Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 41.595887][ T29] audit: type=1400 audit(1732547168.639:80): avc: denied { execmem } for pid=2960 comm="syz-executor240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 41.623420][ T29] audit: type=1400 audit(1732547168.649:81): avc: denied { read write } for pid=2962 comm="syz-executor240" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.647567][ T29] audit: type=1400 audit(1732547168.649:82): avc: denied { open } for pid=2962 comm="syz-executor240" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.671540][ T29] audit: type=1400 audit(1732547168.649:83): avc: denied { ioctl } for pid=2962 comm="syz-executor240" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.850425][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.860300][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.860300][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 41.860489][ T1114] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 41.950775][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 42.000349][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 42.007876][ T36] usb 1-1: config index 0 descriptor too short (expected 55, got 27) [ 42.016253][ T36] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 42.024528][ T36] usb 1-1: config 0 has no interface number 0 [ 42.030748][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 42.035991][ T36] usb 1-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 42.040315][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 42.046144][ T36] usb 1-1: config 0 interface 106 has no altsetting 0 [ 42.051255][ T1114] usb 4-1: Using ep0 maxpacket: 32 [ 42.060737][ T24] usb 2-1: config index 0 descriptor too short (expected 55, got 27) [ 42.065737][ T9] usb 5-1: config index 0 descriptor too short (expected 55, got 27) [ 42.071366][ T24] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 42.079449][ T9] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 42.087613][ T24] usb 2-1: config 0 has no interface number 0 [ 42.095909][ T9] usb 5-1: config 0 has no interface number 0 [ 42.102889][ T24] usb 2-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 42.109471][ T1114] usb 4-1: config index 0 descriptor too short (expected 55, got 27) [ 42.119054][ T24] usb 2-1: config 0 interface 106 has no altsetting 0 [ 42.127168][ T1114] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 42.136895][ T36] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 42.142285][ T1114] usb 4-1: config 0 has no interface number 0 [ 42.142494][ T9] usb 5-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 42.151549][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.158005][ T9] usb 5-1: config 0 interface 106 has no altsetting 0 [ 42.159286][ T1114] usb 4-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 42.169215][ T36] usb 1-1: Product: syz [ 42.177296][ T1114] usb 4-1: config 0 interface 106 has no altsetting 0 [ 42.184339][ T36] usb 1-1: Manufacturer: syz [ 42.195080][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 42.199284][ T36] usb 1-1: SerialNumber: syz [ 42.208457][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 42.216119][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 42.216291][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.221433][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.230583][ T9] usb 5-1: Product: syz [ 42.230612][ T9] usb 5-1: Manufacturer: syz [ 42.239712][ T24] usb 2-1: Product: syz [ 42.247831][ T9] usb 5-1: SerialNumber: syz [ 42.255995][ T24] usb 2-1: Manufacturer: syz [ 42.260356][ T8] usb 3-1: config index 0 descriptor too short (expected 55, got 27) [ 42.264948][ T24] usb 2-1: SerialNumber: syz [ 42.269328][ T8] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 42.279160][ T24] usb 2-1: config 0 descriptor?? [ 42.287418][ T8] usb 3-1: config 0 has no interface number 0 [ 42.289961][ T8] usb 3-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 42.293816][ T36] usb 1-1: config 0 descriptor?? [ 42.300650][ T8] usb 3-1: config 0 interface 106 has no altsetting 0 [ 42.313086][ T2962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 42.322218][ T2968] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 42.353510][ T9] usb 5-1: config 0 descriptor?? [ 42.358814][ T1114] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 42.359186][ T2967] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 42.368084][ T1114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.383335][ T1114] usb 4-1: Product: syz [ 42.387583][ T1114] usb 4-1: Manufacturer: syz [ 42.392601][ T1114] usb 4-1: SerialNumber: syz [ 42.399249][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 42.408632][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.416763][ T8] usb 3-1: Product: syz [ 42.421068][ T8] usb 3-1: Manufacturer: syz [ 42.425834][ T8] usb 3-1: SerialNumber: syz [ 42.433393][ T1114] usb 4-1: config 0 descriptor?? [ 42.439315][ T2970] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 42.442748][ T8] usb 3-1: config 0 descriptor?? [ 42.453782][ T2969] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 executing program executing program [ 42.542980][ T36] em28xx 1-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 42.553033][ T36] em28xx 1-1:0.106: Video interface 106 found: bulk [ 42.574188][ T24] em28xx 2-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 42.584939][ T24] em28xx 2-1:0.106: Video interface 106 found: bulk executing program [ 42.603090][ T9] em28xx 5-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 42.613813][ T9] em28xx 5-1:0.106: Video interface 106 found: bulk executing program executing program [ 42.650683][ T36] em28xx 1-1:0.106: unknown em28xx chip ID (0) [ 42.657740][ T24] em28xx 2-1:0.106: unknown em28xx chip ID (0) [ 42.679826][ T1114] em28xx 4-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 42.690358][ T1114] em28xx 4-1:0.106: Video interface 106 found: bulk [ 42.702287][ T8] em28xx 3-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 42.712588][ T8] em28xx 3-1:0.106: Video interface 106 found: bulk [ 42.719808][ T9] em28xx 5-1:0.106: unknown em28xx chip ID (0) [ 42.735309][ T24] em28xx 2-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 42.744147][ T24] em28xx 2-1:0.106: board has no eeprom [ 42.750750][ T36] em28xx 1-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 42.758962][ T36] em28xx 1-1:0.106: board has no eeprom [ 42.790772][ T1114] em28xx 4-1:0.106: unknown em28xx chip ID (0) [ 42.797345][ T8] em28xx 3-1:0.106: unknown em28xx chip ID (0) [ 42.805285][ T9] em28xx 5-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 42.814271][ T9] em28xx 5-1:0.106: board has no eeprom [ 42.820429][ T36] em28xx 1-1:0.106: Identified as Terratec Grabby (card=67) [ 42.827909][ T36] em28xx 1-1:0.106: analog set to bulk mode. [ 42.834651][ T2977] em28xx 1-1:0.106: Registering V4L2 extension [ 42.841438][ T24] em28xx 2-1:0.106: Identified as Terratec Grabby (card=67) [ 42.850808][ T24] em28xx 2-1:0.106: analog set to bulk mode. [ 42.871983][ T36] usb 1-1: USB disconnect, device number 2 [ 42.881346][ T24] usb 2-1: USB disconnect, device number 2 [ 42.883254][ T8] em28xx 3-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 42.889248][ T24] em28xx 2-1:0.106: Disconnecting em28xx [ 42.896945][ T8] em28xx 3-1:0.106: board has no eeprom [ 42.904066][ T36] em28xx 1-1:0.106: Disconnecting em28xx [ 42.910400][ T1114] em28xx 4-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 42.924344][ T1114] em28xx 4-1:0.106: board has no eeprom [ 42.930366][ T9] em28xx 5-1:0.106: Identified as Terratec Grabby (card=67) [ 42.933869][ T2977] em28xx 1-1:0.106: Config register raw data: 0xffffffed [ 42.937800][ T9] em28xx 5-1:0.106: analog set to bulk mode. [ 42.945001][ T9] usb 5-1: USB disconnect, device number 2 [ 42.945582][ T2977] em28xx 1-1:0.106: AC97 chip type couldn't be determined [ 42.953608][ T9] em28xx 5-1:0.106: Disconnecting em28xx [ 42.957729][ T2977] em28xx 1-1:0.106: No AC97 audio processor [ 42.981460][ T2977] usb 1-1: Decoder not found [ 42.986242][ T2977] em28xx 1-1:0.106: failed to create media graph [ 42.999240][ T2977] em28xx 1-1:0.106: V4L2 device video0 deregistered [ 43.008700][ T2977] em28xx 1-1:0.106: Registering snapshot button... [ 43.010317][ T8] em28xx 3-1:0.106: Identified as Terratec Grabby (card=67) [ 43.017962][ T2977] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.106/input/input6 [ 43.022863][ T8] em28xx 3-1:0.106: analog set to bulk mode. [ 43.036186][ T2977] em28xx 1-1:0.106: Remote control support is not available for this card. [ 43.039971][ T1114] em28xx 4-1:0.106: Identified as Terratec Grabby (card=67) [ 43.049298][ T2991] em28xx 2-1:0.106: Registering V4L2 extension [ 43.056990][ T1114] em28xx 4-1:0.106: analog set to bulk mode. [ 43.080789][ T8] usb 3-1: USB disconnect, device number 2 [ 43.088864][ T1114] usb 4-1: USB disconnect, device number 2 [ 43.103441][ T1114] em28xx 4-1:0.106: Disconnecting em28xx [ 43.110496][ T8] em28xx 3-1:0.106: Disconnecting em28xx [ 43.124200][ T2991] em28xx 2-1:0.106: Config register raw data: 0xffffffed [ 43.131664][ T2991] em28xx 2-1:0.106: AC97 chip type couldn't be determined [ 43.138951][ T2991] em28xx 2-1:0.106: No AC97 audio processor [ 43.146752][ T2991] usb 2-1: Decoder not found [ 43.151743][ T2991] em28xx 2-1:0.106: failed to create media graph [ 43.158143][ T2991] em28xx 2-1:0.106: V4L2 device video0 deregistered [ 43.165826][ T2991] em28xx 2-1:0.106: Registering snapshot button... [ 43.173263][ T2991] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.106/input/input7 [ 43.185312][ T2991] em28xx 2-1:0.106: Remote control support is not available for this card. [ 43.194324][ T2976] em28xx 5-1:0.106: Registering V4L2 extension [ 43.223036][ T2976] em28xx 5-1:0.106: Config register raw data: 0xffffffed [ 43.230356][ T2976] em28xx 5-1:0.106: AC97 chip type couldn't be determined [ 43.237602][ T2976] em28xx 5-1:0.106: No AC97 audio processor [ 43.245390][ T2976] usb 5-1: Decoder not found [ 43.250039][ T2976] em28xx 5-1:0.106: failed to create media graph [ 43.256843][ T2976] em28xx 5-1:0.106: V4L2 device video0 deregistered [ 43.264810][ T2976] em28xx 5-1:0.106: Registering snapshot button... [ 43.272294][ T2976] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.106/input/input8 [ 43.283961][ T2976] em28xx 5-1:0.106: Remote control support is not available for this card. [ 43.292975][ T36] em28xx 1-1:0.106: Closing input extension [ 43.299734][ T36] em28xx 1-1:0.106: Deregistering snapshot button [ 43.311223][ T2993] em28xx 3-1:0.106: Registering V4L2 extension [ 43.315099][ T36] em28xx 1-1:0.106: Freeing device [ 43.352487][ T2993] em28xx 3-1:0.106: Config register raw data: 0xffffffed [ 43.359579][ T2993] em28xx 3-1:0.106: AC97 chip type couldn't be determined [ 43.367237][ T2993] em28xx 3-1:0.106: No AC97 audio processor [ 43.376190][ T2993] usb 3-1: Decoder not found [ 43.380960][ T2993] em28xx 3-1:0.106: failed to create media graph [ 43.388266][ T2993] em28xx 3-1:0.106: V4L2 device video0 deregistered [ 43.396561][ T2993] em28xx 3-1:0.106: Registering snapshot button... [ 43.405185][ T2993] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.106/input/input9 [ 43.417251][ T2993] em28xx 3-1:0.106: Remote control support is not available for this card. [ 43.426551][ T2995] em28xx 4-1:0.106: Registering V4L2 extension [ 43.453847][ T2995] em28xx 4-1:0.106: Config register raw data: 0xffffffed [ 43.461044][ T2995] em28xx 4-1:0.106: AC97 chip type couldn't be determined [ 43.468292][ T2995] em28xx 4-1:0.106: No AC97 audio processor [ 43.475666][ T2995] usb 4-1: Decoder not found [ 43.480464][ T2995] em28xx 4-1:0.106: failed to create media graph [ 43.486843][ T2995] em28xx 4-1:0.106: V4L2 device video0 deregistered [ 43.495486][ T2995] em28xx 4-1:0.106: Registering snapshot button... [ 43.503269][ T2995] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.106/input/input10 [ 43.514965][ T2995] em28xx 4-1:0.106: Remote control support is not available for this card. [ 43.525189][ T24] em28xx 2-1:0.106: Closing input extension [ 43.531761][ T24] em28xx 2-1:0.106: Deregistering snapshot button [ 43.542492][ T9] em28xx 5-1:0.106: Closing input extension [ 43.544313][ T24] em28xx 2-1:0.106: Freeing device [ 43.549924][ T9] em28xx 5-1:0.106: Deregistering snapshot button [ 43.566261][ T8] em28xx 3-1:0.106: Closing input extension [ 43.573661][ T8] em28xx 3-1:0.106: Deregistering snapshot button [ 43.583680][ T9] em28xx 5-1:0.106: Freeing device [ 43.609882][ T1114] em28xx 4-1:0.106: Closing input extension [ 43.617959][ T1114] em28xx 4-1:0.106: Deregistering snapshot button [ 43.627405][ T8] em28xx 3-1:0.106: Freeing device [ 43.630378][ T36] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 43.650030][ T1114] em28xx 4-1:0.106: Freeing device [ 43.790342][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 43.797326][ T36] usb 1-1: config index 0 descriptor too short (expected 55, got 27) [ 43.805840][ T36] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 43.814395][ T36] usb 1-1: config 0 has no interface number 0 [ 43.821118][ T36] usb 1-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 43.831800][ T36] usb 1-1: config 0 interface 106 has no altsetting 0 [ 43.842513][ T36] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 43.852236][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.860360][ T36] usb 1-1: Product: syz [ 43.866751][ T36] usb 1-1: Manufacturer: syz [ 43.872064][ T36] usb 1-1: SerialNumber: syz [ 43.878667][ T36] usb 1-1: config 0 descriptor?? [ 43.883940][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 43.892684][ T2980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.900718][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.970332][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 43.978013][ T1114] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 44.040473][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 44.050123][ T24] usb 2-1: config index 0 descriptor too short (expected 55, got 27) [ 44.059493][ T24] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 44.068079][ T24] usb 2-1: config 0 has no interface number 0 [ 44.070277][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 44.074578][ T24] usb 2-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 44.083133][ T9] usb 5-1: config index 0 descriptor too short (expected 55, got 27) [ 44.091492][ T24] usb 2-1: config 0 interface 106 has no altsetting 0 [ 44.094655][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 44.099893][ T9] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 44.099933][ T9] usb 5-1: config 0 has no interface number 0 [ 44.107063][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.118143][ T9] usb 5-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 44.125106][ T24] usb 2-1: Product: syz [ 44.125137][ T24] usb 2-1: Manufacturer: syz [ 44.125164][ T24] usb 2-1: SerialNumber: syz [ 44.131687][ T9] usb 5-1: config 0 interface 106 has no altsetting 0 [ 44.144269][ T24] usb 2-1: config 0 descriptor?? [ 44.150708][ T1114] usb 4-1: Using ep0 maxpacket: 32 [ 44.155683][ T2981] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 executing program [ 44.159293][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 44.188263][ T36] em28xx 1-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 44.198864][ T8] usb 3-1: config index 0 descriptor too short (expected 55, got 27) [ 44.205673][ T36] em28xx 1-1:0.106: Video interface 106 found: bulk [ 44.224296][ T8] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 44.233628][ T8] usb 3-1: config 0 has no interface number 0 [ 44.242367][ T8] usb 3-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 44.253276][ T8] usb 3-1: config 0 interface 106 has no altsetting 0 [ 44.261545][ T1114] usb 4-1: config index 0 descriptor too short (expected 55, got 27) [ 44.270913][ T1114] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 44.271328][ T36] em28xx 1-1:0.106: unknown em28xx chip ID (0) [ 44.279306][ T1114] usb 4-1: config 0 has no interface number 0 [ 44.279425][ T1114] usb 4-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 44.304525][ T1114] usb 4-1: config 0 interface 106 has no altsetting 0 [ 44.312961][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 44.322887][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.331480][ T9] usb 5-1: Product: syz [ 44.335711][ T9] usb 5-1: Manufacturer: syz executing program [ 44.340525][ T9] usb 5-1: SerialNumber: syz [ 44.344175][ T36] em28xx 1-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 44.351109][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 44.353619][ T36] em28xx 1-1:0.106: board has no eeprom [ 44.363327][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.379555][ T8] usb 3-1: Product: syz [ 44.383869][ T8] usb 3-1: Manufacturer: syz [ 44.388611][ T8] usb 3-1: SerialNumber: syz [ 44.394722][ T24] em28xx 2-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 44.395389][ T9] usb 5-1: config 0 descriptor?? [ 44.405000][ T24] em28xx 2-1:0.106: Video interface 106 found: bulk [ 44.410262][ T1114] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 44.426000][ T1114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.434097][ T1114] usb 4-1: Product: syz [ 44.438296][ T1114] usb 4-1: Manufacturer: syz [ 44.442995][ T1114] usb 4-1: SerialNumber: syz [ 44.448177][ T2983] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 44.451158][ T8] usb 3-1: config 0 descriptor?? [ 44.461186][ T2988] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 44.470318][ T36] em28xx 1-1:0.106: Identified as Terratec Grabby (card=67) [ 44.472160][ T1114] usb 4-1: config 0 descriptor?? [ 44.477783][ T36] em28xx 1-1:0.106: analog set to bulk mode. [ 44.484151][ T2989] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 44.489702][ T2991] em28xx 1-1:0.106: Registering V4L2 extension [ 44.504705][ T24] em28xx 2-1:0.106: unknown em28xx chip ID (0) [ 44.523712][ T36] usb 1-1: USB disconnect, device number 3 [ 44.530624][ T36] em28xx 1-1:0.106: Disconnecting em28xx [ 44.552723][ T2991] em28xx 1-1:0.106: Config register raw data: 0xffffffed [ 44.559876][ T2991] em28xx 1-1:0.106: AC97 chip type couldn't be determined [ 44.567515][ T2991] em28xx 1-1:0.106: No AC97 audio processor [ 44.576731][ T24] em28xx 2-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 44.585061][ T24] em28xx 2-1:0.106: board has no eeprom [ 44.588610][ T29] audit: type=1400 audit(1732547171.629:84): avc: denied { remove_name } for pid=2842 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.592624][ T2991] usb 1-1: Decoder not found [ 44.613387][ T29] audit: type=1400 audit(1732547171.629:85): avc: denied { rename } for pid=2842 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.617994][ T2991] em28xx 1-1:0.106: failed to create media graph executing program [ 44.618701][ T2991] em28xx 1-1:0.106: V4L2 device video0 deregistered [ 44.654129][ T24] em28xx 2-1:0.106: Identified as Terratec Grabby (card=67) [ 44.661565][ T24] em28xx 2-1:0.106: analog set to bulk mode. [ 44.668478][ T2991] em28xx 1-1:0.106: Registering snapshot button... [ 44.674706][ T9] em28xx 5-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 44.681880][ T2991] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.106/input/input11 [ 44.685010][ T9] em28xx 5-1:0.106: Video interface 106 found: bulk executing program [ 44.710146][ T8] em28xx 3-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 44.720245][ T8] em28xx 3-1:0.106: Video interface 106 found: bulk [ 44.735744][ T1114] em28xx 4-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 44.744301][ T24] usb 2-1: USB disconnect, device number 3 [ 44.745966][ T1114] em28xx 4-1:0.106: Video interface 106 found: bulk executing program [ 44.751842][ T2991] em28xx 1-1:0.106: Remote control support is not available for this card. [ 44.767195][ T2977] em28xx 2-1:0.106: Registering V4L2 extension [ 44.775327][ T24] em28xx 2-1:0.106: Disconnecting em28xx [ 44.797021][ T2977] em28xx 2-1:0.106: Config register raw data: 0xffffffed [ 44.804452][ T2977] em28xx 2-1:0.106: AC97 chip type couldn't be determined [ 44.811807][ T2977] em28xx 2-1:0.106: No AC97 audio processor [ 44.818791][ T2977] usb 2-1: Decoder not found [ 44.821600][ T8] em28xx 3-1:0.106: unknown em28xx chip ID (0) [ 44.823609][ T2977] em28xx 2-1:0.106: failed to create media graph [ 44.829702][ T9] em28xx 5-1:0.106: unknown em28xx chip ID (0) [ 44.836079][ T2977] em28xx 2-1:0.106: V4L2 device video0 deregistered [ 44.838245][ T2977] em28xx 2-1:0.106: Registering snapshot button... [ 44.844277][ T1114] em28xx 4-1:0.106: unknown em28xx chip ID (0) [ 44.851143][ T2977] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.106/input/input12 [ 44.874495][ T2977] em28xx 2-1:0.106: Remote control support is not available for this card. [ 44.883408][ T36] em28xx 1-1:0.106: Closing input extension [ 44.889391][ T36] em28xx 1-1:0.106: Deregistering snapshot button [ 44.898742][ T24] em28xx 2-1:0.106: Closing input extension [ 44.904764][ T24] em28xx 2-1:0.106: Deregistering snapshot button [ 44.912368][ T8] em28xx 3-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 44.913884][ T36] em28xx 1-1:0.106: Freeing device [ 44.920944][ T8] em28xx 3-1:0.106: board has no eeprom [ 44.935217][ T9] em28xx 5-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 44.935531][ T24] em28xx 2-1:0.106: Freeing device [ 44.944058][ T9] em28xx 5-1:0.106: board has no eeprom [ 44.954923][ T1114] em28xx 4-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 44.963366][ T1114] em28xx 4-1:0.106: board has no eeprom [ 45.030365][ T9] em28xx 5-1:0.106: Identified as Terratec Grabby (card=67) [ 45.037751][ T9] em28xx 5-1:0.106: analog set to bulk mode. [ 45.043947][ T2995] em28xx 5-1:0.106: Registering V4L2 extension [ 45.050236][ T8] em28xx 3-1:0.106: Identified as Terratec Grabby (card=67) [ 45.057814][ T8] em28xx 3-1:0.106: analog set to bulk mode. [ 45.064330][ T1114] em28xx 4-1:0.106: Identified as Terratec Grabby (card=67) [ 45.071736][ T1114] em28xx 4-1:0.106: analog set to bulk mode. [ 45.080752][ T9] usb 5-1: USB disconnect, device number 3 [ 45.087405][ T9] em28xx 5-1:0.106: Disconnecting em28xx [ 45.097282][ T1114] usb 4-1: USB disconnect, device number 3 [ 45.104801][ T8] usb 3-1: USB disconnect, device number 3 [ 45.111652][ T1114] em28xx 4-1:0.106: Disconnecting em28xx [ 45.117427][ T2995] em28xx 5-1:0.106: Config register raw data: 0xffffffed [ 45.124562][ T2995] em28xx 5-1:0.106: AC97 chip type couldn't be determined [ 45.131884][ T2995] em28xx 5-1:0.106: No AC97 audio processor [ 45.138827][ T8] em28xx 3-1:0.106: Disconnecting em28xx [ 45.146074][ T2995] usb 5-1: Decoder not found [ 45.150779][ T2995] em28xx 5-1:0.106: failed to create media graph [ 45.157181][ T2995] em28xx 5-1:0.106: V4L2 device video0 deregistered [ 45.164988][ T2995] em28xx 5-1:0.106: Registering snapshot button... [ 45.172652][ T2995] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.106/input/input13 [ 45.185180][ T2995] em28xx 5-1:0.106: Remote control support is not available for this card. [ 45.193999][ T9] em28xx 5-1:0.106: Closing input extension [ 45.200017][ T9] em28xx 5-1:0.106: Deregistering snapshot button [ 45.209244][ T2993] em28xx 3-1:0.106: Registering V4L2 extension [ 45.217751][ T9] em28xx 5-1:0.106: Freeing device [ 45.220397][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.240798][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 45.250137][ T2993] em28xx 3-1:0.106: Config register raw data: 0xffffffed [ 45.257441][ T2993] em28xx 3-1:0.106: AC97 chip type couldn't be determined [ 45.265342][ T2993] em28xx 3-1:0.106: No AC97 audio processor [ 45.273087][ T2993] usb 3-1: Decoder not found [ 45.277731][ T2993] em28xx 3-1:0.106: failed to create media graph [ 45.284222][ T2993] em28xx 3-1:0.106: V4L2 device video0 deregistered [ 45.292214][ T2993] em28xx 3-1:0.106: Registering snapshot button... [ 45.299659][ T2993] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.106/input/input14 [ 45.312430][ T2993] em28xx 3-1:0.106: Remote control support is not available for this card. [ 45.321740][ T2976] em28xx 4-1:0.106: Registering V4L2 extension [ 45.348973][ T2976] em28xx 4-1:0.106: Config register raw data: 0xffffffed [ 45.356163][ T2976] em28xx 4-1:0.106: AC97 chip type couldn't be determined [ 45.363433][ T2976] em28xx 4-1:0.106: No AC97 audio processor [ 45.371396][ T2976] usb 4-1: Decoder not found [ 45.376082][ T2976] em28xx 4-1:0.106: failed to create media graph [ 45.383898][ T2976] em28xx 4-1:0.106: V4L2 device video0 deregistered [ 45.390312][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 45.392143][ T2976] em28xx 4-1:0.106: Registering snapshot button... [ 45.395959][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 45.404372][ T2976] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.106/input/input15 [ 45.411041][ T36] usb 1-1: config index 0 descriptor too short (expected 55, got 27) [ 45.421976][ T2976] em28xx 4-1:0.106: Remote control support is not available for this card. [ 45.426265][ T36] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 45.434909][ T8] em28xx 3-1:0.106: Closing input extension [ 45.443084][ T36] usb 1-1: config 0 has no interface number 0 [ 45.443539][ T24] usb 2-1: config index 0 descriptor too short (expected 55, got 27) [ 45.450143][ T8] em28xx 3-1:0.106: Deregistering snapshot button [ 45.455238][ T24] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 45.478187][ T24] usb 2-1: config 0 has no interface number 0 [ 45.484494][ T36] usb 1-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 45.494630][ T36] usb 1-1: config 0 interface 106 has no altsetting 0 [ 45.501566][ T24] usb 2-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 45.511710][ T24] usb 2-1: config 0 interface 106 has no altsetting 0 [ 45.521096][ T36] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 45.521838][ T1114] em28xx 4-1:0.106: Closing input extension [ 45.530282][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.537163][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.544376][ T36] usb 1-1: Product: syz [ 45.552177][ T1114] em28xx 4-1:0.106: Deregistering snapshot button [ 45.556079][ T36] usb 1-1: Manufacturer: syz [ 45.564982][ T8] em28xx 3-1:0.106: Freeing device [ 45.567236][ T36] usb 1-1: SerialNumber: syz [ 45.577613][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 45.587232][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.595319][ T24] usb 2-1: Product: syz [ 45.599516][ T24] usb 2-1: Manufacturer: syz [ 45.604183][ T24] usb 2-1: SerialNumber: syz [ 45.611793][ T36] usb 1-1: config 0 descriptor?? [ 45.614890][ T1114] em28xx 4-1:0.106: Freeing device [ 45.617225][ T3001] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.631632][ T24] usb 2-1: config 0 descriptor?? [ 45.637164][ T3002] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 45.730277][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 45.737125][ T9] usb 5-1: config index 0 descriptor too short (expected 55, got 27) [ 45.745401][ T9] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 45.753700][ T9] usb 5-1: config 0 has no interface number 0 [ 45.760691][ T9] usb 5-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 45.770795][ T9] usb 5-1: config 0 interface 106 has no altsetting 0 [ 45.779901][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 45.789080][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.797302][ T9] usb 5-1: Product: syz [ 45.801574][ T9] usb 5-1: Manufacturer: syz [ 45.806307][ T9] usb 5-1: SerialNumber: syz [ 45.814207][ T9] usb 5-1: config 0 descriptor?? [ 45.819762][ T3005] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 executing program executing program [ 45.842318][ T36] em28xx 1-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 45.852306][ T36] em28xx 1-1:0.106: Video interface 106 found: bulk [ 45.865142][ T24] em28xx 2-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) [ 45.875082][ T24] em28xx 2-1:0.106: Video interface 106 found: bulk [ 45.891176][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 45.910782][ T36] em28xx 1-1:0.106: unknown em28xx chip ID (0) [ 45.940585][ T24] em28xx 2-1:0.106: unknown em28xx chip ID (0) [ 45.960439][ T1114] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 45.971989][ T36] em28xx 1-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 45.980352][ T36] em28xx 1-1:0.106: board has no eeprom [ 46.001911][ T24] em28xx 2-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 46.010405][ T24] em28xx 2-1:0.106: board has no eeprom [ 46.036883][ T9] em28xx 5-1:0.106: New device syz syz @ 480 Mbps (0ccd:0096, interface 106, class 106) executing program [ 46.040527][ T36] em28xx 1-1:0.106: Identified as Terratec Grabby (card=67) [ 46.046861][ T9] em28xx 5-1:0.106: Video interface 106 found: bulk [ 46.054311][ T36] em28xx 1-1:0.106: analog set to bulk mode. [ 46.062812][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 46.067117][ T2977] em28xx 1-1:0.106: Registering V4L2 extension [ 46.077859][ T8] usb 3-1: config index 0 descriptor too short (expected 55, got 27) [ 46.078606][ T24] em28xx 2-1:0.106: Identified as Terratec Grabby (card=67) [ 46.086795][ T8] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 46.086838][ T8] usb 3-1: config 0 has no interface number 0 [ 46.091246][ T8] usb 3-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 46.094523][ T24] em28xx 2-1:0.106: analog set to bulk mode. [ 46.104082][ T8] usb 3-1: config 0 interface 106 has no altsetting 0 [ 46.125554][ T24] usb 2-1: USB disconnect, device number 4 [ 46.135706][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 46.143609][ T36] usb 1-1: USB disconnect, device number 4 [ 46.148762][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.162839][ T8] usb 3-1: Product: syz [ 46.167162][ T8] usb 3-1: Manufacturer: syz [ 46.171884][ T8] usb 3-1: SerialNumber: syz [ 46.173403][ T24] em28xx 2-1:0.106: Disconnecting em28xx [ 46.180290][ T1114] usb 4-1: Using ep0 maxpacket: 32 [ 46.192652][ T9] em28xx 5-1:0.106: unknown em28xx chip ID (0) [ 46.201855][ T36] em28xx 1-1:0.106: Disconnecting em28xx [ 46.220328][ T1114] usb 4-1: config index 0 descriptor too short (expected 55, got 27) [ 46.222259][ T2977] em28xx 1-1:0.106: Config register raw data: 0xffffffed [ 46.228482][ T1114] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 46.228520][ T1114] usb 4-1: config 0 has no interface number 0 [ 46.228568][ T1114] usb 4-1: config 0 interface 106 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 46.235903][ T2977] em28xx 1-1:0.106: AC97 chip type couldn't be determined [ 46.243907][ T1114] usb 4-1: config 0 interface 106 has no altsetting 0 [ 46.275083][ T2977] em28xx 1-1:0.106: No AC97 audio processor [ 46.277841][ T8] usb 3-1: config 0 descriptor?? [ 46.287008][ T2977] usb 1-1: Decoder not found [ 46.291828][ T1114] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice= 0.4c [ 46.291872][ T1114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.291911][ T2977] em28xx 1-1:0.106: failed to create media graph [ 46.301044][ T1114] usb 4-1: Product: syz [ 46.301073][ T1114] usb 4-1: Manufacturer: syz [ 46.301100][ T1114] usb 4-1: SerialNumber: syz [ 46.301407][ T9] em28xx 5-1:0.106: reading from i2c device at 0xa0 failed (error=-5) [ 46.322465][ T2977] em28xx 1-1:0.106: V4L2 device video0 deregistered [ 46.325160][ T9] em28xx 5-1:0.106: board has no eeprom [ 46.331519][ T2977] em28xx 1-1:0.106: Registering snapshot button... [ 46.341152][ T3015] ================================================================== [ 46.344877][ T3004] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 46.349636][ T3015] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 46.358522][ T2977] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.106/input/input16 [ 46.364190][ T3015] Read of size 8 at addr ffff888119fa4730 by task v4l_id/3015 [ 46.364218][ T3015] [ 46.364248][ T3015] CPU: 0 UID: 0 PID: 3015 Comm: v4l_id Not tainted 6.12.0-rc6-syzkaller-00153-g237d4e0f4113 #0 [ 46.364287][ T3015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.372835][ T2977] em28xx 1-1:0.106: Remote control support is not available for this card. [ 46.378860][ T3015] Call Trace: [ 46.389651][ T2991] em28xx 2-1:0.106: Registering V4L2 extension [ 46.396875][ T3015] [ 46.396892][ T3015] dump_stack_lvl+0x116/0x1f0 [ 46.432986][ T2991] em28xx 2-1:0.106: Config register raw data: 0xffffffed [ 46.437780][ T3015] print_report+0xc3/0x620 [ 46.440981][ T2991] em28xx 2-1:0.106: AC97 chip type couldn't be determined [ 46.445520][ T3015] ? __virt_addr_valid+0x5e/0x590 [ 46.452637][ T2991] em28xx 2-1:0.106: No AC97 audio processor [ 46.457032][ T3015] ? __phys_addr+0xc6/0x150 [ 46.466811][ T2991] usb 2-1: Decoder not found [ 46.469165][ T3015] kasan_report+0xd9/0x110 [ 46.475223][ T2991] em28xx 2-1:0.106: failed to create media graph [ 46.479562][ T3015] ? v4l2_fh_init+0x27d/0x2c0 [ 46.485587][ T2991] em28xx 2-1:0.106: V4L2 device video1 deregistered [ 46.488594][ T3015] ? v4l2_fh_init+0x27d/0x2c0 [ 46.498732][ T2991] em28xx 2-1:0.106: Registering snapshot button... [ 46.499600][ T3015] v4l2_fh_init+0x27d/0x2c0 [ 46.509036][ T2991] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.106/input/input17 [ 46.510861][ T3015] v4l2_fh_open+0x83/0xc0 [ 46.510919][ T3015] em28xx_v4l2_open+0x250/0x7e0 [ 46.519198][ T2991] em28xx 2-1:0.106: Remote control support is not available for this card. [ 46.521934][ T3015] v4l2_open+0x222/0x490 [ 46.521987][ T3015] ? __pfx_v4l2_open+0x10/0x10 [ 46.522031][ T3015] chrdev_open+0x237/0x6a0 [ 46.533064][ T36] em28xx 1-1:0.106: Closing input extension [ 46.536990][ T3015] ? __pfx_chrdev_open+0x10/0x10 [ 46.542005][ T36] em28xx 1-1:0.106: Deregistering snapshot button [ 46.550603][ T3015] ? lockref_get+0x15/0x50 [ 46.550666][ T3015] do_dentry_open+0x6cb/0x1390 [ 46.550717][ T3015] ? __pfx_chrdev_open+0x10/0x10 [ 46.550752][ T3015] ? inode_permission+0xdd/0x5f0 [ 46.600976][ T3015] vfs_open+0x82/0x3f0 [ 46.605091][ T3015] ? may_open+0x1f2/0x400 [ 46.609474][ T3015] path_openat+0x1e6a/0x2d60 [ 46.614196][ T3015] ? __pfx_path_openat+0x10/0x10 [ 46.619199][ T3015] ? __pfx___lock_acquire+0x10/0x10 [ 46.624433][ T3015] do_filp_open+0x1dc/0x430 [ 46.628975][ T3015] ? __pfx_do_filp_open+0x10/0x10 [ 46.634046][ T3015] ? find_held_lock+0x2d/0x110 [ 46.638861][ T3015] ? _raw_spin_unlock+0x28/0x50 [ 46.643737][ T3015] ? alloc_fd+0x2d7/0x6c0 [ 46.648137][ T3015] do_sys_openat2+0x17a/0x1e0 [ 46.652896][ T3015] ? __pfx_do_sys_openat2+0x10/0x10 [ 46.658117][ T3015] ? do_user_addr_fault+0xd97/0x12c0 [ 46.663443][ T3015] ? __pfx_lock_release+0x10/0x10 [ 46.668523][ T3015] ? trace_lock_acquire+0x14a/0x1d0 [ 46.673866][ T3015] __x64_sys_openat+0x175/0x210 [ 46.678751][ T3015] ? __pfx___x64_sys_openat+0x10/0x10 [ 46.684209][ T3015] ? do_user_addr_fault+0x839/0x12c0 [ 46.689534][ T3015] do_syscall_64+0xcd/0x250 [ 46.694057][ T3015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.699981][ T3015] RIP: 0033:0x7f18111e09a4 [ 46.704546][ T3015] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 46.724198][ T3015] RSP: 002b:00007ffd27c300c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 46.732652][ T3015] RAX: ffffffffffffffda RBX: 00007ffd27c302d8 RCX: 00007f18111e09a4 [ 46.740929][ T3015] RDX: 0000000000000000 RSI: 00007ffd27c31f25 RDI: 00000000ffffff9c [ 46.749275][ T3015] RBP: 00007ffd27c31f25 R08: 0000000000000000 R09: 0000000000000000 [ 46.757707][ T3015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.765703][ T3015] R13: 00007ffd27c302f0 R14: 000055743a1bf670 R15: 00007f181162fa80 [ 46.773892][ T3015] [ 46.776947][ T3015] [ 46.779293][ T3015] Allocated by task 2977: [ 46.783673][ T3015] kasan_save_stack+0x33/0x60 [ 46.788565][ T3015] kasan_save_track+0x14/0x30 [ 46.793308][ T3015] __kasan_kmalloc+0x8f/0xa0 [ 46.798447][ T3015] em28xx_v4l2_init+0x114/0x4050 [ 46.803505][ T3015] em28xx_init_extension+0x137/0x200 [ 46.808857][ T3015] request_module_async+0x61/0x70 [ 46.813923][ T3015] process_one_work+0x9c5/0x1ba0 [ 46.818926][ T3015] worker_thread+0x6c8/0xf00 [ 46.823555][ T3015] kthread+0x2c1/0x3a0 [ 46.827645][ T3015] ret_from_fork+0x45/0x80 [ 46.832091][ T3015] ret_from_fork_asm+0x1a/0x30 [ 46.836891][ T3015] [ 46.839220][ T3015] Freed by task 2977: [ 46.843293][ T3015] kasan_save_stack+0x33/0x60 [ 46.847996][ T3015] kasan_save_track+0x14/0x30 [ 46.852702][ T3015] kasan_save_free_info+0x3b/0x60 [ 46.857761][ T3015] __kasan_slab_free+0x37/0x50 [ 46.862575][ T3015] kfree+0x130/0x480 [ 46.866606][ T3015] em28xx_v4l2_init+0x22a4/0x4050 [ 46.871686][ T3015] em28xx_init_extension+0x137/0x200 [ 46.877010][ T3015] request_module_async+0x61/0x70 [ 46.882072][ T3015] process_one_work+0x9c5/0x1ba0 [ 46.887078][ T3015] worker_thread+0x6c8/0xf00 [ 46.891700][ T3015] kthread+0x2c1/0x3a0 [ 46.895841][ T3015] ret_from_fork+0x45/0x80 [ 46.900304][ T3015] ret_from_fork_asm+0x1a/0x30 [ 46.905181][ T3015] [ 46.907517][ T3015] The buggy address belongs to the object at ffff888119fa4000 [ 46.907517][ T3015] which belongs to the cache kmalloc-8k of size 8192 [ 46.923172][ T3015] The buggy address is located 1840 bytes inside of [ 46.923172][ T3015] freed 8192-byte region [ffff888119fa4000, ffff888119fa6000) [ 46.937255][ T3015] [ 46.939680][ T3015] The buggy address belongs to the physical page: [ 46.946109][ T3015] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119fa0 [ 46.955338][ T3015] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 46.964446][ T3015] flags: 0x200000000000040(head|node=0|zone=2) [ 46.971343][ T3015] page_type: f5(slab) [ 46.975441][ T3015] raw: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000 [ 46.984506][ T3015] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 46.996625][ T3015] head: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000 [ 47.006298][ T3015] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 47.015288][ T3015] head: 0200000000000003 ffffea000467e801 ffffffffffffffff 0000000000000000 [ 47.024190][ T3015] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 47.033617][ T3015] page dumped because: kasan: bad access detected [ 47.041260][ T3015] page_owner tracks the page as allocated [ 47.047098][ T3015] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2977, tgid 2977 (kworker/1:3), ts 44774363060, free_ts 44724034445 [ 47.070672][ T3015] post_alloc_hook+0x2d1/0x350 [ 47.075485][ T3015] get_page_from_freelist+0xd6b/0x2660 [ 47.081054][ T3015] __alloc_pages_noprof+0x221/0x2270 [ 47.086356][ T3015] alloc_pages_mpol_noprof+0xeb/0x400 [ 47.091742][ T3015] new_slab+0x2c9/0x410 [ 47.095910][ T3015] ___slab_alloc+0xd45/0x1760 [ 47.100615][ T3015] __slab_alloc.constprop.0+0x56/0xb0 [ 47.106022][ T3015] __kmalloc_cache_noprof+0x27a/0x2c0 [ 47.111501][ T3015] em28xx_v4l2_init+0x114/0x4050 [ 47.116491][ T3015] em28xx_init_extension+0x137/0x200 [ 47.121853][ T3015] request_module_async+0x61/0x70 [ 47.127005][ T3015] process_one_work+0x9c5/0x1ba0 [ 47.132129][ T3015] worker_thread+0x6c8/0xf00 [ 47.137129][ T3015] kthread+0x2c1/0x3a0 [ 47.141689][ T3015] ret_from_fork+0x45/0x80 [ 47.146254][ T3015] ret_from_fork_asm+0x1a/0x30 [ 47.151062][ T3015] page last free pid 2986 tgid 2986 stack trace: [ 47.157430][ T3015] free_unref_page+0x58a/0xb50 [ 47.162509][ T3015] __put_partials+0x14c/0x170 [ 47.167322][ T3015] qlist_free_all+0x4e/0x120 [ 47.172290][ T3015] kasan_quarantine_reduce+0x192/0x1e0 [ 47.177793][ T3015] __kasan_slab_alloc+0x4e/0x70 [ 47.182925][ T3015] __kmalloc_node_noprof+0x1b4/0x3e0 [ 47.188315][ T3015] __kvmalloc_node_noprof+0xad/0x1a0 [ 47.193648][ T3015] seq_read_iter+0x82a/0x12b0 [ 47.198350][ T3015] kernfs_fop_read_iter+0x414/0x580 [ 47.203869][ T3015] vfs_read+0x87f/0xbe0 [ 47.208526][ T3015] ksys_read+0x12f/0x260 [ 47.212967][ T3015] do_syscall_64+0xcd/0x250 [ 47.218099][ T3015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.224044][ T3015] [ 47.226829][ T3015] Memory state around the buggy address: [ 47.232489][ T3015] ffff888119fa4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.240842][ T3015] ffff888119fa4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.249047][ T3015] >ffff888119fa4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.257732][ T3015] ^ [ 47.263576][ T3015] ffff888119fa4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.271836][ T3015] ffff888119fa4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.280049][ T3015] ================================================================== [ 47.288581][ T3015] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 47.296081][ T3015] CPU: 0 UID: 0 PID: 3015 Comm: v4l_id Not tainted 6.12.0-rc6-syzkaller-00153-g237d4e0f4113 #0 [ 47.307962][ T3015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.318758][ T3015] Call Trace: [ 47.322226][ T3015] [ 47.325211][ T3015] dump_stack_lvl+0x3d/0x1f0 [ 47.330277][ T3015] panic+0x71d/0x800 [ 47.334271][ T3015] ? __pfx_panic+0x10/0x10 [ 47.338763][ T3015] ? check_panic_on_warn+0x1f/0xb0 [ 47.344034][ T3015] check_panic_on_warn+0xab/0xb0 [ 47.349062][ T3015] end_report+0x117/0x180 [ 47.353449][ T3015] kasan_report+0xe9/0x110 [ 47.357905][ T3015] ? v4l2_fh_init+0x27d/0x2c0 [ 47.362637][ T3015] ? v4l2_fh_init+0x27d/0x2c0 [ 47.367348][ T3015] v4l2_fh_init+0x27d/0x2c0 [ 47.371884][ T3015] v4l2_fh_open+0x83/0xc0 [ 47.376246][ T3015] em28xx_v4l2_open+0x250/0x7e0 [ 47.381252][ T3015] v4l2_open+0x222/0x490 [ 47.385540][ T3015] ? __pfx_v4l2_open+0x10/0x10 [ 47.390372][ T3015] chrdev_open+0x237/0x6a0 [ 47.394836][ T3015] ? __pfx_chrdev_open+0x10/0x10 [ 47.399806][ T3015] ? lockref_get+0x15/0x50 [ 47.404260][ T3015] do_dentry_open+0x6cb/0x1390 [ 47.409105][ T3015] ? __pfx_chrdev_open+0x10/0x10 [ 47.414070][ T3015] ? inode_permission+0xdd/0x5f0 [ 47.419128][ T3015] vfs_open+0x82/0x3f0 [ 47.423228][ T3015] ? may_open+0x1f2/0x400 [ 47.427587][ T3015] path_openat+0x1e6a/0x2d60 [ 47.432214][ T3015] ? __pfx_path_openat+0x10/0x10 [ 47.437192][ T3015] ? __pfx___lock_acquire+0x10/0x10 [ 47.442446][ T3015] do_filp_open+0x1dc/0x430 [ 47.447000][ T3015] ? __pfx_do_filp_open+0x10/0x10 [ 47.452171][ T3015] ? find_held_lock+0x2d/0x110 executing program [ 47.456968][ T3015] ? _raw_spin_unlock+0x28/0x50 [ 47.461874][ T3015] ? alloc_fd+0x2d7/0x6c0 [ 47.466235][ T3015] do_sys_openat2+0x17a/0x1e0 [ 47.470950][ T3015] ? __pfx_do_sys_openat2+0x10/0x10 [ 47.476212][ T3015] ? do_user_addr_fault+0xd97/0x12c0 [ 47.481907][ T3015] ? __pfx_lock_release+0x10/0x10 [ 47.487062][ T3015] ? trace_lock_acquire+0x14a/0x1d0 [ 47.492343][ T3015] __x64_sys_openat+0x175/0x210 [ 47.497318][ T3015] ? __pfx___x64_sys_openat+0x10/0x10 [ 47.502772][ T3015] ? do_user_addr_fault+0x839/0x12c0 [ 47.508134][ T3015] do_syscall_64+0xcd/0x250 [ 47.512794][ T3015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.518786][ T3015] RIP: 0033:0x7f18111e09a4 [ 47.523226][ T3015] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 47.542950][ T3015] RSP: 002b:00007ffd27c300c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 47.551435][ T3015] RAX: ffffffffffffffda RBX: 00007ffd27c302d8 RCX: 00007f18111e09a4 [ 47.559425][ T3015] RDX: 0000000000000000 RSI: 00007ffd27c31f25 RDI: 00000000ffffff9c [ 47.567420][ T3015] RBP: 00007ffd27c31f25 R08: 0000000000000000 R09: 0000000000000000 [ 47.575420][ T3015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.583415][ T3015] R13: 00007ffd27c302f0 R14: 000055743a1bf670 R15: 00007f181162fa80 [ 47.591423][ T3015] [ 47.594794][ T3015] Kernel Offset: disabled [ 47.599141][ T3015] Rebooting in 86400 seconds..