[ 33.403092][ T28] audit: type=1400 audit(1784067535.624:66): avc: denied { write } for pid=2924 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=473 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.432786][ T28] audit: type=1400 audit(1784067535.644:67): avc: denied { read } for pid=2927 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=473 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.459032][ T28] audit: type=1400 audit(1784067535.644:68): avc: denied { read open } for pid=2927 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=473 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.659241][ T28] audit: type=1400 audit(1784067535.874:69): avc: denied { write } for pid=2924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.807083][ T28] audit: type=1400 audit(1784067536.024:70): avc: denied { write } for pid=2938 comm="rm" name="hook-state" dev="tmpfs" ino=472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.919397][ T28] audit: type=1400 audit(1784067536.134:71): avc: denied { search } for pid=2924 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.414380][ T28] audit: type=1400 audit(1784067537.634:72): avc: denied { transition } for pid=2946 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.437254][ T28] audit: type=1400 audit(1784067537.634:73): avc: denied { noatsecure } for pid=2946 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.457279][ T28] audit: type=1400 audit(1784067537.634:74): avc: denied { write } for pid=2946 comm="sh" path="pipe:[2538]" dev="pipefs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 35.479823][ T28] audit: type=1400 audit(1784067537.634:75): avc: denied { rlimitinh } for pid=2946 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. 2026/07/14 22:20:20 parsed 1 programs [ 118.670524][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 118.670572][ T28] audit: type=1400 audit(1784067620.884:77): avc: denied { node_bind } for pid=2978 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 118.697707][ T28] audit: type=1400 audit(1784067620.894:78): avc: denied { module_request } for pid=2978 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 2026/07/14 22:20:20 serving rpc on tcp://35799 [ 121.764713][ T28] audit: type=1400 audit(1784067623.984:79): avc: denied { mounton } for pid=2988 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 121.789174][ T28] audit: type=1400 audit(1784067624.004:80): avc: denied { mount } for pid=2988 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 121.803476][ T2988] cgroup: Unknown subsys name 'net' [ 121.818588][ T28] audit: type=1400 audit(1784067624.034:81): avc: denied { unmount } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 121.956314][ T2988] cgroup: Unknown subsys name 'cpuset' [ 121.965396][ T2988] cgroup: Unknown subsys name 'rlimit' [ 122.112304][ T28] audit: type=1400 audit(1784067624.334:82): avc: denied { setattr } for pid=2988 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.135854][ T28] audit: type=1400 audit(1784067624.334:83): avc: denied { create } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.156813][ T28] audit: type=1400 audit(1784067624.334:84): avc: denied { write } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.178434][ T28] audit: type=1400 audit(1784067624.334:85): avc: denied { read } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.206116][ T28] audit: type=1400 audit(1784067624.424:86): avc: denied { sys_module } for pid=2988 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 122.340478][ T2993] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 122.380864][ T2988] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 124.015668][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 124.015691][ T28] audit: type=1400 audit(1784067626.234:95): avc: denied { execmem } for pid=2994 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 124.102073][ T28] audit: type=1400 audit(1784067626.304:96): avc: denied { read } for pid=2999 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.170885][ T28] audit: type=1400 audit(1784067626.304:97): avc: denied { open } for pid=2999 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.236328][ T28] audit: type=1400 audit(1784067626.314:98): avc: denied { mounton } for pid=2996 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 124.282495][ T28] audit: type=1400 audit(1784067626.454:99): avc: denied { create } for pid=2999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.335692][ T28] audit: type=1400 audit(1784067626.554:100): avc: denied { mounton } for pid=3000 comm="syz-executor" path="/root/syzkaller.yNIVQB/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 124.410845][ T28] audit: type=1400 audit(1784067626.554:101): avc: denied { mount } for pid=3000 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.474599][ T28] audit: type=1400 audit(1784067626.554:102): avc: denied { mounton } for pid=3000 comm="syz-executor" path="/root/syzkaller.yNIVQB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.551345][ T28] audit: type=1400 audit(1784067626.584:103): avc: denied { mount } for pid=3000 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 124.582652][ T28] audit: type=1400 audit(1784067626.584:104): avc: denied { mounton } for pid=3000 comm="syz-executor" path="/root/syzkaller.yNIVQB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 124.820096][ T3000] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. 2026/07/14 22:20:43 executed programs: 0 [ 141.135324][ T3046] syz-executor (3046) used greatest stack depth: 22024 bytes left 2026/07/14 22:21:35 executed programs: 10 [ 193.458995][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 193.459018][ T28] audit: type=1400 audit(1784067695.674:122): avc: denied { read write } for pid=5764 comm="syz.4.22" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.569086][ T28] audit: type=1400 audit(1784067695.674:123): avc: denied { open } for pid=5764 comm="syz.4.22" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.633337][ T28] audit: type=1400 audit(1784067695.674:124): avc: denied { ioctl } for pid=5764 comm="syz.4.22" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.742282][ T2790] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 193.912780][ T2790] usb 5-1: Using ep0 maxpacket: 32 [ 193.942013][ T2790] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 193.950756][ T2790] usb 5-1: config 0 has no interface number 0 [ 193.957004][ T2790] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.987810][ T2790] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 193.997579][ T2790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.015299][ T2790] usb 5-1: Product: syz [ 194.019640][ T2790] usb 5-1: Manufacturer: syz [ 194.024984][ T2790] usb 5-1: SerialNumber: syz [ 194.042539][ T37] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.056890][ T2790] usb 5-1: config 0 descriptor?? [ 194.087671][ T2790] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 194.098175][ T2790] em28xx 5-1:0.132: Video interface 132 found: [ 194.105233][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 194.202550][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 194.210145][ T37] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 194.220530][ T37] usb 6-1: config 0 has no interface number 0 [ 194.226807][ T37] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.239090][ T37] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 194.248314][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.256446][ T37] usb 6-1: Product: syz [ 194.260684][ T37] usb 6-1: Manufacturer: syz [ 194.265479][ T37] usb 6-1: SerialNumber: syz [ 194.271934][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 194.273717][ T5780] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 194.285848][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 194.287550][ T37] usb 6-1: config 0 descriptor?? [ 194.307012][ T9] usb 4-1: config 0 has no interface number 0 [ 194.314998][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.319736][ T37] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 194.333439][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 194.334905][ T37] em28xx 6-1:0.132: Video interface 132 found: [ 194.351910][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.357030][ T2790] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 194.360025][ T9] usb 4-1: Product: syz [ 194.370579][ T9] usb 4-1: Manufacturer: syz [ 194.375263][ T9] usb 4-1: SerialNumber: syz [ 194.384040][ T9] usb 4-1: config 0 descriptor?? [ 194.396470][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 194.406335][ T9] em28xx 4-1:0.132: Video interface 132 found: [ 194.437769][ T2790] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 194.447123][ T2790] em28xx 5-1:0.132: board has no eeprom [ 194.452403][ T11] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 194.454266][ T5780] usb 8-1: Using ep0 maxpacket: 32 [ 194.467917][ T5780] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 194.476370][ T5780] usb 8-1: config 0 has no interface number 0 [ 194.482603][ T5780] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.494810][ T5780] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 194.504042][ T5780] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.521964][ T2790] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 194.530580][ T5780] usb 8-1: Product: syz [ 194.535365][ T2790] em28xx 5-1:0.132: analog set to bulk mode. [ 194.541486][ T5780] usb 8-1: Manufacturer: syz [ 194.546790][ T5780] usb 8-1: SerialNumber: syz [ 194.553037][ T5786] em28xx 5-1:0.132: Registering V4L2 extension [ 194.570776][ T5780] usb 8-1: config 0 descriptor?? [ 194.579002][ T2790] usb 5-1: USB disconnect, device number 2 [ 194.586810][ T37] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 194.605413][ T2790] em28xx 5-1:0.132: Disconnecting em28xx [ 194.616029][ T5780] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 194.626117][ T5780] em28xx 8-1:0.132: Video interface 132 found: [ 194.632056][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 194.655867][ T37] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 194.657543][ T11] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 194.664718][ T37] em28xx 6-1:0.132: board has no eeprom [ 194.679333][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 194.689743][ T11] usb 7-1: config 0 has no interface number 0 [ 194.696512][ T11] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.713952][ T11] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 194.730863][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.744585][ T11] usb 7-1: Product: syz [ 194.748857][ T11] usb 7-1: Manufacturer: syz [ 194.753502][ T37] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 194.753538][ T37] em28xx 6-1:0.132: analog set to bulk mode. [ 194.771107][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 194.781641][ T9] em28xx 4-1:0.132: board has no eeprom [ 194.789195][ T11] usb 7-1: SerialNumber: syz [ 194.802028][ T37] usb 6-1: USB disconnect, device number 2 [ 194.821073][ T37] em28xx 6-1:0.132: Disconnecting em28xx [ 194.843283][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 194.853406][ T5780] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 194.859641][ T11] usb 7-1: config 0 descriptor?? [ 194.869381][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 194.887691][ T11] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 194.913442][ T11] em28xx 7-1:0.132: Video interface 132 found: [ 194.934074][ T9] usb 4-1: USB disconnect, device number 2 [ 194.944297][ T5780] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 194.967099][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 194.979606][ T5780] em28xx 8-1:0.132: board has no eeprom [ 195.000756][ T5786] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 195.008861][ T5786] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 195.016186][ T5786] em28xx 5-1:0.132: No AC97 audio processor [ 195.027846][ T5786] usb 5-1: Decoder not found [ 195.032585][ T5786] em28xx 5-1:0.132: failed to create media graph [ 195.039518][ T5786] em28xx 5-1:0.132: V4L2 device video0 deregistered [ 195.052328][ T5780] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 195.070064][ T5780] em28xx 8-1:0.132: analog set to bulk mode. [ 195.085363][ T5786] em28xx 5-1:0.132: Remote control support is not available for this card. [ 195.103823][ T2790] em28xx 5-1:0.132: Closing input extension [ 195.111933][ T5792] em28xx 6-1:0.132: Registering V4L2 extension [ 195.127139][ T5780] usb 8-1: USB disconnect, device number 2 [ 195.133016][ T11] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 195.148281][ T2790] em28xx 5-1:0.132: Freeing device [ 195.189888][ T5780] em28xx 8-1:0.132: Disconnecting em28xx [ 195.206941][ T11] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 195.248743][ T11] em28xx 7-1:0.132: board has no eeprom [ 195.312458][ T11] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 195.328266][ T11] em28xx 7-1:0.132: analog set to bulk mode. [ 195.376744][ T11] usb 7-1: USB disconnect, device number 2 [ 195.387685][ T5792] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 195.398547][ T11] em28xx 7-1:0.132: Disconnecting em28xx [ 195.399202][ T5792] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 195.422330][ T5792] em28xx 6-1:0.132: No AC97 audio processor [ 195.431809][ T5792] usb 6-1: Decoder not found [ 195.440279][ T5792] em28xx 6-1:0.132: failed to create media graph [ 195.447020][ T5792] em28xx 6-1:0.132: V4L2 device video0 deregistered [ 195.456615][ T5792] em28xx 6-1:0.132: Remote control support is not available for this card. [ 195.465710][ T5790] em28xx 4-1:0.132: Registering V4L2 extension [ 195.472086][ T2790] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 195.567344][ T5790] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 195.574743][ T5790] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 195.581993][ T5790] em28xx 4-1:0.132: No AC97 audio processor [ 195.590739][ T5790] usb 4-1: Decoder not found [ 195.601430][ T5790] em28xx 4-1:0.132: failed to create media graph [ 195.609441][ T5790] em28xx 4-1:0.132: V4L2 device video0 deregistered [ 195.618838][ T5790] em28xx 4-1:0.132: Remote control support is not available for this card. [ 195.624165][ T2790] usb 5-1: Using ep0 maxpacket: 32 [ 195.628890][ T9] em28xx 4-1:0.132: Closing input extension [ 195.640002][ T5795] em28xx 8-1:0.132: Registering V4L2 extension [ 195.649878][ T2790] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 195.659152][ T9] em28xx 4-1:0.132: Freeing device [ 195.670725][ T2790] usb 5-1: config 0 has no interface number 0 [ 195.677360][ T2790] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.697683][ T2790] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 195.712629][ T2790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.731930][ T2790] usb 5-1: Product: syz [ 195.736208][ T2790] usb 5-1: Manufacturer: syz [ 195.740853][ T2790] usb 5-1: SerialNumber: syz [ 195.751572][ T2790] usb 5-1: config 0 descriptor?? [ 195.766889][ T2790] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 195.777006][ T2790] em28xx 5-1:0.132: Video interface 132 found: [ 195.841898][ T5795] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 195.849053][ T5795] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 195.858142][ T5795] em28xx 8-1:0.132: No AC97 audio processor [ 195.866421][ T5795] usb 8-1: Decoder not found [ 195.871089][ T5795] em28xx 8-1:0.132: failed to create media graph [ 195.877587][ T5795] em28xx 8-1:0.132: V4L2 device video0 deregistered [ 195.893594][ T5795] em28xx 8-1:0.132: Remote control support is not available for this card. [ 195.902354][ T5801] em28xx 7-1:0.132: Registering V4L2 extension [ 196.010585][ T5801] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 196.012907][ T2790] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 196.018278][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 196.031557][ T5801] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 196.039270][ T5801] em28xx 7-1:0.132: No AC97 audio processor [ 196.047432][ T5801] usb 7-1: Decoder not found [ 196.052788][ T5801] em28xx 7-1:0.132: failed to create media graph [ 196.059227][ T5801] em28xx 7-1:0.132: V4L2 device video0 deregistered [ 196.067717][ T5801] em28xx 7-1:0.132: Remote control support is not available for this card. [ 196.076525][ T11] em28xx 7-1:0.132: Closing input extension [ 196.082966][ T37] em28xx 6-1:0.132: Closing input extension [ 196.090783][ T5780] em28xx 8-1:0.132: Closing input extension [ 196.097064][ T11] em28xx 7-1:0.132: Freeing device [ 196.104750][ T2790] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 196.119901][ T2790] em28xx 5-1:0.132: board has no eeprom [ 196.127188][ T37] em28xx 6-1:0.132: Freeing device [ 196.134479][ T5780] em28xx 8-1:0.132: Freeing device [ 196.191935][ T2790] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 196.200576][ T2790] em28xx 5-1:0.132: analog set to bulk mode. [ 196.213723][ T5795] em28xx 5-1:0.132: Registering V4L2 extension [ 196.221888][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 196.235873][ T2790] usb 5-1: USB disconnect, device number 3 [ 196.242259][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 196.258229][ T2790] em28xx 5-1:0.132: Disconnecting em28xx [ 196.263605][ T9] usb 4-1: config 0 has no interface number 0 [ 196.273726][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.305257][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 196.326405][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.335333][ T9] usb 4-1: Product: syz [ 196.339754][ T9] usb 4-1: Manufacturer: syz [ 196.345103][ T9] usb 4-1: SerialNumber: syz [ 196.357847][ T9] usb 4-1: config 0 descriptor?? [ 196.378299][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 196.396553][ T9] em28xx 4-1:0.132: Video interface 132 found: [ 196.423385][ T11] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 196.451988][ T37] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 196.484192][ T5780] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 196.499303][ T5795] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 196.517936][ T5795] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 196.528694][ T5795] em28xx 5-1:0.132: No AC97 audio processor [ 196.547655][ T5795] usb 5-1: Decoder not found [ 196.558073][ T5795] em28xx 5-1:0.132: failed to create media graph [ 196.567760][ T5795] em28xx 5-1:0.132: V4L2 device video0 deregistered [ 196.583649][ T5795] em28xx 5-1:0.132: Remote control support is not available for this card. [ 196.593678][ T2790] em28xx 5-1:0.132: Closing input extension [ 196.602168][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 196.603357][ T2790] em28xx 5-1:0.132: Freeing device [ 196.612697][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 196.617985][ T11] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 196.624117][ T37] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 196.630402][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 196.639368][ T37] usb 6-1: config 0 has no interface number 0 [ 196.641743][ T11] usb 7-1: config 0 has no interface number 0 [ 196.653404][ T5780] usb 8-1: Using ep0 maxpacket: 32 [ 196.659215][ T37] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.671333][ T11] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.672850][ T5780] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 196.688750][ T11] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 196.699821][ T5780] usb 8-1: config 0 has no interface number 0 [ 196.707763][ T5780] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.720971][ T37] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 196.730165][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 196.730212][ T9] em28xx 4-1:0.132: board has no eeprom [ 196.740477][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.746557][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.756879][ T5780] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 196.771258][ T5780] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.778182][ T11] usb 7-1: Product: syz [ 196.780686][ T5780] usb 8-1: Product: syz [ 196.784219][ T11] usb 7-1: Manufacturer: syz [ 196.788722][ T37] usb 6-1: Product: syz [ 196.792685][ T11] usb 7-1: SerialNumber: syz [ 196.797817][ T5780] usb 8-1: Manufacturer: syz [ 196.806483][ T37] usb 6-1: Manufacturer: syz [ 196.811215][ T5780] usb 8-1: SerialNumber: syz [ 196.815976][ T11] usb 7-1: config 0 descriptor?? [ 196.817148][ T37] usb 6-1: SerialNumber: syz [ 196.830429][ T11] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 196.832171][ T5780] usb 8-1: config 0 descriptor?? [ 196.842063][ T11] em28xx 7-1:0.132: Video interface 132 found: [ 196.852042][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 196.858631][ T37] usb 6-1: config 0 descriptor?? [ 196.866487][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 196.875281][ T5801] em28xx 4-1:0.132: Registering V4L2 extension [ 196.887710][ T37] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 196.898346][ T37] em28xx 6-1:0.132: Video interface 132 found: [ 196.910167][ T5780] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 196.920527][ T5780] em28xx 8-1:0.132: Video interface 132 found: [ 196.928380][ T9] usb 4-1: USB disconnect, device number 3 [ 196.953284][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 197.012250][ T2790] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 197.082474][ T11] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 197.106616][ T5801] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 197.115775][ T5801] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 197.124550][ T5801] em28xx 4-1:0.132: No AC97 audio processor [ 197.130570][ T37] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 197.136940][ T5780] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 197.139275][ T5801] usb 4-1: Decoder not found [ 197.151522][ T5801] em28xx 4-1:0.132: failed to create media graph [ 197.163302][ T2790] usb 5-1: Using ep0 maxpacket: 32 [ 197.175409][ T2790] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 197.183794][ T2790] usb 5-1: config 0 has no interface number 0 [ 197.183885][ T11] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 197.190013][ T2790] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.211769][ T2790] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 197.216950][ T5801] em28xx 4-1:0.132: V4L2 device video0 deregistered [ 197.229760][ T37] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 197.231524][ T11] em28xx 7-1:0.132: board has no eeprom [ 197.242309][ T5780] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 197.254476][ T2790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.262622][ T37] em28xx 6-1:0.132: board has no eeprom [ 197.264733][ T5801] em28xx 4-1:0.132: Remote control support is not available for this card. [ 197.270039][ T5780] em28xx 8-1:0.132: board has no eeprom [ 197.278538][ T9] em28xx 4-1:0.132: Closing input extension [ 197.283536][ T2790] usb 5-1: Product: syz [ 197.293707][ T2790] usb 5-1: Manufacturer: syz [ 197.298551][ T2790] usb 5-1: SerialNumber: syz [ 197.303788][ T9] em28xx 4-1:0.132: Freeing device [ 197.316672][ T2790] usb 5-1: config 0 descriptor?? [ 197.323437][ T11] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 197.332244][ T11] em28xx 7-1:0.132: analog set to bulk mode. [ 197.346929][ T5801] em28xx 7-1:0.132: Registering V4L2 extension [ 197.352230][ T37] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 197.362417][ T2790] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 197.371193][ T11] usb 7-1: USB disconnect, device number 3 [ 197.373426][ T5780] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 197.387899][ T37] em28xx 6-1:0.132: analog set to bulk mode. [ 197.398966][ T2790] em28xx 5-1:0.132: Video interface 132 found: [ 197.407955][ T5780] em28xx 8-1:0.132: analog set to bulk mode. [ 197.418853][ T11] em28xx 7-1:0.132: Disconnecting em28xx [ 197.428711][ T37] usb 6-1: USB disconnect, device number 3 [ 197.448427][ T37] em28xx 6-1:0.132: Disconnecting em28xx [ 197.463483][ T5780] usb 8-1: USB disconnect, device number 3 [ 197.498028][ T5780] em28xx 8-1:0.132: Disconnecting em28xx [ 197.583236][ T2790] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 197.651993][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 197.686095][ T2790] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 197.709584][ T2790] em28xx 5-1:0.132: board has no eeprom [ 197.723857][ T5801] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 197.731168][ T5801] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 197.739458][ T5801] em28xx 7-1:0.132: No AC97 audio processor [ 197.748853][ T5801] usb 7-1: Decoder not found [ 197.753870][ T5801] em28xx 7-1:0.132: failed to create media graph [ 197.760462][ T5801] em28xx 7-1:0.132: V4L2 device video0 deregistered [ 197.772441][ T5801] em28xx 7-1:0.132: Remote control support is not available for this card. [ 197.773395][ T2790] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 197.781368][ T11] em28xx 7-1:0.132: Closing input extension [ 197.797387][ T5795] em28xx 6-1:0.132: Registering V4L2 extension [ 197.804905][ T11] em28xx 7-1:0.132: Freeing device [ 197.812584][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 197.821914][ T2790] em28xx 5-1:0.132: analog set to bulk mode. [ 197.824911][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 197.845757][ T9] usb 4-1: config 0 has no interface number 0 [ 197.859821][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.865412][ T2790] usb 5-1: USB disconnect, device number 4 [ 197.895594][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 197.905760][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.928854][ T9] usb 4-1: Product: syz [ 197.941448][ T9] usb 4-1: Manufacturer: syz [ 197.947066][ T9] usb 4-1: SerialNumber: syz [ 197.954859][ T2790] em28xx 5-1:0.132: Disconnecting em28xx [ 197.960881][ T9] usb 4-1: config 0 descriptor?? [ 197.969455][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 197.979739][ T9] em28xx 4-1:0.132: Video interface 132 found: [ 198.055291][ T5795] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 198.068868][ T5795] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 198.079000][ T5795] em28xx 6-1:0.132: No AC97 audio processor [ 198.090065][ T5795] usb 6-1: Decoder not found [ 198.099574][ T5795] em28xx 6-1:0.132: failed to create media graph [ 198.106456][ T5795] em28xx 6-1:0.132: V4L2 device video0 deregistered [ 198.116622][ T5795] em28xx 6-1:0.132: Remote control support is not available for this card. [ 198.126483][ T5792] em28xx 8-1:0.132: Registering V4L2 extension [ 198.202728][ T11] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 198.223706][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 198.251404][ T5792] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 198.258574][ T5792] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 198.269840][ T5792] em28xx 8-1:0.132: No AC97 audio processor [ 198.280761][ T5792] usb 8-1: Decoder not found [ 198.285527][ T5792] em28xx 8-1:0.132: failed to create media graph [ 198.291974][ T5792] em28xx 8-1:0.132: V4L2 device video0 deregistered [ 198.299142][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 198.307526][ T5792] em28xx 8-1:0.132: Remote control support is not available for this card. [ 198.309719][ T9] em28xx 4-1:0.132: board has no eeprom [ 198.316609][ T5786] em28xx 5-1:0.132: Registering V4L2 extension [ 198.351990][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 198.359033][ T11] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 198.368101][ T11] usb 7-1: config 0 has no interface number 0 [ 198.374650][ T11] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.385195][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 198.393187][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 198.407705][ T11] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 198.417495][ T9] usb 4-1: USB disconnect, device number 4 [ 198.423483][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.434274][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 198.440029][ T11] usb 7-1: Product: syz [ 198.444942][ T11] usb 7-1: Manufacturer: syz [ 198.449728][ T11] usb 7-1: SerialNumber: syz [ 198.458976][ T11] usb 7-1: config 0 descriptor?? [ 198.470493][ T11] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 198.481559][ T11] em28xx 7-1:0.132: Video interface 132 found: [ 198.515698][ T5786] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 198.523209][ T5786] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 198.530414][ T5786] em28xx 5-1:0.132: No AC97 audio processor [ 198.538570][ T5786] usb 5-1: Decoder not found [ 198.543288][ T5786] em28xx 5-1:0.132: failed to create media graph [ 198.549690][ T5786] em28xx 5-1:0.132: V4L2 device video0 deregistered [ 198.558517][ T5786] em28xx 5-1:0.132: Remote control support is not available for this card. [ 198.568055][ T37] em28xx 6-1:0.132: Closing input extension [ 198.575737][ T5780] em28xx 8-1:0.132: Closing input extension [ 198.584105][ T5801] em28xx 4-1:0.132: Registering V4L2 extension [ 198.591226][ T37] em28xx 6-1:0.132: Freeing device [ 198.599048][ T5780] em28xx 8-1:0.132: Freeing device 2026/07/14 22:21:40 executed programs: 26 [ 198.724322][ T11] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 198.761798][ T5801] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 198.768974][ T5801] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 198.776329][ T5801] em28xx 4-1:0.132: No AC97 audio processor [ 198.785063][ T5801] usb 4-1: Decoder not found [ 198.789731][ T5801] em28xx 4-1:0.132: failed to create media graph [ 198.796234][ T5801] em28xx 4-1:0.132: V4L2 device video0 deregistered [ 198.804455][ T11] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 198.814253][ T11] em28xx 7-1:0.132: board has no eeprom [ 198.824648][ T5801] em28xx 4-1:0.132: Remote control support is not available for this card. [ 198.833474][ T2790] em28xx 5-1:0.132: Closing input extension [ 198.839587][ T9] em28xx 4-1:0.132: Closing input extension [ 198.848490][ T2790] em28xx 5-1:0.132: Freeing device [ 198.851239][ T9] em28xx 4-1:0.132: Freeing device [ 198.881971][ T11] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 198.901778][ T11] em28xx 7-1:0.132: analog set to bulk mode. [ 198.910054][ T5801] em28xx 7-1:0.132: Registering V4L2 extension [ 198.916501][ T37] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 198.931503][ T11] usb 7-1: USB disconnect, device number 4 [ 198.943574][ T11] em28xx 7-1:0.132: Disconnecting em28xx [ 198.952958][ T5780] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 199.072878][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 199.084566][ T37] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 199.108555][ T37] usb 6-1: config 0 has no interface number 0 [ 199.116262][ T37] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.126558][ T5780] usb 8-1: Using ep0 maxpacket: 32 [ 199.133883][ T5780] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 199.143167][ T5780] usb 8-1: config 0 has no interface number 0 [ 199.149637][ T5780] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.160070][ T37] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 199.169481][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.169731][ T5801] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 199.177700][ T2790] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 199.179078][ T37] usb 6-1: Product: syz [ 199.194831][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 199.210118][ T5780] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 199.220504][ T5801] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 199.221270][ T5780] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.238394][ T5801] em28xx 7-1:0.132: No AC97 audio processor [ 199.253884][ T37] usb 6-1: Manufacturer: syz [ 199.258708][ T5780] usb 8-1: Product: syz [ 199.268104][ T37] usb 6-1: SerialNumber: syz [ 199.277911][ T5780] usb 8-1: Manufacturer: syz [ 199.279893][ T5801] usb 7-1: Decoder not found [ 199.292723][ T5801] em28xx 7-1:0.132: failed to create media graph [ 199.299352][ T5801] em28xx 7-1:0.132: V4L2 device video0 deregistered [ 199.308201][ T37] usb 6-1: config 0 descriptor?? [ 199.313970][ T5780] usb 8-1: SerialNumber: syz [ 199.318651][ T5859] ================================================================== [ 199.326766][ T5859] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 199.334043][ T5859] Read of size 4 at addr ffff888120f68858 by task v4l_id/5859 [ 199.341547][ T5859] [ 199.343944][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(lazy) [ 199.343981][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 199.344009][ T5859] Call Trace: [ 199.344023][ T5859] [ 199.344034][ T5859] dump_stack_lvl+0x100/0x190 [ 199.344084][ T5859] print_report+0x13d/0x4b0 [ 199.344131][ T5859] ? __virt_addr_valid+0x239/0x430 [ 199.344177][ T5859] ? v4l2_open+0x351/0x490 [ 199.344220][ T5859] kasan_report+0xdf/0x1c0 [ 199.344263][ T5859] ? v4l2_open+0x351/0x490 [ 199.344309][ T5859] v4l2_open+0x351/0x490 [ 199.344353][ T5859] ? __pfx_v4l2_open+0x10/0x10 [ 199.344397][ T5859] chrdev_open+0x234/0x6a0 [ 199.344448][ T5859] ? __pfx_chrdev_open+0x10/0x10 [ 199.344497][ T5859] ? path_get+0x61/0x80 [ 199.344533][ T5859] do_dentry_open+0x68b/0x14b0 [ 199.344578][ T5859] ? __pfx_chrdev_open+0x10/0x10 [ 199.344634][ T5859] vfs_open+0x82/0x3f0 [ 199.344669][ T5859] path_openat+0x2873/0x4280 [ 199.344706][ T5859] ? __pfx_path_openat+0x10/0x10 [ 199.344748][ T5859] do_file_open+0x20e/0x430 [ 199.344778][ T5859] ? __pfx_do_file_open+0x10/0x10 [ 199.344821][ T5859] ? alloc_fd+0x471/0x7a0 [ 199.344851][ T5859] ? do_getname+0x191/0x390 [ 199.344888][ T5859] do_sys_openat2+0x10f/0x1e0 [ 199.344923][ T5859] ? __pfx_do_sys_openat2+0x10/0x10 [ 199.344966][ T5859] __x64_sys_openat+0x12d/0x210 [ 199.345002][ T5859] ? __pfx___x64_sys_openat+0x10/0x10 [ 199.345047][ T5859] do_syscall_64+0x10b/0x7f0 [ 199.345079][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.345112][ T5859] RIP: 0033:0x7f7ac290d407 [ 199.345136][ T5859] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 199.345174][ T5859] RSP: 002b:00007fff5b77fc50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 199.345203][ T5859] RAX: ffffffffffffffda RBX: 00007f7ac281f880 RCX: 00007f7ac290d407 [ 199.345224][ T5859] RDX: 0000000000000000 RSI: 00007fff5b780f24 RDI: ffffffffffffff9c [ 199.345243][ T5859] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 199.345261][ T5859] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 199.345279][ T5859] R13: 00007fff5b77fea0 R14: 00007f7ac30a3000 R15: 00005633fdfbb4d8 [ 199.345308][ T5859] [ 199.345319][ T5859] [ 199.346432][ T37] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 199.354280][ T5859] Allocated by task 5801: [ 199.354310][ T5859] kasan_save_stack+0x30/0x50 [ 199.354346][ T5859] kasan_save_track+0x14/0x30 [ 199.354378][ T5859] __kasan_kmalloc+0x8f/0xa0 [ 199.365508][ T2790] usb 5-1: Using ep0 maxpacket: 32 [ 199.367766][ T5859] __kmalloc_cache_noprof+0x35e/0x670 [ 199.371261][ T37] em28xx 6-1:0.132: Video interface 132 found: [ 199.375422][ T5859] em28xx_v4l2_init.cold+0x94/0x3a40 [ 199.375454][ T5859] em28xx_init_extension+0x13a/0x200 [ 199.375494][ T5859] request_module_async+0x61/0x80 [ 199.375536][ T5859] process_one_work+0xa23/0x1940 [ 199.397862][ T5780] usb 8-1: config 0 descriptor?? [ 199.398502][ T5859] worker_thread+0x5ef/0xe50 [ 199.398547][ T5859] kthread+0x370/0x450 [ 199.419986][ T2790] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 199.421119][ T5859] ret_from_fork+0x69a/0xc80 [ 199.426702][ T2790] usb 5-1: config 0 has no interface number 0 [ 199.430889][ T5859] ret_from_fork_asm+0x1a/0x30 [ 199.430923][ T5859] [ 199.430931][ T5859] Freed by task 5801: [ 199.444040][ T2790] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.444562][ T5859] kasan_save_stack+0x30/0x50 [ 199.478716][ T2790] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 199.483257][ T5859] kasan_save_track+0x14/0x30 [ 199.483297][ T5859] kasan_save_free_info+0x3b/0x70 [ 199.483344][ T5859] __kasan_slab_free+0x43/0x70 [ 199.483380][ T5859] kfree+0x20c/0x650 [ 199.489984][ T5780] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 199.493904][ T5859] kref_put.isra.0+0x53/0x75 [ 199.493935][ T5859] em28xx_v4l2_init.cold+0x280/0x3a40 [ 199.493966][ T5859] em28xx_init_extension+0x13a/0x200 [ 199.500374][ T2790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.518043][ T5859] request_module_async+0x61/0x80 [ 199.518092][ T5859] process_one_work+0xa23/0x1940 [ 199.518130][ T5859] worker_thread+0x5ef/0xe50 [ 199.518166][ T5859] kthread+0x370/0x450 [ 199.774389][ T5859] ret_from_fork+0x69a/0xc80 [ 199.779034][ T5859] ret_from_fork_asm+0x1a/0x30 [ 199.783837][ T5859] [ 199.786187][ T5859] The buggy address belongs to the object at ffff888120f68000 [ 199.786187][ T5859] which belongs to the cache kmalloc-8k of size 8192 [ 199.800278][ T5859] The buggy address is located 2136 bytes inside of [ 199.800278][ T5859] freed 8192-byte region [ffff888120f68000, ffff888120f6a000) [ 199.814283][ T5859] [ 199.816626][ T5859] The buggy address belongs to the physical page: [ 199.823077][ T5859] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120f68 [ 199.831960][ T5859] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 199.840490][ T5859] flags: 0x200000000000040(head|node=0|zone=2) [ 199.846690][ T5859] page_type: f5(slab) [ 199.850705][ T5859] raw: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122 [ 199.859330][ T5859] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 199.867971][ T5859] head: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122 [ 199.876680][ T5859] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 199.885391][ T5859] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 199.894118][ T5859] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 199.902833][ T5859] page dumped because: kasan: bad access detected [ 199.909282][ T5859] page_owner tracks the page as allocated [ 199.915031][ T5859] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2893, tgid 2893 (dhcpcd), ts 26688574709, free_ts 0 [ 199.934447][ T5859] post_alloc_hook+0xfd/0x120 [ 199.939179][ T5859] get_page_from_freelist+0xf25/0x3400 [ 199.944686][ T5859] __alloc_frozen_pages_noprof+0x28f/0x2b90 [ 199.950632][ T5859] new_slab+0xa2/0x670 [ 199.954762][ T5859] refill_objects+0xe3/0x410 [ 199.959542][ T5859] __pcs_replace_empty_main+0x376/0x680 [ 199.965151][ T5859] __kmalloc_cache_noprof+0x50e/0x670 [ 199.970576][ T5859] audit_log_d_path+0xed/0x210 [ 199.975395][ T5859] audit_log_lsm_data+0xff3/0x1fa0 [ 199.980575][ T5859] common_lsm_audit+0x229/0x2b0 [ 199.985534][ T5859] slow_avc_audit+0x186/0x210 [ 199.990270][ T5859] avc_has_perm+0x1a6/0x1e0 [ 199.994812][ T5859] inode_has_perm+0x166/0x1d0 [ 199.999533][ T5859] selinux_file_open+0x39d/0x510 [ 200.004519][ T5859] security_file_open+0x34/0x70 [ 200.009408][ T5859] do_dentry_open+0x589/0x14b0 [ 200.014223][ T5859] page_owner free stack trace missing [ 200.019615][ T5859] [ 200.021964][ T5859] Memory state around the buggy address: [ 200.027651][ T5859] ffff888120f68700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.035743][ T5859] ffff888120f68780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.043836][ T5859] >ffff888120f68800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.051923][ T5859] ^ [ 200.058887][ T5859] ffff888120f68880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.066983][ T5859] ffff888120f68900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.075067][ T5859] ================================================================== [ 200.083561][ T5801] em28xx 7-1:0.132: Remote control support is not available for this card. [ 200.093346][ T5780] em28xx 8-1:0.132: Video interface 132 found: [ 200.098931][ T11] em28xx 7-1:0.132: Closing input extension [ 200.109019][ T5859] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 200.116277][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(lazy) [ 200.125264][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 200.135382][ T5859] Call Trace: [ 200.138697][ T5859] [ 200.141670][ T5859] dump_stack_lvl+0x100/0x190 [ 200.146401][ T5859] vpanic+0x552/0x970 [ 200.150439][ T5859] ? __pfx_vpanic+0x10/0x10 [ 200.155000][ T5859] ? v4l2_open+0x351/0x490 [ 200.159492][ T5859] panic+0xd1/0xe0 [ 200.163359][ T5859] ? __pfx_panic+0x10/0x10 [ 200.167853][ T5859] ? v4l2_open+0x351/0x490 [ 200.172325][ T5859] ? preempt_schedule_common+0x42/0xc0 [ 200.177838][ T5859] ? check_panic_on_warn+0x1f/0x90 [ 200.183007][ T5859] check_panic_on_warn.cold+0x19/0x34 [ 200.188435][ T5859] end_report.part.0+0x3a/0x90 [ 200.193260][ T5859] kasan_report.cold+0xe/0x18 [ 200.197996][ T5859] ? v4l2_open+0x351/0x490 [ 200.202472][ T5859] v4l2_open+0x351/0x490 [ 200.206776][ T5859] ? __pfx_v4l2_open+0x10/0x10 [ 200.211600][ T5859] chrdev_open+0x234/0x6a0 [ 200.216085][ T5859] ? __pfx_chrdev_open+0x10/0x10 [ 200.221084][ T5859] ? path_get+0x61/0x80 [ 200.225289][ T5859] do_dentry_open+0x68b/0x14b0 [ 200.230119][ T5859] ? __pfx_chrdev_open+0x10/0x10 [ 200.235135][ T5859] vfs_open+0x82/0x3f0 [ 200.239272][ T5859] path_openat+0x2873/0x4280 [ 200.243921][ T5859] ? __pfx_path_openat+0x10/0x10 [ 200.248912][ T5859] do_file_open+0x20e/0x430 [ 200.253474][ T5859] ? __pfx_do_file_open+0x10/0x10 [ 200.258593][ T5859] ? alloc_fd+0x471/0x7a0 [ 200.262967][ T5859] ? do_getname+0x191/0x390 [ 200.267520][ T5859] do_sys_openat2+0x10f/0x1e0 [ 200.272264][ T5859] ? __pfx_do_sys_openat2+0x10/0x10 [ 200.277539][ T5859] __x64_sys_openat+0x12d/0x210 [ 200.282479][ T5859] ? __pfx___x64_sys_openat+0x10/0x10 [ 200.287928][ T5859] do_syscall_64+0x10b/0x7f0 [ 200.292582][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.298533][ T5859] RIP: 0033:0x7f7ac290d407 [ 200.303011][ T5859] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 200.322680][ T5859] RSP: 002b:00007fff5b77fc50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 200.331186][ T5859] RAX: ffffffffffffffda RBX: 00007f7ac281f880 RCX: 00007f7ac290d407 [ 200.339214][ T5859] RDX: 0000000000000000 RSI: 00007fff5b780f24 RDI: ffffffffffffff9c [ 200.347240][ T5859] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 200.355357][ T5859] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 200.363376][ T5859] R13: 00007fff5b77fea0 R14: 00007f7ac30a3000 R15: 00005633fdfbb4d8 [ 200.371409][ T5859] [ 200.374655][ T5859] Kernel Offset: disabled [ 200.379044][ T5859] Rebooting in 86400 seconds..