Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. 2026/03/22 17:52:55 parsed 1 programs [ 49.025855][ T29] audit: type=1400 audit(1774201975.228:62): avc: denied { node_bind } for pid=2965 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 49.047070][ T29] audit: type=1400 audit(1774201975.238:63): avc: denied { module_request } for pid=2965 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.917125][ T29] audit: type=1400 audit(1774201978.128:64): avc: denied { mounton } for pid=2975 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.940830][ T29] audit: type=1400 audit(1774201978.148:65): avc: denied { mount } for pid=2975 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.952877][ T2975] cgroup: Unknown subsys name 'net' [ 51.970419][ T29] audit: type=1400 audit(1774201978.188:66): avc: denied { unmount } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.129458][ T2975] cgroup: Unknown subsys name 'cpuset' [ 52.138865][ T2975] cgroup: Unknown subsys name 'rlimit' [ 52.326280][ T29] audit: type=1400 audit(1774201978.528:67): avc: denied { setattr } for pid=2975 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.349708][ T29] audit: type=1400 audit(1774201978.528:68): avc: denied { create } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.370738][ T29] audit: type=1400 audit(1774201978.528:69): avc: denied { write } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.391554][ T29] audit: type=1400 audit(1774201978.528:70): avc: denied { read } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.419874][ T29] audit: type=1400 audit(1774201978.628:71): avc: denied { sys_module } for pid=2975 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 52.548263][ T2979] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 52.576008][ T2975] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.118259][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 54.118284][ T29] audit: type=1400 audit(1774201980.318:80): avc: denied { execmem } for pid=2980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.206808][ T29] audit: type=1400 audit(1774201980.378:81): avc: denied { read } for pid=2985 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.248697][ T29] audit: type=1400 audit(1774201980.378:82): avc: denied { open } for pid=2985 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.304281][ T29] audit: type=1400 audit(1774201980.398:83): avc: denied { mounton } for pid=2985 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.334524][ T29] audit: type=1400 audit(1774201980.488:84): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.BSO0lr/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 54.386933][ T29] audit: type=1400 audit(1774201980.488:85): avc: denied { mount } for pid=2986 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.446840][ T29] audit: type=1400 audit(1774201980.508:86): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.BSO0lr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.509048][ T29] audit: type=1400 audit(1774201980.508:87): avc: denied { mount } for pid=2986 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.586838][ T29] audit: type=1400 audit(1774201980.538:88): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.BSO0lr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.666291][ T2986] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.688424][ T29] audit: type=1400 audit(1774201980.538:89): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.BSO0lr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 2026/03/22 17:53:16 executed programs: 0 2026/03/22 17:54:06 executed programs: 10 [ 120.097287][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 120.097348][ T29] audit: type=1400 audit(1774202046.298:107): avc: denied { read write } for pid=5744 comm="syz.7.18" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.176870][ T29] audit: type=1400 audit(1774202046.298:108): avc: denied { open } for pid=5744 comm="syz.7.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.266394][ T29] audit: type=1400 audit(1774202046.298:109): avc: denied { ioctl } for pid=5744 comm="syz.7.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.357398][ T1118] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 120.547111][ T1118] usb 8-1: Using ep0 maxpacket: 32 [ 120.554893][ T1118] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 120.563480][ T1118] usb 8-1: config 0 has no interface number 0 [ 120.569786][ T1118] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.583729][ T1118] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 120.593168][ T1118] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.601269][ T1118] usb 8-1: Product: syz [ 120.605636][ T1118] usb 8-1: Manufacturer: syz [ 120.610354][ T1118] usb 8-1: SerialNumber: syz [ 120.610905][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.624727][ T1118] usb 8-1: config 0 descriptor?? [ 120.641052][ T1118] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 120.651704][ T1118] em28xx 8-1:0.132: Video interface 132 found: [ 120.706895][ T28] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 120.716831][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 120.787322][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 120.796002][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 120.804874][ T10] usb 5-1: config 0 has no interface number 0 [ 120.811371][ T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.824023][ T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 120.834052][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.842191][ T10] usb 5-1: Product: syz [ 120.846456][ T10] usb 5-1: Manufacturer: syz [ 120.851560][ T10] usb 5-1: SerialNumber: syz [ 120.866804][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 120.876931][ T28] usb 7-1: Using ep0 maxpacket: 32 [ 120.877324][ T10] usb 5-1: config 0 descriptor?? [ 120.888848][ T9] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 120.896512][ T28] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 120.898101][ T9] usb 6-1: config 0 has no interface number 0 [ 120.916658][ T28] usb 7-1: config 0 has no interface number 0 [ 120.921041][ T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 120.926670][ T1118] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 120.940088][ T28] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.941540][ T9] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.960507][ T10] em28xx 5-1:0.132: Video interface 132 found: [ 120.965966][ T28] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 120.974335][ T9] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 120.976295][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.994015][ T28] usb 7-1: Product: syz [ 120.998493][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.998529][ T9] usb 6-1: Product: syz [ 120.998552][ T9] usb 6-1: Manufacturer: syz [ 120.998641][ T9] usb 6-1: SerialNumber: syz [ 121.007825][ T28] usb 7-1: Manufacturer: syz [ 121.028551][ T1118] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 121.037893][ T28] usb 7-1: SerialNumber: syz [ 121.046987][ T1118] em28xx 8-1:0.132: board has no eeprom [ 121.047652][ T9] usb 6-1: config 0 descriptor?? [ 121.064930][ T28] usb 7-1: config 0 descriptor?? [ 121.081525][ T28] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 121.082450][ T9] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 121.104066][ T9] em28xx 6-1:0.132: Video interface 132 found: [ 121.108093][ T28] em28xx 7-1:0.132: Video interface 132 found: [ 121.126780][ T1118] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 121.137917][ T1118] em28xx 8-1:0.132: analog set to bulk mode. [ 121.150544][ T5763] em28xx 8-1:0.132: Registering V4L2 extension [ 121.187166][ T10] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 121.194015][ T1118] usb 8-1: USB disconnect, device number 2 [ 121.208911][ T1118] em28xx 8-1:0.132: Disconnecting em28xx [ 121.249002][ T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 121.281474][ T10] em28xx 5-1:0.132: board has no eeprom [ 121.327600][ T9] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 121.334049][ T28] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 121.356815][ T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 121.376789][ T10] em28xx 5-1:0.132: analog set to bulk mode. [ 121.408645][ T28] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 121.410019][ T10] usb 5-1: USB disconnect, device number 2 [ 121.426880][ T5763] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 121.435569][ T5763] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 121.444559][ T9] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 121.444599][ T28] em28xx 7-1:0.132: board has no eeprom [ 121.457080][ T9] em28xx 6-1:0.132: board has no eeprom [ 121.465928][ T10] em28xx 5-1:0.132: Disconnecting em28xx [ 121.472767][ T5763] em28xx 8-1:0.132: No AC97 audio processor [ 121.486378][ T5763] usb 8-1: Decoder not found [ 121.491363][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.499934][ T5763] em28xx 8-1:0.132: failed to create media graph [ 121.507273][ T5763] em28xx 8-1:0.132: V4L2 device video0 deregistered [ 121.516320][ T5763] em28xx 8-1:0.132: Remote control support is not available for this card. [ 121.526258][ T38] em28xx 5-1:0.132: Registering V4L2 extension [ 121.532986][ T9] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 121.541566][ T9] em28xx 6-1:0.132: analog set to bulk mode. [ 121.554354][ T9] usb 6-1: USB disconnect, device number 2 [ 121.568399][ T9] em28xx 6-1:0.132: Disconnecting em28xx [ 121.577262][ T28] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 121.585229][ T28] em28xx 7-1:0.132: analog set to bulk mode. [ 121.604385][ T28] usb 7-1: USB disconnect, device number 2 [ 121.611957][ T28] em28xx 7-1:0.132: Disconnecting em28xx [ 121.668682][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 121.689236][ T23] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 121.699534][ T23] usb 4-1: config 0 has no interface number 0 [ 121.705709][ T23] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.719406][ T23] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 121.728855][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.737270][ T23] usb 4-1: Product: syz [ 121.741660][ T23] usb 4-1: Manufacturer: syz [ 121.746316][ T23] usb 4-1: SerialNumber: syz [ 121.754873][ T23] usb 4-1: config 0 descriptor?? [ 121.770697][ T38] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 121.771040][ T23] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 121.785040][ T38] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 121.795234][ T23] em28xx 4-1:0.132: Video interface 132 found: [ 121.838354][ T38] em28xx 5-1:0.132: No AC97 audio processor [ 121.851174][ T38] usb 5-1: Decoder not found [ 121.855904][ T38] em28xx 5-1:0.132: failed to create media graph [ 121.863284][ T38] em28xx 5-1:0.132: V4L2 device video0 deregistered [ 121.872174][ T38] em28xx 5-1:0.132: Remote control support is not available for this card. [ 121.881414][ T10] em28xx 5-1:0.132: Closing input extension [ 121.887835][ T1118] em28xx 8-1:0.132: Closing input extension [ 121.900745][ T10] em28xx 5-1:0.132: Freeing device [ 121.909459][ T5780] em28xx 6-1:0.132: Registering V4L2 extension [ 121.913703][ T1118] em28xx 8-1:0.132: Freeing device [ 122.017199][ T23] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 122.086516][ T23] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 122.102143][ T5780] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 122.110315][ T23] em28xx 4-1:0.132: board has no eeprom [ 122.114543][ T5780] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 122.123237][ T5780] em28xx 6-1:0.132: No AC97 audio processor [ 122.132389][ T5780] usb 6-1: Decoder not found [ 122.137225][ T5780] em28xx 6-1:0.132: failed to create media graph [ 122.143634][ T5780] em28xx 6-1:0.132: V4L2 device video0 deregistered [ 122.153386][ T5780] em28xx 6-1:0.132: Remote control support is not available for this card. [ 122.162486][ T9] em28xx 6-1:0.132: Closing input extension [ 122.169189][ T5763] em28xx 7-1:0.132: Registering V4L2 extension [ 122.177226][ T9] em28xx 6-1:0.132: Freeing device [ 122.185640][ T23] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 122.193911][ T23] em28xx 4-1:0.132: analog set to bulk mode. [ 122.226976][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.227608][ T23] usb 4-1: USB disconnect, device number 2 [ 122.269428][ T23] em28xx 4-1:0.132: Disconnecting em28xx [ 122.322699][ T1118] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 122.395498][ T5763] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 122.403735][ T5763] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 122.407101][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 122.413277][ T5763] em28xx 7-1:0.132: No AC97 audio processor [ 122.426199][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 122.429353][ T5763] usb 7-1: Decoder not found [ 122.435065][ T10] usb 5-1: config 0 has no interface number 0 [ 122.440363][ T5763] em28xx 7-1:0.132: failed to create media graph [ 122.453324][ T5763] em28xx 7-1:0.132: V4L2 device video0 deregistered [ 122.457328][ T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.488877][ T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 122.506808][ T1118] usb 8-1: Using ep0 maxpacket: 32 [ 122.515907][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 122.522321][ T1118] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 122.523864][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.538486][ T5763] em28xx 7-1:0.132: Remote control support is not available for this card. [ 122.555289][ T1118] usb 8-1: config 0 has no interface number 0 [ 122.563101][ T1118] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.567051][ T10] usb 5-1: Product: syz [ 122.574466][ T5778] em28xx 4-1:0.132: Registering V4L2 extension [ 122.588249][ T1118] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 122.590798][ T10] usb 5-1: Manufacturer: syz [ 122.602379][ T10] usb 5-1: SerialNumber: syz [ 122.607811][ T1118] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.623292][ T10] usb 5-1: config 0 descriptor?? [ 122.626381][ T1118] usb 8-1: Product: syz [ 122.632840][ T1118] usb 8-1: Manufacturer: syz [ 122.637748][ T1118] usb 8-1: SerialNumber: syz [ 122.648296][ T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 122.659174][ T10] em28xx 5-1:0.132: Video interface 132 found: [ 122.668786][ T1118] usb 8-1: config 0 descriptor?? [ 122.691775][ T1118] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 122.701903][ T1118] em28xx 8-1:0.132: Video interface 132 found: [ 122.737830][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 122.745025][ T9] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 122.753503][ T9] usb 6-1: config 0 has no interface number 0 [ 122.761221][ T9] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.774103][ T9] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 122.783482][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.791946][ T9] usb 6-1: Product: syz [ 122.796360][ T9] usb 6-1: Manufacturer: syz [ 122.801219][ T9] usb 6-1: SerialNumber: syz [ 122.810875][ T9] usb 6-1: config 0 descriptor?? [ 122.831587][ T9] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 122.857712][ T9] em28xx 6-1:0.132: Video interface 132 found: [ 122.875857][ T5778] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 122.883243][ T5778] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 122.890802][ T5778] em28xx 4-1:0.132: No AC97 audio processor [ 122.901185][ T10] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 122.910844][ T5778] usb 4-1: Decoder not found [ 122.915513][ T5778] em28xx 4-1:0.132: failed to create media graph [ 122.922291][ T5778] em28xx 4-1:0.132: V4L2 device video0 deregistered [ 122.930990][ T5778] em28xx 4-1:0.132: Remote control support is not available for this card. [ 122.940166][ T28] em28xx 7-1:0.132: Closing input extension [ 122.946828][ T23] em28xx 4-1:0.132: Closing input extension [ 122.955345][ T28] em28xx 7-1:0.132: Freeing device [ 122.962007][ T1118] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 122.970711][ T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 122.972212][ T23] em28xx 4-1:0.132: Freeing device [ 122.982329][ T10] em28xx 5-1:0.132: board has no eeprom [ 123.039209][ T1118] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 123.046968][ T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 123.056983][ T1118] em28xx 8-1:0.132: board has no eeprom [ 123.075871][ T10] em28xx 5-1:0.132: analog set to bulk mode. [ 123.084227][ T5780] em28xx 5-1:0.132: Registering V4L2 extension [ 123.091280][ T9] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 123.118958][ T10] usb 5-1: USB disconnect, device number 3 [ 123.131454][ T1118] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 123.142341][ T10] em28xx 5-1:0.132: Disconnecting em28xx [ 123.150812][ T1118] em28xx 8-1:0.132: analog set to bulk mode. [ 123.162513][ T9] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 123.181674][ T9] em28xx 6-1:0.132: board has no eeprom [ 123.190032][ T1118] usb 8-1: USB disconnect, device number 3 [ 123.203477][ T1118] em28xx 8-1:0.132: Disconnecting em28xx [ 123.256806][ T9] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 123.264867][ T9] em28xx 6-1:0.132: analog set to bulk mode. [ 123.299164][ T9] usb 6-1: USB disconnect, device number 3 [ 123.317175][ T28] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 123.322601][ T9] em28xx 6-1:0.132: Disconnecting em28xx [ 123.336905][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.396998][ T5780] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 123.410729][ T5780] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 123.421691][ T5780] em28xx 5-1:0.132: No AC97 audio processor [ 123.436164][ T5780] usb 5-1: Decoder not found [ 123.446904][ T5780] em28xx 5-1:0.132: failed to create media graph [ 123.459150][ T5780] em28xx 5-1:0.132: V4L2 device video0 deregistered [ 123.473707][ T5780] em28xx 5-1:0.132: Remote control support is not available for this card. [ 123.483307][ T5778] em28xx 8-1:0.132: Registering V4L2 extension [ 123.506813][ T28] usb 7-1: Using ep0 maxpacket: 32 [ 123.512160][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 123.520408][ T28] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 123.529668][ T23] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 123.538195][ T28] usb 7-1: config 0 has no interface number 0 [ 123.544555][ T23] usb 4-1: config 0 has no interface number 0 [ 123.550866][ T28] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.562259][ T23] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.575499][ T23] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 123.584864][ T28] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 123.594852][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.603210][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.611678][ T28] usb 7-1: Product: syz [ 123.615884][ T28] usb 7-1: Manufacturer: syz [ 123.620680][ T23] usb 4-1: Product: syz [ 123.625487][ T23] usb 4-1: Manufacturer: syz [ 123.630972][ T28] usb 7-1: SerialNumber: syz [ 123.640622][ T23] usb 4-1: SerialNumber: syz [ 123.670898][ T28] usb 7-1: config 0 descriptor?? [ 123.676056][ T23] usb 4-1: config 0 descriptor?? [ 123.692583][ T28] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 123.704694][ T23] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 123.714607][ T23] em28xx 4-1:0.132: Video interface 132 found: [ 123.720890][ T28] em28xx 7-1:0.132: Video interface 132 found: [ 123.762846][ T5778] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 123.770353][ T5778] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 123.777565][ T5778] em28xx 8-1:0.132: No AC97 audio processor [ 123.786056][ T5778] usb 8-1: Decoder not found [ 123.790948][ T5778] em28xx 8-1:0.132: failed to create media graph [ 123.797442][ T5778] em28xx 8-1:0.132: V4L2 device video0 deregistered [ 123.805835][ T5778] em28xx 8-1:0.132: Remote control support is not available for this card. [ 123.814593][ T38] em28xx 6-1:0.132: Registering V4L2 extension [ 123.928051][ T38] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 123.935304][ T38] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 123.945048][ T38] em28xx 6-1:0.132: No AC97 audio processor [ 123.953188][ T38] usb 6-1: Decoder not found [ 123.956305][ T28] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 123.958189][ T38] em28xx 6-1:0.132: failed to create media graph [ 123.958229][ T38] em28xx 6-1:0.132: V4L2 device video0 deregistered [ 123.963680][ T38] em28xx 6-1:0.132: Remote control support is not available for this card. [ 123.969817][ T23] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 123.971228][ T10] em28xx 5-1:0.132: Closing input extension [ 123.998557][ T1118] em28xx 8-1:0.132: Closing input extension [ 124.004599][ T9] em28xx 6-1:0.132: Closing input extension [ 124.012170][ T10] em28xx 5-1:0.132: Freeing device [ 124.015752][ T1118] em28xx 8-1:0.132: Freeing device [ 124.023404][ T9] em28xx 6-1:0.132: Freeing device [ 124.043505][ T28] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 124.055841][ T28] em28xx 7-1:0.132: board has no eeprom [ 124.067937][ T23] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 124.079565][ T23] em28xx 4-1:0.132: board has no eeprom [ 124.117039][ T28] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 124.125175][ T28] em28xx 7-1:0.132: analog set to bulk mode. [ 124.131691][ T5778] em28xx 7-1:0.132: Registering V4L2 extension [ 124.138040][ T23] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 124.151977][ T28] usb 7-1: USB disconnect, device number 3 [ 124.158647][ T23] em28xx 4-1:0.132: analog set to bulk mode. [ 124.166509][ T28] em28xx 7-1:0.132: Disconnecting em28xx [ 124.179049][ T23] usb 4-1: USB disconnect, device number 3 [ 124.187230][ T23] em28xx 4-1:0.132: Disconnecting em28xx [ 124.314530][ T5778] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 124.321816][ T5778] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 124.330033][ T1118] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 124.340931][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 124.342226][ T5778] em28xx 7-1:0.132: No AC97 audio processor [ 124.357622][ T5778] usb 7-1: Decoder not found [ 124.362653][ T5778] em28xx 7-1:0.132: failed to create media graph [ 124.370002][ T5778] em28xx 7-1:0.132: V4L2 device video0 deregistered [ 124.378200][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.380753][ T5778] em28xx 7-1:0.132: Remote control support is not available for this card. [ 124.424990][ T5763] em28xx 4-1:0.132: Registering V4L2 extension [ 124.498766][ T1118] usb 8-1: Using ep0 maxpacket: 32 [ 124.510006][ T1118] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 124.526126][ T1118] usb 8-1: config 0 has no interface number 0 [ 124.527028][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 124.539265][ T9] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 124.542461][ T1118] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.557092][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 124.562789][ T9] usb 6-1: config 0 has no interface number 0 [ 124.578522][ T9] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.583119][ T1118] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 124.589309][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 124.606064][ T10] usb 5-1: config 0 has no interface number 0 [ 124.613645][ T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.617054][ T1118] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.627010][ T9] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 124.641523][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.648562][ T1118] usb 8-1: Product: syz [ 124.650742][ T9] usb 6-1: Product: syz [ 124.656853][ T1118] usb 8-1: Manufacturer: syz [ 124.659866][ T9] usb 6-1: Manufacturer: syz [ 124.667331][ T1118] usb 8-1: SerialNumber: syz [ 124.672301][ T9] usb 6-1: SerialNumber: syz [ 124.677554][ T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 124.680381][ T1118] usb 8-1: config 0 descriptor?? [ 124.688280][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.700284][ T10] usb 5-1: Product: syz [ 124.705063][ T10] usb 5-1: Manufacturer: syz [ 124.713071][ T9] usb 6-1: config 0 descriptor?? [ 124.723727][ T10] usb 5-1: SerialNumber: syz [ 124.729659][ T1118] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 124.740575][ T9] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 124.740711][ T9] em28xx 6-1:0.132: Video interface 132 found: [ 124.757922][ T1118] em28xx 8-1:0.132: Video interface 132 found: [ 124.765120][ T10] usb 5-1: config 0 descriptor?? [ 124.783311][ T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 124.794369][ T10] em28xx 5-1:0.132: Video interface 132 found: [ 124.816272][ T5763] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 124.824647][ T5763] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 124.831889][ T5763] em28xx 4-1:0.132: No AC97 audio processor [ 124.840013][ T5763] usb 4-1: Decoder not found [ 124.844691][ T5763] em28xx 4-1:0.132: failed to create media graph [ 124.851163][ T5763] em28xx 4-1:0.132: V4L2 device video0 deregistered [ 124.860447][ T5763] em28xx 4-1:0.132: Remote control support is not available for this card. [ 124.869216][ T28] em28xx 7-1:0.132: Closing input extension [ 124.880496][ T23] em28xx 4-1:0.132: Closing input extension [ 124.890624][ T28] em28xx 7-1:0.132: Freeing device [ 124.900161][ T23] em28xx 4-1:0.132: Freeing device [ 124.978373][ T1118] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 124.993101][ T9] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 125.038675][ T1118] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 125.048079][ T10] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 125.056119][ T1118] em28xx 8-1:0.132: board has no eeprom [ 125.074026][ T9] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 125.082875][ T9] em28xx 6-1:0.132: board has no eeprom [ 125.109746][ T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 125.117065][ T1118] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 125.126403][ T1118] em28xx 8-1:0.132: analog set to bulk mode. [ 125.127048][ T10] em28xx 5-1:0.132: board has no eeprom [ 125.140218][ T5763] em28xx 8-1:0.132: Registering V4L2 extension [ 125.149128][ T9] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 125.166940][ T9] em28xx 6-1:0.132: analog set to bulk mode. [ 125.173905][ T1118] usb 8-1: USB disconnect, device number 4 [ 125.193832][ T9] usb 6-1: USB disconnect, device number 4 [ 125.208174][ T1118] em28xx 8-1:0.132: Disconnecting em28xx [ 125.219086][ T9] em28xx 6-1:0.132: Disconnecting em28xx [ 125.219135][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.232746][ T28] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 125.238112][ T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 125.259528][ T10] em28xx 5-1:0.132: analog set to bulk mode. [ 125.287846][ T10] usb 5-1: USB disconnect, device number 4 [ 125.303339][ T10] em28xx 5-1:0.132: Disconnecting em28xx [ 125.356274][ T5763] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 125.363447][ T5763] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 125.378344][ T5763] em28xx 8-1:0.132: No AC97 audio processor [ 125.385795][ T5763] usb 8-1: Decoder not found [ 125.390559][ T5763] em28xx 8-1:0.132: failed to create media graph [ 125.397003][ T28] usb 7-1: Using ep0 maxpacket: 32 [ 125.402217][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 125.407528][ T5763] em28xx 8-1:0.132: V4L2 device video0 deregistered [ 125.416041][ T28] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.425413][ T5763] em28xx 8-1:0.132: Remote control support is not available for this card. [ 125.434237][ T28] usb 7-1: config 0 has no interface number 0 [ 125.440501][ T38] em28xx 6-1:0.132: Registering V4L2 extension [ 125.446796][ T28] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.456865][ T23] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.465087][ T23] usb 4-1: config 0 has no interface number 0 [ 125.483991][ T23] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 2026/03/22 17:54:11 executed programs: 25 [ 125.504677][ T28] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 125.527978][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.536112][ T28] usb 7-1: Product: syz [ 125.557741][ T28] usb 7-1: Manufacturer: syz [ 125.562555][ T23] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 125.572636][ T28] usb 7-1: SerialNumber: syz [ 125.581899][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.596693][ T23] usb 4-1: Product: syz [ 125.615650][ T23] usb 4-1: Manufacturer: syz [ 125.620574][ T23] usb 4-1: SerialNumber: syz [ 125.632167][ T28] usb 7-1: config 0 descriptor?? [ 125.640885][ T23] usb 4-1: config 0 descriptor?? [ 125.661700][ T23] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 125.675452][ T28] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 125.685294][ T23] em28xx 4-1:0.132: Video interface 132 found: [ 125.691833][ T28] em28xx 7-1:0.132: Video interface 132 found: [ 125.737036][ T38] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 125.744139][ T38] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 125.752234][ T38] em28xx 6-1:0.132: No AC97 audio processor [ 125.760190][ T38] usb 6-1: Decoder not found [ 125.764843][ T38] em28xx 6-1:0.132: failed to create media graph [ 125.771303][ T38] em28xx 6-1:0.132: V4L2 device video0 deregistered [ 125.779976][ T38] em28xx 6-1:0.132: Remote control support is not available for this card. [ 125.789156][ T5780] em28xx 5-1:0.132: Registering V4L2 extension [ 125.907897][ T23] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 125.914256][ T28] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 125.930566][ T5780] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 125.937836][ T5780] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 125.944960][ T5780] em28xx 5-1:0.132: No AC97 audio processor [ 125.952695][ T5780] usb 5-1: Decoder not found [ 125.957407][ T5780] em28xx 5-1:0.132: failed to create media graph [ 125.963770][ T5780] em28xx 5-1:0.132: V4L2 device video0 deregistered [ 125.974285][ T5780] em28xx 5-1:0.132: Remote control support is not available for this card. [ 125.983095][ T1118] em28xx 8-1:0.132: Closing input extension [ 125.991560][ T23] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 126.000749][ T9] em28xx 6-1:0.132: Closing input extension [ 126.002747][ T28] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 126.008333][ T10] em28xx 5-1:0.132: Closing input extension [ 126.022118][ T1118] em28xx 8-1:0.132: Freeing device [ 126.027707][ T23] em28xx 4-1:0.132: board has no eeprom [ 126.033386][ T28] em28xx 7-1:0.132: board has no eeprom [ 126.036549][ T9] em28xx 6-1:0.132: Freeing device [ 126.046435][ T10] em28xx 5-1:0.132: Freeing device [ 126.107954][ T28] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 126.115928][ T23] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 126.125349][ T28] em28xx 7-1:0.132: analog set to bulk mode. [ 126.131461][ T23] em28xx 4-1:0.132: analog set to bulk mode. [ 126.138977][ T5763] em28xx 7-1:0.132: Registering V4L2 extension [ 126.174043][ T23] usb 4-1: USB disconnect, device number 4 [ 126.183573][ T28] usb 7-1: USB disconnect, device number 4 [ 126.196667][ T28] em28xx 7-1:0.132: Disconnecting em28xx [ 126.200502][ T23] em28xx 4-1:0.132: Disconnecting em28xx [ 126.342628][ T5763] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 126.351343][ T5763] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 126.366794][ T1118] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 126.370065][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.376919][ T5763] em28xx 7-1:0.132: No AC97 audio processor [ 126.386383][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 126.426966][ T5763] usb 7-1: Decoder not found [ 126.436491][ T5763] em28xx 7-1:0.132: failed to create media graph [ 126.454941][ T5763] em28xx 7-1:0.132: V4L2 device video0 deregistered [ 126.479210][ T5763] em28xx 7-1:0.132: Remote control support is not available for this card. [ 126.479586][ T5848] ================================================================== [ 126.488288][ T5778] em28xx 4-1:0.132: Registering V4L2 extension [ 126.495956][ T5848] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 126.509652][ T5848] Read of size 8 at addr ffff8881032f8740 by task v4l_id/5848 [ 126.517130][ T5848] [ 126.519516][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 126.519554][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.519581][ T5848] Call Trace: [ 126.519592][ T5848] [ 126.519604][ T5848] dump_stack_lvl+0x100/0x190 [ 126.519650][ T5848] print_report+0x156/0x4c9 [ 126.519695][ T5848] ? __virt_addr_valid+0x81/0x620 [ 126.519734][ T5848] ? __phys_addr+0xe8/0x180 [ 126.519774][ T5848] ? v4l2_fh_init+0x27d/0x2c0 [ 126.519803][ T5848] kasan_report+0xdf/0x1e0 [ 126.519856][ T5848] ? v4l2_fh_init+0x27d/0x2c0 [ 126.519890][ T5848] v4l2_fh_init+0x27d/0x2c0 [ 126.519920][ T5848] v4l2_fh_open+0x64/0xa0 [ 126.519950][ T5848] em28xx_v4l2_open+0x11e/0x570 [ 126.520006][ T5848] v4l2_open+0x1d2/0x490 [ 126.520035][ T5848] ? __pfx_v4l2_open+0x10/0x10 [ 126.520064][ T5848] chrdev_open+0x234/0x6a0 [ 126.520108][ T5848] ? __pfx_chrdev_open+0x10/0x10 [ 126.520143][ T5848] ? path_get+0x61/0x80 [ 126.520188][ T5848] do_dentry_open+0x68b/0x14b0 [ 126.520211][ T5848] ? __pfx_chrdev_open+0x10/0x10 [ 126.520238][ T5848] ? inode_permission+0x374/0x620 [ 126.520272][ T5848] vfs_open+0x82/0x3f0 [ 126.520300][ T5848] ? may_open+0x1f3/0x410 [ 126.520333][ T5848] path_openat+0x208c/0x31a0 [ 126.520364][ T5848] ? __pfx_path_openat+0x10/0x10 [ 126.520396][ T5848] do_file_open+0x20e/0x430 [ 126.520423][ T5848] ? __pfx_do_file_open+0x10/0x10 [ 126.520460][ T5848] ? alloc_fd+0x42a/0x730 [ 126.520488][ T5848] ? do_getname+0x191/0x390 [ 126.520520][ T5848] do_sys_openat2+0x10d/0x1e0 [ 126.520551][ T5848] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.520587][ T5848] __x64_sys_openat+0x12d/0x210 [ 126.520619][ T5848] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.520652][ T5848] ? do_user_addr_fault+0x3e3/0x11d0 [ 126.520690][ T5848] do_syscall_64+0x106/0x7b0 [ 126.520712][ T5848] ? irqentry_exit+0x117/0x620 [ 126.520747][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.520770][ T5848] RIP: 0033:0x7f3197715407 [ 126.520791][ T5848] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 126.520815][ T5848] RSP: 002b:00007ffcf05aaaa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 126.520839][ T5848] RAX: ffffffffffffffda RBX: 00007f3197627880 RCX: 00007f3197715407 [ 126.520854][ T5848] RDX: 0000000000000000 RSI: 00007ffcf05abf24 RDI: ffffffffffffff9c [ 126.520868][ T5848] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 126.520881][ T5848] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 126.520894][ T5848] R13: 00007ffcf05aacf0 R14: 00007f3197eab000 R15: 0000555f48edc4d8 [ 126.520916][ T5848] [ 126.520923][ T5848] [ 126.587019][ T1118] usb 8-1: Using ep0 maxpacket: 32 [ 126.587738][ T5848] Allocated by task 5763: [ 126.611105][ T1118] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 126.615193][ T5848] kasan_save_stack+0x30/0x50 [ 126.633347][ T1118] usb 8-1: config 0 has no interface number 0 [ 126.634003][ T5848] kasan_save_track+0x14/0x30 [ 126.646904][ T1118] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.647888][ T5848] __kasan_kmalloc+0x8f/0xa0 [ 126.661696][ T1118] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 126.661777][ T1118] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.666273][ T5848] em28xx_v4l2_init.cold+0x94/0x3503 [ 126.681595][ T1118] usb 8-1: Product: syz [ 126.686442][ T5848] em28xx_init_extension+0x13a/0x200 [ 126.702397][ T1118] usb 8-1: Manufacturer: syz [ 126.706992][ T5848] request_module_async+0x61/0x80 [ 126.707026][ T5848] process_one_work+0xa23/0x19a0 [ 126.716910][ T1118] usb 8-1: SerialNumber: syz [ 126.731088][ T5848] worker_thread+0x5ef/0xe50 [ 126.731132][ T5848] kthread+0x370/0x450 [ 126.731159][ T5848] ret_from_fork+0x6c3/0xcb0 [ 126.762264][ T1118] usb 8-1: config 0 descriptor?? [ 126.763639][ T5848] ret_from_fork_asm+0x1a/0x30 [ 126.801920][ T1118] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 126.802629][ T5848] [ 126.802637][ T5848] Freed by task 5763: [ 126.802652][ T5848] kasan_save_stack+0x30/0x50 [ 126.816854][ T1118] em28xx 8-1:0.132: Video interface 132 found: [ 126.818109][ T5848] kasan_save_track+0x14/0x30 [ 126.818158][ T5848] kasan_save_free_info+0x3b/0x70 [ 126.943420][ T5848] __kasan_slab_free+0x43/0x70 [ 126.948248][ T5848] kfree+0x1dc/0x640 [ 126.952188][ T5848] kref_put.isra.0+0x56/0x90 [ 126.956834][ T5848] em28xx_v4l2_init.cold+0x280/0x3503 [ 126.962260][ T5848] em28xx_init_extension+0x13a/0x200 [ 126.967612][ T5848] request_module_async+0x61/0x80 [ 126.972676][ T5848] process_one_work+0xa23/0x19a0 [ 126.977664][ T5848] worker_thread+0x5ef/0xe50 [ 126.982314][ T5848] kthread+0x370/0x450 [ 126.986411][ T5848] ret_from_fork+0x6c3/0xcb0 [ 126.991039][ T5848] ret_from_fork_asm+0x1a/0x30 [ 126.995844][ T5848] [ 126.998187][ T5848] The buggy address belongs to the object at ffff8881032f8000 [ 126.998187][ T5848] which belongs to the cache kmalloc-8k of size 8192 [ 127.012272][ T5848] The buggy address is located 1856 bytes inside of [ 127.012272][ T5848] freed 8192-byte region [ffff8881032f8000, ffff8881032fa000) [ 127.026269][ T5848] [ 127.028631][ T5848] The buggy address belongs to the physical page: [ 127.035080][ T5848] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1032f8 [ 127.043962][ T5848] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 127.052482][ T5848] flags: 0x200000000000040(head|node=0|zone=2) [ 127.058671][ T5848] page_type: f5(slab) [ 127.062680][ T5848] raw: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122 [ 127.071298][ T5848] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 127.079913][ T5848] head: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122 [ 127.088623][ T5848] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 127.097343][ T5848] head: 0200000000000003 ffffea00040cbe01 00000000ffffffff 00000000ffffffff [ 127.106047][ T5848] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 127.114732][ T5848] page dumped because: kasan: bad access detected [ 127.121177][ T5848] page_owner tracks the page as allocated [ 127.126911][ T5848] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2568451092, free_ts 0 [ 127.146568][ T5848] post_alloc_hook+0x153/0x170 [ 127.151376][ T5848] get_page_from_freelist+0xf10/0x39f0 [ 127.156871][ T5848] __alloc_frozen_pages_noprof+0x273/0x2860 [ 127.162795][ T5848] new_slab+0xa6/0x6c0 [ 127.166903][ T5848] refill_objects+0x26b/0x400 [ 127.171614][ T5848] __pcs_replace_empty_main+0x43f/0x660 [ 127.177278][ T5848] __kmalloc_noprof+0x645/0x810 [ 127.182161][ T5848] bpf_prog_pack_alloc+0x1f6/0x670 [ 127.187304][ T5848] bpf_jit_binary_pack_alloc+0x9e/0x2b0 [ 127.192910][ T5848] bpf_int_jit_compile+0x567/0x1870 [ 127.198140][ T5848] bpf_prog_select_runtime+0x401/0x720 [ 127.203632][ T5848] bpf_prepare_filter+0xd3f/0x11e0 [ 127.208783][ T5848] bpf_prog_create+0x16f/0x240 [ 127.213579][ T5848] ptp_classifier_init+0x85/0xd0 [ 127.218554][ T5848] sock_init+0x163/0x1b0 [ 127.222858][ T5848] do_one_initcall+0x11d/0x760 [ 127.227667][ T5848] page_owner free stack trace missing [ 127.233048][ T5848] [ 127.235390][ T5848] Memory state around the buggy address: [ 127.241037][ T5848] ffff8881032f8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.249121][ T5848] ffff8881032f8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.257203][ T5848] >ffff8881032f8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.265279][ T5848] ^ [ 127.271450][ T5848] ffff8881032f8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.279531][ T5848] ffff8881032f8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.287637][ T5848] ================================================================== [ 127.330275][ T29] audit: type=1400 audit(1774202053.518:110): avc: denied { read } for pid=2838 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 127.352720][ T29] audit: type=1400 audit(1774202053.518:111): avc: denied { search } for pid=2838 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.361188][ T5848] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.361281][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 127.361384][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.361438][ T5848] Call Trace: [ 127.361467][ T5848] [ 127.361499][ T5848] dump_stack_lvl+0x100/0x190 [ 127.361611][ T5848] vpanic+0x552/0x970 [ 127.361705][ T5848] ? __pfx_vpanic+0x10/0x10 [ 127.361809][ T5848] ? v4l2_fh_init+0x27d/0x2c0 [ 127.361876][ T5848] panic+0xd1/0xe0 [ 127.361969][ T5848] ? __pfx_panic+0x10/0x10 [ 127.362071][ T5848] ? v4l2_fh_init+0x27d/0x2c0 [ 127.362143][ T5848] ? preempt_schedule_common+0x42/0xc0 [ 127.362271][ T5848] ? check_panic_on_warn+0x1f/0x90 [ 127.362366][ T5848] check_panic_on_warn.cold+0x19/0x34 [ 127.362473][ T5848] end_report.part.0+0x3a/0x90 [ 127.362601][ T5848] kasan_report.cold+0xe/0x18 [ 127.362745][ T5848] ? v4l2_fh_init+0x27d/0x2c0 [ 127.362829][ T5848] v4l2_fh_init+0x27d/0x2c0 [ 127.362905][ T5848] v4l2_fh_open+0x64/0xa0 [ 127.362986][ T5848] em28xx_v4l2_open+0x11e/0x570 [ 127.363109][ T5848] v4l2_open+0x1d2/0x490 [ 127.363185][ T5848] ? __pfx_v4l2_open+0x10/0x10 [ 127.363261][ T5848] chrdev_open+0x234/0x6a0 [ 127.363363][ T5848] ? __pfx_chrdev_open+0x10/0x10 [ 127.363455][ T5848] ? path_get+0x61/0x80 [ 127.363572][ T5848] do_dentry_open+0x68b/0x14b0 [ 127.363662][ T5848] ? __pfx_chrdev_open+0x10/0x10 [ 127.363757][ T5848] ? inode_permission+0x374/0x620 [ 127.363864][ T5848] vfs_open+0x82/0x3f0 [ 127.363983][ T5848] ? may_open+0x1f3/0x410 [ 127.364136][ T5848] path_openat+0x208c/0x31a0 [ 127.364255][ T5848] ? __pfx_path_openat+0x10/0x10 [ 127.364372][ T5848] do_file_open+0x20e/0x430 [ 127.364483][ T5848] ? __pfx_do_file_open+0x10/0x10 [ 127.364629][ T5848] ? alloc_fd+0x42a/0x730 [ 127.364728][ T5848] ? do_getname+0x191/0x390 [ 127.364841][ T5848] do_sys_openat2+0x10d/0x1e0 [ 127.364945][ T5848] ? __pfx_do_sys_openat2+0x10/0x10 [ 127.365090][ T5848] __x64_sys_openat+0x12d/0x210 [ 127.365200][ T5848] ? __pfx___x64_sys_openat+0x10/0x10 [ 127.365323][ T5848] ? do_user_addr_fault+0x3e3/0x11d0 [ 127.365481][ T5848] do_syscall_64+0x106/0x7b0 [ 127.365560][ T5848] ? irqentry_exit+0x117/0x620 [ 127.365687][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.365767][ T5848] RIP: 0033:0x7f3197715407 [ 127.365845][ T5848] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 127.365918][ T5848] RSP: 002b:00007ffcf05aaaa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 127.365999][ T5848] RAX: ffffffffffffffda RBX: 00007f3197627880 RCX: 00007f3197715407 [ 127.366064][ T5848] RDX: 0000000000000000 RSI: 00007ffcf05abf24 RDI: ffffffffffffff9c [ 127.366141][ T5848] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 127.366185][ T5848] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 127.366230][ T5848] R13: 00007ffcf05aacf0 R14: 00007f3197eab000 R15: 0000555f48edc4d8 [ 127.366312][ T5848] [ 127.374735][ T5848] Kernel Offset: disabled