: ffffffffffffff9c [ 99.441312][ T6206] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 99.441322][ T6206] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 99.441331][ T6206] R13: 00007ffd3369dc60 R14: 00007fccfaf92000 R15: 000055913be654d8 [ 99.441349][ T6206] [ 99.444323][ T6206] Kernel Offset: disabled