Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts.
2025/10/25 11:21:38 parsed 1 programs
[ 55.166829][ T29] audit: type=1400 audit(1761391298.182:61): avc: denied { node_bind } for pid=2963 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 55.187847][ T29] audit: type=1400 audit(1761391298.182:62): avc: denied { module_request } for pid=2963 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 57.718261][ T29] audit: type=1400 audit(1761391300.732:63): avc: denied { mounton } for pid=2973 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 57.742137][ T29] audit: type=1400 audit(1761391300.762:64): avc: denied { mount } for pid=2973 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 57.745840][ T2973] cgroup: Unknown subsys name 'net'
[ 57.771855][ T29] audit: type=1400 audit(1761391300.792:65): avc: denied { unmount } for pid=2973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 57.922499][ T2973] cgroup: Unknown subsys name 'cpuset'
[ 57.931256][ T2973] cgroup: Unknown subsys name 'rlimit'
[ 58.118754][ T29] audit: type=1400 audit(1761391301.132:66): avc: denied { setattr } for pid=2973 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 58.142632][ T29] audit: type=1400 audit(1761391301.132:67): avc: denied { create } for pid=2973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 58.163146][ T29] audit: type=1400 audit(1761391301.142:68): avc: denied { write } for pid=2973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 58.183593][ T29] audit: type=1400 audit(1761391301.142:69): avc: denied { read } for pid=2973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 58.203978][ T29] audit: type=1400 audit(1761391301.182:70): avc: denied { sys_module } for pid=2973 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 58.298763][ T2977] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 58.365798][ T2973] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 60.371867][ T2986] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 60.459774][ T29] kauditd_printk_skb: 21 callbacks suppressed
[ 60.459796][ T29] audit: type=1400 audit(1761391303.472:92): avc: denied { read write } for pid=2986 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 60.491130][ T29] audit: type=1400 audit(1761391303.472:93): avc: denied { open } for pid=2986 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 60.515340][ T29] audit: type=1400 audit(1761391303.472:94): avc: denied { ioctl } for pid=2986 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 60.888318][ T29] audit: type=1401 audit(1761391303.902:95): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 61.090840][ T29] audit: type=1400 audit(1761391304.112:96): avc: denied { create } for pid=3020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 61.592107][ T29] audit: type=1400 audit(1761391304.612:97): avc: denied { create } for pid=3034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 61.670664][ T29] audit: type=1400 audit(1761391304.642:98): avc: denied { sys_admin } for pid=3034 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 61.813971][ T29] audit: type=1400 audit(1761391304.822:99): avc: denied { sys_chroot } for pid=3038 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
2025/10/25 11:21:58 executed programs: 0
[ 75.964402][ T29] audit: type=1400 audit(1761391318.982:100): avc: denied { write } for pid=2963 comm="syz-execprog" path="pipe:[2513]" dev="pipefs" ino=2513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 76.027922][ T2984] syz-executor (2984) used greatest stack depth: 22808 bytes left
2025/10/25 11:22:48 executed programs: 10
[ 125.860752][ T29] audit: type=1400 audit(1761391368.872:101): avc: denied { read write } for pid=5749 comm="syz.7.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 125.884503][ T29] audit: type=1400 audit(1761391368.872:102): avc: denied { open } for pid=5749 comm="syz.7.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 126.015299][ T29] audit: type=1400 audit(1761391368.942:103): avc: denied { ioctl } for pid=5749 comm="syz.7.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 126.189968][ T2578] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 126.312434][ T1119] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 126.369778][ T2578] usb 8-1: Using ep0 maxpacket: 32
[ 126.377402][ T2578] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[ 126.385672][ T2578] usb 8-1: config 0 has no interface number 0
[ 126.391846][ T2578] usb 8-1: config 0 interface 89 has no altsetting 0
[ 126.400850][ T2578] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 126.410094][ T2578] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 126.418088][ T2578] usb 8-1: Product: syz
[ 126.422290][ T2578] usb 8-1: Manufacturer: syz
[ 126.426923][ T2578] usb 8-1: SerialNumber: syz
[ 126.431854][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 126.444126][ T2578] usb 8-1: config 0 descriptor??
[ 126.454440][ T2578] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 126.464108][ T2578] em28xx 8-1:0.89: Video interface 89 found: bulk
[ 126.469778][ T1119] usb 5-1: Using ep0 maxpacket: 32
[ 126.477842][ T1119] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[ 126.487050][ T1119] usb 5-1: config 0 has no interface number 0
[ 126.493722][ T1119] usb 5-1: config 0 interface 89 has no altsetting 0
[ 126.500733][ T38] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 126.510879][ T1119] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 126.520032][ T1119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 126.528040][ T1119] usb 5-1: Product: syz
[ 126.532274][ T1119] usb 5-1: Manufacturer: syz
[ 126.536909][ T1119] usb 5-1: SerialNumber: syz
[ 126.544658][ T1119] usb 5-1: config 0 descriptor??
[ 126.553467][ T1119] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 126.563025][ T1119] em28xx 5-1:0.89: Video interface 89 found: bulk
[ 126.580015][ T5764] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 126.609714][ T10] usb 7-1: Using ep0 maxpacket: 32
[ 126.616411][ T10] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 126.624660][ T10] usb 7-1: config 0 has no interface number 0
[ 126.630853][ T10] usb 7-1: config 0 interface 89 has no altsetting 0
[ 126.639807][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 126.648971][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 126.657120][ T10] usb 7-1: Product: syz
[ 126.661366][ T10] usb 7-1: Manufacturer: syz
[ 126.665988][ T10] usb 7-1: SerialNumber: syz
[ 126.679784][ T38] usb 2-1: Using ep0 maxpacket: 32
[ 126.683501][ T10] usb 7-1: config 0 descriptor??
[ 126.689397][ T38] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[ 126.694141][ T10] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 126.698535][ T38] usb 2-1: config 0 has no interface number 0
[ 126.707940][ T10] em28xx 7-1:0.89: Video interface 89 found: bulk
[ 126.714120][ T38] usb 2-1: config 0 interface 89 has no altsetting 0
[ 126.729205][ T38] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 126.730726][ T2578] em28xx 8-1:0.89: unknown em28xx chip ID (0)
[ 126.738479][ T38] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 126.752550][ T38] usb 2-1: Product: syz
[ 126.756815][ T38] usb 2-1: Manufacturer: syz
[ 126.761139][ T5764] usb 6-1: Using ep0 maxpacket: 32
[ 126.761472][ T38] usb 2-1: SerialNumber: syz
[ 126.769424][ T5764] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 126.775857][ T38] usb 2-1: config 0 descriptor??
[ 126.779385][ T5764] usb 6-1: config 0 has no interface number 0
[ 126.792193][ T5764] usb 6-1: config 0 interface 89 has no altsetting 0
[ 126.801548][ T38] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 126.805237][ T2578] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 126.811255][ T38] em28xx 2-1:0.89: Video interface 89 found: bulk
[ 126.819382][ T2578] em28xx 8-1:0.89: board has no eeprom
[ 126.832000][ T5764] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 126.840155][ T1119] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[ 126.841190][ T5764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 126.855507][ T5764] usb 6-1: Product: syz
[ 126.860149][ T5764] usb 6-1: Manufacturer: syz
[ 126.864773][ T5764] usb 6-1: SerialNumber: syz
[ 126.873606][ T5764] usb 6-1: config 0 descriptor??
[ 126.883482][ T5764] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 126.893103][ T5764] em28xx 6-1:0.89: Video interface 89 found: bulk
[ 126.918643][ T1119] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 126.926917][ T1119] em28xx 5-1:0.89: board has no eeprom
[ 126.929769][ T2578] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67)
[ 126.939886][ T2578] em28xx 8-1:0.89: analog set to bulk mode.
[ 126.946477][ T5770] em28xx 8-1:0.89: Registering V4L2 extension
[ 126.971406][ T10] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[ 126.978641][ T2578] usb 8-1: USB disconnect, device number 2
[ 126.990866][ T2578] em28xx 8-1:0.89: Disconnecting em28xx
[ 127.003571][ T1119] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[ 127.010902][ T1119] em28xx 5-1:0.89: analog set to bulk mode.
[ 127.025298][ T5770] em28xx 8-1:0.89: Config register raw data: 0xffffffed
[ 127.032880][ T5770] em28xx 8-1:0.89: AC97 chip type couldn't be determined
[ 127.034840][ T1119] usb 5-1: USB disconnect, device number 2
[ 127.040216][ T5770] em28xx 8-1:0.89: No AC97 audio processor
[ 127.061753][ T38] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[ 127.069181][ T1119] em28xx 5-1:0.89: Disconnecting em28xx
[ 127.086746][ T10] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 127.094953][ T10] em28xx 7-1:0.89: board has no eeprom
[ 127.107857][ T5770] usb 8-1: Decoder not found
[ 127.112688][ T5770] em28xx 8-1:0.89: failed to create media graph
[ 127.119189][ T5770] em28xx 8-1:0.89: V4L2 device video0 deregistered
[ 127.136799][ T5770] em28xx 8-1:0.89: Registering snapshot button...
[ 127.144756][ T5764] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[ 127.152318][ T38] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 127.158439][ T5770] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input5
[ 127.161238][ T38] em28xx 2-1:0.89: board has no eeprom
[ 127.174590][ T5770] em28xx 8-1:0.89: Remote control support is not available for this card.
[ 127.188344][ T5767] em28xx 5-1:0.89: Registering V4L2 extension
[ 127.190371][ T10] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[ 127.201756][ T10] em28xx 7-1:0.89: analog set to bulk mode.
[ 127.220961][ T5764] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 127.229122][ T5764] em28xx 6-1:0.89: board has no eeprom
[ 127.245865][ T10] usb 7-1: USB disconnect, device number 2
[ 127.266407][ T10] em28xx 7-1:0.89: Disconnecting em28xx
[ 127.269795][ T38] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[ 127.279373][ T38] em28xx 2-1:0.89: analog set to bulk mode.
[ 127.299735][ T5764] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[ 127.300804][ T5767] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[ 127.307057][ T5764] em28xx 6-1:0.89: analog set to bulk mode.
[ 127.314147][ T5767] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[ 127.314172][ T5767] em28xx 5-1:0.89: No AC97 audio processor
[ 127.340135][ T5767] usb 5-1: Decoder not found
[ 127.342889][ T5764] usb 6-1: USB disconnect, device number 2
[ 127.344807][ T5767] em28xx 5-1:0.89: failed to create media graph
[ 127.352489][ T5764] em28xx 6-1:0.89: Disconnecting em28xx
[ 127.374306][ T38] usb 2-1: USB disconnect, device number 2
[ 127.391396][ T38] em28xx 2-1:0.89: Disconnecting em28xx
[ 127.397241][ T5767] em28xx 5-1:0.89: V4L2 device video0 deregistered
[ 127.415947][ T5767] em28xx 5-1:0.89: Registering snapshot button...
[ 127.437546][ T5767] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input6
[ 127.451995][ T5767] em28xx 5-1:0.89: Remote control support is not available for this card.
[ 127.462729][ T1119] em28xx 5-1:0.89: Closing input extension
[ 127.469106][ T1119] em28xx 5-1:0.89: Deregistering snapshot button
[ 127.481248][ T2578] em28xx 8-1:0.89: Closing input extension
[ 127.487653][ T1119] em28xx 5-1:0.89: Freeing device
[ 127.487832][ T2578] em28xx 8-1:0.89: Deregistering snapshot button
[ 127.520460][ T5770] em28xx 7-1:0.89: Registering V4L2 extension
[ 127.531209][ T2578] em28xx 8-1:0.89: Freeing device
[ 127.587701][ T5770] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[ 127.595034][ T5770] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[ 127.603038][ T5770] em28xx 7-1:0.89: No AC97 audio processor
[ 127.653713][ T5770] usb 7-1: Decoder not found
[ 127.658514][ T5770] em28xx 7-1:0.89: failed to create media graph
[ 127.670679][ T5770] em28xx 7-1:0.89: V4L2 device video0 deregistered
[ 127.679226][ T5770] em28xx 7-1:0.89: Registering snapshot button...
[ 127.687905][ T5770] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input7
[ 127.703639][ T5770] em28xx 7-1:0.89: Remote control support is not available for this card.
[ 127.712566][ T23] em28xx 2-1:0.89: Registering V4L2 extension
[ 127.762077][ T23] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[ 127.769102][ T23] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[ 127.776652][ T23] em28xx 2-1:0.89: No AC97 audio processor
[ 127.787542][ T23] usb 2-1: Decoder not found
[ 127.792275][ T23] em28xx 2-1:0.89: failed to create media graph
[ 127.799241][ T23] em28xx 2-1:0.89: V4L2 device video0 deregistered
[ 127.810017][ T23] em28xx 2-1:0.89: Registering snapshot button...
[ 127.818460][ T23] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input8
[ 127.831289][ T23] em28xx 2-1:0.89: Remote control support is not available for this card.
[ 127.840093][ T38] em28xx 2-1:0.89: Closing input extension
[ 127.845942][ T38] em28xx 2-1:0.89: Deregistering snapshot button
[ 127.852775][ T1119] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 127.865957][ T5775] em28xx 6-1:0.89: Registering V4L2 extension
[ 127.869355][ T38] em28xx 2-1:0.89: Freeing device
[ 127.875017][ T2578] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 127.925735][ T5775] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[ 127.933394][ T5775] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[ 127.940500][ T5775] em28xx 6-1:0.89: No AC97 audio processor
[ 127.947735][ T5775] usb 6-1: Decoder not found
[ 127.952523][ T5775] em28xx 6-1:0.89: failed to create media graph
[ 127.958798][ T5775] em28xx 6-1:0.89: V4L2 device video0 deregistered
[ 127.967170][ T5775] em28xx 6-1:0.89: Registering snapshot button...
[ 127.974909][ T5775] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input9
[ 127.989789][ T5775] em28xx 6-1:0.89: Remote control support is not available for this card.
[ 127.998365][ T10] em28xx 7-1:0.89: Closing input extension
[ 128.004743][ T10] em28xx 7-1:0.89: Deregistering snapshot button
[ 128.014861][ T5764] em28xx 6-1:0.89: Closing input extension
[ 128.019731][ T1119] usb 5-1: Using ep0 maxpacket: 32
[ 128.021630][ T5764] em28xx 6-1:0.89: Deregistering snapshot button
[ 128.027973][ T1119] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[ 128.033967][ T10] em28xx 7-1:0.89: Freeing device
[ 128.040405][ T1119] usb 5-1: config 0 has no interface number 0
[ 128.045544][ T2578] usb 8-1: Using ep0 maxpacket: 32
[ 128.053640][ T1119] usb 5-1: config 0 interface 89 has no altsetting 0
[ 128.069504][ T2578] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[ 128.071409][ T1119] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 128.077915][ T2578] usb 8-1: config 0 has no interface number 0
[ 128.086743][ T1119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 128.086775][ T1119] usb 5-1: Product: syz
[ 128.086805][ T1119] usb 5-1: Manufacturer: syz
[ 128.086828][ T1119] usb 5-1: SerialNumber: syz
[ 128.092314][ T1119] usb 5-1: config 0 descriptor??
[ 128.094578][ T2578] usb 8-1: config 0 interface 89 has no altsetting 0
[ 128.124750][ T1119] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 128.130087][ T2578] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 128.136421][ T1119] em28xx 5-1:0.89: Video interface 89 found: bulk
[ 128.145476][ T2578] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 128.159806][ T2578] usb 8-1: Product: syz
[ 128.163991][ T2578] usb 8-1: Manufacturer: syz
[ 128.168608][ T2578] usb 8-1: SerialNumber: syz
[ 128.191406][ T5764] em28xx 6-1:0.89: Freeing device
[ 128.220271][ T38] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 128.261742][ T2578] usb 8-1: config 0 descriptor??
[ 128.275724][ T2578] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 128.285876][ T2578] em28xx 8-1:0.89: Video interface 89 found: bulk
[ 128.380435][ T38] usb 2-1: Using ep0 maxpacket: 32
[ 128.387623][ T38] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[ 128.395957][ T38] usb 2-1: config 0 has no interface number 0
[ 128.402662][ T38] usb 2-1: config 0 interface 89 has no altsetting 0
[ 128.422201][ T38] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 128.431420][ T38] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 128.439552][ T38] usb 2-1: Product: syz
[ 128.443823][ T38] usb 2-1: Manufacturer: syz
[ 128.448459][ T38] usb 2-1: SerialNumber: syz
[ 128.457180][ T38] usb 2-1: config 0 descriptor??
[ 128.472690][ T38] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 128.479929][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 128.482435][ T38] em28xx 2-1:0.89: Video interface 89 found: bulk
[ 128.496710][ T1119] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[ 128.505173][ T5764] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 128.550119][ T2578] em28xx 8-1:0.89: unknown em28xx chip ID (0)
[ 128.571659][ T1119] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 128.579876][ T1119] em28xx 5-1:0.89: board has no eeprom
[ 128.612004][ T2578] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 128.620217][ T2578] em28xx 8-1:0.89: board has no eeprom
[ 128.639763][ T10] usb 7-1: Using ep0 maxpacket: 32
[ 128.646542][ T10] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 128.649730][ T1119] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[ 128.654720][ T10] usb 7-1: config 0 has no interface number 0
[ 128.661985][ T1119] em28xx 5-1:0.89: analog set to bulk mode.
[ 128.668086][ T10] usb 7-1: config 0 interface 89 has no altsetting 0
[ 128.674086][ T23] em28xx 5-1:0.89: Registering V4L2 extension
[ 128.680763][ T5764] usb 6-1: Using ep0 maxpacket: 32
[ 128.691958][ T2578] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67)
[ 128.699217][ T2578] em28xx 8-1:0.89: analog set to bulk mode.
[ 128.703545][ T1119] usb 5-1: USB disconnect, device number 3
[ 128.719735][ T5764] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 128.722854][ T1119] em28xx 5-1:0.89: Disconnecting em28xx
[ 128.727852][ T5764] usb 6-1: config 0 has no interface number 0
[ 128.741505][ T38] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[ 128.762471][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 128.771623][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 128.779697][ T10] usb 7-1: Product: syz
[ 128.783895][ T10] usb 7-1: Manufacturer: syz
[ 128.788516][ T10] usb 7-1: SerialNumber: syz
[ 128.794765][ T2578] usb 8-1: USB disconnect, device number 3
[ 128.801879][ T5764] usb 6-1: config 0 interface 89 has no altsetting 0
[ 128.810516][ T2578] em28xx 8-1:0.89: Disconnecting em28xx
[ 128.812582][ T38] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 128.824944][ T38] em28xx 2-1:0.89: board has no eeprom
[ 128.836311][ T5764] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 128.837520][ T23] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[ 128.845626][ T5764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 128.852422][ T23] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[ 128.852445][ T23] em28xx 5-1:0.89: No AC97 audio processor
[ 128.855446][ T23] usb 5-1: Decoder not found
[ 128.860667][ T5764] usb 6-1: Product: syz
[ 128.867715][ T23] em28xx 5-1:0.89: failed to create media graph
[ 128.873500][ T5764] usb 6-1: Manufacturer: syz
[ 128.878564][ T23] em28xx 5-1:0.89: V4L2 device video0 deregistered
[ 128.882253][ T5764] usb 6-1: SerialNumber: syz
[ 128.883847][ T10] usb 7-1: config 0 descriptor??
[ 128.899878][ T38] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[ 128.910296][ T10] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 128.916873][ T38] em28xx 2-1:0.89: analog set to bulk mode.
[ 128.926268][ T10] em28xx 7-1:0.89: Video interface 89 found: bulk
[ 128.943563][ T23] em28xx 5-1:0.89: Registering snapshot button...
[ 128.945387][ T5764] usb 6-1: config 0 descriptor??
[ 128.957166][ T23] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input10
[ 128.975150][ T5764] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 128.977621][ T38] usb 2-1: USB disconnect, device number 3
[ 128.985315][ T5764] em28xx 6-1:0.89: Video interface 89 found: bulk
[ 128.998402][ T23] em28xx 5-1:0.89: Remote control support is not available for this card.
[ 129.007516][ T5775] em28xx 8-1:0.89: Registering V4L2 extension
[ 129.011383][ T38] em28xx 2-1:0.89: Disconnecting em28xx
[ 129.101178][ T5775] em28xx 8-1:0.89: Config register raw data: 0xffffffed
[ 129.108239][ T5775] em28xx 8-1:0.89: AC97 chip type couldn't be determined
[ 129.116187][ T5775] em28xx 8-1:0.89: No AC97 audio processor
[ 129.126643][ T5775] usb 8-1: Decoder not found
[ 129.131326][ T5775] em28xx 8-1:0.89: failed to create media graph
[ 129.137624][ T5775] em28xx 8-1:0.89: V4L2 device video0 deregistered
[ 129.151573][ T5775] em28xx 8-1:0.89: Registering snapshot button...
[ 129.159334][ T5775] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input11
[ 129.178709][ T5775] em28xx 8-1:0.89: Remote control support is not available for this card.
[ 129.187581][ T5767] em28xx 2-1:0.89: Registering V4L2 extension
[ 129.200646][ T10] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[ 129.230170][ T5764] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[ 129.257587][ T5767] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[ 129.265542][ T5767] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[ 129.272944][ T10] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 129.272980][ T10] em28xx 7-1:0.89: board has no eeprom
[ 129.288035][ T5767] em28xx 2-1:0.89: No AC97 audio processor
[ 129.297602][ T5767] usb 2-1: Decoder not found
[ 129.302280][ T5767] em28xx 2-1:0.89: failed to create media graph
[ 129.305612][ T5764] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 129.308557][ T5767] em28xx 2-1:0.89: V4L2 device video0 deregistered
[ 129.310517][ T5767] em28xx 2-1:0.89: Registering snapshot button...
[ 129.316837][ T5764] em28xx 6-1:0.89: board has no eeprom
[ 129.325009][ T5767] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input12
[ 129.331229][ T10] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[ 129.336757][ T5767] em28xx 2-1:0.89: Remote control support is not available for this card.
[ 129.345805][ T10] em28xx 7-1:0.89: analog set to bulk mode.
[ 129.353737][ T1119] em28xx 5-1:0.89: Closing input extension
[ 129.375210][ T1119] em28xx 5-1:0.89: Deregistering snapshot button
[ 129.385886][ T10] usb 7-1: USB disconnect, device number 3
[ 129.398702][ T2578] em28xx 8-1:0.89: Closing input extension
[ 129.405615][ T10] em28xx 7-1:0.89: Disconnecting em28xx
[ 129.406833][ T1119] em28xx 5-1:0.89: Freeing device
[ 129.411767][ T2578] em28xx 8-1:0.89: Deregistering snapshot button
[ 129.428595][ T5775] em28xx 7-1:0.89: Registering V4L2 extension
[ 129.435923][ T5764] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[ 129.443229][ T5764] em28xx 6-1:0.89: analog set to bulk mode.
[ 129.461397][ T5764] usb 6-1: USB disconnect, device number 3
[ 129.471490][ T5764] em28xx 6-1:0.89: Disconnecting em28xx
[ 129.491995][ T2578] em28xx 8-1:0.89: Freeing device
[ 129.537971][ T5775] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[ 129.545106][ T5775] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[ 129.552222][ T5775] em28xx 7-1:0.89: No AC97 audio processor
[ 129.562284][ T5775] usb 7-1: Decoder not found
[ 129.567009][ T5775] em28xx 7-1:0.89: failed to create media graph
[ 129.575872][ T5775] em28xx 7-1:0.89: V4L2 device video0 deregistered
[ 129.583718][ T5775] em28xx 7-1:0.89: Registering snapshot button...
[ 129.583986][ T5801] ==================================================================
[ 129.592620][ T5775] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input13
[ 129.598229][ T5801] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 129.612247][ T5775] em28xx 7-1:0.89: Remote control support is not available for this card.
[ 129.616181][ T5801] Read of size 8 at addr ffff88811b770738 by task v4l_id/5801
[ 129.624787][ T10] em28xx 7-1:0.89: Closing input extension
[ 129.632128][ T5801]
[ 129.632166][ T5801] CPU: 1 UID: 0 PID: 5801 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary)
[ 129.632200][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 129.632225][ T5801] Call Trace:
[ 129.632236][ T5801]
[ 129.632248][ T5801] dump_stack_lvl+0x116/0x1f0
[ 129.632310][ T5801] print_report+0xcd/0x630
[ 129.632361][ T5801] ? __virt_addr_valid+0x81/0x610
[ 129.632413][ T5801] ? __phys_addr+0xe8/0x180
[ 129.632465][ T5801] ? v4l2_fh_init+0x27d/0x2c0
[ 129.632509][ T5801] kasan_report+0xe0/0x110
[ 129.632557][ T5801] ? v4l2_fh_init+0x27d/0x2c0
[ 129.632608][ T5801] v4l2_fh_init+0x27d/0x2c0
[ 129.632662][ T5801] v4l2_fh_open+0x64/0xa0
[ 129.632705][ T5801] em28xx_v4l2_open+0x24e/0x7e0
[ 129.632746][ T5801] v4l2_open+0x1d2/0x5e0
[ 129.632800][ T5801] ? __pfx_v4l2_open+0x10/0x10
[ 129.632847][ T5801] chrdev_open+0x234/0x6a0
[ 129.632885][ T5801] ? __pfx_chrdev_open+0x10/0x10
[ 129.632929][ T5801] do_dentry_open+0x6da/0x13a0
[ 129.632963][ T5801] ? __pfx_chrdev_open+0x10/0x10
[ 129.633000][ T5801] ? inode_permission+0x156/0x630
[ 129.633046][ T5801] vfs_open+0x82/0x3f0
[ 129.633086][ T5801] ? may_open+0x1f2/0x400
[ 129.633133][ T5801] path_openat+0x1de4/0x2cb0
[ 129.633175][ T5801] ? __pfx_path_openat+0x10/0x10
[ 129.633211][ T5801] ? __lock_acquire+0xb8a/0x1c90
[ 129.633253][ T5801] do_filp_open+0x20b/0x470
[ 129.633288][ T5801] ? __pfx_do_filp_open+0x10/0x10
[ 129.633339][ T5801] ? alloc_fd+0x420/0x760
[ 129.633376][ T5801] do_sys_openat2+0x11b/0x1d0
[ 129.633437][ T5801] ? __pfx_do_sys_openat2+0x10/0x10
[ 129.633481][ T5801] ? find_held_lock+0x2b/0x80
[ 129.633535][ T5801] ? handle_mm_fault+0x2ab/0xd10
[ 129.633584][ T5801] __x64_sys_openat+0x174/0x210
[ 129.633631][ T5801] ? __pfx___x64_sys_openat+0x10/0x10
[ 129.633681][ T5801] ? do_user_addr_fault+0x83f/0x1240
[ 129.633730][ T5801] do_syscall_64+0xcd/0x4d0
[ 129.633786][ T5801] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.633829][ T5801] RIP: 0033:0x7f2d716ea407
[ 129.633866][ T5801] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 129.633904][ T5801] RSP: 002b:00007fff75c940b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 129.633939][ T5801] RAX: ffffffffffffffda RBX: 00007f2d715fc880 RCX: 00007f2d716ea407
[ 129.633963][ T5801] RDX: 0000000000000000 RSI: 00007fff75c95f25 RDI: ffffffffffffff9c
[ 129.633985][ T5801] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 129.634005][ T5801] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 129.634027][ T5801] R13: 00007fff75c94300 R14: 00007f2d71e80000 R15: 000055f08a98e4d8
[ 129.634063][ T5801]
[ 129.634074][ T5801]
[ 129.642534][ T29] audit: type=1400 audit(1761391372.662:104): avc: denied { read } for pid=2838 comm="acpid" name="event4" dev="devtmpfs" ino=590 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 129.649729][ T5801] Allocated by task 5775:
[ 129.649745][ T5801] kasan_save_stack+0x33/0x60
[ 129.649785][ T5801] kasan_save_track+0x14/0x30
[ 129.659967][ T29] audit: type=1400 audit(1761391372.662:105): avc: denied { open } for pid=2838 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=590 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 129.663155][ T5801] __kasan_kmalloc+0x8f/0xa0
[ 129.666115][ T29] audit: type=1400 audit(1761391372.662:106): avc: denied { ioctl } for pid=2838 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=590 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 129.670752][ T5801] em28xx_v4l2_init+0x114/0x4080
[ 129.670789][ T5801] em28xx_init_extension+0x13a/0x200
[ 129.680067][ T10] em28xx 7-1:0.89: Deregistering snapshot button
[ 129.680230][ T5801] request_module_async+0x61/0x70
[ 130.015096][ T5801] process_one_work+0x9cf/0x1b70
[ 130.020087][ T5801] worker_thread+0x6c8/0xf10
[ 130.024703][ T5801] kthread+0x3c5/0x780
[ 130.028798][ T5801] ret_from_fork+0x56d/0x700
[ 130.033397][ T5801] ret_from_fork_asm+0x1a/0x30
[ 130.038187][ T5801]
[ 130.040518][ T5801] Freed by task 5775:
[ 130.044507][ T5801] kasan_save_stack+0x33/0x60
[ 130.049210][ T5801] kasan_save_track+0x14/0x30
[ 130.053909][ T5801] __kasan_save_free_info+0x3b/0x60
[ 130.059132][ T5801] __kasan_slab_free+0x43/0x70
[ 130.063918][ T5801] kfree+0x288/0x670
[ 130.067841][ T5801] em28xx_v4l2_init+0x22b5/0x4080
[ 130.072877][ T5801] em28xx_init_extension+0x13a/0x200
[ 130.078175][ T5801] request_module_async+0x61/0x70
[ 130.083228][ T5801] process_one_work+0x9cf/0x1b70
[ 130.088204][ T5801] worker_thread+0x6c8/0xf10
[ 130.092851][ T5801] kthread+0x3c5/0x780
[ 130.096942][ T5801] ret_from_fork+0x56d/0x700
[ 130.101540][ T5801] ret_from_fork_asm+0x1a/0x30
[ 130.106319][ T5801]
[ 130.108648][ T5801] The buggy address belongs to the object at ffff88811b770000
[ 130.108648][ T5801] which belongs to the cache kmalloc-8k of size 8192
[ 130.122716][ T5801] The buggy address is located 1848 bytes inside of
[ 130.122716][ T5801] freed 8192-byte region [ffff88811b770000, ffff88811b772000)
[ 130.136704][ T5801]
[ 130.139039][ T5801] The buggy address belongs to the physical page:
[ 130.145454][ T5801] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11b770
[ 130.154321][ T5801] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 130.162826][ T5801] anon flags: 0x200000000000040(head|node=0|zone=2)
[ 130.169440][ T5801] page_type: f5(slab)
[ 130.173439][ T5801] raw: 0200000000000040 ffff888100042280 ffffea00046dc400 0000000000000003
[ 130.182044][ T5801] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 130.190646][ T5801] head: 0200000000000040 ffff888100042280 ffffea00046dc400 0000000000000003
[ 130.199333][ T5801] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 130.208019][ T5801] head: 0200000000000003 ffffea00046ddc01 00000000ffffffff 00000000ffffffff
[ 130.216798][ T5801] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 130.225478][ T5801] page dumped because: kasan: bad access detected
[ 130.231900][ T5801] page_owner tracks the page as allocated
[ 130.237619][ T5801] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2985, tgid 2985 (syz-executor), ts 59937201125, free_ts 59932813320
[ 130.259004][ T5801] post_alloc_hook+0x1c0/0x230
[ 130.263798][ T5801] get_page_from_freelist+0x1003/0x2dc0
[ 130.269406][ T5801] __alloc_frozen_pages_noprof+0x259/0x21f0
[ 130.275330][ T5801] alloc_pages_mpol+0xe4/0x410
[ 130.280126][ T5801] new_slab+0x24a/0x360
[ 130.284312][ T5801] ___slab_alloc+0xdb7/0x1a70
[ 130.289017][ T5801] __slab_alloc.constprop.0+0x63/0x110
[ 130.294504][ T5801] __kmalloc_cache_noprof+0x3c8/0x750
[ 130.299909][ T5801] mr_table_alloc+0x5f/0x2e0
[ 130.304517][ T5801] ipmr_net_init+0x2b1/0x370
[ 130.309128][ T5801] ops_init+0x1e2/0x5f0
[ 130.313308][ T5801] setup_net+0x100/0x390
[ 130.317585][ T5801] copy_net_ns+0x2f8/0x690
[ 130.322034][ T5801] create_new_namespaces+0x3ea/0xa90
[ 130.327346][ T5801] unshare_nsproxy_namespaces+0xc0/0x1f0
[ 130.333012][ T5801] ksys_unshare+0x45b/0xa40
[ 130.337543][ T5801] page last free pid 2985 tgid 2985 stack trace:
[ 130.343879][ T5801] __free_frozen_pages+0x78f/0x1000
[ 130.349110][ T5801] __put_partials+0x130/0x170
[ 130.353832][ T5801] qlist_free_all+0x4d/0x120
[ 130.358451][ T5801] kasan_quarantine_reduce+0x195/0x1e0
[ 130.363942][ T5801] __kasan_slab_alloc+0x4e/0x70
[ 130.368819][ T5801] __kvmalloc_node_noprof+0x35a/0x990
[ 130.374211][ T5801] proc_sys_call_handler+0x286/0x570
[ 130.379568][ T5801] vfs_write+0x7d3/0x11d0
[ 130.383912][ T5801] ksys_write+0x12a/0x250
[ 130.388258][ T5801] do_syscall_64+0xcd/0x4d0
[ 130.392793][ T5801] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.398706][ T5801]
[ 130.401040][ T5801] Memory state around the buggy address:
[ 130.406676][ T5801] ffff88811b770600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 130.414750][ T5801] ffff88811b770680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 130.422826][ T5801] >ffff88811b770700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 130.430895][ T5801] ^
[ 130.436797][ T5801] ffff88811b770780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 130.444875][ T5801] ffff88811b770800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 130.452946][ T5801] ==================================================================
[ 130.461284][ T5801] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 130.468516][ T5801] CPU: 1 UID: 0 PID: 5801 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary)
[ 130.477912][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 130.487984][ T5801] Call Trace:
[ 130.491277][ T5801]
[ 130.494232][ T5801] dump_stack_lvl+0x3d/0x1f0
[ 130.498859][ T5801] vpanic+0x640/0x6f0
[ 130.502868][ T5801] panic+0xca/0xd0
[ 130.506612][ T5801] ? __pfx_panic+0x10/0x10
[ 130.511062][ T5801] ? check_panic_on_warn+0x1f/0xb0
[ 130.516220][ T5801] check_panic_on_warn+0xab/0xb0
[ 130.521193][ T5801] end_report+0x107/0x170
[ 130.525565][ T5801] kasan_report+0xee/0x110
[ 130.530031][ T5801] ? v4l2_fh_init+0x27d/0x2c0
[ 130.534749][ T5801] v4l2_fh_init+0x27d/0x2c0
[ 130.539290][ T5801] v4l2_fh_open+0x64/0xa0
[ 130.543677][ T5801] em28xx_v4l2_open+0x24e/0x7e0
[ 130.548558][ T5801] v4l2_open+0x1d2/0x5e0
[ 130.552824][ T5801] ? __pfx_v4l2_open+0x10/0x10
[ 130.557610][ T5801] chrdev_open+0x234/0x6a0
[ 130.562067][ T5801] ? __pfx_chrdev_open+0x10/0x10
[ 130.567030][ T5801] do_dentry_open+0x6da/0x13a0
[ 130.571810][ T5801] ? __pfx_chrdev_open+0x10/0x10
[ 130.576785][ T5801] ? inode_permission+0x156/0x630
[ 130.581924][ T5801] vfs_open+0x82/0x3f0
[ 130.586008][ T5801] ? may_open+0x1f2/0x400
[ 130.590360][ T5801] path_openat+0x1de4/0x2cb0
[ 130.594977][ T5801] ? __pfx_path_openat+0x10/0x10
[ 130.599942][ T5801] ? __lock_acquire+0xb8a/0x1c90
[ 130.604903][ T5801] do_filp_open+0x20b/0x470
[ 130.609421][ T5801] ? __pfx_do_filp_open+0x10/0x10
[ 130.614480][ T5801] ? alloc_fd+0x420/0x760
[ 130.618834][ T5801] do_sys_openat2+0x11b/0x1d0
[ 130.623544][ T5801] ? __pfx_do_sys_openat2+0x10/0x10
[ 130.628766][ T5801] ? find_held_lock+0x2b/0x80
[ 130.633471][ T5801] ? handle_mm_fault+0x2ab/0xd10
[ 130.638443][ T5801] __x64_sys_openat+0x174/0x210
[ 130.643316][ T5801] ? __pfx___x64_sys_openat+0x10/0x10
[ 130.648712][ T5801] ? do_user_addr_fault+0x83f/0x1240
[ 130.654022][ T5801] do_syscall_64+0xcd/0x4d0
[ 130.658557][ T5801] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.664469][ T5801] RIP: 0033:0x7f2d716ea407
[ 130.669025][ T5801] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 130.688651][ T5801] RSP: 002b:00007fff75c940b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 130.697081][ T5801] RAX: ffffffffffffffda RBX: 00007f2d715fc880 RCX: 00007f2d716ea407
[ 130.705069][ T5801] RDX: 0000000000000000 RSI: 00007fff75c95f25 RDI: ffffffffffffff9c
[ 130.713056][ T5801] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 130.721037][ T5801] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 130.729021][ T5801] R13: 00007fff75c94300 R14: 00007f2d71e80000 R15: 000055f08a98e4d8
[ 130.737029][ T5801]
[ 130.740385][ T5801] Kernel Offset: disabled
[ 130.744720][ T5801] Rebooting in 86400 seconds..