Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts.
2026/02/11 23:09:29 parsed 1 programs
[ 39.359595][ T29] audit: type=1400 audit(1770851369.982:62): avc: denied { node_bind } for pid=2969 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 39.380463][ T29] audit: type=1400 audit(1770851369.992:63): avc: denied { module_request } for pid=2969 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 41.152985][ T29] audit: type=1400 audit(1770851371.782:64): avc: denied { mounton } for pid=2980 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 41.176463][ T29] audit: type=1400 audit(1770851371.802:65): avc: denied { mount } for pid=2980 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 41.179356][ T2980] cgroup: Unknown subsys name 'net'
[ 41.205716][ T29] audit: type=1400 audit(1770851371.832:66): avc: denied { unmount } for pid=2980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 41.331939][ T2980] cgroup: Unknown subsys name 'cpuset'
[ 41.339750][ T2980] cgroup: Unknown subsys name 'rlimit'
[ 41.482992][ T29] audit: type=1400 audit(1770851372.112:67): avc: denied { setattr } for pid=2980 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 41.506745][ T29] audit: type=1400 audit(1770851372.112:68): avc: denied { create } for pid=2980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 41.527244][ T29] audit: type=1400 audit(1770851372.112:69): avc: denied { write } for pid=2980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 41.547655][ T29] audit: type=1400 audit(1770851372.112:70): avc: denied { read } for pid=2980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 41.575904][ T29] audit: type=1400 audit(1770851372.142:71): avc: denied { sys_module } for pid=2980 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 41.623097][ T2984] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 41.677574][ T2980] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 43.514195][ T2993] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 44.419529][ T29] kauditd_printk_skb: 28 callbacks suppressed
[ 44.419548][ T29] audit: type=1400 audit(1770851375.042:100): avc: denied { create } for pid=3041 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
2026/02/11 23:09:45 executed programs: 0
[ 54.814077][ T3002] syz-executor (3002) used greatest stack depth: 23560 bytes left
[ 69.553928][ T4276] modprobe (4276) used greatest stack depth: 22264 bytes left
2026/02/11 23:10:27 executed programs: 10
[ 96.889969][ T29] audit: type=1400 audit(1770851427.502:101): avc: denied { read write } for pid=5736 comm="syz.7.19" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 96.914137][ T29] audit: type=1400 audit(1770851427.502:102): avc: denied { open } for pid=5736 comm="syz.7.19" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 96.937816][ T29] audit: type=1400 audit(1770851427.502:103): avc: denied { ioctl } for pid=5736 comm="syz.7.19" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 97.120129][ T23] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 97.270323][ T23] usb 8-1: Using ep0 maxpacket: 32
[ 97.294774][ T23] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[ 97.303133][ T23] usb 8-1: config 0 has no interface number 0
[ 97.319604][ T23] usb 8-1: config 0 interface 89 has no altsetting 0
[ 97.332348][ T23] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 97.341872][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 97.350270][ T23] usb 8-1: Product: syz
[ 97.354442][ T23] usb 8-1: Manufacturer: syz
[ 97.359062][ T23] usb 8-1: SerialNumber: syz
[ 97.387973][ T23] usb 8-1: config 0 descriptor??
[ 97.406371][ T23] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 97.416408][ T23] em28xx 8-1:0.89: Video interface 89 found: bulk
[ 97.429976][ T37] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 97.580631][ T37] usb 1-1: Using ep0 maxpacket: 32
[ 97.590989][ T37] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 97.599086][ T37] usb 1-1: config 0 has no interface number 0
[ 97.611370][ T37] usb 1-1: config 0 interface 89 has no altsetting 0
[ 97.620546][ T5759] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 97.628599][ T37] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 97.637693][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 97.645729][ T37] usb 1-1: Product: syz
[ 97.649934][ T37] usb 1-1: Manufacturer: syz
[ 97.650087][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 97.654536][ T37] usb 1-1: SerialNumber: syz
[ 97.669267][ T37] usb 1-1: config 0 descriptor??
[ 97.675114][ T23] em28xx 8-1:0.89: unknown em28xx chip ID (0)
[ 97.687328][ T37] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 97.697100][ T37] em28xx 1-1:0.89: Video interface 89 found: bulk
[ 97.748092][ T23] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 97.756455][ T23] em28xx 8-1:0.89: board has no eeprom
[ 97.800135][ T5759] usb 6-1: Using ep0 maxpacket: 32
[ 97.806545][ T5759] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 97.815027][ T5759] usb 6-1: config 0 has no interface number 0
[ 97.821361][ T23] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67)
[ 97.828562][ T23] em28xx 8-1:0.89: analog set to bulk mode.
[ 97.829979][ T9] usb 2-1: Using ep0 maxpacket: 32
[ 97.834920][ T1072] em28xx 8-1:0.89: Registering V4L2 extension
[ 97.841502][ T9] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[ 97.845755][ T5759] usb 6-1: config 0 interface 89 has no altsetting 0
[ 97.853984][ T9] usb 2-1: config 0 has no interface number 0
[ 97.867239][ T23] usb 8-1: USB disconnect, device number 2
[ 97.875016][ T23] em28xx 8-1:0.89: Disconnecting em28xx
[ 97.882946][ T5759] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 97.890027][ T9] usb 2-1: config 0 interface 89 has no altsetting 0
[ 97.892112][ T5759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 97.906708][ T5759] usb 6-1: Product: syz
[ 97.910914][ T5759] usb 6-1: Manufacturer: syz
[ 97.911061][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 97.915526][ T5759] usb 6-1: SerialNumber: syz
[ 97.924618][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 97.932794][ T5759] usb 6-1: config 0 descriptor??
[ 97.937114][ T9] usb 2-1: Product: syz
[ 97.946095][ T5759] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 97.946193][ T9] usb 2-1: Manufacturer: syz
[ 97.946215][ T9] usb 2-1: SerialNumber: syz
[ 97.955738][ T5759] em28xx 6-1:0.89: Video interface 89 found: bulk
[ 97.966151][ T9] usb 2-1: config 0 descriptor??
[ 98.008346][ T1072] em28xx 8-1:0.89: Config register raw data: 0xffffffed
[ 98.015485][ T1072] em28xx 8-1:0.89: AC97 chip type couldn't be determined
[ 98.016423][ T9] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 98.022643][ T1072] em28xx 8-1:0.89: No AC97 audio processor
[ 98.030383][ T37] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[ 98.032360][ T9] em28xx 2-1:0.89: Video interface 89 found: bulk
[ 98.050258][ T1072] usb 8-1: Decoder not found
[ 98.055257][ T1072] em28xx 8-1:0.89: failed to create media graph
[ 98.064008][ T1072] em28xx 8-1:0.89: V4L2 device video0 deregistered
[ 98.073751][ T1072] em28xx 8-1:0.89: Registering snapshot button...
[ 98.082819][ T1072] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input5
[ 98.095790][ T1072] em28xx 8-1:0.89: Remote control support is not available for this card.
[ 98.104708][ T5776] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 98.116079][ T37] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 98.124293][ T37] em28xx 1-1:0.89: board has no eeprom
[ 98.139498][ T23] em28xx 8-1:0.89: Closing input extension
[ 98.155756][ T23] em28xx 8-1:0.89: Deregistering snapshot button
[ 98.176950][ T23] em28xx 8-1:0.89: Freeing device
[ 98.202625][ T5759] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[ 98.210013][ T37] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[ 98.217231][ T37] em28xx 1-1:0.89: analog set to bulk mode.
[ 98.225633][ T1072] em28xx 1-1:0.89: Registering V4L2 extension
[ 98.247336][ T37] usb 1-1: USB disconnect, device number 2
[ 98.262551][ T37] em28xx 1-1:0.89: Disconnecting em28xx
[ 98.270537][ T9] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[ 98.279977][ T5776] usb 7-1: Using ep0 maxpacket: 32
[ 98.294343][ T5759] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 98.303213][ T5759] em28xx 6-1:0.89: board has no eeprom
[ 98.310499][ T1072] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[ 98.317458][ T1072] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[ 98.325010][ T1072] em28xx 1-1:0.89: No AC97 audio processor
[ 98.331733][ T5776] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 98.339818][ T5776] usb 7-1: config 0 has no interface number 0
[ 98.346040][ T5776] usb 7-1: config 0 interface 89 has no altsetting 0
[ 98.352202][ T9] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 98.360579][ T1072] usb 1-1: Decoder not found
[ 98.362390][ T9] em28xx 2-1:0.89: board has no eeprom
[ 98.365369][ T1072] em28xx 1-1:0.89: failed to create media graph
[ 98.377737][ T1072] em28xx 1-1:0.89: V4L2 device video0 deregistered
[ 98.385407][ T5776] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 98.394539][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 98.402532][ T5776] usb 7-1: Product: syz
[ 98.406690][ T5776] usb 7-1: Manufacturer: syz
[ 98.411312][ T5776] usb 7-1: SerialNumber: syz
[ 98.415930][ T5759] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[ 98.423166][ T5759] em28xx 6-1:0.89: analog set to bulk mode.
[ 98.429747][ T1072] em28xx 1-1:0.89: Registering snapshot button...
[ 98.437119][ T1072] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input6
[ 98.439959][ T9] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[ 98.454823][ T9] em28xx 2-1:0.89: analog set to bulk mode.
[ 98.455630][ T5759] usb 6-1: USB disconnect, device number 2
[ 98.471723][ T1072] em28xx 1-1:0.89: Remote control support is not available for this card.
[ 98.480668][ T5765] em28xx 6-1:0.89: Registering V4L2 extension
[ 98.493289][ T9] usb 2-1: USB disconnect, device number 2
[ 98.500435][ T23] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 98.539237][ T9] em28xx 2-1:0.89: Disconnecting em28xx
[ 98.540134][ T5776] usb 7-1: config 0 descriptor??
[ 98.553878][ T5759] em28xx 6-1:0.89: Disconnecting em28xx
[ 98.563736][ T5765] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[ 98.570796][ T5765] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[ 98.577832][ T5765] em28xx 6-1:0.89: No AC97 audio processor
[ 98.603326][ T5776] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 98.613215][ T5776] em28xx 7-1:0.89: Video interface 89 found: bulk
[ 98.621327][ T5765] usb 6-1: Decoder not found
[ 98.625967][ T5765] em28xx 6-1:0.89: failed to create media graph
[ 98.632256][ T5765] em28xx 6-1:0.89: V4L2 device video0 deregistered
[ 98.640619][ T5765] em28xx 6-1:0.89: Registering snapshot button...
[ 98.648052][ T5765] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input7
[ 98.659978][ T23] usb 8-1: Using ep0 maxpacket: 32
[ 98.665489][ T5765] em28xx 6-1:0.89: Remote control support is not available for this card.
[ 98.674323][ T10] em28xx 2-1:0.89: Registering V4L2 extension
[ 98.681797][ T23] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[ 98.689944][ T23] usb 8-1: config 0 has no interface number 0
[ 98.704457][ T23] usb 8-1: config 0 interface 89 has no altsetting 0
[ 98.740148][ T23] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 98.749209][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 98.757910][ T23] usb 8-1: Product: syz
[ 98.758648][ T10] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[ 98.762431][ T23] usb 8-1: Manufacturer: syz
[ 98.769096][ T10] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[ 98.773962][ T23] usb 8-1: SerialNumber: syz
[ 98.781228][ T10] em28xx 2-1:0.89: No AC97 audio processor
[ 98.806634][ T10] usb 2-1: Decoder not found
[ 98.806982][ T23] usb 8-1: config 0 descriptor??
[ 98.811291][ T10] em28xx 2-1:0.89: failed to create media graph
[ 98.822723][ T10] em28xx 2-1:0.89: V4L2 device video0 deregistered
[ 98.829252][ T23] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 98.831022][ T10] em28xx 2-1:0.89: Registering snapshot button...
[ 98.838794][ T23] em28xx 8-1:0.89: Video interface 89 found: bulk
[ 98.846933][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input8
[ 98.860386][ T5776] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[ 98.863652][ T10] em28xx 2-1:0.89: Remote control support is not available for this card.
[ 98.876838][ T37] em28xx 1-1:0.89: Closing input extension
[ 98.882977][ T37] em28xx 1-1:0.89: Deregistering snapshot button
[ 98.894214][ T5759] em28xx 6-1:0.89: Closing input extension
[ 98.900140][ T5759] em28xx 6-1:0.89: Deregistering snapshot button
[ 98.909179][ T37] em28xx 1-1:0.89: Freeing device
[ 98.917718][ T9] em28xx 2-1:0.89: Closing input extension
[ 98.922703][ T5776] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 98.931732][ T5776] em28xx 7-1:0.89: board has no eeprom
[ 98.937532][ T9] em28xx 2-1:0.89: Deregistering snapshot button
[ 98.942562][ T5759] em28xx 6-1:0.89: Freeing device
[ 98.967979][ T9] em28xx 2-1:0.89: Freeing device
[ 99.029971][ T5776] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[ 99.037248][ T5776] em28xx 7-1:0.89: analog set to bulk mode.
[ 99.044086][ T5765] em28xx 7-1:0.89: Registering V4L2 extension
[ 99.060790][ T5776] usb 7-1: USB disconnect, device number 2
[ 99.067990][ T5776] em28xx 7-1:0.89: Disconnecting em28xx
[ 99.080338][ T23] em28xx 8-1:0.89: unknown em28xx chip ID (0)
[ 99.137540][ T5765] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[ 99.145476][ T5765] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[ 99.152938][ T5765] em28xx 7-1:0.89: No AC97 audio processor
[ 99.164324][ T23] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 99.172485][ T23] em28xx 8-1:0.89: board has no eeprom
[ 99.179411][ T5765] usb 7-1: Decoder not found
[ 99.184086][ T5765] em28xx 7-1:0.89: failed to create media graph
[ 99.191093][ T5765] em28xx 7-1:0.89: V4L2 device video0 deregistered
[ 99.199697][ T5765] em28xx 7-1:0.89: Registering snapshot button...
[ 99.208544][ T5765] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input9
[ 99.222919][ T5765] em28xx 7-1:0.89: Remote control support is not available for this card.
[ 99.231870][ T5776] em28xx 7-1:0.89: Closing input extension
[ 99.237970][ T5776] em28xx 7-1:0.89: Deregistering snapshot button
[ 99.248601][ T5776] em28xx 7-1:0.89: Freeing device
[ 99.253724][ T23] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67)
[ 99.260985][ T23] em28xx 8-1:0.89: analog set to bulk mode.
[ 99.267603][ T5765] em28xx 8-1:0.89: Registering V4L2 extension
[ 99.273758][ T37] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 99.290060][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 99.298054][ T23] usb 8-1: USB disconnect, device number 3
[ 99.311254][ T23] em28xx 8-1:0.89: Disconnecting em28xx
[ 99.324870][ T5759] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 99.357481][ T5765] em28xx 8-1:0.89: Config register raw data: 0xffffffed
[ 99.364489][ T5765] em28xx 8-1:0.89: AC97 chip type couldn't be determined
[ 99.371583][ T5765] em28xx 8-1:0.89: No AC97 audio processor
[ 99.402875][ T5765] usb 8-1: Decoder not found
[ 99.407490][ T5765] em28xx 8-1:0.89: failed to create media graph
[ 99.414117][ T5765] em28xx 8-1:0.89: V4L2 device video0 deregistered
[ 99.422067][ T5765] em28xx 8-1:0.89: Registering snapshot button...
[ 99.437169][ T5765] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input10
[ 99.449446][ T5765] em28xx 8-1:0.89: Remote control support is not available for this card.
[ 99.458442][ T23] em28xx 8-1:0.89: Closing input extension
[ 99.464906][ T37] usb 1-1: Using ep0 maxpacket: 32
[ 99.470082][ T23] em28xx 8-1:0.89: Deregistering snapshot button
[ 99.472492][ T9] usb 2-1: Using ep0 maxpacket: 32
[ 99.477863][ T37] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 99.484178][ T9] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[ 99.489783][ T37] usb 1-1: config 0 has no interface number 0
[ 99.497894][ T9] usb 2-1: config 0 has no interface number 0
[ 99.504502][ T37] usb 1-1: config 0 interface 89 has no altsetting 0
[ 99.510323][ T9] usb 2-1: config 0 interface 89 has no altsetting 0
[ 99.519818][ T37] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 99.525489][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 99.532458][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 99.541472][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 99.549415][ T37] usb 1-1: Product: syz
[ 99.557403][ T9] usb 2-1: Product: syz
[ 99.561577][ T37] usb 1-1: Manufacturer: syz
[ 99.565700][ T9] usb 2-1: Manufacturer: syz
[ 99.570301][ T37] usb 1-1: SerialNumber: syz
[ 99.574859][ T9] usb 2-1: SerialNumber: syz
[ 99.588250][ T5759] usb 6-1: Using ep0 maxpacket: 32
[ 99.589986][ T9] usb 2-1: config 0 descriptor??
[ 99.602797][ T5759] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 99.610938][ T5759] usb 6-1: config 0 has no interface number 0
[ 99.618952][ T23] em28xx 8-1:0.89: Freeing device
[ 99.630758][ T9] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 99.637812][ T5759] usb 6-1: config 0 interface 89 has no altsetting 0
[ 99.640986][ T9] em28xx 2-1:0.89: Video interface 89 found: bulk
[ 99.652686][ T5759] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 99.662829][ T5759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 99.671076][ T5759] usb 6-1: Product: syz
[ 99.675419][ T5759] usb 6-1: Manufacturer: syz
[ 99.680297][ T5759] usb 6-1: SerialNumber: syz
[ 99.697003][ T37] usb 1-1: config 0 descriptor??
[ 99.709985][ T5776] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 99.721158][ T37] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 99.731245][ T37] em28xx 1-1:0.89: Video interface 89 found: bulk
[ 99.742645][ T5759] usb 6-1: config 0 descriptor??
[ 99.752146][ T5759] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 99.761748][ T5759] em28xx 6-1:0.89: Video interface 89 found: bulk
[ 99.880166][ T5776] usb 7-1: Using ep0 maxpacket: 32
[ 99.881100][ T9] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[ 99.887505][ T5776] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 99.899550][ T5776] usb 7-1: config 0 has no interface number 0
[ 99.905743][ T5776] usb 7-1: config 0 interface 89 has no altsetting 0
[ 99.917548][ T5776] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 99.926634][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 99.934657][ T5776] usb 7-1: Product: syz
[ 99.938811][ T5776] usb 7-1: Manufacturer: syz
[ 99.943446][ T5776] usb 7-1: SerialNumber: syz
[ 99.948080][ T23] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 99.959199][ T5776] usb 7-1: config 0 descriptor??
[ 99.962376][ T9] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 99.969555][ T5776] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 99.972266][ T9] em28xx 2-1:0.89: board has no eeprom
[ 99.981717][ T5776] em28xx 7-1:0.89: Video interface 89 found: bulk
[ 99.982464][ T37] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[ 100.010257][ T5759] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[ 100.049962][ T9] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[ 100.057214][ T9] em28xx 2-1:0.89: analog set to bulk mode.
[ 100.063253][ T10] em28xx 2-1:0.89: Registering V4L2 extension
[ 100.077442][ T5759] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 100.081161][ T9] usb 2-1: USB disconnect, device number 3
[ 100.085635][ T5759] em28xx 6-1:0.89: board has no eeprom
[ 100.097105][ T37] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 100.105292][ T37] em28xx 1-1:0.89: board has no eeprom
[ 100.121474][ T9] em28xx 2-1:0.89: Disconnecting em28xx
[ 100.130884][ T23] usb 8-1: Using ep0 maxpacket: 32
[ 100.137598][ T23] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[ 100.145745][ T23] usb 8-1: config 0 has no interface number 0
[ 100.153217][ T23] usb 8-1: config 0 interface 89 has no altsetting 0
[ 100.154144][ T10] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[ 100.161996][ T23] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 100.166931][ T10] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[ 100.176008][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 100.182997][ T10] em28xx 2-1:0.89: No AC97 audio processor
[ 100.184696][ T10] usb 2-1: Decoder not found
[ 100.191362][ T23] usb 8-1: Product: syz
[ 100.191384][ T23] usb 8-1: Manufacturer: syz
[ 100.191404][ T23] usb 8-1: SerialNumber: syz
[ 100.197335][ T5759] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[ 100.198035][ T10] em28xx 2-1:0.89: failed to create media graph
[ 100.202613][ T5759] em28xx 6-1:0.89: analog set to bulk mode.
[ 100.202692][ T37] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[ 100.212236][ T10] em28xx 2-1:0.89: V4L2 device video0 deregistered
[ 100.216140][ T37] em28xx 1-1:0.89: analog set to bulk mode.
[ 100.225213][ T10] em28xx 2-1:0.89: Registering snapshot button...
[ 100.251083][ T23] usb 8-1: config 0 descriptor??
[ 100.261735][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input11
[ 100.269548][ T5776] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[ 100.286461][ T5759] usb 6-1: USB disconnect, device number 3
[ 100.292949][ T37] usb 1-1: USB disconnect, device number 3
[ 100.300205][ T5759] em28xx 6-1:0.89: Disconnecting em28xx
[ 100.307012][ T37] em28xx 1-1:0.89: Disconnecting em28xx
[ 100.316310][ T23] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 100.326162][ T10] em28xx 2-1:0.89: Remote control support is not available for this card.
[ 100.326162][ T23] em28xx 8-1:0.89: Video interface 89 found: bulk
[ 100.341871][ T5765] em28xx 6-1:0.89: Registering V4L2 extension
[ 100.389170][ T5776] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 100.397407][ T5776] em28xx 7-1:0.89: board has no eeprom
[ 100.403081][ T5765] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[ 100.410068][ T5765] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[ 100.417131][ T5765] em28xx 6-1:0.89: No AC97 audio processor
[ 100.427555][ T5765] usb 6-1: Decoder not found
[ 100.432190][ T5765] em28xx 6-1:0.89: failed to create media graph
[ 100.438503][ T5765] em28xx 6-1:0.89: V4L2 device video0 deregistered
[ 100.446435][ T5765] em28xx 6-1:0.89: Registering snapshot button...
[ 100.455250][ T5765] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input12
[ 100.470786][ T5765] em28xx 6-1:0.89: Remote control support is not available for this card.
[ 100.479362][ T5777] em28xx 1-1:0.89: Registering V4L2 extension
[ 100.490120][ T5776] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[ 100.497377][ T5776] em28xx 7-1:0.89: analog set to bulk mode.
[ 100.530742][ T5776] usb 7-1: USB disconnect, device number 3
[ 100.537863][ T5776] em28xx 7-1:0.89: Disconnecting em28xx
[ 100.562469][ T5777] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[ 100.569458][ T5777] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[ 100.577183][ T5777] em28xx 1-1:0.89: No AC97 audio processor
[ 100.583622][ T23] em28xx 8-1:0.89: unknown em28xx chip ID (0)
[ 100.592341][ T5777] usb 1-1: Decoder not found
[ 100.596954][ T5777] em28xx 1-1:0.89: failed to create media graph
[ 100.604061][ T5777] em28xx 1-1:0.89: V4L2 device video0 deregistered
[ 100.612301][ T5777] em28xx 1-1:0.89: Registering snapshot button...
[ 100.619660][ T5777] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input13
[ 100.631492][ T5777] em28xx 1-1:0.89: Remote control support is not available for this card.
[ 100.640086][ T37] em28xx 1-1:0.89: Closing input extension
[ 100.645937][ T37] em28xx 1-1:0.89: Deregistering snapshot button
[ 100.654218][ T23] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 100.662585][ T23] em28xx 8-1:0.89: board has no eeprom
[ 100.670351][ T9] em28xx 2-1:0.89: Closing input extension
[ 100.676403][ T9] em28xx 2-1:0.89: Deregistering snapshot button
[ 100.677715][ T37] em28xx 1-1:0.89: Freeing device
[ 100.695105][ T1072] em28xx 7-1:0.89: Registering V4L2 extension
[ 100.697858][ T9] em28xx 2-1:0.89: Freeing device
[ 100.730780][ T23] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67)
[ 100.738044][ T23] em28xx 8-1:0.89: analog set to bulk mode.
[ 100.797818][ T23] usb 8-1: USB disconnect, device number 4
[ 100.806661][ T1072] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[ 100.814048][ T1072] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[ 100.821979][ T1072] em28xx 7-1:0.89: No AC97 audio processor
[ 100.831678][ T23] em28xx 8-1:0.89: Disconnecting em28xx
[ 100.838845][ T1072] usb 7-1: Decoder not found
[ 100.843503][ T1072] em28xx 7-1:0.89: failed to create media graph
[ 100.849793][ T1072] em28xx 7-1:0.89: V4L2 device video0 deregistered
[ 100.859031][ T1072] em28xx 7-1:0.89: Registering snapshot button...
[ 100.859213][ T5809] ==================================================================
[ 100.867337][ T1072] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input14
[ 100.873504][ T5809] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 100.891054][ T1072] em28xx 7-1:0.89: Remote control support is not available for this card.
[ 100.891435][ T5809] Read of size 8 at addr ffff88811d960738 by task v4l_id/5809
[ 100.900445][ T5759] em28xx 6-1:0.89: Closing input extension
[ 100.907359][ T5809]
[ 100.907391][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary)
[ 100.907423][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 100.907445][ T5809] Call Trace:
[ 100.907454][ T5809]
[ 100.907467][ T5809] dump_stack_lvl+0x100/0x190
[ 100.907514][ T5809] print_report+0x156/0x4c9
[ 100.907548][ T5809] ? __virt_addr_valid+0x81/0x620
[ 100.907586][ T5809] ? __phys_addr+0xe8/0x180
[ 100.907624][ T5809] ? v4l2_fh_init+0x27d/0x2c0
[ 100.907658][ T5809] kasan_report+0xdf/0x1a0
[ 100.907692][ T5809] ? v4l2_fh_init+0x27d/0x2c0
[ 100.907730][ T5809] v4l2_fh_init+0x27d/0x2c0
[ 100.907764][ T5809] v4l2_fh_open+0x64/0xa0
[ 100.907798][ T5809] em28xx_v4l2_open+0x11e/0x570
[ 100.907828][ T5809] v4l2_open+0x1d2/0x490
[ 100.907863][ T5809] ? __pfx_v4l2_open+0x10/0x10
[ 100.907897][ T5809] chrdev_open+0x234/0x6a0
[ 100.907926][ T5809] ? __pfx_chrdev_open+0x10/0x10
[ 100.907948][ T5809] ? path_get+0x61/0x80
[ 100.907977][ T5809] do_dentry_open+0x71a/0x1400
[ 100.908012][ T5809] ? __pfx_chrdev_open+0x10/0x10
[ 100.908036][ T5809] ? inode_permission+0x374/0x630
[ 100.908067][ T5809] vfs_open+0x82/0x3f0
[ 100.908092][ T5809] ? may_open+0x1f3/0x410
[ 100.908122][ T5809] path_openat+0x21dc/0x3120
[ 100.908165][ T5809] ? __pfx_path_openat+0x10/0x10
[ 100.908209][ T5809] do_filp_open+0x1f7/0x420
[ 100.908233][ T5809] ? __pfx_do_filp_open+0x10/0x10
[ 100.908267][ T5809] ? _raw_spin_unlock+0x28/0x50
[ 100.908297][ T5809] ? alloc_fd+0x42a/0x730
[ 100.908339][ T5809] do_sys_openat2+0x12e/0x220
[ 100.908366][ T5809] ? __pfx_do_sys_openat2+0x10/0x10
[ 100.908393][ T5809] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 100.908430][ T5809] __x64_sys_openat+0x12d/0x210
[ 100.908459][ T5809] ? __pfx___x64_sys_openat+0x10/0x10
[ 100.908489][ T5809] ? do_user_addr_fault+0x3e3/0x11d0
[ 100.908524][ T5809] do_syscall_64+0xc9/0x570
[ 100.908549][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.908580][ T5809] RIP: 0033:0x7fda0bfef407
[ 100.908603][ T5809] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 100.908632][ T5809] RSP: 002b:00007fff7f7c2f00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 100.908657][ T5809] RAX: ffffffffffffffda RBX: 00007fda0bf01880 RCX: 00007fda0bfef407
[ 100.908676][ T5809] RDX: 0000000000000000 RSI: 00007fff7f7c3f26 RDI: ffffffffffffff9c
[ 100.908692][ T5809] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 100.908707][ T5809] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 100.908723][ T5809] R13: 00007fff7f7c3150 R14: 00007fda0c785000 R15: 000055d797d544d8
[ 100.908748][ T5809]
[ 100.908757][ T5809]
[ 100.913792][ T5759] em28xx 6-1:0.89: Deregistering snapshot button
[ 100.915474][ T5809] Allocated by task 1072:
[ 101.150019][ T37] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 101.150347][ T5809] kasan_save_stack+0x30/0x50
[ 101.202127][ T5809] kasan_save_track+0x14/0x30
[ 101.206791][ T5809] __kasan_kmalloc+0x8f/0xa0
[ 101.211363][ T5809] em28xx_v4l2_init.cold+0x94/0x3503
[ 101.216633][ T5809] em28xx_init_extension+0x13a/0x200
[ 101.221906][ T5809] request_module_async+0x61/0x80
[ 101.226917][ T5809] process_one_work+0x9c2/0x1840
[ 101.231839][ T5809] worker_thread+0x5da/0xe40
[ 101.236416][ T5809] kthread+0x3b3/0x730
[ 101.240467][ T5809] ret_from_fork+0x6c3/0xa20
[ 101.245036][ T5809] ret_from_fork_asm+0x1a/0x30
[ 101.249784][ T5809]
[ 101.252093][ T5809] Freed by task 1072:
[ 101.256055][ T5809] kasan_save_stack+0x30/0x50
[ 101.260715][ T5809] kasan_save_track+0x14/0x30
[ 101.265377][ T5809] kasan_save_free_info+0x3b/0x70
[ 101.270379][ T5809] __kasan_slab_free+0x43/0x70
[ 101.275126][ T5809] kfree+0x1ad/0x630
[ 101.279005][ T5809] kref_put.isra.0+0x56/0x90
[ 101.283582][ T5809] em28xx_v4l2_init.cold+0x280/0x3503
[ 101.288939][ T5809] em28xx_init_extension+0x13a/0x200
[ 101.294211][ T5809] request_module_async+0x61/0x80
[ 101.299219][ T5809] process_one_work+0x9c2/0x1840
[ 101.304139][ T5809] worker_thread+0x5da/0xe40
[ 101.308716][ T5809] kthread+0x3b3/0x730
[ 101.312767][ T5809] ret_from_fork+0x6c3/0xa20
[ 101.317336][ T5809] ret_from_fork_asm+0x1a/0x30
[ 101.322086][ T5809]
[ 101.324391][ T5809] The buggy address belongs to the object at ffff88811d960000
[ 101.324391][ T5809] which belongs to the cache kmalloc-8k of size 8192
[ 101.338455][ T5809] The buggy address is located 1848 bytes inside of
[ 101.338455][ T5809] freed 8192-byte region [ffff88811d960000, ffff88811d962000)
[ 101.352404][ T5809]
[ 101.354707][ T5809] The buggy address belongs to the physical page:
[ 101.361104][ T5809] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d960
[ 101.369939][ T5809] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 101.378418][ T5809] anon flags: 0x200000000000040(head|node=0|zone=2)
[ 101.384986][ T5809] page_type: f5(slab)
[ 101.388959][ T5809] raw: 0200000000000040 ffff888100042280 0000000000000000 0000000000000001
[ 101.397523][ T5809] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 101.400681][ T37] usb 1-1: Using ep0 maxpacket: 32
[ 101.406096][ T5809] head: 0200000000000040 ffff888100042280 0000000000000000 0000000000000001
[ 101.406120][ T5809] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 101.412682][ T37] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 101.419870][ T5809] head: 0200000000000003 ffffea0004765801 00000000ffffffff 00000000ffffffff
[ 101.428556][ T37] usb 1-1: config 0 has no interface number 0
[ 101.436555][ T5809] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 101.436571][ T5809] page dumped because: kasan: bad access detected
[ 101.436593][ T5809] page_owner tracks the page as allocated
[ 101.452690][ T37] usb 1-1: config 0 interface 89 has no altsetting 0
[ 101.459913][ T5809] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3053, tgid 3053 (syz-executor), ts 44846833227, free_ts 44822785335
[ 101.459960][ T5809] post_alloc_hook+0x1e1/0x250
[ 101.466752][ T29] audit: type=1400 audit(1770851432.032:104): avc: denied { read } for pid=2843 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 101.472046][ T5809] get_page_from_freelist+0xd57/0x3b20
[ 101.472091][ T5809] __alloc_frozen_pages_noprof+0x269/0x2230
[ 101.478781][ T29] audit: type=1400 audit(1770851432.082:105): avc: denied { search } for pid=2843 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 101.500055][ T5809] alloc_pages_mpol+0xe8/0x410
[ 101.504859][ T29] audit: type=1400 audit(1770851432.082:106): avc: denied { search } for pid=2843 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 101.526668][ T5809] new_slab+0x2c4/0x440
[ 101.526701][ T5809] ___slab_alloc+0xda3/0x1ca0
[ 101.532215][ T29] audit: type=1400 audit(1770851432.082:107): avc: denied { add_name } for pid=2843 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 101.537991][ T5809] __slab_alloc.isra.0+0x63/0x110
[ 101.559447][ T29] audit: type=1400 audit(1770851432.082:108): avc: denied { create } for pid=2843 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 101.564134][ T5809] __kmalloc_noprof+0x5c3/0x990
[ 101.585595][ T29] audit: type=1400 audit(1770851432.082:109): avc: denied { append open } for pid=2843 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 101.589690][ T5809] cache_create_net+0x9b/0x220
[ 101.594384][ T29] audit: type=1400 audit(1770851432.082:110): avc: denied { getattr } for pid=2843 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 101.614965][ T5809] gss_svc_init_net+0x69/0x640
[ 101.615001][ T5809] ops_init+0x1e2/0x5f0
[ 101.623717][ T37] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 101.640551][ T5809] setup_net+0x118/0x3a0
[ 101.640587][ T5809] copy_net_ns+0x440/0x780
[ 101.645426][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 101.668389][ T5809] create_new_namespaces+0x3ea/0xc00
[ 101.668416][ T5809] unshare_nsproxy_namespaces+0xc3/0x1f0
[ 101.668443][ T5809] ksys_unshare+0x455/0xab0
[ 101.673204][ T37] usb 1-1: Product: syz
[ 101.695801][ T5809] page last free pid 1 tgid 1 stack trace:
[ 101.695816][ T5809] __free_frozen_pages+0x7d1/0x1010
[ 101.695846][ T5809] __put_partials+0x127/0x160
[ 101.695876][ T5809] qlist_free_all+0x47/0xe0
[ 101.700638][ T37] usb 1-1: Manufacturer: syz
[ 101.704748][ T5809] kasan_quarantine_reduce+0x1a0/0x1f0
[ 101.713768][ T37] usb 1-1: SerialNumber: syz
[ 101.717966][ T5809] __kasan_slab_alloc+0x4e/0x70
[ 101.727056][ T37] usb 1-1: config 0 descriptor??
[ 101.730309][ T5809] kmem_cache_alloc_noprof+0x266/0x760
[ 101.730339][ T5809] getname_flags.part.0+0x4c/0x540
[ 101.739419][ T37] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 101.741211][ T5809] user_path_at+0x9b/0x100
[ 101.741245][ T5809] do_faccessat+0x13c/0xbf0
[ 101.741277][ T5809] __x64_sys_access+0x5b/0x80
[ 101.741298][ T5809] do_syscall_64+0xc9/0x570
[ 101.741319][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.745833][ T37] em28xx 1-1:0.89: Video interface 89 found: bulk
[ 101.749939][ T5809]
[ 101.749946][ T5809] Memory state around the buggy address:
[ 101.749961][ T5809] ffff88811d960600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.860448][ T5809] ffff88811d960680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.868497][ T5809] >ffff88811d960700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.876549][ T5809] ^
[ 101.882436][ T5809] ffff88811d960780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.890500][ T5809] ffff88811d960800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.898555][ T5809] ==================================================================
[ 101.907048][ T5809] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 101.914247][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary)
[ 101.923609][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 101.933655][ T5809] Call Trace:
[ 101.936931][ T5809]
[ 101.939855][ T5809] dump_stack_lvl+0x100/0x190
[ 101.944550][ T5809] vpanic+0x20d/0x630
[ 101.948533][ T5809] panic+0xd1/0xd1
[ 101.952252][ T5809] ? __pfx_panic+0x10/0x10
[ 101.956676][ T5809] ? check_panic_on_warn+0x1f/0x90
[ 101.961792][ T5809] check_panic_on_warn.cold+0x19/0x34
[ 101.967169][ T5809] end_report.part.0+0x3a/0x90
[ 101.971942][ T5809] kasan_report.cold+0xe/0x18
[ 101.976628][ T5809] ? v4l2_fh_init+0x27d/0x2c0
[ 101.981311][ T5809] v4l2_fh_init+0x27d/0x2c0
[ 101.985822][ T5809] v4l2_fh_open+0x64/0xa0
[ 101.990157][ T5809] em28xx_v4l2_open+0x11e/0x570
[ 101.995008][ T5809] v4l2_open+0x1d2/0x490
[ 101.999259][ T5809] ? __pfx_v4l2_open+0x10/0x10
[ 102.004030][ T5809] chrdev_open+0x234/0x6a0
[ 102.008440][ T5809] ? __pfx_chrdev_open+0x10/0x10
[ 102.013369][ T5809] ? path_get+0x61/0x80
[ 102.017531][ T5809] do_dentry_open+0x71a/0x1400
[ 102.022302][ T5809] ? __pfx_chrdev_open+0x10/0x10
[ 102.027237][ T5809] ? inode_permission+0x374/0x630
[ 102.032265][ T5809] vfs_open+0x82/0x3f0
[ 102.036331][ T5809] ? may_open+0x1f3/0x410
[ 102.040662][ T5809] path_openat+0x21dc/0x3120
[ 102.045271][ T5809] ? __pfx_path_openat+0x10/0x10
[ 102.050222][ T5809] do_filp_open+0x1f7/0x420
[ 102.054722][ T5809] ? __pfx_do_filp_open+0x10/0x10
[ 102.059752][ T5809] ? _raw_spin_unlock+0x28/0x50
[ 102.064609][ T5809] ? alloc_fd+0x42a/0x730
[ 102.068953][ T5809] do_sys_openat2+0x12e/0x220
[ 102.073633][ T5809] ? __pfx_do_sys_openat2+0x10/0x10
[ 102.078832][ T5809] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 102.085257][ T5809] __x64_sys_openat+0x12d/0x210
[ 102.090110][ T5809] ? __pfx___x64_sys_openat+0x10/0x10
[ 102.095484][ T5809] ? do_user_addr_fault+0x3e3/0x11d0
[ 102.100774][ T5809] do_syscall_64+0xc9/0x570
[ 102.105282][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.111176][ T5809] RIP: 0033:0x7fda0bfef407
[ 102.115588][ T5809] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 102.135195][ T5809] RSP: 002b:00007fff7f7c2f00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 102.143614][ T5809] RAX: ffffffffffffffda RBX: 00007fda0bf01880 RCX: 00007fda0bfef407
[ 102.151582][ T5809] RDX: 0000000000000000 RSI: 00007fff7f7c3f26 RDI: ffffffffffffff9c
[ 102.159550][ T5809] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 102.167516][ T5809] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 102.175478][ T5809] R13: 00007fff7f7c3150 R14: 00007fda0c785000 R15: 000055d797d544d8
[ 102.183454][ T5809]
[ 102.186787][ T5809] Kernel Offset: disabled
[ 102.191102][ T5809] Rebooting in 86400 seconds..