Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. 2026/03/29 15:04:54 parsed 1 programs [ 57.720514][ T29] audit: type=1400 audit(1774796694.428:62): avc: denied { node_bind } for pid=2966 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 57.742666][ T29] audit: type=1400 audit(1774796694.428:63): avc: denied { module_request } for pid=2966 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 60.760164][ T29] audit: type=1400 audit(1774796697.468:64): avc: denied { mounton } for pid=2976 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.786820][ T29] audit: type=1400 audit(1774796697.498:65): avc: denied { mount } for pid=2976 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.800447][ T2976] cgroup: Unknown subsys name 'net' [ 60.818189][ T29] audit: type=1400 audit(1774796697.528:66): avc: denied { unmount } for pid=2976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.938290][ T2976] cgroup: Unknown subsys name 'cpuset' [ 60.948464][ T2976] cgroup: Unknown subsys name 'rlimit' [ 61.139297][ T29] audit: type=1400 audit(1774796697.848:67): avc: denied { setattr } for pid=2976 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.165515][ T29] audit: type=1400 audit(1774796697.848:68): avc: denied { create } for pid=2976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.187091][ T29] audit: type=1400 audit(1774796697.848:69): avc: denied { write } for pid=2976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.208053][ T29] audit: type=1400 audit(1774796697.848:70): avc: denied { read } for pid=2976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.242871][ T29] audit: type=1400 audit(1774796697.948:71): avc: denied { sys_module } for pid=2976 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.380870][ T2980] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 61.470301][ T2976] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.095766][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 63.095791][ T29] audit: type=1400 audit(1774796699.798:80): avc: denied { execmem } for pid=2982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 63.162722][ T29] audit: type=1400 audit(1774796699.868:81): avc: denied { read } for pid=2983 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.232844][ T29] audit: type=1400 audit(1774796699.868:82): avc: denied { open } for pid=2983 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.281940][ T29] audit: type=1400 audit(1774796699.868:83): avc: denied { mounton } for pid=2983 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.304896][ T29] audit: type=1400 audit(1774796699.918:84): avc: denied { create } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.350436][ T29] audit: type=1400 audit(1774796700.058:85): avc: denied { create } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.395240][ T29] audit: type=1400 audit(1774796700.078:86): avc: denied { mounton } for pid=2983 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.424445][ T29] audit: type=1400 audit(1774796700.088:87): avc: denied { mounton } for pid=2987 comm="syz-executor" path="/root/syzkaller.5HaBFG/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 63.465196][ T29] audit: type=1400 audit(1774796700.088:88): avc: denied { mount } for pid=2987 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.523507][ T29] audit: type=1400 audit(1774796700.088:89): avc: denied { mounton } for pid=2987 comm="syz-executor" path="/root/syzkaller.5HaBFG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.747600][ T2987] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. 2026/03/29 15:05:17 executed programs: 0 [ 81.439183][ T3024] syz-executor (3024) used greatest stack depth: 23032 bytes left [ 86.486172][ T3724] modprobe (3724) used greatest stack depth: 21928 bytes left 2026/03/29 15:06:09 executed programs: 10 [ 133.239529][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 133.239585][ T29] audit: type=1400 audit(1774796769.948:105): avc: denied { read write } for pid=5752 comm="syz.1.18" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.324782][ T29] audit: type=1400 audit(1774796769.998:106): avc: denied { open } for pid=5752 comm="syz.1.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.349175][ T29] audit: type=1400 audit(1774796769.998:107): avc: denied { ioctl } for pid=5752 comm="syz.1.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.565873][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.665909][ T2275] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.755229][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 133.763547][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 133.774514][ T10] usb 2-1: config 0 has no interface number 0 [ 133.780805][ T10] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.791481][ T10] usb 2-1: config 0 interface 89 has no altsetting 0 [ 133.800767][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 133.810538][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.820130][ T10] usb 2-1: Product: syz [ 133.824525][ T10] usb 2-1: Manufacturer: syz [ 133.829340][ T10] usb 2-1: SerialNumber: syz [ 133.835147][ T2275] usb 5-1: Using ep0 maxpacket: 32 [ 133.845181][ T5762] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.853200][ T2275] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 133.861439][ T10] usb 2-1: config 0 descriptor?? [ 133.868074][ T2275] usb 5-1: config 0 has no interface number 0 [ 133.879224][ T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 133.889988][ T2275] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.899965][ T10] em28xx 2-1:0.89: Video interface 89 found: [ 133.907228][ T2275] usb 5-1: config 0 interface 89 has no altsetting 0 [ 133.917966][ T2275] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 133.927282][ T2275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.936931][ T2275] usb 5-1: Product: syz [ 133.941213][ T2275] usb 5-1: Manufacturer: syz [ 133.946055][ T5770] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 133.954463][ T2275] usb 5-1: SerialNumber: syz [ 133.962715][ T2275] usb 5-1: config 0 descriptor?? [ 133.974809][ T2275] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 133.975354][ T28] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 133.984781][ T2275] em28xx 5-1:0.89: Video interface 89 found: [ 134.015495][ T5762] usb 1-1: Using ep0 maxpacket: 32 [ 134.022088][ T5762] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 134.031387][ T5762] usb 1-1: config 0 has no interface number 0 [ 134.037797][ T5762] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.048137][ T5762] usb 1-1: config 0 interface 89 has no altsetting 0 [ 134.058048][ T5762] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 134.067249][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.075430][ T5762] usb 1-1: Product: syz [ 134.079677][ T5762] usb 1-1: Manufacturer: syz [ 134.084369][ T5762] usb 1-1: SerialNumber: syz [ 134.096125][ T5762] usb 1-1: config 0 descriptor?? [ 134.112244][ T5762] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 134.122050][ T5770] usb 8-1: Using ep0 maxpacket: 32 [ 134.128741][ T5762] em28xx 1-1:0.89: Video interface 89 found: [ 134.136703][ T5770] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 134.144864][ T5770] usb 8-1: config 0 has no interface number 0 [ 134.146581][ T28] usb 7-1: Using ep0 maxpacket: 32 [ 134.153966][ T10] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 134.161956][ T28] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 134.166314][ T5770] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.172803][ T28] usb 7-1: config 0 has no interface number 0 [ 134.187722][ T5770] usb 8-1: config 0 interface 89 has no altsetting 0 [ 134.197360][ T5770] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 134.197377][ T28] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.197417][ T28] usb 7-1: config 0 interface 89 has no altsetting 0 [ 134.208994][ T5770] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.239014][ T28] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 134.248896][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.256370][ T5770] usb 8-1: Product: syz [ 134.258657][ T28] usb 7-1: Product: syz [ 134.263800][ T2275] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 134.266227][ T28] usb 7-1: Manufacturer: syz [ 134.271973][ T5770] usb 8-1: Manufacturer: syz [ 134.277258][ T28] usb 7-1: SerialNumber: syz [ 134.294222][ T10] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 134.301416][ T28] usb 7-1: config 0 descriptor?? [ 134.308676][ T5770] usb 8-1: SerialNumber: syz [ 134.314146][ T10] em28xx 2-1:0.89: board has no eeprom [ 134.324479][ T5770] usb 8-1: config 0 descriptor?? [ 134.334242][ T28] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 134.339303][ T5770] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 134.353871][ T5770] em28xx 8-1:0.89: Video interface 89 found: [ 134.362093][ T28] em28xx 7-1:0.89: Video interface 89 found: [ 134.362650][ T2275] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 134.377838][ T5762] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 134.386948][ T10] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 134.395593][ T2275] em28xx 5-1:0.89: board has no eeprom [ 134.401251][ T10] em28xx 2-1:0.89: analog set to bulk mode. [ 134.409820][ T5772] em28xx 2-1:0.89: Registering V4L2 extension [ 134.437347][ T10] usb 2-1: USB disconnect, device number 2 [ 134.459004][ T5762] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 134.469370][ T10] em28xx 2-1:0.89: Disconnecting em28xx [ 134.475232][ T2275] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 134.492747][ T5762] em28xx 1-1:0.89: board has no eeprom [ 134.499766][ T2275] em28xx 5-1:0.89: analog set to bulk mode. [ 134.522985][ T2275] usb 5-1: USB disconnect, device number 2 [ 134.543042][ T2275] em28xx 5-1:0.89: Disconnecting em28xx [ 134.549353][ T5772] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 134.565165][ T5772] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 134.577717][ T5762] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 134.579086][ T28] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 134.589712][ T5772] em28xx 2-1:0.89: No AC97 audio processor [ 134.598249][ T5762] em28xx 1-1:0.89: analog set to bulk mode. [ 134.604504][ T5770] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 134.641446][ T5762] usb 1-1: USB disconnect, device number 2 [ 134.656150][ T5772] usb 2-1: Decoder not found [ 134.660841][ T5772] em28xx 2-1:0.89: failed to create media graph [ 134.684322][ T5770] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 134.697808][ T28] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 134.710155][ T5772] em28xx 2-1:0.89: V4L2 device video0 deregistered [ 134.723091][ T5770] em28xx 8-1:0.89: board has no eeprom [ 134.733794][ T5772] em28xx 2-1:0.89: Registering snapshot button... [ 134.745300][ T28] em28xx 7-1:0.89: board has no eeprom [ 134.757298][ T5762] em28xx 1-1:0.89: Disconnecting em28xx [ 134.772109][ T5772] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input5 [ 134.799778][ T5772] em28xx 2-1:0.89: Remote control support is not available for this card. [ 134.808900][ T5770] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 134.816274][ T5770] em28xx 8-1:0.89: analog set to bulk mode. [ 134.819331][ T28] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 134.824562][ T10] em28xx 2-1:0.89: Closing input extension [ 134.846641][ T5770] usb 8-1: USB disconnect, device number 2 [ 134.852901][ T10] em28xx 2-1:0.89: Deregistering snapshot button [ 134.869790][ T28] em28xx 7-1:0.89: analog set to bulk mode. [ 134.878191][ T5770] em28xx 8-1:0.89: Disconnecting em28xx [ 134.913242][ T28] usb 7-1: USB disconnect, device number 2 [ 134.924834][ T28] em28xx 7-1:0.89: Disconnecting em28xx [ 134.936726][ T5777] em28xx 5-1:0.89: Registering V4L2 extension [ 134.979224][ T10] em28xx 2-1:0.89: Freeing device [ 134.998589][ T5777] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 135.017743][ T5777] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 135.025699][ T5777] em28xx 5-1:0.89: No AC97 audio processor [ 135.035508][ T5777] usb 5-1: Decoder not found [ 135.055113][ T5777] em28xx 5-1:0.89: failed to create media graph [ 135.061562][ T5777] em28xx 5-1:0.89: V4L2 device video0 deregistered [ 135.108256][ T5777] em28xx 5-1:0.89: Registering snapshot button... [ 135.117193][ T5777] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input6 [ 135.151172][ T5777] em28xx 5-1:0.89: Remote control support is not available for this card. [ 135.175710][ T5779] em28xx 1-1:0.89: Registering V4L2 extension [ 135.231289][ T5779] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 135.241722][ T5779] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 135.249349][ T5779] em28xx 1-1:0.89: No AC97 audio processor [ 135.257601][ T5779] usb 1-1: Decoder not found [ 135.262512][ T5779] em28xx 1-1:0.89: failed to create media graph [ 135.269261][ T5779] em28xx 1-1:0.89: V4L2 device video0 deregistered [ 135.278251][ T5779] em28xx 1-1:0.89: Registering snapshot button... [ 135.286906][ T5779] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input7 [ 135.297942][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.309046][ T5779] em28xx 1-1:0.89: Remote control support is not available for this card. [ 135.318754][ T5783] em28xx 8-1:0.89: Registering V4L2 extension [ 135.352080][ T5783] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 135.359622][ T5783] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 135.368889][ T5783] em28xx 8-1:0.89: No AC97 audio processor [ 135.377126][ T5783] usb 8-1: Decoder not found [ 135.381762][ T5783] em28xx 8-1:0.89: failed to create media graph [ 135.388336][ T5783] em28xx 8-1:0.89: V4L2 device video0 deregistered [ 135.400494][ T5783] em28xx 8-1:0.89: Registering snapshot button... [ 135.408642][ T5783] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input8 [ 135.420708][ T5783] em28xx 8-1:0.89: Remote control support is not available for this card. [ 135.430713][ T2815] em28xx 7-1:0.89: Registering V4L2 extension [ 135.455645][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 135.467197][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 135.477741][ T10] usb 2-1: config 0 has no interface number 0 [ 135.483934][ T10] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.493899][ T10] usb 2-1: config 0 interface 89 has no altsetting 0 [ 135.501043][ T2815] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 135.505365][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 135.509962][ T2815] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 135.517347][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.517386][ T10] usb 2-1: Product: syz [ 135.517409][ T10] usb 2-1: Manufacturer: syz [ 135.517433][ T10] usb 2-1: SerialNumber: syz [ 135.532037][ T10] usb 2-1: config 0 descriptor?? [ 135.541885][ T2815] em28xx 7-1:0.89: No AC97 audio processor [ 135.562855][ T2815] usb 7-1: Decoder not found [ 135.567663][ T2815] em28xx 7-1:0.89: failed to create media graph [ 135.570090][ T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 135.575148][ T2815] em28xx 7-1:0.89: V4L2 device video0 deregistered [ 135.585884][ T10] em28xx 2-1:0.89: Video interface 89 found: [ 135.598063][ T2815] em28xx 7-1:0.89: Registering snapshot button... [ 135.607407][ T2815] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input9 [ 135.620011][ T2815] em28xx 7-1:0.89: Remote control support is not available for this card. [ 135.630513][ T2275] em28xx 5-1:0.89: Closing input extension [ 135.637229][ T2275] em28xx 5-1:0.89: Deregistering snapshot button [ 135.649120][ T5762] em28xx 1-1:0.89: Closing input extension [ 135.656279][ T5762] em28xx 1-1:0.89: Deregistering snapshot button [ 135.657867][ T2275] em28xx 5-1:0.89: Freeing device [ 135.678210][ T5770] em28xx 8-1:0.89: Closing input extension [ 135.685337][ T5770] em28xx 8-1:0.89: Deregistering snapshot button [ 135.698405][ T5762] em28xx 1-1:0.89: Freeing device [ 135.736340][ T28] em28xx 7-1:0.89: Closing input extension [ 135.753174][ T28] em28xx 7-1:0.89: Deregistering snapshot button [ 135.763660][ T5770] em28xx 8-1:0.89: Freeing device [ 135.823433][ T28] em28xx 7-1:0.89: Freeing device [ 135.830780][ T10] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 135.907619][ T10] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 135.916330][ T10] em28xx 2-1:0.89: board has no eeprom [ 135.975191][ T10] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 135.982832][ T10] em28xx 2-1:0.89: analog set to bulk mode. [ 135.989277][ T5783] em28xx 2-1:0.89: Registering V4L2 extension [ 136.005116][ T2275] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.015475][ T10] usb 2-1: USB disconnect, device number 3 [ 136.023119][ T10] em28xx 2-1:0.89: Disconnecting em28xx [ 136.028869][ T5762] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 136.094327][ T5783] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 136.103233][ T5783] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 136.111129][ T5770] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 136.119271][ T5783] em28xx 2-1:0.89: No AC97 audio processor [ 136.135240][ T5783] usb 2-1: Decoder not found [ 136.144027][ T5783] em28xx 2-1:0.89: failed to create media graph [ 136.151714][ T5783] em28xx 2-1:0.89: V4L2 device video0 deregistered [ 136.160145][ T5783] em28xx 2-1:0.89: Registering snapshot button... [ 136.169989][ T5783] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input10 [ 136.179120][ T28] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 136.190078][ T5783] em28xx 2-1:0.89: Remote control support is not available for this card. [ 136.199918][ T10] em28xx 2-1:0.89: Closing input extension [ 136.207692][ T2275] usb 5-1: Using ep0 maxpacket: 32 [ 136.214517][ T5762] usb 1-1: Using ep0 maxpacket: 32 [ 136.220727][ T10] em28xx 2-1:0.89: Deregistering snapshot button [ 136.229231][ T2275] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 136.237598][ T2275] usb 5-1: config 0 has no interface number 0 [ 136.244025][ T5762] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 136.252488][ T5762] usb 1-1: config 0 has no interface number 0 [ 136.264890][ T2275] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.275249][ T5770] usb 8-1: Using ep0 maxpacket: 32 [ 136.282895][ T5762] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.298226][ T5770] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 136.308724][ T10] em28xx 2-1:0.89: Freeing device [ 136.322732][ T5770] usb 8-1: config 0 has no interface number 0 [ 136.329173][ T2275] usb 5-1: config 0 interface 89 has no altsetting 0 [ 136.336081][ T5762] usb 1-1: config 0 interface 89 has no altsetting 0 [ 136.343324][ T5770] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.356706][ T5770] usb 8-1: config 0 interface 89 has no altsetting 0 [ 136.370452][ T2275] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 136.381386][ T5762] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 136.393693][ T2275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.395313][ T28] usb 7-1: Using ep0 maxpacket: 32 [ 136.402478][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.415540][ T2275] usb 5-1: Product: syz [ 136.419915][ T2275] usb 5-1: Manufacturer: syz [ 136.434648][ T28] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 136.434670][ T5770] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 136.456183][ T5762] usb 1-1: Product: syz [ 136.461091][ T2275] usb 5-1: SerialNumber: syz [ 136.463372][ T28] usb 7-1: config 0 has no interface number 0 [ 136.475619][ T28] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.485426][ T5762] usb 1-1: Manufacturer: syz [ 136.490496][ T5762] usb 1-1: SerialNumber: syz [ 136.500417][ T2275] usb 5-1: config 0 descriptor?? [ 136.514311][ T5762] usb 1-1: config 0 descriptor?? [ 136.517526][ T28] usb 7-1: config 0 interface 89 has no altsetting 0 [ 136.519803][ T5770] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.534899][ T5770] usb 8-1: Product: syz [ 136.541058][ T5770] usb 8-1: Manufacturer: syz [ 136.546765][ T5770] usb 8-1: SerialNumber: syz [ 136.555519][ T5762] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 136.565546][ T28] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 136.572921][ T2275] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 136.587588][ T5762] em28xx 1-1:0.89: Video interface 89 found: [ 136.593910][ T5770] usb 8-1: config 0 descriptor?? [ 136.599038][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.599072][ T28] usb 7-1: Product: syz [ 136.599094][ T28] usb 7-1: Manufacturer: syz [ 136.599117][ T28] usb 7-1: SerialNumber: syz [ 136.621967][ T2275] em28xx 5-1:0.89: Video interface 89 found: [ 136.635290][ T5770] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 136.636526][ T28] usb 7-1: config 0 descriptor?? [ 136.655264][ T5770] em28xx 8-1:0.89: Video interface 89 found: [ 136.662747][ T28] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 136.672960][ T28] em28xx 7-1:0.89: Video interface 89 found: [ 136.675602][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.795995][ T5762] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 136.815633][ T2275] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 136.835184][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 136.843264][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 136.851930][ T10] usb 2-1: config 0 has no interface number 0 [ 136.858550][ T10] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.872081][ T10] usb 2-1: config 0 interface 89 has no altsetting 0 [ 136.879936][ T5762] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 136.888754][ T5770] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 136.897302][ T5762] em28xx 1-1:0.89: board has no eeprom [ 136.903925][ T2275] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 136.913314][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 136.923416][ T2275] em28xx 5-1:0.89: board has no eeprom [ 136.929047][ T28] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 136.929089][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.943604][ T10] usb 2-1: Product: syz [ 136.948176][ T10] usb 2-1: Manufacturer: syz [ 136.953065][ T10] usb 2-1: SerialNumber: syz [ 136.960870][ T10] usb 2-1: config 0 descriptor?? [ 136.972146][ T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 136.985998][ T10] em28xx 2-1:0.89: Video interface 89 found: [ 136.993693][ T5770] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 137.002638][ T5770] em28xx 8-1:0.89: board has no eeprom [ 137.008434][ T2275] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 137.013284][ T28] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 137.015892][ T5762] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 137.025937][ T28] em28xx 7-1:0.89: board has no eeprom [ 137.034049][ T2275] em28xx 5-1:0.89: analog set to bulk mode. [ 137.043082][ T5783] em28xx 5-1:0.89: Registering V4L2 extension [ 137.052082][ T5762] em28xx 1-1:0.89: analog set to bulk mode. [ 137.064110][ T2275] usb 5-1: USB disconnect, device number 3 [ 137.090377][ T5762] usb 1-1: USB disconnect, device number 3 [ 137.105129][ T5770] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 137.107671][ T28] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 137.112409][ T5770] em28xx 8-1:0.89: analog set to bulk mode. [ 137.134085][ T28] em28xx 7-1:0.89: analog set to bulk mode. [ 137.136507][ T5783] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 137.151329][ T5762] em28xx 1-1:0.89: Disconnecting em28xx [ 137.159791][ T2275] em28xx 5-1:0.89: Disconnecting em28xx [ 137.166180][ T5783] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 137.181075][ T5770] usb 8-1: USB disconnect, device number 3 [ 137.186642][ T28] usb 7-1: USB disconnect, device number 3 [ 137.194939][ T28] em28xx 7-1:0.89: Disconnecting em28xx [ 137.201142][ T5770] em28xx 8-1:0.89: Disconnecting em28xx [ 137.213769][ T5783] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 137.227563][ T5783] em28xx 5-1:0.89: No AC97 audio processor [ 137.236558][ T5783] usb 5-1: Decoder not found [ 137.241349][ T5783] em28xx 5-1:0.89: failed to create media graph [ 137.252968][ T5783] em28xx 5-1:0.89: V4L2 device video0 deregistered [ 137.265986][ T10] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 137.280613][ T5783] em28xx 5-1:0.89: Registering snapshot button... [ 137.306434][ T5783] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input11 [ 137.319546][ T5783] em28xx 5-1:0.89: Remote control support is not available for this card. [ 137.339487][ T10] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 137.351644][ T5777] em28xx 1-1:0.89: Registering V4L2 extension [ 137.365116][ T10] em28xx 2-1:0.89: board has no eeprom [ 137.421562][ T5777] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 137.429168][ T5777] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 137.439241][ T10] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 137.459589][ T5777] em28xx 1-1:0.89: No AC97 audio processor [ 137.474393][ T10] em28xx 2-1:0.89: analog set to bulk mode. [ 137.483357][ T5777] usb 1-1: Decoder not found [ 137.489289][ T5777] em28xx 1-1:0.89: failed to create media graph [ 137.498988][ T5777] em28xx 1-1:0.89: V4L2 device video0 deregistered [ 137.499872][ T10] usb 2-1: USB disconnect, device number 4 [ 137.514828][ T10] em28xx 2-1:0.89: Disconnecting em28xx [ 137.521887][ T5777] em28xx 1-1:0.89: Registering snapshot button... [ 137.530827][ T5777] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input12 [ 137.544452][ T5777] em28xx 1-1:0.89: Remote control support is not available for this card. [ 137.554905][ T5772] em28xx 8-1:0.89: Registering V4L2 extension [ 137.612353][ T5772] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 137.620458][ T5772] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 137.627817][ T5772] em28xx 8-1:0.89: No AC97 audio processor [ 137.636099][ T5772] usb 8-1: Decoder not found [ 137.640836][ T5772] em28xx 8-1:0.89: failed to create media graph [ 137.647497][ T5772] em28xx 8-1:0.89: V4L2 device video0 deregistered [ 137.656231][ T5772] em28xx 8-1:0.89: Registering snapshot button... [ 137.663964][ T5772] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input13 [ 137.676718][ T5772] em28xx 8-1:0.89: Remote control support is not available for this card. [ 137.685690][ T5770] em28xx 8-1:0.89: Closing input extension [ 137.691948][ T5770] em28xx 8-1:0.89: Deregistering snapshot button [ 137.703829][ T2815] em28xx 7-1:0.89: Registering V4L2 extension [ 137.713695][ T5770] em28xx 8-1:0.89: Freeing device [ 137.786235][ T2815] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 137.793634][ T2815] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 137.804323][ T2815] em28xx 7-1:0.89: No AC97 audio processor [ 137.812931][ T2815] usb 7-1: Decoder not found [ 137.818063][ T2815] em28xx 7-1:0.89: failed to create media graph [ 137.824521][ T2815] em28xx 7-1:0.89: V4L2 device video0 deregistered [ 137.832839][ T2815] em28xx 7-1:0.89: Registering snapshot button... [ 137.844117][ T2815] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input14 [ 137.857059][ T2815] em28xx 7-1:0.89: Remote control support is not available for this card. [ 137.866701][ T28] em28xx 7-1:0.89: Closing input extension [ 137.872928][ T28] em28xx 7-1:0.89: Deregistering snapshot button [ 137.891587][ T2275] em28xx 5-1:0.89: Closing input extension [ 137.898643][ T2275] em28xx 5-1:0.89: Deregistering snapshot button [ 137.905605][ T28] em28xx 7-1:0.89: Freeing device [ 137.920257][ T5783] em28xx 2-1:0.89: Registering V4L2 extension [ 137.930432][ T2275] em28xx 5-1:0.89: Freeing device [ 138.008367][ T5783] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 138.018706][ T5783] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 138.026455][ T5770] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 138.034564][ T5783] em28xx 2-1:0.89: No AC97 audio processor [ 138.044236][ T5783] usb 2-1: Decoder not found [ 138.049875][ T5783] em28xx 2-1:0.89: failed to create media graph [ 138.056419][ T5783] em28xx 2-1:0.89: V4L2 device video0 deregistered [ 138.066023][ T5783] em28xx 2-1:0.89: Registering snapshot button... [ 138.075413][ T5783] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input15 [ 138.089386][ T5783] em28xx 2-1:0.89: Remote control support is not available for this card. [ 138.098188][ T5762] em28xx 1-1:0.89: Closing input extension [ 138.104064][ T5762] em28xx 1-1:0.89: Deregistering snapshot button [ 138.117580][ T10] em28xx 2-1:0.89: Closing input extension [ 138.125689][ T10] em28xx 2-1:0.89: Deregistering snapshot button [ 138.134381][ T5762] em28xx 1-1:0.89: Freeing device [ 138.162404][ T10] em28xx 2-1:0.89: Freeing device [ 138.189690][ T5770] usb 8-1: Using ep0 maxpacket: 32 [ 138.210401][ T5770] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 138.225178][ T5770] usb 8-1: config 0 has no interface number 0 [ 138.225944][ T28] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 138.240443][ T5770] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.254367][ T5770] usb 8-1: config 0 interface 89 has no altsetting 0 [ 138.262365][ T2275] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.276235][ T5770] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 138.285775][ T5770] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.293841][ T5770] usb 8-1: Product: syz [ 138.298706][ T5770] usb 8-1: Manufacturer: syz [ 138.303364][ T5770] usb 8-1: SerialNumber: syz [ 138.313180][ T5770] usb 8-1: config 0 descriptor?? [ 138.323393][ T5770] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 138.334082][ T5770] em28xx 8-1:0.89: Video interface 89 found: [ 138.395130][ T28] usb 7-1: Using ep0 maxpacket: 32 [ 138.401998][ T28] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 138.410278][ T28] usb 7-1: config 0 has no interface number 0 [ 138.416940][ T28] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.417859][ T2275] usb 5-1: Using ep0 maxpacket: 32 [ 138.427121][ T28] usb 7-1: config 0 interface 89 has no altsetting 0 [ 138.444581][ T28] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 138.454113][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.458037][ T5762] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.462190][ T28] usb 7-1: Product: syz [ 138.475459][ T28] usb 7-1: Manufacturer: syz [ 138.480226][ T28] usb 7-1: SerialNumber: syz [ 138.485541][ T2275] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 138.494358][ T28] usb 7-1: config 0 descriptor?? [ 138.494766][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.509614][ T28] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 138.519650][ T28] em28xx 7-1:0.89: Video interface 89 found: [ 138.528424][ T2275] usb 5-1: config 0 has no interface number 0 [ 138.545253][ T2275] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.565128][ T2275] usb 5-1: config 0 interface 89 has no altsetting 0 [ 138.587259][ T2275] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 138.598143][ T5770] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 138.615068][ T2275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.635138][ T2275] usb 5-1: Product: syz [ 138.639410][ T2275] usb 5-1: Manufacturer: syz [ 138.644297][ T2275] usb 5-1: SerialNumber: syz [ 138.665167][ T2275] usb 5-1: config 0 descriptor?? [ 138.677368][ T5770] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 138.685793][ T5762] usb 1-1: Using ep0 maxpacket: 32 [ 138.694640][ T2275] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 138.715320][ T5770] em28xx 8-1:0.89: board has no eeprom [ 138.723501][ T5762] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 138.735094][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 138.740405][ T2275] em28xx 5-1:0.89: Video interface 89 found: [ 138.755381][ T5762] usb 1-1: config 0 has no interface number 0 [ 138.761804][ T5762] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.775162][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 138.779347][ T28] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 138.783448][ T10] usb 2-1: config 0 has no interface number 0 [ 138.795958][ T5770] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 138.803655][ T5770] em28xx 8-1:0.89: analog set to bulk mode. [ 138.825093][ T5762] usb 1-1: config 0 interface 89 has no altsetting 0 [ 138.833465][ T5777] em28xx 8-1:0.89: Registering V4L2 extension [ 138.840268][ T10] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.856005][ T5770] usb 8-1: USB disconnect, device number 4 [ 138.871861][ T5762] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 138.881268][ T10] usb 2-1: config 0 interface 89 has no altsetting 0 [ 138.891124][ T5770] em28xx 8-1:0.89: Disconnecting em28xx [ 138.896857][ T28] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 138.905005][ T28] em28xx 7-1:0.89: board has no eeprom [ 138.905083][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.927036][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 138.936525][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.944957][ T10] usb 2-1: Product: syz [ 138.944997][ T10] usb 2-1: Manufacturer: syz [ 138.955373][ T5762] usb 1-1: Product: syz [ 138.959795][ T2275] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 138.974720][ T5762] usb 1-1: Manufacturer: syz [ 138.982881][ T10] usb 2-1: SerialNumber: syz [ 138.995224][ T5762] usb 1-1: SerialNumber: syz [ 139.012000][ T10] usb 2-1: config 0 descriptor?? [ 139.018376][ T5762] usb 1-1: config 0 descriptor?? [ 139.025108][ T28] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 139.040948][ T5762] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 139.050685][ T28] em28xx 7-1:0.89: analog set to bulk mode. [ 139.058637][ T5777] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 139.066025][ T5777] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 139.077733][ T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 139.087487][ T2275] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 139.096072][ T5777] em28xx 8-1:0.89: No AC97 audio processor 2026/03/29 15:06:15 executed programs: 26 [ 139.112765][ T2275] em28xx 5-1:0.89: board has no eeprom [ 139.118604][ T10] em28xx 2-1:0.89: Video interface 89 found: [ 139.126078][ T28] usb 7-1: USB disconnect, device number 4 [ 139.135256][ T5762] em28xx 1-1:0.89: Video interface 89 found: [ 139.142042][ T5777] usb 8-1: Decoder not found [ 139.147235][ T5777] em28xx 8-1:0.89: failed to create media graph [ 139.161688][ T28] em28xx 7-1:0.89: Disconnecting em28xx [ 139.173274][ T5777] em28xx 8-1:0.89: V4L2 device video0 deregistered [ 139.192325][ T5777] em28xx 8-1:0.89: Registering snapshot button... [ 139.205147][ T2275] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 139.214965][ T5777] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input16 [ 139.235539][ T2275] em28xx 5-1:0.89: analog set to bulk mode. [ 139.258967][ T5777] em28xx 8-1:0.89: Remote control support is not available for this card. [ 139.273830][ T2275] usb 5-1: USB disconnect, device number 4 [ 139.295703][ T5762] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 139.304525][ T2815] em28xx 7-1:0.89: Registering V4L2 extension [ 139.312158][ T10] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 139.327319][ T2275] em28xx 5-1:0.89: Disconnecting em28xx [ 139.382829][ T2815] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 139.407472][ T5762] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 139.411719][ T2815] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 139.425150][ T10] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 139.433604][ T5762] em28xx 1-1:0.89: board has no eeprom [ 139.443759][ T10] em28xx 2-1:0.89: board has no eeprom [ 139.461376][ T2815] em28xx 7-1:0.89: No AC97 audio processor [ 139.486965][ T2815] usb 7-1: Decoder not found [ 139.497631][ T2815] em28xx 7-1:0.89: failed to create media graph [ 139.505099][ T5762] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 139.514275][ T2815] em28xx 7-1:0.89: V4L2 device video0 deregistered [ 139.516813][ T5762] em28xx 1-1:0.89: analog set to bulk mode. [ 139.527023][ T10] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 139.534292][ T10] em28xx 2-1:0.89: analog set to bulk mode. [ 139.541219][ T2815] em28xx 7-1:0.89: Registering snapshot button... [ 139.565164][ T2815] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input17 [ 139.575909][ T5762] usb 1-1: USB disconnect, device number 4 [ 139.580387][ T5762] em28xx 1-1:0.89: Disconnecting em28xx [ 139.595439][ T10] usb 2-1: USB disconnect, device number 5 [ 139.606162][ T2815] em28xx 7-1:0.89: Remote control support is not available for this card. [ 139.618628][ T10] em28xx 2-1:0.89: Disconnecting em28xx [ 139.622401][ T28] em28xx 7-1:0.89: Closing input extension [ 139.632296][ T28] em28xx 7-1:0.89: Deregistering snapshot button [ 139.651491][ T5772] em28xx 5-1:0.89: Registering V4L2 extension [ 139.664330][ T28] em28xx 7-1:0.89: Freeing device [ 139.732785][ T5772] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 139.744631][ T5772] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 139.775960][ T5772] em28xx 5-1:0.89: No AC97 audio processor [ 139.793392][ T5772] usb 5-1: Decoder not found [ 139.798189][ T5772] em28xx 5-1:0.89: failed to create media graph [ 139.804940][ T5772] em28xx 5-1:0.89: V4L2 device video0 deregistered [ 139.824996][ T5772] em28xx 5-1:0.89: Registering snapshot button... [ 139.836184][ T5772] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input18 [ 139.849979][ T5772] em28xx 5-1:0.89: Remote control support is not available for this card. [ 139.859301][ T2275] em28xx 5-1:0.89: Closing input extension [ 139.866745][ T2275] em28xx 5-1:0.89: Deregistering snapshot button [ 139.878009][ T5770] em28xx 8-1:0.89: Closing input extension [ 139.884092][ T5770] em28xx 8-1:0.89: Deregistering snapshot button [ 139.893504][ T2275] em28xx 5-1:0.89: Freeing device [ 139.903392][ T5783] em28xx 1-1:0.89: Registering V4L2 extension [ 139.912708][ T5770] em28xx 8-1:0.89: Freeing device [ 140.000408][ T5783] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 140.008878][ T5783] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 140.017199][ T5783] em28xx 1-1:0.89: No AC97 audio processor [ 140.017209][ T28] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 140.032339][ T5783] usb 1-1: Decoder not found [ 140.037823][ T5783] em28xx 1-1:0.89: failed to create media graph [ 140.044237][ T5783] em28xx 1-1:0.89: V4L2 device video0 deregistered [ 140.053872][ T5783] em28xx 1-1:0.89: Registering snapshot button... [ 140.063150][ T5783] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input19 [ 140.076937][ T5783] em28xx 1-1:0.89: Remote control support is not available for this card. [ 140.086435][ T5779] em28xx 2-1:0.89: Registering V4L2 extension [ 140.139109][ T5779] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 140.150475][ T5779] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 140.163719][ T5779] em28xx 2-1:0.89: No AC97 audio processor [ 140.172919][ T5779] usb 2-1: Decoder not found [ 140.178344][ T5779] em28xx 2-1:0.89: failed to create media graph [ 140.185340][ T5779] em28xx 2-1:0.89: V4L2 device video0 deregistered [ 140.193872][ T5779] em28xx 2-1:0.89: Registering snapshot button... [ 140.203918][ T5779] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input20 [ 140.218094][ T5779] em28xx 2-1:0.89: Remote control support is not available for this card. [ 140.221919][ T28] usb 7-1: Using ep0 maxpacket: 32 [ 140.229898][ T2275] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.240099][ T5762] em28xx 1-1:0.89: Closing input extension [ 140.247387][ T5762] em28xx 1-1:0.89: Deregistering snapshot button [ 140.247896][ T28] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 140.255600][ T5770] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 140.275164][ T28] usb 7-1: config 0 has no interface number 0 [ 140.275562][ T10] em28xx 2-1:0.89: Closing input extension [ 140.281373][ T28] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.281555][ T28] usb 7-1: config 0 interface 89 has no altsetting 0 [ 140.300757][ T5762] em28xx 1-1:0.89: Freeing device [ 140.311505][ T10] em28xx 2-1:0.89: Deregistering snapshot button [ 140.327377][ T28] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 140.341571][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.351562][ T28] usb 7-1: Product: syz [ 140.357084][ T10] em28xx 2-1:0.89: Freeing device [ 140.363238][ T28] usb 7-1: Manufacturer: syz [ 140.368151][ T28] usb 7-1: SerialNumber: syz [ 140.381419][ T28] usb 7-1: config 0 descriptor?? [ 140.395573][ T2275] usb 5-1: Using ep0 maxpacket: 32 [ 140.406301][ T2275] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 140.421064][ T2275] usb 5-1: config 0 has no interface number 0 [ 140.430590][ T2275] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.442458][ T2275] usb 5-1: config 0 interface 89 has no altsetting 0 [ 140.444352][ T28] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 140.469112][ T28] em28xx 7-1:0.89: Video interface 89 found: [ 140.470983][ T5770] usb 8-1: Using ep0 maxpacket: 32 [ 140.485679][ T2275] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 140.513070][ T2275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.524966][ T5770] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 140.535089][ T2275] usb 5-1: Product: syz [ 140.539493][ T2275] usb 5-1: Manufacturer: syz [ 140.544344][ T5770] usb 8-1: config 0 has no interface number 0 [ 140.552548][ T2275] usb 5-1: SerialNumber: syz [ 140.557404][ T5770] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.571075][ T2275] usb 5-1: config 0 descriptor?? [ 140.577148][ T5770] usb 8-1: config 0 interface 89 has no altsetting 0 [ 140.589111][ T2275] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 140.603229][ T5770] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 140.613716][ T5770] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.622169][ T2275] em28xx 5-1:0.89: Video interface 89 found: [ 140.628715][ T5770] usb 8-1: Product: syz [ 140.632958][ T5770] usb 8-1: Manufacturer: syz [ 140.639126][ T5762] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.646944][ T5770] usb 8-1: SerialNumber: syz [ 140.655512][ T28] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 140.669267][ T5770] usb 8-1: config 0 descriptor?? [ 140.685097][ T5770] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 140.695291][ T5770] em28xx 8-1:0.89: Video interface 89 found: [ 140.727704][ T28] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 140.736018][ T28] em28xx 7-1:0.89: board has no eeprom [ 140.738230][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.795674][ T28] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 140.805386][ T28] em28xx 7-1:0.89: analog set to bulk mode. [ 140.815823][ T5762] usb 1-1: Using ep0 maxpacket: 32 [ 140.829984][ T1119] em28xx 7-1:0.89: Registering V4L2 extension [ 140.836982][ T5762] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 140.855593][ T5762] usb 1-1: config 0 has no interface number 0 [ 140.861393][ T28] usb 7-1: USB disconnect, device number 5 [ 140.873725][ T5762] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.886671][ T2275] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 140.895992][ T28] em28xx 7-1:0.89: Disconnecting em28xx [ 140.913314][ T5762] usb 1-1: config 0 interface 89 has no altsetting 0 [ 140.920629][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 140.932820][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 140.947832][ T5762] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 140.958947][ T1119] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 140.965512][ T10] usb 2-1: config 0 has no interface number 0 [ 140.968142][ T1119] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 140.974397][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.983558][ T1119] em28xx 7-1:0.89: No AC97 audio processor [ 140.991096][ T5770] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 141.001575][ T1119] usb 7-1: Decoder not found [ 141.007904][ T2275] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 141.018190][ T10] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.021615][ T1119] em28xx 7-1:0.89: failed to create media graph [ 141.029917][ T2275] em28xx 5-1:0.89: board has no eeprom [ 141.041417][ T10] usb 2-1: config 0 interface 89 has no altsetting 0 [ 141.049400][ T5762] usb 1-1: Product: syz [ 141.054050][ T5762] usb 1-1: Manufacturer: syz [ 141.055463][ T1119] em28xx 7-1:0.89: V4L2 device video0 deregistered [ 141.063721][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 141.074804][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.077629][ T5832] ================================================================== [ 141.087070][ T5762] usb 1-1: SerialNumber: syz [ 141.091538][ T5832] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 141.097753][ T10] usb 2-1: Product: syz [ 141.103649][ T5832] Read of size 8 at addr ffff888120ba8740 by task v4l_id/5832 [ 141.114614][ T10] usb 2-1: Manufacturer: syz [ 141.115330][ T5832] [ 141.115381][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 141.115495][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.115576][ T5832] Call Trace: [ 141.115619][ T5832] [ 141.115652][ T5832] dump_stack_lvl+0x100/0x190 [ 141.115773][ T5832] print_report+0x156/0x4c9 [ 141.115891][ T5832] ? __virt_addr_valid+0x81/0x620 [ 141.115975][ T5832] ? __phys_addr+0xe8/0x180 [ 141.116073][ T5832] ? v4l2_fh_init+0x27d/0x2c0 [ 141.116149][ T5832] kasan_report+0xdf/0x1e0 [ 141.116290][ T5832] ? v4l2_fh_init+0x27d/0x2c0 [ 141.116388][ T5832] v4l2_fh_init+0x27d/0x2c0 [ 141.116469][ T5832] v4l2_fh_open+0x64/0xa0 [ 141.116547][ T5832] em28xx_v4l2_open+0x11e/0x570 [ 141.116667][ T5832] v4l2_open+0x1d2/0x490 [ 141.116743][ T5832] ? __pfx_v4l2_open+0x10/0x10 [ 141.116819][ T5832] chrdev_open+0x234/0x6a0 [ 141.116944][ T5832] ? __pfx_chrdev_open+0x10/0x10 [ 141.117059][ T5832] ? path_get+0x61/0x80 [ 141.117162][ T5832] do_dentry_open+0x68b/0x14b0 [ 141.117248][ T5832] ? __pfx_chrdev_open+0x10/0x10 [ 141.117362][ T5832] ? inode_permission+0x374/0x620 [ 141.117485][ T5832] vfs_open+0x82/0x3f0 [ 141.117592][ T5832] ? may_open+0x1f3/0x410 [ 141.117713][ T5832] path_openat+0x208c/0x31a0 [ 141.117832][ T5832] ? __pfx_path_openat+0x10/0x10 [ 141.117941][ T5832] do_file_open+0x20e/0x430 [ 141.118040][ T5832] ? __pfx_do_file_open+0x10/0x10 [ 141.118178][ T5832] ? alloc_fd+0x42a/0x730 [ 141.118308][ T5832] ? do_getname+0x191/0x390 [ 141.118452][ T5832] do_sys_openat2+0x10d/0x1e0 [ 141.118569][ T5832] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.118700][ T5832] __x64_sys_openat+0x12d/0x210 [ 141.118819][ T5832] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.118941][ T5832] ? do_user_addr_fault+0x3e3/0x11d0 [ 141.119083][ T5832] do_syscall_64+0x106/0x7b0 [ 141.119177][ T5832] ? irqentry_exit+0x117/0x620 [ 141.119306][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.119394][ T5832] RIP: 0033:0x7f344cadb407 [ 141.119468][ T5832] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 141.119546][ T5832] RSP: 002b:00007ffd1c372f50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 141.119634][ T5832] RAX: ffffffffffffffda RBX: 00007f344c9ed880 RCX: 00007f344cadb407 [ 141.119696][ T5832] RDX: 0000000000000000 RSI: 00007ffd1c373f26 RDI: ffffffffffffff9c [ 141.119767][ T5832] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 141.119819][ T5832] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 141.119864][ T5832] R13: 00007ffd1c3731a0 R14: 00007f344d271000 R15: 0000556fec3cf4d8 [ 141.119934][ T5832] [ 141.119964][ T5832] [ 141.120792][ T10] usb 2-1: SerialNumber: syz [ 141.122482][ T5832] Allocated by task 1119: [ 141.140075][ T5770] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 141.141877][ T5832] kasan_save_stack+0x30/0x50 [ 141.145743][ T5770] em28xx 8-1:0.89: board has no eeprom [ 141.148385][ T5832] kasan_save_track+0x14/0x30 [ 141.148434][ T5832] __kasan_kmalloc+0x8f/0xa0 [ 141.175357][ T2275] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 141.176426][ T5832] em28xx_v4l2_init.cold+0x94/0x3503 [ 141.181159][ T2275] em28xx 5-1:0.89: analog set to bulk mode. [ 141.185758][ T5832] em28xx_init_extension+0x13a/0x200 [ 141.185808][ T5832] request_module_async+0x61/0x80 [ 141.185837][ T5832] process_one_work+0xa23/0x19a0 [ 141.225529][ T5770] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 141.228604][ T5832] worker_thread+0x5ef/0xe50 [ 141.234634][ T5770] em28xx 8-1:0.89: analog set to bulk mode. [ 141.237896][ T5832] kthread+0x370/0x450 [ 141.237935][ T5832] ret_from_fork+0x6c3/0xcb0 [ 141.293634][ T10] usb 2-1: config 0 descriptor?? [ 141.296502][ T5832] ret_from_fork_asm+0x1a/0x30 [ 141.296561][ T5832] [ 141.296570][ T5832] Freed by task 1119: [ 141.296586][ T5832] kasan_save_stack+0x30/0x50 [ 141.314551][ T5762] usb 1-1: config 0 descriptor?? [ 141.316399][ T5832] kasan_save_track+0x14/0x30 [ 141.316447][ T5832] kasan_save_free_info+0x3b/0x70 [ 141.371856][ T5770] usb 8-1: USB disconnect, device number 5 [ 141.376855][ T5832] __kasan_slab_free+0x43/0x70 [ 141.376909][ T5832] kfree+0x1dc/0x640 [ 141.390731][ T2275] usb 5-1: USB disconnect, device number 5 [ 141.395966][ T5832] kref_put.isra.0+0x56/0x90 [ 141.396018][ T5832] em28xx_v4l2_init.cold+0x280/0x3503 [ 141.396060][ T5832] em28xx_init_extension+0x13a/0x200 [ 141.417391][ T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 141.419610][ T5832] request_module_async+0x61/0x80 [ 141.440031][ T2275] em28xx 5-1:0.89: Disconnecting em28xx [ 141.441557][ T5832] process_one_work+0xa23/0x19a0 [ 141.586457][ T5832] worker_thread+0x5ef/0xe50 [ 141.591119][ T5832] kthread+0x370/0x450 [ 141.595332][ T5832] ret_from_fork+0x6c3/0xcb0 [ 141.599993][ T5832] ret_from_fork_asm+0x1a/0x30 [ 141.604852][ T5832] [ 141.607302][ T5832] The buggy address belongs to the object at ffff888120ba8000 [ 141.607302][ T5832] which belongs to the cache kmalloc-8k of size 8192 [ 141.621916][ T5832] The buggy address is located 1856 bytes inside of [ 141.621916][ T5832] freed 8192-byte region [ffff888120ba8000, ffff888120baa000) [ 141.636117][ T5832] [ 141.638483][ T5832] The buggy address belongs to the physical page: [ 141.644938][ T5832] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120ba8 [ 141.653859][ T5832] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 141.662422][ T5832] flags: 0x200000000000040(head|node=0|zone=2) [ 141.668660][ T5832] page_type: f5(slab) [ 141.672748][ T5832] raw: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122 [ 141.681396][ T5832] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 141.690125][ T5832] head: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122 [ 141.698855][ T5832] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 141.707577][ T5832] head: 0200000000000003 ffffea000482ea01 00000000ffffffff 00000000ffffffff [ 141.716377][ T5832] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 141.725081][ T5832] page dumped because: kasan: bad access detected [ 141.731562][ T5832] page_owner tracks the page as allocated [ 141.737316][ T5832] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2893, tgid 2893 (dhcpcd), ts 26541795658, free_ts 0 [ 141.756733][ T5832] post_alloc_hook+0x153/0x170 [ 141.761636][ T5832] get_page_from_freelist+0xf10/0x39f0 [ 141.767158][ T5832] __alloc_frozen_pages_noprof+0x273/0x2860 [ 141.773108][ T5832] new_slab+0xa6/0x6c0 [ 141.777336][ T5832] refill_objects+0x26b/0x400 [ 141.782074][ T5832] __pcs_replace_empty_main+0x1ab/0x660 [ 141.787671][ T5832] __kmalloc_cache_noprof+0x52c/0x6b0 [ 141.793120][ T5832] audit_log_d_path+0xed/0x210 [ 141.797933][ T5832] audit_log_lsm_data+0x5bc/0x1fa0 [ 141.803105][ T5832] common_lsm_audit+0x229/0x2b0 [ 141.808017][ T5832] slow_avc_audit+0x186/0x210 [ 141.812757][ T5832] avc_has_extended_perms+0x9b7/0x1080 [ 141.818419][ T5832] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 141.824893][ T5832] selinux_file_ioctl+0x139/0x290 [ 141.830029][ T5832] security_file_ioctl+0x48/0x90 [ 141.835036][ T5832] __x64_sys_ioctl+0xb7/0x210 [ 141.839751][ T5832] page_owner free stack trace missing [ 141.845239][ T5832] [ 141.847759][ T5832] Memory state around the buggy address: [ 141.853519][ T5832] ffff888120ba8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.861784][ T5832] ffff888120ba8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.869871][ T5832] >ffff888120ba8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.877952][ T5832] ^ [ 141.884226][ T5832] ffff888120ba8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.892342][ T5832] ffff888120ba8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.900633][ T5832] ================================================================== [ 141.909608][ T1119] em28xx 7-1:0.89: Registering snapshot button... [ 141.914073][ T5770] em28xx 8-1:0.89: Disconnecting em28xx [ 141.920701][ T1119] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input21 [ 141.925186][ T10] em28xx 2-1:0.89: Video interface 89 found: [ 141.951048][ T5762] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 141.962280][ T5762] em28xx 1-1:0.89: Video interface 89 found: [ 141.970025][ T5832] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 141.977383][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 141.986492][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.996709][ T5832] Call Trace: [ 142.000029][ T5832] [ 142.003079][ T5832] dump_stack_lvl+0x100/0x190 [ 142.007934][ T5832] vpanic+0x552/0x970 [ 142.012690][ T5832] ? __pfx_vpanic+0x10/0x10 [ 142.017278][ T5832] ? v4l2_fh_init+0x27d/0x2c0 [ 142.022269][ T5832] panic+0xd1/0xe0 [ 142.026226][ T5832] ? __pfx_panic+0x10/0x10 [ 142.030935][ T5832] ? v4l2_fh_init+0x27d/0x2c0 [ 142.035859][ T5832] ? preempt_schedule_common+0x42/0xc0 [ 142.041390][ T5832] ? check_panic_on_warn+0x1f/0x90 [ 142.046541][ T5832] check_panic_on_warn.cold+0x19/0x34 [ 142.052078][ T5832] end_report.part.0+0x3a/0x90 [ 142.057229][ T5832] kasan_report.cold+0xe/0x18 [ 142.062054][ T5832] ? v4l2_fh_init+0x27d/0x2c0 [ 142.066855][ T5832] v4l2_fh_init+0x27d/0x2c0 [ 142.071774][ T5832] v4l2_fh_open+0x64/0xa0 [ 142.076261][ T5832] em28xx_v4l2_open+0x11e/0x570 [ 142.081265][ T5832] v4l2_open+0x1d2/0x490 [ 142.085579][ T5832] ? __pfx_v4l2_open+0x10/0x10 [ 142.091456][ T5832] chrdev_open+0x234/0x6a0 [ 142.095962][ T5832] ? __pfx_chrdev_open+0x10/0x10 [ 142.100983][ T5832] ? path_get+0x61/0x80 [ 142.105386][ T5832] do_dentry_open+0x68b/0x14b0 [ 142.110235][ T5832] ? __pfx_chrdev_open+0x10/0x10 [ 142.115228][ T5832] ? inode_permission+0x374/0x620 [ 142.120482][ T5832] vfs_open+0x82/0x3f0 [ 142.124857][ T5832] ? may_open+0x1f3/0x410 [ 142.129240][ T5832] path_openat+0x208c/0x31a0 [ 142.133890][ T5832] ? __pfx_path_openat+0x10/0x10 [ 142.138869][ T5832] do_file_open+0x20e/0x430 [ 142.143409][ T5832] ? __pfx_do_file_open+0x10/0x10 [ 142.148492][ T5832] ? alloc_fd+0x42a/0x730 [ 142.152858][ T5832] ? do_getname+0x191/0x390 [ 142.157450][ T5832] do_sys_openat2+0x10d/0x1e0 [ 142.162209][ T5832] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.167481][ T5832] __x64_sys_openat+0x12d/0x210 [ 142.172461][ T5832] ? __pfx___x64_sys_openat+0x10/0x10 [ 142.177908][ T5832] ? do_user_addr_fault+0x3e3/0x11d0 [ 142.183338][ T5832] do_syscall_64+0x106/0x7b0 [ 142.188198][ T5832] ? irqentry_exit+0x117/0x620 [ 142.193057][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.199190][ T5832] RIP: 0033:0x7f344cadb407 [ 142.203660][ T5832] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 142.223478][ T5832] RSP: 002b:00007ffd1c372f50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 142.231942][ T5832] RAX: ffffffffffffffda RBX: 00007f344c9ed880 RCX: 00007f344cadb407 [ 142.239973][ T5832] RDX: 0000000000000000 RSI: 00007ffd1c373f26 RDI: ffffffffffffff9c [ 142.247996][ T5832] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 142.256115][ T5832] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 142.264933][ T5832] R13: 00007ffd1c3731a0 R14: 00007f344d271000 R15: 0000556fec3cf4d8 [ 142.272988][ T5832] [ 142.276614][ T5832] Kernel Offset: disabled [ 142.281051][ T5832] Rebooting in 86400 seconds..