Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts.
2026/08/25 21:46:23 parsed 1 programs
[ 79.234946][ T29] kauditd_printk_skb: 1 callbacks suppressed
[ 79.234965][ T29] audit: type=1400 audit(1787694382.986:77): avc: denied { node_bind } for pid=2979 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 79.262364][ T29] audit: type=1400 audit(1787694382.986:78): avc: denied { module_request } for pid=2979 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
2026/08/25 21:46:23 serving rpc on tcp://42453
[ 81.128756][ T29] audit: type=1400 audit(1787694384.886:79): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 81.152315][ T29] audit: type=1400 audit(1787694384.906:80): avc: denied { mount } for pid=2989 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 81.155822][ T2989] cgroup: Unknown subsys name 'net'
[ 81.182006][ T29] audit: type=1400 audit(1787694384.936:81): avc: denied { unmount } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 81.329148][ T2989] cgroup: Unknown subsys name 'cpuset'
[ 81.336908][ T2989] cgroup: Unknown subsys name 'rlimit'
[ 81.489912][ T29] audit: type=1400 audit(1787694385.246:82): avc: denied { setattr } for pid=2989 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 81.513319][ T29] audit: type=1400 audit(1787694385.246:83): avc: denied { create } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 81.533910][ T29] audit: type=1400 audit(1787694385.246:84): avc: denied { write } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 81.554409][ T29] audit: type=1400 audit(1787694385.246:85): avc: denied { read } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 81.574857][ T29] audit: type=1400 audit(1787694385.276:86): avc: denied { sys_module } for pid=2989 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 81.644150][ T2993] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 81.716652][ T2989] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 83.555347][ T3001] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 84.502086][ T29] kauditd_printk_skb: 30 callbacks suppressed
[ 84.502106][ T29] audit: type=1400 audit(1787694388.256:117): avc: denied { create } for pid=3044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 84.598727][ T29] audit: type=1400 audit(1787694388.296:118): avc: denied { sys_admin } for pid=3044 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 84.702615][ T29] audit: type=1400 audit(1787694388.406:119): avc: denied { create } for pid=3043 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 84.831501][ T29] audit: type=1400 audit(1787694388.576:120): avc: denied { sys_chroot } for pid=3046 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 85.137734][ T29] audit: type=1401 audit(1787694388.886:121): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2026/08/25 21:46:39 executed programs: 0
[ 95.516055][ T3062] syz-executor (3062) used greatest stack depth: 22328 bytes left
[ 95.966127][ T3551] modprobe (3551) used greatest stack depth: 22088 bytes left
2026/08/25 21:47:24 executed programs: 10
[ 140.763998][ T29] audit: type=1400 audit(1787694444.516:122): avc: denied { read write } for pid=5773 comm="syz.5.18" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 140.854995][ T29] audit: type=1400 audit(1787694444.516:123): avc: denied { open } for pid=5773 comm="syz.5.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 140.945280][ T29] audit: type=1400 audit(1787694444.516:124): avc: denied { ioctl } for pid=5773 comm="syz.5.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 141.047462][ T3023] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 141.197228][ T5780] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 141.204798][ T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 141.237584][ T3023] usb 6-1: Using ep0 maxpacket: 32
[ 141.243308][ T3023] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 141.253955][ T3023] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 141.262156][ T3023] usb 6-1: config 0 has no interface number 0
[ 141.268713][ T3023] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 141.281382][ T3023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 141.289411][ T3023] usb 6-1: Product: syz
[ 141.293574][ T3023] usb 6-1: Manufacturer: syz
[ 141.297152][ T706] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 141.298223][ T3023] usb 6-1: SerialNumber: syz
[ 141.313469][ T3023] usb 6-1: config 0 descriptor??
[ 141.325782][ T3023] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 141.335650][ T3023] em28xx 6-1:0.132: Video interface 132 found:
[ 141.357324][ T11] usb 5-1: Using ep0 maxpacket: 32
[ 141.362502][ T5780] usb 3-1: Using ep0 maxpacket: 32
[ 141.367739][ T5789] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 141.376089][ T5780] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 141.385275][ T11] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 141.396097][ T11] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 141.405058][ T5780] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 141.413265][ T11] usb 5-1: config 0 has no interface number 0
[ 141.419414][ T11] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 141.429457][ T5780] usb 3-1: config 0 has no interface number 0
[ 141.435594][ T5780] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 141.447137][ T706] usb 8-1: Using ep0 maxpacket: 32
[ 141.447533][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 141.453054][ T706] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 141.460970][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 141.471071][ T706] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[ 141.477950][ T11] usb 5-1: Product: syz
[ 141.485978][ T706] usb 8-1: config 0 has no interface number 0
[ 141.490002][ T5780] usb 3-1: Product: syz
[ 141.496152][ T706] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 141.500240][ T11] usb 5-1: Manufacturer: syz
[ 141.512267][ T706] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 141.514774][ T5780] usb 3-1: Manufacturer: syz
[ 141.525481][ T706] usb 8-1: Product: syz
[ 141.528676][ T11] usb 5-1: SerialNumber: syz
[ 141.531676][ T706] usb 8-1: Manufacturer: syz
[ 141.540754][ T5780] usb 3-1: SerialNumber: syz
[ 141.540978][ T706] usb 8-1: SerialNumber: syz
[ 141.551479][ T11] usb 5-1: config 0 descriptor??
[ 141.557319][ T5789] usb 7-1: Using ep0 maxpacket: 32
[ 141.559256][ T706] usb 8-1: config 0 descriptor??
[ 141.563801][ T5780] usb 3-1: config 0 descriptor??
[ 141.573511][ T5789] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 141.578943][ T706] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 141.593247][ T706] em28xx 8-1:0.132: Video interface 132 found:
[ 141.597204][ T5780] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 141.610479][ T11] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 141.620877][ T3023] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[ 141.627542][ T5789] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 141.635933][ T11] em28xx 5-1:0.132: Video interface 132 found:
[ 141.642330][ T5789] usb 7-1: config 0 has no interface number 0
[ 141.648678][ T5780] em28xx 3-1:0.132: Video interface 132 found:
[ 141.655009][ T5789] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 141.667201][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 141.675248][ T5789] usb 7-1: Product: syz
[ 141.679482][ T5789] usb 7-1: Manufacturer: syz
[ 141.684117][ T5789] usb 7-1: SerialNumber: syz
[ 141.692360][ T5789] usb 7-1: config 0 descriptor??
[ 141.701644][ T3023] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 141.710624][ T3023] em28xx 6-1:0.132: board has no eeprom
[ 141.721945][ T5789] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 141.731737][ T5789] em28xx 7-1:0.132: Video interface 132 found:
[ 141.767178][ T3023] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 141.775067][ T3023] em28xx 6-1:0.132: analog set to bulk mode.
[ 141.782664][ T5797] em28xx 6-1:0.132: Registering V4L2 extension
[ 141.805947][ T3023] usb 6-1: USB disconnect, device number 2
[ 141.818892][ T3023] em28xx 6-1:0.132: Disconnecting em28xx
[ 141.830555][ T706] em28xx 8-1:0.132: unknown em28xx chip ID (0)
[ 141.847940][ T5780] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 141.857713][ T11] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 141.899973][ T706] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 141.908878][ T706] em28xx 8-1:0.132: board has no eeprom
[ 141.912478][ T5780] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 141.926117][ T11] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 141.936759][ T5780] em28xx 3-1:0.132: board has no eeprom
[ 141.943193][ T11] em28xx 5-1:0.132: board has no eeprom
[ 141.960810][ T5797] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[ 141.968276][ T5797] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[ 141.975754][ T5797] em28xx 6-1:0.132: No AC97 audio processor
[ 141.977431][ T706] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 141.982085][ T5789] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 141.986443][ T5797] usb 6-1: Decoder not found
[ 141.993194][ T706] em28xx 8-1:0.132: analog set to bulk mode.
[ 141.997404][ T5797] em28xx 6-1:0.132: failed to create media graph
[ 142.014316][ T5780] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 142.015540][ T706] usb 8-1: USB disconnect, device number 2
[ 142.022385][ T11] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 142.030422][ T706] em28xx 8-1:0.132: Disconnecting em28xx
[ 142.043340][ T5780] em28xx 3-1:0.132: analog set to bulk mode.
[ 142.052266][ T5789] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 142.065541][ T5797] em28xx 6-1:0.132: V4L2 device video0 deregistered
[ 142.073221][ T11] em28xx 5-1:0.132: analog set to bulk mode.
[ 142.084159][ T5789] em28xx 7-1:0.132: board has no eeprom
[ 142.095202][ T5780] usb 3-1: USB disconnect, device number 2
[ 142.103964][ T5797] em28xx 6-1:0.132: Remote control support is not available for this card.
[ 142.122671][ T5780] em28xx 3-1:0.132: Disconnecting em28xx
[ 142.129526][ T28] em28xx 8-1:0.132: Registering V4L2 extension
[ 142.131852][ T11] usb 5-1: USB disconnect, device number 2
[ 142.144530][ T11] em28xx 5-1:0.132: Disconnecting em28xx
[ 142.177354][ T5789] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 142.185234][ T5789] em28xx 7-1:0.132: analog set to bulk mode.
[ 142.199860][ T5789] usb 7-1: USB disconnect, device number 2
[ 142.215459][ T5789] em28xx 7-1:0.132: Disconnecting em28xx
[ 142.244836][ T28] em28xx 8-1:0.132: Config register raw data: 0xffffffed
[ 142.251944][ T28] em28xx 8-1:0.132: AC97 chip type couldn't be determined
[ 142.259082][ T28] em28xx 8-1:0.132: No AC97 audio processor
[ 142.266635][ T28] usb 8-1: Decoder not found
[ 142.271308][ T28] em28xx 8-1:0.132: failed to create media graph
[ 142.281623][ T28] em28xx 8-1:0.132: V4L2 device video0 deregistered
[ 142.290720][ T28] em28xx 8-1:0.132: Remote control support is not available for this card.
[ 142.302217][ T5802] em28xx 3-1:0.132: Registering V4L2 extension
[ 142.440429][ T5802] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 142.450539][ T5802] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 142.458477][ T5802] em28xx 3-1:0.132: No AC97 audio processor
[ 142.475659][ T5802] usb 3-1: Decoder not found
[ 142.486729][ T5802] em28xx 3-1:0.132: failed to create media graph
[ 142.493170][ T5802] em28xx 3-1:0.132: V4L2 device video0 deregistered
[ 142.501017][ T5802] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 142.509736][ T5808] em28xx 5-1:0.132: Registering V4L2 extension
[ 142.574296][ T5808] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 142.581401][ T5808] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 142.591514][ T5808] em28xx 5-1:0.132: No AC97 audio processor
[ 142.603308][ T5808] usb 5-1: Decoder not found
[ 142.607998][ T5808] em28xx 5-1:0.132: failed to create media graph
[ 142.614344][ T5808] em28xx 5-1:0.132: V4L2 device video0 deregistered
[ 142.622184][ T5808] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 142.631614][ T3023] em28xx 6-1:0.132: Closing input extension
[ 142.639403][ T5797] em28xx 7-1:0.132: Registering V4L2 extension
[ 142.650101][ T3023] em28xx 6-1:0.132: Freeing device
[ 142.737222][ T5797] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 142.744524][ T5797] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 142.752395][ T5797] em28xx 7-1:0.132: No AC97 audio processor
[ 142.761254][ T5797] usb 7-1: Decoder not found
[ 142.765918][ T5797] em28xx 7-1:0.132: failed to create media graph
[ 142.774468][ T5797] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 142.784501][ T5797] em28xx 7-1:0.132: Remote control support is not available for this card.
[ 142.784541][ T5832] ==================================================================
[ 142.794115][ T5789] em28xx 7-1:0.132: Closing input extension
[ 142.801148][ T5832] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490
[ 142.801205][ T5832] Read of size 4 at addr ffff8881209f8858 by task v4l_id/5832
[ 142.801226][ T5832]
[ 142.801254][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(lazy)
[ 142.801282][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 142.801306][ T5832] Call Trace:
[ 142.801319][ T5832]
[ 142.801330][ T5832] dump_stack_lvl+0x100/0x190
[ 142.801366][ T5832] print_report+0x13d/0x4b0
[ 142.801402][ T5832] ? __virt_addr_valid+0x239/0x430
[ 142.801439][ T5832] ? v4l2_open+0x351/0x490
[ 142.801475][ T5832] kasan_report+0xdf/0x1c0
[ 142.801511][ T5832] ? v4l2_open+0x351/0x490
[ 142.801553][ T5832] v4l2_open+0x351/0x490
[ 142.801591][ T5832] ? __pfx_v4l2_open+0x10/0x10
[ 142.801630][ T5832] chrdev_open+0x234/0x6a0
[ 142.801656][ T5832] ? __pfx_chrdev_open+0x10/0x10
[ 142.801679][ T5832] ? path_get+0x61/0x80
[ 142.801710][ T5832] do_dentry_open+0x68b/0x14b0
[ 142.801748][ T5832] ? __pfx_chrdev_open+0x10/0x10
[ 142.801776][ T5832] vfs_open+0x82/0x3f0
[ 142.801811][ T5832] path_openat+0x2873/0x4280
[ 142.801843][ T5832] ? __pfx_path_openat+0x10/0x10
[ 142.801873][ T5832] do_file_open+0x20e/0x430
[ 142.801899][ T5832] ? __pfx_do_file_open+0x10/0x10
[ 142.801935][ T5832] ? alloc_fd+0x471/0x7a0
[ 142.801962][ T5832] ? do_getname+0x191/0x390
[ 142.801993][ T5832] do_sys_openat2+0x10f/0x1e0
[ 142.802023][ T5832] ? __pfx_do_sys_openat2+0x10/0x10
[ 142.802059][ T5832] __x64_sys_openat+0x12d/0x210
[ 142.802089][ T5832] ? __pfx___x64_sys_openat+0x10/0x10
[ 142.802127][ T5832] do_syscall_64+0x10b/0x7f0
[ 142.802162][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.802189][ T5832] RIP: 0033:0x7f1d49903407
[ 142.802214][ T5832] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 142.802243][ T5832] RSP: 002b:00007ffc84eb6dd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 142.802268][ T5832] RAX: ffffffffffffffda RBX: 00007f1d49815880 RCX: 00007f1d49903407
[ 142.802287][ T5832] RDX: 0000000000000000 RSI: 00007ffc84eb7f24 RDI: ffffffffffffff9c
[ 142.802304][ T5832] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 142.802319][ T5832] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 142.802335][ T5832] R13: 00007ffc84eb7020 R14: 00007f1d4a099000 R15: 000055b857e544d8
[ 142.802361][ T5832]
[ 142.802370][ T5832]
[ 142.810552][ T5789] em28xx 7-1:0.132: Freeing device
[ 142.814309][ T5832] Allocated by task 5797:
[ 143.057569][ T5832] kasan_save_stack+0x30/0x50
[ 143.062259][ T5832] kasan_save_track+0x14/0x30
[ 143.066939][ T5832] __kasan_kmalloc+0x8f/0xa0
[ 143.071530][ T5832] __kmalloc_cache_noprof+0x35e/0x670
[ 143.076910][ T5832] em28xx_v4l2_init.cold+0x94/0x3a40
[ 143.082196][ T5832] em28xx_init_extension+0x13a/0x200
[ 143.087491][ T5832] request_module_async+0x61/0x80
[ 143.092529][ T5832] process_one_work+0xa23/0x1940
[ 143.097473][ T5832] worker_thread+0x5ef/0xe50
[ 143.102064][ T5832] kthread+0x370/0x450
[ 143.106133][ T5832] ret_from_fork+0x69a/0xc80
[ 143.110732][ T5832] ret_from_fork_asm+0x1a/0x30
[ 143.115497][ T5832]
[ 143.117812][ T5832] Freed by task 5797:
[ 143.121789][ T5832] kasan_save_stack+0x30/0x50
[ 143.126468][ T5832] kasan_save_track+0x14/0x30
[ 143.131147][ T5832] kasan_save_free_info+0x3b/0x70
[ 143.136183][ T5832] __kasan_slab_free+0x43/0x70
[ 143.140950][ T5832] kfree+0x20c/0x650
[ 143.144851][ T5832] kref_put.isra.0+0x53/0x75
[ 143.149441][ T5832] em28xx_v4l2_init.cold+0x280/0x3a40
[ 143.154815][ T5832] em28xx_init_extension+0x13a/0x200
[ 143.160109][ T5832] request_module_async+0x61/0x80
[ 143.165145][ T5832] process_one_work+0xa23/0x1940
[ 143.170087][ T5832] worker_thread+0x5ef/0xe50
[ 143.174680][ T5832] kthread+0x370/0x450
[ 143.178751][ T5832] ret_from_fork+0x69a/0xc80
[ 143.183353][ T5832] ret_from_fork_asm+0x1a/0x30
[ 143.188112][ T5832]
[ 143.190424][ T5832] The buggy address belongs to the object at ffff8881209f8000
[ 143.190424][ T5832] which belongs to the cache kmalloc-8k of size 8192
[ 143.204474][ T5832] The buggy address is located 2136 bytes inside of
[ 143.204474][ T5832] freed 8192-byte region [ffff8881209f8000, ffff8881209fa000)
[ 143.218446][ T5832]
[ 143.220763][ T5832] The buggy address belongs to the physical page:
[ 143.227179][ T5832] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881209fc000 pfn:0x1209f8
[ 143.237335][ T5832] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 143.245827][ T5832] flags: 0x200000000000240(workingset|head|node=0|zone=2)
[ 143.252937][ T5832] page_type: f5(slab)
[ 143.256924][ T5832] raw: 0200000000000240 ffff888100042280 ffff888100040ac8 ffffea0004591c10
[ 143.265515][ T5832] raw: ffff8881209fc000 0000000800020001 00000000f5000000 0000000000000000
[ 143.274099][ T5832] head: 0200000000000240 ffff888100042280 ffff888100040ac8 ffffea0004591c10
[ 143.282773][ T5832] head: ffff8881209fc000 0000000800020001 00000000f5000000 0000000000000000
[ 143.291443][ T5832] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 143.300111][ T5832] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 143.308774][ T5832] page dumped because: kasan: bad access detected
[ 143.315174][ T5832] page_owner tracks the page as allocated
[ 143.320874][ T5832] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2894, tgid 2894 (dhcpcd), ts 19654745694, free_ts 0
[ 143.340242][ T5832] post_alloc_hook+0xfd/0x120
[ 143.344929][ T5832] get_page_from_freelist+0xf25/0x3400
[ 143.350391][ T5832] __alloc_frozen_pages_noprof+0x28f/0x2b90
[ 143.356293][ T5832] new_slab+0xa2/0x670
[ 143.360369][ T5832] refill_objects+0xe3/0x410
[ 143.364968][ T5832] __pcs_replace_empty_main+0x376/0x680
[ 143.370522][ T5832] __kmalloc_cache_noprof+0x50e/0x670
[ 143.375900][ T5832] audit_log_d_path+0xed/0x210
[ 143.380677][ T5832] audit_log_lsm_data+0xff3/0x1fa0
[ 143.385798][ T5832] common_lsm_audit+0x229/0x2b0
[ 143.390667][ T5832] slow_avc_audit+0x186/0x210
[ 143.395347][ T5832] avc_has_perm+0x1a6/0x1e0
[ 143.399852][ T5832] inode_has_perm+0x166/0x1d0
[ 143.404533][ T5832] __file_has_perm+0x39c/0x460
[ 143.409302][ T5832] match_file+0xd9/0x150
[ 143.413539][ T5832] iterate_fd+0x11c/0x390
[ 143.417880][ T5832] page_owner free stack trace missing
[ 143.423235][ T5832]
[ 143.425548][ T5832] Memory state around the buggy address:
[ 143.431171][ T5832] ffff8881209f8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 143.439227][ T5832] ffff8881209f8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 143.447282][ T5832] >ffff8881209f8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 143.455333][ T5832] ^
[ 143.462264][ T5832] ffff8881209f8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 143.470321][ T5832] ffff8881209f8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 143.478372][ T5832] ==================================================================
[ 143.486626][ T706] em28xx 8-1:0.132: Closing input extension
[ 143.493196][ T5780] em28xx 3-1:0.132: Closing input extension
[ 143.495372][ T5832] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 143.495394][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(lazy)
[ 143.495426][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 143.495442][ T5832] Call Trace:
[ 143.495451][ T5832]
[ 143.495462][ T5832] dump_stack_lvl+0x100/0x190
[ 143.495501][ T5832] vpanic+0x552/0x970
[ 143.495531][ T5832] ? __pfx_vpanic+0x10/0x10
[ 143.495563][ T5832] ? v4l2_open+0x351/0x490
[ 143.495602][ T5832] panic+0xd1/0xe0
[ 143.495629][ T5832] ? __pfx_panic+0x10/0x10
[ 143.495658][ T5832] ? v4l2_open+0x351/0x490
[ 143.495695][ T5832] ? preempt_schedule_common+0x42/0xc0
[ 143.495739][ T5832] ? check_panic_on_warn+0x1f/0x90
[ 143.495779][ T5832] check_panic_on_warn.cold+0x19/0x34
[ 143.495812][ T5832] end_report.part.0+0x3a/0x90
[ 143.495849][ T5832] kasan_report.cold+0xe/0x18
[ 143.495886][ T5832] ? v4l2_open+0x351/0x490
[ 143.495928][ T5832] v4l2_open+0x351/0x490
[ 143.495966][ T5832] ? __pfx_v4l2_open+0x10/0x10
[ 143.496004][ T5832] chrdev_open+0x234/0x6a0
[ 143.496029][ T5832] ? __pfx_chrdev_open+0x10/0x10
[ 143.496053][ T5832] ? path_get+0x61/0x80
[ 143.496084][ T5832] do_dentry_open+0x68b/0x14b0
[ 143.496122][ T5832] ? __pfx_chrdev_open+0x10/0x10
[ 143.496150][ T5832] vfs_open+0x82/0x3f0
[ 143.496181][ T5832] path_openat+0x2873/0x4280
[ 143.496213][ T5832] ? __pfx_path_openat+0x10/0x10
[ 143.496242][ T5832] do_file_open+0x20e/0x430
[ 143.496268][ T5832] ? __pfx_do_file_open+0x10/0x10
[ 143.496306][ T5832] ? alloc_fd+0x471/0x7a0
[ 143.496332][ T5832] ? do_getname+0x191/0x390
[ 143.496363][ T5832] do_sys_openat2+0x10f/0x1e0
[ 143.496394][ T5832] ? __pfx_do_sys_openat2+0x10/0x10
[ 143.496430][ T5832] __x64_sys_openat+0x12d/0x210
[ 143.496461][ T5832] ? __pfx___x64_sys_openat+0x10/0x10
[ 143.496498][ T5832] do_syscall_64+0x10b/0x7f0
[ 143.496532][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.496559][ T5832] RIP: 0033:0x7f1d49903407
[ 143.496580][ T5832] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 143.496606][ T5832] RSP: 002b:00007ffc84eb6dd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 143.496632][ T5832] RAX: ffffffffffffffda RBX: 00007f1d49815880 RCX: 00007f1d49903407
[ 143.496650][ T5832] RDX: 0000000000000000 RSI: 00007ffc84eb7f24 RDI: ffffffffffffff9c
[ 143.496670][ T5832] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 143.496686][ T5832] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 143.496702][ T5832] R13: 00007ffc84eb7020 R14: 00007f1d4a099000 R15: 000055b857e544d8
[ 143.496728][ T5832]
[ 143.499363][ T5832] Kernel Offset: disabled