Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. 2026/04/19 07:29:40 parsed 1 programs [ 50.894125][ T29] audit: type=1400 audit(1776583780.316:62): avc: denied { node_bind } for pid=2967 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.915192][ T29] audit: type=1400 audit(1776583780.316:63): avc: denied { module_request } for pid=2967 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.790884][ T29] audit: type=1400 audit(1776583783.206:64): avc: denied { mounton } for pid=2977 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.814760][ T29] audit: type=1400 audit(1776583783.236:65): avc: denied { mount } for pid=2977 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.825870][ T2977] cgroup: Unknown subsys name 'net' [ 53.845372][ T29] audit: type=1400 audit(1776583783.266:66): avc: denied { unmount } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.995921][ T2977] cgroup: Unknown subsys name 'cpuset' [ 54.004719][ T2977] cgroup: Unknown subsys name 'rlimit' [ 54.173949][ T29] audit: type=1400 audit(1776583783.596:67): avc: denied { setattr } for pid=2977 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.197364][ T29] audit: type=1400 audit(1776583783.596:68): avc: denied { create } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.218514][ T29] audit: type=1400 audit(1776583783.596:69): avc: denied { write } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.239667][ T29] audit: type=1400 audit(1776583783.596:70): avc: denied { read } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.268732][ T29] audit: type=1400 audit(1776583783.686:71): avc: denied { sys_module } for pid=2977 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 54.417908][ T2981] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 54.447363][ T2977] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.032843][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 56.032874][ T29] audit: type=1400 audit(1776583785.446:80): avc: denied { execmem } for pid=2982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.103213][ T29] audit: type=1400 audit(1776583785.506:81): avc: denied { read } for pid=2987 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.183235][ T29] audit: type=1400 audit(1776583785.506:82): avc: denied { open } for pid=2987 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.255346][ T29] audit: type=1400 audit(1776583785.506:83): avc: denied { mounton } for pid=2987 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.289035][ T29] audit: type=1400 audit(1776583785.516:84): avc: denied { create } for pid=2984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 56.309343][ T29] audit: type=1400 audit(1776583785.516:85): avc: denied { sys_admin } for pid=2984 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 56.341071][ T29] audit: type=1400 audit(1776583785.646:86): avc: denied { mounton } for pid=2988 comm="syz-executor" path="/root/syzkaller.ymgcZ6/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 56.383780][ T29] audit: type=1400 audit(1776583785.646:87): avc: denied { mount } for pid=2988 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.453250][ T29] audit: type=1400 audit(1776583785.646:88): avc: denied { mounton } for pid=2988 comm="syz-executor" path="/root/syzkaller.ymgcZ6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.547869][ T29] audit: type=1400 audit(1776583785.646:89): avc: denied { mount } for pid=2988 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.678600][ T2990] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.957812][ T3013] syz.4.5 (3013) used greatest stack depth: 23816 bytes left 2026/04/19 07:30:01 executed programs: 0 [ 72.506657][ T2987] syz-executor (2987) used greatest stack depth: 22456 bytes left 2026/04/19 07:30:51 executed programs: 10 [ 122.332939][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 122.332964][ T29] audit: type=1400 audit(1776583851.746:105): avc: denied { read write } for pid=5754 comm="syz.5.19" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.426309][ T29] audit: type=1400 audit(1776583851.796:106): avc: denied { open } for pid=5754 comm="syz.5.19" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.496674][ T29] audit: type=1400 audit(1776583851.796:107): avc: denied { ioctl } for pid=5754 comm="syz.5.19" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.623468][ T2816] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 122.623468][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 122.777615][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 122.788333][ T23] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 122.796711][ T23] usb 7-1: config 0 has no interface number 0 [ 122.802885][ T23] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.803491][ T2816] usb 6-1: Using ep0 maxpacket: 32 [ 122.813081][ T23] usb 7-1: config 0 interface 89 has no altsetting 0 [ 122.824844][ T2816] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 122.829264][ T23] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 122.833737][ T2816] usb 6-1: config 0 has no interface number 0 [ 122.842546][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.850471][ T2816] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.857630][ T1121] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.867434][ T2816] usb 6-1: config 0 interface 89 has no altsetting 0 [ 122.877947][ T23] usb 7-1: Product: syz [ 122.885308][ T23] usb 7-1: Manufacturer: syz [ 122.890682][ T23] usb 7-1: SerialNumber: syz [ 122.895003][ T2816] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 122.905085][ T2816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.910477][ T23] usb 7-1: config 0 descriptor?? [ 122.920492][ T2816] usb 6-1: Product: syz [ 122.925396][ T2816] usb 6-1: Manufacturer: syz [ 122.930410][ T2816] usb 6-1: SerialNumber: syz [ 122.937879][ T23] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 122.942501][ T2816] usb 6-1: config 0 descriptor?? [ 122.948056][ T5766] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.961472][ T23] em28xx 7-1:0.89: Video interface 89 found: [ 122.971446][ T2816] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 122.981679][ T2816] em28xx 6-1:0.89: Video interface 89 found: [ 123.013214][ T5769] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 123.043212][ T1121] usb 1-1: Using ep0 maxpacket: 32 [ 123.050246][ T1121] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 123.058666][ T1121] usb 1-1: config 0 has no interface number 0 [ 123.064911][ T1121] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.074974][ T1121] usb 1-1: config 0 interface 89 has no altsetting 0 [ 123.084026][ T1121] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 123.094161][ T1121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.102582][ T1121] usb 1-1: Product: syz [ 123.106879][ T1121] usb 1-1: Manufacturer: syz [ 123.111566][ T1121] usb 1-1: SerialNumber: syz [ 123.116290][ T5766] usb 4-1: Using ep0 maxpacket: 32 [ 123.126092][ T5766] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 123.135695][ T5766] usb 4-1: config 0 has no interface number 0 [ 123.142981][ T1121] usb 1-1: config 0 descriptor?? [ 123.148543][ T5766] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.159202][ T5766] usb 4-1: config 0 interface 89 has no altsetting 0 [ 123.170204][ T1121] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 123.180463][ T5769] usb 8-1: Using ep0 maxpacket: 32 [ 123.187404][ T5766] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 123.197171][ T23] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 123.203480][ T1121] em28xx 1-1:0.89: Video interface 89 found: [ 123.209858][ T5769] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 123.218377][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.226961][ T5769] usb 8-1: config 0 has no interface number 0 [ 123.233555][ T5766] usb 4-1: Product: syz [ 123.237977][ T5766] usb 4-1: Manufacturer: syz [ 123.242725][ T5766] usb 4-1: SerialNumber: syz [ 123.247540][ T5769] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.255868][ T2816] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 123.263320][ T5769] usb 8-1: config 0 interface 89 has no altsetting 0 [ 123.272849][ T5766] usb 4-1: config 0 descriptor?? [ 123.280126][ T5769] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 123.293467][ T5766] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 123.306544][ T23] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 123.315240][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.323489][ T23] em28xx 7-1:0.89: board has no eeprom [ 123.329555][ T5766] em28xx 4-1:0.89: Video interface 89 found: [ 123.336178][ T5769] usb 8-1: Product: syz [ 123.340521][ T5769] usb 8-1: Manufacturer: syz [ 123.342466][ T2816] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 123.348339][ T5769] usb 8-1: SerialNumber: syz [ 123.355373][ T2816] em28xx 6-1:0.89: board has no eeprom [ 123.366463][ T5769] usb 8-1: config 0 descriptor?? [ 123.378854][ T5769] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 123.388511][ T5769] em28xx 8-1:0.89: Video interface 89 found: [ 123.403211][ T23] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 123.415168][ T23] em28xx 7-1:0.89: analog set to bulk mode. [ 123.421888][ T5772] em28xx 7-1:0.89: Registering V4L2 extension [ 123.433694][ T1121] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 123.433715][ T2816] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 123.433748][ T2816] em28xx 6-1:0.89: analog set to bulk mode. [ 123.467542][ T2816] usb 6-1: USB disconnect, device number 2 [ 123.475498][ T23] usb 7-1: USB disconnect, device number 2 [ 123.485662][ T2816] em28xx 6-1:0.89: Disconnecting em28xx [ 123.504665][ T23] em28xx 7-1:0.89: Disconnecting em28xx [ 123.528695][ T5772] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 123.535899][ T5772] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 123.543760][ T5772] em28xx 7-1:0.89: No AC97 audio processor [ 123.562179][ T5772] usb 7-1: Decoder not found [ 123.567484][ T5766] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 123.578862][ T1121] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 123.587689][ T5772] em28xx 7-1:0.89: failed to create media graph [ 123.594233][ T5772] em28xx 7-1:0.89: V4L2 device video0 deregistered [ 123.600869][ T1121] em28xx 1-1:0.89: board has no eeprom [ 123.614421][ T5772] em28xx 7-1:0.89: Registering snapshot button... [ 123.624114][ T5772] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input5 [ 123.635517][ T5769] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 123.643876][ T5766] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 123.652113][ T5766] em28xx 4-1:0.89: board has no eeprom [ 123.661824][ T5772] em28xx 7-1:0.89: Remote control support is not available for this card. [ 123.670942][ T1121] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 123.684384][ T23] em28xx 7-1:0.89: Closing input extension [ 123.690667][ T23] em28xx 7-1:0.89: Deregistering snapshot button [ 123.697420][ T1121] em28xx 1-1:0.89: analog set to bulk mode. [ 123.723288][ T5769] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 123.731460][ T5769] em28xx 8-1:0.89: board has no eeprom [ 123.744333][ T10] em28xx 6-1:0.89: Registering V4L2 extension [ 123.749905][ T5766] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 123.764979][ T1121] usb 1-1: USB disconnect, device number 2 [ 123.772318][ T1121] em28xx 1-1:0.89: Disconnecting em28xx [ 123.778559][ T5766] em28xx 4-1:0.89: analog set to bulk mode. [ 123.805017][ T5766] usb 4-1: USB disconnect, device number 2 [ 123.818002][ T5766] em28xx 4-1:0.89: Disconnecting em28xx [ 123.824932][ T23] em28xx 7-1:0.89: Freeing device [ 123.833511][ T5769] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 123.860576][ T5769] em28xx 8-1:0.89: analog set to bulk mode. [ 123.875405][ T10] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 123.904458][ T10] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 123.912381][ T5769] usb 8-1: USB disconnect, device number 2 [ 123.928535][ T10] em28xx 6-1:0.89: No AC97 audio processor [ 123.944992][ T5769] em28xx 8-1:0.89: Disconnecting em28xx [ 123.955006][ T10] usb 6-1: Decoder not found [ 123.959757][ T10] em28xx 6-1:0.89: failed to create media graph [ 123.993364][ T10] em28xx 6-1:0.89: V4L2 device video0 deregistered [ 124.021948][ T10] em28xx 6-1:0.89: Registering snapshot button... [ 124.052479][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input6 [ 124.082844][ T10] em28xx 6-1:0.89: Remote control support is not available for this card. [ 124.118389][ T5772] em28xx 1-1:0.89: Registering V4L2 extension [ 124.163453][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 124.198145][ T5772] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 124.206476][ T5772] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 124.214132][ T5772] em28xx 1-1:0.89: No AC97 audio processor [ 124.221740][ T5772] usb 1-1: Decoder not found [ 124.226826][ T5772] em28xx 1-1:0.89: failed to create media graph [ 124.233238][ T5772] em28xx 1-1:0.89: V4L2 device video0 deregistered [ 124.242140][ T5772] em28xx 1-1:0.89: Registering snapshot button... [ 124.254142][ T5772] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input7 [ 124.266680][ T5772] em28xx 1-1:0.89: Remote control support is not available for this card. [ 124.275485][ T5778] em28xx 4-1:0.89: Registering V4L2 extension [ 124.309202][ T5778] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 124.316299][ T5778] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 124.323451][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 124.328834][ T5778] em28xx 4-1:0.89: No AC97 audio processor [ 124.336781][ T5778] usb 4-1: Decoder not found [ 124.341558][ T23] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 124.350065][ T5778] em28xx 4-1:0.89: failed to create media graph [ 124.359623][ T5778] em28xx 4-1:0.89: V4L2 device video0 deregistered [ 124.366345][ T23] usb 7-1: config 0 has no interface number 0 [ 124.372480][ T23] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.382746][ T23] usb 7-1: config 0 interface 89 has no altsetting 0 [ 124.390608][ T5778] em28xx 4-1:0.89: Registering snapshot button... [ 124.398425][ T5778] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input8 [ 124.411405][ T23] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 124.421403][ T5778] em28xx 4-1:0.89: Remote control support is not available for this card. [ 124.430065][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.438981][ T28] em28xx 8-1:0.89: Registering V4L2 extension [ 124.445416][ T23] usb 7-1: Product: syz [ 124.449638][ T23] usb 7-1: Manufacturer: syz [ 124.454362][ T23] usb 7-1: SerialNumber: syz [ 124.462485][ T23] usb 7-1: config 0 descriptor?? [ 124.476144][ T23] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 124.485781][ T23] em28xx 7-1:0.89: Video interface 89 found: [ 124.508511][ T28] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 124.515762][ T28] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 124.522844][ T28] em28xx 8-1:0.89: No AC97 audio processor [ 124.530979][ T28] usb 8-1: Decoder not found [ 124.535691][ T28] em28xx 8-1:0.89: failed to create media graph [ 124.542021][ T28] em28xx 8-1:0.89: V4L2 device video0 deregistered [ 124.553814][ T28] em28xx 8-1:0.89: Registering snapshot button... [ 124.561672][ T28] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input9 [ 124.574472][ T28] em28xx 8-1:0.89: Remote control support is not available for this card. [ 124.583670][ T2816] em28xx 6-1:0.89: Closing input extension [ 124.589985][ T2816] em28xx 6-1:0.89: Deregistering snapshot button [ 124.601809][ T1121] em28xx 1-1:0.89: Closing input extension [ 124.608370][ T2816] em28xx 6-1:0.89: Freeing device [ 124.609647][ T1121] em28xx 1-1:0.89: Deregistering snapshot button [ 124.634615][ T5766] em28xx 4-1:0.89: Closing input extension [ 124.641090][ T5766] em28xx 4-1:0.89: Deregistering snapshot button [ 124.660778][ T1121] em28xx 1-1:0.89: Freeing device [ 124.687981][ T5769] em28xx 8-1:0.89: Closing input extension [ 124.705304][ T5766] em28xx 4-1:0.89: Freeing device [ 124.724276][ T5769] em28xx 8-1:0.89: Deregistering snapshot button [ 124.737287][ T23] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 124.781653][ T5769] em28xx 8-1:0.89: Freeing device [ 124.815311][ T23] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 124.825426][ T23] em28xx 7-1:0.89: board has no eeprom [ 124.884087][ T23] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 124.891618][ T23] em28xx 7-1:0.89: analog set to bulk mode. [ 124.901759][ T28] em28xx 7-1:0.89: Registering V4L2 extension [ 124.917789][ T23] usb 7-1: USB disconnect, device number 3 [ 124.944287][ T23] em28xx 7-1:0.89: Disconnecting em28xx [ 124.957055][ T2816] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 124.983555][ T28] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 124.990560][ T28] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 125.004086][ T28] em28xx 7-1:0.89: No AC97 audio processor [ 125.012166][ T28] usb 7-1: Decoder not found [ 125.016967][ T28] em28xx 7-1:0.89: failed to create media graph [ 125.023533][ T1121] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.031402][ T28] em28xx 7-1:0.89: V4L2 device video0 deregistered [ 125.044708][ T28] em28xx 7-1:0.89: Registering snapshot button... [ 125.053545][ T28] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input10 [ 125.064276][ T5766] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.076280][ T28] em28xx 7-1:0.89: Remote control support is not available for this card. [ 125.085510][ T23] em28xx 7-1:0.89: Closing input extension [ 125.091839][ T23] em28xx 7-1:0.89: Deregistering snapshot button [ 125.107693][ T23] em28xx 7-1:0.89: Freeing device [ 125.133896][ T5769] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 125.143220][ T2816] usb 6-1: Using ep0 maxpacket: 32 [ 125.161162][ T2816] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 125.174918][ T2816] usb 6-1: config 0 has no interface number 0 [ 125.181145][ T2816] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.183380][ T1121] usb 1-1: Using ep0 maxpacket: 32 [ 125.192850][ T2816] usb 6-1: config 0 interface 89 has no altsetting 0 [ 125.205453][ T2816] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 125.219483][ T1121] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 125.227759][ T5766] usb 4-1: Using ep0 maxpacket: 32 [ 125.228501][ T2816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.236835][ T5766] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 125.254896][ T1121] usb 1-1: config 0 has no interface number 0 [ 125.269639][ T1121] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.269801][ T2816] usb 6-1: Product: syz [ 125.283902][ T5766] usb 4-1: config 0 has no interface number 0 [ 125.284008][ T5766] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.284042][ T5766] usb 4-1: config 0 interface 89 has no altsetting 0 [ 125.306896][ T5769] usb 8-1: Using ep0 maxpacket: 32 [ 125.313615][ T5766] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 125.323860][ T2816] usb 6-1: Manufacturer: syz [ 125.329024][ T2816] usb 6-1: SerialNumber: syz [ 125.333865][ T1121] usb 1-1: config 0 interface 89 has no altsetting 0 [ 125.346462][ T2816] usb 6-1: config 0 descriptor?? [ 125.353199][ T5769] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 125.362402][ T2816] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 125.371943][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.371980][ T5766] usb 4-1: Product: syz [ 125.372003][ T5766] usb 4-1: Manufacturer: syz [ 125.372026][ T5766] usb 4-1: SerialNumber: syz [ 125.389279][ T5769] usb 8-1: config 0 has no interface number 0 [ 125.393394][ T2816] em28xx 6-1:0.89: Video interface 89 found: [ 125.408096][ T1121] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 125.419231][ T5766] usb 4-1: config 0 descriptor?? [ 125.424823][ T5769] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.435772][ T1121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.447720][ T5766] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 125.458731][ T5769] usb 8-1: config 0 interface 89 has no altsetting 0 [ 125.465605][ T1121] usb 1-1: Product: syz [ 125.470132][ T1121] usb 1-1: Manufacturer: syz [ 125.474962][ T5766] em28xx 4-1:0.89: Video interface 89 found: [ 125.481285][ T1121] usb 1-1: SerialNumber: syz [ 125.487650][ T5769] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 125.499202][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.509433][ T1121] usb 1-1: config 0 descriptor?? [ 125.517493][ T5769] usb 8-1: Product: syz [ 125.521747][ T5769] usb 8-1: Manufacturer: syz [ 125.527195][ T5769] usb 8-1: SerialNumber: syz [ 125.537330][ T1121] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 125.564698][ T5769] usb 8-1: config 0 descriptor?? [ 125.569852][ T1121] em28xx 1-1:0.89: Video interface 89 found: [ 125.583608][ T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 125.593368][ T5769] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 125.603208][ T5769] em28xx 8-1:0.89: Video interface 89 found: [ 125.613540][ T2816] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 125.685384][ T2816] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 125.697377][ T2816] em28xx 6-1:0.89: board has no eeprom [ 125.713892][ T5766] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 125.733229][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 125.742986][ T23] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 125.751229][ T23] usb 7-1: config 0 has no interface number 0 [ 125.757478][ T23] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.767563][ T23] usb 7-1: config 0 interface 89 has no altsetting 0 [ 125.773284][ T2816] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 125.782444][ T2816] em28xx 6-1:0.89: analog set to bulk mode. [ 125.789819][ T5766] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 125.798905][ T10] em28xx 6-1:0.89: Registering V4L2 extension [ 125.805634][ T23] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 125.815017][ T1121] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 125.821457][ T5766] em28xx 4-1:0.89: board has no eeprom [ 125.828146][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.837175][ T23] usb 7-1: Product: syz [ 125.841769][ T23] usb 7-1: Manufacturer: syz [ 125.847040][ T23] usb 7-1: SerialNumber: syz [ 125.847266][ T5769] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 125.859441][ T2816] usb 6-1: USB disconnect, device number 3 [ 125.876568][ T23] usb 7-1: config 0 descriptor?? [ 125.878602][ T2816] em28xx 6-1:0.89: Disconnecting em28xx [ 125.895543][ T1121] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 125.903865][ T5766] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 125.918261][ T23] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 125.933250][ T5766] em28xx 4-1:0.89: analog set to bulk mode. [ 125.939467][ T5769] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 125.946514][ T10] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 125.948877][ T1121] em28xx 1-1:0.89: board has no eeprom [ 125.956796][ T10] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 125.968234][ T5769] em28xx 8-1:0.89: board has no eeprom [ 125.973608][ T10] em28xx 6-1:0.89: No AC97 audio processor [ 125.974381][ T23] em28xx 7-1:0.89: Video interface 89 found: [ 125.987727][ T10] usb 6-1: Decoder not found [ 125.994628][ T5766] usb 4-1: USB disconnect, device number 3 [ 126.002683][ T10] em28xx 6-1:0.89: failed to create media graph [ 126.012400][ T5766] em28xx 4-1:0.89: Disconnecting em28xx [ 126.025153][ T10] em28xx 6-1:0.89: V4L2 device video0 deregistered [ 126.034058][ T10] em28xx 6-1:0.89: Registering snapshot button... [ 126.042777][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input11 [ 126.053422][ T5769] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 126.053461][ T5769] em28xx 8-1:0.89: analog set to bulk mode. [ 126.066571][ T1121] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 126.090239][ T5769] usb 8-1: USB disconnect, device number 3 [ 126.099783][ T1121] em28xx 1-1:0.89: analog set to bulk mode. [ 126.101905][ T10] em28xx 6-1:0.89: Remote control support is not available for this card. [ 126.115788][ T2816] em28xx 6-1:0.89: Closing input extension [ 126.121681][ T2816] em28xx 6-1:0.89: Deregistering snapshot button [ 126.131283][ T5769] em28xx 8-1:0.89: Disconnecting em28xx [ 126.165625][ T28] em28xx 4-1:0.89: Registering V4L2 extension [ 126.180059][ T1121] usb 1-1: USB disconnect, device number 3 [ 126.194108][ T23] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 126.202924][ T1121] em28xx 1-1:0.89: Disconnecting em28xx [ 126.210548][ T2816] em28xx 6-1:0.89: Freeing device [ 126.265251][ T23] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 126.277009][ T28] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 126.285715][ T23] em28xx 7-1:0.89: board has no eeprom [ 126.292709][ T28] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 126.300835][ T28] em28xx 4-1:0.89: No AC97 audio processor [ 126.308906][ T28] usb 4-1: Decoder not found [ 126.323055][ T28] em28xx 4-1:0.89: failed to create media graph [ 126.348333][ T28] em28xx 4-1:0.89: V4L2 device video0 deregistered [ 126.355165][ T23] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 126.362430][ T23] em28xx 7-1:0.89: analog set to bulk mode. [ 126.387185][ T28] em28xx 4-1:0.89: Registering snapshot button... [ 126.401365][ T28] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input12 [ 126.418856][ T23] usb 7-1: USB disconnect, device number 4 [ 126.426566][ T28] em28xx 4-1:0.89: Remote control support is not available for this card. [ 126.437423][ T23] em28xx 7-1:0.89: Disconnecting em28xx [ 126.445209][ T5778] em28xx 8-1:0.89: Registering V4L2 extension [ 126.502557][ T5778] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 126.509852][ T5778] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 126.517032][ T5778] em28xx 8-1:0.89: No AC97 audio processor [ 126.526653][ T5778] usb 8-1: Decoder not found [ 126.531694][ T5778] em28xx 8-1:0.89: failed to create media graph [ 126.538224][ T5778] em28xx 8-1:0.89: V4L2 device video0 deregistered [ 126.550586][ T5778] em28xx 8-1:0.89: Registering snapshot button... [ 126.555711][ T2816] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 126.563361][ T5778] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input13 [ 126.576894][ T5778] em28xx 8-1:0.89: Remote control support is not available for this card. [ 126.585645][ T5783] em28xx 1-1:0.89: Registering V4L2 extension [ 126.618924][ T5783] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 126.626089][ T5783] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 126.633372][ T5783] em28xx 1-1:0.89: No AC97 audio processor [ 126.641958][ T5783] usb 1-1: Decoder not found [ 126.646970][ T5783] em28xx 1-1:0.89: failed to create media graph [ 126.653330][ T5783] em28xx 1-1:0.89: V4L2 device video0 deregistered [ 126.661710][ T5783] em28xx 1-1:0.89: Registering snapshot button... [ 126.680892][ T5783] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input14 [ 126.694003][ T5783] em28xx 1-1:0.89: Remote control support is not available for this card. [ 126.702721][ T5772] em28xx 7-1:0.89: Registering V4L2 extension [ 126.741644][ T5772] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 126.744355][ T2816] usb 6-1: Using ep0 maxpacket: 32 [ 126.749840][ T5772] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 126.761123][ T5772] em28xx 7-1:0.89: No AC97 audio processor [ 126.762893][ T2816] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 126.775729][ T2816] usb 6-1: config 0 has no interface number 0 [ 126.779346][ T5772] usb 7-1: Decoder not found [ 126.783006][ T2816] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.796084][ T5772] em28xx 7-1:0.89: failed to create media graph [ 126.798553][ T2816] usb 6-1: config 0 interface 89 has no altsetting 0 [ 126.804006][ T5772] em28xx 7-1:0.89: V4L2 device video0 deregistered [ 126.815502][ T2816] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 126.821383][ T5772] em28xx 7-1:0.89: Registering snapshot button... [ 126.826602][ T2816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.838304][ T5772] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input15 [ 126.842205][ T2816] usb 6-1: Product: syz [ 126.854976][ T2816] usb 6-1: Manufacturer: syz [ 126.857043][ T5772] em28xx 7-1:0.89: Remote control support is not available for this card. [ 126.862639][ T2816] usb 6-1: SerialNumber: syz [ 126.870489][ T5766] em28xx 4-1:0.89: Closing input extension [ 126.879610][ T5766] em28xx 4-1:0.89: Deregistering snapshot button [ 126.894290][ T2816] usb 6-1: config 0 descriptor?? [ 126.902637][ T5769] em28xx 8-1:0.89: Closing input extension [ 126.911670][ T5766] em28xx 4-1:0.89: Freeing device [ 126.912278][ T2816] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 126.917232][ T5769] em28xx 8-1:0.89: Deregistering snapshot button [ 126.927624][ T2816] em28xx 6-1:0.89: Video interface 89 found: [ 126.967485][ T1121] em28xx 1-1:0.89: Closing input extension [ 126.977123][ T5769] em28xx 8-1:0.89: Freeing device [ 126.994404][ T1121] em28xx 1-1:0.89: Deregistering snapshot button [ 127.038423][ T23] em28xx 7-1:0.89: Closing input extension [ 127.051443][ T1121] em28xx 1-1:0.89: Freeing device [ 127.056649][ T23] em28xx 7-1:0.89: Deregistering snapshot button [ 127.079639][ T23] em28xx 7-1:0.89: Freeing device [ 127.163576][ T2816] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 127.226375][ T2816] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 127.237203][ T2816] em28xx 6-1:0.89: board has no eeprom [ 127.244120][ T5766] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.294407][ T5769] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 127.313186][ T2816] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 127.320565][ T2816] em28xx 6-1:0.89: analog set to bulk mode. [ 127.326665][ T10] em28xx 6-1:0.89: Registering V4L2 extension [ 127.357187][ T2816] usb 6-1: USB disconnect, device number 4 [ 127.363301][ T1121] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.379159][ T2816] em28xx 6-1:0.89: Disconnecting em28xx [ 127.393568][ T23] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 127.413157][ T5766] usb 4-1: Using ep0 maxpacket: 32 [ 127.425123][ T5766] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 127.438486][ T5766] usb 4-1: config 0 has no interface number 0 [ 127.448060][ T5766] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.455295][ T10] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 127.460572][ T5769] usb 8-1: Using ep0 maxpacket: 32 [ 127.466975][ T10] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 127.478322][ T10] em28xx 6-1:0.89: No AC97 audio processor [ 127.485109][ T5766] usb 4-1: config 0 interface 89 has no altsetting 0 [ 127.496802][ T10] usb 6-1: Decoder not found [ 127.498300][ T5769] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 127.501762][ T10] em28xx 6-1:0.89: failed to create media graph [ 127.513733][ T5766] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 127.517602][ T10] em28xx 6-1:0.89: V4L2 device video0 deregistered [ 127.526699][ T5769] usb 8-1: config 0 has no interface number 0 [ 127.538326][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.539823][ T10] em28xx 6-1:0.89: Registering snapshot button... [ 127.547912][ T5769] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.560952][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input16 [ 127.563394][ T5766] usb 4-1: Product: syz [ 127.563420][ T5766] usb 4-1: Manufacturer: syz [ 127.563444][ T5766] usb 4-1: SerialNumber: syz [ 127.568326][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 127.584000][ T10] em28xx 6-1:0.89: Remote control support is not available for this card. [ 127.589410][ T1121] usb 1-1: Using ep0 maxpacket: 32 [ 127.596627][ T2816] em28xx 6-1:0.89: Closing input extension [ 127.605600][ T5766] usb 4-1: config 0 descriptor?? [ 127.611161][ T2816] em28xx 6-1:0.89: Deregistering snapshot button [ 127.623320][ T5769] usb 8-1: config 0 interface 89 has no altsetting 0 [ 127.634499][ T1121] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 127.647979][ T5769] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 127.657337][ T23] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 127.666923][ T5766] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 127.676882][ T1121] usb 1-1: config 0 has no interface number 0 [ 127.683046][ T1121] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.683209][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.701305][ T23] usb 7-1: config 0 has no interface number 0 [ 127.707539][ T1121] usb 1-1: config 0 interface 89 has no altsetting 0 2026/04/19 07:30:57 executed programs: 26 [ 127.714515][ T5766] em28xx 4-1:0.89: Video interface 89 found: [ 127.721142][ T23] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.732173][ T5769] usb 8-1: Product: syz [ 127.736619][ T23] usb 7-1: config 0 interface 89 has no altsetting 0 [ 127.744336][ T5769] usb 8-1: Manufacturer: syz [ 127.750539][ T1121] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 127.760124][ T1121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.768492][ T5769] usb 8-1: SerialNumber: syz [ 127.773725][ T1121] usb 1-1: Product: syz [ 127.776725][ T2816] em28xx 6-1:0.89: Freeing device [ 127.778861][ T23] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 127.793324][ T1121] usb 1-1: Manufacturer: syz [ 127.798116][ T1121] usb 1-1: SerialNumber: syz [ 127.802963][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.811889][ T23] usb 7-1: Product: syz [ 127.816471][ T23] usb 7-1: Manufacturer: syz [ 127.821253][ T23] usb 7-1: SerialNumber: syz [ 127.832064][ T1121] usb 1-1: config 0 descriptor?? [ 127.854309][ T5769] usb 8-1: config 0 descriptor?? [ 127.860483][ T23] usb 7-1: config 0 descriptor?? [ 127.866526][ T1121] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 127.886013][ T1121] em28xx 1-1:0.89: Video interface 89 found: [ 127.894496][ T5766] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 127.904225][ T23] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 127.923364][ T23] em28xx 7-1:0.89: Video interface 89 found: [ 127.943535][ T5769] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 127.954089][ T5769] em28xx 8-1:0.89: Video interface 89 found: [ 127.976757][ T5766] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 127.985344][ T5766] em28xx 4-1:0.89: board has no eeprom [ 128.043396][ T5766] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 128.055420][ T5766] em28xx 4-1:0.89: analog set to bulk mode. [ 128.061459][ T5778] em28xx 4-1:0.89: Registering V4L2 extension [ 128.091610][ T5766] usb 4-1: USB disconnect, device number 4 [ 128.098210][ T1121] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 128.118354][ T5766] em28xx 4-1:0.89: Disconnecting em28xx [ 128.135124][ T5778] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 128.142170][ T5778] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 128.149373][ T5778] em28xx 4-1:0.89: No AC97 audio processor [ 128.155201][ T2816] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 128.166247][ T23] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 128.173704][ T5769] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 128.180563][ T5778] usb 4-1: Decoder not found [ 128.187179][ T1121] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 128.195468][ T5778] em28xx 4-1:0.89: failed to create media graph [ 128.201768][ T5778] em28xx 4-1:0.89: V4L2 device video0 deregistered [ 128.208834][ T1121] em28xx 1-1:0.89: board has no eeprom [ 128.216266][ T5778] em28xx 4-1:0.89: Registering snapshot button... [ 128.224225][ T5778] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input17 [ 128.236264][ T5778] em28xx 4-1:0.89: Remote control support is not available for this card. [ 128.244978][ T5766] em28xx 4-1:0.89: Closing input extension [ 128.250918][ T5766] em28xx 4-1:0.89: Deregistering snapshot button [ 128.263322][ T5766] em28xx 4-1:0.89: Freeing device [ 128.269904][ T23] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 128.280042][ T1121] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 128.287883][ T5769] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 128.297077][ T23] em28xx 7-1:0.89: board has no eeprom [ 128.304942][ T5769] em28xx 8-1:0.89: board has no eeprom [ 128.311283][ T1121] em28xx 1-1:0.89: analog set to bulk mode. [ 128.319266][ T5778] em28xx 1-1:0.89: Registering V4L2 extension [ 128.334108][ T2816] usb 6-1: Using ep0 maxpacket: 32 [ 128.358828][ T2816] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 128.373220][ T23] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 128.380599][ T23] em28xx 7-1:0.89: analog set to bulk mode. [ 128.387195][ T5769] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 128.397491][ T1121] usb 1-1: USB disconnect, device number 4 [ 128.406555][ T2816] usb 6-1: config 0 has no interface number 0 [ 128.412756][ T2816] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.422994][ T5769] em28xx 8-1:0.89: analog set to bulk mode. [ 128.431351][ T2816] usb 6-1: config 0 interface 89 has no altsetting 0 [ 128.441935][ T2816] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 128.442818][ T1121] em28xx 1-1:0.89: Disconnecting em28xx [ 128.451830][ T2816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.472400][ T2816] usb 6-1: Product: syz [ 128.482476][ T5778] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 128.509679][ T2816] usb 6-1: Manufacturer: syz [ 128.512487][ T5778] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 128.525108][ T2816] usb 6-1: SerialNumber: syz [ 128.530509][ T5769] usb 8-1: USB disconnect, device number 4 [ 128.537560][ T23] usb 7-1: USB disconnect, device number 5 [ 128.544751][ T5778] em28xx 1-1:0.89: No AC97 audio processor [ 128.555119][ T5769] em28xx 8-1:0.89: Disconnecting em28xx [ 128.576612][ T23] em28xx 7-1:0.89: Disconnecting em28xx [ 128.584591][ T5778] usb 1-1: Decoder not found [ 128.596936][ T5778] em28xx 1-1:0.89: failed to create media graph [ 128.612462][ T5778] em28xx 1-1:0.89: V4L2 device video0 deregistered [ 128.619744][ T2816] usb 6-1: config 0 descriptor?? [ 128.658343][ T2816] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 128.670266][ T5778] em28xx 1-1:0.89: Registering snapshot button... [ 128.687256][ T2816] em28xx 6-1:0.89: Video interface 89 found: [ 128.692808][ T5778] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input18 [ 128.740649][ T5778] em28xx 1-1:0.89: Remote control support is not available for this card. [ 128.765417][ T5772] em28xx 7-1:0.89: Registering V4L2 extension [ 128.783238][ T5766] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.815353][ T5772] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 128.822721][ T5772] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 128.829941][ T5772] em28xx 7-1:0.89: No AC97 audio processor [ 128.841049][ T5772] usb 7-1: Decoder not found [ 128.846432][ T5772] em28xx 7-1:0.89: failed to create media graph [ 128.852910][ T5772] em28xx 7-1:0.89: V4L2 device video0 deregistered [ 128.861587][ T5772] em28xx 7-1:0.89: Registering snapshot button... [ 128.871050][ T5772] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input19 [ 128.883856][ T5772] em28xx 7-1:0.89: Remote control support is not available for this card. [ 128.892722][ T5783] em28xx 8-1:0.89: Registering V4L2 extension [ 128.903533][ T2816] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 128.931495][ T5783] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 128.938659][ T5766] usb 4-1: Using ep0 maxpacket: 32 [ 128.946987][ T5783] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 128.954309][ T5783] em28xx 8-1:0.89: No AC97 audio processor [ 128.961474][ T5766] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 128.970223][ T5766] usb 4-1: config 0 has no interface number 0 [ 128.976540][ T5766] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.981154][ T2816] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 128.986828][ T5783] usb 8-1: Decoder not found [ 128.996439][ T2816] em28xx 6-1:0.89: board has no eeprom [ 128.999560][ T5783] em28xx 8-1:0.89: failed to create media graph [ 129.011670][ T5766] usb 4-1: config 0 interface 89 has no altsetting 0 [ 129.018565][ T5783] em28xx 8-1:0.89: V4L2 device video0 deregistered [ 129.027324][ T5766] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 129.037058][ T5783] em28xx 8-1:0.89: Registering snapshot button... [ 129.046727][ T5783] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input20 [ 129.057369][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.065595][ T5766] usb 4-1: Product: syz [ 129.069780][ T5766] usb 4-1: Manufacturer: syz [ 129.073344][ T2816] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 129.077222][ T5766] usb 4-1: SerialNumber: syz [ 129.086065][ T2816] em28xx 6-1:0.89: analog set to bulk mode. [ 129.090643][ T5783] em28xx 8-1:0.89: Remote control support is not available for this card. [ 129.101805][ T1121] em28xx 1-1:0.89: Closing input extension [ 129.108760][ T1121] em28xx 1-1:0.89: Deregistering snapshot button [ 129.116294][ T5766] usb 4-1: config 0 descriptor?? [ 129.117437][ T2816] usb 6-1: USB disconnect, device number 5 [ 129.134446][ T5766] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 129.135971][ T2816] em28xx 6-1:0.89: Disconnecting em28xx [ 129.144043][ T5766] em28xx 4-1:0.89: Video interface 89 found: [ 129.160614][ T23] em28xx 7-1:0.89: Closing input extension [ 129.167365][ T23] em28xx 7-1:0.89: Deregistering snapshot button [ 129.176161][ T1121] em28xx 1-1:0.89: Freeing device [ 129.206776][ T10] em28xx 6-1:0.89: Registering V4L2 extension [ 129.219323][ T23] em28xx 7-1:0.89: Freeing device [ 129.305406][ T10] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 129.320820][ T10] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 129.330405][ T10] em28xx 6-1:0.89: No AC97 audio processor [ 129.345801][ T10] usb 6-1: Decoder not found [ 129.350500][ T10] em28xx 6-1:0.89: failed to create media graph [ 129.372084][ T10] em28xx 6-1:0.89: V4L2 device video0 deregistered [ 129.384682][ T10] em28xx 6-1:0.89: Registering snapshot button... [ 129.394383][ T5766] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 129.404165][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input21 [ 129.420790][ T10] em28xx 6-1:0.89: Remote control support is not available for this card. [ 129.431440][ T2816] em28xx 6-1:0.89: Closing input extension [ 129.438189][ T2816] em28xx 6-1:0.89: Deregistering snapshot button [ 129.459877][ T5769] em28xx 8-1:0.89: Closing input extension [ 129.469128][ T2816] em28xx 6-1:0.89: Freeing device [ 129.476078][ T5769] em28xx 8-1:0.89: Deregistering snapshot button [ 129.492601][ T5766] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 129.501021][ T1121] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.514718][ T5766] em28xx 4-1:0.89: board has no eeprom [ 129.544620][ T5769] em28xx 8-1:0.89: Freeing device [ 129.573534][ T23] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 129.593572][ T5766] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 129.600867][ T5766] em28xx 4-1:0.89: analog set to bulk mode. [ 129.607624][ T5783] em28xx 4-1:0.89: Registering V4L2 extension [ 129.645094][ T5766] usb 4-1: USB disconnect, device number 5 [ 129.652783][ T5766] em28xx 4-1:0.89: Disconnecting em28xx [ 129.683441][ T1121] usb 1-1: Using ep0 maxpacket: 32 [ 129.690139][ T1121] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 129.702147][ T1121] usb 1-1: config 0 has no interface number 0 [ 129.708523][ T5783] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 129.716902][ T5783] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 129.725078][ T1121] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.735410][ T5783] em28xx 4-1:0.89: No AC97 audio processor [ 129.742613][ T1121] usb 1-1: config 0 interface 89 has no altsetting 0 [ 129.751412][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 129.757318][ T5783] usb 4-1: Decoder not found [ 129.762154][ T5783] em28xx 4-1:0.89: failed to create media graph [ 129.769207][ T5783] em28xx 4-1:0.89: V4L2 device video0 deregistered [ 129.777150][ T23] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 129.785743][ T23] usb 7-1: config 0 has no interface number 0 [ 129.791991][ T23] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.802767][ T1121] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 129.812823][ T5783] em28xx 4-1:0.89: Registering snapshot button... [ 129.814476][ T5834] ================================================================== [ 129.823332][ T1121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.827369][ T5834] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 129.839386][ T5783] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input22 [ 129.842846][ T5834] Read of size 8 at addr ffff88811f2a8788 by task v4l_id/5834 [ 129.853771][ T23] usb 7-1: config 0 interface 89 has no altsetting 0 [ 129.861012][ T5834] [ 129.861083][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 129.861221][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 129.861286][ T5834] Call Trace: [ 129.861319][ T5834] [ 129.861345][ T5834] dump_stack_lvl+0x100/0x190 [ 129.861466][ T5834] print_report+0x156/0x4c9 [ 129.861589][ T5834] ? __virt_addr_valid+0x239/0x430 [ 129.861701][ T5834] ? v4l2_fh_init+0x27d/0x2c0 [ 129.861782][ T5834] kasan_report+0xdf/0x1e0 [ 129.861912][ T5834] ? v4l2_fh_init+0x27d/0x2c0 [ 129.862013][ T5834] v4l2_fh_init+0x27d/0x2c0 [ 129.862103][ T5834] v4l2_fh_open+0x64/0xa0 [ 129.862197][ T5834] em28xx_v4l2_open+0x11e/0x570 [ 129.862328][ T5834] v4l2_open+0x1d2/0x490 [ 129.862418][ T5834] ? __pfx_v4l2_open+0x10/0x10 [ 129.862523][ T5834] chrdev_open+0x234/0x6a0 [ 129.862661][ T5834] ? __pfx_chrdev_open+0x10/0x10 [ 129.862759][ T5834] ? path_get+0x61/0x80 [ 129.862875][ T5834] do_dentry_open+0x68b/0x14b0 [ 129.862964][ T5834] ? __pfx_chrdev_open+0x10/0x10 [ 129.863074][ T5834] ? inode_permission+0x374/0x620 [ 129.863199][ T5834] vfs_open+0x82/0x3f0 [ 129.863309][ T5834] ? may_open+0x1f3/0x410 [ 129.863440][ T5834] path_openat+0x208c/0x31a0 [ 129.863570][ T5834] ? __pfx_path_openat+0x10/0x10 [ 129.863694][ T5834] do_file_open+0x20e/0x430 [ 129.863808][ T5834] ? __pfx_do_file_open+0x10/0x10 [ 129.863980][ T5834] ? alloc_fd+0x42a/0x730 [ 129.864097][ T5834] ? do_getname+0x191/0x390 [ 129.864229][ T5834] do_sys_openat2+0x10d/0x1e0 [ 129.864343][ T5834] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.864486][ T5834] __x64_sys_openat+0x12d/0x210 [ 129.864620][ T5834] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.864745][ T5834] ? do_user_addr_fault+0x3e3/0x11d0 [ 129.864917][ T5834] do_syscall_64+0x106/0x7b0 [ 129.865017][ T5834] ? irqentry_exit+0x117/0x620 [ 129.865100][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.865187][ T5834] RIP: 0033:0x7f65b6d97407 [ 129.865271][ T5834] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 129.865386][ T5834] RSP: 002b:00007fff35eee530 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 129.865478][ T5834] RAX: ffffffffffffffda RBX: 00007f65b6ca9880 RCX: 00007f65b6d97407 [ 129.865533][ T5834] RDX: 0000000000000000 RSI: 00007fff35eeff25 RDI: ffffffffffffff9c [ 129.865599][ T5834] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 129.865645][ T5834] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 129.865700][ T5834] R13: 00007fff35eee780 R14: 00007f65b752d000 R15: 000055f44d39a4d8 [ 129.865777][ T5834] [ 129.865802][ T5834] [ 129.868877][ T1121] usb 1-1: Product: syz [ 129.870035][ T5834] Allocated by task 5783: [ 129.879320][ T5769] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 129.889063][ T5834] kasan_save_stack+0x30/0x50 [ 129.889111][ T5834] kasan_save_track+0x14/0x30 [ 129.896318][ T1121] usb 1-1: Manufacturer: syz [ 129.900058][ T5834] __kasan_kmalloc+0x8f/0xa0 [ 129.905516][ T1121] usb 1-1: SerialNumber: syz [ 129.909717][ T5834] em28xx_v4l2_init.cold+0x94/0x3503 [ 129.948160][ T5783] em28xx 4-1:0.89: Remote control support is not available for this card. [ 129.950916][ T5834] em28xx_init_extension+0x13a/0x200 [ 129.963985][ T1121] usb 1-1: config 0 descriptor?? [ 129.964856][ T5834] request_module_async+0x61/0x80 [ 129.971425][ T5766] em28xx 4-1:0.89: Closing input extension [ 129.974877][ T5834] process_one_work+0xa23/0x19a0 [ 129.974915][ T5834] worker_thread+0x5ef/0xe50 [ 129.974946][ T5834] kthread+0x370/0x450 [ 129.980956][ T5766] em28xx 4-1:0.89: Deregistering snapshot button [ 129.988010][ T5834] ret_from_fork+0x6c3/0xcb0 [ 129.993512][ T23] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 129.997586][ T5834] ret_from_fork_asm+0x1a/0x30 [ 130.002818][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.007163][ T5834] [ 130.007172][ T5834] Freed by task 5783: [ 130.007186][ T5834] kasan_save_stack+0x30/0x50 [ 130.007230][ T5834] kasan_save_track+0x14/0x30 [ 130.014355][ T23] usb 7-1: Product: syz [ 130.016668][ T5834] kasan_save_free_info+0x3b/0x70 [ 130.021971][ T23] usb 7-1: Manufacturer: syz [ 130.026769][ T5834] __kasan_slab_free+0x43/0x70 [ 130.026817][ T5834] kfree+0x1dc/0x640 [ 130.026841][ T5834] kref_put.isra.0+0x56/0x90 [ 130.032499][ T23] usb 7-1: SerialNumber: syz [ 130.037542][ T5834] em28xx_v4l2_init.cold+0x280/0x3503 [ 130.037587][ T5834] em28xx_init_extension+0x13a/0x200 [ 130.037617][ T5834] request_module_async+0x61/0x80 [ 130.063538][ T23] usb 7-1: config 0 descriptor?? [ 130.077584][ T5834] process_one_work+0xa23/0x19a0 [ 130.077631][ T5834] worker_thread+0x5ef/0xe50 [ 130.077669][ T5834] kthread+0x370/0x450 [ 130.103647][ T5769] usb 8-1: Using ep0 maxpacket: 32 [ 130.110900][ T5834] ret_from_fork+0x6c3/0xcb0 [ 130.156810][ T5769] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 130.157938][ T5834] ret_from_fork_asm+0x1a/0x30 [ 130.162566][ T5769] usb 8-1: config 0 has no interface number 0 [ 130.167164][ T5834] [ 130.167173][ T5834] The buggy address belongs to the object at ffff88811f2a8000 [ 130.167173][ T5834] which belongs to the cache kmalloc-8k of size 8192 [ 130.167197][ T5834] The buggy address is located 1928 bytes inside of [ 130.167197][ T5834] freed 8192-byte region [ffff88811f2a8000, ffff88811f2aa000) [ 130.167226][ T5834] [ 130.167233][ T5834] The buggy address belongs to the physical page: [ 130.167258][ T5834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811f2ac000 pfn:0x11f2a8 [ 130.185966][ T1121] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 130.191063][ T5834] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 130.210284][ T5769] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.211866][ T5834] flags: 0x200000000000240(workingset|head|node=0|zone=2) [ 130.217908][ T23] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 130.220647][ T5834] page_type: f5(slab) [ 130.235932][ T5769] usb 8-1: config 0 interface 89 has no altsetting 0 [ 130.240753][ T5834] raw: 0200000000000240 ffff888100042280 ffff888100040ac8 ffff888100040ac8 [ 130.250012][ T1121] em28xx 1-1:0.89: Video interface 89 found: [ 130.253679][ T5834] raw: ffff88811f2ac000 0000000800020001 00000000f5000000 0000000000000000 [ 130.253710][ T5834] head: 0200000000000240 ffff888100042280 ffff888100040ac8 ffff888100040ac8 [ 130.253738][ T5834] head: ffff88811f2ac000 0000000800020001 00000000f5000000 0000000000000000 [ 130.260517][ T23] em28xx 7-1:0.89: Video interface 89 found: [ 130.264879][ T5834] head: 0200000000000003 ffffea00047caa01 00000000ffffffff 00000000ffffffff [ 130.264908][ T5834] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 130.264950][ T5834] page dumped because: kasan: bad access detected [ 130.283510][ T5769] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 130.288303][ T5834] page_owner tracks the page as allocated [ 130.288316][ T5834] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5783, tgid 5783 (kworker/1:8), ts 129615986442, free_ts 86220479658 [ 130.292283][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.296823][ T5834] post_alloc_hook+0x153/0x170 [ 130.296876][ T5834] get_page_from_freelist+0xf10/0x39f0 [ 130.296911][ T5834] __alloc_frozen_pages_noprof+0x273/0x2860 [ 130.315581][ T5769] usb 8-1: Product: syz [ 130.317344][ T5834] new_slab+0xa6/0x6c0 [ 130.317376][ T5834] refill_objects+0x26b/0x400 [ 130.322442][ T5769] usb 8-1: Manufacturer: syz [ 130.327385][ T5834] __pcs_replace_empty_main+0x1ab/0x660 [ 130.327423][ T5834] __kmalloc_cache_noprof+0x52c/0x6b0 [ 130.327451][ T5834] em28xx_v4l2_init.cold+0x94/0x3503 [ 130.636105][ T5834] em28xx_init_extension+0x13a/0x200 [ 130.641441][ T5834] request_module_async+0x61/0x80 [ 130.646507][ T5834] process_one_work+0xa23/0x19a0 [ 130.651492][ T5834] worker_thread+0x5ef/0xe50 [ 130.656123][ T5834] kthread+0x370/0x450 [ 130.660232][ T5834] ret_from_fork+0x6c3/0xcb0 [ 130.664870][ T5834] ret_from_fork_asm+0x1a/0x30 [ 130.669778][ T5834] page last free pid 4112 tgid 4112 stack trace: [ 130.676126][ T5834] __free_frozen_pages+0x7b1/0xfb0 [ 130.681287][ T5834] qlist_free_all+0x47/0xe0 [ 130.685829][ T5834] kasan_quarantine_reduce+0x1a0/0x1f0 [ 130.691336][ T5834] __kasan_slab_alloc+0x4e/0x70 [ 130.696232][ T5834] kmem_cache_alloc_noprof+0x2e7/0x6a0 [ 130.701730][ T5834] vm_area_dup+0x25/0x6e0 [ 130.706094][ T5834] __split_vma+0x18c/0xd60 [ 130.710541][ T5834] vma_modify+0x10bd/0x21e0 [ 130.715078][ T5834] vma_modify_flags+0x1f2/0x350 [ 130.719960][ T5834] mprotect_fixup+0x209/0xb70 [ 130.724665][ T5834] do_mprotect_pkey+0x9e1/0xe70 [ 130.729555][ T5834] __x64_sys_mprotect+0x78/0xc0 [ 130.734444][ T5834] do_syscall_64+0x106/0x7b0 [ 130.739079][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.745001][ T5834] [ 130.747352][ T5834] Memory state around the buggy address: [ 130.753103][ T5834] ffff88811f2a8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.761200][ T5834] ffff88811f2a8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.769296][ T5834] >ffff88811f2a8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.777385][ T5834] ^ [ 130.781742][ T5834] ffff88811f2a8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.789838][ T5834] ffff88811f2a8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.797929][ T5834] ================================================================== [ 130.806287][ T29] audit: type=1400 audit(1776583859.726:108): avc: denied { read } for pid=2838 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 130.813360][ T5769] usb 8-1: SerialNumber: syz [ 130.828679][ T29] audit: type=1400 audit(1776583860.226:109): avc: denied { search } for pid=2838 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.854862][ T29] audit: type=1400 audit(1776583860.226:110): avc: denied { search } for pid=2838 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.876474][ T29] audit: type=1400 audit(1776583860.226:111): avc: denied { add_name } for pid=2838 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.878301][ T5769] usb 8-1: config 0 descriptor?? [ 130.897314][ T29] audit: type=1400 audit(1776583860.226:112): avc: denied { create } for pid=2838 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.923248][ T29] audit: type=1400 audit(1776583860.226:113): avc: denied { append open } for pid=2838 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.946397][ T29] audit: type=1400 audit(1776583860.256:114): avc: denied { getattr } for pid=2838 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.970885][ T2816] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 130.978984][ T5834] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.986248][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 130.995327][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 131.005530][ T5834] Call Trace: [ 131.008855][ T5834] [ 131.011827][ T5834] dump_stack_lvl+0x100/0x190 [ 131.016562][ T5834] vpanic+0x552/0x970 [ 131.020584][ T5834] ? __pfx_vpanic+0x10/0x10 [ 131.025134][ T5834] ? v4l2_fh_init+0x27d/0x2c0 [ 131.029852][ T5834] panic+0xd1/0xe0 [ 131.033620][ T5834] ? __pfx_panic+0x10/0x10 [ 131.038086][ T5834] ? v4l2_fh_init+0x27d/0x2c0 [ 131.042887][ T5834] ? preempt_schedule_common+0x42/0xc0 [ 131.048488][ T5834] ? check_panic_on_warn+0x1f/0x90 [ 131.053679][ T5834] check_panic_on_warn.cold+0x19/0x34 [ 131.059106][ T5834] end_report.part.0+0x3a/0x90 [ 131.064088][ T5834] kasan_report.cold+0xe/0x18 [ 131.068813][ T5834] ? v4l2_fh_init+0x27d/0x2c0 [ 131.073529][ T5834] v4l2_fh_init+0x27d/0x2c0 [ 131.078068][ T5834] v4l2_fh_open+0x64/0xa0 [ 131.082434][ T5834] em28xx_v4l2_open+0x11e/0x570 [ 131.087354][ T5834] v4l2_open+0x1d2/0x490 [ 131.091665][ T5834] ? __pfx_v4l2_open+0x10/0x10 [ 131.096463][ T5834] chrdev_open+0x234/0x6a0 [ 131.100928][ T5834] ? __pfx_chrdev_open+0x10/0x10 [ 131.105903][ T5834] ? path_get+0x61/0x80 [ 131.110127][ T5834] do_dentry_open+0x68b/0x14b0 [ 131.115023][ T5834] ? __pfx_chrdev_open+0x10/0x10 [ 131.120003][ T5834] ? inode_permission+0x374/0x620 [ 131.125084][ T5834] vfs_open+0x82/0x3f0 [ 131.129203][ T5834] ? may_open+0x1f3/0x410 [ 131.133693][ T5834] path_openat+0x208c/0x31a0 [ 131.138337][ T5834] ? __pfx_path_openat+0x10/0x10 [ 131.143335][ T5834] do_file_open+0x20e/0x430 [ 131.147888][ T5834] ? __pfx_do_file_open+0x10/0x10 [ 131.153056][ T5834] ? alloc_fd+0x42a/0x730 [ 131.157437][ T5834] ? do_getname+0x191/0x390 [ 131.161994][ T5834] do_sys_openat2+0x10d/0x1e0 [ 131.166722][ T5834] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.171977][ T5834] __x64_sys_openat+0x12d/0x210 [ 131.176934][ T5834] ? __pfx___x64_sys_openat+0x10/0x10 [ 131.182357][ T5834] ? do_user_addr_fault+0x3e3/0x11d0 [ 131.187806][ T5834] do_syscall_64+0x106/0x7b0 [ 131.192451][ T5834] ? irqentry_exit+0x117/0x620 [ 131.197279][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.203210][ T5834] RIP: 0033:0x7f65b6d97407 [ 131.207751][ T5834] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 131.227479][ T5834] RSP: 002b:00007fff35eee530 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 131.235934][ T5834] RAX: ffffffffffffffda RBX: 00007f65b6ca9880 RCX: 00007f65b6d97407 [ 131.243954][ T5834] RDX: 0000000000000000 RSI: 00007fff35eeff25 RDI: ffffffffffffff9c [ 131.251973][ T5834] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 131.259995][ T5834] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 131.268012][ T5834] R13: 00007fff35eee780 R14: 00007f65b752d000 R15: 000055f44d39a4d8 [ 131.276118][ T5834] [ 131.279741][ T5834] Kernel Offset: disabled [ 131.284173][ T5834] Rebooting in 86400 seconds..