Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts.
2026/02/10 03:39:33 parsed 1 programs
[ 46.394559][ T29] audit: type=1400 audit(1770694772.989:62): avc: denied { node_bind } for pid=2968 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 46.415760][ T29] audit: type=1400 audit(1770694772.989:63): avc: denied { module_request } for pid=2968 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 48.604830][ T29] audit: type=1400 audit(1770694775.199:64): avc: denied { mounton } for pid=2978 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 48.628778][ T29] audit: type=1400 audit(1770694775.219:65): avc: denied { mount } for pid=2978 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 48.631822][ T2978] cgroup: Unknown subsys name 'net'
[ 48.658150][ T29] audit: type=1400 audit(1770694775.259:66): avc: denied { unmount } for pid=2978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 48.842588][ T2978] cgroup: Unknown subsys name 'cpuset'
[ 48.851080][ T2978] cgroup: Unknown subsys name 'rlimit'
[ 48.991679][ T29] audit: type=1400 audit(1770694775.589:67): avc: denied { setattr } for pid=2978 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 49.015232][ T29] audit: type=1400 audit(1770694775.589:68): avc: denied { create } for pid=2978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 49.036674][ T29] audit: type=1400 audit(1770694775.589:69): avc: denied { write } for pid=2978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 49.057392][ T29] audit: type=1400 audit(1770694775.589:70): avc: denied { read } for pid=2978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 49.078396][ T29] audit: type=1400 audit(1770694775.629:71): avc: denied { sys_module } for pid=2978 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 49.127846][ T2982] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 49.180081][ T2978] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 51.370462][ T2989] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 51.710444][ T29] kauditd_printk_skb: 27 callbacks suppressed
[ 51.710468][ T29] audit: type=1401 audit(1770694778.299:99): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 51.818275][ T29] audit: type=1400 audit(1770694778.409:100): avc: denied { create } for pid=3020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 53.219093][ T29] audit: type=1400 audit(1770694779.809:101): avc: denied { create } for pid=3063 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
2026/02/10 03:39:52 executed programs: 0
2026/02/10 03:40:41 executed programs: 10
[ 114.979327][ T29] audit: type=1400 audit(1770694841.569:102): avc: denied { read write } for pid=5753 comm="syz.6.20" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 115.002814][ T29] audit: type=1400 audit(1770694841.569:103): avc: denied { open } for pid=5753 comm="syz.6.20" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 115.026052][ T29] audit: type=1400 audit(1770694841.569:104): avc: denied { ioctl } for pid=5753 comm="syz.6.20" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 115.210641][ T778] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 115.350215][ T2659] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 115.392255][ T778] usb 7-1: Using ep0 maxpacket: 32
[ 115.402560][ T778] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 115.410986][ T778] usb 7-1: config 0 has no interface number 0
[ 115.421756][ T778] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 115.434337][ T778] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 115.443914][ T778] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 115.452263][ T778] usb 7-1: Product: syz
[ 115.456423][ T778] usb 7-1: Manufacturer: syz
[ 115.461337][ T778] usb 7-1: SerialNumber: syz
[ 115.469538][ T778] usb 7-1: config 0 descriptor??
[ 115.479851][ T778] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 115.489698][ T778] em28xx 7-1:0.132: Video interface 132 found:
[ 115.500840][ T2659] usb 2-1: Using ep0 maxpacket: 32
[ 115.507778][ T2659] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 115.516313][ T2659] usb 2-1: config 0 has no interface number 0
[ 115.522618][ T2659] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 115.534820][ T2659] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 115.540205][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 115.543951][ T2659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 115.559478][ T2659] usb 2-1: Product: syz
[ 115.563740][ T2659] usb 2-1: Manufacturer: syz
[ 115.568406][ T2659] usb 2-1: SerialNumber: syz
[ 115.577325][ T2659] usb 2-1: config 0 descriptor??
[ 115.587820][ T2659] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 115.597717][ T2659] em28xx 2-1:0.132: Video interface 132 found:
[ 115.630219][ T38] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 115.638145][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 115.700199][ T9] usb 1-1: Using ep0 maxpacket: 32
[ 115.707499][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 115.716009][ T9] usb 1-1: config 0 has no interface number 0
[ 115.722458][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 115.733040][ T778] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 115.742264][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 115.751501][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 115.759512][ T9] usb 1-1: Product: syz
[ 115.763890][ T9] usb 1-1: Manufacturer: syz
[ 115.768495][ T9] usb 1-1: SerialNumber: syz
[ 115.776075][ T9] usb 1-1: config 0 descriptor??
[ 115.788304][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 115.798250][ T9] em28xx 1-1:0.132: Video interface 132 found:
[ 115.801161][ T38] usb 5-1: Using ep0 maxpacket: 32
[ 115.807564][ T778] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 115.816079][ T23] usb 6-1: Using ep0 maxpacket: 32
[ 115.818516][ T778] em28xx 7-1:0.132: board has no eeprom
[ 115.826020][ T23] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 115.837709][ T23] usb 6-1: config 0 has no interface number 0
[ 115.845009][ T38] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 115.853573][ T38] usb 5-1: config 0 has no interface number 0
[ 115.859930][ T38] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 115.870129][ T2659] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 115.876505][ T23] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 115.888893][ T38] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 115.890214][ T778] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 115.897995][ T38] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 115.898026][ T38] usb 5-1: Product: syz
[ 115.905894][ T778] em28xx 7-1:0.132: analog set to bulk mode.
[ 115.913892][ T38] usb 5-1: Manufacturer: syz
[ 115.918609][ T10] em28xx 7-1:0.132: Registering V4L2 extension
[ 115.924042][ T38] usb 5-1: SerialNumber: syz
[ 115.926949][ T23] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 115.942174][ T778] usb 7-1: USB disconnect, device number 2
[ 115.948753][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 115.958010][ T778] em28xx 7-1:0.132: Disconnecting em28xx
[ 115.962569][ T23] usb 6-1: Product: syz
[ 115.962595][ T23] usb 6-1: Manufacturer: syz
[ 115.962616][ T23] usb 6-1: SerialNumber: syz
[ 115.965119][ T2659] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 115.990744][ T2659] em28xx 2-1:0.132: board has no eeprom
[ 115.997447][ T38] usb 5-1: config 0 descriptor??
[ 116.013092][ T38] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 116.023071][ T38] em28xx 5-1:0.132: Video interface 132 found:
[ 116.031089][ T23] usb 6-1: config 0 descriptor??
[ 116.050568][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[ 116.052621][ T23] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 116.067216][ T23] em28xx 6-1:0.132: Video interface 132 found:
[ 116.100239][ T2659] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 116.108143][ T2659] em28xx 2-1:0.132: analog set to bulk mode.
[ 116.122624][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 116.123287][ T2659] usb 2-1: USB disconnect, device number 2
[ 116.131436][ T9] em28xx 1-1:0.132: board has no eeprom
[ 116.139533][ T2659] em28xx 2-1:0.132: Disconnecting em28xx
[ 116.154287][ T10] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 116.161579][ T10] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 116.168741][ T10] em28xx 7-1:0.132: No AC97 audio processor
[ 116.180201][ T10] usb 7-1: Decoder not found
[ 116.184879][ T10] em28xx 7-1:0.132: failed to create media graph
[ 116.195064][ T10] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 116.204521][ T10] em28xx 7-1:0.132: Remote control support is not available for this card.
[ 116.213639][ T5775] em28xx 2-1:0.132: Registering V4L2 extension
[ 116.215094][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 116.227792][ T9] em28xx 1-1:0.132: analog set to bulk mode.
[ 116.265312][ T9] usb 1-1: USB disconnect, device number 2
[ 116.281303][ T38] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 116.293897][ T9] em28xx 1-1:0.132: Disconnecting em28xx
[ 116.300668][ T23] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[ 116.352719][ T38] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 116.362333][ T38] em28xx 5-1:0.132: board has no eeprom
[ 116.370056][ T23] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 116.378899][ T23] em28xx 6-1:0.132: board has no eeprom
[ 116.398155][ T5775] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 116.405361][ T5775] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 116.412580][ T5775] em28xx 2-1:0.132: No AC97 audio processor
[ 116.420274][ T5775] usb 2-1: Decoder not found
[ 116.424903][ T5775] em28xx 2-1:0.132: failed to create media graph
[ 116.431319][ T5775] em28xx 2-1:0.132: V4L2 device video0 deregistered
[ 116.439142][ T5775] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 116.447868][ T5772] em28xx 1-1:0.132: Registering V4L2 extension
[ 116.447870][ T38] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 116.447899][ T38] em28xx 5-1:0.132: analog set to bulk mode.
[ 116.468623][ T23] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 116.476559][ T23] em28xx 6-1:0.132: analog set to bulk mode.
[ 116.506595][ T23] usb 6-1: USB disconnect, device number 2
[ 116.513136][ T38] usb 5-1: USB disconnect, device number 2
[ 116.532188][ T38] em28xx 5-1:0.132: Disconnecting em28xx
[ 116.541353][ T23] em28xx 6-1:0.132: Disconnecting em28xx
[ 116.616564][ T5772] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[ 116.623719][ T5772] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[ 116.631383][ T5772] em28xx 1-1:0.132: No AC97 audio processor
[ 116.641450][ T5772] usb 1-1: Decoder not found
[ 116.646074][ T5772] em28xx 1-1:0.132: failed to create media graph
[ 116.652468][ T5772] em28xx 1-1:0.132: V4L2 device video0 deregistered
[ 116.660505][ T5772] em28xx 1-1:0.132: Remote control support is not available for this card.
[ 116.669145][ T778] em28xx 7-1:0.132: Closing input extension
[ 116.675310][ T5774] em28xx 5-1:0.132: Registering V4L2 extension
[ 116.685103][ T778] em28xx 7-1:0.132: Freeing device
[ 116.878277][ T5774] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 116.885745][ T5774] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 116.893327][ T5774] em28xx 5-1:0.132: No AC97 audio processor
[ 116.904079][ T5774] usb 5-1: Decoder not found
[ 116.908714][ T5774] em28xx 5-1:0.132: failed to create media graph
[ 116.915797][ T5774] em28xx 5-1:0.132: V4L2 device video0 deregistered
[ 116.923651][ T5774] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 116.932390][ T2659] em28xx 2-1:0.132: Closing input extension
[ 116.938315][ T5775] em28xx 6-1:0.132: Registering V4L2 extension
[ 116.947501][ T2659] em28xx 2-1:0.132: Freeing device
[ 117.050238][ T778] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 117.082500][ T5775] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[ 117.089602][ T5775] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[ 117.096919][ T5775] em28xx 6-1:0.132: No AC97 audio processor
[ 117.104341][ T5775] usb 6-1: Decoder not found
[ 117.108975][ T5775] em28xx 6-1:0.132: failed to create media graph
[ 117.116349][ T5775] em28xx 6-1:0.132: V4L2 device video0 deregistered
[ 117.124376][ T5775] em28xx 6-1:0.132: Remote control support is not available for this card.
[ 117.133076][ T9] em28xx 1-1:0.132: Closing input extension
[ 117.139049][ T38] em28xx 5-1:0.132: Closing input extension
[ 117.145261][ T23] em28xx 6-1:0.132: Closing input extension
[ 117.146941][ T9] em28xx 1-1:0.132: Freeing device
[ 117.153576][ T38] em28xx 5-1:0.132: Freeing device
[ 117.165491][ T23] em28xx 6-1:0.132: Freeing device
[ 117.240198][ T778] usb 7-1: Using ep0 maxpacket: 32
[ 117.240193][ T2659] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 117.256008][ T778] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 117.264391][ T778] usb 7-1: config 0 has no interface number 0
[ 117.275940][ T778] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 117.294778][ T778] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 117.304139][ T778] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 117.312214][ T778] usb 7-1: Product: syz
[ 117.316411][ T778] usb 7-1: Manufacturer: syz
[ 117.321072][ T778] usb 7-1: SerialNumber: syz
[ 117.347129][ T778] usb 7-1: config 0 descriptor??
[ 117.367278][ T778] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 117.377165][ T778] em28xx 7-1:0.132: Video interface 132 found:
[ 117.400681][ T2659] usb 2-1: Using ep0 maxpacket: 32
[ 117.408605][ T2659] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 117.416947][ T2659] usb 2-1: config 0 has no interface number 0
[ 117.424072][ T2659] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 117.440063][ T2659] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 117.449232][ T2659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 117.458254][ T2659] usb 2-1: Product: syz
[ 117.462913][ T2659] usb 2-1: Manufacturer: syz
[ 117.467553][ T2659] usb 2-1: SerialNumber: syz
[ 117.476993][ T2659] usb 2-1: config 0 descriptor??
[ 117.482128][ T38] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 117.494388][ T2659] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 117.504222][ T2659] em28xx 2-1:0.132: Video interface 132 found:
[ 117.520229][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 117.530340][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 117.611047][ T778] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 117.650157][ T38] usb 5-1: Using ep0 maxpacket: 32
[ 117.656802][ T38] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 117.665117][ T38] usb 5-1: config 0 has no interface number 0
[ 117.671481][ T38] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 117.680141][ T9] usb 1-1: Using ep0 maxpacket: 32
[ 117.683985][ T38] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 117.688367][ T778] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 117.695739][ T38] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 117.704448][ T778] em28xx 7-1:0.132: board has no eeprom
[ 117.712477][ T38] usb 5-1: Product: syz
[ 117.719655][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 117.722235][ T38] usb 5-1: Manufacturer: syz
[ 117.730467][ T9] usb 1-1: config 0 has no interface number 0
[ 117.735030][ T38] usb 5-1: SerialNumber: syz
[ 117.745806][ T23] usb 6-1: Using ep0 maxpacket: 32
[ 117.749005][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 117.757314][ T38] usb 5-1: config 0 descriptor??
[ 117.767615][ T23] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 117.768658][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 117.775900][ T23] usb 6-1: config 0 has no interface number 0
[ 117.784972][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 117.785002][ T9] usb 1-1: Product: syz
[ 117.795305][ T38] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 117.799077][ T9] usb 1-1: Manufacturer: syz
[ 117.803307][ T38] em28xx 5-1:0.132: Video interface 132 found:
[ 117.813018][ T9] usb 1-1: SerialNumber: syz
[ 117.813635][ T778] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 117.818119][ T2659] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 117.824390][ T778] em28xx 7-1:0.132: analog set to bulk mode.
[ 117.828770][ T23] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 117.836890][ T5772] em28xx 7-1:0.132: Registering V4L2 extension
[ 117.845740][ T23] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 117.861277][ T778] usb 7-1: USB disconnect, device number 3
[ 117.865399][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 117.881197][ T9] usb 1-1: config 0 descriptor??
[ 117.888251][ T23] usb 6-1: Product: syz
[ 117.897424][ T23] usb 6-1: Manufacturer: syz
[ 117.899196][ T778] em28xx 7-1:0.132: Disconnecting em28xx
[ 117.902126][ T23] usb 6-1: SerialNumber: syz
[ 117.913658][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 117.922201][ T2659] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 117.923514][ T9] em28xx 1-1:0.132: Video interface 132 found:
[ 117.932270][ T2659] em28xx 2-1:0.132: board has no eeprom
[ 117.997887][ T23] usb 6-1: config 0 descriptor??
[ 118.017187][ T23] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 118.027750][ T23] em28xx 6-1:0.132: Video interface 132 found:
[ 118.035155][ T2659] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 118.043222][ T2659] em28xx 2-1:0.132: analog set to bulk mode.
[ 118.049398][ T38] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 118.063235][ T2659] usb 2-1: USB disconnect, device number 3
[ 118.071073][ T2659] em28xx 2-1:0.132: Disconnecting em28xx
[ 118.100461][ T5772] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 118.107609][ T5772] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 118.112237][ T38] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 118.114816][ T5772] em28xx 7-1:0.132: No AC97 audio processor
[ 118.123561][ T38] em28xx 5-1:0.132: board has no eeprom
[ 118.145876][ T5772] usb 7-1: Decoder not found
[ 118.151863][ T5772] em28xx 7-1:0.132: failed to create media graph
[ 118.161140][ T5772] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 118.170985][ T5772] em28xx 7-1:0.132: Remote control support is not available for this card.
[ 118.179737][ T5775] em28xx 2-1:0.132: Registering V4L2 extension
[ 118.190748][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[ 118.200208][ T38] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 118.208131][ T38] em28xx 5-1:0.132: analog set to bulk mode.
[ 118.244519][ T38] usb 5-1: USB disconnect, device number 3
[ 118.251986][ T38] em28xx 5-1:0.132: Disconnecting em28xx
[ 118.265941][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 118.270620][ T23] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[ 118.274912][ T9] em28xx 1-1:0.132: board has no eeprom
[ 118.324776][ T5775] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 118.332203][ T5775] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 118.339320][ T5775] em28xx 2-1:0.132: No AC97 audio processor
[ 118.348462][ T5775] usb 2-1: Decoder not found
[ 118.353384][ T5775] em28xx 2-1:0.132: failed to create media graph
[ 118.360143][ T5775] em28xx 2-1:0.132: V4L2 device video0 deregistered
[ 118.363773][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 118.368593][ T23] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 118.374651][ T9] em28xx 1-1:0.132: analog set to bulk mode.
[ 118.383401][ T23] em28xx 6-1:0.132: board has no eeprom
[ 118.396956][ T5775] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 118.405722][ T2659] em28xx 2-1:0.132: Closing input extension
[ 118.412533][ T778] em28xx 7-1:0.132: Closing input extension
[ 118.414844][ T2659] em28xx 2-1:0.132: Freeing device
[ 118.421351][ T9] usb 1-1: USB disconnect, device number 3
[ 118.434976][ T5774] em28xx 5-1:0.132: Registering V4L2 extension
[ 118.436722][ T9] em28xx 1-1:0.132: Disconnecting em28xx
[ 118.451788][ T778] em28xx 7-1:0.132: Freeing device
[ 118.470193][ T23] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 118.478098][ T23] em28xx 6-1:0.132: analog set to bulk mode.
[ 118.503975][ T23] usb 6-1: USB disconnect, device number 3
[ 118.538490][ T23] em28xx 6-1:0.132: Disconnecting em28xx
[ 118.670606][ T5774] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 118.677746][ T5774] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 118.684981][ T5774] em28xx 5-1:0.132: No AC97 audio processor
[ 118.717231][ T5774] usb 5-1: Decoder not found
[ 118.723286][ T5774] em28xx 5-1:0.132: failed to create media graph
[ 118.739874][ T5774] em28xx 5-1:0.132: V4L2 device video0 deregistered
[ 118.757974][ T5774] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 118.766793][ T5772] em28xx 1-1:0.132: Registering V4L2 extension
[ 118.766826][ T2659] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 118.830192][ T778] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 118.861395][ T5772] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[ 118.868584][ T5772] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[ 118.875882][ T5772] em28xx 1-1:0.132: No AC97 audio processor
[ 118.883389][ T5772] usb 1-1: Decoder not found
[ 118.887994][ T5772] em28xx 1-1:0.132: failed to create media graph
[ 118.894431][ T5772] em28xx 1-1:0.132: V4L2 device video0 deregistered
[ 118.903727][ T5772] em28xx 1-1:0.132: Remote control support is not available for this card.
[ 118.912456][ T5775] em28xx 6-1:0.132: Registering V4L2 extension
[ 118.950177][ T2659] usb 2-1: Using ep0 maxpacket: 32
[ 118.957192][ T2659] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 118.965653][ T2659] usb 2-1: config 0 has no interface number 0
[ 118.972330][ T2659] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 118.985213][ T2659] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 118.994477][ T2659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 119.000147][ T778] usb 7-1: Using ep0 maxpacket: 32
[ 119.002632][ T2659] usb 2-1: Product: syz
[ 119.011985][ T2659] usb 2-1: Manufacturer: syz
[ 119.016620][ T2659] usb 2-1: SerialNumber: syz
[ 119.021525][ T778] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 119.025358][ T2659] usb 2-1: config 0 descriptor??
[ 119.029716][ T778] usb 7-1: config 0 has no interface number 0
[ 119.044438][ T2659] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 119.053107][ T778] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 119.054343][ T2659] em28xx 2-1:0.132: Video interface 132 found:
[ 119.066736][ T778] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 119.070407][ T5775] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[ 119.079409][ T778] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 119.086432][ T5775] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[ 119.094414][ T778] usb 7-1: Product: syz
[ 119.101532][ T5775] em28xx 6-1:0.132: No AC97 audio processor
[ 119.105676][ T778] usb 7-1: Manufacturer: syz
[ 119.114384][ T5775] usb 6-1: Decoder not found
[ 119.116166][ T778] usb 7-1: SerialNumber: syz
[ 119.125558][ T5775] em28xx 6-1:0.132: failed to create media graph
[ 119.127104][ T778] usb 7-1: config 0 descriptor??
[ 119.132165][ T5775] em28xx 6-1:0.132: V4L2 device video0 deregistered
[ 119.148248][ T778] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 119.149273][ T5775] em28xx 6-1:0.132: Remote control support is not available for this card.
[ 119.158876][ T778] em28xx 7-1:0.132: Video interface 132 found:
[ 119.167747][ T38] em28xx 5-1:0.132: Closing input extension
[ 119.168410][ T23] em28xx 6-1:0.132: Closing input extension
[ 119.189037][ T38] em28xx 5-1:0.132: Freeing device
[ 119.196462][ T9] em28xx 1-1:0.132: Closing input extension
[ 119.206554][ T9] em28xx 1-1:0.132: Freeing device
[ 119.207987][ T23] em28xx 6-1:0.132: Freeing device
[ 119.300592][ T2659] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 119.375278][ T2659] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 119.384941][ T2659] em28xx 2-1:0.132: board has no eeprom
[ 119.400832][ T778] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 119.450222][ T2659] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 119.458073][ T2659] em28xx 2-1:0.132: analog set to bulk mode.
[ 119.464285][ T5775] em28xx 2-1:0.132: Registering V4L2 extension
[ 119.483612][ T2659] usb 2-1: USB disconnect, device number 4
[ 119.487290][ T778] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 119.494354][ T2659] em28xx 2-1:0.132: Disconnecting em28xx
[ 119.498256][ T778] em28xx 7-1:0.132: board has no eeprom
[ 119.504213][ T38] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 119.542252][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 119.570197][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 119.587643][ T5775] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 119.590257][ T778] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 119.594760][ T5775] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 119.602614][ T778] em28xx 7-1:0.132: analog set to bulk mode.
[ 119.609720][ T5775] em28xx 2-1:0.132: No AC97 audio processor
[ 119.624439][ T5775] usb 2-1: Decoder not found
[ 119.626247][ T778] usb 7-1: USB disconnect, device number 4
[ 119.629073][ T5775] em28xx 2-1:0.132: failed to create media graph
[ 119.637618][ T778] em28xx 7-1:0.132: Disconnecting em28xx
[ 119.647549][ T5775] em28xx 2-1:0.132: V4L2 device video0 deregistered
[ 119.655460][ T5775] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 119.664351][ T2659] em28xx 2-1:0.132: Closing input extension
[ 119.670774][ T5772] em28xx 7-1:0.132: Registering V4L2 extension
[ 119.679218][ T2659] em28xx 2-1:0.132: Freeing device
[ 119.700709][ T38] usb 5-1: Using ep0 maxpacket: 32
[ 119.707854][ T38] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 119.716383][ T38] usb 5-1: config 0 has no interface number 0
[ 119.722915][ T23] usb 6-1: Using ep0 maxpacket: 32
[ 119.731492][ T23] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 119.731937][ T9] usb 1-1: Using ep0 maxpacket: 32
[ 119.739689][ T23] usb 6-1: config 0 has no interface number 0
[ 119.739746][ T23] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 119.766863][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 119.775166][ T9] usb 1-1: config 0 has no interface number 0
[ 119.781351][ T38] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 119.800267][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 119.802941][ T38] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 119.819624][ T38] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 119.828063][ T38] usb 5-1: Product: syz
[ 119.833919][ T38] usb 5-1: Manufacturer: syz
[ 119.834006][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 119.838541][ T38] usb 5-1: SerialNumber: syz
[ 119.847772][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 119.847801][ T9] usb 1-1: Product: syz
[ 119.847822][ T9] usb 1-1: Manufacturer: syz
[ 119.847842][ T9] usb 1-1: SerialNumber: syz
[ 119.864911][ T9] usb 1-1: config 0 descriptor??
[ 119.869659][ T23] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 119.889135][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
2026/02/10 03:40:46 executed programs: 26
[ 119.894649][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 119.897533][ T23] usb 6-1: Product: syz
[ 119.906989][ T9] em28xx 1-1:0.132: Video interface 132 found:
[ 119.911134][ T23] usb 6-1: Manufacturer: syz
[ 119.921931][ T23] usb 6-1: SerialNumber: syz
[ 119.947604][ T5772] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 119.955099][ T5772] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 119.961752][ T23] usb 6-1: config 0 descriptor??
[ 119.963215][ T5772] em28xx 7-1:0.132: No AC97 audio processor
[ 119.972437][ T38] usb 5-1: config 0 descriptor??
[ 120.009345][ T23] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 120.019959][ T23] em28xx 6-1:0.132: Video interface 132 found:
[ 120.028859][ T5772] usb 7-1: Decoder not found
[ 120.031646][ T38] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 120.033663][ T5772] em28xx 7-1:0.132: failed to create media graph
[ 120.043321][ T38] em28xx 5-1:0.132: Video interface 132 found:
[ 120.065134][ T5772] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 120.074589][ T5772] em28xx 7-1:0.132: Remote control support is not available for this card.
[ 120.074705][ T5839] ==================================================================
[ 120.083752][ T778] em28xx 7-1:0.132: Closing input extension
[ 120.091276][ T5839] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 120.091325][ T5839] Read of size 8 at addr ffff88811ddcc738 by task v4l_id/5839
[ 120.091348][ T5839]
[ 120.114460][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary)
[ 120.114492][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 120.114505][ T5839] Call Trace:
[ 120.114514][ T5839]
[ 120.114522][ T5839] dump_stack_lvl+0x100/0x190
[ 120.114564][ T5839] print_report+0x156/0x4c9
[ 120.114602][ T5839] ? __virt_addr_valid+0x81/0x620
[ 120.114637][ T5839] ? __phys_addr+0xe8/0x180
[ 120.114672][ T5839] ? v4l2_fh_init+0x27d/0x2c0
[ 120.114704][ T5839] kasan_report+0xdf/0x1a0
[ 120.114736][ T5839] ? v4l2_fh_init+0x27d/0x2c0
[ 120.114770][ T5839] v4l2_fh_init+0x27d/0x2c0
[ 120.114802][ T5839] v4l2_fh_open+0x64/0xa0
[ 120.114834][ T5839] em28xx_v4l2_open+0x11e/0x570
[ 120.114859][ T5839] v4l2_open+0x1d2/0x490
[ 120.114891][ T5839] ? __pfx_v4l2_open+0x10/0x10
[ 120.114923][ T5839] chrdev_open+0x234/0x6a0
[ 120.114944][ T5839] ? __pfx_chrdev_open+0x10/0x10
[ 120.114963][ T5839] ? path_get+0x61/0x80
[ 120.114988][ T5839] do_dentry_open+0x71a/0x1400
[ 120.115021][ T5839] ? __pfx_chrdev_open+0x10/0x10
[ 120.115042][ T5839] ? inode_permission+0x374/0x630
[ 120.115071][ T5839] vfs_open+0x82/0x3f0
[ 120.115093][ T5839] ? may_open+0x1f3/0x410
[ 120.115120][ T5839] path_openat+0x21dc/0x3120
[ 120.115160][ T5839] ? __pfx_path_openat+0x10/0x10
[ 120.115201][ T5839] do_filp_open+0x1f7/0x420
[ 120.115222][ T5839] ? __pfx_do_filp_open+0x10/0x10
[ 120.115251][ T5839] ? _raw_spin_unlock+0x28/0x50
[ 120.115278][ T5839] ? alloc_fd+0x42a/0x730
[ 120.115317][ T5839] do_sys_openat2+0x12e/0x220
[ 120.115343][ T5839] ? __pfx_do_sys_openat2+0x10/0x10
[ 120.115368][ T5839] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 120.115402][ T5839] __x64_sys_openat+0x12d/0x210
[ 120.115429][ T5839] ? __pfx___x64_sys_openat+0x10/0x10
[ 120.115457][ T5839] ? do_user_addr_fault+0x3e3/0x11d0
[ 120.115488][ T5839] do_syscall_64+0xc9/0x570
[ 120.115510][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.115534][ T5839] RIP: 0033:0x7fc6fbccc407
[ 120.115552][ T5839] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 120.115575][ T5839] RSP: 002b:00007fffd0cf3270 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 120.115605][ T5839] RAX: ffffffffffffffda RBX: 00007fc6fbbde880 RCX: 00007fc6fbccc407
[ 120.115620][ T5839] RDX: 0000000000000000 RSI: 00007fffd0cf3f24 RDI: ffffffffffffff9c
[ 120.115635][ T5839] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 120.115648][ T5839] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 120.115662][ T5839] R13: 00007fffd0cf34c0 R14: 00007fc6fc462000 R15: 00005629001724d8
[ 120.115684][ T5839]
[ 120.115692][ T5839]
[ 120.170683][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[ 120.173719][ T5839] Allocated by task 5772:
[ 120.391184][ T5839] kasan_save_stack+0x30/0x50
[ 120.395890][ T5839] kasan_save_track+0x14/0x30
[ 120.400579][ T5839] __kasan_kmalloc+0x8f/0xa0
[ 120.405180][ T5839] em28xx_v4l2_init.cold+0x94/0x3503
[ 120.410480][ T5839] em28xx_init_extension+0x13a/0x200
[ 120.415783][ T5839] request_module_async+0x61/0x80
[ 120.420824][ T5839] process_one_work+0x9c2/0x1840
[ 120.425865][ T5839] worker_thread+0x5da/0xe40
[ 120.430469][ T5839] kthread+0x3b3/0x730
[ 120.434558][ T5839] ret_from_fork+0x6c3/0xa20
[ 120.439154][ T5839] ret_from_fork_asm+0x1a/0x30
[ 120.443930][ T5839]
[ 120.446254][ T5839] Freed by task 5772:
[ 120.450230][ T5839] kasan_save_stack+0x30/0x50
[ 120.454918][ T5839] kasan_save_track+0x14/0x30
[ 120.459604][ T5839] kasan_save_free_info+0x3b/0x70
[ 120.464633][ T5839] __kasan_slab_free+0x43/0x70
[ 120.469415][ T5839] kfree+0x1ad/0x630
[ 120.473331][ T5839] kref_put.isra.0+0x56/0x90
[ 120.477942][ T5839] em28xx_v4l2_init.cold+0x280/0x3503
[ 120.483353][ T5839] em28xx_init_extension+0x13a/0x200
[ 120.488674][ T5839] request_module_async+0x61/0x80
[ 120.493730][ T5839] process_one_work+0x9c2/0x1840
[ 120.498688][ T5839] worker_thread+0x5da/0xe40
[ 120.503299][ T5839] kthread+0x3b3/0x730
[ 120.507391][ T5839] ret_from_fork+0x6c3/0xa20
[ 120.511995][ T5839] ret_from_fork_asm+0x1a/0x30
[ 120.516790][ T5839]
[ 120.519116][ T5839] The buggy address belongs to the object at ffff88811ddcc000
[ 120.519116][ T5839] which belongs to the cache kmalloc-8k of size 8192
[ 120.533179][ T5839] The buggy address is located 1848 bytes inside of
[ 120.533179][ T5839] freed 8192-byte region [ffff88811ddcc000, ffff88811ddce000)
[ 120.547168][ T5839]
[ 120.549507][ T5839] The buggy address belongs to the physical page:
[ 120.555919][ T5839] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ddc8
[ 120.564780][ T5839] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 120.573297][ T5839] anon flags: 0x200000000000040(head|node=0|zone=2)
[ 120.579897][ T5839] page_type: f5(slab)
[ 120.583890][ T5839] raw: 0200000000000040 ffff888100042280 0000000000000000 0000000000000001
[ 120.592485][ T5839] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 120.601076][ T5839] head: 0200000000000040 ffff888100042280 0000000000000000 0000000000000001
[ 120.609753][ T5839] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 120.618430][ T5839] head: 0200000000000003 ffffea0004777201 00000000ffffffff 00000000ffffffff
[ 120.627105][ T5839] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 120.635774][ T5839] page dumped because: kasan: bad access detected
[ 120.642188][ T5839] page_owner tracks the page as allocated
[ 120.647903][ T5839] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3056, tgid 3056 (syz-executor), ts 53000856341, free_ts 52935859226
[ 120.669273][ T5839] post_alloc_hook+0x1e1/0x250
[ 120.674070][ T5839] get_page_from_freelist+0xd57/0x3b20
[ 120.679563][ T5839] __alloc_frozen_pages_noprof+0x269/0x2230
[ 120.685490][ T5839] alloc_pages_mpol+0xe8/0x410
[ 120.690287][ T5839] new_slab+0x2c4/0x440
[ 120.694466][ T5839] ___slab_alloc+0xda3/0x1ca0
[ 120.699161][ T5839] __slab_alloc.isra.0+0x63/0x110
[ 120.704204][ T5839] __kmalloc_cache_noprof+0x4ee/0x7e0
[ 120.709604][ T5839] mr_table_alloc+0x5f/0x2e0
[ 120.714232][ T5839] ipmr_net_init+0x1ef/0x340
[ 120.718849][ T5839] ops_init+0x1e2/0x5f0
[ 120.723030][ T5839] setup_net+0x118/0x3a0
[ 120.727294][ T5839] copy_net_ns+0x440/0x780
[ 120.731739][ T5839] create_new_namespaces+0x3ea/0xc00
[ 120.737050][ T5839] unshare_nsproxy_namespaces+0xc3/0x1f0
[ 120.742704][ T5839] ksys_unshare+0x455/0xab0
[ 120.747268][ T5839] page last free pid 3056 tgid 3056 stack trace:
[ 120.753600][ T5839] __free_frozen_pages+0x7d1/0x1010
[ 120.758821][ T5839] qlist_free_all+0x47/0xe0
[ 120.763342][ T5839] kasan_quarantine_reduce+0x1a0/0x1f0
[ 120.768829][ T5839] __kasan_slab_alloc+0x4e/0x70
[ 120.773698][ T5839] __kvmalloc_node_noprof+0x2fd/0xa80
[ 120.779110][ T5839] proc_sys_call_handler+0x2c7/0x5a0
[ 120.784426][ T5839] vfs_write+0x6ac/0x1070
[ 120.788773][ T5839] ksys_write+0x12a/0x250
[ 120.793122][ T5839] do_syscall_64+0xc9/0x570
[ 120.797639][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.803540][ T5839]
[ 120.805884][ T5839] Memory state around the buggy address:
[ 120.811514][ T5839] ffff88811ddcc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 120.819582][ T5839] ffff88811ddcc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 120.827647][ T5839] >ffff88811ddcc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 120.835711][ T5839] ^
[ 120.841604][ T5839] ffff88811ddcc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 120.849670][ T5839] ffff88811ddcc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 120.857732][ T5839] ==================================================================
[ 120.866102][ T5839] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 120.873329][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary)
[ 120.882721][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 120.892785][ T5839] Call Trace:
[ 120.896158][ T5839]
[ 120.899109][ T5839] dump_stack_lvl+0x100/0x190
[ 120.903818][ T5839] vpanic+0x20d/0x630
[ 120.907820][ T5839] panic+0xd1/0xd1
[ 120.911553][ T5839] ? __pfx_panic+0x10/0x10
[ 120.915987][ T5839] ? check_panic_on_warn+0x1f/0x90
[ 120.921120][ T5839] check_panic_on_warn.cold+0x19/0x34
[ 120.926511][ T5839] end_report.part.0+0x3a/0x90
[ 120.931292][ T5839] kasan_report.cold+0xe/0x18
[ 120.935990][ T5839] ? v4l2_fh_init+0x27d/0x2c0
[ 120.940690][ T5839] v4l2_fh_init+0x27d/0x2c0
[ 120.945213][ T5839] v4l2_fh_open+0x64/0xa0
[ 120.949567][ T5839] em28xx_v4l2_open+0x11e/0x570
[ 120.954436][ T5839] v4l2_open+0x1d2/0x490
[ 120.958696][ T5839] ? __pfx_v4l2_open+0x10/0x10
[ 120.963476][ T5839] chrdev_open+0x234/0x6a0
[ 120.967900][ T5839] ? __pfx_chrdev_open+0x10/0x10
[ 120.972842][ T5839] ? path_get+0x61/0x80
[ 120.977015][ T5839] do_dentry_open+0x71a/0x1400
[ 120.981885][ T5839] ? __pfx_chrdev_open+0x10/0x10
[ 120.986836][ T5839] ? inode_permission+0x374/0x630
[ 120.991875][ T5839] vfs_open+0x82/0x3f0
[ 120.995961][ T5839] ? may_open+0x1f3/0x410
[ 121.000311][ T5839] path_openat+0x21dc/0x3120
[ 121.004935][ T5839] ? __pfx_path_openat+0x10/0x10
[ 121.009897][ T5839] do_filp_open+0x1f7/0x420
[ 121.014409][ T5839] ? __pfx_do_filp_open+0x10/0x10
[ 121.019455][ T5839] ? _raw_spin_unlock+0x28/0x50
[ 121.024319][ T5839] ? alloc_fd+0x42a/0x730
[ 121.028690][ T5839] do_sys_openat2+0x12e/0x220
[ 121.033388][ T5839] ? __pfx_do_sys_openat2+0x10/0x10
[ 121.038602][ T5839] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 121.045063][ T5839] __x64_sys_openat+0x12d/0x210
[ 121.049924][ T5839] ? __pfx___x64_sys_openat+0x10/0x10
[ 121.055313][ T5839] ? do_user_addr_fault+0x3e3/0x11d0
[ 121.060652][ T5839] do_syscall_64+0xc9/0x570
[ 121.065200][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.071106][ T5839] RIP: 0033:0x7fc6fbccc407
[ 121.075530][ T5839] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 121.095147][ T5839] RSP: 002b:00007fffd0cf3270 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 121.103571][ T5839] RAX: ffffffffffffffda RBX: 00007fc6fbbde880 RCX: 00007fc6fbccc407
[ 121.111549][ T5839] RDX: 0000000000000000 RSI: 00007fffd0cf3f24 RDI: ffffffffffffff9c
[ 121.119530][ T5839] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 121.127507][ T5839] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 121.135497][ T5839] R13: 00007fffd0cf34c0 R14: 00007fc6fc462000 R15: 00005629001724d8
[ 121.143513][ T5839]
[ 121.146939][ T5839] Kernel Offset: disabled
[ 121.151266][ T5839] Rebooting in 86400 seconds..