Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. 2026/08/22 16:48:24 parsed 1 programs 2026/08/22 16:48:24 serving rpc on tcp://44261 [ 67.696766][ T30] audit: type=1400 audit(1787417304.398:129): avc: denied { node_bind } for pid=5597 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 69.846279][ T30] audit: type=1400 audit(1787417306.548:130): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 69.870295][ T30] audit: type=1400 audit(1787417306.568:131): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.873645][ T5603] cgroup: Unknown subsys name 'net' [ 69.899212][ T30] audit: type=1400 audit(1787417306.598:132): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.045434][ T5603] cgroup: Unknown subsys name 'cpuset' [ 70.053530][ T5603] cgroup: Unknown subsys name 'rlimit' [ 70.175573][ T30] audit: type=1400 audit(1787417306.878:133): avc: denied { setattr } for pid=5603 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.199430][ T30] audit: type=1400 audit(1787417306.878:134): avc: denied { create } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.221845][ T30] audit: type=1400 audit(1787417306.878:135): avc: denied { write } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.242623][ T30] audit: type=1400 audit(1787417306.878:136): avc: denied { read } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.263014][ T30] audit: type=1400 audit(1787417306.878:137): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 70.288004][ T30] audit: type=1400 audit(1787417306.878:138): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 70.315100][ T5608] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 71.270363][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.036015][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 73.036030][ T30] audit: type=1400 audit(1787417309.738:143): avc: denied { execmem } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.069240][ T30] audit: type=1400 audit(1787417309.768:144): avc: denied { read } for pid=5615 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.091938][ T30] audit: type=1400 audit(1787417309.788:145): avc: denied { open } for pid=5615 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.116018][ T30] audit: type=1400 audit(1787417309.788:146): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.138233][ T30] audit: type=1400 audit(1787417309.788:147): avc: denied { module_request } for pid=5615 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.160755][ T30] audit: type=1400 audit(1787417309.818:148): avc: denied { sys_module } for pid=5615 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.413796][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.421300][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.428458][ T5615] bridge_slave_0: entered allmulticast mode [ 73.435101][ T5615] bridge_slave_0: entered promiscuous mode [ 73.443361][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.450459][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.457606][ T5615] bridge_slave_1: entered allmulticast mode [ 73.464323][ T5615] bridge_slave_1: entered promiscuous mode [ 73.483686][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.494469][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.516430][ T5615] team0: Port device team_slave_0 added [ 73.523434][ T5615] team0: Port device team_slave_1 added [ 73.541416][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.548463][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.574404][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.586463][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.593439][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.619336][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.653001][ T5615] hsr_slave_0: entered promiscuous mode [ 73.659087][ T5615] hsr_slave_1: entered promiscuous mode [ 73.757468][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.767834][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.775379][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.784697][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.793252][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.802130][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.810198][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.819023][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.841498][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.848791][ T5615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.856523][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.863768][ T5615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.903390][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.919267][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.928118][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.940292][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.951339][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.958437][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.971021][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.978192][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.034700][ T30] audit: type=1400 audit(1787417310.738:149): avc: denied { sys_module } for pid=5615 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.215096][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.249935][ T5615] veth0_vlan: entered promiscuous mode [ 74.259528][ T5615] veth1_vlan: entered promiscuous mode [ 74.283166][ T5615] veth0_macvtap: entered promiscuous mode [ 74.291445][ T5615] veth1_macvtap: entered promiscuous mode [ 74.306471][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.319992][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.353733][ T30] audit: type=1400 audit(1787417311.058:150): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/root/syzkaller.SYskkR/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.381399][ T143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.393422][ T30] audit: type=1400 audit(1787417311.058:151): avc: denied { mount } for pid=5615 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.393940][ T143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.426435][ T143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.430206][ T5615] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.439971][ T143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.450492][ T30] audit: type=1400 audit(1787417311.058:152): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/root/syzkaller.SYskkR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.559174][ T143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.616844][ T143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.691170][ T143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.771693][ T143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.136936][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.148010][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.179271][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.188328][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.506728][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.516196][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.526064][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.533793][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.542071][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/08/22 16:48:33 executed programs: 0 [ 76.977631][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.986491][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.995561][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.003633][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.011029][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.291606][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.298899][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.306095][ T5731] bridge_slave_0: entered allmulticast mode [ 77.312867][ T5731] bridge_slave_0: entered promiscuous mode [ 77.320037][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.327209][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.334421][ T5731] bridge_slave_1: entered allmulticast mode [ 77.341052][ T5731] bridge_slave_1: entered promiscuous mode [ 77.360865][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.371515][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.393054][ T5731] team0: Port device team_slave_0 added [ 77.400050][ T5731] team0: Port device team_slave_1 added [ 77.418042][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.425014][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.451354][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.463135][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.470059][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.497030][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.550713][ T5731] hsr_slave_0: entered promiscuous mode [ 77.557821][ T5731] hsr_slave_1: entered promiscuous mode [ 77.564246][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 77.570023][ T5731] Cannot create hsr debugfs directory [ 77.658019][ T143] bridge_slave_1: left allmulticast mode [ 77.663996][ T143] bridge_slave_1: left promiscuous mode [ 77.670667][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.681126][ T143] bridge_slave_0: left allmulticast mode [ 77.686817][ T143] bridge_slave_0: left promiscuous mode [ 77.692587][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.784897][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.797078][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.806611][ T143] bond0 (unregistering): Released all slaves [ 77.903545][ T143] hsr_slave_0: left promiscuous mode [ 77.909663][ T143] hsr_slave_1: left promiscuous mode [ 77.916254][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.923964][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.932097][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.942344][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.956782][ T143] veth1_macvtap: left promiscuous mode [ 77.964225][ T143] veth0_macvtap: left promiscuous mode [ 77.969851][ T143] veth1_vlan: left promiscuous mode [ 77.976294][ T143] veth0_vlan: left promiscuous mode [ 78.098422][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 78.098437][ T30] audit: type=1400 audit(1787417314.798:173): avc: denied { write } for pid=5749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.173085][ T30] audit: type=1400 audit(1787417314.868:174): avc: denied { write } for pid=5760 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.232863][ T143] team0 (unregistering): Port device team_slave_1 removed [ 78.248604][ T143] team0 (unregistering): Port device team_slave_0 removed [ 78.319678][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 78.569566][ T30] audit: type=1400 audit(1787417315.268:175): avc: denied { write } for pid=5763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.601585][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.627431][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.648264][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.662279][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.669660][ T30] audit: type=1400 audit(1787417315.368:176): avc: denied { write } for pid=5774 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.695583][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.709636][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.718281][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.726859][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.073274][ T51] Bluetooth: hci0: command tx timeout [ 79.197822][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.229301][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.261966][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.269138][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.349753][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.356911][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.434314][ T30] audit: type=1400 audit(1787417316.138:177): avc: denied { write } for pid=5783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.536387][ T30] audit: type=1400 audit(1787417316.238:178): avc: denied { write } for pid=5794 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.954652][ T30] audit: type=1400 audit(1787417316.658:179): avc: denied { write } for pid=5798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.991070][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.042806][ T30] audit: type=1400 audit(1787417316.748:180): avc: denied { write } for pid=5817 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.074462][ T5731] veth0_vlan: entered promiscuous mode [ 80.087250][ T5731] veth1_vlan: entered promiscuous mode [ 80.115682][ T5731] veth0_macvtap: entered promiscuous mode [ 80.128804][ T5731] veth1_macvtap: entered promiscuous mode [ 80.148628][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.164344][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.213400][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.223840][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.252489][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.261724][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.279068][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.293061][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.322578][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.330491][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.361148][ T30] audit: type=1400 audit(1787417317.058:181): avc: denied { write } for pid=5819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.412704][ T30] audit: type=1400 audit(1787417317.058:182): avc: denied { read write } for pid=5830 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.643154][ T5704] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.813279][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 80.819161][ T5704] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 80.830039][ T5704] usb 1-1: config index 0 descriptor too short (expected 55, got 27) [ 80.838264][ T5704] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 80.846528][ T5704] usb 1-1: config 0 has no interface number 0 [ 80.852970][ T5704] usb 1-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 80.862983][ T5704] usb 1-1: config 0 interface 106 has no altsetting 0 [ 80.872098][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.880239][ T5704] usb 1-1: Product: syz [ 80.884406][ T5704] usb 1-1: Manufacturer: syz [ 80.888967][ T5704] usb 1-1: SerialNumber: syz [ 80.898177][ T5704] usb 1-1: config 0 descriptor?? [ 80.905616][ T5830] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.123620][ T5704] em28xx 1-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 81.133706][ T5704] em28xx 1-1:0.106: Video interface 106 found: bulk [ 81.152616][ T51] Bluetooth: hci0: command tx timeout [ 81.193335][ T5704] em28xx 1-1:0.106: unknown em28xx chip ID (0) [ 81.276568][ T5704] em28xx 1-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 81.291893][ T5704] em28xx 1-1:0.106: board has no eeprom [ 81.352573][ T5704] em28xx 1-1:0.106: Identified as Terratec Grabby (card=67) [ 81.359900][ T5704] em28xx 1-1:0.106: analog set to bulk mode. [ 81.366911][ T189] em28xx 1-1:0.106: Registering V4L2 extension [ 81.381256][ T5704] usb 1-1: USB disconnect, device number 2 [ 81.388580][ T5704] em28xx 1-1:0.106: Disconnecting em28xx [ 81.421499][ T189] em28xx 1-1:0.106: Config register raw data: 0xffffffed [ 81.430566][ T189] em28xx 1-1:0.106: AC97 chip type couldn't be determined [ 81.439456][ T189] em28xx 1-1:0.106: No AC97 audio processor [ 81.447899][ T189] usb 1-1: Decoder not found [ 81.452668][ T189] em28xx 1-1:0.106: failed to create media graph [ 81.459516][ T189] em28xx 1-1:0.106: V4L2 device video103 deregistered [ 81.467859][ T189] INFO: trying to register non-static key. [ 81.473667][ T189] The code is fine but needs lockdep annotation, or maybe [ 81.480750][ T189] you didn't initialize this object before use? [ 81.486952][ T189] turning off the locking correctness validator. [ 81.493245][ T189] CPU: 0 UID: 0 PID: 189 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 81.493257][ T189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 81.493265][ T189] Workqueue: events request_module_async [ 81.493284][ T189] Call Trace: [ 81.493287][ T189] [ 81.493292][ T189] dump_stack_lvl+0x100/0x190 [ 81.493307][ T189] register_lock_class+0x79b/0x7b0 [ 81.493326][ T189] __lock_acquire+0x3e7/0x1ec0 [ 81.493342][ T189] ? lock_acquire+0x1b9/0x370 [ 81.493359][ T189] lock_acquire+0x1b9/0x370 [ 81.493373][ T189] ? __wake_up+0x1c/0x60 [ 81.493387][ T189] ? vb2_video_unregister_device+0x12b/0x2e0 [ 81.493401][ T189] ? kobject_put+0xb9/0x640 [ 81.493411][ T189] ? _raw_spin_lock_irqsave+0x52/0x60 [ 81.493425][ T189] _raw_spin_lock_irqsave+0x3a/0x60 [ 81.493438][ T189] ? __wake_up+0x1c/0x60 [ 81.493451][ T189] __wake_up+0x1c/0x60 [ 81.493464][ T189] __vb2_queue_cancel+0x348/0xe90 [ 81.493476][ T189] ? __pfx_device_del+0x10/0x10 [ 81.493490][ T189] ? kobject_put+0xb9/0x640 [ 81.493501][ T189] vb2_core_queue_release+0x27/0x190 [ 81.493514][ T189] vb2_video_unregister_device+0x152/0x2e0 [ 81.493527][ T189] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 81.493543][ T189] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 81.493559][ T189] em28xx_init_extension+0x13a/0x200 [ 81.493572][ T189] request_module_async+0x1e/0x30 [ 81.493585][ T189] process_one_work+0xac7/0x1b10 [ 81.493602][ T189] ? irqentry_exit+0x24d/0xa10 [ 81.493617][ T189] ? __pfx_process_one_work+0x10/0x10 [ 81.493633][ T189] ? __pfx_request_module_async+0x10/0x10 [ 81.493647][ T189] worker_thread+0x5ef/0xe50 [ 81.493666][ T189] ? __pfx_worker_thread+0x10/0x10 [ 81.493680][ T189] ? kthread+0x13a/0x450 [ 81.493691][ T189] ? __pfx_worker_thread+0x10/0x10 [ 81.493704][ T189] kthread+0x373/0x450 [ 81.493716][ T189] ? __pfx_kthread+0x10/0x10 [ 81.493729][ T189] ret_from_fork+0x730/0xd60 [ 81.493739][ T189] ? __pfx_ret_from_fork+0x10/0x10 [ 81.493748][ T189] ? __switch_to+0x800/0x10f0 [ 81.493760][ T189] ? __pfx_kthread+0x10/0x10 [ 81.493772][ T189] ret_from_fork_asm+0x1a/0x30 [ 81.493785][ T189] [ 81.493807][ T189] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 81.714516][ T189] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 81.722911][ T189] CPU: 0 UID: 0 PID: 189 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 81.732177][ T189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 81.742211][ T189] Workqueue: events request_module_async [ 81.747832][ T189] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 81.753366][ T189] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 81.772953][ T189] RSP: 0018:ffffc9000311f9a0 EFLAGS: 00010046 [ 81.779016][ T189] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 81.786966][ T189] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8880312ad790 [ 81.794916][ T189] RBP: ffff8880312ad790 R08: 0000000000000000 R09: fffff52000623f2b [ 81.802864][ T189] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000003 [ 81.810831][ T189] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880312ad7d0 [ 81.818780][ T189] FS: 0000000000000000(0000) GS:ffff888123b88000(0000) knlGS:0000000000000000 [ 81.827690][ T189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.834258][ T189] CR2: 000055f4a87cdf50 CR3: 0000000026087000 CR4: 00000000003526f0 [ 81.842212][ T189] Call Trace: [ 81.845469][ T189] [ 81.848380][ T189] __wake_up+0x31/0x60 [ 81.852438][ T189] __vb2_queue_cancel+0x348/0xe90 [ 81.857455][ T189] ? __pfx_device_del+0x10/0x10 [ 81.862303][ T189] ? kobject_put+0xb9/0x640 [ 81.866800][ T189] vb2_core_queue_release+0x27/0x190 [ 81.872095][ T189] vb2_video_unregister_device+0x152/0x2e0 [ 81.877895][ T189] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 81.883264][ T189] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 81.888623][ T189] em28xx_init_extension+0x13a/0x200 [ 81.893891][ T189] request_module_async+0x1e/0x30 [ 81.898897][ T189] process_one_work+0xac7/0x1b10 [ 81.903822][ T189] ? irqentry_exit+0x24d/0xa10 [ 81.908572][ T189] ? __pfx_process_one_work+0x10/0x10 [ 81.913933][ T189] ? __pfx_request_module_async+0x10/0x10 [ 81.919636][ T189] worker_thread+0x5ef/0xe50 [ 81.924218][ T189] ? __pfx_worker_thread+0x10/0x10 [ 81.929333][ T189] ? kthread+0x13a/0x450 [ 81.933565][ T189] ? __pfx_worker_thread+0x10/0x10 [ 81.938665][ T189] kthread+0x373/0x450 [ 81.942725][ T189] ? __pfx_kthread+0x10/0x10 [ 81.947298][ T189] ret_from_fork+0x730/0xd60 [ 81.951866][ T189] ? __pfx_ret_from_fork+0x10/0x10 [ 81.957044][ T189] ? __switch_to+0x800/0x10f0 [ 81.961706][ T189] ? __pfx_kthread+0x10/0x10 [ 81.966294][ T189] ret_from_fork_asm+0x1a/0x30 [ 81.971042][ T189] [ 81.974038][ T189] Modules linked in: [ 81.977913][ T189] ---[ end trace 0000000000000000 ]--- [ 81.983341][ T189] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 81.988882][ T189] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 82.008482][ T189] RSP: 0018:ffffc9000311f9a0 EFLAGS: 00010046 [ 82.014534][ T189] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 82.022511][ T189] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8880312ad790 [ 82.030459][ T189] RBP: ffff8880312ad790 R08: 0000000000000000 R09: fffff52000623f2b [ 82.038408][ T189] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000003 [ 82.046356][ T189] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880312ad7d0 [ 82.054317][ T189] FS: 0000000000000000(0000) GS:ffff888123b88000(0000) knlGS:0000000000000000 [ 82.063226][ T189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.069792][ T189] CR2: 000055f4a87cdf50 CR3: 0000000026087000 CR4: 00000000003526f0 [ 82.077748][ T189] Kernel panic - not syncing: Fatal exception [ 82.083996][ T189] Kernel Offset: disabled [ 82.088292][ T189] Rebooting in 86400 seconds..