Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts.
2025/10/18 17:43:05 parsed 1 programs
[ 64.281704][ T29] audit: type=1400 audit(1760809385.008:61): avc: denied { node_bind } for pid=2966 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 64.302691][ T29] audit: type=1400 audit(1760809385.008:62): avc: denied { module_request } for pid=2966 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 66.950184][ T29] audit: type=1400 audit(1760809387.668:63): avc: denied { mounton } for pid=2977 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 66.974072][ T29] audit: type=1400 audit(1760809387.698:64): avc: denied { mount } for pid=2977 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 66.978047][ T2977] cgroup: Unknown subsys name 'net'
[ 67.004560][ T29] audit: type=1400 audit(1760809387.728:65): avc: denied { unmount } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 67.182883][ T2977] cgroup: Unknown subsys name 'cpuset'
[ 67.192430][ T2977] cgroup: Unknown subsys name 'rlimit'
[ 67.401703][ T29] audit: type=1400 audit(1760809388.128:66): avc: denied { setattr } for pid=2977 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 67.425227][ T29] audit: type=1400 audit(1760809388.128:67): avc: denied { create } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 67.445812][ T29] audit: type=1400 audit(1760809388.128:68): avc: denied { write } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 67.466296][ T29] audit: type=1400 audit(1760809388.128:69): avc: denied { read } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 67.487078][ T29] audit: type=1400 audit(1760809388.168:70): avc: denied { sys_module } for pid=2977 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 67.581572][ T2981] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 67.657656][ T2977] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 69.388206][ T29] kauditd_printk_skb: 10 callbacks suppressed
[ 69.388227][ T29] audit: type=1400 audit(1760809390.108:81): avc: denied { mounton } for pid=2987 comm="syz-executor" path="/root/syzkaller.J7n1vA/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 69.455559][ T29] audit: type=1400 audit(1760809390.158:82): avc: denied { mount } for pid=2987 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 69.477865][ T29] audit: type=1400 audit(1760809390.158:83): avc: denied { mounton } for pid=2987 comm="syz-executor" path="/root/syzkaller.J7n1vA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 69.503495][ T29] audit: type=1400 audit(1760809390.158:84): avc: denied { mount } for pid=2987 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 69.525381][ T29] audit: type=1400 audit(1760809390.158:85): avc: denied { mounton } for pid=2987 comm="syz-executor" path="/root/syzkaller.J7n1vA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 69.552522][ T29] audit: type=1400 audit(1760809390.158:86): avc: denied { mounton } for pid=2987 comm="syz-executor" path="/root/syzkaller.J7n1vA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 69.580258][ T29] audit: type=1400 audit(1760809390.168:87): avc: denied { unmount } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 69.689863][ T29] audit: type=1400 audit(1760809390.188:88): avc: denied { mounton } for pid=2988 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 69.847721][ T2987] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 69.906038][ T29] audit: type=1400 audit(1760809390.628:89): avc: denied { read write } for pid=2987 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 69.930362][ T29] audit: type=1400 audit(1760809390.628:90): avc: denied { open } for pid=2987 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
2025/10/18 17:43:27 executed programs: 0
[ 86.326451][ T29] kauditd_printk_skb: 9 callbacks suppressed
[ 86.326473][ T29] audit: type=1400 audit(1760809407.048:100): avc: denied { write } for pid=2966 comm="syz-execprog" path="pipe:[1652]" dev="pipefs" ino=1652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
2025/10/18 17:44:18 executed programs: 10
[ 137.699876][ T29] audit: type=1400 audit(1760809458.408:101): avc: denied { read write } for pid=5753 comm="syz.6.20" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 137.723953][ T29] audit: type=1400 audit(1760809458.408:102): avc: denied { open } for pid=5753 comm="syz.6.20" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 137.838715][ T29] audit: type=1400 audit(1760809458.488:103): avc: denied { ioctl } for pid=5753 comm="syz.6.20" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 138.010019][ T2500] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 138.139866][ T38] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 138.180039][ T2500] usb 7-1: Using ep0 maxpacket: 32
[ 138.196116][ T2500] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 138.204662][ T2500] usb 7-1: config 0 has no interface number 0
[ 138.219847][ T2500] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 138.239869][ T5766] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 138.260640][ T2500] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 138.269789][ T2500] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 138.277866][ T2500] usb 7-1: Product: syz
[ 138.282129][ T2500] usb 7-1: Manufacturer: syz
[ 138.286781][ T2500] usb 7-1: SerialNumber: syz
[ 138.309848][ T38] usb 3-1: Using ep0 maxpacket: 32
[ 138.316876][ T38] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 138.325226][ T38] usb 3-1: config 0 has no interface number 0
[ 138.332559][ T717] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 138.334553][ T2500] usb 7-1: config 0 descriptor??
[ 138.340541][ T38] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 138.366199][ T38] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 138.375472][ T38] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 138.380008][ T2500] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 138.383587][ T38] usb 3-1: Product: syz
[ 138.393362][ T2500] em28xx 7-1:0.132: Video interface 132 found:
[ 138.397474][ T38] usb 3-1: Manufacturer: syz
[ 138.408277][ T38] usb 3-1: SerialNumber: syz
[ 138.423842][ T38] usb 3-1: config 0 descriptor??
[ 138.430086][ T5766] usb 8-1: Using ep0 maxpacket: 32
[ 138.437134][ T5766] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[ 138.437654][ T38] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 138.445433][ T5766] usb 8-1: config 0 has no interface number 0
[ 138.455372][ T38] em28xx 3-1:0.132: Video interface 132 found:
[ 138.470209][ T3067] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 138.489854][ T5766] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 138.510183][ T717] usb 1-1: Using ep0 maxpacket: 32
[ 138.517641][ T717] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 138.526056][ T717] usb 1-1: config 0 has no interface number 0
[ 138.533039][ T717] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 138.544605][ T5766] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 138.546134][ T717] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 138.553807][ T5766] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 138.553840][ T5766] usb 8-1: Product: syz
[ 138.553862][ T5766] usb 8-1: Manufacturer: syz
[ 138.553885][ T5766] usb 8-1: SerialNumber: syz
[ 138.582838][ T5766] usb 8-1: config 0 descriptor??
[ 138.584700][ T717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 138.597774][ T717] usb 1-1: Product: syz
[ 138.602050][ T717] usb 1-1: Manufacturer: syz
[ 138.606698][ T717] usb 1-1: SerialNumber: syz
[ 138.624649][ T5766] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 138.634582][ T5766] em28xx 8-1:0.132: Video interface 132 found:
[ 138.661543][ T2500] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 138.687282][ T717] usb 1-1: config 0 descriptor??
[ 138.700118][ T3067] usb 5-1: Using ep0 maxpacket: 32
[ 138.709277][ T717] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 138.719162][ T717] em28xx 1-1:0.132: Video interface 132 found:
[ 138.725990][ T38] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 138.734174][ T3067] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 138.742481][ T3067] usb 5-1: config 0 has no interface number 0
[ 138.745598][ T2500] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 138.749289][ T3067] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 138.757559][ T2500] em28xx 7-1:0.132: board has no eeprom
[ 138.771005][ T3067] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 138.782303][ T3067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 138.790441][ T3067] usb 5-1: Product: syz
[ 138.794772][ T3067] usb 5-1: Manufacturer: syz
[ 138.799461][ T3067] usb 5-1: SerialNumber: syz
[ 138.806425][ T38] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 138.815264][ T38] em28xx 3-1:0.132: board has no eeprom
[ 138.829858][ T2500] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 138.837862][ T2500] em28xx 7-1:0.132: analog set to bulk mode.
[ 138.840170][ T3067] usb 5-1: config 0 descriptor??
[ 138.845138][ T9] em28xx 7-1:0.132: Registering V4L2 extension
[ 138.870901][ T3067] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 138.872260][ T2500] usb 7-1: USB disconnect, device number 2
[ 138.882604][ T3067] em28xx 5-1:0.132: Video interface 132 found:
[ 138.892992][ T38] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 138.893015][ T5766] em28xx 8-1:0.132: unknown em28xx chip ID (0)
[ 138.901007][ T38] em28xx 3-1:0.132: analog set to bulk mode.
[ 138.916131][ T2500] em28xx 7-1:0.132: Disconnecting em28xx
[ 138.941348][ T38] usb 3-1: USB disconnect, device number 2
[ 138.959373][ T38] em28xx 3-1:0.132: Disconnecting em28xx
[ 138.982946][ T717] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[ 138.993489][ T5766] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 139.002325][ T5766] em28xx 8-1:0.132: board has no eeprom
[ 139.063792][ T717] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 139.066447][ T9] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 139.072654][ T717] em28xx 1-1:0.132: board has no eeprom
[ 139.085427][ T9] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 139.093366][ T9] em28xx 7-1:0.132: No AC97 audio processor
[ 139.099315][ T5766] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 139.107766][ T5766] em28xx 8-1:0.132: analog set to bulk mode.
[ 139.120247][ T3067] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 139.122562][ T5766] usb 8-1: USB disconnect, device number 2
[ 139.137065][ T9] usb 7-1: Decoder not found
[ 139.139848][ T717] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 139.141763][ T9] em28xx 7-1:0.132: failed to create media graph
[ 139.149549][ T717] em28xx 1-1:0.132: analog set to bulk mode.
[ 139.181467][ T5766] em28xx 8-1:0.132: Disconnecting em28xx
[ 139.185409][ T717] usb 1-1: USB disconnect, device number 2
[ 139.201474][ T717] em28xx 1-1:0.132: Disconnecting em28xx
[ 139.222164][ T3067] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 139.229704][ T9] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 139.231040][ T3067] em28xx 5-1:0.132: board has no eeprom
[ 139.263216][ T9] em28xx 7-1:0.132: Remote control support is not available for this card.
[ 139.272285][ T5772] em28xx 3-1:0.132: Registering V4L2 extension
[ 139.310128][ T3067] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 139.318045][ T3067] em28xx 5-1:0.132: analog set to bulk mode.
[ 139.336672][ T3067] usb 5-1: USB disconnect, device number 2
[ 139.356578][ T3067] em28xx 5-1:0.132: Disconnecting em28xx
[ 139.419467][ T5772] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 139.426695][ T5772] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 139.434441][ T5772] em28xx 3-1:0.132: No AC97 audio processor
[ 139.444184][ T5772] usb 3-1: Decoder not found
[ 139.448834][ T5772] em28xx 3-1:0.132: failed to create media graph
[ 139.466962][ T5772] em28xx 3-1:0.132: V4L2 device video0 deregistered
[ 139.475587][ T5772] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 139.484673][ T5770] em28xx 8-1:0.132: Registering V4L2 extension
[ 139.603664][ T5770] em28xx 8-1:0.132: Config register raw data: 0xffffffed
[ 139.612555][ T5770] em28xx 8-1:0.132: AC97 chip type couldn't be determined
[ 139.619855][ T5770] em28xx 8-1:0.132: No AC97 audio processor
[ 139.627230][ T5770] usb 8-1: Decoder not found
[ 139.631961][ T5770] em28xx 8-1:0.132: failed to create media graph
[ 139.638331][ T5770] em28xx 8-1:0.132: V4L2 device video0 deregistered
[ 139.647032][ T5770] em28xx 8-1:0.132: Remote control support is not available for this card.
[ 139.656155][ T5779] em28xx 1-1:0.132: Registering V4L2 extension
[ 139.757545][ T5779] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[ 139.764701][ T5779] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[ 139.772747][ T5779] em28xx 1-1:0.132: No AC97 audio processor
[ 139.781388][ T5779] usb 1-1: Decoder not found
[ 139.786035][ T5779] em28xx 1-1:0.132: failed to create media graph
[ 139.792545][ T5779] em28xx 1-1:0.132: V4L2 device video0 deregistered
[ 139.800689][ T5779] em28xx 1-1:0.132: Remote control support is not available for this card.
[ 139.809417][ T717] em28xx 1-1:0.132: Closing input extension
[ 139.815927][ T2500] em28xx 7-1:0.132: Closing input extension
[ 139.822023][ T717] em28xx 1-1:0.132: Freeing device
[ 139.826502][ T2500] em28xx 7-1:0.132: Freeing device
[ 139.827334][ T5784] em28xx 5-1:0.132: Registering V4L2 extension
[ 139.977400][ T5784] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 139.985596][ T5784] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 139.993515][ T5784] em28xx 5-1:0.132: No AC97 audio processor
[ 140.001626][ T5784] usb 5-1: Decoder not found
[ 140.006280][ T5784] em28xx 5-1:0.132: failed to create media graph
[ 140.014459][ T5784] em28xx 5-1:0.132: V4L2 device video0 deregistered
[ 140.022599][ T5784] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 140.035183][ T38] em28xx 3-1:0.132: Closing input extension
[ 140.041250][ T5766] em28xx 8-1:0.132: Closing input extension
[ 140.044779][ T38] em28xx 3-1:0.132: Freeing device
[ 140.051295][ T5766] em28xx 8-1:0.132: Freeing device
[ 140.052546][ T3067] em28xx 5-1:0.132: Closing input extension
[ 140.071650][ T3067] em28xx 5-1:0.132: Freeing device
[ 140.140484][ T717] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 140.150324][ T2500] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 140.290416][ T717] usb 1-1: Using ep0 maxpacket: 32
[ 140.297548][ T717] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 140.306303][ T717] usb 1-1: config 0 has no interface number 0
[ 140.316868][ T717] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 140.319820][ T2500] usb 7-1: Using ep0 maxpacket: 32
[ 140.330893][ T717] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 140.341116][ T717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 140.349250][ T717] usb 1-1: Product: syz
[ 140.353515][ T717] usb 1-1: Manufacturer: syz
[ 140.358151][ T717] usb 1-1: SerialNumber: syz
[ 140.358786][ T2500] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 140.371069][ T2500] usb 7-1: config 0 has no interface number 0
[ 140.377363][ T5766] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 140.380158][ T3067] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 140.388238][ T2500] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 140.394416][ T717] usb 1-1: config 0 descriptor??
[ 140.415643][ T2500] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 140.419859][ T38] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 140.424898][ T2500] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 140.440335][ T2500] usb 7-1: Product: syz
[ 140.441431][ T717] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 140.444526][ T2500] usb 7-1: Manufacturer: syz
[ 140.444553][ T2500] usb 7-1: SerialNumber: syz
[ 140.454331][ T717] em28xx 1-1:0.132: Video interface 132 found:
[ 140.474112][ T2500] usb 7-1: config 0 descriptor??
[ 140.488773][ T2500] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 140.498743][ T2500] em28xx 7-1:0.132: Video interface 132 found:
[ 140.570178][ T3067] usb 5-1: Using ep0 maxpacket: 32
[ 140.573324][ T5766] usb 8-1: Using ep0 maxpacket: 32
[ 140.578354][ T3067] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 140.583535][ T5766] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[ 140.588987][ T3067] usb 5-1: config 0 has no interface number 0
[ 140.597289][ T5766] usb 8-1: config 0 has no interface number 0
[ 140.603527][ T3067] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 140.610745][ T5766] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 140.622959][ T3067] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 140.632560][ T5766] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 140.638628][ T3067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 140.647816][ T5766] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 140.655828][ T3067] usb 5-1: Product: syz
[ 140.663892][ T5766] usb 8-1: Product: syz
[ 140.668050][ T3067] usb 5-1: Manufacturer: syz
[ 140.672326][ T5766] usb 8-1: Manufacturer: syz
[ 140.672349][ T5766] usb 8-1: SerialNumber: syz
[ 140.677593][ T5766] usb 8-1: config 0 descriptor??
[ 140.681752][ T3067] usb 5-1: SerialNumber: syz
[ 140.696818][ T38] usb 3-1: Using ep0 maxpacket: 32
[ 140.698819][ T5766] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 140.711996][ T5766] em28xx 8-1:0.132: Video interface 132 found:
[ 140.720203][ T38] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 140.728428][ T38] usb 3-1: config 0 has no interface number 0
[ 140.734732][ T38] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 140.750890][ T38] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 140.760316][ T38] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 140.768398][ T38] usb 3-1: Product: syz
[ 140.770369][ T2500] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 140.772904][ T38] usb 3-1: Manufacturer: syz
[ 140.783485][ T38] usb 3-1: SerialNumber: syz
[ 140.788538][ T717] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[ 140.797838][ T3067] usb 5-1: config 0 descriptor??
[ 140.808503][ T3067] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 140.818459][ T3067] em28xx 5-1:0.132: Video interface 132 found:
[ 140.827576][ T38] usb 3-1: config 0 descriptor??
[ 140.838021][ T38] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 140.843840][ T2500] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 140.847980][ T38] em28xx 3-1:0.132: Video interface 132 found:
[ 140.856905][ T2500] em28xx 7-1:0.132: board has no eeprom
[ 140.865848][ T717] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 140.877475][ T717] em28xx 1-1:0.132: board has no eeprom
[ 140.929860][ T2500] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 140.937809][ T2500] em28xx 7-1:0.132: analog set to bulk mode.
[ 140.944502][ T5770] em28xx 7-1:0.132: Registering V4L2 extension
[ 140.949843][ T717] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 140.951999][ T5766] em28xx 8-1:0.132: unknown em28xx chip ID (0)
[ 140.958704][ T717] em28xx 1-1:0.132: analog set to bulk mode.
[ 140.976800][ T2500] usb 7-1: USB disconnect, device number 3
[ 140.987571][ T2500] em28xx 7-1:0.132: Disconnecting em28xx
[ 140.998477][ T717] usb 1-1: USB disconnect, device number 3
[ 141.026065][ T717] em28xx 1-1:0.132: Disconnecting em28xx
[ 141.047742][ T5766] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 141.057259][ T5766] em28xx 8-1:0.132: board has no eeprom
[ 141.092573][ T3067] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 141.099422][ T38] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 141.126918][ T5766] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 141.134853][ T5766] em28xx 8-1:0.132: analog set to bulk mode.
[ 141.141583][ T5770] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 141.148680][ T5770] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 141.156325][ T5770] em28xx 7-1:0.132: No AC97 audio processor
[ 141.172009][ T5766] usb 8-1: USB disconnect, device number 3
[ 141.183205][ T5766] em28xx 8-1:0.132: Disconnecting em28xx
[ 141.184190][ T3067] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 141.191298][ T5770] usb 7-1: Decoder not found
[ 141.199211][ T3067] em28xx 5-1:0.132: board has no eeprom
[ 141.203104][ T5770] em28xx 7-1:0.132: failed to create media graph
[ 141.203741][ T5770] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 141.210034][ T38] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 141.227618][ T5770] em28xx 7-1:0.132: Remote control support is not available for this card.
[ 141.230997][ T38] em28xx 3-1:0.132: board has no eeprom
[ 141.245922][ T5784] em28xx 1-1:0.132: Registering V4L2 extension
[ 141.291523][ T38] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 141.299540][ T38] em28xx 3-1:0.132: analog set to bulk mode.
[ 141.307814][ T3067] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 141.315817][ T3067] em28xx 5-1:0.132: analog set to bulk mode.
[ 141.343142][ T3067] usb 5-1: USB disconnect, device number 3
[ 141.353521][ T3067] em28xx 5-1:0.132: Disconnecting em28xx
[ 141.368735][ T38] usb 3-1: USB disconnect, device number 3
[ 141.376874][ T38] em28xx 3-1:0.132: Disconnecting em28xx
[ 141.425900][ T5784] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[ 141.434836][ T5784] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[ 141.442082][ T5784] em28xx 1-1:0.132: No AC97 audio processor
[ 141.466011][ T5784] usb 1-1: Decoder not found
[ 141.470784][ T5784] em28xx 1-1:0.132: failed to create media graph
[ 141.477176][ T5784] em28xx 1-1:0.132: V4L2 device video0 deregistered
[ 141.489083][ T5784] em28xx 1-1:0.132: Remote control support is not available for this card.
[ 141.497804][ T717] em28xx 1-1:0.132: Closing input extension
[ 141.504215][ T9] em28xx 8-1:0.132: Registering V4L2 extension
[ 141.506883][ T717] em28xx 1-1:0.132: Freeing device
[ 141.656650][ T9] em28xx 8-1:0.132: Config register raw data: 0xffffffed
[ 141.663798][ T9] em28xx 8-1:0.132: AC97 chip type couldn't be determined
[ 141.671891][ T9] em28xx 8-1:0.132: No AC97 audio processor
[ 141.679359][ T9] usb 8-1: Decoder not found
[ 141.684146][ T9] em28xx 8-1:0.132: failed to create media graph
[ 141.696884][ T9] em28xx 8-1:0.132: V4L2 device video0 deregistered
[ 141.705374][ T9] em28xx 8-1:0.132: Remote control support is not available for this card.
[ 141.714168][ T2500] em28xx 7-1:0.132: Closing input extension
[ 141.720242][ T5779] em28xx 3-1:0.132: Registering V4L2 extension
[ 141.722816][ T2500] em28xx 7-1:0.132: Freeing device
[ 141.819859][ T717] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 141.876882][ T5779] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 141.884059][ T5779] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 141.891269][ T5779] em28xx 3-1:0.132: No AC97 audio processor
[ 141.909252][ T5779] usb 3-1: Decoder not found
[ 141.913956][ T5779] em28xx 3-1:0.132: failed to create media graph
[ 141.922882][ T5779] em28xx 3-1:0.132: V4L2 device video0 deregistered
[ 141.930947][ T5779] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 141.931203][ T5825] ==================================================================
[ 141.939638][ T5772] em28xx 5-1:0.132: Registering V4L2 extension
[ 141.947657][ T5825] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 141.947720][ T5825] Read of size 8 at addr ffff88811d1fc738 by task v4l_id/5825
[ 141.947743][ T5825]
[ 141.947778][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary)
[ 141.947818][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 141.947848][ T5825] Call Trace:
[ 141.947863][ T5825]
[ 141.947878][ T5825] dump_stack_lvl+0x116/0x1f0
[ 141.947942][ T5825] print_report+0xcd/0x630
[ 141.947991][ T5825] ? __virt_addr_valid+0x81/0x610
[ 141.948044][ T5825] ? __phys_addr+0xe8/0x180
[ 141.948095][ T5825] ? v4l2_fh_init+0x27d/0x2c0
[ 141.948140][ T5825] kasan_report+0xe0/0x110
[ 141.948188][ T5825] ? v4l2_fh_init+0x27d/0x2c0
[ 141.948242][ T5825] v4l2_fh_init+0x27d/0x2c0
[ 141.948292][ T5825] v4l2_fh_open+0x64/0xa0
[ 141.948340][ T5825] em28xx_v4l2_open+0x24e/0x7e0
[ 141.948387][ T5825] v4l2_open+0x1d2/0x5e0
[ 141.948431][ T5825] ? __pfx_v4l2_open+0x10/0x10
[ 141.948474][ T5825] chrdev_open+0x234/0x6a0
[ 141.948511][ T5825] ? __pfx_chrdev_open+0x10/0x10
[ 141.948554][ T5825] do_dentry_open+0x6da/0x13a0
[ 141.948587][ T5825] ? __pfx_chrdev_open+0x10/0x10
[ 141.948625][ T5825] ? inode_permission+0x156/0x630
[ 141.948672][ T5825] vfs_open+0x82/0x3f0
[ 141.948711][ T5825] ? may_open+0x1f2/0x400
[ 141.948761][ T5825] path_openat+0x1de4/0x2cb0
[ 141.948810][ T5825] ? __pfx_path_openat+0x10/0x10
[ 141.948850][ T5825] ? __lock_acquire+0xb8a/0x1c90
[ 141.948894][ T5825] do_filp_open+0x20b/0x470
[ 141.948929][ T5825] ? __pfx_do_filp_open+0x10/0x10
[ 141.948980][ T5825] ? alloc_fd+0x420/0x760
[ 141.949018][ T5825] do_sys_openat2+0x11b/0x1d0
[ 141.949062][ T5825] ? __pfx_do_sys_openat2+0x10/0x10
[ 141.949105][ T5825] ? find_held_lock+0x2b/0x80
[ 141.949157][ T5825] ? handle_mm_fault+0x2ab/0xd10
[ 141.949207][ T5825] __x64_sys_openat+0x174/0x210
[ 141.949252][ T5825] ? __pfx___x64_sys_openat+0x10/0x10
[ 141.949303][ T5825] ? do_user_addr_fault+0x83f/0x1240
[ 141.949352][ T5825] do_syscall_64+0xcd/0x4d0
[ 141.949408][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.949444][ T5825] RIP: 0033:0x7efd71349407
[ 141.949479][ T5825] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 141.949518][ T5825] RSP: 002b:00007ffd899e6280 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 141.949550][ T5825] RAX: ffffffffffffffda RBX: 00007efd7125b880 RCX: 00007efd71349407
[ 141.949573][ T5825] RDX: 0000000000000000 RSI: 00007ffd899e6f24 RDI: ffffffffffffff9c
[ 141.949596][ T5825] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 141.949617][ T5825] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 141.949637][ T5825] R13: 00007ffd899e64d0 R14: 00007efd71adf000 R15: 000055f8d0fd44d8
[ 141.949672][ T5825]
[ 141.949683][ T5825]
[ 142.039908][ T717] usb 1-1: Using ep0 maxpacket: 32
[ 142.043232][ T5825] Allocated by task 5779:
[ 142.061043][ T717] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 142.061623][ T5825] kasan_save_stack+0x33/0x60
[ 142.066412][ T717] usb 1-1: config 0 has no interface number 0
[ 142.071345][ T5825] kasan_save_track+0x14/0x30
[ 142.071384][ T5825] __kasan_kmalloc+0x8f/0xa0
[ 142.071418][ T5825] em28xx_v4l2_init+0x114/0x4080
[ 142.077583][ T717] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 142.080522][ T5825] em28xx_init_extension+0x13a/0x200
[ 142.080574][ T5825] request_module_async+0x61/0x70
[ 142.087217][ T717] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 142.089482][ T5825] process_one_work+0x9cf/0x1b70
[ 142.094551][ T717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 142.099365][ T5825] worker_thread+0x6c8/0xf10
[ 142.103946][ T717] usb 1-1: Product: syz
[ 142.108923][ T5825] kthread+0x3c5/0x780
[ 142.113288][ T717] usb 1-1: Manufacturer: syz
[ 142.117948][ T5825] ret_from_fork+0x56d/0x700
[ 142.123176][ T717] usb 1-1: SerialNumber: syz
[ 142.127819][ T5825] ret_from_fork_asm+0x1a/0x30
[ 142.138687][ T717] usb 1-1: config 0 descriptor??
[ 142.143022][ T5825]
[ 142.143032][ T5825] Freed by task 5779:
[ 142.143047][ T5825] kasan_save_stack+0x33/0x60
[ 142.143086][ T5825] kasan_save_track+0x14/0x30
[ 142.143120][ T5825] __kasan_save_free_info+0x3b/0x60
[ 142.155442][ T717] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 142.158854][ T5825] __kasan_slab_free+0x43/0x70
[ 142.163353][ T717] em28xx 1-1:0.132: Video interface 132 found:
[ 142.183071][ T5825] kfree+0x288/0x670
[ 142.183115][ T5825] em28xx_v4l2_init+0x22b5/0x4080
[ 142.242954][ T5772] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 142.246605][ T5825] em28xx_init_extension+0x13a/0x200
[ 142.254944][ T5772] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 142.259481][ T5825] request_module_async+0x61/0x70
[ 142.265788][ T5772] em28xx 5-1:0.132: No AC97 audio processor
[ 142.270377][ T5825] process_one_work+0x9cf/0x1b70
[ 142.270429][ T5825] worker_thread+0x6c8/0xf10
[ 142.280152][ T5772] usb 5-1: Decoder not found
[ 142.289958][ T5825] kthread+0x3c5/0x780
[ 142.290005][ T5825] ret_from_fork+0x56d/0x700
[ 142.290031][ T5825] ret_from_fork_asm+0x1a/0x30
[ 142.295364][ T5772] em28xx 5-1:0.132: failed to create media graph
[ 142.300353][ T5825]
[ 142.300363][ T5825] The buggy address belongs to the object at ffff88811d1fc000
[ 142.300363][ T5825] which belongs to the cache kmalloc-8k of size 8192
[ 142.300386][ T5825] The buggy address is located 1848 bytes inside of
[ 142.300386][ T5825] freed 8192-byte region [ffff88811d1fc000, ffff88811d1fe000)
[ 142.300417][ T5825]
[ 142.300424][ T5825] The buggy address belongs to the physical page:
[ 142.300454][ T5825] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d1f8
[ 142.300489][ T5825] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 142.312006][ T5772] em28xx 5-1:0.132: V4L2 device video1 deregistered
[ 142.314455][ T5825] anon flags: 0x200000000000040(head|node=0|zone=2)
[ 142.326318][ T5772] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 142.327070][ T5825] page_type: f5(slab)
[ 142.327100][ T5825] raw: 0200000000000040 ffff888100042280 0000000000000000 0000000000000001
[ 142.332510][ T3067] em28xx 5-1:0.132: Closing input extension
[ 142.335347][ T5825] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 142.335379][ T5825] head: 0200000000000040 ffff888100042280 0000000000000000 0000000000000001
[ 142.346398][ T3067] em28xx 5-1:0.132: Freeing device
[ 142.349176][ T5825] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 142.349208][ T5825] head: 0200000000000003 ffffea0004747e01 00000000ffffffff 00000000ffffffff
[ 142.610213][ T5825] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 142.618898][ T5825] page dumped because: kasan: bad access detected
[ 142.625321][ T5825] page_owner tracks the page as allocated
[ 142.631046][ T5825] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3050, tgid 3050 (syz-executor), ts 71764313404, free_ts 71609626168
[ 142.652542][ T5825] post_alloc_hook+0x1c0/0x230
[ 142.657339][ T5825] get_page_from_freelist+0x1003/0x2dc0
[ 142.662910][ T5825] __alloc_frozen_pages_noprof+0x259/0x21f0
[ 142.668833][ T5825] alloc_pages_mpol+0xe4/0x410
[ 142.673660][ T5825] new_slab+0x24a/0x360
[ 142.677847][ T5825] ___slab_alloc+0xdb7/0x1a70
[ 142.682553][ T5825] __slab_alloc.constprop.0+0x63/0x110
[ 142.688302][ T5825] __kmalloc_cache_noprof+0x3c8/0x750
[ 142.693715][ T5825] ipv4_sysctl_init_net+0x16d/0x350
[ 142.698954][ T5825] ops_init+0x1e2/0x5f0
[ 142.703140][ T5825] setup_net+0x100/0x390
[ 142.707400][ T5825] copy_net_ns+0x2f8/0x690
[ 142.711840][ T5825] create_new_namespaces+0x3ea/0xa90
[ 142.717148][ T5825] unshare_nsproxy_namespaces+0xc0/0x1f0
[ 142.722806][ T5825] ksys_unshare+0x45b/0xa40
[ 142.727333][ T5825] __x64_sys_unshare+0x31/0x40
[ 142.732123][ T5825] page last free pid 2857 tgid 2857 stack trace:
[ 142.738460][ T5825] __free_frozen_pages+0x78f/0x1000
[ 142.743684][ T5825] __put_partials+0x130/0x170
[ 142.748401][ T5825] qlist_free_all+0x4d/0x120
[ 142.753019][ T5825] kasan_quarantine_reduce+0x195/0x1e0
[ 142.758506][ T5825] __kasan_slab_alloc+0x4e/0x70
[ 142.763419][ T5825] kmem_cache_alloc_noprof+0x260/0x6c0
[ 142.768948][ T5825] getname_flags.part.0+0x4c/0x550
[ 142.774089][ T5825] getname_flags+0x93/0xf0
[ 142.778556][ T5825] do_readlinkat+0xb4/0x3a0
[ 142.783103][ T5825] __x64_sys_readlink+0x78/0xc0
[ 142.787989][ T5825] do_syscall_64+0xcd/0x4d0
[ 142.792524][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.798465][ T5825]
[ 142.800799][ T5825] Memory state around the buggy address:
[ 142.806468][ T5825] ffff88811d1fc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 142.814540][ T5825] ffff88811d1fc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 142.822614][ T5825] >ffff88811d1fc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 142.830690][ T5825] ^
[ 142.836590][ T5825] ffff88811d1fc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 142.844725][ T5825] ffff88811d1fc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 142.852794][ T5825] ==================================================================
[ 142.861228][ T5825] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 142.868469][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary)
[ 142.877884][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 142.887967][ T5825] Call Trace:
[ 142.891279][ T5825]
[ 142.894243][ T5825] dump_stack_lvl+0x3d/0x1f0
[ 142.898893][ T5825] vpanic+0x640/0x6f0
[ 142.902933][ T5825] panic+0xca/0xd0
[ 142.906710][ T5825] ? __pfx_panic+0x10/0x10
[ 142.911185][ T5825] ? check_panic_on_warn+0x1f/0xb0
[ 142.916362][ T5825] check_panic_on_warn+0xab/0xb0
[ 142.921359][ T5825] end_report+0x107/0x170
[ 142.925734][ T5825] kasan_report+0xee/0x110
[ 142.930186][ T5825] ? v4l2_fh_init+0x27d/0x2c0
[ 142.934903][ T5825] v4l2_fh_init+0x27d/0x2c0
[ 142.939439][ T5825] v4l2_fh_open+0x64/0xa0
[ 142.943890][ T5825] em28xx_v4l2_open+0x24e/0x7e0
[ 142.948772][ T5825] v4l2_open+0x1d2/0x5e0
[ 142.953044][ T5825] ? __pfx_v4l2_open+0x10/0x10
[ 142.957838][ T5825] chrdev_open+0x234/0x6a0
[ 142.962281][ T5825] ? __pfx_chrdev_open+0x10/0x10
[ 142.967247][ T5825] do_dentry_open+0x6da/0x13a0
[ 142.972034][ T5825] ? __pfx_chrdev_open+0x10/0x10
[ 142.977005][ T5825] ? inode_permission+0x156/0x630
[ 142.982075][ T5825] vfs_open+0x82/0x3f0
[ 142.986173][ T5825] ? may_open+0x1f2/0x400
[ 142.990539][ T5825] path_openat+0x1de4/0x2cb0
[ 142.995245][ T5825] ? __pfx_path_openat+0x10/0x10
[ 143.000204][ T5825] ? __lock_acquire+0xb8a/0x1c90
[ 143.005171][ T5825] do_filp_open+0x20b/0x470
[ 143.009697][ T5825] ? __pfx_do_filp_open+0x10/0x10
[ 143.014796][ T5825] ? alloc_fd+0x420/0x760
[ 143.019151][ T5825] do_sys_openat2+0x11b/0x1d0
[ 143.023858][ T5825] ? __pfx_do_sys_openat2+0x10/0x10
[ 143.029091][ T5825] ? find_held_lock+0x2b/0x80
[ 143.033821][ T5825] ? handle_mm_fault+0x2ab/0xd10
[ 143.038806][ T5825] __x64_sys_openat+0x174/0x210
[ 143.043789][ T5825] ? __pfx___x64_sys_openat+0x10/0x10
[ 143.049209][ T5825] ? do_user_addr_fault+0x83f/0x1240
[ 143.054527][ T5825] do_syscall_64+0xcd/0x4d0
[ 143.059071][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.064993][ T5825] RIP: 0033:0x7efd71349407
[ 143.069515][ T5825] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 143.089160][ T5825] RSP: 002b:00007ffd899e6280 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 143.097623][ T5825] RAX: ffffffffffffffda RBX: 00007efd7125b880 RCX: 00007efd71349407
[ 143.105657][ T5825] RDX: 0000000000000000 RSI: 00007ffd899e6f24 RDI: ffffffffffffff9c
[ 143.113667][ T5825] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 143.121667][ T5825] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 143.129655][ T5825] R13: 00007ffd899e64d0 R14: 00007efd71adf000 R15: 000055f8d0fd44d8
[ 143.137657][ T5825]
[ 143.140951][ T5825] Kernel Offset: disabled
[ 143.145309][ T5825] Rebooting in 86400 seconds..