last executing test programs:
4.759461167s ago: executing program 4 (id=5):
r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000001300)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x37, &(0x7f0000000040)=ANY=[])
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000440)=""/216, 0xd8)
4.714747569s ago: executing program 2 (id=3):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12015002177a0510720c1300f54e0102030109022400020809400a09040c03e7fd4200800904fee701602747800905d26aa1"], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x17d, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, 0x0)
4.709756829s ago: executing program 3 (id=4):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000080)='7', 0x1)
read$char_usb(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
4.368435516s ago: executing program 0 (id=1):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da867100090506"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x76, 0xfa, 0xf, 0x10, 0x1c40, 0x534, 0xbc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
4.306173699s ago: executing program 1 (id=2):
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
2.962533075s ago: executing program 2 (id=6):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc)
syz_usb_disconnect(r0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0)
1.696904687s ago: executing program 1 (id=7):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x2, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x424}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0})
1.597523992s ago: executing program 3 (id=8):
r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
1.597387902s ago: executing program 4 (id=9):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0)={0x0, 0x16, 0x7, "e8c10ac0fb892b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
1.560062124s ago: executing program 0 (id=10):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
467.899938ms ago: executing program 2 (id=11):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b1b, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0x70, 0x6, 0x10, 0x14f7, 0x500, 0x4485, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0)
ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/103)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x4)
0s ago: executing program 1 (id=12):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x3, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109023600010000000009040000040de67a0009050300000400000009050000ebff09030509050402d08fb68d0009058102"], 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xa, &(0x7f0000000140)=@string={0xa, 0x3, "f0895ee8b32ab9f2"}}, {0x0, 0x0}]})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts.
[ 37.486292][ T29] audit: type=1400 audit(1774019917.168:62): avc: denied { mounton } for pid=2952 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 37.509821][ T29] audit: type=1400 audit(1774019917.188:63): avc: denied { mount } for pid=2952 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 37.512888][ T2952] cgroup: Unknown subsys name 'net'
[ 37.538738][ T29] audit: type=1400 audit(1774019917.228:64): avc: denied { unmount } for pid=2952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 37.673157][ T2952] cgroup: Unknown subsys name 'cpuset'
[ 37.681349][ T2952] cgroup: Unknown subsys name 'rlimit'
[ 37.810328][ T29] audit: type=1400 audit(1774019917.488:65): avc: denied { setattr } for pid=2952 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 37.833711][ T29] audit: type=1400 audit(1774019917.488:66): avc: denied { mounton } for pid=2952 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 37.858930][ T29] audit: type=1400 audit(1774019917.488:67): avc: denied { mount } for pid=2952 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 37.876159][ T2955] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 37.891257][ T29] audit: type=1400 audit(1774019917.578:68): avc: denied { relabelto } for pid=2955 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 37.916816][ T29] audit: type=1400 audit(1774019917.578:69): avc: denied { write } for pid=2955 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 37.995431][ T29] audit: type=1400 audit(1774019917.678:70): avc: denied { read } for pid=2952 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 37.997198][ T2952] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 38.021098][ T29] audit: type=1400 audit(1774019917.678:71): avc: denied { open } for pid=2952 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 50.920158][ T29] kauditd_printk_skb: 6 callbacks suppressed
[ 50.920180][ T29] audit: type=1400 audit(1774019930.598:78): avc: denied { create } for pid=2967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 51.000957][ T29] audit: type=1400 audit(1774019930.598:79): avc: denied { write } for pid=2967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 51.090953][ T29] audit: type=1400 audit(1774019930.758:80): avc: denied { read } for pid=2967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 86.970920][ T29] audit: type=1400 audit(1774019966.628:81): avc: denied { mounton } for pid=2966 comm="syz-executor" path="/root/syzkaller.NGIwc9/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 87.031925][ T29] audit: type=1400 audit(1774019966.638:82): avc: denied { mount } for pid=2966 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 87.097173][ T29] audit: type=1400 audit(1774019966.678:83): avc: denied { mounton } for pid=2966 comm="syz-executor" path="/root/syzkaller.NGIwc9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 87.190940][ T29] audit: type=1400 audit(1774019966.678:84): avc: denied { mount } for pid=2966 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 87.250940][ T29] audit: type=1400 audit(1774019966.678:85): avc: denied { mounton } for pid=2966 comm="syz-executor" path="/root/syzkaller.NGIwc9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 87.340965][ T29] audit: type=1400 audit(1774019966.678:86): avc: denied { mounton } for pid=2966 comm="syz-executor" path="/root/syzkaller.NGIwc9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 87.401626][ T29] audit: type=1400 audit(1774019966.688:87): avc: denied { unmount } for pid=2966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 87.433430][ T29] audit: type=1400 audit(1774019966.748:88): avc: denied { mounton } for pid=2966 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 87.447556][ T2966] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 87.500329][ T29] audit: type=1400 audit(1774019967.178:89): avc: denied { read write } for pid=2963 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 87.594511][ T29] audit: type=1400 audit(1774019967.218:90): avc: denied { open } for pid=2963 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 87.897066][ T791] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 87.931769][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 87.970952][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 88.061007][ T791] usb 5-1: Using ep0 maxpacket: 32
[ 88.067799][ T791] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 88.076240][ T791] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 88.084956][ T791] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 88.093970][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 88.103669][ T791] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 88.119736][ T791] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 88.120950][ T23] usb 3-1: Using ep0 maxpacket: 16
[ 88.134063][ T791] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 88.140978][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 88.147049][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 88.156060][ T23] usb 3-1: config 8 has an invalid interface number: 12 but max is 1
[ 88.163141][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8
[ 88.171142][ T23] usb 3-1: config 8 has an invalid interface number: 254 but max is 1
[ 88.179349][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 88.186910][ T23] usb 3-1: config 8 has no interface number 0
[ 88.198856][ T791] usb 5-1: config 0 descriptor??
[ 88.201943][ T28] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 88.211544][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 88.214886][ T23] usb 3-1: config 8 has no interface number 1
[ 88.231662][ T23] usb 3-1: too many endpoints for config 8 interface 12 altsetting 3: 231, using maximum allowed: 30
[ 88.235116][ T9] usb 4-1: config 0 interface 0 has no altsetting 0
[ 88.244098][ T23] usb 3-1: config 8 interface 12 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 231
[ 88.252063][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 88.263027][ T23] usb 3-1: config 8 interface 254 altsetting 231 has an endpoint descriptor with address 0xD2, changing to 0x82
[ 88.271725][ T5217] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[ 88.283864][ T23] usb 3-1: config 8 interface 254 altsetting 231 bulk endpoint 0x82 has invalid maxpacket 161
[ 88.300991][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 88.301699][ T23] usb 3-1: config 8 interface 12 has no altsetting 0
[ 88.318479][ T9] usb 4-1: config 0 interface 0 has no altsetting 0
[ 88.319744][ T23] usb 3-1: config 8 interface 254 has no altsetting 0
[ 88.326906][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 88.337315][ T23] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5
[ 88.341451][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 88.350535][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 88.362442][ T9] usb 4-1: config 0 interface 0 has no altsetting 0
[ 88.369402][ T23] usb 3-1: Product: syz
[ 88.377122][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 88.381377][ T23] usb 3-1: Manufacturer: syz
[ 88.389517][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 88.394131][ T23] usb 3-1: SerialNumber: syz
[ 88.405480][ T9] usb 4-1: config 0 interface 0 has no altsetting 0
[ 88.417248][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 88.422559][ T28] usb 1-1: config 0 has no interfaces?
[ 88.426667][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 88.431968][ T28] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 88.452205][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 88.457209][ T791] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 88.471750][ T9] usb 4-1: config 0 interface 0 has no altsetting 0
[ 88.473222][ T28] usb 1-1: config 0 descriptor??
[ 88.479589][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 88.506669][ T5217] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 88.517157][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 88.529438][ T791] usb 5-1: USB disconnect, device number 2
[ 88.536119][ T5217] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 88.545794][ T9] usb 4-1: config 0 interface 0 has no altsetting 0
[ 88.555108][ T5217] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[ 88.567261][ T791] usblp0: removed
[ 88.574114][ T5217] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 88.586017][ T5217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 88.595758][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 88.604696][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 88.617422][ T9] usb 4-1: config 0 interface 0 has no altsetting 0
[ 88.629369][ T5223] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 88.638348][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 88.650003][ T5217] hub 2-1:1.0: bad descriptor, ignoring hub
[ 88.663828][ T23] peak_usb 3-1:8.12 can0: unable to request usb[type=0 value=1] err=-71
[ 88.667759][ T5217] hub 2-1:1.0: probe with driver hub failed with error -5
[ 88.679187][ T23] peak_usb 3-1:8.12: unable to read PCAN-Chip USB firmware info (err -71)
[ 88.679675][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 88.703230][ T5217] cdc_wdm 2-1:1.0: skipping garbage
[ 88.708486][ T5217] cdc_wdm 2-1:1.0: skipping garbage
[ 88.713975][ T9] usb 4-1: config 0 interface 0 has no altsetting 0
[ 88.724730][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 88.741620][ T5217] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 88.761068][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 88.762681][ T23] peak_usb 3-1:8.12: probe with driver peak_usb failed with error -71
[ 88.769437][ T9] usb 4-1: Product: syz
[ 88.769461][ T9] usb 4-1: Manufacturer: syz
[ 88.792295][ T23] peak_usb 3-1:8.254 can0: unable to request usb[type=0 value=1] err=-71
[ 88.795368][ T9] usb 4-1: SerialNumber: syz
[ 88.803163][ T5221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 88.814692][ T23] peak_usb 3-1:8.254: unable to read PCAN-Chip USB firmware info (err -71)
[ 88.815968][ T9] usb 4-1: config 0 descriptor??
[ 88.829615][ T5221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 88.848444][ T5221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 88.857876][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1
[ 88.859719][ T5221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 88.879785][ T23] peak_usb 3-1:8.254: probe with driver peak_usb failed with error -71
[ 88.918102][ T23] usb 3-1: USB disconnect, device number 2
[ 88.937780][ T5224] usb 1-1: USB disconnect, device number 2
[ 89.011117][ T791] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 89.159847][ T23] usb 4-1: USB disconnect, device number 2
[ 89.170979][ T791] usb 5-1: Using ep0 maxpacket: 32
[ 89.179306][ T791] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 89.188903][ T791] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 89.198585][ T791] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 89.207663][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 89.217361][ T791] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 89.227048][ T791] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 89.240042][ T791] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 89.249116][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 89.261964][ T791] usb 5-1: config 0 descriptor??
[ 89.371373][ T5224] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 89.462290][ T5223] usb 2-1: reset low-speed USB device number 2 using dummy_hcd
[ 89.530920][ T5224] usb 1-1: Using ep0 maxpacket: 16
[ 89.537606][ T5224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[ 89.547961][ T5224] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 89.560974][ T5217] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 89.562952][ T5224] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice= b.c7
[ 89.577548][ T5224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 89.585585][ T5224] usb 1-1: Product: syz
[ 89.589764][ T5224] usb 1-1: Manufacturer: syz
[ 89.594393][ T5224] usb 1-1: SerialNumber: syz
[ 89.601400][ T5224] usb 1-1: config 0 descriptor??
[ 89.608749][ T5224] i2c-tiny-usb 1-1:0.0: version b.c7 found at bus 001 address 003
[ 89.710931][ T5217] usb 3-1: Using ep0 maxpacket: 32
[ 89.717681][ T5217] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 89.729984][ T5217] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 89.739244][ T5217] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 89.747508][ T5217] usb 3-1: Product: syz
[ 89.751725][ T5217] usb 3-1: Manufacturer: syz
[ 89.756337][ T5217] usb 3-1: SerialNumber: syz
[ 89.763871][ T5217] usb 3-1: config 0 descriptor??
[ 89.769664][ T5232] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[ 89.779234][ T5217] hub 3-1:0.0: bad descriptor, ignoring hub
[ 89.779333][ T5227] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 89.785272][ T5217] hub 3-1:0.0: probe with driver hub failed with error -5
[ 89.796149][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 89.806106][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 89.812411][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[ 89.912036][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 89.918668][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 89.924771][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[ 90.022406][ T23] yurex 4-1:0.0: USB YUREX #1 now disconnected
[ 90.028854][ T5224] (null): failure reading functionality
[ 90.036062][ T791] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 90.039587][ T5224] i2c i2c-0: failure reading functionality
[ 90.046841][ T92] usb 2-1: Failed to suspend device, error -71
[ 90.055006][ T5226] usb 2-1: USB disconnect, device number 2
[ 90.070362][ T5224] i2c i2c-0: connected i2c-tiny-usb device
[ 90.096733][ T5224] usb 1-1: USB disconnect, device number 3
[ 90.106180][ T791] usb 5-1: USB disconnect, device number 3
[ 90.140342][ T791] usblp1: removed
[ 90.145222][ T5217] usb 3-1: USB disconnect, device number 3
[ 90.587252][ T5217] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 90.637985][ T5206] syz.3.4 (5206) used greatest stack depth: 22088 bytes left
[ 90.771020][ T5217] usb 3-1: Using ep0 maxpacket: 32
[ 90.777502][ T5217] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 90.790088][ T5217] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 90.799190][ T5217] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 90.807403][ T5217] usb 3-1: Product: syz
[ 90.811602][ T5217] usb 3-1: Manufacturer: syz
[ 90.816216][ T5217] usb 3-1: SerialNumber: syz
[ 90.820969][ T5224] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 90.824294][ T5217] usb 3-1: config 0 descriptor??
[ 90.834214][ T5232] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 90.842616][ T5217] hub 3-1:0.0: bad descriptor, ignoring hub
[ 90.848588][ T5217] hub 3-1:0.0: probe with driver hub failed with error -5
[ 90.911351][ T791] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 90.911569][ T5226] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 90.950959][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 90.992409][ T5224] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 91.002571][ T5224] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 91.011647][ T5224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 91.022030][ T5224] usb 2-1: config 0 descriptor??
[ 91.030481][ T5224] pwc: Askey VC010 type 2 USB webcam detected.
[ 91.070998][ T791] usb 4-1: Using ep0 maxpacket: 16
[ 91.071080][ T5226] usb 5-1: Using ep0 maxpacket: 32
[ 91.077832][ T791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 91.092345][ T791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[ 91.093027][ T5226] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 91.102254][ T791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 91.102291][ T791] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[ 91.103560][ T791] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 91.111137][ T23] usb 1-1: Using ep0 maxpacket: 32
[ 91.122585][ T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 91.134419][ T5226] usb 5-1: config 0 has no interface number 0
[ 91.143661][ T791] usb 4-1: SerialNumber: syz
[ 91.149180][ T5226] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 91.157224][ T5217] usb 3-1: USB disconnect, device number 4
[ 91.166364][ T5226] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 91.190412][ T5240] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 91.193005][ T5226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 91.200032][ T5240] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 91.207819][ T5226] usb 5-1: Product: syz
[ 91.208035][ T23] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 91.223708][ T791] hub 4-1:1.0: bad descriptor, ignoring hub
[ 91.228155][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 91.241810][ T791] hub 4-1:1.0: probe with driver hub failed with error -5
[ 91.249091][ T5226] usb 5-1: Manufacturer: syz
[ 91.253986][ T5226] usb 5-1: SerialNumber: syz
[ 91.260518][ T23] usb 1-1: Product: syz
[ 91.269800][ T5226] usb 5-1: config 0 descriptor??
[ 91.274833][ T23] usb 1-1: Manufacturer: syz
[ 91.279711][ T23] usb 1-1: SerialNumber: syz
[ 91.289192][ T5226] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 91.300980][ T5226] em28xx 5-1:0.132: Video interface 132 found:
[ 91.308751][ T23] usb 1-1: config 0 descriptor??
[ 91.318761][ T23] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 91.433537][ T791] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[ 91.449633][ T5224] pwc: recv_control_msg error -32 req 02 val 2b00
[ 91.457520][ T5224] pwc: recv_control_msg error -32 req 02 val 2700
[ 91.465243][ T5224] pwc: recv_control_msg error -32 req 02 val 2c00
[ 91.473440][ T791] usb 4-1: USB disconnect, device number 3
[ 91.675352][ T5224] pwc: recv_control_msg error -71 req 04 val 1300
[ 91.686413][ T5224] pwc: recv_control_msg error -71 req 04 val 1400
[ 91.693605][ T5226] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 91.700369][ T5224] pwc: recv_control_msg error -71 req 02 val 2000
[ 91.708356][ T5224] pwc: recv_control_msg error -71 req 02 val 2100
[ 91.715327][ T5224] pwc: recv_control_msg error -71 req 04 val 1500
[ 91.722275][ T5224] pwc: recv_control_msg error -71 req 02 val 2500
[ 91.729293][ T5224] pwc: recv_control_msg error -71 req 02 val 2400
[ 91.736255][ T5224] pwc: recv_control_msg error -71 req 02 val 2600
[ 91.743081][ T5224] pwc: recv_control_msg error -71 req 02 val 2900
[ 91.749820][ T5224] pwc: recv_control_msg error -71 req 02 val 2800
[ 91.761711][ T5224] pwc: recv_control_msg error -71 req 04 val 1100
[ 91.768841][ T5224] pwc: recv_control_msg error -71 req 04 val 1200
[ 91.782629][ T5224] pwc: Registered as video0.
[ 91.803823][ T5224] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[ 91.842509][ T5224] usb 2-1: USB disconnect, device number 3
[ 92.070961][ T791] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 92.100982][ T2741] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 92.226053][ T791] usb 3-1: Using ep0 maxpacket: 8
[ 92.242921][ T791] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 92.250957][ T2741] usb 4-1: Using ep0 maxpacket: 16
[ 92.251323][ T791] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 92.262774][ T2741] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 92.267771][ T791] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 92.277472][ T2741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[ 92.286725][ T791] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 92.298596][ T2741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 92.306596][ T791] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 92.316739][ T2741] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[ 92.330249][ T791] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 92.344727][ T2741] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 92.352148][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 92.361917][ T2741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 92.377394][ T2741] usb 4-1: SerialNumber: syz
[ 92.382122][ T5226] em28xx 5-1:0.132: failed to read eeprom (err=-110)
[ 92.389139][ T5226] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[ 92.403137][ T5240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 92.410399][ T5240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 92.419363][ T2741] hub 4-1:1.0: bad descriptor, ignoring hub
[ 92.425393][ T2741] hub 4-1:1.0: probe with driver hub failed with error -5
[ 92.605067][ T791] usb 3-1: GET_CAPABILITIES returned 0
[ 92.610595][ T791] usbtmc 3-1:16.0: can't read capabilities
[ 92.619838][ T5240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 92.627792][ T5240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 92.640987][ T5226] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 92.648941][ T5226] em28xx 5-1:0.132: analog set to bulk mode.
[ 92.655865][ T5224] em28xx 5-1:0.132: Registering V4L2 extension
[ 92.676409][ T5226] usb 5-1: USB disconnect, device number 4
[ 92.692116][ T5217] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 92.693290][ T5226] em28xx 5-1:0.132: Disconnecting em28xx
[ 92.753468][ T23] gspca_topro: reg_r err -71
[ 92.763098][ T23] gspca_topro: Sensor soi763a
[ 92.792273][ T23] usb 1-1: USB disconnect, device number 4
[ 92.839336][ T2741] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[ 92.858131][ T5224] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 92.870953][ T5217] usb 2-1: Using ep0 maxpacket: 16
[ 92.882012][ T5224] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 92.889368][ T5224] em28xx 5-1:0.132: No AC97 audio processor
[ 92.898469][ T5217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[ 92.916513][ T5224] usb 5-1: Decoder not found
[ 92.919813][ T5217] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 92.921935][ T2741] usb 4-1: USB disconnect, device number 4
[ 92.941852][ T5224] em28xx 5-1:0.132: failed to create media graph
[ 92.948309][ T5224] em28xx 5-1:0.132: V4L2 device video0 deregistered
[ 92.952167][ T5217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024
[ 92.966162][ T5217] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 92.968152][ T5224] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 92.976266][ T5252] ==================================================================
[ 92.990283][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 92.992804][ T5252] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 92.992842][ T5252] Read of size 8 at addr ffff888123354740 by task v4l_id/5252
[ 93.004924][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 93.008618][ T5252]
[ 93.008637][ T5252] CPU: 0 UID: 0 PID: 5252 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 93.008667][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 93.008682][ T5252] Call Trace:
[ 93.008690][ T5252]
[ 93.008700][ T5252] dump_stack_lvl+0x100/0x190
[ 93.008733][ T5252] print_report+0x156/0x4c9
[ 93.008767][ T5252] ? __virt_addr_valid+0x81/0x620
[ 93.008803][ T5252] ? __phys_addr+0xe8/0x180
[ 93.008832][ T5252] ? v4l2_fh_init+0x27d/0x2c0
[ 93.008854][ T5252] kasan_report+0xdf/0x1e0
[ 93.008892][ T5252] ? v4l2_fh_init+0x27d/0x2c0
[ 93.008917][ T5252] v4l2_fh_init+0x27d/0x2c0
[ 93.008940][ T5252] v4l2_fh_open+0x64/0xa0
[ 93.008963][ T5252] em28xx_v4l2_open+0x11e/0x570
[ 93.008995][ T5252] v4l2_open+0x1d2/0x490
[ 93.009019][ T5252] ? __pfx_v4l2_open+0x10/0x10
[ 93.009042][ T5252] chrdev_open+0x234/0x6a0
[ 93.009071][ T5252] ? __pfx_chrdev_open+0x10/0x10
[ 93.009098][ T5252] ? path_get+0x61/0x80
[ 93.009131][ T5252] do_dentry_open+0x68b/0x14b0
[ 93.009157][ T5252] ? __pfx_chrdev_open+0x10/0x10
[ 93.009186][ T5252] ? inode_permission+0x374/0x620
[ 93.009222][ T5252] vfs_open+0x82/0x3f0
[ 93.009253][ T5252] ? may_open+0x1f3/0x410
[ 93.009288][ T5252] path_openat+0x208c/0x31a0
[ 93.009320][ T5252] ? __pfx_path_openat+0x10/0x10
[ 93.009354][ T5252] do_file_open+0x20e/0x430
[ 93.009384][ T5252] ? __pfx_do_file_open+0x10/0x10
[ 93.009422][ T5252] ? alloc_fd+0x42a/0x730
[ 93.009452][ T5252] ? do_getname+0x191/0x390
[ 93.009487][ T5252] do_sys_openat2+0x10d/0x1e0
[ 93.009520][ T5252] ? __pfx_do_sys_openat2+0x10/0x10
[ 93.009559][ T5252] __x64_sys_openat+0x12d/0x210
[ 93.009592][ T5252] ? __pfx___x64_sys_openat+0x10/0x10
[ 93.009627][ T5252] ? do_user_addr_fault+0x3e3/0x11d0
[ 93.009667][ T5252] do_syscall_64+0x106/0x7b0
[ 93.009691][ T5252] ? irqentry_exit+0x117/0x620
[ 93.009727][ T5252] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.009753][ T5252] RIP: 0033:0x7fd8f8e8b407
[ 93.009772][ T5252] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 93.009802][ T5252] RSP: 002b:00007ffe1f5a89b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 93.009827][ T5252] RAX: ffffffffffffffda RBX: 00007fd8f8d9d880 RCX: 00007fd8f8e8b407
[ 93.009843][ T5252] RDX: 0000000000000000 RSI: 00007ffe1f5a8f27 RDI: ffffffffffffff9c
[ 93.009859][ T5252] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 93.009874][ T5252] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 93.009889][ T5252] R13: 00007ffe1f5a8c00 R14: 00007fd8f9621000 R15: 000055b81fb1c4d8
[ 93.009912][ T5252]
[ 93.009920][ T5252]
[ 93.020996][ T29] kauditd_printk_skb: 11 callbacks suppressed
[ 93.021012][ T29] audit: type=1400 audit(1774019972.668:102): avc: denied { write } for pid=5243 comm="syz.2.11" name="usbtmc0" dev="devtmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 93.023783][ T5252] Allocated by task 5224:
[ 93.027834][ T5226] em28xx 5-1:0.132: Closing input extension
[ 93.035035][ T5252] kasan_save_stack+0x30/0x50
[ 93.035076][ T5252] kasan_save_track+0x14/0x30
[ 93.035111][ T5252] __kasan_kmalloc+0x8f/0xa0
[ 93.035145][ T5252] em28xx_v4l2_init.cold+0x94/0x3503
[ 93.035182][ T5252] em28xx_init_extension+0x13a/0x200
[ 93.035224][ T5252] request_module_async+0x61/0x80
[ 93.035249][ T5252] process_one_work+0xa23/0x19a0
[ 93.035278][ T5252] worker_thread+0x5ef/0xe50
[ 93.035307][ T5252] kthread+0x370/0x450
[ 93.035333][ T5252] ret_from_fork+0x6c3/0xcb0
[ 93.060646][ T29] audit: type=1400 audit(1774019972.708:103): avc: denied { ioctl } for pid=5243 comm="syz.2.11" path="/dev/input/event2" dev="devtmpfs" ino=247 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 93.060840][ T5252] ret_from_fork_asm+0x1a/0x30
[ 93.405758][ T5252]
[ 93.408082][ T5252] Freed by task 5224:
[ 93.412055][ T5252] kasan_save_stack+0x30/0x50
[ 93.416759][ T5252] kasan_save_track+0x14/0x30
[ 93.421445][ T5252] kasan_save_free_info+0x3b/0x70
[ 93.426474][ T5252] __kasan_slab_free+0x43/0x70
[ 93.431266][ T5252] kfree+0x1dc/0x640
[ 93.435153][ T5252] kref_put.isra.0+0x56/0x90
[ 93.439744][ T5252] em28xx_v4l2_init.cold+0x280/0x3503
[ 93.445143][ T5252] em28xx_init_extension+0x13a/0x200
[ 93.450431][ T5252] request_module_async+0x61/0x80
[ 93.455448][ T5252] process_one_work+0xa23/0x19a0
[ 93.460388][ T5252] worker_thread+0x5ef/0xe50
[ 93.464997][ T5252] kthread+0x370/0x450
[ 93.469060][ T5252] ret_from_fork+0x6c3/0xcb0
[ 93.473652][ T5252] ret_from_fork_asm+0x1a/0x30
[ 93.478425][ T5252]
[ 93.480753][ T5252] The buggy address belongs to the object at ffff888123354000
[ 93.480753][ T5252] which belongs to the cache kmalloc-8k of size 8192
[ 93.494805][ T5252] The buggy address is located 1856 bytes inside of
[ 93.494805][ T5252] freed 8192-byte region [ffff888123354000, ffff888123356000)
[ 93.508776][ T5252]
[ 93.511101][ T5252] The buggy address belongs to the physical page:
[ 93.517507][ T5252] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x123350
[ 93.526358][ T5252] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 93.534849][ T5252] flags: 0x200000000000040(head|node=0|zone=2)
[ 93.540996][ T5252] page_type: f5(slab)
[ 93.544973][ T5252] raw: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122
[ 93.553549][ T5252] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 93.562128][ T5252] head: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122
[ 93.570797][ T5252] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 93.579463][ T5252] head: 0200000000000003 ffffea00048cd401 00000000ffffffff 00000000ffffffff
[ 93.588126][ T5252] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 93.596787][ T5252] page dumped because: kasan: bad access detected
[ 93.603188][ T5252] page_owner tracks the page as allocated
[ 93.608897][ T5252] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2952, tgid 2952 (syz-executor), ts 37995570471, free_ts 0
[ 93.628775][ T5252] post_alloc_hook+0x153/0x170
[ 93.633546][ T5252] get_page_from_freelist+0xf10/0x39f0
[ 93.638999][ T5252] __alloc_frozen_pages_noprof+0x273/0x2860
[ 93.644885][ T5252] new_slab+0xa6/0x6c0
[ 93.648956][ T5252] refill_objects+0x26b/0x400
[ 93.653628][ T5252] __pcs_replace_empty_main+0x1ab/0x660
[ 93.659170][ T5252] __kmalloc_cache_noprof+0x52c/0x6b0
[ 93.664547][ T5252] audit_log_d_path+0xed/0x210
[ 93.669307][ T5252] audit_log_lsm_data+0xff3/0x1fa0
[ 93.674419][ T5252] common_lsm_audit+0x229/0x2b0
[ 93.679269][ T5252] slow_avc_audit+0x186/0x210
[ 93.683947][ T5252] avc_has_perm+0x1a6/0x1e0
[ 93.688447][ T5252] inode_has_perm+0x166/0x1d0
[ 93.693121][ T5252] selinux_file_open+0x39d/0x510
[ 93.698059][ T5252] security_file_open+0x34/0x70
[ 93.702903][ T5252] do_dentry_open+0x589/0x14b0
[ 93.707663][ T5252] page_owner free stack trace missing
[ 93.713019][ T5252]
[ 93.715337][ T5252] Memory state around the buggy address:
[ 93.720961][ T5252] ffff888123354600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.729016][ T5252] ffff888123354680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.737068][ T5252] >ffff888123354700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.745117][ T5252] ^
[ 93.751260][ T5252] ffff888123354780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.759329][ T5252] ffff888123354800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.767379][ T5252] ==================================================================
[ 93.775615][ T5217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 93.782595][ T29] audit: type=1400 audit(1774019973.458:104): avc: denied { read } for pid=2835 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 93.785430][ T5217] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 93.810770][ T29] audit: type=1400 audit(1774019973.458:105): avc: denied { search } for pid=2835 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 93.819874][ T5252] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 93.819899][ T5252] CPU: 0 UID: 0 PID: 5252 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 93.819929][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 93.819943][ T5252] Call Trace:
[ 93.819952][ T5252]
[ 93.819962][ T5252] dump_stack_lvl+0x100/0x190
[ 93.819996][ T5252] vpanic+0x552/0x970
[ 93.820023][ T5252] ? __pfx_vpanic+0x10/0x10
[ 93.820053][ T5252] ? v4l2_fh_init+0x27d/0x2c0
[ 93.820077][ T5252] panic+0xd1/0xe0
[ 93.820102][ T5252] ? __pfx_panic+0x10/0x10
[ 93.820130][ T5252] ? v4l2_fh_init+0x27d/0x2c0
[ 93.820152][ T5252] ? preempt_schedule_common+0x42/0xc0
[ 93.820188][ T5252] ? check_panic_on_warn+0x1f/0x90
[ 93.820216][ T5252] check_panic_on_warn.cold+0x19/0x34
[ 93.820247][ T5252] end_report.part.0+0x3a/0x90
[ 93.820280][ T5252] kasan_report.cold+0xe/0x18
[ 93.820314][ T5252] ? v4l2_fh_init+0x27d/0x2c0
[ 93.820340][ T5252] v4l2_fh_init+0x27d/0x2c0
[ 93.820363][ T5252] v4l2_fh_open+0x64/0xa0
[ 93.820386][ T5252] em28xx_v4l2_open+0x11e/0x570
[ 93.820421][ T5252] v4l2_open+0x1d2/0x490
[ 93.820445][ T5252] ? __pfx_v4l2_open+0x10/0x10
[ 93.820468][ T5252] chrdev_open+0x234/0x6a0
[ 93.820497][ T5252] ? __pfx_chrdev_open+0x10/0x10
[ 93.820539][ T5252] ? path_get+0x61/0x80
[ 93.820573][ T5252] do_dentry_open+0x68b/0x14b0
[ 93.820598][ T5252] ? __pfx_chrdev_open+0x10/0x10
[ 93.820627][ T5252] ? inode_permission+0x374/0x620
[ 93.820664][ T5252] vfs_open+0x82/0x3f0
[ 93.820694][ T5252] ? may_open+0x1f3/0x410
[ 93.820729][ T5252] path_openat+0x208c/0x31a0
[ 93.820763][ T5252] ? __pfx_path_openat+0x10/0x10
[ 93.820798][ T5252] do_file_open+0x20e/0x430
[ 93.820828][ T5252] ? __pfx_do_file_open+0x10/0x10
[ 93.820867][ T5252] ? alloc_fd+0x42a/0x730
[ 93.820897][ T5252] ? do_getname+0x191/0x390
[ 93.820932][ T5252] do_sys_openat2+0x10d/0x1e0
[ 93.820965][ T5252] ? __pfx_do_sys_openat2+0x10/0x10
[ 93.821003][ T5252] __x64_sys_openat+0x12d/0x210
[ 93.821036][ T5252] ? __pfx___x64_sys_openat+0x10/0x10
[ 93.821071][ T5252] ? do_user_addr_fault+0x3e3/0x11d0
[ 93.821113][ T5252] do_syscall_64+0x106/0x7b0
[ 93.821138][ T5252] ? irqentry_exit+0x117/0x620
[ 93.821175][ T5252] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.821200][ T5252] RIP: 0033:0x7fd8f8e8b407
[ 93.821220][ T5252] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 93.821244][ T5252] RSP: 002b:00007ffe1f5a89b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 93.821269][ T5252] RAX: ffffffffffffffda RBX: 00007fd8f8d9d880 RCX: 00007fd8f8e8b407
[ 93.821286][ T5252] RDX: 0000000000000000 RSI: 00007ffe1f5a8f27 RDI: ffffffffffffff9c
[ 93.821302][ T5252] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 93.821317][ T5252] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 93.821332][ T5252] R13: 00007ffe1f5a8c00 R14: 00007fd8f9621000 R15: 000055b81fb1c4d8
[ 93.821355][ T5252]
[ 93.838997][ T5252] Kernel Offset: disabled