Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts.
executing program
executing program
executing program
executing program
executing program
[ 42.792498][ T29] audit: type=1400 audit(1739260215.502:80): avc: denied { execmem } for pid=2945 comm="syz-executor140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 42.825954][ T29] audit: type=1400 audit(1739260215.522:81): avc: denied { read write } for pid=2951 comm="syz-executor140" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 42.849889][ T29] audit: type=1400 audit(1739260215.522:82): avc: denied { open } for pid=2951 comm="syz-executor140" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 42.873649][ T29] audit: type=1400 audit(1739260215.522:83): avc: denied { ioctl } for pid=2951 comm="syz-executor140" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 43.045108][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 43.074984][ T2806] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 43.094986][ T52] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 43.102997][ T1120] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 43.114977][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 43.197197][ T9] usb 1-1: config 0 has an invalid interface number: 36 but max is 0
[ 43.205510][ T9] usb 1-1: config 0 has no interface number 0
[ 43.211702][ T9] usb 1-1: config 0 interface 36 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[ 43.224346][ T9] usb 1-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=4a.52
[ 43.233478][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 43.241613][ T9] usb 1-1: Product: syz
[ 43.245940][ T9] usb 1-1: Manufacturer: syz
[ 43.250656][ T9] usb 1-1: SerialNumber: syz
[ 43.259896][ T2806] usb 3-1: config 0 has an invalid interface number: 36 but max is 0
[ 43.268179][ T2806] usb 3-1: config 0 has no interface number 0
[ 43.274621][ T2806] usb 3-1: config 0 interface 36 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[ 43.288389][ T9] usb 1-1: config 0 descriptor??
[ 43.293613][ T8] usb 2-1: config 0 has an invalid interface number: 36 but max is 0
[ 43.293908][ T1120] usb 4-1: config 0 has an invalid interface number: 36 but max is 0
[ 43.301779][ T8] usb 2-1: config 0 has no interface number 0
[ 43.303167][ T8] usb 2-1: config 0 interface 36 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[ 43.310074][ T1120] usb 4-1: config 0 has no interface number 0
[ 43.317259][ T2951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 43.326666][ T1120] usb 4-1: config 0 interface 36 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[ 43.337082][ T2806] usb 3-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=4a.52
[ 43.340911][ T52] usb 5-1: config 0 has an invalid interface number: 36 but max is 0
[ 43.349546][ T2806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 43.358590][ T52] usb 5-1: config 0 has no interface number 0
[ 43.366653][ T2806] usb 3-1: Product: syz
[ 43.366681][ T2806] usb 3-1: Manufacturer: syz
[ 43.376342][ T52] usb 5-1: config 0 interface 36 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[ 43.380767][ T2806] usb 3-1: SerialNumber: syz
[ 43.383949][ T9] em28xx 1-1:0.36: New device syz syz @ 480 Mbps (1b80:e309, interface 36, class 36)
[ 43.387743][ T1120] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=4a.52
[ 43.389693][ T9] em28xx 1-1:0.36: Video interface 36 found: bulk
[ 43.399768][ T1120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 43.408341][ T8] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=4a.52
[ 43.414086][ T1120] usb 4-1: Product: syz
[ 43.423102][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 43.429525][ T1120] usb 4-1: Manufacturer: syz
[ 43.437575][ T8] usb 2-1: Product: syz
[ 43.446639][ T1120] usb 4-1: SerialNumber: syz
[ 43.450815][ T8] usb 2-1: Manufacturer: syz
[ 43.461683][ T52] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=4a.52
[ 43.463482][ T8] usb 2-1: SerialNumber: syz
[ 43.467642][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 43.467677][ T52] usb 5-1: Product: syz
[ 43.467699][ T52] usb 5-1: Manufacturer: syz
[ 43.467723][ T52] usb 5-1: SerialNumber: syz
[ 43.471625][ T52] usb 5-1: config 0 descriptor??
[ 43.486353][ T2806] usb 3-1: config 0 descriptor??
[ 43.491825][ T2952] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 43.507286][ T8] usb 2-1: config 0 descriptor??
[ 43.509004][ T2953] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[ 43.525494][ T2955] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 43.535356][ T52] em28xx 5-1:0.36: New device syz syz @ 480 Mbps (1b80:e309, interface 36, class 36)
[ 43.555313][ T2806] em28xx 3-1:0.36: New device syz syz @ 480 Mbps (1b80:e309, interface 36, class 36)
[ 43.558357][ T52] em28xx 5-1:0.36: Video interface 36 found: bulk
[ 43.567934][ T2806] em28xx 3-1:0.36: Video interface 36 found: bulk
[ 43.584634][ T1120] usb 4-1: config 0 descriptor??
[ 43.588163][ T8] em28xx 2-1:0.36: New device syz syz @ 480 Mbps (1b80:e309, interface 36, class 36)
executing program
[ 43.599480][ T8] em28xx 2-1:0.36: Video interface 36 found: bulk
[ 43.599726][ T2954] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 43.623574][ T1120] em28xx 4-1:0.36: New device syz syz @ 480 Mbps (1b80:e309, interface 36, class 36)
[ 43.633253][ T1120] em28xx 4-1:0.36: Video interface 36 found: bulk
[ 43.635480][ T9] em28xx 1-1:0.36: unknown em28xx chip ID (0)
executing program
executing program
[ 43.719554][ T9] em28xx 1-1:0.36: reading from i2c device at 0xa0 failed (error=-5)
[ 43.728226][ T9] em28xx 1-1:0.36: board has no eeprom
executing program
executing program
[ 43.786917][ T9] em28xx 1-1:0.36: Identified as Easy Cap Capture DC-60 (card=64)
[ 43.794933][ T9] em28xx 1-1:0.36: analog set to bulk mode.
[ 43.801436][ T2958] em28xx 1-1:0.36: Registering V4L2 extension
[ 43.808104][ T52] em28xx 5-1:0.36: unknown em28xx chip ID (0)
[ 43.816038][ T2806] em28xx 3-1:0.36: unknown em28xx chip ID (0)
[ 43.842278][ T9] usb 1-1: USB disconnect, device number 2
[ 43.863218][ T9] em28xx 1-1:0.36: Disconnecting em28xx
[ 43.870513][ T8] em28xx 2-1:0.36: unknown em28xx chip ID (0)
[ 43.877088][ T2958] em28xx 1-1:0.36: Config register raw data: 0xffffffed
[ 43.884184][ T2958] em28xx 1-1:0.36: AC97 chip type couldn't be determined
[ 43.891390][ T2958] em28xx 1-1:0.36: No AC97 audio processor
[ 43.895598][ T1120] em28xx 4-1:0.36: unknown em28xx chip ID (0)
[ 43.899684][ T2806] em28xx 3-1:0.36: reading from i2c device at 0xa0 failed (error=-5)
[ 43.909849][ T52] em28xx 5-1:0.36: reading from i2c device at 0xa0 failed (error=-5)
[ 43.911657][ T2806] em28xx 3-1:0.36: board has no eeprom
[ 43.919758][ T52] em28xx 5-1:0.36: board has no eeprom
[ 43.928970][ T2958] usb 1-1: Decoder not found
[ 43.935711][ T2958] em28xx 1-1:0.36: failed to create media graph
[ 43.942203][ T2958] em28xx 1-1:0.36: V4L2 device video0 deregistered
[ 43.952113][ T2958] em28xx 1-1:0.36: Remote control support is not available for this card.
[ 43.962127][ T9] em28xx 1-1:0.36: Closing input extension
[ 43.968283][ T8] em28xx 2-1:0.36: reading from i2c device at 0xa0 failed (error=-5)
[ 43.976654][ T8] em28xx 2-1:0.36: board has no eeprom
[ 43.985894][ T9] em28xx 1-1:0.36: Freeing device
[ 43.996603][ T1120] em28xx 4-1:0.36: reading from i2c device at 0xa0 failed (error=-5)
[ 44.004906][ T1120] em28xx 4-1:0.36: board has no eeprom
[ 44.005108][ T2806] em28xx 3-1:0.36: Identified as Easy Cap Capture DC-60 (card=64)
[ 44.010556][ T52] em28xx 5-1:0.36: Identified as Easy Cap Capture DC-60 (card=64)
[ 44.018499][ T2806] em28xx 3-1:0.36: analog set to bulk mode.
[ 44.026173][ T52] em28xx 5-1:0.36: analog set to bulk mode.
[ 44.026255][ T2959] em28xx 5-1:0.36: Registering V4L2 extension
[ 44.050115][ T52] usb 5-1: USB disconnect, device number 2
[ 44.057096][ T8] em28xx 2-1:0.36: Identified as Easy Cap Capture DC-60 (card=64)
[ 44.065038][ T8] em28xx 2-1:0.36: analog set to bulk mode.
[ 44.072357][ T52] em28xx 5-1:0.36: Disconnecting em28xx
[ 44.100494][ T2959] em28xx 5-1:0.36: Config register raw data: 0xffffffed
[ 44.105453][ T8] usb 2-1: USB disconnect, device number 2
[ 44.107592][ T2959] em28xx 5-1:0.36: AC97 chip type couldn't be determined
[ 44.116853][ T2806] usb 3-1: USB disconnect, device number 2
[ 44.120843][ T2959] em28xx 5-1:0.36: No AC97 audio processor
[ 44.127885][ T8] em28xx 2-1:0.36: Disconnecting em28xx
[ 44.138163][ T1120] em28xx 4-1:0.36: Identified as Easy Cap Capture DC-60 (card=64)
[ 44.139953][ T2806] em28xx 3-1:0.36: Disconnecting em28xx
[ 44.146345][ T1120] em28xx 4-1:0.36: analog set to bulk mode.
[ 44.161959][ T1120] usb 4-1: USB disconnect, device number 2
[ 44.177244][ T2959] usb 5-1: Decoder not found
[ 44.181924][ T2959] em28xx 5-1:0.36: failed to create media graph
[ 44.195234][ T1120] em28xx 4-1:0.36: Disconnecting em28xx
[ 44.205641][ T2959] em28xx 5-1:0.36: V4L2 device video0 deregistered
[ 44.213529][ T2959] em28xx 5-1:0.36: Remote control support is not available for this card.
[ 44.214129][ T2976] ==================================================================
[ 44.223335][ T52] em28xx 5-1:0.36: Closing input extension
[ 44.230130][ T2976] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 44.243492][ T2976] Read of size 8 at addr ffff8881258b8730 by task v4l_id/2976
[ 44.250979][ T2976]
[ 44.253326][ T2976] CPU: 0 UID: 0 PID: 2976 Comm: v4l_id Not tainted 6.14.0-rc1-syzkaller-g9682c35ff6ec #0
[ 44.253353][ T2976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 44.253369][ T2976] Call Trace:
[ 44.253377][ T2976]
[ 44.253389][ T2976] dump_stack_lvl+0x116/0x1f0
[ 44.253429][ T2976] print_report+0xc3/0x620
[ 44.253452][ T2976] ? __virt_addr_valid+0x5e/0x590
[ 44.253475][ T2976] ? __phys_addr+0xc6/0x150
[ 44.253497][ T2976] kasan_report+0xd9/0x110
[ 44.253519][ T2976] ? v4l2_fh_init+0x27d/0x2c0
[ 44.253549][ T2976] ? v4l2_fh_init+0x27d/0x2c0
[ 44.253581][ T2976] v4l2_fh_init+0x27d/0x2c0
[ 44.253609][ T2976] v4l2_fh_open+0x83/0xc0
[ 44.253637][ T2976] em28xx_v4l2_open+0x250/0x7e0
[ 44.253664][ T2976] v4l2_open+0x222/0x490
[ 44.253688][ T2976] ? __pfx_v4l2_open+0x10/0x10
[ 44.253712][ T2976] chrdev_open+0x237/0x6a0
[ 44.253742][ T2976] ? __pfx_chrdev_open+0x10/0x10
[ 44.253770][ T2976] ? lockref_get+0x15/0x50
[ 44.253807][ T2976] do_dentry_open+0x6cb/0x1390
[ 44.253833][ T2976] ? __pfx_chrdev_open+0x10/0x10
[ 44.253862][ T2976] ? inode_permission+0xdd/0x5f0
[ 44.253897][ T2976] vfs_open+0x82/0x3f0
[ 44.253928][ T2976] ? may_open+0x1f2/0x400
[ 44.253963][ T2976] path_openat+0x1e88/0x2d80
[ 44.253994][ T2976] ? __pfx_path_openat+0x10/0x10
[ 44.254020][ T2976] ? __pfx___lock_acquire+0x10/0x10
[ 44.254057][ T2976] ? lock_acquire.part.0+0x11b/0x380
[ 44.254078][ T2976] ? find_held_lock+0x2d/0x110
[ 44.254107][ T2976] do_filp_open+0x20c/0x470
[ 44.254133][ T2976] ? __pfx_do_filp_open+0x10/0x10
[ 44.254159][ T2976] ? find_held_lock+0x2d/0x110
[ 44.254195][ T2976] ? alloc_fd+0x41f/0x760
[ 44.254224][ T2976] do_sys_openat2+0x17a/0x1e0
[ 44.254257][ T2976] ? __pfx_do_sys_openat2+0x10/0x10
[ 44.254292][ T2976] ? do_user_addr_fault+0xd97/0x12c0
[ 44.254324][ T2976] ? __pfx_lock_release+0x10/0x10
[ 44.254346][ T2976] __x64_sys_openat+0x175/0x210
[ 44.254380][ T2976] ? __pfx___x64_sys_openat+0x10/0x10
[ 44.254416][ T2976] ? do_user_addr_fault+0x839/0x12c0
[ 44.254451][ T2976] do_syscall_64+0xcd/0x250
[ 44.254485][ T2976] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 44.254514][ T2976] RIP: 0033:0x7ffa7b9299a4
[ 44.254536][ T2976] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[ 44.254559][ T2976] RSP: 002b:00007ffed5ce3640 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 44.254583][ T2976] RAX: ffffffffffffffda RBX: 00007ffed5ce3858 RCX: 00007ffa7b9299a4
[ 44.254598][ T2976] RDX: 0000000000000000 RSI: 00007ffed5ce4f26 RDI: 00000000ffffff9c
[ 44.254613][ T2976] RBP: 00007ffed5ce4f26 R08: 0000000000000000 R09: 0000000000000000
[ 44.254626][ T2976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 44.254640][ T2976] R13: 00007ffed5ce3870 R14: 0000556a3cd4f670 R15: 00007ffa7bd78a80
[ 44.254660][ T2976]
[ 44.254668][ T2976]
[ 44.539953][ T2976] Allocated by task 2959:
[ 44.544285][ T2976] kasan_save_stack+0x33/0x60
[ 44.548992][ T2976] kasan_save_track+0x14/0x30
[ 44.553705][ T2976] __kasan_kmalloc+0x8f/0xa0
[ 44.558316][ T2976] em28xx_v4l2_init+0x114/0x4050
[ 44.563264][ T2976] em28xx_init_extension+0x137/0x200
[ 44.568570][ T2976] request_module_async+0x61/0x70
[ 44.573617][ T2976] process_one_work+0x9c5/0x1ba0
[ 44.578579][ T2976] worker_thread+0x6c8/0xf00
[ 44.583188][ T2976] kthread+0x3af/0x750
[ 44.587279][ T2976] ret_from_fork+0x45/0x80
[ 44.591712][ T2976] ret_from_fork_asm+0x1a/0x30
[ 44.596491][ T2976]
[ 44.598832][ T2976] Freed by task 2959:
[ 44.602806][ T2976] kasan_save_stack+0x33/0x60
[ 44.607515][ T2976] kasan_save_track+0x14/0x30
[ 44.612215][ T2976] kasan_save_free_info+0x3b/0x60
[ 44.617254][ T2976] __kasan_slab_free+0x37/0x50
[ 44.622024][ T2976] kfree+0x294/0x480
[ 44.625932][ T2976] em28xx_v4l2_init+0x22a4/0x4050
[ 44.630969][ T2976] em28xx_init_extension+0x137/0x200
[ 44.636273][ T2976] request_module_async+0x61/0x70
[ 44.641314][ T2976] process_one_work+0x9c5/0x1ba0
[ 44.646274][ T2976] worker_thread+0x6c8/0xf00
[ 44.650884][ T2976] kthread+0x3af/0x750
[ 44.654979][ T2976] ret_from_fork+0x45/0x80
[ 44.659417][ T2976] ret_from_fork_asm+0x1a/0x30
[ 44.664194][ T2976]
[ 44.666697][ T2976] The buggy address belongs to the object at ffff8881258b8000
[ 44.666697][ T2976] which belongs to the cache kmalloc-8k of size 8192
[ 44.680885][ T2976] The buggy address is located 1840 bytes inside of
[ 44.680885][ T2976] freed 8192-byte region [ffff8881258b8000, ffff8881258ba000)
[ 44.695005][ T2976]
[ 44.697340][ T2976] The buggy address belongs to the physical page:
[ 44.703844][ T2976] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1258b8
[ 44.712801][ T2976] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 44.721312][ T2976] flags: 0x200000000000040(head|node=0|zone=2)
[ 44.727477][ T2976] page_type: f5(slab)
[ 44.731493][ T2976] raw: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
[ 44.740097][ T2976] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 44.748697][ T2976] head: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
[ 44.757392][ T2976] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 44.766120][ T2976] head: 0200000000000003 ffffea0004962e01 ffffffffffffffff 0000000000000000
[ 44.774842][ T2976] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 44.784411][ T2976] page dumped because: kasan: bad access detected
[ 44.790927][ T2976] page_owner tracks the page as allocated
[ 44.796661][ T2976] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2959, tgid 2959 (kworker/1:3), ts 44046228688, free_ts 32903004779
[ 44.818393][ T2976] post_alloc_hook+0x181/0x1b0
[ 44.823188][ T2976] get_page_from_freelist+0xe76/0x2b90
[ 44.828683][ T2976] __alloc_frozen_pages_noprof+0x21c/0x2290
[ 44.834768][ T2976] alloc_pages_mpol+0xe7/0x410
[ 44.839554][ T2976] new_slab+0x23d/0x330
[ 44.843734][ T2976] ___slab_alloc+0xc41/0x1670
[ 44.848444][ T2976] __slab_alloc.constprop.0+0x56/0xb0
[ 44.853847][ T2976] __kmalloc_cache_noprof+0x217/0x3e0
[ 44.859242][ T2976] em28xx_v4l2_init+0x114/0x4050
[ 44.864289][ T2976] em28xx_init_extension+0x137/0x200
[ 44.869775][ T2976] request_module_async+0x61/0x70
[ 44.874873][ T2976] process_one_work+0x9c5/0x1ba0
[ 44.879871][ T2976] worker_thread+0x6c8/0xf00
[ 44.884507][ T2976] kthread+0x3af/0x750
[ 44.888604][ T2976] ret_from_fork+0x45/0x80
[ 44.893048][ T2976] ret_from_fork_asm+0x1a/0x30
[ 44.897852][ T2976] page last free pid 2932 tgid 2932 stack trace:
[ 44.904200][ T2976] free_frozen_pages+0x653/0xde0
[ 44.909152][ T2976] __folio_put+0x1e8/0x2d0
[ 44.913593][ T2976] anon_pipe_buf_release+0x36c/0x430
[ 44.918897][ T2976] pipe_read+0x4e6/0xe60
[ 44.923153][ T2976] vfs_read+0xa53/0xbf0
[ 44.927318][ T2976] ksys_read+0x207/0x250
[ 44.931602][ T2976] do_syscall_64+0xcd/0x250
[ 44.936147][ T2976] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 44.942100][ T2976]
[ 44.944433][ T2976] Memory state around the buggy address:
[ 44.950088][ T2976] ffff8881258b8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 44.958165][ T2976] ffff8881258b8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 44.966240][ T2976] >ffff8881258b8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 44.974306][ T2976] ^
[ 44.980028][ T2976] ffff8881258b8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 44.988108][ T2976] ffff8881258b8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 44.996187][ T2976] ==================================================================
[ 45.005204][ T2976] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 45.012568][ T2976] CPU: 0 UID: 0 PID: 2976 Comm: v4l_id Not tainted 6.14.0-rc1-syzkaller-g9682c35ff6ec #0
[ 45.022410][ T2976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 45.032525][ T2976] Call Trace:
[ 45.035818][ T2976]
[ 45.038758][ T2976] dump_stack_lvl+0x3d/0x1f0
[ 45.043393][ T2976] panic+0x71d/0x800
[ 45.047347][ T2976] ? __pfx_panic+0x10/0x10
[ 45.052068][ T2976] ? check_panic_on_warn+0x1f/0xb0
[ 45.057248][ T2976] check_panic_on_warn+0xab/0xb0
[ 45.062222][ T2976] end_report+0x117/0x180
[ 45.066602][ T2976] kasan_report+0xe9/0x110
[ 45.071045][ T2976] ? v4l2_fh_init+0x27d/0x2c0
[ 45.075863][ T2976] ? v4l2_fh_init+0x27d/0x2c0
[ 45.080635][ T2976] v4l2_fh_init+0x27d/0x2c0
[ 45.085332][ T2976] v4l2_fh_open+0x83/0xc0
[ 45.089699][ T2976] em28xx_v4l2_open+0x250/0x7e0
[ 45.094619][ T2976] v4l2_open+0x222/0x490
[ 45.098887][ T2976] ? __pfx_v4l2_open+0x10/0x10
[ 45.103678][ T2976] chrdev_open+0x237/0x6a0
[ 45.108232][ T2976] ? __pfx_chrdev_open+0x10/0x10
[ 45.113191][ T2976] ? lockref_get+0x15/0x50
[ 45.117648][ T2976] do_dentry_open+0x6cb/0x1390
[ 45.122455][ T2976] ? __pfx_chrdev_open+0x10/0x10
[ 45.127521][ T2976] ? inode_permission+0xdd/0x5f0
[ 45.132489][ T2976] vfs_open+0x82/0x3f0
[ 45.136604][ T2976] ? may_open+0x1f2/0x400
[ 45.140985][ T2976] path_openat+0x1e88/0x2d80
[ 45.145622][ T2976] ? __pfx_path_openat+0x10/0x10
[ 45.150590][ T2976] ? __pfx___lock_acquire+0x10/0x10
[ 45.155849][ T2976] ? lock_acquire.part.0+0x11b/0x380
[ 45.161145][ T2976] ? find_held_lock+0x2d/0x110
[ 45.165932][ T2976] do_filp_open+0x20c/0x470
[ 45.170457][ T2976] ? __pfx_do_filp_open+0x10/0x10
[ 45.175524][ T2976] ? find_held_lock+0x2d/0x110
[ 45.180340][ T2976] ? alloc_fd+0x41f/0x760
[ 45.184698][ T2976] do_sys_openat2+0x17a/0x1e0
[ 45.189533][ T2976] ? __pfx_do_sys_openat2+0x10/0x10
[ 45.194756][ T2976] ? do_user_addr_fault+0xd97/0x12c0
[ 45.200070][ T2976] ? __pfx_lock_release+0x10/0x10
[ 45.205118][ T2976] __x64_sys_openat+0x175/0x210
[ 45.210135][ T2976] ? __pfx___x64_sys_openat+0x10/0x10
[ 45.215539][ T2976] ? do_user_addr_fault+0x839/0x12c0
[ 45.220886][ T2976] do_syscall_64+0xcd/0x250
[ 45.225426][ T2976] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 45.231361][ T2976] RIP: 0033:0x7ffa7b9299a4
[ 45.235824][ T2976] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[ 45.255453][ T2976] RSP: 002b:00007ffed5ce3640 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 45.263900][ T2976] RAX: ffffffffffffffda RBX: 00007ffed5ce3858 RCX: 00007ffa7b9299a4
[ 45.271911][ T2976] RDX: 0000000000000000 RSI: 00007ffed5ce4f26 RDI: 00000000ffffff9c
[ 45.279899][ T2976] RBP: 00007ffed5ce4f26 R08: 0000000000000000 R09: 0000000000000000
[ 45.287907][ T2976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 45.295908][ T2976] R13: 00007ffed5ce3870 R14: 0000556a3cd4f670 R15: 00007ffa7bd78a80
[ 45.303998][ T2976]
[ 45.307301][ T2976] Kernel Offset: disabled
[ 45.311636][ T2976] Rebooting in 86400 seconds..