Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts.
2026/03/18 09:44:25 parsed 1 programs
[ 63.558243][ T29] audit: type=1400 audit(1773827065.346:62): avc: denied { node_bind } for pid=2968 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 63.579259][ T29] audit: type=1400 audit(1773827065.356:63): avc: denied { module_request } for pid=2968 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 66.514700][ T29] audit: type=1400 audit(1773827068.306:64): avc: denied { mounton } for pid=2978 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 66.538470][ T29] audit: type=1400 audit(1773827068.326:65): avc: denied { mount } for pid=2978 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 66.548705][ T2978] cgroup: Unknown subsys name 'net'
[ 66.568500][ T29] audit: type=1400 audit(1773827068.356:66): avc: denied { unmount } for pid=2978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 66.674404][ T2978] cgroup: Unknown subsys name 'cpuset'
[ 66.683466][ T2978] cgroup: Unknown subsys name 'rlimit'
[ 66.854941][ T29] audit: type=1400 audit(1773827068.646:67): avc: denied { setattr } for pid=2978 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 66.878356][ T29] audit: type=1400 audit(1773827068.646:68): avc: denied { create } for pid=2978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 66.899401][ T29] audit: type=1400 audit(1773827068.646:69): avc: denied { write } for pid=2978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 66.920203][ T29] audit: type=1400 audit(1773827068.646:70): avc: denied { read } for pid=2978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 66.948193][ T29] audit: type=1400 audit(1773827068.736:71): avc: denied { sys_module } for pid=2978 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 67.071547][ T2982] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 67.124370][ T2978] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 68.710318][ T29] kauditd_printk_skb: 8 callbacks suppressed
[ 68.710344][ T29] audit: type=1400 audit(1773827070.496:80): avc: denied { execmem } for pid=2984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 68.829911][ T29] audit: type=1400 audit(1773827070.546:81): avc: denied { read } for pid=2989 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 68.902600][ T29] audit: type=1400 audit(1773827070.546:82): avc: denied { open } for pid=2989 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 68.987635][ T29] audit: type=1400 audit(1773827070.546:83): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 69.069878][ T29] audit: type=1400 audit(1773827070.676:84): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/root/syzkaller.GgB2jZ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 69.136254][ T29] audit: type=1400 audit(1773827070.676:85): avc: denied { mount } for pid=2989 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 69.191035][ T29] audit: type=1400 audit(1773827070.676:86): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/root/syzkaller.GgB2jZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 69.240929][ T29] audit: type=1400 audit(1773827070.676:87): avc: denied { mount } for pid=2989 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 69.293972][ T2989] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 69.329242][ T29] audit: type=1400 audit(1773827070.696:88): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/root/syzkaller.GgB2jZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 69.428335][ T29] audit: type=1400 audit(1773827070.726:90): avc: denied { mounton } for pid=2990 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
2026/03/18 09:44:47 executed programs: 0
2026/03/18 09:45:37 executed programs: 10
[ 135.386410][ T29] kauditd_printk_skb: 17 callbacks suppressed
[ 135.386434][ T29] audit: type=1400 audit(1773827137.176:107): avc: denied { read write } for pid=5745 comm="syz.1.18" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 135.480003][ T29] audit: type=1400 audit(1773827137.176:108): avc: denied { open } for pid=5745 comm="syz.1.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 135.552428][ T29] audit: type=1400 audit(1773827137.176:109): avc: denied { ioctl } for pid=5745 comm="syz.1.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 135.721107][ T1118] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 135.911194][ T1118] usb 2-1: Using ep0 maxpacket: 32
[ 135.918996][ T1118] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[ 135.927436][ T23] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 135.939662][ T1118] usb 2-1: config 0 has no interface number 0
[ 135.947148][ T1118] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 135.957458][ T1118] usb 2-1: config 0 interface 89 has no altsetting 0
[ 135.971386][ T1118] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 135.989774][ T1118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 135.997919][ T1118] usb 2-1: Product: syz
[ 136.020691][ T1118] usb 2-1: Manufacturer: syz
[ 136.025361][ T1118] usb 2-1: SerialNumber: syz
[ 136.041620][ T1118] usb 2-1: config 0 descriptor??
[ 136.045419][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 136.072381][ T1118] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 136.090987][ T1118] em28xx 2-1:0.89: Video interface 89 found:
[ 136.120879][ T23] usb 8-1: Using ep0 maxpacket: 32
[ 136.128021][ T23] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[ 136.144839][ T23] usb 8-1: config 0 has no interface number 0
[ 136.153626][ T23] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 136.165158][ T23] usb 8-1: config 0 interface 89 has no altsetting 0
[ 136.180742][ T23] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 136.199763][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 136.207876][ T23] usb 8-1: Product: syz
[ 136.220796][ T10] usb 7-1: Using ep0 maxpacket: 32
[ 136.233046][ T10] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 136.241699][ T23] usb 8-1: Manufacturer: syz
[ 136.246847][ T23] usb 8-1: SerialNumber: syz
[ 136.247239][ T10] usb 7-1: config 0 has no interface number 0
[ 136.259296][ T10] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 136.270531][ T10] usb 7-1: config 0 interface 89 has no altsetting 0
[ 136.279595][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 136.289522][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 136.292066][ T23] usb 8-1: config 0 descriptor??
[ 136.302907][ T10] usb 7-1: Product: syz
[ 136.307117][ T10] usb 7-1: Manufacturer: syz
[ 136.318141][ T10] usb 7-1: SerialNumber: syz
[ 136.326935][ T10] usb 7-1: config 0 descriptor??
[ 136.334064][ T23] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 136.344035][ T1118] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[ 136.352158][ T23] em28xx 8-1:0.89: Video interface 89 found:
[ 136.356106][ T10] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 136.377269][ T10] em28xx 7-1:0.89: Video interface 89 found:
[ 136.435674][ T1118] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 136.444170][ T1118] em28xx 2-1:0.89: board has no eeprom
[ 136.469927][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 136.509821][ T1118] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[ 136.517267][ T1118] em28xx 2-1:0.89: analog set to bulk mode.
[ 136.524690][ T5760] em28xx 2-1:0.89: Registering V4L2 extension
[ 136.539823][ T2817] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 136.559821][ T1118] usb 2-1: USB disconnect, device number 2
[ 136.577232][ T1118] em28xx 2-1:0.89: Disconnecting em28xx
[ 136.585241][ T23] em28xx 8-1:0.89: unknown em28xx chip ID (0)
[ 136.591444][ T10] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[ 136.614336][ T5760] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[ 136.622524][ T5760] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[ 136.629609][ T5760] em28xx 2-1:0.89: No AC97 audio processor
[ 136.634774][ T9] usb 1-1: Using ep0 maxpacket: 32
[ 136.646479][ T5760] usb 2-1: Decoder not found
[ 136.651599][ T5760] em28xx 2-1:0.89: failed to create media graph
[ 136.659304][ T9] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 136.663903][ T5760] em28xx 2-1:0.89: V4L2 device video0 deregistered
[ 136.677112][ T23] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 136.682228][ T10] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 136.692237][ T23] em28xx 8-1:0.89: board has no eeprom
[ 136.693873][ T9] usb 1-1: config 0 has no interface number 0
[ 136.705679][ T5760] em28xx 2-1:0.89: Registering snapshot button...
[ 136.715355][ T10] em28xx 7-1:0.89: board has no eeprom
[ 136.718444][ T5760] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input5
[ 136.721125][ T9] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 136.721165][ T9] usb 1-1: config 0 interface 89 has no altsetting 0
[ 136.725081][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 136.743478][ T5760] em28xx 2-1:0.89: Remote control support is not available for this card.
[ 136.748655][ T2817] usb 6-1: Using ep0 maxpacket: 32
[ 136.758913][ T1118] em28xx 2-1:0.89: Closing input extension
[ 136.768546][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 136.771814][ T23] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67)
[ 136.778746][ T9] usb 1-1: Product: syz
[ 136.779342][ T2817] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 136.811224][ T9] usb 1-1: Manufacturer: syz
[ 136.819219][ T9] usb 1-1: SerialNumber: syz
[ 136.823976][ T10] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[ 136.831368][ T23] em28xx 8-1:0.89: analog set to bulk mode.
[ 136.832711][ T10] em28xx 7-1:0.89: analog set to bulk mode.
[ 136.838740][ T1118] em28xx 2-1:0.89: Deregistering snapshot button
[ 136.847365][ T2817] usb 6-1: config 0 has no interface number 0
[ 136.858453][ T9] usb 1-1: config 0 descriptor??
[ 136.876603][ T9] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 136.896433][ T2817] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 136.908583][ T9] em28xx 1-1:0.89: Video interface 89 found:
[ 136.912976][ T23] usb 8-1: USB disconnect, device number 2
[ 136.919122][ T2817] usb 6-1: config 0 interface 89 has no altsetting 0
[ 136.933922][ T2817] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 136.949813][ T2817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 136.959209][ T10] usb 7-1: USB disconnect, device number 2
[ 136.963917][ T5760] em28xx 8-1:0.89: Registering V4L2 extension
[ 136.971977][ T2817] usb 6-1: Product: syz
[ 136.973454][ T23] em28xx 8-1:0.89: Disconnecting em28xx
[ 136.976212][ T2817] usb 6-1: Manufacturer: syz
[ 136.988841][ T10] em28xx 7-1:0.89: Disconnecting em28xx
[ 137.001652][ T1118] em28xx 2-1:0.89: Freeing device
[ 137.044513][ T2817] usb 6-1: SerialNumber: syz
[ 137.089384][ T2817] usb 6-1: config 0 descriptor??
[ 137.101709][ T5760] em28xx 8-1:0.89: Config register raw data: 0xffffffed
[ 137.137482][ T5760] em28xx 8-1:0.89: AC97 chip type couldn't be determined
[ 137.147006][ T9] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[ 137.157927][ T5760] em28xx 8-1:0.89: No AC97 audio processor
[ 137.168936][ T2817] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 137.192797][ T2817] em28xx 6-1:0.89: Video interface 89 found:
[ 137.203024][ T5760] usb 8-1: Decoder not found
[ 137.207693][ T5760] em28xx 8-1:0.89: failed to create media graph
[ 137.228052][ T9] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 137.228388][ T5760] em28xx 8-1:0.89: V4L2 device video0 deregistered
[ 137.262449][ T9] em28xx 1-1:0.89: board has no eeprom
[ 137.285358][ T5760] em28xx 8-1:0.89: Registering snapshot button...
[ 137.300401][ T5760] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input6
[ 137.330173][ T9] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[ 137.332362][ T5760] em28xx 8-1:0.89: Remote control support is not available for this card.
[ 137.351437][ T9] em28xx 1-1:0.89: analog set to bulk mode.
[ 137.360517][ T23] em28xx 8-1:0.89: Closing input extension
[ 137.366401][ T23] em28xx 8-1:0.89: Deregistering snapshot button
[ 137.372908][ T1118] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 137.382156][ T2817] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[ 137.411442][ T9] usb 1-1: USB disconnect, device number 2
[ 137.417697][ T5779] em28xx 7-1:0.89: Registering V4L2 extension
[ 137.425896][ T23] em28xx 8-1:0.89: Freeing device
[ 137.427911][ T9] em28xx 1-1:0.89: Disconnecting em28xx
[ 137.480196][ T2817] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 137.489389][ T2817] em28xx 6-1:0.89: board has no eeprom
[ 137.509237][ T5779] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[ 137.516355][ T5779] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[ 137.523873][ T5779] em28xx 7-1:0.89: No AC97 audio processor
[ 137.532503][ T5779] usb 7-1: Decoder not found
[ 137.537204][ T5779] em28xx 7-1:0.89: failed to create media graph
[ 137.544001][ T5779] em28xx 7-1:0.89: V4L2 device video0 deregistered
[ 137.553804][ T2817] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[ 137.559870][ T1118] usb 2-1: Using ep0 maxpacket: 32
[ 137.563498][ T2817] em28xx 6-1:0.89: analog set to bulk mode.
[ 137.573667][ T5779] em28xx 7-1:0.89: Registering snapshot button...
[ 137.573704][ T1118] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[ 137.588778][ T5779] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input7
[ 137.610117][ T5779] em28xx 7-1:0.89: Remote control support is not available for this card.
[ 137.618736][ T2509] em28xx 1-1:0.89: Registering V4L2 extension
[ 137.629310][ T2817] usb 6-1: USB disconnect, device number 2
[ 137.629674][ T1118] usb 2-1: config 0 has no interface number 0
[ 137.665934][ T1118] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 137.674029][ T2817] em28xx 6-1:0.89: Disconnecting em28xx
[ 137.696567][ T1118] usb 2-1: config 0 interface 89 has no altsetting 0
[ 137.724650][ T1118] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 137.746777][ T1118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 137.758829][ T1118] usb 2-1: Product: syz
[ 137.762080][ T2509] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[ 137.765804][ T1118] usb 2-1: Manufacturer: syz
[ 137.772513][ T2509] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[ 137.774638][ T1118] usb 2-1: SerialNumber: syz
[ 137.783760][ T2509] em28xx 1-1:0.89: No AC97 audio processor
[ 137.788260][ T23] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 137.802696][ T2509] usb 1-1: Decoder not found
[ 137.807432][ T1118] usb 2-1: config 0 descriptor??
[ 137.810509][ T2509] em28xx 1-1:0.89: failed to create media graph
[ 137.818838][ T2509] em28xx 1-1:0.89: V4L2 device video0 deregistered
[ 137.828229][ T2509] em28xx 1-1:0.89: Registering snapshot button...
[ 137.834765][ T1118] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 137.834880][ T1118] em28xx 2-1:0.89: Video interface 89 found:
[ 137.852471][ T2509] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input8
[ 137.865944][ T2509] em28xx 1-1:0.89: Remote control support is not available for this card.
[ 137.874665][ T5790] em28xx 6-1:0.89: Registering V4L2 extension
[ 137.928069][ T5790] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[ 137.935192][ T5790] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[ 137.947628][ T5790] em28xx 6-1:0.89: No AC97 audio processor
[ 137.955430][ T5790] usb 6-1: Decoder not found
[ 137.960115][ T5790] em28xx 6-1:0.89: failed to create media graph
[ 137.966414][ T5790] em28xx 6-1:0.89: V4L2 device video0 deregistered
[ 137.974899][ T5790] em28xx 6-1:0.89: Registering snapshot button...
[ 137.983303][ T5790] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input9
[ 137.990453][ T23] usb 8-1: Using ep0 maxpacket: 32
[ 138.000046][ T5790] em28xx 6-1:0.89: Remote control support is not available for this card.
[ 138.003471][ T23] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[ 138.009061][ T10] em28xx 7-1:0.89: Closing input extension
[ 138.019852][ T23] usb 8-1: config 0 has no interface number 0
[ 138.024914][ T10] em28xx 7-1:0.89: Deregistering snapshot button
[ 138.040911][ T23] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 138.048698][ T9] em28xx 1-1:0.89: Closing input extension
[ 138.053598][ T23] usb 8-1: config 0 interface 89 has no altsetting 0
[ 138.066420][ T23] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 138.069967][ T9] em28xx 1-1:0.89: Deregistering snapshot button
[ 138.077907][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 138.082387][ T10] em28xx 7-1:0.89: Freeing device
[ 138.091941][ T1118] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[ 138.101795][ T23] usb 8-1: Product: syz
[ 138.106255][ T23] usb 8-1: Manufacturer: syz
[ 138.112910][ T23] usb 8-1: SerialNumber: syz
[ 138.144735][ T23] usb 8-1: config 0 descriptor??
[ 138.156102][ T23] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 138.166497][ T23] em28xx 8-1:0.89: Video interface 89 found:
[ 138.186094][ T2817] em28xx 6-1:0.89: Closing input extension
[ 138.187121][ T1118] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 138.200477][ T2817] em28xx 6-1:0.89: Deregistering snapshot button
[ 138.213834][ T9] em28xx 1-1:0.89: Freeing device
[ 138.219378][ T1118] em28xx 2-1:0.89: board has no eeprom
[ 138.263638][ T2817] em28xx 6-1:0.89: Freeing device
[ 138.279835][ T1118] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[ 138.297028][ T1118] em28xx 2-1:0.89: analog set to bulk mode.
[ 138.314836][ T5760] em28xx 2-1:0.89: Registering V4L2 extension
[ 138.351997][ T1118] usb 2-1: USB disconnect, device number 3
[ 138.384325][ T1118] em28xx 2-1:0.89: Disconnecting em28xx
[ 138.431626][ T23] em28xx 8-1:0.89: unknown em28xx chip ID (0)
[ 138.439780][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 138.456521][ T5760] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[ 138.478684][ T5760] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[ 138.496428][ T5760] em28xx 2-1:0.89: No AC97 audio processor
[ 138.505024][ T23] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 138.520117][ T5760] usb 2-1: Decoder not found
[ 138.524857][ T5760] em28xx 2-1:0.89: failed to create media graph
[ 138.533467][ T23] em28xx 8-1:0.89: board has no eeprom
[ 138.539155][ T5760] em28xx 2-1:0.89: V4L2 device video0 deregistered
[ 138.548826][ T5799] ==================================================================
[ 138.556948][ T5799] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 138.559976][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 138.564458][ T5799] Read of size 8 at addr ffff888120e6c740 by task v4l_id/5799
[ 138.564486][ T5799]
[ 138.564540][ T5799] CPU: 1 UID: 0 PID: 5799 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 138.564658][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 138.564738][ T5799] Call Trace:
[ 138.564768][ T5799]
[ 138.564802][ T5799] dump_stack_lvl+0x100/0x190
[ 138.564908][ T5799] print_report+0x156/0x4c9
[ 138.565029][ T5799] ? __virt_addr_valid+0x81/0x620
[ 138.565124][ T5799] ? __phys_addr+0xe8/0x180
[ 138.565225][ T5799] ? v4l2_fh_init+0x27d/0x2c0
[ 138.565297][ T5799] kasan_report+0xdf/0x1e0
[ 138.565424][ T5799] ? v4l2_fh_init+0x27d/0x2c0
[ 138.565507][ T5799] v4l2_fh_init+0x27d/0x2c0
[ 138.565587][ T5799] v4l2_fh_open+0x64/0xa0
[ 138.565661][ T5799] em28xx_v4l2_open+0x11e/0x570
[ 138.565760][ T5799] v4l2_open+0x1d2/0x490
[ 138.565834][ T5799] ? __pfx_v4l2_open+0x10/0x10
[ 138.565909][ T5799] chrdev_open+0x234/0x6a0
[ 138.566031][ T5799] ? __pfx_chrdev_open+0x10/0x10
[ 138.566137][ T5799] ? path_get+0x61/0x80
[ 138.566251][ T5799] do_dentry_open+0x68b/0x14b0
[ 138.566345][ T5799] ? __pfx_chrdev_open+0x10/0x10
[ 138.566446][ T5799] ? inode_permission+0x374/0x620
[ 138.566570][ T5799] vfs_open+0x82/0x3f0
[ 138.566677][ T5799] ? may_open+0x1f3/0x410
[ 138.566804][ T5799] path_openat+0x208c/0x31a0
[ 138.566920][ T5799] ? __pfx_path_openat+0x10/0x10
[ 138.567040][ T5799] do_file_open+0x20e/0x430
[ 138.567142][ T5799] ? __pfx_do_file_open+0x10/0x10
[ 138.567270][ T5799] ? alloc_fd+0x42a/0x730
[ 138.567385][ T5799] ? do_getname+0x191/0x390
[ 138.567529][ T5799] do_sys_openat2+0x10d/0x1e0
[ 138.567634][ T5799] ? __pfx_do_sys_openat2+0x10/0x10
[ 138.567769][ T5799] __x64_sys_openat+0x12d/0x210
[ 138.567884][ T5799] ? __pfx___x64_sys_openat+0x10/0x10
[ 138.568008][ T5799] ? do_user_addr_fault+0x3e3/0x11d0
[ 138.568149][ T5799] do_syscall_64+0x106/0x7b0
[ 138.568232][ T5799] ? irqentry_exit+0x117/0x620
[ 138.568363][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.568445][ T5799] RIP: 0033:0x7f383bb51407
[ 138.568517][ T5799] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 138.568600][ T5799] RSP: 002b:00007ffec25dee30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 138.568680][ T5799] RAX: ffffffffffffffda RBX: 00007f383ba63880 RCX: 00007f383bb51407
[ 138.568729][ T5799] RDX: 0000000000000000 RSI: 00007ffec25dff25 RDI: ffffffffffffff9c
[ 138.568802][ T5799] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 138.568860][ T5799] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 138.568910][ T5799] R13: 00007ffec25df080 R14: 00007f383c2e7000 R15: 0000560d465ee4d8
[ 138.568999][ T5799]
[ 138.569022][ T5799]
[ 138.845545][ T5799] Allocated by task 5760:
[ 138.849901][ T5799] kasan_save_stack+0x30/0x50
[ 138.854638][ T5799] kasan_save_track+0x14/0x30
[ 138.859351][ T5799] __kasan_kmalloc+0x8f/0xa0
[ 138.863978][ T5799] em28xx_v4l2_init.cold+0x94/0x3503
[ 138.869301][ T5799] em28xx_init_extension+0x13a/0x200
[ 138.874627][ T5799] request_module_async+0x61/0x80
[ 138.879678][ T5799] process_one_work+0xa23/0x19a0
[ 138.884688][ T5799] worker_thread+0x5ef/0xe50
[ 138.889307][ T5799] kthread+0x370/0x450
[ 138.893405][ T5799] ret_from_fork+0x6c3/0xcb0
[ 138.898123][ T5799] ret_from_fork_asm+0x1a/0x30
[ 138.902939][ T5799]
[ 138.905282][ T5799] Freed by task 5760:
[ 138.909286][ T5799] kasan_save_stack+0x30/0x50
[ 138.914003][ T5799] kasan_save_track+0x14/0x30
[ 138.918803][ T5799] kasan_save_free_info+0x3b/0x70
[ 138.923858][ T5799] __kasan_slab_free+0x43/0x70
[ 138.928696][ T5799] kfree+0x1dc/0x640
[ 138.932610][ T5799] kref_put.isra.0+0x56/0x90
[ 138.937233][ T5799] em28xx_v4l2_init.cold+0x280/0x3503
[ 138.942697][ T5799] em28xx_init_extension+0x13a/0x200
[ 138.948027][ T5799] request_module_async+0x61/0x80
[ 138.953081][ T5799] process_one_work+0xa23/0x19a0
[ 138.958046][ T5799] worker_thread+0x5ef/0xe50
[ 138.962667][ T5799] kthread+0x370/0x450
[ 138.966763][ T5799] ret_from_fork+0x6c3/0xcb0
[ 138.971654][ T5799] ret_from_fork_asm+0x1a/0x30
[ 138.976471][ T5799]
[ 138.978822][ T5799] The buggy address belongs to the object at ffff888120e6c000
[ 138.978822][ T5799] which belongs to the cache kmalloc-8k of size 8192
[ 138.992917][ T5799] The buggy address is located 1856 bytes inside of
[ 138.992917][ T5799] freed 8192-byte region [ffff888120e6c000, ffff888120e6e000)
[ 139.006917][ T5799]
[ 139.009261][ T5799] The buggy address belongs to the physical page:
[ 139.015706][ T5799] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120e68
[ 139.024592][ T5799] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 139.033117][ T5799] flags: 0x200000000000040(head|node=0|zone=2)
[ 139.039304][ T5799] page_type: f5(slab)
[ 139.043318][ T5799] raw: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122
[ 139.051937][ T5799] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 139.060548][ T5799] head: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122
[ 139.069248][ T5799] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 139.077943][ T5799] head: 0200000000000003 ffffea0004839a01 00000000ffffffff 00000000ffffffff
[ 139.086637][ T5799] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 139.095336][ T5799] page dumped because: kasan: bad access detected
[ 139.101784][ T5799] page_owner tracks the page as allocated
[ 139.107531][ T5799] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2880, tgid 2880 (dbus-daemon), ts 25444158414, free_ts 0
[ 139.127369][ T5799] post_alloc_hook+0x153/0x170
[ 139.132810][ T5799] get_page_from_freelist+0xf10/0x39f0
[ 139.138310][ T5799] __alloc_frozen_pages_noprof+0x273/0x2860
[ 139.144240][ T5799] new_slab+0xa6/0x6c0
[ 139.148455][ T5799] refill_objects+0x26b/0x400
[ 139.153167][ T5799] __pcs_replace_empty_main+0x1ab/0x660
[ 139.158745][ T5799] __kmalloc_cache_noprof+0x52c/0x6b0
[ 139.164143][ T5799] audit_log_d_path+0xed/0x210
[ 139.168970][ T5799] audit_log_lsm_data+0xff3/0x1fa0
[ 139.174385][ T5799] common_lsm_audit+0x229/0x2b0
[ 139.179276][ T5799] slow_avc_audit+0x186/0x210
[ 139.183991][ T5799] avc_has_perm+0x1a6/0x1e0
[ 139.188528][ T5799] file_has_perm+0x1c7/0x350
[ 139.193146][ T5799] match_file+0xd7/0x150
[ 139.197429][ T5799] iterate_fd+0x11c/0x390
[ 139.201791][ T5799] selinux_bprm_committing_creds+0x293/0x720
[ 139.207819][ T5799] page_owner free stack trace missing
[ 139.213214][ T5799]
[ 139.215560][ T5799] Memory state around the buggy address:
[ 139.221206][ T5799] ffff888120e6c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 139.229288][ T5799] ffff888120e6c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 139.237375][ T5799] >ffff888120e6c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 139.245454][ T5799] ^
[ 139.251715][ T5799] ffff888120e6c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 139.259808][ T5799] ffff888120e6c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 139.267924][ T5799] ==================================================================
[ 139.276160][ T2817] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 139.276205][ T5760] em28xx 2-1:0.89: Registering snapshot button...
[ 139.291982][ T5760] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input10
[ 139.304359][ T23] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67)
[ 139.317811][ T23] em28xx 8-1:0.89: analog set to bulk mode.
[ 139.325401][ T5760] em28xx 2-1:0.89: Remote control support is not available for this card.
[ 139.334399][ T5760] em28xx 8-1:0.89: Registering V4L2 extension
[ 139.370834][ T23] usb 8-1: USB disconnect, device number 3
[ 139.378378][ T23] em28xx 8-1:0.89: Disconnecting em28xx
[ 139.403535][ T29] audit: type=1400 audit(1773827141.186:110): avc: denied { read } for pid=2839 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 139.438794][ T5799] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 139.446169][ T5799] CPU: 1 UID: 0 PID: 5799 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 139.455235][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 139.465447][ T5799] Call Trace:
[ 139.468763][ T5799]
[ 139.471736][ T5799] dump_stack_lvl+0x100/0x190
[ 139.476474][ T5799] vpanic+0x552/0x970
[ 139.480508][ T5799] ? __pfx_vpanic+0x10/0x10
[ 139.485064][ T5799] ? v4l2_fh_init+0x27d/0x2c0
[ 139.489788][ T5799] panic+0xd1/0xe0
[ 139.493566][ T5799] ? __pfx_panic+0x10/0x10
[ 139.498030][ T5799] ? v4l2_fh_init+0x27d/0x2c0
[ 139.502747][ T5799] ? preempt_schedule_common+0x42/0xc0
[ 139.508278][ T5799] ? check_panic_on_warn+0x1f/0x90
[ 139.513447][ T5799] check_panic_on_warn.cold+0x19/0x34
[ 139.518872][ T5799] end_report.part.0+0x3a/0x90
[ 139.523694][ T5799] kasan_report.cold+0xe/0x18
[ 139.528431][ T5799] ? v4l2_fh_init+0x27d/0x2c0
[ 139.533147][ T5799] v4l2_fh_init+0x27d/0x2c0
[ 139.537700][ T5799] v4l2_fh_open+0x64/0xa0
[ 139.542074][ T5799] em28xx_v4l2_open+0x11e/0x570
[ 139.546995][ T5799] v4l2_open+0x1d2/0x490
[ 139.551278][ T5799] ? __pfx_v4l2_open+0x10/0x10
[ 139.556090][ T5799] chrdev_open+0x234/0x6a0
[ 139.560556][ T5799] ? __pfx_chrdev_open+0x10/0x10
[ 139.565539][ T5799] ? path_get+0x61/0x80
[ 139.569750][ T5799] do_dentry_open+0x68b/0x14b0
[ 139.574563][ T5799] ? __pfx_chrdev_open+0x10/0x10
[ 139.579553][ T5799] ? inode_permission+0x374/0x620
[ 139.584640][ T5799] vfs_open+0x82/0x3f0
[ 139.588766][ T5799] ? may_open+0x1f3/0x410
[ 139.593176][ T5799] path_openat+0x208c/0x31a0
[ 139.597832][ T5799] ? __pfx_path_openat+0x10/0x10
[ 139.602835][ T5799] do_file_open+0x20e/0x430
[ 139.607399][ T5799] ? __pfx_do_file_open+0x10/0x10
[ 139.612491][ T5799] ? alloc_fd+0x42a/0x730
[ 139.616973][ T5799] ? do_getname+0x191/0x390
[ 139.621541][ T5799] do_sys_openat2+0x10d/0x1e0
[ 139.626332][ T5799] ? __pfx_do_sys_openat2+0x10/0x10
[ 139.631607][ T5799] __x64_sys_openat+0x12d/0x210
[ 139.636527][ T5799] ? __pfx___x64_sys_openat+0x10/0x10
[ 139.641959][ T5799] ? do_user_addr_fault+0x3e3/0x11d0
[ 139.647317][ T5799] do_syscall_64+0x106/0x7b0
[ 139.651954][ T5799] ? irqentry_exit+0x117/0x620
[ 139.656791][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.662745][ T5799] RIP: 0033:0x7f383bb51407
[ 139.667761][ T5799] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 139.687454][ T5799] RSP: 002b:00007ffec25dee30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 139.695927][ T5799] RAX: ffffffffffffffda RBX: 00007f383ba63880 RCX: 00007f383bb51407
[ 139.703940][ T5799] RDX: 0000000000000000 RSI: 00007ffec25dff25 RDI: ffffffffffffff9c
[ 139.712391][ T5799] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 139.720403][ T5799] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 139.728507][ T5799] R13: 00007ffec25df080 R14: 00007f383c2e7000 R15: 0000560d465ee4d8
[ 139.736559][ T5799]
[ 139.740714][ T5799] Kernel Offset: disabled
[ 139.745066][ T5799] Rebooting in 86400 seconds..