Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts.
2026/05/10 09:50:50 parsed 1 programs
[ 62.116787][ T28] audit: type=1400 audit(1778406650.362:62): avc: denied { node_bind } for pid=2977 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 62.137826][ T28] audit: type=1400 audit(1778406650.362:63): avc: denied { module_request } for pid=2977 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 65.349720][ T28] audit: type=1400 audit(1778406653.592:64): avc: denied { mounton } for pid=2987 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 65.373525][ T28] audit: type=1400 audit(1778406653.622:65): avc: denied { mount } for pid=2987 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 65.383706][ T2987] cgroup: Unknown subsys name 'net'
[ 65.403272][ T28] audit: type=1400 audit(1778406653.652:66): avc: denied { unmount } for pid=2987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 65.543058][ T2987] cgroup: Unknown subsys name 'cpuset'
[ 65.552758][ T2987] cgroup: Unknown subsys name 'rlimit'
[ 65.759708][ T28] audit: type=1400 audit(1778406654.002:67): avc: denied { setattr } for pid=2987 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 65.783177][ T28] audit: type=1400 audit(1778406654.002:68): avc: denied { create } for pid=2987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 65.804158][ T28] audit: type=1400 audit(1778406654.002:69): avc: denied { write } for pid=2987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 65.824971][ T28] audit: type=1400 audit(1778406654.002:70): avc: denied { read } for pid=2987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 65.853541][ T28] audit: type=1400 audit(1778406654.102:71): avc: denied { sys_module } for pid=2987 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 65.977467][ T2991] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 66.074211][ T2987] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 67.706663][ T28] kauditd_printk_skb: 8 callbacks suppressed
[ 67.706687][ T28] audit: type=1400 audit(1778406655.952:80): avc: denied { execmem } for pid=2993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 67.797220][ T28] audit: type=1400 audit(1778406656.022:81): avc: denied { create } for pid=2998 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 67.855980][ T28] audit: type=1400 audit(1778406656.042:82): avc: denied { read } for pid=2999 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 67.928091][ T28] audit: type=1400 audit(1778406656.042:83): avc: denied { open } for pid=2999 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 67.998219][ T28] audit: type=1400 audit(1778406656.082:84): avc: denied { mounton } for pid=2999 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 68.069060][ T28] audit: type=1400 audit(1778406656.212:85): avc: denied { create } for pid=3000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 68.113821][ T28] audit: type=1400 audit(1778406656.282:86): avc: denied { create } for pid=3003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 68.164484][ T28] audit: type=1400 audit(1778406656.292:87): avc: denied { sys_admin } for pid=3003 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 68.235289][ T28] audit: type=1400 audit(1778406656.302:88): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/root/syzkaller.Yrnlup/syz-tmp" dev="sda1" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 68.309300][ T28] audit: type=1400 audit(1778406656.302:89): avc: denied { mount } for pid=3001 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 68.527567][ T2999] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
2026/05/10 09:51:12 executed programs: 0
[ 84.528459][ T3032] syz-executor (3032) used greatest stack depth: 22664 bytes left
2026/05/10 09:52:04 executed programs: 10
[ 136.240302][ T28] kauditd_printk_skb: 15 callbacks suppressed
[ 136.240522][ T28] audit: type=1400 audit(1778406724.482:105): avc: denied { read write } for pid=5738 comm="syz.2.19" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 136.360113][ T28] audit: type=1400 audit(1778406724.482:106): avc: denied { open } for pid=5738 comm="syz.2.19" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 136.405839][ T28] audit: type=1400 audit(1778406724.492:107): avc: denied { ioctl } for pid=5738 comm="syz.2.19" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 136.542874][ T3008] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 136.721412][ T3008] usb 3-1: Using ep0 maxpacket: 32
[ 136.743578][ T3008] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[ 136.762955][ T3008] usb 3-1: config 0 has no interface number 0
[ 136.780727][ T3008] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 136.800105][ T3008] usb 3-1: config 0 interface 89 has no altsetting 0
[ 136.817323][ T3008] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 136.838405][ T3008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 136.857015][ T3008] usb 3-1: Product: syz
[ 136.863116][ T3008] usb 3-1: Manufacturer: syz
[ 136.878010][ T3008] usb 3-1: SerialNumber: syz
[ 136.903420][ T3008] usb 3-1: config 0 descriptor??
[ 136.931663][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 136.954959][ T3008] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 136.977780][ T3008] em28xx 3-1:0.89: Video interface 89 found:
[ 137.103530][ T9] usb 6-1: Using ep0 maxpacket: 32
[ 137.123141][ T9] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 137.139021][ T9] usb 6-1: config 0 has no interface number 0
[ 137.158999][ T9] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 137.185821][ T9] usb 6-1: config 0 interface 89 has no altsetting 0
[ 137.193335][ T3008] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[ 137.212283][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 137.223707][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 137.233300][ T9] usb 6-1: Product: syz
[ 137.237912][ T9] usb 6-1: Manufacturer: syz
[ 137.243835][ T9] usb 6-1: SerialNumber: syz
[ 137.258378][ T9] usb 6-1: config 0 descriptor??
[ 137.278915][ T9] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 137.305661][ T3008] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 137.320216][ T9] em28xx 6-1:0.89: Video interface 89 found:
[ 137.342033][ T3008] em28xx 3-1:0.89: board has no eeprom
[ 137.390170][ T5755] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 137.405634][ T3008] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[ 137.425085][ T3008] em28xx 3-1:0.89: analog set to bulk mode.
[ 137.433080][ T5770] em28xx 3-1:0.89: Registering V4L2 extension
[ 137.469650][ T3008] usb 3-1: USB disconnect, device number 2
[ 137.507745][ T3008] em28xx 3-1:0.89: Disconnecting em28xx
[ 137.539095][ T5770] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[ 137.547835][ T9] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[ 137.560277][ T5770] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[ 137.570407][ T5755] usb 8-1: Using ep0 maxpacket: 32
[ 137.583115][ T5770] em28xx 3-1:0.89: No AC97 audio processor
[ 137.595808][ T5755] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[ 137.607314][ T5755] usb 8-1: config 0 has no interface number 0
[ 137.615152][ T5755] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 137.626832][ T5770] usb 3-1: Decoder not found
[ 137.632211][ T5770] em28xx 3-1:0.89: failed to create media graph
[ 137.641307][ T9] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 137.649776][ T5755] usb 8-1: config 0 interface 89 has no altsetting 0
[ 137.657395][ T5770] em28xx 3-1:0.89: V4L2 device video0 deregistered
[ 137.665699][ T9] em28xx 6-1:0.89: board has no eeprom
[ 137.683225][ T5755] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 137.705251][ T5755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 137.717815][ T5770] em28xx 3-1:0.89: Registering snapshot button...
[ 137.739206][ T5755] usb 8-1: Product: syz
[ 137.756973][ T5755] usb 8-1: Manufacturer: syz
[ 137.762130][ T9] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[ 137.771086][ T5755] usb 8-1: SerialNumber: syz
[ 137.775786][ T9] em28xx 6-1:0.89: analog set to bulk mode.
[ 137.787762][ T5770] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input5
[ 137.815254][ T5755] usb 8-1: config 0 descriptor??
[ 137.824079][ T9] usb 6-1: USB disconnect, device number 2
[ 137.857773][ T5770] em28xx 3-1:0.89: Remote control support is not available for this card.
[ 137.868745][ T9] em28xx 6-1:0.89: Disconnecting em28xx
[ 137.876308][ T5780] em28xx 6-1:0.89: Registering V4L2 extension
[ 137.882735][ T5755] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 137.900010][ T5755] em28xx 8-1:0.89: Video interface 89 found:
[ 137.936593][ T5780] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[ 137.943682][ T5780] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[ 137.952868][ T5780] em28xx 6-1:0.89: No AC97 audio processor
[ 137.960882][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 137.969862][ T5780] usb 6-1: Decoder not found
[ 137.974553][ T5780] em28xx 6-1:0.89: failed to create media graph
[ 137.980932][ T5780] em28xx 6-1:0.89: V4L2 device video0 deregistered
[ 137.989269][ T5780] em28xx 6-1:0.89: Registering snapshot button...
[ 137.998914][ T5780] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input6
[ 138.013345][ T5780] em28xx 6-1:0.89: Remote control support is not available for this card.
[ 138.022972][ T3008] em28xx 3-1:0.89: Closing input extension
[ 138.029656][ T3008] em28xx 3-1:0.89: Deregistering snapshot button
[ 138.072957][ T9] em28xx 6-1:0.89: Closing input extension
[ 138.089929][ T9] em28xx 6-1:0.89: Deregistering snapshot button
[ 138.090400][ T2814] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 138.098699][ T5755] em28xx 8-1:0.89: unknown em28xx chip ID (0)
[ 138.114491][ T3008] em28xx 3-1:0.89: Freeing device
[ 138.131014][ T23] usb 7-1: Using ep0 maxpacket: 32
[ 138.141821][ T23] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 138.157608][ T23] usb 7-1: config 0 has no interface number 0
[ 138.172281][ T23] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 138.194074][ T23] usb 7-1: config 0 interface 89 has no altsetting 0
[ 138.204746][ T5755] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 138.214522][ T23] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 138.232345][ T5755] em28xx 8-1:0.89: board has no eeprom
[ 138.234446][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 138.254859][ T9] em28xx 6-1:0.89: Freeing device
[ 138.256128][ T23] usb 7-1: Product: syz
[ 138.270113][ T2814] usb 1-1: Using ep0 maxpacket: 32
[ 138.279195][ T23] usb 7-1: Manufacturer: syz
[ 138.290138][ T2814] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 138.301783][ T23] usb 7-1: SerialNumber: syz
[ 138.318499][ T2814] usb 1-1: config 0 has no interface number 0
[ 138.330097][ T5755] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67)
[ 138.341492][ T23] usb 7-1: config 0 descriptor??
[ 138.345965][ T5755] em28xx 8-1:0.89: analog set to bulk mode.
[ 138.347037][ T2814] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 138.370622][ T5780] em28xx 8-1:0.89: Registering V4L2 extension
[ 138.382328][ T23] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 138.406944][ T2814] usb 1-1: config 0 interface 89 has no altsetting 0
[ 138.424665][ T5755] usb 8-1: USB disconnect, device number 2
[ 138.429619][ T23] em28xx 7-1:0.89: Video interface 89 found:
[ 138.447013][ T2814] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 138.460762][ T2814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 138.461875][ T3008] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 138.479338][ T2814] usb 1-1: Product: syz
[ 138.489546][ T2814] usb 1-1: Manufacturer: syz
[ 138.504782][ T2814] usb 1-1: SerialNumber: syz
[ 138.507458][ T5755] em28xx 8-1:0.89: Disconnecting em28xx
[ 138.535401][ T2814] usb 1-1: config 0 descriptor??
[ 138.572368][ T2814] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 138.611969][ T2814] em28xx 1-1:0.89: Video interface 89 found:
[ 138.618671][ T5780] em28xx 8-1:0.89: Config register raw data: 0xffffffed
[ 138.625899][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 138.643488][ T23] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[ 138.651793][ T5780] em28xx 8-1:0.89: AC97 chip type couldn't be determined
[ 138.666221][ T5780] em28xx 8-1:0.89: No AC97 audio processor
[ 138.675916][ T5780] usb 8-1: Decoder not found
[ 138.680662][ T5780] em28xx 8-1:0.89: failed to create media graph
[ 138.687648][ T5780] em28xx 8-1:0.89: V4L2 device video0 deregistered
[ 138.694753][ T3008] usb 3-1: Using ep0 maxpacket: 32
[ 138.702947][ T5780] em28xx 8-1:0.89: Registering snapshot button...
[ 138.711896][ T3008] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[ 138.723645][ T5780] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input7
[ 138.737807][ T3008] usb 3-1: config 0 has no interface number 0
[ 138.749617][ T23] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 138.753672][ T3008] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 138.779690][ T5780] em28xx 8-1:0.89: Remote control support is not available for this card.
[ 138.784260][ T23] em28xx 7-1:0.89: board has no eeprom
[ 138.800926][ T3008] usb 3-1: config 0 interface 89 has no altsetting 0
[ 138.807908][ T5755] em28xx 8-1:0.89: Closing input extension
[ 138.818133][ T5755] em28xx 8-1:0.89: Deregistering snapshot button
[ 138.824672][ T2814] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[ 138.832970][ T9] usb 6-1: Using ep0 maxpacket: 32
[ 138.841434][ T9] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 138.849996][ T3008] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 138.860409][ T9] usb 6-1: config 0 has no interface number 0
[ 138.866677][ T3008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 138.879062][ T9] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 138.890167][ T3008] usb 3-1: Product: syz
[ 138.890167][ T23] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[ 138.890202][ T23] em28xx 7-1:0.89: analog set to bulk mode.
[ 138.894434][ T3008] usb 3-1: Manufacturer: syz
[ 138.913755][ T2814] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 138.921287][ T9] usb 6-1: config 0 interface 89 has no altsetting 0
[ 138.934676][ T5755] em28xx 8-1:0.89: Freeing device
[ 138.942153][ T2814] em28xx 1-1:0.89: board has no eeprom
[ 138.944895][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 138.960708][ T37] em28xx 7-1:0.89: Registering V4L2 extension
[ 138.961834][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 138.975355][ T3008] usb 3-1: SerialNumber: syz
[ 138.996367][ T23] usb 7-1: USB disconnect, device number 2
[ 139.007187][ T3008] usb 3-1: config 0 descriptor??
[ 139.024170][ T9] usb 6-1: Product: syz
[ 139.030364][ T2814] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[ 139.043180][ T9] usb 6-1: Manufacturer: syz
[ 139.052959][ T23] em28xx 7-1:0.89: Disconnecting em28xx
[ 139.058994][ T2814] em28xx 1-1:0.89: analog set to bulk mode.
[ 139.062782][ T3008] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 139.076360][ T9] usb 6-1: SerialNumber: syz
[ 139.100448][ T9] usb 6-1: config 0 descriptor??
[ 139.110511][ T3008] em28xx 3-1:0.89: Video interface 89 found:
[ 139.123193][ T2814] usb 1-1: USB disconnect, device number 2
[ 139.142689][ T9] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 139.159690][ T2814] em28xx 1-1:0.89: Disconnecting em28xx
[ 139.193242][ T9] em28xx 6-1:0.89: Video interface 89 found:
[ 139.207614][ T37] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[ 139.229342][ T37] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[ 139.261250][ T37] em28xx 7-1:0.89: No AC97 audio processor
[ 139.280522][ T5755] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 139.297537][ T37] usb 7-1: Decoder not found
[ 139.321398][ T3008] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[ 139.323387][ T37] em28xx 7-1:0.89: failed to create media graph
[ 139.364137][ T37] em28xx 7-1:0.89: V4L2 device video0 deregistered
[ 139.381046][ T9] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[ 139.406422][ T37] em28xx 7-1:0.89: Registering snapshot button...
[ 139.407594][ T3008] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 139.431468][ T37] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input8
[ 139.445227][ T3008] em28xx 3-1:0.89: board has no eeprom
[ 139.458302][ T9] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 139.471044][ T37] em28xx 7-1:0.89: Remote control support is not available for this card.
[ 139.475057][ T5755] usb 8-1: Using ep0 maxpacket: 32
[ 139.486971][ T9] em28xx 6-1:0.89: board has no eeprom
[ 139.495908][ T5755] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[ 139.496041][ T5791] em28xx 1-1:0.89: Registering V4L2 extension
[ 139.508671][ T5755] usb 8-1: config 0 has no interface number 0
[ 139.517765][ T5755] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 139.531906][ T5755] usb 8-1: config 0 interface 89 has no altsetting 0
[ 139.543115][ T5755] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 139.552473][ T3008] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[ 139.560453][ T3008] em28xx 3-1:0.89: analog set to bulk mode.
[ 139.566519][ T5755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 139.575076][ T9] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[ 139.586104][ T9] em28xx 6-1:0.89: analog set to bulk mode.
[ 139.594097][ T5755] usb 8-1: Product: syz
[ 139.599514][ T3008] usb 3-1: USB disconnect, device number 3
[ 139.609144][ T5755] usb 8-1: Manufacturer: syz
[ 139.616416][ T3008] em28xx 3-1:0.89: Disconnecting em28xx
[ 139.624967][ T5755] usb 8-1: SerialNumber: syz
[ 139.633167][ T9] usb 6-1: USB disconnect, device number 3
[ 139.647804][ T5755] usb 8-1: config 0 descriptor??
[ 139.655498][ T9] em28xx 6-1:0.89: Disconnecting em28xx
[ 139.684734][ T5755] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 139.687442][ T5791] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[ 139.706583][ T5755] em28xx 8-1:0.89: Video interface 89 found:
[ 139.714565][ T5791] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[ 139.724526][ T5791] em28xx 1-1:0.89: No AC97 audio processor
[ 139.734556][ T5791] usb 1-1: Decoder not found
[ 139.739239][ T5791] em28xx 1-1:0.89: failed to create media graph
[ 139.745948][ T5791] em28xx 1-1:0.89: V4L2 device video0 deregistered
[ 139.754520][ T5791] em28xx 1-1:0.89: Registering snapshot button...
[ 139.763503][ T5791] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input9
[ 139.777323][ T5791] em28xx 1-1:0.89: Remote control support is not available for this card.
[ 139.786683][ T23] em28xx 7-1:0.89: Closing input extension
[ 139.792706][ T23] em28xx 7-1:0.89: Deregistering snapshot button
[ 139.808052][ T5780] em28xx 3-1:0.89: Registering V4L2 extension
[ 139.824638][ T23] em28xx 7-1:0.89: Freeing device
[ 139.931620][ T5755] em28xx 8-1:0.89: unknown em28xx chip ID (0)
[ 139.941684][ T5780] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[ 139.950637][ T5780] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[ 139.958010][ T5780] em28xx 3-1:0.89: No AC97 audio processor
[ 139.971279][ T5780] usb 3-1: Decoder not found
[ 139.976110][ T5780] em28xx 3-1:0.89: failed to create media graph
[ 139.982733][ T5780] em28xx 3-1:0.89: V4L2 device video0 deregistered
[ 139.992623][ T5780] em28xx 3-1:0.89: Registering snapshot button...
[ 140.002371][ T5780] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input10
[ 140.016710][ T5780] em28xx 3-1:0.89: Remote control support is not available for this card.
[ 140.028409][ T5755] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 140.037923][ T5770] em28xx 6-1:0.89: Registering V4L2 extension
[ 140.044478][ T5755] em28xx 8-1:0.89: board has no eeprom
[ 140.083871][ T5770] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[ 140.094195][ T5770] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[ 140.101636][ T5770] em28xx 6-1:0.89: No AC97 audio processor
[ 140.110259][ T5755] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67)
[ 140.117989][ T5770] usb 6-1: Decoder not found
[ 140.122672][ T5770] em28xx 6-1:0.89: failed to create media graph
[ 140.128976][ T5770] em28xx 6-1:0.89: V4L2 device video0 deregistered
[ 140.135770][ T5755] em28xx 8-1:0.89: analog set to bulk mode.
[ 140.147844][ T5755] usb 8-1: USB disconnect, device number 3
[ 140.155036][ T5770] em28xx 6-1:0.89: Registering snapshot button...
[ 140.160325][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 140.167118][ T5755] em28xx 8-1:0.89: Disconnecting em28xx
[ 140.182926][ T5770] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input11
[ 140.197464][ T5770] em28xx 6-1:0.89: Remote control support is not available for this card.
[ 140.207004][ T2814] em28xx 1-1:0.89: Closing input extension
[ 140.216875][ T2814] em28xx 1-1:0.89: Deregistering snapshot button
[ 140.227939][ T3008] em28xx 3-1:0.89: Closing input extension
[ 140.233899][ T3008] em28xx 3-1:0.89: Deregistering snapshot button
[ 140.241131][ T2814] em28xx 1-1:0.89: Freeing device
[ 140.256864][ T5780] em28xx 8-1:0.89: Registering V4L2 extension
[ 140.272430][ T3008] em28xx 3-1:0.89: Freeing device
[ 140.320723][ T23] usb 7-1: Using ep0 maxpacket: 32
[ 140.340591][ T23] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 140.370852][ T23] usb 7-1: config 0 has no interface number 0
[ 140.377161][ T23] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 140.396776][ T23] usb 7-1: config 0 interface 89 has no altsetting 0
[ 140.417558][ T5780] em28xx 8-1:0.89: Config register raw data: 0xffffffed
[ 140.427216][ T23] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 140.435845][ T5780] em28xx 8-1:0.89: AC97 chip type couldn't be determined
[ 140.446425][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 140.456598][ T23] usb 7-1: Product: syz
[ 140.461238][ T23] usb 7-1: Manufacturer: syz
[ 140.473947][ T5780] em28xx 8-1:0.89: No AC97 audio processor
[ 140.476823][ T23] usb 7-1: SerialNumber: syz
[ 140.498522][ T23] usb 7-1: config 0 descriptor??
[ 140.503742][ T5780] usb 8-1: Decoder not found
[ 140.517483][ T5780] em28xx 8-1:0.89: failed to create media graph
[ 140.524834][ T5780] em28xx 8-1:0.89: V4L2 device video0 deregistered
[ 140.534905][ T5780] em28xx 8-1:0.89: Registering snapshot button...
[ 140.538515][ T23] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 140.547695][ T5780] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input12
[ 140.565877][ T5780] em28xx 8-1:0.89: Remote control support is not available for this card.
[ 140.570540][ T2814] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 140.580366][ T9] em28xx 6-1:0.89: Closing input extension
[ 140.584126][ T23] em28xx 7-1:0.89: Video interface 89 found:
[ 140.596542][ T9] em28xx 6-1:0.89: Deregistering snapshot button
[ 140.610760][ T5755] em28xx 8-1:0.89: Closing input extension
[ 140.617722][ T5755] em28xx 8-1:0.89: Deregistering snapshot button
[ 140.628719][ T9] em28xx 6-1:0.89: Freeing device
[ 140.660136][ T3008] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 140.677766][ T5755] em28xx 8-1:0.89: Freeing device
[ 140.741504][ T2814] usb 1-1: Using ep0 maxpacket: 32
[ 140.748624][ T2814] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 140.757355][ T2814] usb 1-1: config 0 has no interface number 0
[ 140.764884][ T2814] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 140.775283][ T2814] usb 1-1: config 0 interface 89 has no altsetting 0
[ 140.782247][ T23] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[ 140.791401][ T2814] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 140.800641][ T2814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 140.808708][ T2814] usb 1-1: Product: syz
[ 140.813385][ T2814] usb 1-1: Manufacturer: syz
[ 140.818057][ T2814] usb 1-1: SerialNumber: syz
[ 140.829729][ T2814] usb 1-1: config 0 descriptor??
[ 140.841173][ T3008] usb 3-1: Using ep0 maxpacket: 32
[ 140.844934][ T23] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 140.856411][ T2814] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 140.863806][ T3008] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[ 140.871542][ T23] em28xx 7-1:0.89: board has no eeprom
[ 140.879799][ T2814] em28xx 1-1:0.89: Video interface 89 found:
[ 140.887538][ T3008] usb 3-1: config 0 has no interface number 0
[ 140.897847][ T3008] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 140.918551][ T3008] usb 3-1: config 0 interface 89 has no altsetting 0
[ 140.928489][ T3008] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 140.938124][ T3008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 140.941967][ T23] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[ 140.948534][ T3008] usb 3-1: Product: syz
[ 140.958004][ T3008] usb 3-1: Manufacturer: syz
[ 140.960728][ T23] em28xx 7-1:0.89: analog set to bulk mode.
[ 140.965628][ T3008] usb 3-1: SerialNumber: syz
[ 140.973344][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 140.980563][ T5791] em28xx 7-1:0.89: Registering V4L2 extension
[ 140.990953][ T3008] usb 3-1: config 0 descriptor??
[ 141.014170][ T3008] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 141.025051][ T5755] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 141.041452][ T23] usb 7-1: USB disconnect, device number 3
[ 141.046591][ T3008] em28xx 3-1:0.89: Video interface 89 found:
[ 141.077490][ T23] em28xx 7-1:0.89: Disconnecting em28xx
[ 141.110472][ T2814] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[ 141.122167][ T5791] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[ 141.129676][ T5791] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[ 141.137699][ T5791] em28xx 7-1:0.89: No AC97 audio processor
[ 141.149290][ T5791] usb 7-1: Decoder not found
[ 141.151669][ T9] usb 6-1: Using ep0 maxpacket: 32
[ 141.154295][ T5791] em28xx 7-1:0.89: failed to create media graph
[ 141.165669][ T5791] em28xx 7-1:0.89: V4L2 device video0 deregistered
[ 141.173734][ T9] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 141.176842][ T5791] em28xx 7-1:0.89: Registering snapshot button...
[ 141.188791][ T9] usb 6-1: config 0 has no interface number 0
[ 141.195282][ T5791] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input13
[ 141.205771][ T2814] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 141.205887][ T2814] em28xx 1-1:0.89: board has no eeprom
[ 141.214523][ T5791] em28xx 7-1:0.89: Remote control support is not available for this card.
[ 141.223701][ T5755] usb 8-1: Using ep0 maxpacket: 32
[ 141.229345][ T23] em28xx 7-1:0.89: Closing input extension
[ 141.247300][ T9] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 141.257813][ T5755] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[ 141.261882][ T2814] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
2026/05/10 09:52:09 executed programs: 23
[ 141.273831][ T23] em28xx 7-1:0.89: Deregistering snapshot button
[ 141.280328][ T2814] em28xx 1-1:0.89: analog set to bulk mode.
[ 141.280896][ T5755] usb 8-1: config 0 has no interface number 0
[ 141.304221][ T3008] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[ 141.313095][ T5755] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 141.326039][ T9] usb 6-1: config 0 interface 89 has no altsetting 0
[ 141.333036][ T5755] usb 8-1: config 0 interface 89 has no altsetting 0
[ 141.341060][ T2814] usb 1-1: USB disconnect, device number 3
[ 141.345676][ T5755] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 141.356419][ T5755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 141.362891][ T5791] em28xx 1-1:0.89: Registering V4L2 extension
[ 141.371333][ T5755] usb 8-1: Product: syz
[ 141.376538][ T5755] usb 8-1: Manufacturer: syz
[ 141.381527][ T5755] usb 8-1: SerialNumber: syz
[ 141.382293][ T2814] em28xx 1-1:0.89: Disconnecting em28xx
[ 141.386596][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 141.404514][ T23] em28xx 7-1:0.89: Freeing device
[ 141.405408][ T3008] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 141.430103][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 141.441297][ T3008] em28xx 3-1:0.89: board has no eeprom
[ 141.446996][ T9] usb 6-1: Product: syz
[ 141.456232][ T9] usb 6-1: Manufacturer: syz
[ 141.474515][ T9] usb 6-1: SerialNumber: syz
[ 141.488233][ T5755] usb 8-1: config 0 descriptor??
[ 141.511101][ T3008] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[ 141.524955][ T5755] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 141.540337][ T3008] em28xx 3-1:0.89: analog set to bulk mode.
[ 141.550667][ T9] usb 6-1: config 0 descriptor??
[ 141.565876][ T5791] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[ 141.568821][ T5755] em28xx 8-1:0.89: Video interface 89 found:
[ 141.577700][ T5791] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[ 141.594468][ T9] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 141.599936][ T5791] em28xx 1-1:0.89: No AC97 audio processor
[ 141.618517][ T3008] usb 3-1: USB disconnect, device number 4
[ 141.627301][ T9] em28xx 6-1:0.89: Video interface 89 found:
[ 141.651554][ T5791] usb 1-1: Decoder not found
[ 141.665576][ T3008] em28xx 3-1:0.89: Disconnecting em28xx
[ 141.667953][ T5791] em28xx 1-1:0.89: failed to create media graph
[ 141.703289][ T5791] em28xx 1-1:0.89: V4L2 device video0 deregistered
[ 141.716926][ T5821] ==================================================================
[ 141.725062][ T5821] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490
[ 141.732349][ T5821] Read of size 4 at addr ffff88812148c858 by task v4l_id/5821
[ 141.739863][ T5821]
[ 141.742253][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 141.742291][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 141.742318][ T5821] Call Trace:
[ 141.742329][ T5821]
[ 141.742344][ T5821] dump_stack_lvl+0x100/0x190
[ 141.742388][ T5821] print_report+0x13d/0x4b0
[ 141.742443][ T5821] ? __virt_addr_valid+0x239/0x430
[ 141.742481][ T5821] ? v4l2_open+0x351/0x490
[ 141.742524][ T5821] kasan_report+0xdf/0x1d0
[ 141.742567][ T5821] ? v4l2_open+0x351/0x490
[ 141.742616][ T5821] v4l2_open+0x351/0x490
[ 141.742658][ T5821] ? __pfx_v4l2_open+0x10/0x10
[ 141.742702][ T5821] chrdev_open+0x234/0x6a0
[ 141.742732][ T5821] ? __pfx_chrdev_open+0x10/0x10
[ 141.742762][ T5821] ? path_get+0x61/0x80
[ 141.742801][ T5821] do_dentry_open+0x68b/0x14b0
[ 141.742849][ T5821] ? __pfx_chrdev_open+0x10/0x10
[ 141.742885][ T5821] vfs_open+0x82/0x3f0
[ 141.742922][ T5821] path_openat+0x208c/0x31a0
[ 141.742961][ T5821] ? __pfx_path_openat+0x10/0x10
[ 141.743019][ T5821] do_file_open+0x20e/0x430
[ 141.743053][ T5821] ? __pfx_do_file_open+0x10/0x10
[ 141.743099][ T5821] ? alloc_fd+0x476/0x790
[ 141.743133][ T5821] ? do_getname+0x191/0x390
[ 141.743173][ T5821] do_sys_openat2+0x10d/0x1e0
[ 141.743210][ T5821] ? __pfx_do_sys_openat2+0x10/0x10
[ 141.743256][ T5821] __x64_sys_openat+0x12d/0x210
[ 141.743295][ T5821] ? __pfx___x64_sys_openat+0x10/0x10
[ 141.743338][ T5821] ? rcu_is_watching+0x12/0xc0
[ 141.743379][ T5821] do_syscall_64+0x10b/0x7f0
[ 141.743431][ T5821] ? irqentry_exit+0xe5/0x6c0
[ 141.743472][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.743510][ T5821] RIP: 0033:0x7f5159bdd407
[ 141.743545][ T5821] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 141.743581][ T5821] RSP: 002b:00007ffc74ba7400 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 141.743615][ T5821] RAX: ffffffffffffffda RBX: 00007f5159aef880 RCX: 00007f5159bdd407
[ 141.743637][ T5821] RDX: 0000000000000000 RSI: 00007ffc74ba8f25 RDI: ffffffffffffff9c
[ 141.743658][ T5821] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 141.743677][ T5821] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 141.743696][ T5821] R13: 00007ffc74ba7650 R14: 00007f515a373000 R15: 0000558592cc14d8
[ 141.743727][ T5821]
[ 141.743738][ T5821]
[ 141.774497][ T5755] em28xx 8-1:0.89: unknown em28xx chip ID (0)
[ 141.778250][ T5821] Allocated by task 5791:
[ 141.778281][ T5821] kasan_save_stack+0x30/0x50
[ 141.957020][ T5755] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 141.957771][ T5821] kasan_save_track+0x14/0x30
[ 142.007028][ T5821] __kasan_kmalloc+0x8f/0xa0
[ 142.011673][ T5821] em28xx_v4l2_init.cold+0x94/0x3a40
[ 142.017184][ T5821] em28xx_init_extension+0x13a/0x200
[ 142.022518][ T5821] request_module_async+0x61/0x80
[ 142.027688][ T5821] process_one_work+0xa0e/0x1980
[ 142.032663][ T5821] worker_thread+0x5ef/0xe50
[ 142.037291][ T5821] kthread+0x370/0x450
[ 142.041389][ T5821] ret_from_fork+0x69a/0xc80
[ 142.046015][ T5821] ret_from_fork_asm+0x1a/0x30
[ 142.050821][ T5821]
[ 142.053170][ T5821] Freed by task 5791:
[ 142.057176][ T5821] kasan_save_stack+0x30/0x50
[ 142.061896][ T5821] kasan_save_track+0x14/0x30
[ 142.066608][ T5821] kasan_save_free_info+0x3b/0x70
[ 142.071682][ T5821] __kasan_slab_free+0x43/0x70
[ 142.076488][ T5821] kfree+0x204/0x650
[ 142.080429][ T5821] kref_put.isra.0+0x53/0x75
[ 142.085066][ T5821] em28xx_v4l2_init.cold+0x280/0x3a40
[ 142.090490][ T5821] em28xx_init_extension+0x13a/0x200
[ 142.095818][ T5821] request_module_async+0x61/0x80
[ 142.100888][ T5821] process_one_work+0xa0e/0x1980
[ 142.105863][ T5821] worker_thread+0x5ef/0xe50
[ 142.110493][ T5821] kthread+0x370/0x450
[ 142.114590][ T5821] ret_from_fork+0x69a/0xc80
[ 142.119217][ T5821] ret_from_fork_asm+0x1a/0x30
[ 142.124028][ T5821]
[ 142.126376][ T5821] The buggy address belongs to the object at ffff88812148c000
[ 142.126376][ T5821] which belongs to the cache kmalloc-8k of size 8192
[ 142.140465][ T5821] The buggy address is located 2136 bytes inside of
[ 142.140465][ T5821] freed 8192-byte region [ffff88812148c000, ffff88812148e000)
[ 142.154466][ T5821]
[ 142.156826][ T5821] The buggy address belongs to the physical page:
[ 142.163360][ T5821] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121488
[ 142.172245][ T5821] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 142.180779][ T5821] flags: 0x200000000000040(head|node=0|zone=2)
[ 142.186971][ T5821] page_type: f5(slab)
[ 142.191016][ T5821] raw: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122
[ 142.199643][ T5821] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 142.208266][ T5821] head: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122
[ 142.216965][ T5821] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 142.225751][ T5821] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 142.234548][ T5821] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 142.243237][ T5821] page dumped because: kasan: bad access detected
[ 142.249684][ T5821] page_owner tracks the page as allocated
[ 142.255419][ T5821] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2892, tgid 2892 (dhcpcd), ts 26110075324, free_ts 0
[ 142.274825][ T5821] post_alloc_hook+0x153/0x170
[ 142.279637][ T5821] get_page_from_freelist+0xf34/0x3a90
[ 142.285148][ T5821] __alloc_frozen_pages_noprof+0x273/0x28a0
[ 142.291620][ T5821] new_slab+0xa6/0x6b0
[ 142.295733][ T5821] refill_objects+0x277/0x420
[ 142.300466][ T5821] __pcs_replace_empty_main+0x375/0x650
[ 142.306063][ T5821] __kmalloc_cache_noprof+0x52c/0x6b0
[ 142.311476][ T5821] audit_log_d_path+0xed/0x210
[ 142.316280][ T5821] audit_log_lsm_data+0xff3/0x1fa0
[ 142.321434][ T5821] common_lsm_audit+0x229/0x2b0
[ 142.326334][ T5821] slow_avc_audit+0x186/0x210
[ 142.331043][ T5821] avc_has_perm+0x1a6/0x1e0
[ 142.335619][ T5821] inode_has_perm+0x166/0x1d0
[ 142.340337][ T5821] selinux_file_open+0x39d/0x510
[ 142.345365][ T5821] security_file_open+0x34/0x70
[ 142.350268][ T5821] do_dentry_open+0x589/0x14b0
[ 142.355083][ T5821] page_owner free stack trace missing
[ 142.360472][ T5821]
[ 142.362824][ T5821] Memory state around the buggy address:
[ 142.368476][ T5821] ffff88812148c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 142.376566][ T5821] ffff88812148c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 142.384655][ T5821] >ffff88812148c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 142.392738][ T5821] ^
[ 142.399702][ T5821] ffff88812148c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 142.407794][ T5821] ffff88812148c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 142.415887][ T5821] ==================================================================
[ 142.424405][ T5791] em28xx 1-1:0.89: Registering snapshot button...
[ 142.425631][ T5755] em28xx 8-1:0.89: board has no eeprom
[ 142.436683][ T5791] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input14
[ 142.437819][ T5821] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 142.437884][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 142.437982][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 142.438036][ T5821] Call Trace:
[ 142.438060][ T5821]
[ 142.438093][ T5821] dump_stack_lvl+0x100/0x190
[ 142.438204][ T5821] vpanic+0x552/0x970
[ 142.438332][ T5821] ? __pfx_vpanic+0x10/0x10
[ 142.438450][ T5821] ? v4l2_open+0x351/0x490
[ 142.438568][ T5821] panic+0xd1/0xe0
[ 142.438657][ T5821] ? __pfx_panic+0x10/0x10
[ 142.438755][ T5821] ? v4l2_open+0x351/0x490
[ 142.438866][ T5821] ? preempt_schedule_common+0x42/0xc0
[ 142.438977][ T5821] ? check_panic_on_warn+0x1f/0x90
[ 142.439074][ T5821] check_panic_on_warn.cold+0x19/0x34
[ 142.439180][ T5821] end_report.part.0+0x3a/0x90
[ 142.439301][ T5821] kasan_report.cold+0xe/0x18
[ 142.439432][ T5821] ? v4l2_open+0x351/0x490
[ 142.439561][ T5821] v4l2_open+0x351/0x490
[ 142.439722][ T5821] ? __pfx_v4l2_open+0x10/0x10
[ 142.439834][ T5821] chrdev_open+0x234/0x6a0
[ 142.439922][ T5821] ? __pfx_chrdev_open+0x10/0x10
[ 142.439985][ T5821] ? path_get+0x61/0x80
[ 142.440087][ T5821] do_dentry_open+0x68b/0x14b0
[ 142.440219][ T5821] ? __pfx_chrdev_open+0x10/0x10
[ 142.440324][ T5821] vfs_open+0x82/0x3f0
[ 142.440423][ T5821] path_openat+0x208c/0x31a0
[ 142.440525][ T5821] ? __pfx_path_openat+0x10/0x10
[ 142.440635][ T5821] do_file_open+0x20e/0x430
[ 142.440724][ T5821] ? __pfx_do_file_open+0x10/0x10
[ 142.440854][ T5821] ? alloc_fd+0x476/0x790
[ 142.440942][ T5821] ? do_getname+0x191/0x390
[ 142.441069][ T5821] do_sys_openat2+0x10d/0x1e0
[ 142.441177][ T5821] ? __pfx_do_sys_openat2+0x10/0x10
[ 142.441297][ T5821] __x64_sys_openat+0x12d/0x210
[ 142.441398][ T5821] ? __pfx___x64_sys_openat+0x10/0x10
[ 142.441552][ T5821] ? rcu_is_watching+0x12/0xc0
[ 142.441663][ T5821] do_syscall_64+0x10b/0x7f0
[ 142.441777][ T5821] ? irqentry_exit+0xe5/0x6c0
[ 142.441887][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.441976][ T5821] RIP: 0033:0x7f5159bdd407
[ 142.442044][ T5821] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 142.442122][ T5821] RSP: 002b:00007ffc74ba7400 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 142.442197][ T5821] RAX: ffffffffffffffda RBX: 00007f5159aef880 RCX: 00007f5159bdd407
[ 142.442253][ T5821] RDX: 0000000000000000 RSI: 00007ffc74ba8f25 RDI: ffffffffffffff9c
[ 142.442309][ T5821] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 142.442374][ T5821] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 142.442443][ T5821] R13: 00007ffc74ba7650 R14: 00007f515a373000 R15: 0000558592cc14d8
[ 142.442537][ T5821]
[ 142.447771][ T5821] Kernel Offset: disabled