Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 37.944622][ T29] audit: type=1400 audit(1746875927.003:80): avc: denied { execmem } for pid=2940 comm="syz-executor105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.977686][ T29] audit: type=1400 audit(1746875927.003:81): avc: denied { read write } for pid=2942 comm="syz-executor105" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.002027][ T29] audit: type=1400 audit(1746875927.003:82): avc: denied { open } for pid=2942 comm="syz-executor105" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.026187][ T29] audit: type=1400 audit(1746875927.003:83): avc: denied { ioctl } for pid=2942 comm="syz-executor105" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.181711][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.211661][ T37] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.219251][ T1116] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 38.221617][ T831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.292163][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.331643][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 38.338629][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 38.346885][ T10] usb 1-1: config 0 has no interface number 0 [ 38.353116][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 38.366313][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 38.371842][ T1116] usb 2-1: Using ep0 maxpacket: 32 [ 38.375363][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.380505][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 38.388487][ T10] usb 1-1: Product: syz [ 38.388510][ T10] usb 1-1: Manufacturer: syz [ 38.396808][ T1116] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 38.397853][ T10] usb 1-1: SerialNumber: syz [ 38.397915][ T831] usb 5-1: Using ep0 maxpacket: 32 [ 38.402549][ T1116] usb 2-1: config 0 has no interface number 0 [ 38.414997][ T10] usb 1-1: config 0 descriptor?? [ 38.416106][ T1116] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 38.423944][ T831] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 38.432335][ T37] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 38.442586][ T831] usb 5-1: config 0 has no interface number 0 [ 38.446440][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 38.450833][ T37] usb 3-1: config 0 has no interface number 0 [ 38.459122][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 38.465741][ T37] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 38.476491][ T831] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 38.481786][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 38.490252][ T831] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 38.500737][ T23] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 38.509518][ T831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.509547][ T831] usb 5-1: Product: syz [ 38.514711][ T23] usb 4-1: config 0 has no interface number 0 [ 38.523761][ T831] usb 5-1: Manufacturer: syz [ 38.523784][ T831] usb 5-1: SerialNumber: syz [ 38.532000][ T23] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 38.550925][ T831] usb 5-1: config 0 descriptor?? [ 38.556498][ T37] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 38.566233][ T831] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 38.570746][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.575673][ T831] em28xx 5-1:0.132: Video interface 132 found: [ 38.584729][ T37] usb 3-1: Product: syz [ 38.613037][ T37] usb 3-1: Manufacturer: syz [ 38.617644][ T37] usb 3-1: SerialNumber: syz [ 38.622361][ T1116] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 38.631414][ T1116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.639493][ T1116] usb 2-1: Product: syz executing program [ 38.643741][ T1116] usb 2-1: Manufacturer: syz [ 38.648384][ T1116] usb 2-1: SerialNumber: syz [ 38.655815][ T23] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 38.664937][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.673008][ T23] usb 4-1: Product: syz [ 38.677203][ T23] usb 4-1: Manufacturer: syz [ 38.681849][ T23] usb 4-1: SerialNumber: syz [ 38.689628][ T1116] usb 2-1: config 0 descriptor?? [ 38.692082][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 38.696170][ T37] usb 3-1: config 0 descriptor?? [ 38.712570][ T1116] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 38.722371][ T1116] em28xx 2-1:0.132: Video interface 132 found: [ 38.732605][ T37] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 38.742637][ T37] em28xx 3-1:0.132: Video interface 132 found: [ 38.751973][ T23] usb 4-1: config 0 descriptor?? [ 38.763888][ T23] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 38.773773][ T23] em28xx 4-1:0.132: Video interface 132 found: executing program [ 38.791706][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 38.800990][ T10] em28xx 1-1:0.132: board has no eeprom [ 38.833405][ T831] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 38.871706][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 38.879568][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 38.886038][ T2955] em28xx 1-1:0.132: Registering V4L2 extension [ 38.898275][ T831] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 38.907075][ T831] em28xx 5-1:0.132: board has no eeprom [ 38.914586][ T10] usb 1-1: USB disconnect, device number 2 executing program executing program [ 38.922159][ T10] em28xx 1-1:0.132: Disconnecting em28xx executing program [ 38.984544][ T1116] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 38.994079][ T831] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 39.001995][ T831] em28xx 5-1:0.132: analog set to bulk mode. [ 39.005166][ T37] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 39.032423][ T23] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 39.062923][ T831] usb 5-1: USB disconnect, device number 2 [ 39.070333][ T831] em28xx 5-1:0.132: Disconnecting em28xx [ 39.078619][ T2955] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 39.083955][ T1116] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 39.086161][ T2955] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 39.095124][ T1116] em28xx 2-1:0.132: board has no eeprom [ 39.102363][ T2955] em28xx 1-1:0.132: No AC97 audio processor [ 39.106536][ T2955] usb 1-1: Decoder not found [ 39.116124][ T37] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 39.119130][ T2955] em28xx 1-1:0.132: failed to create media graph [ 39.127900][ T37] em28xx 3-1:0.132: board has no eeprom [ 39.128031][ T23] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 39.128060][ T23] em28xx 4-1:0.132: board has no eeprom [ 39.154408][ T2955] em28xx 1-1:0.132: V4L2 device video0 deregistered [ 39.162734][ T2955] em28xx 1-1:0.132: Remote control support is not available for this card. [ 39.171484][ T2964] em28xx 5-1:0.132: Registering V4L2 extension [ 39.181666][ T23] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 39.189676][ T23] em28xx 4-1:0.132: analog set to bulk mode. [ 39.195825][ T37] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 39.203732][ T37] em28xx 3-1:0.132: analog set to bulk mode. [ 39.209839][ T1116] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 39.217739][ T1116] em28xx 2-1:0.132: analog set to bulk mode. [ 39.237071][ T37] usb 3-1: USB disconnect, device number 2 [ 39.243628][ T23] usb 4-1: USB disconnect, device number 2 [ 39.260522][ T1116] usb 2-1: USB disconnect, device number 2 [ 39.267612][ T37] em28xx 3-1:0.132: Disconnecting em28xx [ 39.275414][ T23] em28xx 4-1:0.132: Disconnecting em28xx [ 39.284702][ T1116] em28xx 2-1:0.132: Disconnecting em28xx [ 39.291963][ T2964] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 39.299055][ T2964] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 39.306475][ T2964] em28xx 5-1:0.132: No AC97 audio processor [ 39.314746][ T2964] usb 5-1: Decoder not found [ 39.319359][ T2964] em28xx 5-1:0.132: failed to create media graph [ 39.325848][ T2964] em28xx 5-1:0.132: V4L2 device video0 deregistered [ 39.333421][ T2964] em28xx 5-1:0.132: Remote control support is not available for this card. [ 39.342085][ T10] em28xx 1-1:0.132: Closing input extension [ 39.348119][ T2956] em28xx 4-1:0.132: Registering V4L2 extension [ 39.354563][ T10] em28xx 1-1:0.132: Freeing device [ 39.447355][ T2956] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 39.454837][ T2956] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 39.462343][ T2956] em28xx 4-1:0.132: No AC97 audio processor [ 39.474341][ T2956] usb 4-1: Decoder not found [ 39.479018][ T2956] em28xx 4-1:0.132: failed to create media graph [ 39.487337][ T2956] em28xx 4-1:0.132: V4L2 device video0 deregistered [ 39.495005][ T2956] em28xx 4-1:0.132: Remote control support is not available for this card. [ 39.503694][ T2951] em28xx 3-1:0.132: Registering V4L2 extension [ 39.554200][ T2951] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 39.561259][ T2951] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 39.568425][ T2951] em28xx 3-1:0.132: No AC97 audio processor [ 39.580513][ T2951] usb 3-1: Decoder not found [ 39.585160][ T2951] em28xx 3-1:0.132: failed to create media graph [ 39.591497][ T2951] em28xx 3-1:0.132: V4L2 device video0 deregistered [ 39.599380][ T2951] em28xx 3-1:0.132: Remote control support is not available for this card. [ 39.608054][ T2975] em28xx 2-1:0.132: Registering V4L2 extension [ 39.656477][ T2975] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 39.663797][ T2975] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 39.670977][ T2975] em28xx 2-1:0.132: No AC97 audio processor [ 39.671906][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.679196][ T2975] usb 2-1: Decoder not found [ 39.689445][ T2975] em28xx 2-1:0.132: failed to create media graph [ 39.695916][ T2975] em28xx 2-1:0.132: V4L2 device video0 deregistered [ 39.703525][ T2975] em28xx 2-1:0.132: Remote control support is not available for this card. [ 39.712224][ T1116] em28xx 2-1:0.132: Closing input extension [ 39.718139][ T831] em28xx 5-1:0.132: Closing input extension [ 39.720457][ T1116] em28xx 2-1:0.132: Freeing device [ 39.727594][ T831] em28xx 5-1:0.132: Freeing device [ 39.729294][ T23] em28xx 4-1:0.132: Closing input extension [ 39.742251][ T37] em28xx 3-1:0.132: Closing input extension [ 39.766447][ T37] em28xx 3-1:0.132: Freeing device [ 39.775283][ T23] em28xx 4-1:0.132: Freeing device [ 39.833239][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 39.846807][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 39.855496][ T10] usb 1-1: config 0 has no interface number 0 [ 39.862929][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 39.877308][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 39.886539][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.894634][ T10] usb 1-1: Product: syz [ 39.898841][ T10] usb 1-1: Manufacturer: syz [ 39.903517][ T10] usb 1-1: SerialNumber: syz [ 39.915163][ T10] usb 1-1: config 0 descriptor?? [ 39.932549][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 39.942930][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 40.043155][ T831] usb 5-1: new high-speed USB device number 3 using dummy_hcd executing program [ 40.112031][ T1116] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.141658][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.149212][ T37] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 40.181971][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 40.211641][ T831] usb 5-1: Using ep0 maxpacket: 32 [ 40.218141][ T831] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 40.226399][ T831] usb 5-1: config 0 has no interface number 0 [ 40.232537][ T831] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 40.245663][ T831] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 40.254750][ T831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.262759][ T831] usb 5-1: Product: syz [ 40.266934][ T831] usb 5-1: Manufacturer: syz [ 40.271655][ T831] usb 5-1: SerialNumber: syz [ 40.276762][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 40.281613][ T1116] usb 2-1: Using ep0 maxpacket: 32 [ 40.285499][ T10] em28xx 1-1:0.132: board has no eeprom [ 40.293127][ T1116] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 40.299061][ T831] usb 5-1: config 0 descriptor?? [ 40.304319][ T1116] usb 2-1: config 0 has no interface number 0 [ 40.315475][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 40.319274][ T831] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 40.320714][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 40.330401][ T831] em28xx 5-1:0.132: Video interface 132 found: [ 40.341960][ T1116] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 40.351646][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 40.355224][ T37] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 40.360846][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 40.369060][ T37] usb 3-1: config 0 has no interface number 0 [ 40.370244][ T1116] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 40.375628][ T2964] em28xx 1-1:0.132: Registering V4L2 extension [ 40.381698][ T1116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.404968][ T1116] usb 2-1: Product: syz [ 40.405396][ T10] usb 1-1: USB disconnect, device number 3 [ 40.409145][ T1116] usb 2-1: Manufacturer: syz [ 40.409166][ T1116] usb 2-1: SerialNumber: syz [ 40.425591][ T37] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 40.433286][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 40.441690][ T23] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 40.450590][ T23] usb 4-1: config 0 has no interface number 0 [ 40.472018][ T23] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 40.485949][ T23] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 40.495471][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.503855][ T23] usb 4-1: Product: syz [ 40.508157][ T23] usb 4-1: Manufacturer: syz [ 40.513235][ T23] usb 4-1: SerialNumber: syz [ 40.519205][ T37] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 40.528783][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.537154][ T37] usb 3-1: Product: syz [ 40.541386][ T37] usb 3-1: Manufacturer: syz [ 40.546301][ T37] usb 3-1: SerialNumber: syz [ 40.563926][ T37] usb 3-1: config 0 descriptor?? [ 40.570574][ T23] usb 4-1: config 0 descriptor?? [ 40.580127][ T1116] usb 2-1: config 0 descriptor?? [ 40.581049][ T2964] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 40.592434][ T2964] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 40.598679][ T1116] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 40.599561][ T2964] em28xx 1-1:0.132: No AC97 audio processor [ 40.609353][ T1116] em28xx 2-1:0.132: Video interface 132 found: [ 40.614787][ T23] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) executing program [ 40.624489][ T831] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 40.631246][ T23] em28xx 4-1:0.132: Video interface 132 found: [ 40.645224][ T37] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 40.646014][ T2964] usb 1-1: Decoder not found [ 40.655418][ T37] em28xx 3-1:0.132: Video interface 132 found: [ 40.659816][ T2964] em28xx 1-1:0.132: failed to create media graph [ 40.672741][ T2964] em28xx 1-1:0.132: V4L2 device video0 deregistered [ 40.681266][ T2964] em28xx 1-1:0.132: Remote control support is not available for this card. [ 40.689989][ T10] em28xx 1-1:0.132: Closing input extension [ 40.703418][ T10] em28xx 1-1:0.132: Freeing device [ 40.708774][ T831] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 40.717581][ T831] em28xx 5-1:0.132: board has no eeprom executing program executing program executing program [ 40.785653][ T831] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 40.793610][ T831] em28xx 5-1:0.132: analog set to bulk mode. [ 40.805874][ T2964] em28xx 5-1:0.132: Registering V4L2 extension [ 40.842017][ T37] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 40.862328][ T1116] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 40.866592][ T831] usb 5-1: USB disconnect, device number 3 [ 40.885620][ T23] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 40.890373][ T831] em28xx 5-1:0.132: Disconnecting em28xx [ 40.900389][ T29] audit: type=1400 audit(1746875929.953:84): avc: denied { remove_name } for pid=2823 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.923112][ T29] audit: type=1400 audit(1746875929.953:85): avc: denied { rename } for pid=2823 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.933345][ T1116] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 40.955216][ T1116] em28xx 2-1:0.132: board has no eeprom [ 40.967829][ T37] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 40.976698][ T37] em28xx 3-1:0.132: board has no eeprom [ 40.982508][ T23] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 40.991242][ T23] em28xx 4-1:0.132: board has no eeprom [ 41.002650][ T2964] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 41.009729][ T2964] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 41.017607][ T2964] em28xx 5-1:0.132: No AC97 audio processor [ 41.025611][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.034755][ T2964] usb 5-1: Decoder not found [ 41.039358][ T2964] em28xx 5-1:0.132: failed to create media graph [ 41.045719][ T2964] em28xx 5-1:0.132: V4L2 device video0 deregistered [ 41.053201][ T2964] em28xx 5-1:0.132: Remote control support is not available for this card. [ 41.061629][ T1116] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 41.061842][ T831] em28xx 5-1:0.132: Closing input extension [ 41.069579][ T1116] em28xx 2-1:0.132: analog set to bulk mode. [ 41.077904][ T831] em28xx 5-1:0.132: Freeing device [ 41.081926][ T2951] em28xx 2-1:0.132: Registering V4L2 extension [ 41.092925][ T37] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 41.100785][ T37] em28xx 3-1:0.132: analog set to bulk mode. [ 41.106887][ T23] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 41.114775][ T23] em28xx 4-1:0.132: analog set to bulk mode. [ 41.144715][ T37] usb 3-1: USB disconnect, device number 3 [ 41.161913][ T1116] usb 2-1: USB disconnect, device number 3 [ 41.175665][ T1116] em28xx 2-1:0.132: Disconnecting em28xx [ 41.181659][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 41.188057][ T23] usb 4-1: USB disconnect, device number 3 [ 41.194267][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 41.194301][ T10] usb 1-1: config 0 has no interface number 0 [ 41.194348][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 41.218856][ T23] em28xx 4-1:0.132: Disconnecting em28xx [ 41.224511][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 41.234896][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.235133][ T37] em28xx 3-1:0.132: Disconnecting em28xx [ 41.243209][ T10] usb 1-1: Product: syz [ 41.252897][ T10] usb 1-1: Manufacturer: syz [ 41.257528][ T10] usb 1-1: SerialNumber: syz [ 41.274855][ T10] usb 1-1: config 0 descriptor?? [ 41.284782][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 41.294695][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 41.326792][ T2951] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 41.336027][ T2951] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 41.343171][ T2951] em28xx 2-1:0.132: No AC97 audio processor [ 41.350412][ T2951] usb 2-1: Decoder not found [ 41.355080][ T2951] em28xx 2-1:0.132: failed to create media graph [ 41.361425][ T2951] em28xx 2-1:0.132: V4L2 device video0 deregistered [ 41.369568][ T2951] em28xx 2-1:0.132: Remote control support is not available for this card. [ 41.378226][ T2956] em28xx 3-1:0.132: Registering V4L2 extension [ 41.391760][ T831] usb 5-1: new high-speed USB device number 4 using dummy_hcd executing program [ 41.457864][ T2956] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 41.464975][ T2956] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 41.475454][ T2956] em28xx 3-1:0.132: No AC97 audio processor [ 41.486709][ T2956] usb 3-1: Decoder not found [ 41.491361][ T2956] em28xx 3-1:0.132: failed to create media graph [ 41.503939][ T2956] em28xx 3-1:0.132: V4L2 device video0 deregistered [ 41.511498][ T2956] em28xx 3-1:0.132: Remote control support is not available for this card. [ 41.520176][ T2975] em28xx 4-1:0.132: Registering V4L2 extension [ 41.542391][ T831] usb 5-1: Using ep0 maxpacket: 32 [ 41.548212][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 41.556292][ T831] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 41.564707][ T831] usb 5-1: config 0 has no interface number 0 [ 41.571135][ T831] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 41.585399][ T831] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 41.594690][ T831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.602783][ T831] usb 5-1: Product: syz [ 41.606990][ T831] usb 5-1: Manufacturer: syz [ 41.607958][ T2975] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 41.611651][ T831] usb 5-1: SerialNumber: syz [ 41.618660][ T2975] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 41.626087][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 41.630391][ T2975] em28xx 4-1:0.132: No AC97 audio processor [ 41.639148][ T10] em28xx 1-1:0.132: board has no eeprom [ 41.648035][ T2975] usb 4-1: Decoder not found [ 41.655637][ T2975] em28xx 4-1:0.132: failed to create media graph [ 41.662463][ T831] usb 5-1: config 0 descriptor?? [ 41.666503][ T831] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 41.670798][ T2975] em28xx 4-1:0.132: V4L2 device video0 deregistered [ 41.677181][ T831] em28xx 5-1:0.132: Video interface 132 found: [ 41.691680][ T2975] em28xx 4-1:0.132: Remote control support is not available for this card. [ 41.700453][ T1116] em28xx 2-1:0.132: Closing input extension [ 41.702155][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 41.706922][ T37] em28xx 3-1:0.132: Closing input extension [ 41.714260][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 41.723198][ T1116] em28xx 2-1:0.132: Freeing device [ 41.731915][ T2964] em28xx 1-1:0.132: Registering V4L2 extension [ 41.737282][ T37] em28xx 3-1:0.132: Freeing device [ 41.743359][ T10] usb 1-1: USB disconnect, device number 4 [ 41.786537][ T10] em28xx 1-1:0.132: Disconnecting em28xx executing program [ 41.917489][ T2964] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 41.924635][ T2964] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 41.931851][ T2964] em28xx 1-1:0.132: No AC97 audio processor [ 41.938482][ T831] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 41.947830][ T2964] usb 1-1: Decoder not found [ 41.952600][ T2964] em28xx 1-1:0.132: failed to create media graph [ 41.959237][ T2964] em28xx 1-1:0.132: V4L2 device video0 deregistered [ 41.968157][ T2964] em28xx 1-1:0.132: Remote control support is not available for this card. [ 41.976964][ T23] em28xx 4-1:0.132: Closing input extension [ 41.987163][ T23] em28xx 4-1:0.132: Freeing device [ 41.987179][ T10] em28xx 1-1:0.132: Closing input extension [ 41.994192][ T10] em28xx 1-1:0.132: Freeing device [ 42.008058][ T831] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 42.017657][ T831] em28xx 5-1:0.132: board has no eeprom [ 42.091653][ T831] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 42.091745][ T1116] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 42.099511][ T831] em28xx 5-1:0.132: analog set to bulk mode. [ 42.107408][ T37] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 42.113447][ T2964] em28xx 5-1:0.132: Registering V4L2 extension [ 42.156857][ T831] usb 5-1: USB disconnect, device number 4 [ 42.174667][ T831] em28xx 5-1:0.132: Disconnecting em28xx [ 42.235849][ T2964] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 42.243212][ T2964] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 42.250552][ T2964] em28xx 5-1:0.132: No AC97 audio processor [ 42.258945][ T2964] usb 5-1: Decoder not found [ 42.263597][ T2964] em28xx 5-1:0.132: failed to create media graph [ 42.269932][ T2964] em28xx 5-1:0.132: V4L2 device video0 deregistered [ 42.277958][ T2964] em28xx 5-1:0.132: Remote control support is not available for this card. [ 42.286622][ T831] em28xx 5-1:0.132: Closing input extension [ 42.294388][ T831] em28xx 5-1:0.132: Freeing device [ 42.301662][ T1116] usb 2-1: Using ep0 maxpacket: 32 [ 42.306878][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 42.314782][ T37] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 42.323137][ T37] usb 3-1: config 0 has no interface number 0 [ 42.329374][ T1116] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 42.332666][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.337612][ T1116] usb 2-1: config 0 has no interface number 0 [ 42.351250][ T37] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.362440][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.371118][ T1116] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.385560][ T37] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 42.394776][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.402836][ T37] usb 3-1: Product: syz [ 42.407031][ T37] usb 3-1: Manufacturer: syz [ 42.411689][ T37] usb 3-1: SerialNumber: syz [ 42.417340][ T1116] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 42.426439][ T1116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.434480][ T1116] usb 2-1: Product: syz [ 42.438657][ T1116] usb 2-1: Manufacturer: syz [ 42.443379][ T1116] usb 2-1: SerialNumber: syz [ 42.449471][ T37] usb 3-1: config 0 descriptor?? [ 42.457721][ T37] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 42.467488][ T37] em28xx 3-1:0.132: Video interface 132 found: [ 42.475991][ T1116] usb 2-1: config 0 descriptor?? [ 42.484148][ T1116] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 42.493901][ T1116] em28xx 2-1:0.132: Video interface 132 found: [ 42.511911][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 42.518439][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 42.526923][ T10] usb 1-1: config 0 has no interface number 0 [ 42.533345][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.546707][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 42.551687][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 42.555821][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.563400][ T23] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 42.568956][ T10] usb 1-1: Product: syz [ 42.577186][ T23] usb 4-1: config 0 has no interface number 0 [ 42.581286][ T10] usb 1-1: Manufacturer: syz [ 42.581309][ T10] usb 1-1: SerialNumber: syz [ 42.588511][ T23] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.594938][ T10] usb 1-1: config 0 descriptor?? [ 42.599006][ T23] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 42.607788][ T831] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 42.612700][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 executing program [ 42.632346][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 42.637356][ T23] usb 4-1: Product: syz [ 42.647096][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 42.657770][ T23] usb 4-1: Manufacturer: syz [ 42.662532][ T23] usb 4-1: SerialNumber: syz [ 42.674871][ T23] usb 4-1: config 0 descriptor?? executing program [ 42.693785][ T23] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 42.703928][ T23] em28xx 4-1:0.132: Video interface 132 found: [ 42.722888][ T37] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 42.742027][ T1116] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 42.783235][ T37] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 42.791680][ T831] usb 5-1: Using ep0 maxpacket: 32 [ 42.792043][ T37] em28xx 3-1:0.132: board has no eeprom [ 42.798806][ T831] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 42.810981][ T831] usb 5-1: config 0 has no interface number 0 [ 42.813691][ T1116] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) executing program [ 42.817230][ T831] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.825872][ T1116] em28xx 2-1:0.132: board has no eeprom [ 42.849711][ T831] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 42.858874][ T831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.866972][ T831] usb 5-1: Product: syz [ 42.871171][ T831] usb 5-1: Manufacturer: syz [ 42.871771][ T37] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 42.876062][ T831] usb 5-1: SerialNumber: syz [ 42.883719][ T37] em28xx 3-1:0.132: analog set to bulk mode. [ 42.891176][ T831] usb 5-1: config 0 descriptor?? [ 42.899628][ T2975] em28xx 3-1:0.132: Registering V4L2 extension [ 42.907050][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 42.907155][ T1116] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 42.916173][ T831] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) executing program [ 42.921249][ T1116] em28xx 2-1:0.132: analog set to bulk mode. [ 42.931017][ T831] em28xx 5-1:0.132: Video interface 132 found: [ 42.972654][ T37] usb 3-1: USB disconnect, device number 4 [ 42.985388][ T1116] usb 2-1: USB disconnect, device number 4 [ 42.996053][ T37] em28xx 3-1:0.132: Disconnecting em28xx [ 43.006931][ T1116] em28xx 2-1:0.132: Disconnecting em28xx [ 43.007308][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 43.013962][ T23] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 43.022501][ T10] em28xx 1-1:0.132: board has no eeprom [ 43.078998][ T2975] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 43.086518][ T2975] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 43.091686][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 43.094016][ T2975] em28xx 3-1:0.132: No AC97 audio processor [ 43.101591][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 43.110671][ T23] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 43.122169][ T23] em28xx 4-1:0.132: board has no eeprom executing program [ 43.139033][ T10] usb 1-1: USB disconnect, device number 5 [ 43.147926][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 43.157761][ T2975] usb 3-1: Decoder not found [ 43.162565][ T2975] em28xx 3-1:0.132: failed to create media graph [ 43.168965][ T2975] em28xx 3-1:0.132: V4L2 device video0 deregistered [ 43.177094][ T2975] em28xx 3-1:0.132: Remote control support is not available for this card. [ 43.182050][ T831] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 43.185916][ T2956] em28xx 2-1:0.132: Registering V4L2 extension [ 43.198210][ T23] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 43.206545][ T23] em28xx 4-1:0.132: analog set to bulk mode. [ 43.218055][ T23] usb 4-1: USB disconnect, device number 4 [ 43.225684][ T23] em28xx 4-1:0.132: Disconnecting em28xx [ 43.253991][ T831] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 43.263552][ T831] em28xx 5-1:0.132: board has no eeprom [ 43.280789][ T2956] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 43.289385][ T2956] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 43.296878][ T2956] em28xx 2-1:0.132: No AC97 audio processor [ 43.306281][ T2956] usb 2-1: Decoder not found [ 43.310903][ T2956] em28xx 2-1:0.132: failed to create media graph [ 43.318659][ T2956] em28xx 2-1:0.132: V4L2 device video0 deregistered [ 43.321744][ T831] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 43.326737][ T2956] em28xx 2-1:0.132: Remote control support is not available for this card. [ 43.333147][ T831] em28xx 5-1:0.132: analog set to bulk mode. [ 43.342663][ T1116] em28xx 2-1:0.132: Closing input extension [ 43.354034][ T2964] em28xx 1-1:0.132: Registering V4L2 extension [ 43.356645][ T1116] em28xx 2-1:0.132: Freeing device [ 43.378921][ T831] usb 5-1: USB disconnect, device number 5 [ 43.405522][ T831] em28xx 5-1:0.132: Disconnecting em28xx [ 43.457373][ T2964] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 43.464779][ T2964] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 43.471980][ T2964] em28xx 1-1:0.132: No AC97 audio processor [ 43.478887][ T2964] usb 1-1: Decoder not found [ 43.483533][ T2964] em28xx 1-1:0.132: failed to create media graph [ 43.489885][ T2964] em28xx 1-1:0.132: V4L2 device video0 deregistered [ 43.498983][ T2964] em28xx 1-1:0.132: Remote control support is not available for this card. [ 43.507683][ T2951] em28xx 4-1:0.132: Registering V4L2 extension [ 43.555901][ T2951] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 43.563249][ T2951] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 43.570563][ T2951] em28xx 4-1:0.132: No AC97 audio processor [ 43.581003][ T2951] usb 4-1: Decoder not found [ 43.585678][ T2951] em28xx 4-1:0.132: failed to create media graph [ 43.592226][ T2951] em28xx 4-1:0.132: V4L2 device video0 deregistered [ 43.600026][ T2951] em28xx 4-1:0.132: Remote control support is not available for this card. [ 43.608780][ T37] em28xx 3-1:0.132: Closing input extension [ 43.614877][ T2955] em28xx 5-1:0.132: Registering V4L2 extension [ 43.617566][ T37] em28xx 3-1:0.132: Freeing device [ 43.681662][ T1116] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 43.736967][ T2955] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 43.744450][ T2955] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 43.752000][ T2955] em28xx 5-1:0.132: No AC97 audio processor [ 43.772124][ T2955] usb 5-1: Decoder not found [ 43.776774][ T2955] em28xx 5-1:0.132: failed to create media graph [ 43.784844][ T2955] em28xx 5-1:0.132: V4L2 device video0 deregistered [ 43.793283][ T2955] em28xx 5-1:0.132: Remote control support is not available for this card. [ 43.794466][ T3051] ================================================================== [ 43.803804][ T10] em28xx 1-1:0.132: Closing input extension [ 43.810350][ T3051] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 43.819404][ T10] em28xx 1-1:0.132: Freeing device [ 43.823678][ T3051] Read of size 8 at addr ffff88811d040730 by task v4l_id/3051 [ 43.823703][ T3051] [ 43.823717][ T3051] CPU: 1 UID: 0 PID: 3051 Comm: v4l_id Not tainted 6.15.0-rc4-syzkaller-00104-g588d032e9e56 #0 PREEMPT(voluntary) [ 43.823747][ T3051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.823760][ T3051] Call Trace: [ 43.823768][ T3051] [ 43.823777][ T3051] dump_stack_lvl+0x116/0x1f0 [ 43.823811][ T3051] print_report+0xc3/0x670 [ 43.823836][ T3051] ? __virt_addr_valid+0x5e/0x590 [ 43.823859][ T3051] ? __phys_addr+0xc6/0x150 [ 43.823882][ T3051] ? v4l2_fh_init+0x27d/0x2c0 [ 43.823911][ T3051] kasan_report+0xe0/0x110 [ 43.823936][ T3051] ? v4l2_fh_init+0x27d/0x2c0 [ 43.823969][ T3051] v4l2_fh_init+0x27d/0x2c0 [ 43.823998][ T3051] v4l2_fh_open+0x83/0xc0 [ 43.824028][ T3051] em28xx_v4l2_open+0x24e/0x7e0 [ 43.824059][ T3051] v4l2_open+0x222/0x490 [ 43.824086][ T3051] ? __pfx_v4l2_open+0x10/0x10 [ 43.824112][ T3051] chrdev_open+0x231/0x6a0 [ 43.824144][ T3051] ? __pfx_chrdev_open+0x10/0x10 [ 43.824180][ T3051] do_dentry_open+0x6d7/0x13a0 [ 43.824209][ T3051] ? __pfx_chrdev_open+0x10/0x10 [ 43.824240][ T3051] ? inode_permission+0xdd/0x5f0 [ 43.824263][ T3051] vfs_open+0x82/0x3f0 [ 43.824283][ T3051] ? may_open+0x1f2/0x400 [ 43.824315][ T3051] path_openat+0x1e5e/0x2d40 [ 43.824349][ T3051] ? __pfx_path_openat+0x10/0x10 [ 43.824382][ T3051] do_filp_open+0x20b/0x470 [ 43.824411][ T3051] ? __pfx_do_filp_open+0x10/0x10 [ 43.824451][ T3051] ? alloc_fd+0x420/0x760 [ 43.824483][ T3051] do_sys_openat2+0x11b/0x1d0 [ 43.824504][ T3051] ? __pfx_do_sys_openat2+0x10/0x10 [ 43.824531][ T3051] __x64_sys_openat+0x174/0x210 [ 43.824554][ T3051] ? __pfx___x64_sys_openat+0x10/0x10 [ 43.824577][ T3051] ? do_user_addr_fault+0x83f/0x1240 [ 43.824611][ T3051] do_syscall_64+0xcd/0x260 [ 43.824641][ T3051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.824664][ T3051] RIP: 0033:0x7f13b3ec49a4 [ 43.824682][ T3051] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 43.824703][ T3051] RSP: 002b:00007ffdd1818dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 43.824725][ T3051] RAX: ffffffffffffffda RBX: 00007ffdd1818fd8 RCX: 00007f13b3ec49a4 [ 43.824740][ T3051] RDX: 0000000000000000 RSI: 00007ffdd1819f25 RDI: 00000000ffffff9c [ 43.824754][ T3051] RBP: 00007ffdd1819f25 R08: 0000000000000000 R09: 0000000000000000 [ 43.824767][ T3051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.824781][ T3051] R13: 00007ffdd1818ff0 R14: 000055a1e764f670 R15: 00007f13b4315a80 [ 43.824803][ T3051] [ 43.824811][ T3051] [ 44.090450][ T3051] Allocated by task 2955: [ 44.094762][ T3051] kasan_save_stack+0x33/0x60 [ 44.099428][ T3051] kasan_save_track+0x14/0x30 [ 44.104101][ T3051] __kasan_kmalloc+0x8f/0xa0 [ 44.108674][ T3051] em28xx_v4l2_init+0x114/0x40c0 [ 44.113615][ T3051] em28xx_init_extension+0x137/0x200 [ 44.118888][ T3051] request_module_async+0x61/0x70 [ 44.123907][ T3051] process_one_work+0x9cc/0x1b70 [ 44.128841][ T3051] worker_thread+0x6c8/0xf10 [ 44.131692][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.133420][ T3051] kthread+0x3c2/0x780 [ 44.145237][ T3051] ret_from_fork+0x45/0x80 [ 44.149662][ T3051] ret_from_fork_asm+0x1a/0x30 [ 44.154421][ T3051] [ 44.156730][ T3051] Freed by task 2955: [ 44.160712][ T3051] kasan_save_stack+0x33/0x60 [ 44.165377][ T3051] kasan_save_track+0x14/0x30 [ 44.170053][ T3051] kasan_save_free_info+0x3b/0x60 [ 44.175070][ T3051] __kasan_slab_free+0x37/0x50 [ 44.179824][ T3051] kfree+0x286/0x470 [ 44.183729][ T3051] em28xx_v4l2_init+0x22c5/0x40c0 [ 44.188743][ T3051] em28xx_init_extension+0x137/0x200 [ 44.194041][ T3051] request_module_async+0x61/0x70 [ 44.199064][ T3051] process_one_work+0x9cc/0x1b70 [ 44.203983][ T3051] worker_thread+0x6c8/0xf10 [ 44.208576][ T3051] kthread+0x3c2/0x780 [ 44.212634][ T3051] ret_from_fork+0x45/0x80 [ 44.217039][ T3051] ret_from_fork_asm+0x1a/0x30 [ 44.221787][ T3051] [ 44.224094][ T3051] The buggy address belongs to the object at ffff88811d040000 [ 44.224094][ T3051] which belongs to the cache kmalloc-8k of size 8192 [ 44.238142][ T3051] The buggy address is located 1840 bytes inside of [ 44.238142][ T3051] freed 8192-byte region [ffff88811d040000, ffff88811d042000) [ 44.252095][ T3051] [ 44.254417][ T3051] The buggy address belongs to the physical page: [ 44.260808][ T3051] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d040 [ 44.269636][ T3051] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 44.278124][ T3051] flags: 0x200000000000040(head|node=0|zone=2) [ 44.284274][ T3051] page_type: f5(slab) [ 44.288245][ T3051] raw: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000 [ 44.291647][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 44.296822][ T3051] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 44.303930][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 44.310522][ T3051] head: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000 [ 44.318712][ T10] usb 1-1: config 0 has no interface number 0 [ 44.327321][ T3051] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 44.327347][ T3051] head: 0200000000000003 ffffea0004741001 00000000ffffffff 00000000ffffffff [ 44.327368][ T3051] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 44.338359][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 44.342085][ T3051] page dumped because: kasan: bad access detected [ 44.342099][ T3051] page_owner tracks the page as allocated [ 44.342107][ T3051] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2955, tgid 2955 (kworker/0:3), ts 43622153560, free_ts 43434385165 [ 44.353898][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 44.359454][ T3051] post_alloc_hook+0x181/0x1b0 [ 44.370516][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.376863][ T3051] get_page_from_freelist+0xfec/0x2d90 [ 44.376898][ T3051] __alloc_frozen_pages_noprof+0x25c/0x2160 [ 44.376930][ T3051] alloc_pages_mpol+0xe4/0x410 [ 44.382707][ T10] usb 1-1: Product: syz [ 44.403903][ T3051] new_slab+0x244/0x340 [ 44.403933][ T3051] ___slab_alloc+0xda5/0x1940 [ 44.412977][ T10] usb 1-1: Manufacturer: syz [ 44.417699][ T3051] __slab_alloc.constprop.0+0x56/0xb0 [ 44.425691][ T10] usb 1-1: SerialNumber: syz [ 44.431105][ T3051] __kmalloc_cache_noprof+0x209/0x3c0 [ 44.441620][ T10] usb 1-1: config 0 descriptor?? [ 44.441824][ T3051] em28xx_v4l2_init+0x114/0x40c0 [ 44.451177][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 44.454794][ T3051] em28xx_init_extension+0x137/0x200 [ 44.454836][ T3051] request_module_async+0x61/0x70 [ 44.454858][ T3051] process_one_work+0x9cc/0x1b70 [ 44.454879][ T3051] worker_thread+0x6c8/0xf10 [ 44.454900][ T3051] kthread+0x3c2/0x780 [ 44.459483][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 44.464837][ T3051] ret_from_fork+0x45/0x80 [ 44.464867][ T3051] ret_from_fork_asm+0x1a/0x30 [ 44.533817][ T3051] page last free pid 3042 tgid 3042 stack trace: [ 44.540159][ T3051] __free_frozen_pages+0x66c/0xe70 [ 44.545299][ T3051] __put_partials+0x16d/0x1c0 [ 44.549996][ T3051] qlist_free_all+0x4e/0x120 [ 44.554606][ T3051] kasan_quarantine_reduce+0x195/0x1e0 [ 44.560105][ T3051] __kasan_slab_alloc+0x4e/0x70 [ 44.564957][ T3051] kmem_cache_alloc_noprof+0x14f/0x3b0 [ 44.570453][ T3051] mas_alloc_nodes+0x18b/0x8b0 [ 44.575231][ T3051] mas_node_count_gfp+0x105/0x130 [ 44.580301][ T3051] mas_preallocate+0x53e/0xcd0 [ 44.585090][ T3051] commit_merge+0x28f/0xf10 [ 44.589611][ T3051] vma_expand+0x3c1/0x910 [ 44.593949][ T3051] vma_merge_new_range+0x332/0xb90 [ 44.599066][ T3051] __mmap_region+0x722/0x2620 [ 44.603787][ T3051] mmap_region+0x1ab/0x3f0 [ 44.608212][ T3051] do_mmap+0xd8e/0x11b0 [ 44.612443][ T3051] vm_mmap_pgoff+0x201/0x390 [ 44.617044][ T3051] [ 44.619357][ T3051] Memory state around the buggy address: [ 44.625029][ T3051] ffff88811d040600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.633100][ T3051] ffff88811d040680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.641170][ T3051] >ffff88811d040700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.649233][ T3051] ^ [ 44.654885][ T3051] ffff88811d040780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.662958][ T3051] ffff88811d040800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.671035][ T3051] ================================================================== [ 44.679445][ T3051] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 44.686681][ T3051] CPU: 1 UID: 0 PID: 3051 Comm: v4l_id Not tainted 6.15.0-rc4-syzkaller-00104-g588d032e9e56 #0 PREEMPT(voluntary) [ 44.698785][ T3051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.708857][ T3051] Call Trace: [ 44.712151][ T3051] [ 44.715090][ T3051] dump_stack_lvl+0x3d/0x1f0 [ 44.719706][ T3051] panic+0x71c/0x800 [ 44.723632][ T3051] ? __pfx_panic+0x10/0x10 [ 44.728068][ T3051] ? mark_held_locks+0x49/0x80 [ 44.732856][ T3051] ? v4l2_fh_init+0x27d/0x2c0 [ 44.737564][ T3051] ? check_panic_on_warn+0x1f/0xb0 [ 44.742703][ T3051] ? v4l2_fh_init+0x27d/0x2c0 [ 44.747398][ T3051] check_panic_on_warn+0xab/0xb0 [ 44.752361][ T3051] end_report+0x107/0x170 [ 44.756706][ T3051] kasan_report+0xee/0x110 [ 44.761134][ T3051] ? v4l2_fh_init+0x27d/0x2c0 [ 44.765842][ T3051] v4l2_fh_init+0x27d/0x2c0 [ 44.770364][ T3051] v4l2_fh_open+0x83/0xc0 [ 44.774711][ T3051] em28xx_v4l2_open+0x24e/0x7e0 [ 44.779581][ T3051] v4l2_open+0x222/0x490 [ 44.783844][ T3051] ? __pfx_v4l2_open+0x10/0x10 [ 44.788708][ T3051] chrdev_open+0x231/0x6a0 [ 44.793146][ T3051] ? __pfx_chrdev_open+0x10/0x10 [ 44.798107][ T3051] do_dentry_open+0x6d7/0x13a0 [ 44.802892][ T3051] ? __pfx_chrdev_open+0x10/0x10 [ 44.807851][ T3051] ? inode_permission+0xdd/0x5f0 [ 44.812836][ T3051] vfs_open+0x82/0x3f0 [ 44.816916][ T3051] ? may_open+0x1f2/0x400 [ 44.821261][ T3051] path_openat+0x1e5e/0x2d40 [ 44.825879][ T3051] ? __pfx_path_openat+0x10/0x10 [ 44.830837][ T3051] do_filp_open+0x20b/0x470 [ 44.835360][ T3051] ? __pfx_do_filp_open+0x10/0x10 [ 44.840410][ T3051] ? alloc_fd+0x420/0x760 [ 44.844761][ T3051] do_sys_openat2+0x11b/0x1d0 [ 44.849459][ T3051] ? __pfx_do_sys_openat2+0x10/0x10 [ 44.854765][ T3051] __x64_sys_openat+0x174/0x210 [ 44.859628][ T3051] ? __pfx___x64_sys_openat+0x10/0x10 [ 44.865016][ T3051] ? do_user_addr_fault+0x83f/0x1240 [ 44.870337][ T3051] do_syscall_64+0xcd/0x260 [ 44.874857][ T3051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.880773][ T3051] RIP: 0033:0x7f13b3ec49a4 [ 44.885213][ T3051] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 44.904931][ T3051] RSP: 002b:00007ffdd1818dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 44.913373][ T3051] RAX: ffffffffffffffda RBX: 00007ffdd1818fd8 RCX: 00007f13b3ec49a4 [ 44.921369][ T3051] RDX: 0000000000000000 RSI: 00007ffdd1819f25 RDI: 00000000ffffff9c [ 44.929388][ T3051] RBP: 00007ffdd1819f25 R08: 0000000000000000 R09: 0000000000000000 [ 44.937388][ T3051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.945370][ T3051] R13: 00007ffdd1818ff0 R14: 000055a1e764f670 R15: 00007f13b4315a80 [ 44.953360][ T3051] [ 44.956633][ T3051] Kernel Offset: disabled [ 44.960952][ T3051] Rebooting in 86400 seconds..