Warning: Permanently added '10.128.1.226' (ED25519) to the list of known hosts.
2025/07/11 10:31:03 ignoring optional flag "sandboxArg"="0"
2025/07/11 10:31:04 parsed 1 programs
[ 49.968946][ T29] audit: type=1400 audit(1752229864.864:61): avc: denied { node_bind } for pid=2952 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 52.590321][ T29] audit: type=1400 audit(1752229867.484:62): avc: denied { mounton } for pid=2961 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 52.596880][ T2961] cgroup: Unknown subsys name 'net'
[ 52.613175][ T29] audit: type=1400 audit(1752229867.494:63): avc: denied { mount } for pid=2961 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 52.640810][ T29] audit: type=1400 audit(1752229867.514:64): avc: denied { unmount } for pid=2961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 52.765247][ T2961] cgroup: Unknown subsys name 'cpuset'
[ 52.774676][ T2961] cgroup: Unknown subsys name 'rlimit'
[ 53.011448][ T29] audit: type=1400 audit(1752229867.904:65): avc: denied { setattr } for pid=2961 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 53.035113][ T29] audit: type=1400 audit(1752229867.914:66): avc: denied { create } for pid=2961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 53.055801][ T29] audit: type=1400 audit(1752229867.914:67): avc: denied { write } for pid=2961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 53.076393][ T29] audit: type=1400 audit(1752229867.914:68): avc: denied { read } for pid=2961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 53.096788][ T29] audit: type=1400 audit(1752229867.914:69): avc: denied { module_request } for pid=2961 comm="syz-executor" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 53.119483][ T29] audit: type=1400 audit(1752229867.964:70): avc: denied { sys_module } for pid=2961 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 53.196756][ T2965] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 53.236117][ T2961] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 55.074870][ T29] kauditd_printk_skb: 10 callbacks suppressed
[ 55.074893][ T29] audit: type=1400 audit(1752229869.974:81): avc: denied { mounton } for pid=2972 comm="syz-executor" path="/root/syzkaller.MntUyP/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 55.134878][ T29] audit: type=1400 audit(1752229870.004:82): avc: denied { mount } for pid=2972 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 55.157162][ T29] audit: type=1400 audit(1752229870.004:83): avc: denied { mounton } for pid=2972 comm="syz-executor" path="/root/syzkaller.MntUyP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 55.182768][ T29] audit: type=1400 audit(1752229870.004:84): avc: denied { mount } for pid=2972 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 55.205111][ T29] audit: type=1400 audit(1752229870.004:85): avc: denied { mounton } for pid=2972 comm="syz-executor" path="/root/syzkaller.MntUyP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 55.231861][ T29] audit: type=1400 audit(1752229870.014:86): avc: denied { create } for pid=2976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 55.252012][ T29] audit: type=1400 audit(1752229870.014:87): avc: denied { mounton } for pid=2969 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 55.274841][ T29] audit: type=1400 audit(1752229870.014:88): avc: denied { create } for pid=2974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 55.295499][ T29] audit: type=1400 audit(1752229870.014:89): avc: denied { write } for pid=2974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 55.316065][ T29] audit: type=1400 audit(1752229870.014:90): avc: denied { read } for pid=2974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 55.609414][ T2972] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
2025/07/11 10:31:28 executed programs: 0
[ 73.803949][ T29] kauditd_printk_skb: 9 callbacks suppressed
[ 73.803973][ T29] audit: type=1400 audit(1752229888.704:100): avc: denied { write } for pid=2952 comm="syz-execprog" path="pipe:[2424]" dev="pipefs" ino=2424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 74.068609][ T3012] syz-executor (3012) used greatest stack depth: 22568 bytes left
2025/07/11 10:32:24 executed programs: 10
[ 129.393010][ T29] audit: type=1400 audit(1752229944.284:101): avc: denied { read write } for pid=5798 comm="syz.7.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 129.416538][ T29] audit: type=1400 audit(1752229944.284:102): avc: denied { open } for pid=5798 comm="syz.7.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 129.480564][ T29] audit: type=1400 audit(1752229944.334:103): avc: denied { ioctl } for pid=5798 comm="syz.7.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 129.704916][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 129.772409][ T923] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 129.904111][ T9] usb 8-1: Using ep0 maxpacket: 32
[ 129.913568][ T9] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[ 129.922116][ T9] usb 8-1: config 0 has no interface number 0
[ 129.928822][ T923] usb 4-1: Using ep0 maxpacket: 32
[ 129.934785][ T9] usb 8-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 129.946780][ T923] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 129.955142][ T923] usb 4-1: config 0 has no interface number 0
[ 129.961561][ T923] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 129.973667][ T9] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 129.982884][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 129.990917][ T9] usb 8-1: Product: syz
[ 129.995204][ T9] usb 8-1: Manufacturer: syz
[ 129.999876][ T9] usb 8-1: SerialNumber: syz
[ 130.006154][ T923] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 130.015284][ T923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 130.023370][ T923] usb 4-1: Product: syz
[ 130.027578][ T923] usb 4-1: Manufacturer: syz
[ 130.032337][ T923] usb 4-1: SerialNumber: syz
[ 130.041127][ T9] usb 8-1: config 0 descriptor??
[ 130.050747][ T923] usb 4-1: config 0 descriptor??
[ 130.051331][ T5798] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 130.063458][ T5801] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 130.072645][ T9] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 130.083040][ T9] em28xx 8-1:0.132: Video interface 132 found: bulk
[ 130.094697][ T923] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 130.104591][ T923] em28xx 4-1:0.132: Video interface 132 found: bulk
[ 130.111309][ T5817] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 130.119305][ T5806] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 130.132431][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 130.272453][ T5817] usb 5-1: Using ep0 maxpacket: 32
[ 130.277851][ T5806] usb 3-1: Using ep0 maxpacket: 32
[ 130.286346][ T5817] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 130.293523][ T23] usb 7-1: Using ep0 maxpacket: 32
[ 130.294763][ T5817] usb 5-1: config 0 has no interface number 0
[ 130.303604][ T23] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 130.306728][ T5817] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 130.314746][ T23] usb 7-1: config 0 has no interface number 0
[ 130.315001][ T23] usb 7-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 130.324992][ T5806] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 130.325029][ T5806] usb 3-1: config 0 has no interface number 0
[ 130.325089][ T5806] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 130.329066][ T5806] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 130.334338][ T23] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 130.341553][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 130.349653][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 130.355780][ T5806] usb 3-1: Product: syz
[ 130.365787][ T23] usb 7-1: Product: syz
[ 130.365815][ T23] usb 7-1: Manufacturer: syz
[ 130.375162][ T5806] usb 3-1: Manufacturer: syz
[ 130.384324][ T23] usb 7-1: SerialNumber: syz
[ 130.392357][ T5806] usb 3-1: SerialNumber: syz
[ 130.411648][ T23] usb 7-1: config 0 descriptor??
[ 130.414381][ T923] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[ 130.420656][ T5816] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[ 130.423550][ T9] em28xx 8-1:0.132: unknown em28xx chip ID (0)
[ 130.435528][ T23] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 130.439296][ T5817] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 130.446970][ T23] em28xx 7-1:0.132: Video interface 132 found: bulk
[ 130.452475][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 130.452527][ T5817] usb 5-1: Product: syz
[ 130.452550][ T5817] usb 5-1: Manufacturer: syz
[ 130.452574][ T5817] usb 5-1: SerialNumber: syz
[ 130.457075][ T5817] usb 5-1: config 0 descriptor??
[ 130.511474][ T5806] usb 3-1: config 0 descriptor??
[ 130.518588][ T923] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 130.527617][ T923] em28xx 4-1:0.132: board has no eeprom
[ 130.533513][ T9] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 130.542337][ T9] em28xx 8-1:0.132: board has no eeprom
[ 130.548581][ T5815] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 130.549607][ T5818] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 130.567115][ T5806] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 130.576996][ T5806] em28xx 3-1:0.132: Video interface 132 found: bulk
[ 130.587864][ T5817] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 130.597735][ T5817] em28xx 5-1:0.132: Video interface 132 found: bulk
[ 130.604626][ T9] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 130.612577][ T9] em28xx 8-1:0.132: analog set to bulk mode.
[ 130.619198][ T5819] em28xx 8-1:0.132: Registering V4L2 extension
[ 130.625724][ T923] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 130.633664][ T923] em28xx 4-1:0.132: analog set to bulk mode.
[ 130.669748][ T9] usb 8-1: USB disconnect, device number 2
[ 130.676061][ T923] usb 4-1: USB disconnect, device number 2
[ 130.683430][ T23] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 130.695141][ T923] em28xx 4-1:0.132: Disconnecting em28xx
[ 130.703830][ T9] em28xx 8-1:0.132: Disconnecting em28xx
[ 130.755068][ T23] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 130.764675][ T23] em28xx 7-1:0.132: board has no eeprom
[ 130.822927][ T5806] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 130.836725][ T5817] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 130.856500][ T23] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 130.864552][ T23] em28xx 7-1:0.132: analog set to bulk mode.
[ 130.905264][ T5806] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 130.914825][ T5806] em28xx 3-1:0.132: board has no eeprom
[ 130.924358][ T5817] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 130.929358][ T23] usb 7-1: USB disconnect, device number 2
[ 130.933294][ T5817] em28xx 5-1:0.132: board has no eeprom
[ 130.959080][ T5819] em28xx 8-1:0.132: Config register raw data: 0xffffffed
[ 130.960500][ T23] em28xx 7-1:0.132: Disconnecting em28xx
[ 130.966441][ T5819] em28xx 8-1:0.132: AC97 chip type couldn't be determined
[ 130.979744][ T5819] em28xx 8-1:0.132: No AC97 audio processor
[ 130.990365][ T5819] usb 8-1: Decoder not found
[ 130.995162][ T5819] em28xx 8-1:0.132: failed to create media graph
[ 131.001750][ T5806] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 131.010249][ T5806] em28xx 3-1:0.132: analog set to bulk mode.
[ 131.017055][ T5817] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 131.024976][ T5817] em28xx 5-1:0.132: analog set to bulk mode.
[ 131.031409][ T5819] em28xx 8-1:0.132: V4L2 device video0 deregistered
[ 131.048311][ T5819] em28xx 8-1:0.132: Remote control support is not available for this card.
[ 131.057393][ T10] em28xx 4-1:0.132: Registering V4L2 extension
[ 131.064104][ T5817] usb 5-1: USB disconnect, device number 2
[ 131.071839][ T5817] em28xx 5-1:0.132: Disconnecting em28xx
[ 131.083339][ T5806] usb 3-1: USB disconnect, device number 2
[ 131.102767][ T5806] em28xx 3-1:0.132: Disconnecting em28xx
[ 131.219230][ T10] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[ 131.226479][ T10] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[ 131.234162][ T10] em28xx 4-1:0.132: No AC97 audio processor
[ 131.243275][ T10] usb 4-1: Decoder not found
[ 131.247941][ T10] em28xx 4-1:0.132: failed to create media graph
[ 131.254418][ T10] em28xx 4-1:0.132: V4L2 device video0 deregistered
[ 131.262760][ T10] em28xx 4-1:0.132: Remote control support is not available for this card.
[ 131.271462][ T3011] em28xx 7-1:0.132: Registering V4L2 extension
[ 131.421098][ T3011] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 131.428532][ T3011] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 131.435815][ T3011] em28xx 7-1:0.132: No AC97 audio processor
[ 131.443547][ T3011] usb 7-1: Decoder not found
[ 131.448199][ T3011] em28xx 7-1:0.132: failed to create media graph
[ 131.454656][ T3011] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 131.462856][ T3011] em28xx 7-1:0.132: Remote control support is not available for this card.
[ 131.471564][ T23] em28xx 7-1:0.132: Closing input extension
[ 131.478062][ T5826] em28xx 3-1:0.132: Registering V4L2 extension
[ 131.484283][ T23] em28xx 7-1:0.132: Freeing device
[ 131.589199][ T5826] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 131.596337][ T5826] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 131.603535][ T5826] em28xx 3-1:0.132: No AC97 audio processor
[ 131.611292][ T5826] usb 3-1: Decoder not found
[ 131.616050][ T5826] em28xx 3-1:0.132: failed to create media graph
[ 131.629261][ T5826] em28xx 3-1:0.132: V4L2 device video0 deregistered
[ 131.637616][ T5826] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 131.646581][ T5823] em28xx 5-1:0.132: Registering V4L2 extension
[ 131.752067][ T5823] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 131.760439][ T5823] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 131.767681][ T5823] em28xx 5-1:0.132: No AC97 audio processor
[ 131.775284][ T5823] usb 5-1: Decoder not found
[ 131.779991][ T5823] em28xx 5-1:0.132: failed to create media graph
[ 131.786455][ T5823] em28xx 5-1:0.132: V4L2 device video0 deregistered
[ 131.796677][ T5823] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 131.805438][ T9] em28xx 8-1:0.132: Closing input extension
[ 131.811883][ T5817] em28xx 5-1:0.132: Closing input extension
[ 131.812649][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 131.818442][ T923] em28xx 4-1:0.132: Closing input extension
[ 131.833861][ T5817] em28xx 5-1:0.132: Freeing device
[ 131.841183][ T5806] em28xx 3-1:0.132: Closing input extension
[ 131.849102][ T9] em28xx 8-1:0.132: Freeing device
[ 131.860240][ T923] em28xx 4-1:0.132: Freeing device
[ 131.887840][ T5806] em28xx 3-1:0.132: Freeing device
[ 131.992328][ T23] usb 7-1: Using ep0 maxpacket: 32
[ 131.999400][ T23] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 132.008000][ T23] usb 7-1: config 0 has no interface number 0
[ 132.015063][ T23] usb 7-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 132.030481][ T23] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 132.039810][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 132.047903][ T23] usb 7-1: Product: syz
[ 132.052146][ T23] usb 7-1: Manufacturer: syz
[ 132.056989][ T23] usb 7-1: SerialNumber: syz
[ 132.073142][ T23] usb 7-1: config 0 descriptor??
[ 132.078707][ T5838] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 132.097458][ T23] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 132.107383][ T23] em28xx 7-1:0.132: Video interface 132 found: bulk
[ 132.152361][ T5817] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 132.162736][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 132.202302][ T923] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 132.209940][ T5806] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 132.302346][ T5817] usb 5-1: Using ep0 maxpacket: 32
[ 132.309105][ T5817] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 132.317705][ T5817] usb 5-1: config 0 has no interface number 0
[ 132.324158][ T9] usb 8-1: Using ep0 maxpacket: 32
[ 132.330857][ T5817] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 132.342717][ T23] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 132.344372][ T5817] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 132.358201][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 132.366689][ T5817] usb 5-1: Product: syz
[ 132.370880][ T5817] usb 5-1: Manufacturer: syz
[ 132.375953][ T5817] usb 5-1: SerialNumber: syz
[ 132.380823][ T9] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[ 132.389150][ T9] usb 8-1: config 0 has no interface number 0
[ 132.395534][ T9] usb 8-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 132.408573][ T5817] usb 5-1: config 0 descriptor??
[ 132.413692][ T5806] usb 3-1: Using ep0 maxpacket: 32
[ 132.414841][ T23] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 132.418987][ T923] usb 4-1: Using ep0 maxpacket: 32
[ 132.427663][ T23] em28xx 7-1:0.132: board has no eeprom
[ 132.434890][ T5842] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[ 132.447468][ T9] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 132.456600][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 132.464685][ T9] usb 8-1: Product: syz
[ 132.468901][ T9] usb 8-1: Manufacturer: syz
[ 132.473563][ T9] usb 8-1: SerialNumber: syz
[ 132.478281][ T5806] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 132.486553][ T5806] usb 3-1: config 0 has no interface number 0
[ 132.492399][ T23] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 132.497128][ T5817] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 132.500587][ T23] em28xx 7-1:0.132: analog set to bulk mode.
[ 132.510256][ T5817] em28xx 5-1:0.132: Video interface 132 found: bulk
[ 132.517017][ T3011] em28xx 7-1:0.132: Registering V4L2 extension
[ 132.523223][ T5806] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 132.540820][ T923] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 132.549169][ T923] usb 4-1: config 0 has no interface number 0
[ 132.551830][ T23] usb 7-1: USB disconnect, device number 3
[ 132.557267][ T923] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 132.573765][ T9] usb 8-1: config 0 descriptor??
[ 132.576515][ T23] em28xx 7-1:0.132: Disconnecting em28xx
[ 132.584952][ T5831] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 132.600189][ T9] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 132.610265][ T9] em28xx 8-1:0.132: Video interface 132 found: bulk
[ 132.618583][ T5806] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 132.627785][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 132.636152][ T5806] usb 3-1: Product: syz
[ 132.640383][ T5806] usb 3-1: Manufacturer: syz
[ 132.645152][ T5806] usb 3-1: SerialNumber: syz
[ 132.669246][ T923] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 132.678519][ T923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 132.686755][ T923] usb 4-1: Product: syz
[ 132.690988][ T923] usb 4-1: Manufacturer: syz
[ 132.695694][ T923] usb 4-1: SerialNumber: syz
[ 132.709973][ T5806] usb 3-1: config 0 descriptor??
[ 132.717045][ T5817] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 132.725443][ T923] usb 4-1: config 0 descriptor??
[ 132.731025][ T5830] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 132.732058][ T5841] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 132.765246][ T5806] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 132.775224][ T5806] em28xx 3-1:0.132: Video interface 132 found: bulk
[ 132.785221][ T923] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 132.795239][ T923] em28xx 4-1:0.132: Video interface 132 found: bulk
[ 132.827308][ T5817] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 132.836434][ T5817] em28xx 5-1:0.132: board has no eeprom
[ 132.874506][ T9] em28xx 8-1:0.132: unknown em28xx chip ID (0)
[ 132.902679][ T3011] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 132.909860][ T3011] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 132.917570][ T3011] em28xx 7-1:0.132: No AC97 audio processor
[ 132.917870][ T5817] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 132.931507][ T5817] em28xx 5-1:0.132: analog set to bulk mode.
[ 132.945342][ T3011] usb 7-1: Decoder not found
[ 132.950166][ T3011] em28xx 7-1:0.132: failed to create media graph
[ 132.956811][ T9] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 132.959232][ T3011] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 132.966379][ T9] em28xx 8-1:0.132: board has no eeprom
[ 132.986164][ T5817] usb 5-1: USB disconnect, device number 3
[ 133.001427][ T3011] em28xx 7-1:0.132: Remote control support is not available for this card.
[ 133.003989][ T5817] em28xx 5-1:0.132: Disconnecting em28xx
[ 133.015154][ T23] em28xx 7-1:0.132: Closing input extension
[ 133.021950][ T5823] em28xx 5-1:0.132: Registering V4L2 extension
[ 133.026733][ T23] em28xx 7-1:0.132: Freeing device
[ 133.029089][ T5806] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 133.052654][ T923] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[ 133.102868][ T9] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 133.110877][ T9] em28xx 8-1:0.132: analog set to bulk mode.
[ 133.122440][ T5806] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 133.131229][ T5806] em28xx 3-1:0.132: board has no eeprom
[ 133.141536][ T923] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 133.150594][ T923] em28xx 4-1:0.132: board has no eeprom
[ 133.185961][ T9] usb 8-1: USB disconnect, device number 3
[ 133.210485][ T9] em28xx 8-1:0.132: Disconnecting em28xx
[ 133.216665][ T5806] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 133.225114][ T5806] em28xx 3-1:0.132: analog set to bulk mode.
[ 133.231642][ T923] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 133.239626][ T923] em28xx 4-1:0.132: analog set to bulk mode.
[ 133.264268][ T5806] usb 3-1: USB disconnect, device number 3
[ 133.272178][ T5806] em28xx 3-1:0.132: Disconnecting em28xx
[ 133.286555][ T923] usb 4-1: USB disconnect, device number 3
[ 133.302166][ T923] em28xx 4-1:0.132: Disconnecting em28xx
[ 133.342310][ T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 133.358941][ T5823] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 133.366149][ T5823] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 133.373400][ T5823] em28xx 5-1:0.132: No AC97 audio processor
[ 133.382715][ T5823] usb 5-1: Decoder not found
[ 133.387405][ T5823] em28xx 5-1:0.132: failed to create media graph
[ 133.404587][ T5823] em28xx 5-1:0.132: V4L2 device video0 deregistered
[ 133.414075][ T5823] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 133.422805][ T5826] em28xx 8-1:0.132: Registering V4L2 extension
[ 133.535285][ T23] usb 7-1: Using ep0 maxpacket: 32
[ 133.547153][ T23] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 133.555566][ T23] usb 7-1: config 0 has no interface number 0
[ 133.561971][ T23] usb 7-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 133.575865][ T23] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 133.585114][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 133.592787][ T5826] em28xx 8-1:0.132: Config register raw data: 0xffffffed
[ 133.593231][ T23] usb 7-1: Product: syz
[ 133.600182][ T5826] em28xx 8-1:0.132: AC97 chip type couldn't be determined
[ 133.604370][ T23] usb 7-1: Manufacturer: syz
[ 133.604393][ T23] usb 7-1: SerialNumber: syz
[ 133.611506][ T5826] em28xx 8-1:0.132: No AC97 audio processor
[ 133.625373][ T23] usb 7-1: config 0 descriptor??
[ 133.632702][ T5859] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 133.644579][ T5826] usb 8-1: Decoder not found
[ 133.645543][ T23] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 133.649221][ T5826] em28xx 8-1:0.132: failed to create media graph
[ 133.659243][ T23] em28xx 7-1:0.132: Video interface 132 found: bulk
[ 133.672458][ T5826] em28xx 8-1:0.132: V4L2 device video0 deregistered
[ 133.680779][ T5826] em28xx 8-1:0.132: Remote control support is not available for this card.
[ 133.689564][ T10] em28xx 3-1:0.132: Registering V4L2 extension
[ 133.820926][ T10] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 133.828206][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 133.835447][ T10] em28xx 3-1:0.132: No AC97 audio processor
[ 133.843419][ T10] usb 3-1: Decoder not found
[ 133.848095][ T10] em28xx 3-1:0.132: failed to create media graph
[ 133.854605][ T10] em28xx 3-1:0.132: V4L2 device video0 deregistered
[ 133.863243][ T10] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 133.871922][ T5819] em28xx 4-1:0.132: Registering V4L2 extension
[ 133.892704][ T23] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[ 133.964418][ T23] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 133.980807][ T23] em28xx 7-1:0.132: board has no eeprom
[ 133.987277][ T5819] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[ 133.995347][ T5819] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[ 134.002609][ T5819] em28xx 4-1:0.132: No AC97 audio processor
[ 134.010161][ T5819] usb 4-1: Decoder not found
[ 134.014979][ T5819] em28xx 4-1:0.132: failed to create media graph
[ 134.021388][ T5819] em28xx 4-1:0.132: V4L2 device video0 deregistered
[ 134.031169][ T5819] em28xx 4-1:0.132: Remote control support is not available for this card.
[ 134.039942][ T5817] em28xx 5-1:0.132: Closing input extension
[ 134.047858][ T9] em28xx 8-1:0.132: Closing input extension
[ 134.052395][ T23] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 134.056887][ T5817] em28xx 5-1:0.132: Freeing device
[ 134.061682][ T23] em28xx 7-1:0.132: analog set to bulk mode.
[ 134.067527][ T5806] em28xx 3-1:0.132: Closing input extension
[ 134.081241][ T9] em28xx 8-1:0.132: Freeing device
[ 134.088821][ T23] usb 7-1: USB disconnect, device number 4
[ 134.100078][ T923] em28xx 4-1:0.132: Closing input extension
[ 134.101419][ T23] em28xx 7-1:0.132: Disconnecting em28xx
[ 134.128631][ T3011] em28xx 7-1:0.132: Registering V4L2 extension
[ 134.131683][ T5806] em28xx 3-1:0.132: Freeing device
[ 134.177055][ T923] em28xx 4-1:0.132: Freeing device
[ 134.346290][ T3011] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[ 134.353546][ T3011] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[ 134.360734][ T3011] em28xx 7-1:0.132: No AC97 audio processor
[ 134.394100][ T3011] usb 7-1: Decoder not found
[ 134.398793][ T3011] em28xx 7-1:0.132: failed to create media graph
[ 134.405818][ T5817] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 134.406147][ T3011] em28xx 7-1:0.132: V4L2 device video0 deregistered
[ 134.430769][ T3011] em28xx 7-1:0.132: Remote control support is not available for this card.
2025/07/11 10:32:29 executed programs: 25
[ 134.431839][ T5882] ==================================================================
[ 134.439858][ T23] em28xx 7-1:0.132: Closing input extension
[ 134.447515][ T5882] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 134.461189][ T5882] Read of size 8 at addr ffff88811c760730 by task v4l_id/5882
[ 134.468688][ T5882]
[ 134.471054][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: v4l_id Not tainted 6.16.0-rc4-syzkaller-00314-gb4b4dbfa96de #0 PREEMPT(voluntary)
[ 134.471084][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 134.471101][ T5882] Call Trace:
[ 134.471111][ T5882]
[ 134.471121][ T5882] dump_stack_lvl+0x116/0x1f0
[ 134.471166][ T5882] print_report+0xcd/0x680
[ 134.471193][ T5882] ? __virt_addr_valid+0x81/0x610
[ 134.471223][ T5882] ? __phys_addr+0xe8/0x180
[ 134.471252][ T5882] ? v4l2_fh_init+0x27d/0x2c0
[ 134.471281][ T5882] kasan_report+0xe0/0x110
[ 134.471308][ T5882] ? v4l2_fh_init+0x27d/0x2c0
[ 134.471339][ T5882] v4l2_fh_init+0x27d/0x2c0
[ 134.471368][ T5882] v4l2_fh_open+0x83/0xc0
[ 134.471396][ T5882] em28xx_v4l2_open+0x24e/0x7e0
[ 134.471426][ T5882] v4l2_open+0x222/0x490
[ 134.471451][ T5882] ? __pfx_v4l2_open+0x10/0x10
[ 134.471475][ T5882] chrdev_open+0x234/0x6a0
[ 134.471511][ T5882] ? __pfx_chrdev_open+0x10/0x10
[ 134.471550][ T5882] do_dentry_open+0x6da/0x13a0
[ 134.471583][ T5882] ? __pfx_chrdev_open+0x10/0x10
[ 134.471618][ T5882] ? inode_permission+0x156/0x630
[ 134.471643][ T5882] vfs_open+0x82/0x3f0
[ 134.471664][ T5882] ? may_open+0x1f2/0x400
[ 134.471690][ T5882] path_openat+0x1de4/0x2cb0
[ 134.471728][ T5882] ? __pfx_path_openat+0x10/0x10
[ 134.471762][ T5882] ? __lock_acquire+0xb8a/0x1c90
[ 134.471785][ T5882] do_filp_open+0x20b/0x470
[ 134.471818][ T5882] ? __pfx_do_filp_open+0x10/0x10
[ 134.471862][ T5882] ? alloc_fd+0x420/0x760
[ 134.471898][ T5882] do_sys_openat2+0x11b/0x1d0
[ 134.471925][ T5882] ? __pfx_do_sys_openat2+0x10/0x10
[ 134.471948][ T5882] ? find_held_lock+0x2b/0x80
[ 134.471978][ T5882] ? handle_mm_fault+0x2ab/0xd10
[ 134.472007][ T5882] __x64_sys_openat+0x174/0x210
[ 134.472031][ T5882] ? __pfx___x64_sys_openat+0x10/0x10
[ 134.472056][ T5882] ? do_user_addr_fault+0x83f/0x1240
[ 134.472081][ T5882] do_syscall_64+0xcd/0x4b0
[ 134.472103][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.472127][ T5882] RIP: 0033:0x7f4cbad8f407
[ 134.472150][ T5882] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 134.472175][ T5882] RSP: 002b:00007ffd90146430 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 134.472197][ T5882] RAX: ffffffffffffffda RBX: 00007f4cbaca1880 RCX: 00007f4cbad8f407
[ 134.472218][ T5882] RDX: 0000000000000000 RSI: 00007ffd90147f24 RDI: ffffffffffffff9c
[ 134.472238][ T5882] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 134.472255][ T5882] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 134.472272][ T5882] R13: 00007ffd90146680 R14: 00007f4cbb525000 R15: 00005604fb3f74d8
[ 134.472300][ T5882]
[ 134.472311][ T5882]
[ 134.740360][ T5882] Allocated by task 3011:
[ 134.744702][ T5882] kasan_save_stack+0x33/0x60
[ 134.749398][ T5882] kasan_save_track+0x14/0x30
[ 134.754186][ T5882] __kasan_kmalloc+0x8f/0xa0
[ 134.759059][ T5882] em28xx_v4l2_init+0x114/0x40c0
[ 134.764206][ T5882] em28xx_init_extension+0x137/0x200
[ 134.769527][ T5882] request_module_async+0x61/0x70
[ 134.774591][ T5882] process_one_work+0x9cc/0x1b70
[ 134.779641][ T5882] worker_thread+0x6c8/0xf10
[ 134.784260][ T5882] kthread+0x3c2/0x780
[ 134.788355][ T5882] ret_from_fork+0x5b3/0x6c0
[ 134.793005][ T5882] ret_from_fork_asm+0x1a/0x30
[ 134.797976][ T5882]
[ 134.800318][ T5882] Freed by task 3011:
[ 134.804329][ T5882] kasan_save_stack+0x33/0x60
[ 134.809038][ T5882] kasan_save_track+0x14/0x30
[ 134.813736][ T5882] kasan_save_free_info+0x3b/0x60
[ 134.818800][ T5882] __kasan_slab_free+0x37/0x50
[ 134.823592][ T5882] kfree+0x283/0x470
[ 134.827515][ T5882] em28xx_v4l2_init+0x22c5/0x40c0
[ 134.832615][ T5882] em28xx_init_extension+0x137/0x200
[ 134.838062][ T5882] request_module_async+0x61/0x70
[ 134.843142][ T5882] process_one_work+0x9cc/0x1b70
[ 134.848240][ T5882] worker_thread+0x6c8/0xf10
[ 134.852981][ T5882] kthread+0x3c2/0x780
[ 134.857114][ T5882] ret_from_fork+0x5b3/0x6c0
[ 134.861755][ T5882] ret_from_fork_asm+0x1a/0x30
[ 134.866552][ T5882]
[ 134.868890][ T5882] The buggy address belongs to the object at ffff88811c760000
[ 134.868890][ T5882] which belongs to the cache kmalloc-8k of size 8192
[ 134.882969][ T5882] The buggy address is located 1840 bytes inside of
[ 134.882969][ T5882] freed 8192-byte region [ffff88811c760000, ffff88811c762000)
[ 134.897035][ T5882]
[ 134.899389][ T5882] The buggy address belongs to the physical page:
[ 134.905913][ T5882] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c760
[ 134.914789][ T5882] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 134.923302][ T5882] flags: 0x200000000000040(head|node=0|zone=2)
[ 134.929931][ T5882] page_type: f5(slab)
[ 134.933945][ T5882] raw: 0200000000000040 ffff888100042280 ffffea0004739a00 0000000000000002
[ 134.942558][ T5882] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 134.951257][ T5882] head: 0200000000000040 ffff888100042280 ffffea0004739a00 0000000000000002
[ 134.959953][ T5882] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 134.968650][ T5882] head: 0200000000000003 ffffea000471d801 00000000ffffffff 00000000ffffffff
[ 134.977372][ T5882] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 134.986066][ T5882] page dumped because: kasan: bad access detected
[ 134.992517][ T5882] page_owner tracks the page as allocated
[ 134.998244][ T5882] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3052, tgid 3052 (syz-executor), ts 57818668417, free_ts 57094721998
[ 135.019817][ T5882] post_alloc_hook+0x1c0/0x230
[ 135.024613][ T5882] get_page_from_freelist+0xf98/0x2ce0
[ 135.030192][ T5882] __alloc_frozen_pages_noprof+0x259/0x21e0
[ 135.036117][ T5882] alloc_pages_mpol+0xe4/0x410
[ 135.040998][ T5882] new_slab+0x23b/0x330
[ 135.045179][ T5882] ___slab_alloc+0xda5/0x1940
[ 135.049885][ T5882] __slab_alloc.constprop.0+0x56/0xb0
[ 135.055292][ T5882] __kmalloc_noprof+0x15b/0x4d0
[ 135.060172][ T5882] cache_create_net+0x9d/0x220
[ 135.064979][ T5882] gss_svc_init_net+0x69/0x660
[ 135.069785][ T5882] ops_init+0x1df/0x5f0
[ 135.074006][ T5882] setup_net+0x1ff/0x510
[ 135.078273][ T5882] copy_net_ns+0x2a6/0x5f0
[ 135.082739][ T5882] create_new_namespaces+0x3ea/0xa90
[ 135.088241][ T5882] unshare_nsproxy_namespaces+0xc0/0x1f0
[ 135.093922][ T5882] ksys_unshare+0x45b/0xa40
[ 135.098448][ T5882] page last free pid 2960 tgid 2952 stack trace:
[ 135.104791][ T5882] __free_frozen_pages+0x78a/0x1040
[ 135.110018][ T5882] __folio_put+0x1e7/0x2d0
[ 135.114459][ T5882] skb_release_data+0x7fb/0x9c0
[ 135.119357][ T5882] skb_attempt_defer_free+0x457/0x630
[ 135.124793][ T5882] tcp_recvmsg_locked+0x1250/0x2820
[ 135.130030][ T5882] tcp_recvmsg+0x12f/0x680
[ 135.134461][ T5882] inet6_recvmsg+0x12a/0x6a0
[ 135.139440][ T5882] sock_recvmsg+0xfe/0x250
[ 135.143985][ T5882] sock_read_iter+0x2b9/0x3b0
[ 135.148689][ T5882] vfs_read+0xa95/0xc60
[ 135.152875][ T5882] ksys_read+0x1f8/0x250
[ 135.157268][ T5882] do_syscall_64+0xcd/0x4b0
[ 135.161788][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.167720][ T5882]
[ 135.170053][ T5882] Memory state around the buggy address:
[ 135.175693][ T5882] ffff88811c760600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 135.183785][ T5882] ffff88811c760680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 135.191861][ T5882] >ffff88811c760700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 135.199953][ T5882] ^
[ 135.205617][ T5882] ffff88811c760780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 135.214147][ T5882] ffff88811c760800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 135.222236][ T5882] ==================================================================
[ 135.231013][ T5882] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 135.238273][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: v4l_id Not tainted 6.16.0-rc4-syzkaller-00314-gb4b4dbfa96de #0 PREEMPT(voluntary)
[ 135.250499][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 135.260597][ T5882] Call Trace:
[ 135.263905][ T5882]
[ 135.266854][ T5882] dump_stack_lvl+0x3d/0x1f0
[ 135.271489][ T5882] panic+0x71c/0x800
[ 135.275438][ T5882] ? __pfx_panic+0x10/0x10
[ 135.279879][ T5882] ? mark_held_locks+0x49/0x80
[ 135.284676][ T5882] ? v4l2_fh_init+0x27d/0x2c0
[ 135.289387][ T5882] ? check_panic_on_warn+0x1f/0xb0
[ 135.294545][ T5882] ? v4l2_fh_init+0x27d/0x2c0
[ 135.299303][ T5882] check_panic_on_warn+0xab/0xb0
[ 135.304278][ T5882] end_report+0x107/0x170
[ 135.308645][ T5882] kasan_report+0xee/0x110
[ 135.313117][ T5882] ? v4l2_fh_init+0x27d/0x2c0
[ 135.317950][ T5882] v4l2_fh_init+0x27d/0x2c0
[ 135.322500][ T5882] v4l2_fh_open+0x83/0xc0
[ 135.326880][ T5882] em28xx_v4l2_open+0x24e/0x7e0
[ 135.331768][ T5882] v4l2_open+0x222/0x490
[ 135.336069][ T5882] ? __pfx_v4l2_open+0x10/0x10
[ 135.340864][ T5882] chrdev_open+0x234/0x6a0
[ 135.345336][ T5882] ? __pfx_chrdev_open+0x10/0x10
[ 135.350330][ T5882] do_dentry_open+0x6da/0x13a0
[ 135.355134][ T5882] ? __pfx_chrdev_open+0x10/0x10
[ 135.360142][ T5882] ? inode_permission+0x156/0x630
[ 135.365209][ T5882] vfs_open+0x82/0x3f0
[ 135.369305][ T5882] ? may_open+0x1f2/0x400
[ 135.373675][ T5882] path_openat+0x1de4/0x2cb0
[ 135.378336][ T5882] ? __pfx_path_openat+0x10/0x10
[ 135.383318][ T5882] ? __lock_acquire+0xb8a/0x1c90
[ 135.388302][ T5882] do_filp_open+0x20b/0x470
[ 135.392892][ T5882] ? __pfx_do_filp_open+0x10/0x10
[ 135.397995][ T5882] ? alloc_fd+0x420/0x760
[ 135.402381][ T5882] do_sys_openat2+0x11b/0x1d0
[ 135.407117][ T5882] ? __pfx_do_sys_openat2+0x10/0x10
[ 135.412354][ T5882] ? find_held_lock+0x2b/0x80
[ 135.417071][ T5882] ? handle_mm_fault+0x2ab/0xd10
[ 135.422047][ T5882] __x64_sys_openat+0x174/0x210
[ 135.426924][ T5882] ? __pfx___x64_sys_openat+0x10/0x10
[ 135.432426][ T5882] ? do_user_addr_fault+0x83f/0x1240
[ 135.437742][ T5882] do_syscall_64+0xcd/0x4b0
[ 135.442285][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.448240][ T5882] RIP: 0033:0x7f4cbad8f407
[ 135.452677][ T5882] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 135.472319][ T5882] RSP: 002b:00007ffd90146430 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 135.480766][ T5882] RAX: ffffffffffffffda RBX: 00007f4cbaca1880 RCX: 00007f4cbad8f407
[ 135.488811][ T5882] RDX: 0000000000000000 RSI: 00007ffd90147f24 RDI: ffffffffffffff9c
[ 135.496980][ T5882] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 135.504973][ T5882] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 135.513058][ T5882] R13: 00007ffd90146680 R14: 00007f4cbb525000 R15: 00005604fb3f74d8
[ 135.521064][ T5882]
[ 135.524567][ T5882] Kernel Offset: disabled
[ 135.528973][ T5882] Rebooting in 86400 seconds..