Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts.
2026/08/25 02:51:01 parsed 1 programs
[ 52.624906][ T29] kauditd_printk_skb: 1 callbacks suppressed
[ 52.624928][ T29] audit: type=1400 audit(1787626261.464:77): avc: denied { node_bind } for pid=2978 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 52.652262][ T29] audit: type=1400 audit(1787626261.464:78): avc: denied { module_request } for pid=2978 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
2026/08/25 02:51:01 serving rpc on tcp://34207
[ 55.694527][ T29] audit: type=1400 audit(1787626264.534:79): avc: denied { mounton } for pid=2988 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 55.718728][ T29] audit: type=1400 audit(1787626264.554:80): avc: denied { mount } for pid=2988 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 55.728835][ T2988] cgroup: Unknown subsys name 'net'
[ 55.748181][ T29] audit: type=1400 audit(1787626264.584:81): avc: denied { unmount } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 55.883283][ T2988] cgroup: Unknown subsys name 'cpuset'
[ 55.892253][ T2988] cgroup: Unknown subsys name 'rlimit'
[ 56.049634][ T29] audit: type=1400 audit(1787626264.884:82): avc: denied { setattr } for pid=2988 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 56.072998][ T29] audit: type=1400 audit(1787626264.894:83): avc: denied { create } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 56.093872][ T29] audit: type=1400 audit(1787626264.894:84): avc: denied { write } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 56.114749][ T29] audit: type=1400 audit(1787626264.894:85): avc: denied { read } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 56.146220][ T29] audit: type=1400 audit(1787626264.984:86): avc: denied { sys_module } for pid=2988 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 56.263350][ T2992] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 56.295781][ T2988] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 57.901979][ T29] kauditd_printk_skb: 8 callbacks suppressed
[ 57.902004][ T29] audit: type=1400 audit(1787626266.734:95): avc: denied { execmem } for pid=2994 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 57.994891][ T29] audit: type=1400 audit(1787626266.804:96): avc: denied { read } for pid=2999 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 58.090399][ T29] audit: type=1400 audit(1787626266.804:97): avc: denied { open } for pid=2999 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 58.181508][ T29] audit: type=1400 audit(1787626266.814:98): avc: denied { mounton } for pid=2999 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 58.252283][ T29] audit: type=1400 audit(1787626266.974:99): avc: denied { create } for pid=2999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 58.305727][ T29] audit: type=1400 audit(1787626266.974:100): avc: denied { mounton } for pid=3000 comm="syz-executor" path="/root/syzkaller.NppNbl/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 58.360170][ T29] audit: type=1400 audit(1787626266.974:101): avc: denied { mount } for pid=3000 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 58.426503][ T29] audit: type=1400 audit(1787626266.984:102): avc: denied { mounton } for pid=3000 comm="syz-executor" path="/root/syzkaller.NppNbl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 58.493295][ T29] audit: type=1400 audit(1787626266.994:103): avc: denied { mount } for pid=3000 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 58.549005][ T29] audit: type=1400 audit(1787626266.994:104): avc: denied { mounton } for pid=3000 comm="syz-executor" path="/root/syzkaller.NppNbl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 58.660134][ T3000] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
2026/08/25 02:51:23 executed programs: 0
[ 74.622647][ T3001] syz-executor (3001) used greatest stack depth: 22328 bytes left
2026/08/25 02:52:15 executed programs: 10
[ 126.811929][ T29] kauditd_printk_skb: 16 callbacks suppressed
[ 126.811978][ T29] audit: type=1400 audit(1787626335.654:121): avc: denied { read write } for pid=5754 comm="syz.6.18" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 126.890728][ T29] audit: type=1400 audit(1787626335.654:122): avc: denied { open } for pid=5754 comm="syz.6.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 126.962897][ T29] audit: type=1400 audit(1787626335.694:123): avc: denied { ioctl } for pid=5754 comm="syz.6.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 127.141008][ T120] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 127.321729][ T120] usb 7-1: Using ep0 maxpacket: 32
[ 127.341922][ T120] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 127.389722][ T120] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 127.412187][ T120] usb 7-1: config 0 has no interface number 0
[ 127.428068][ T120] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 127.453278][ T120] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 127.472313][ T120] usb 7-1: Product: syz
[ 127.478737][ T120] usb 7-1: Manufacturer: syz
[ 127.491390][ T120] usb 7-1: SerialNumber: syz
[ 127.505899][ T120] usb 7-1: config 0 descriptor??
[ 127.538649][ T120] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 127.560676][ T120] em28xx 7-1:0.132: Video interface 132 found:
[ 127.611639][ T3007] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 127.772029][ T3007] usb 5-1: Using ep0 maxpacket: 32
[ 127.781038][ T120] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 127.789474][ T3007] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 127.800414][ T3007] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 127.809909][ T3007] usb 5-1: config 0 has no interface number 0
[ 127.816441][ T3007] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 127.832052][ T3007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 127.840330][ T3007] usb 5-1: Product: syz
[ 127.845128][ T3007] usb 5-1: Manufacturer: syz
[ 127.850141][ T3007] usb 5-1: SerialNumber: syz
[ 127.852187][ T120] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 127.854920][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 127.875623][ T3007] usb 5-1: config 0 descriptor??
[ 127.889249][ T3007] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 127.889455][ T3049] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 127.901136][ T3007] em28xx 5-1:0.132: Video interface 132 found:
[ 127.913826][ T120] em28xx 7-1:0.132: board has no eeprom
[ 127.972365][ T120] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 127.980387][ T120] em28xx 7-1:0.132: analog set to bulk mode.
[ 127.987729][ T5790] em28xx 7-1:0.132: Registering V4L2 extension
[ 128.001400][ T23] usb 3-1: Using ep0 maxpacket: 32
[ 128.013939][ T23] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 128.026090][ T120] usb 7-1: USB disconnect, device number 2
[ 128.034283][ T23] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 128.037219][ T120] em28xx 7-1:0.132: Disconnecting em28xx
[ 128.055999][ T23] usb 3-1: config 0 has no interface number 0
[ 128.062587][ T23] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 128.071029][ T3049] usb 8-1: Using ep0 maxpacket: 32
[ 128.082694][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 128.083341][ T3049] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 128.103850][ T23] usb 3-1: Product: syz
[ 128.112660][ T23] usb 3-1: Manufacturer: syz
[ 128.116277][ T3049] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[ 128.117533][ T23] usb 3-1: SerialNumber: syz
[ 128.135444][ T3049] usb 8-1: config 0 has no interface number 0
[ 128.143485][ T3049] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 128.145536][ T23] usb 3-1: config 0 descriptor??
[ 128.166908][ T3007] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 128.175405][ T23] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 128.181136][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 128.185518][ T23] em28xx 3-1:0.132: Video interface 132 found:
[ 128.204500][ T3049] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 128.218567][ T3049] usb 8-1: Product: syz
[ 128.224769][ T3049] usb 8-1: Manufacturer: syz
[ 128.231850][ T3049] usb 8-1: SerialNumber: syz
[ 128.248771][ T3049] usb 8-1: config 0 descriptor??
[ 128.274814][ T3049] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 128.287030][ T3007] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 128.290741][ T3049] em28xx 8-1:0.132: Video interface 132 found:
[ 128.314765][ T3007] em28xx 5-1:0.132: board has no eeprom
[ 128.361143][ T9] usb 4-1: Using ep0 maxpacket: 32
[ 128.373178][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 128.384747][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 128.391488][ T3007] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 128.400983][ T9] usb 4-1: config 0 has no interface number 0
[ 128.401268][ T3007] em28xx 5-1:0.132: analog set to bulk mode.
[ 128.416155][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 128.433977][ T23] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 128.442564][ T5790] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 128.450000][ T5790] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 128.458146][ T3007] usb 5-1: USB disconnect, device number 2
[ 128.465138][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 128.473815][ T5790] em28xx 7-1:0.132: No AC97 audio processor
[ 128.485521][ T9] usb 4-1: Product: syz
[ 128.489772][ T9] usb 4-1: Manufacturer: syz
[ 128.497095][ T9] usb 4-1: SerialNumber: syz
[ 128.503558][ T3007] em28xx 5-1:0.132: Disconnecting em28xx
[ 128.513646][ T23] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 128.515728][ T5790] usb 7-1: Decoder not found
[ 128.527676][ T9] usb 4-1: config 0 descriptor??
[ 128.533237][ T3049] em28xx 8-1:0.132: unknown em28xx chip ID (0)
[ 128.533942][ T23] em28xx 3-1:0.132: board has no eeprom
[ 128.549816][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 128.559794][ T9] em28xx 4-1:0.132: Video interface 132 found:
[ 128.566711][ T5790] em28xx 7-1:0.132: failed to create media graph
[ 128.573253][ T5790] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 128.583225][ T5790] em28xx 7-1:0.132: Remote control support is not available for this card.
[ 128.592500][ T5782] em28xx 5-1:0.132: Registering V4L2 extension
[ 128.602446][ T23] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 128.607462][ T3049] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 128.612343][ T23] em28xx 3-1:0.132: analog set to bulk mode.
[ 128.619356][ T3049] em28xx 8-1:0.132: board has no eeprom
[ 128.666578][ T23] usb 3-1: USB disconnect, device number 2
[ 128.695040][ T23] em28xx 3-1:0.132: Disconnecting em28xx
[ 128.722298][ T3049] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 128.732826][ T3049] em28xx 8-1:0.132: analog set to bulk mode.
[ 128.757022][ T3049] usb 8-1: USB disconnect, device number 2
[ 128.775017][ T3049] em28xx 8-1:0.132: Disconnecting em28xx
[ 128.801081][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[ 128.825902][ T5782] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 128.835619][ T5782] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 128.842867][ T5782] em28xx 5-1:0.132: No AC97 audio processor
[ 128.851038][ T5782] usb 5-1: Decoder not found
[ 128.855702][ T5782] em28xx 5-1:0.132: failed to create media graph
[ 128.862609][ T5782] em28xx 5-1:0.132: V4L2 device video0 deregistered
[ 128.867371][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 128.877368][ T5782] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 128.879780][ T9] em28xx 4-1:0.132: board has no eeprom
[ 128.889122][ T3007] em28xx 5-1:0.132: Closing input extension
[ 128.900021][ T120] em28xx 7-1:0.132: Closing input extension
[ 128.908981][ T5799] em28xx 3-1:0.132: Registering V4L2 extension
[ 128.919045][ T3007] em28xx 5-1:0.132: Freeing device
[ 128.923579][ T120] em28xx 7-1:0.132: Freeing device
[ 128.951414][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 128.959754][ T9] em28xx 4-1:0.132: analog set to bulk mode.
[ 129.002553][ T9] usb 4-1: USB disconnect, device number 2
[ 129.026131][ T9] em28xx 4-1:0.132: Disconnecting em28xx
[ 129.173672][ T5799] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 129.184127][ T5799] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 129.191955][ T5799] em28xx 3-1:0.132: No AC97 audio processor
[ 129.200234][ T5799] usb 3-1: Decoder not found
[ 129.205884][ T5799] em28xx 3-1:0.132: failed to create media graph
[ 129.212700][ T5799] em28xx 3-1:0.132: V4L2 device video0 deregistered
[ 129.221885][ T5799] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 129.231739][ T5790] em28xx 8-1:0.132: Registering V4L2 extension
[ 129.281926][ T120] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 129.311216][ T3007] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 129.406249][ T5790] em28xx 8-1:0.132: Config register raw data: 0xffffffed
[ 129.413403][ T5790] em28xx 8-1:0.132: AC97 chip type couldn't be determined
[ 129.420630][ T5790] em28xx 8-1:0.132: No AC97 audio processor
[ 129.428596][ T5790] usb 8-1: Decoder not found
[ 129.433817][ T5790] em28xx 8-1:0.132: failed to create media graph
[ 129.440391][ T5790] em28xx 8-1:0.132: V4L2 device video0 deregistered
[ 129.451441][ T120] usb 7-1: Using ep0 maxpacket: 32
[ 129.457306][ T5790] em28xx 8-1:0.132: Remote control support is not available for this card.
[ 129.466174][ T5793] em28xx 4-1:0.132: Registering V4L2 extension
[ 129.473128][ T120] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 129.481640][ T3007] usb 5-1: Using ep0 maxpacket: 32
[ 129.485883][ T120] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 129.496402][ T3007] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 129.496635][ T120] usb 7-1: config 0 has no interface number 0
[ 129.512175][ T120] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 129.524303][ T3007] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 129.526945][ T120] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 129.535929][ T3007] usb 5-1: config 0 has no interface number 0
[ 129.547004][ T3007] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 129.559444][ T3007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 129.561557][ T120] usb 7-1: Product: syz
[ 129.570187][ T3007] usb 5-1: Product: syz
[ 129.576264][ T3007] usb 5-1: Manufacturer: syz
[ 129.581409][ T3007] usb 5-1: SerialNumber: syz
[ 129.582712][ T120] usb 7-1: Manufacturer: syz
[ 129.592196][ T120] usb 7-1: SerialNumber: syz
[ 129.595092][ T3007] usb 5-1: config 0 descriptor??
[ 129.612865][ T3007] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 129.624878][ T3007] em28xx 5-1:0.132: Video interface 132 found:
[ 129.629626][ T120] usb 7-1: config 0 descriptor??
[ 129.646399][ T120] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 129.656375][ T120] em28xx 7-1:0.132: Video interface 132 found:
[ 129.749059][ T5793] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[ 129.756527][ T5793] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[ 129.763821][ T5793] em28xx 4-1:0.132: No AC97 audio processor
[ 129.773035][ T5793] usb 4-1: Decoder not found
[ 129.777746][ T5793] em28xx 4-1:0.132: failed to create media graph
[ 129.784257][ T5793] em28xx 4-1:0.132: V4L2 device video0 deregistered
[ 129.794104][ T5793] em28xx 4-1:0.132: Remote control support is not available for this card.
[ 129.802923][ T23] em28xx 3-1:0.132: Closing input extension
[ 129.810612][ T3049] em28xx 8-1:0.132: Closing input extension
[ 129.817387][ T9] em28xx 4-1:0.132: Closing input extension
[ 129.828688][ T23] em28xx 3-1:0.132: Freeing device
[ 129.838961][ T3049] em28xx 8-1:0.132: Freeing device
[ 129.857457][ T9] em28xx 4-1:0.132: Freeing device
[ 129.875614][ T3007] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 129.901480][ T120] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 129.943081][ T3007] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 129.952228][ T3007] em28xx 5-1:0.132: board has no eeprom
[ 129.973498][ T120] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 129.982381][ T120] em28xx 7-1:0.132: board has no eeprom
[ 130.020754][ T3007] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 130.029098][ T3007] em28xx 5-1:0.132: analog set to bulk mode.
[ 130.040616][ T5799] em28xx 5-1:0.132: Registering V4L2 extension
[ 130.041316][ T120] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 130.059388][ T3007] usb 5-1: USB disconnect, device number 3
[ 130.067486][ T3007] em28xx 5-1:0.132: Disconnecting em28xx
[ 130.075479][ T120] em28xx 7-1:0.132: analog set to bulk mode.
[ 130.113130][ T120] usb 7-1: USB disconnect, device number 3
[ 130.135899][ T120] em28xx 7-1:0.132: Disconnecting em28xx
[ 130.171780][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 130.202037][ T3049] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 130.209700][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 130.233676][ T5799] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 130.240882][ T5799] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 130.248314][ T5799] em28xx 5-1:0.132: No AC97 audio processor
[ 130.258756][ T5799] usb 5-1: Decoder not found
[ 130.266841][ T5799] em28xx 5-1:0.132: failed to create media graph
[ 130.273492][ T5799] em28xx 5-1:0.132: V4L2 device video0 deregistered
[ 130.282387][ T5799] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 130.291751][ T3007] em28xx 5-1:0.132: Closing input extension
[ 130.299645][ T5793] em28xx 7-1:0.132: Registering V4L2 extension
[ 130.307842][ T3007] em28xx 5-1:0.132: Freeing device
[ 130.341561][ T23] usb 3-1: Using ep0 maxpacket: 32
[ 130.347769][ T23] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 130.373191][ T9] usb 4-1: Using ep0 maxpacket: 32
[ 130.380711][ T23] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 130.384489][ T3049] usb 8-1: Using ep0 maxpacket: 32
[ 130.390350][ T23] usb 3-1: config 0 has no interface number 0
[ 130.411833][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 130.428606][ T23] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 130.433447][ T3049] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 130.459443][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 130.475429][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 130.484062][ T23] usb 3-1: Product: syz
[ 130.489002][ T23] usb 3-1: Manufacturer: syz
[ 130.496428][ T9] usb 4-1: config 0 has no interface number 0
[ 130.503158][ T23] usb 3-1: SerialNumber: syz
[ 130.512788][ T3049] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[ 130.529764][ T23] usb 3-1: config 0 descriptor??
[ 130.533680][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 130.549423][ T3049] usb 8-1: config 0 has no interface number 0
[ 130.562039][ T3049] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 130.562069][ T23] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 130.595896][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 130.604991][ T9] usb 4-1: Product: syz
[ 130.607773][ T23] em28xx 3-1:0.132: Video interface 132 found:
[ 130.610179][ T9] usb 4-1: Manufacturer: syz
[ 130.622578][ T3049] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 130.630761][ T3049] usb 8-1: Product: syz
[ 130.635810][ T3049] usb 8-1: Manufacturer: syz
[ 130.641494][ T3049] usb 8-1: SerialNumber: syz
[ 130.646192][ T9] usb 4-1: SerialNumber: syz
[ 130.657228][ T3049] usb 8-1: config 0 descriptor??
[ 130.668165][ T9] usb 4-1: config 0 descriptor??
[ 130.683470][ T3049] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 130.702201][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 130.721116][ T3049] em28xx 8-1:0.132: Video interface 132 found:
[ 130.730777][ T9] em28xx 4-1:0.132: Video interface 132 found:
[ 130.760744][ T3007] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 130.768800][ T5793] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 130.777014][ T5793] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 130.784504][ T5793] em28xx 7-1:0.132: No AC97 audio processor
[ 130.796968][ T5793] usb 7-1: Decoder not found
[ 130.801728][ T5793] em28xx 7-1:0.132: failed to create media graph
[ 130.808162][ T5793] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 130.817242][ T5793] em28xx 7-1:0.132: Remote control support is not available for this card.
[ 130.822040][ T23] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 130.826362][ T120] em28xx 7-1:0.132: Closing input extension
[ 130.841263][ T120] em28xx 7-1:0.132: Freeing device
[ 130.893638][ T23] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 130.902708][ T23] em28xx 3-1:0.132: board has no eeprom
[ 130.914323][ T3007] usb 5-1: Using ep0 maxpacket: 32
[ 130.920714][ T3007] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 130.931367][ T3007] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 130.936379][ T3049] em28xx 8-1:0.132: unknown em28xx chip ID (0)
[ 130.939678][ T3007] usb 5-1: config 0 has no interface number 0
[ 130.939734][ T3007] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 130.947067][ T3007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 130.955616][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[ 130.962854][ T23] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 130.962888][ T23] em28xx 3-1:0.132: analog set to bulk mode.
[ 130.964373][ T5799] em28xx 3-1:0.132: Registering V4L2 extension
[ 131.004565][ T3007] usb 5-1: Product: syz
[ 131.009827][ T23] usb 3-1: USB disconnect, device number 3
[ 131.016131][ T3007] usb 5-1: Manufacturer: syz
[ 131.022893][ T3007] usb 5-1: SerialNumber: syz
[ 131.028146][ T23] em28xx 3-1:0.132: Disconnecting em28xx
[ 131.041820][ T3007] usb 5-1: config 0 descriptor??
[ 131.055402][ T3049] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 131.056364][ T3007] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 131.067257][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 131.075123][ T3007] em28xx 5-1:0.132: Video interface 132 found:
[ 131.091980][ T3049] em28xx 8-1:0.132: board has no eeprom
[ 131.097806][ T9] em28xx 4-1:0.132: board has no eeprom
[ 131.160730][ T3049] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 131.168696][ T3049] em28xx 8-1:0.132: analog set to bulk mode.
[ 131.175077][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 131.187448][ T120] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 131.196696][ T9] em28xx 4-1:0.132: analog set to bulk mode.
[ 131.211893][ T3049] usb 8-1: USB disconnect, device number 3
[ 131.228727][ T3049] em28xx 8-1:0.132: Disconnecting em28xx
[ 131.238640][ T9] usb 4-1: USB disconnect, device number 3
[ 131.254064][ T9] em28xx 4-1:0.132: Disconnecting em28xx
[ 131.310335][ T5799] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 131.319422][ T5799] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 131.329522][ T5799] em28xx 3-1:0.132: No AC97 audio processor
[ 131.335703][ T3007] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 131.344008][ T5799] usb 3-1: Decoder not found
[ 131.348743][ T5799] em28xx 3-1:0.132: failed to create media graph
[ 131.350855][ T120] usb 7-1: Using ep0 maxpacket: 32
[ 131.356579][ T5799] em28xx 3-1:0.132: V4L2 device video0 deregistered
[ 131.363486][ T120] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 131.377428][ T5799] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 131.377937][ T120] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 131.386593][ T23] em28xx 3-1:0.132: Closing input extension
[ 131.397299][ T120] usb 7-1: config 0 has no interface number 0
[ 131.407306][ T120] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 131.411786][ T3007] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 131.428017][ T5793] em28xx 8-1:0.132: Registering V4L2 extension
[ 131.437448][ T23] em28xx 3-1:0.132: Freeing device
[ 131.439787][ T120] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 131.452961][ T3007] em28xx 5-1:0.132: board has no eeprom
[ 131.464783][ T120] usb 7-1: Product: syz
[ 131.472655][ T120] usb 7-1: Manufacturer: syz
[ 131.496557][ T120] usb 7-1: SerialNumber: syz
[ 131.525101][ T120] usb 7-1: config 0 descriptor??
[ 131.543384][ T3007] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 131.565398][ T3007] em28xx 5-1:0.132: analog set to bulk mode.
[ 131.585240][ T120] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 131.605333][ T3007] usb 5-1: USB disconnect, device number 4
[ 131.618207][ T120] em28xx 7-1:0.132: Video interface 132 found:
[ 131.625645][ T3007] em28xx 5-1:0.132: Disconnecting em28xx
[ 131.737021][ T5793] em28xx 8-1:0.132: Config register raw data: 0xffffffed
[ 131.748653][ T5793] em28xx 8-1:0.132: AC97 chip type couldn't be determined
[ 131.756453][ T5793] em28xx 8-1:0.132: No AC97 audio processor
[ 131.764598][ T5793] usb 8-1: Decoder not found
[ 131.770838][ T5793] em28xx 8-1:0.132: failed to create media graph
[ 131.777258][ T5793] em28xx 8-1:0.132: V4L2 device video0 deregistered
2026/08/25 02:52:20 executed programs: 25
[ 131.786213][ T5793] em28xx 8-1:0.132: Remote control support is not available for this card.
[ 131.795945][ T5790] em28xx 4-1:0.132: Registering V4L2 extension
[ 131.802443][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 131.823241][ T120] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 131.883117][ T120] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 131.898125][ T120] em28xx 7-1:0.132: board has no eeprom
[ 131.932742][ T5790] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[ 131.939822][ T5790] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[ 131.947363][ T5790] em28xx 4-1:0.132: No AC97 audio processor
[ 131.958762][ T5790] usb 4-1: Decoder not found
[ 131.963508][ T5790] em28xx 4-1:0.132: failed to create media graph
[ 131.969907][ T120] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 131.977808][ T120] em28xx 7-1:0.132: analog set to bulk mode.
[ 131.980897][ T23] usb 3-1: Using ep0 maxpacket: 32
[ 131.985589][ T5790] em28xx 4-1:0.132: V4L2 device video0 deregistered
[ 131.992449][ T23] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 132.005568][ T5790] em28xx 4-1:0.132: Remote control support is not available for this card.
[ 132.007298][ T23] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 132.023655][ T120] usb 7-1: USB disconnect, device number 4
[ 132.029639][ T9] em28xx 4-1:0.132: Closing input extension
[ 132.037549][ T120] em28xx 7-1:0.132: Disconnecting em28xx
[ 132.041207][ T23] usb 3-1: config 0 has no interface number 0
[ 132.049586][ T5799] em28xx 5-1:0.132: Registering V4L2 extension
[ 132.059523][ T23] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 132.062509][ T9] em28xx 4-1:0.132: Freeing device
[ 132.079371][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 132.090042][ T23] usb 3-1: Product: syz
[ 132.098321][ T23] usb 3-1: Manufacturer: syz
[ 132.108554][ T23] usb 3-1: SerialNumber: syz
[ 132.124608][ T23] usb 3-1: config 0 descriptor??
[ 132.137709][ T23] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 132.154508][ T23] em28xx 3-1:0.132: Video interface 132 found:
[ 132.243576][ T5799] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 132.250735][ T5799] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 132.258015][ T5799] em28xx 5-1:0.132: No AC97 audio processor
[ 132.266478][ T5799] usb 5-1: Decoder not found
[ 132.271234][ T5799] em28xx 5-1:0.132: failed to create media graph
[ 132.277649][ T5799] em28xx 5-1:0.132: V4L2 device video0 deregistered
[ 132.290668][ T5799] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 132.299535][ T3007] em28xx 5-1:0.132: Closing input extension
[ 132.307092][ T3049] em28xx 8-1:0.132: Closing input extension
[ 132.315397][ T5793] em28xx 7-1:0.132: Registering V4L2 extension
[ 132.324210][ T3007] em28xx 5-1:0.132: Freeing device
[ 132.355446][ T3049] em28xx 8-1:0.132: Freeing device
[ 132.392501][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 132.400993][ T23] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 132.473456][ T23] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 132.496002][ T23] em28xx 3-1:0.132: board has no eeprom
[ 132.526242][ T5793] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 132.535338][ T5793] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 132.544497][ T5793] em28xx 7-1:0.132: No AC97 audio processor
[ 132.558279][ T5793] usb 7-1: Decoder not found
[ 132.563346][ T5793] em28xx 7-1:0.132: failed to create media graph
[ 132.569999][ T5793] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 132.576939][ T9] usb 4-1: Using ep0 maxpacket: 32
[ 132.580831][ T23] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 132.590436][ T5793] em28xx 7-1:0.132: Remote control support is not available for this card.
[ 132.599462][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 132.600334][ T23] em28xx 3-1:0.132: analog set to bulk mode.
[ 132.609139][ T120] em28xx 7-1:0.132: Closing input extension
[ 132.617073][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 132.633771][ T120] em28xx 7-1:0.132: Freeing device
[ 132.639279][ T9] usb 4-1: config 0 has no interface number 0
[ 132.650863][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 132.661890][ T5799] em28xx 3-1:0.132: Registering V4L2 extension
[ 132.672042][ T3049] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 132.686159][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 132.695639][ T9] usb 4-1: Product: syz
[ 132.700412][ T9] usb 4-1: Manufacturer: syz
[ 132.702665][ T3007] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 132.709106][ T9] usb 4-1: SerialNumber: syz
[ 132.724619][ T23] usb 3-1: USB disconnect, device number 4
[ 132.750034][ T9] usb 4-1: config 0 descriptor??
[ 132.758347][ T23] em28xx 3-1:0.132: Disconnecting em28xx
[ 132.787599][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 132.814423][ T9] em28xx 4-1:0.132: Video interface 132 found:
[ 132.832255][ T3049] usb 8-1: Using ep0 maxpacket: 32
[ 132.846045][ T3049] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 132.870354][ T3049] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[ 132.888212][ T3049] usb 8-1: config 0 has no interface number 0
[ 132.897061][ T3007] usb 5-1: Using ep0 maxpacket: 32
[ 132.908934][ T3049] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 132.915330][ T3007] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 132.956245][ T3007] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 132.966007][ T3049] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 132.975768][ T5799] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 132.983524][ T120] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 132.986848][ T3007] usb 5-1: config 0 has no interface number 0
[ 133.000178][ T3049] usb 8-1: Product: syz
[ 133.004970][ T5799] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 133.016258][ T3007] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 133.018712][ T3049] usb 8-1: Manufacturer: syz
[ 133.026498][ T5799] em28xx 3-1:0.132: No AC97 audio processor
[ 133.034281][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[ 133.045557][ T5799] usb 3-1: Decoder not found
[ 133.051461][ T5799] em28xx 3-1:0.132: failed to create media graph
[ 133.053824][ T3049] usb 8-1: SerialNumber: syz
[ 133.058583][ T5799] em28xx 3-1:0.132: V4L2 device video0 deregistered
[ 133.069266][ T3007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 133.077645][ T3007] usb 5-1: Product: syz
[ 133.083179][ T3007] usb 5-1: Manufacturer: syz
[ 133.084856][ T3049] usb 8-1: config 0 descriptor??
[ 133.087840][ T3007] usb 5-1: SerialNumber: syz
[ 133.098582][ T3007] usb 5-1: config 0 descriptor??
[ 133.110820][ T3049] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 133.114263][ T5799] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 133.121298][ T5862] ==================================================================
[ 133.137339][ T3007] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 133.137346][ T5862] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490
[ 133.147327][ T3007] em28xx 5-1:0.132: Video interface 132 found:
[ 133.154312][ T5862] Read of size 4 at addr ffff888120e88858 by task v4l_id/5862
[ 133.154356][ T5862]
[ 133.154405][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(lazy)
[ 133.154523][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 133.154599][ T5862] Call Trace:
[ 133.154630][ T5862]
[ 133.154662][ T5862] dump_stack_lvl+0x100/0x190
[ 133.154784][ T5862] print_report+0x13d/0x4b0
[ 133.154909][ T5862] ? __virt_addr_valid+0x239/0x430
[ 133.155023][ T5862] ? v4l2_open+0x351/0x490
[ 133.155145][ T5862] kasan_report+0xdf/0x1c0
[ 133.155259][ T5862] ? v4l2_open+0x351/0x490
[ 133.155387][ T5862] v4l2_open+0x351/0x490
[ 133.155516][ T5862] ? __pfx_v4l2_open+0x10/0x10
[ 133.155641][ T5862] chrdev_open+0x234/0x6a0
[ 133.155715][ T5862] ? __pfx_chrdev_open+0x10/0x10
[ 133.155782][ T5862] ? path_get+0x61/0x80
[ 133.155905][ T5862] do_dentry_open+0x68b/0x14b0
[ 133.156042][ T5862] ? __pfx_chrdev_open+0x10/0x10
[ 133.156136][ T5862] vfs_open+0x82/0x3f0
[ 133.156230][ T5862] path_openat+0x2873/0x4280
[ 133.156351][ T5862] ? __pfx_path_openat+0x10/0x10
[ 133.156438][ T5862] do_file_open+0x20e/0x430
[ 133.156515][ T5862] ? __pfx_do_file_open+0x10/0x10
[ 133.156626][ T5862] ? alloc_fd+0x471/0x7a0
[ 133.156708][ T5862] ? do_getname+0x191/0x390
[ 133.156811][ T5862] do_sys_openat2+0x10f/0x1e0
[ 133.156906][ T5862] ? __pfx_do_sys_openat2+0x10/0x10
[ 133.157019][ T5862] __x64_sys_openat+0x12d/0x210
[ 133.157115][ T5862] ? __pfx___x64_sys_openat+0x10/0x10
[ 133.157237][ T5862] do_syscall_64+0x10b/0x7f0
[ 133.157382][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.157469][ T5862] RIP: 0033:0x7f641989d407
[ 133.157551][ T5862] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 133.157633][ T5862] RSP: 002b:00007ffd356fdef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 133.157708][ T5862] RAX: ffffffffffffffda RBX: 00007f64197af880 RCX: 00007f641989d407
[ 133.157760][ T5862] RDX: 0000000000000000 RSI: 00007ffd356fff24 RDI: ffffffffffffff9c
[ 133.157820][ T5862] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 133.157864][ T5862] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 133.157925][ T5862] R13: 00007ffd356fe140 R14: 00007f641a033000 R15: 0000564a07fa04d8
[ 133.158013][ T5862]
[ 133.158036][ T5862]
[ 133.165299][ T23] em28xx 3-1:0.132: Closing input extension
[ 133.168001][ T5862] Allocated by task 5799:
[ 133.168031][ T5862] kasan_save_stack+0x30/0x50
[ 133.202759][ T23] em28xx 3-1:0.132: Freeing device
[ 133.204843][ T5862] kasan_save_track+0x14/0x30
[ 133.420705][ T5862] __kasan_kmalloc+0x8f/0xa0
[ 133.425384][ T5862] __kmalloc_cache_noprof+0x35e/0x670
[ 133.431167][ T5862] em28xx_v4l2_init.cold+0x94/0x3a40
[ 133.436512][ T5862] em28xx_init_extension+0x13a/0x200
[ 133.442188][ T5862] request_module_async+0x61/0x80
[ 133.447280][ T5862] process_one_work+0xa23/0x1940
[ 133.452289][ T5862] worker_thread+0x5ef/0xe50
[ 133.456941][ T5862] kthread+0x370/0x450
[ 133.461061][ T5862] ret_from_fork+0x69a/0xc80
[ 133.465699][ T5862] ret_from_fork_asm+0x1a/0x30
[ 133.470509][ T5862]
[ 133.472857][ T5862] Freed by task 5799:
[ 133.476853][ T5862] kasan_save_stack+0x30/0x50
[ 133.481592][ T5862] kasan_save_track+0x14/0x30
[ 133.486319][ T5862] kasan_save_free_info+0x3b/0x70
[ 133.491403][ T5862] __kasan_slab_free+0x43/0x70
[ 133.496325][ T5862] kfree+0x20c/0x650
[ 133.500262][ T5862] kref_put.isra.0+0x53/0x75
[ 133.504883][ T5862] em28xx_v4l2_init.cold+0x280/0x3a40
[ 133.510284][ T5862] em28xx_init_extension+0x13a/0x200
[ 133.515620][ T5862] request_module_async+0x61/0x80
[ 133.520690][ T5862] process_one_work+0xa23/0x1940
[ 133.525676][ T5862] worker_thread+0x5ef/0xe50
[ 133.530304][ T5862] kthread+0x370/0x450
[ 133.534412][ T5862] ret_from_fork+0x69a/0xc80
[ 133.539050][ T5862] ret_from_fork_asm+0x1a/0x30
[ 133.543851][ T5862]
[ 133.546194][ T5862] The buggy address belongs to the object at ffff888120e88000
[ 133.546194][ T5862] which belongs to the cache kmalloc-8k of size 8192
[ 133.560273][ T5862] The buggy address is located 2136 bytes inside of
[ 133.560273][ T5862] freed 8192-byte region [ffff888120e88000, ffff888120e8a000)
[ 133.574278][ T5862]
[ 133.576625][ T5862] The buggy address belongs to the physical page:
[ 133.583072][ T5862] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120e88
[ 133.591952][ T5862] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 133.600479][ T5862] flags: 0x200000000000040(head|node=0|zone=2)
[ 133.606669][ T5862] page_type: f5(slab)
[ 133.610700][ T5862] raw: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122
[ 133.619322][ T5862] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 133.627951][ T5862] head: 0200000000000040 ffff888100042280 dead000000000100 dead000000000122
[ 133.636647][ T5862] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 133.645349][ T5862] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 133.654048][ T5862] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 133.662743][ T5862] page dumped because: kasan: bad access detected
[ 133.669187][ T5862] page_owner tracks the page as allocated
[ 133.674916][ T5862] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2896, tgid 2896 (dhcpcd), ts 26564982838, free_ts 26153766756
[ 133.695709][ T5862] post_alloc_hook+0xfd/0x120
[ 133.700434][ T5862] get_page_from_freelist+0xf25/0x3400
[ 133.705933][ T5862] __alloc_frozen_pages_noprof+0x28f/0x2b90
[ 133.711872][ T5862] new_slab+0xa2/0x670
[ 133.715984][ T5862] refill_objects+0xe3/0x410
[ 133.720623][ T5862] __pcs_replace_empty_main+0x376/0x680
[ 133.726209][ T5862] __kvmalloc_node_noprof+0x732/0x910
[ 133.731629][ T5862] pfifo_fast_init+0x177/0x3b0
[ 133.736430][ T5862] qdisc_create_dflt+0x124/0x490
[ 133.741414][ T5862] mq_init_common+0x1e5/0x490
[ 133.746134][ T5862] mq_init+0x26/0x60
[ 133.750078][ T5862] qdisc_create_dflt+0x124/0x490
[ 133.755060][ T5862] dev_activate+0xaa3/0xcd0
[ 133.759606][ T5862] __dev_open+0x486/0x7a0
[ 133.763977][ T5862] __dev_change_flags+0x596/0x7e0
[ 133.769040][ T5862] netif_change_flags+0x8d/0x160
[ 133.774009][ T5862] page last free pid 2896 tgid 2896 stack trace:
[ 133.780356][ T5862] __free_pages_ok+0x6b5/0xf00
[ 133.785161][ T5862] proc_sys_call_handler+0x4af/0x5a0
[ 133.790487][ T5862] vfs_read+0x82e/0xb40
[ 133.794688][ T5862] ksys_read+0x12a/0x250
[ 133.798978][ T5862] do_syscall_64+0x10b/0x7f0
[ 133.803616][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.809543][ T5862]
[ 133.811888][ T5862] Memory state around the buggy address:
[ 133.817539][ T5862] ffff888120e88700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 133.825641][ T5862] ffff888120e88780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 133.833736][ T5862] >ffff888120e88800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 133.841830][ T5862] ^
[ 133.848803][ T5862] ffff888120e88880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 133.856923][ T5862] ffff888120e88900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 133.865028][ T5862] ==================================================================
[ 133.873997][ T5862] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 133.881248][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(lazy)
[ 133.890310][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 133.900395][ T5862] Call Trace:
[ 133.903699][ T5862]
[ 133.906660][ T5862] dump_stack_lvl+0x100/0x190
[ 133.911389][ T5862] vpanic+0x552/0x970
[ 133.915410][ T5862] ? __pfx_vpanic+0x10/0x10
[ 133.919958][ T5862] ? v4l2_open+0x351/0x490
[ 133.924420][ T5862] panic+0xd1/0xe0
[ 133.928179][ T5862] ? __pfx_panic+0x10/0x10
[ 133.932659][ T5862] ? v4l2_open+0x351/0x490
[ 133.937142][ T5862] ? preempt_schedule_common+0x42/0xc0
[ 133.942668][ T5862] ? check_panic_on_warn+0x1f/0x90
[ 133.947838][ T5862] check_panic_on_warn.cold+0x19/0x34
[ 133.953269][ T5862] end_report.part.0+0x3a/0x90
[ 133.958087][ T5862] kasan_report.cold+0xe/0x18
[ 133.962820][ T5862] ? v4l2_open+0x351/0x490
[ 133.967302][ T5862] v4l2_open+0x351/0x490
[ 133.971597][ T5862] ? __pfx_v4l2_open+0x10/0x10
[ 133.976417][ T5862] chrdev_open+0x234/0x6a0
[ 133.980989][ T5862] ? __pfx_chrdev_open+0x10/0x10
[ 133.985969][ T5862] ? path_get+0x61/0x80
[ 133.990179][ T5862] do_dentry_open+0x68b/0x14b0
[ 133.994999][ T5862] ? __pfx_chrdev_open+0x10/0x10
[ 133.999988][ T5862] vfs_open+0x82/0x3f0
[ 134.004109][ T5862] path_openat+0x2873/0x4280
[ 134.008751][ T5862] ? __pfx_path_openat+0x10/0x10
[ 134.013741][ T5862] do_file_open+0x20e/0x430
[ 134.018317][ T5862] ? __pfx_do_file_open+0x10/0x10
[ 134.023396][ T5862] ? alloc_fd+0x471/0x7a0
[ 134.027771][ T5862] ? do_getname+0x191/0x390
[ 134.032316][ T5862] do_sys_openat2+0x10f/0x1e0
[ 134.037048][ T5862] ? __pfx_do_sys_openat2+0x10/0x10
[ 134.042301][ T5862] __x64_sys_openat+0x12d/0x210
[ 134.047190][ T5862] ? __pfx___x64_sys_openat+0x10/0x10
[ 134.052610][ T5862] do_syscall_64+0x10b/0x7f0
[ 134.057256][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.063188][ T5862] RIP: 0033:0x7f641989d407
[ 134.067636][ T5862] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 134.087280][ T5862] RSP: 002b:00007ffd356fdef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 134.095737][ T5862] RAX: ffffffffffffffda RBX: 00007f64197af880 RCX: 00007f641989d407
[ 134.103742][ T5862] RDX: 0000000000000000 RSI: 00007ffd356fff24 RDI: ffffffffffffff9c
[ 134.111744][ T5862] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 134.119755][ T5862] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 134.127760][ T5862] R13: 00007ffd356fe140 R14: 00007f641a033000 R15: 0000564a07fa04d8
[ 134.135776][ T5862]
[ 134.139402][ T5862] Kernel Offset: disabled
[ 134.143754][ T5862] Rebooting in 86400 seconds..