syzkaller login: [ 25.737986][ T2873] udevd (2873) used greatest stack depth: 24808 bytes left
[ 29.242373][ T29] kauditd_printk_skb: 28 callbacks suppressed
[ 29.242395][ T29] audit: type=1400 audit(1767409655.715:55): avc: denied { read open } for pid=2931 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=468 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 29.639162][ T29] audit: type=1400 audit(1767409656.105:56): avc: denied { search } for pid=2928 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 33.053760][ T29] audit: type=1400 audit(1767409659.525:57): avc: denied { transition } for pid=2950 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 33.077082][ T29] audit: type=1400 audit(1767409659.525:58): avc: denied { noatsecure } for pid=2950 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 33.097662][ T29] audit: type=1400 audit(1767409659.535:59): avc: denied { write } for pid=2950 comm="sh" path="pipe:[2282]" dev="pipefs" ino=2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 33.123601][ T29] audit: type=1400 audit(1767409659.535:60): avc: denied { rlimitinh } for pid=2950 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 33.145058][ T29] audit: type=1400 audit(1767409659.535:61): avc: denied { siginh } for pid=2950 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 37.526992][ T2953] sshd-session (2953) used greatest stack depth: 23608 bytes left
Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts.
2026/01/03 03:07:54 parsed 1 programs
[ 48.063869][ T29] audit: type=1400 audit(1767409674.535:62): avc: denied { node_bind } for pid=2970 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 48.085856][ T29] audit: type=1400 audit(1767409674.535:63): avc: denied { module_request } for pid=2970 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 50.202741][ T29] audit: type=1400 audit(1767409676.675:64): avc: denied { mounton } for pid=2982 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 50.226781][ T29] audit: type=1400 audit(1767409676.695:65): avc: denied { mount } for pid=2982 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 50.229624][ T2982] cgroup: Unknown subsys name 'net'
[ 50.258060][ T29] audit: type=1400 audit(1767409676.725:66): avc: denied { unmount } for pid=2982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 50.464414][ T2982] cgroup: Unknown subsys name 'cpuset'
[ 50.473145][ T2982] cgroup: Unknown subsys name 'rlimit'
[ 50.703400][ T29] audit: type=1400 audit(1767409677.175:67): avc: denied { setattr } for pid=2982 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 50.727560][ T29] audit: type=1400 audit(1767409677.175:68): avc: denied { create } for pid=2982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 50.748697][ T29] audit: type=1400 audit(1767409677.175:69): avc: denied { write } for pid=2982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 50.769247][ T29] audit: type=1400 audit(1767409677.175:70): avc: denied { read } for pid=2982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 50.791100][ T29] audit: type=1400 audit(1767409677.205:71): avc: denied { sys_module } for pid=2982 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 50.872700][ T2986] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 50.992307][ T2982] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 53.126296][ T29] kauditd_printk_skb: 22 callbacks suppressed
[ 53.126323][ T29] audit: type=1400 audit(1767409679.585:94): avc: denied { create } for pid=3001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 53.154800][ T29] audit: type=1400 audit(1767409679.585:95): avc: denied { sys_admin } for pid=3001 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 53.232644][ T2994] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 53.323522][ T29] audit: type=1400 audit(1767409679.795:96): avc: denied { sys_chroot } for pid=3004 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 53.463036][ T29] audit: type=1400 audit(1767409679.815:97): avc: denied { read write } for pid=2994 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 53.488117][ T29] audit: type=1400 audit(1767409679.815:98): avc: denied { open } for pid=2994 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 53.512490][ T29] audit: type=1400 audit(1767409679.815:99): avc: denied { ioctl } for pid=2994 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 54.858695][ T29] audit: type=1400 audit(1767409681.325:100): avc: denied { create } for pid=3054 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
2026/01/03 03:08:14 executed programs: 0
2026/01/03 03:09:06 executed programs: 10
[ 120.082413][ T29] audit: type=1400 audit(1767409746.545:101): avc: denied { read write } for pid=5758 comm="syz.4.21" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 120.106851][ T29] audit: type=1400 audit(1767409746.545:102): avc: denied { open } for pid=5758 comm="syz.4.21" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 120.132427][ T29] audit: type=1400 audit(1767409746.545:103): avc: denied { ioctl } for pid=5758 comm="syz.4.21" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 120.312441][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 120.492412][ T9] usb 5-1: Using ep0 maxpacket: 32
[ 120.511357][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 120.521311][ T9] usb 5-1: config 0 has no interface number 0
[ 120.522394][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 120.527877][ T9] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 120.535656][ T1122] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 120.548667][ T9] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 120.562983][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 120.571015][ T9] usb 5-1: Product: syz
[ 120.575342][ T9] usb 5-1: Manufacturer: syz
[ 120.579958][ T9] usb 5-1: SerialNumber: syz
[ 120.587943][ T9] usb 5-1: config 0 descriptor??
[ 120.594042][ T5758] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 120.605529][ T9] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 120.612010][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 120.619193][ T9] em28xx 5-1:0.132: Video interface 132 found: bulk
[ 120.702002][ T43] usb 3-1: Using ep0 maxpacket: 32
[ 120.709155][ T43] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 120.717541][ T43] usb 3-1: config 0 has no interface number 0
[ 120.724002][ T1122] usb 8-1: Using ep0 maxpacket: 32
[ 120.729379][ T43] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 120.741033][ T1122] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[ 120.749389][ T1122] usb 8-1: config 0 has no interface number 0
[ 120.755945][ T5770] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 120.765019][ T43] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 120.774238][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 120.782496][ T43] usb 3-1: Product: syz
[ 120.786951][ T43] usb 3-1: Manufacturer: syz
[ 120.792035][ T43] usb 3-1: SerialNumber: syz
[ 120.796870][ T23] usb 1-1: Using ep0 maxpacket: 32
[ 120.802625][ T1122] usb 8-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 120.814939][ T23] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 120.823336][ T23] usb 1-1: config 0 has no interface number 0
[ 120.830482][ T23] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 120.842507][ T1122] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 120.852013][ T1122] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 120.860531][ T1122] usb 8-1: Product: syz
[ 120.865146][ T1122] usb 8-1: Manufacturer: syz
[ 120.869765][ T1122] usb 8-1: SerialNumber: syz
[ 120.872565][ T9] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 120.878124][ T43] usb 3-1: config 0 descriptor??
[ 120.886949][ T5764] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 120.895529][ T23] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 120.904851][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 120.913033][ T23] usb 1-1: Product: syz
[ 120.917233][ T23] usb 1-1: Manufacturer: syz
[ 120.921971][ T23] usb 1-1: SerialNumber: syz
[ 120.930022][ T43] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 120.940249][ T43] em28xx 3-1:0.132: Video interface 132 found: bulk
[ 120.945881][ T9] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 120.950215][ T1122] usb 8-1: config 0 descriptor??
[ 120.956318][ T9] em28xx 5-1:0.132: board has no eeprom
[ 120.965745][ T23] usb 1-1: config 0 descriptor??
[ 120.967245][ T5765] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 120.972012][ T5770] usb 4-1: Using ep0 maxpacket: 32
[ 120.994127][ T1122] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 121.004371][ T1122] em28xx 8-1:0.132: Video interface 132 found: bulk
[ 121.012572][ T5768] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 121.027271][ T23] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 121.037576][ T23] em28xx 1-1:0.132: Video interface 132 found: bulk
[ 121.041975][ T9] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 121.044444][ T5770] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 121.052476][ T9] em28xx 5-1:0.132: analog set to bulk mode.
[ 121.060731][ T5770] usb 4-1: config 0 has no interface number 0
[ 121.067530][ T2689] em28xx 5-1:0.132: Registering V4L2 extension
[ 121.073551][ T5770] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 121.093398][ T5770] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 121.096692][ T9] usb 5-1: USB disconnect, device number 2
[ 121.102925][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 121.118065][ T5770] usb 4-1: Product: syz
[ 121.122598][ T5770] usb 4-1: Manufacturer: syz
[ 121.127545][ T5770] usb 4-1: SerialNumber: syz
[ 121.138708][ T9] em28xx 5-1:0.132: Disconnecting em28xx
[ 121.179839][ T5770] usb 4-1: config 0 descriptor??
[ 121.192001][ T5774] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[ 121.216140][ T43] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 121.228401][ T5770] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 121.238651][ T5770] em28xx 4-1:0.132: Video interface 132 found: bulk
[ 121.254310][ T1122] em28xx 8-1:0.132: unknown em28xx chip ID (0)
[ 121.294134][ T43] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 121.304032][ T43] em28xx 3-1:0.132: board has no eeprom
[ 121.310992][ T2689] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 121.311039][ T23] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[ 121.325484][ T2689] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 121.333677][ T2689] em28xx 5-1:0.132: No AC97 audio processor
[ 121.334497][ T1122] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 121.349554][ T1122] em28xx 8-1:0.132: board has no eeprom
[ 121.353811][ T2689] usb 5-1: Decoder not found
[ 121.360139][ T2689] em28xx 5-1:0.132: failed to create media graph
[ 121.374090][ T43] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 121.374851][ T2689] em28xx 5-1:0.132: V4L2 device video0 deregistered
[ 121.382349][ T43] em28xx 3-1:0.132: analog set to bulk mode.
[ 121.396527][ T23] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 121.397944][ T2689] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 121.405421][ T23] em28xx 1-1:0.132: board has no eeprom
[ 121.416425][ T9] em28xx 5-1:0.132: Closing input extension
[ 121.428578][ T5775] em28xx 3-1:0.132: Registering V4L2 extension
[ 121.434300][ T9] em28xx 5-1:0.132: Freeing device
[ 121.442400][ T1122] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 121.450387][ T1122] em28xx 8-1:0.132: analog set to bulk mode.
[ 121.478431][ T43] usb 3-1: USB disconnect, device number 2
[ 121.490101][ T43] em28xx 3-1:0.132: Disconnecting em28xx
[ 121.501932][ T1122] usb 8-1: USB disconnect, device number 2
[ 121.508438][ T5770] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[ 121.522616][ T1122] em28xx 8-1:0.132: Disconnecting em28xx
[ 121.533992][ T23] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 121.542108][ T23] em28xx 1-1:0.132: analog set to bulk mode.
[ 121.583947][ T5770] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 121.594486][ T5770] em28xx 4-1:0.132: board has no eeprom
[ 121.603818][ T23] usb 1-1: USB disconnect, device number 2
[ 121.611687][ T23] em28xx 1-1:0.132: Disconnecting em28xx
[ 121.722462][ T5770] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 121.730543][ T5770] em28xx 4-1:0.132: analog set to bulk mode.
[ 121.754093][ T5775] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 121.761199][ T5775] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 121.763983][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 121.768790][ T5775] em28xx 3-1:0.132: No AC97 audio processor
[ 121.808499][ T5770] usb 4-1: USB disconnect, device number 2
[ 121.819474][ T5770] em28xx 4-1:0.132: Disconnecting em28xx
[ 121.838302][ T5775] usb 3-1: Decoder not found
[ 121.843216][ T5775] em28xx 3-1:0.132: failed to create media graph
[ 121.857972][ T5775] em28xx 3-1:0.132: V4L2 device video0 deregistered
[ 121.866591][ T5775] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 121.872414][ T5793] ==================================================================
[ 121.875593][ T5773] em28xx 8-1:0.132: Registering V4L2 extension
[ 121.883544][ T5793] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 121.883597][ T5793] Read of size 8 at addr ffff88811e46c738 by task v4l_id/5793
[ 121.883620][ T5793]
[ 121.907300][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary)
[ 121.907338][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 121.907355][ T5793] Call Trace:
[ 121.907365][ T5793]
[ 121.907376][ T5793] dump_stack_lvl+0x116/0x1f0
[ 121.907422][ T5793] print_report+0xcd/0x630
[ 121.907449][ T5793] ? __virt_addr_valid+0x81/0x610
[ 121.907481][ T5793] ? __phys_addr+0xe8/0x180
[ 121.907513][ T5793] ? v4l2_fh_init+0x27d/0x2c0
[ 121.907555][ T5793] kasan_report+0xe0/0x110
[ 121.907583][ T5793] ? v4l2_fh_init+0x27d/0x2c0
[ 121.907630][ T5793] v4l2_fh_init+0x27d/0x2c0
[ 121.907673][ T5793] v4l2_fh_open+0x64/0xa0
[ 121.907717][ T5793] em28xx_v4l2_open+0x24e/0x7e0
[ 121.907759][ T5793] v4l2_open+0x1d2/0x5e0
[ 121.907796][ T5793] ? __pfx_v4l2_open+0x10/0x10
[ 121.907828][ T5793] chrdev_open+0x234/0x6a0
[ 121.907859][ T5793] ? __pfx_chrdev_open+0x10/0x10
[ 121.907893][ T5793] do_dentry_open+0x723/0x13e0
[ 121.907919][ T5793] ? __pfx_chrdev_open+0x10/0x10
[ 121.907953][ T5793] ? inode_permission+0x37b/0x640
[ 121.908001][ T5793] vfs_open+0x82/0x3f0
[ 121.908053][ T5793] ? may_open+0x1f2/0x400
[ 121.908104][ T5793] path_openat+0x2078/0x3140
[ 121.908146][ T5793] ? __pfx_path_openat+0x10/0x10
[ 121.908189][ T5793] do_filp_open+0x20b/0x470
[ 121.908226][ T5793] ? __pfx_do_filp_open+0x10/0x10
[ 121.908277][ T5793] ? alloc_fd+0x420/0x760
[ 121.908318][ T5793] do_sys_openat2+0x120/0x260
[ 121.908361][ T5793] ? __pfx_do_sys_openat2+0x10/0x10
[ 121.908411][ T5793] __x64_sys_openat+0x174/0x210
[ 121.908455][ T5793] ? __pfx___x64_sys_openat+0x10/0x10
[ 121.908500][ T5793] ? do_user_addr_fault+0x83f/0x1240
[ 121.908553][ T5793] do_syscall_64+0xcd/0x570
[ 121.908594][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.908624][ T5793] RIP: 0033:0x7f4bf0379407
[ 121.908646][ T5793] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 121.908674][ T5793] RSP: 002b:00007ffdcdd2bf80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 121.908703][ T5793] RAX: ffffffffffffffda RBX: 00007f4bf028b880 RCX: 00007f4bf0379407
[ 121.908724][ T5793] RDX: 0000000000000000 RSI: 00007ffdcdd2df24 RDI: ffffffffffffff9c
[ 121.908744][ T5793] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 121.908761][ T5793] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 121.908778][ T5793] R13: 00007ffdcdd2c1d0 R14: 00007f4bf0b0f000 R15: 0000562ffeded4d8
[ 121.908811][ T5793]
[ 121.908821][ T5793]
[ 122.094254][ T5773] em28xx 8-1:0.132: Config register raw data: 0xffffffed
[ 122.108370][ T5793] Allocated by task 5775:
[ 122.108389][ T5793] kasan_save_stack+0x33/0x60
[ 122.117527][ T5773] em28xx 8-1:0.132: AC97 chip type couldn't be determined
[ 122.125579][ T5793] kasan_save_track+0x14/0x30
[ 122.125620][ T5793] __kasan_kmalloc+0x8f/0xa0
[ 122.125657][ T5793] em28xx_v4l2_init+0x114/0x4080
[ 122.133843][ T5773] em28xx 8-1:0.132: No AC97 audio processor
[ 122.142134][ T5793] em28xx_init_extension+0x13a/0x200
[ 122.142164][ T5793] request_module_async+0x61/0x70
[ 122.158235][ T5773] usb 8-1: Decoder not found
[ 122.158621][ T5793] process_one_work+0x9ba/0x1b20
[ 122.161685][ T5773] em28xx 8-1:0.132: failed to create media graph
[ 122.164178][ T5793] worker_thread+0x6c8/0xf10
[ 122.164206][ T5793] kthread+0x3c5/0x780
[ 122.164229][ T5793] ret_from_fork+0x74f/0xa30
[ 122.164259][ T5793] ret_from_fork_asm+0x1a/0x30
[ 122.172614][ T5773] em28xx 8-1:0.132: V4L2 device video1 deregistered
[ 122.176036][ T5793]
[ 122.176045][ T5793] Freed by task 5775:
[ 122.183503][ T5773] em28xx 8-1:0.132: Remote control support is not available for this card.
[ 122.188072][ T5793] kasan_save_stack+0x33/0x60
[ 122.193615][ T5788] em28xx 1-1:0.132: Registering V4L2 extension
[ 122.198121][ T5793] kasan_save_track+0x14/0x30
[ 122.292013][ T5793] kasan_save_free_info+0x3b/0x60
[ 122.297115][ T5793] __kasan_slab_free+0x43/0x70
[ 122.302104][ T5793] kfree+0x2c8/0x680
[ 122.306041][ T5793] em28xx_v4l2_init+0x22b5/0x4080
[ 122.311204][ T5793] em28xx_init_extension+0x13a/0x200
[ 122.312925][ T5788] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[ 122.316516][ T5793] request_module_async+0x61/0x70
[ 122.323619][ T5788] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[ 122.328924][ T5793] process_one_work+0x9ba/0x1b20
[ 122.336149][ T5788] em28xx 1-1:0.132: No AC97 audio processor
[ 122.341085][ T5793] worker_thread+0x6c8/0xf10
[ 122.350195][ T5788] usb 1-1: Decoder not found
[ 122.351998][ T5793] kthread+0x3c5/0x780
[ 122.352027][ T5793] ret_from_fork+0x74f/0xa30
[ 122.356645][ T5788] em28xx 1-1:0.132: failed to create media graph
[ 122.360883][ T5793] ret_from_fork_asm+0x1a/0x30
[ 122.366565][ T5788] em28xx 1-1:0.132: V4L2 device video1 deregistered
[ 122.372204][ T5793]
[ 122.372214][ T5793] The buggy address belongs to the object at ffff88811e46c000
[ 122.372214][ T5793] which belongs to the cache kmalloc-8k of size 8192
[ 122.372237][ T5793] The buggy address is located 1848 bytes inside of
[ 122.372237][ T5793] freed 8192-byte region [ffff88811e46c000, ffff88811e46e000)
[ 122.372265][ T5793]
[ 122.372272][ T5793] The buggy address belongs to the physical page:
[ 122.372284][ T5793] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e468
[ 122.379683][ T5788] em28xx 1-1:0.132: Remote control support is not available for this card.
[ 122.383907][ T5793] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 122.383931][ T5793] anon flags: 0x200000000000040(head|node=0|zone=2)
[ 122.383955][ T5793] page_type: f5(slab)
[ 122.383980][ T5793] raw: 0200000000000040 ffff888100042280 ffffea0004784000 0000000000000003
[ 122.386691][ T5789] em28xx 4-1:0.132: Registering V4L2 extension
[ 122.400996][ T5793] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 122.401028][ T5793] head: 0200000000000040 ffff888100042280 ffffea0004784000 0000000000000003
[ 122.401054][ T5793] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 122.504279][ T5793] head: 0200000000000003 ffffea0004791a01 00000000ffffffff 00000000ffffffff
[ 122.513311][ T5793] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 122.521984][ T5793] page dumped because: kasan: bad access detected
[ 122.528578][ T5793] page_owner tracks the page as allocated
[ 122.534299][ T5793] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3031, tgid 3031 (syz-executor), ts 55256498374, free_ts 55140807236
[ 122.556376][ T5793] post_alloc_hook+0x1af/0x220
[ 122.561431][ T5793] get_page_from_freelist+0x1058/0x3cb0
[ 122.567095][ T5793] __alloc_frozen_pages_noprof+0x259/0x21c0
[ 122.573347][ T5793] alloc_pages_mpol+0xe4/0x410
[ 122.578144][ T5793] new_slab+0x2c3/0x430
[ 122.582490][ T5793] ___slab_alloc+0xe20/0x1ca0
[ 122.587213][ T5793] __slab_alloc.constprop.0+0x63/0x110
[ 122.592850][ T5793] __kmalloc_cache_noprof+0x3d6/0x7e0
[ 122.598406][ T5793] mr_table_alloc+0x5f/0x2e0
[ 122.603010][ T5793] ipmr_net_init+0x2b1/0x370
[ 122.607620][ T5793] ops_init+0x1e2/0x5f0
[ 122.612143][ T5793] setup_net+0x11d/0x3a0
[ 122.616501][ T5793] copy_net_ns+0x33d/0x780
[ 122.621191][ T5793] create_new_namespaces+0x3ea/0xbf0
[ 122.626659][ T5793] unshare_nsproxy_namespaces+0xc0/0x1f0
[ 122.632395][ T5793] ksys_unshare+0x45b/0xa40
[ 122.637362][ T5793] page last free pid 3062 tgid 3062 stack trace:
[ 122.643777][ T5793] __free_frozen_pages+0x795/0x1010
[ 122.649338][ T5793] __put_partials+0x130/0x170
[ 122.654271][ T5793] qlist_free_all+0x4c/0xf0
[ 122.658963][ T5793] kasan_quarantine_reduce+0x195/0x1e0
[ 122.664812][ T5793] __kasan_slab_alloc+0x4e/0x70
[ 122.669861][ T5793] kmem_cache_alloc_noprof+0x26e/0x740
[ 122.675506][ T5793] getname_flags.part.0+0x4c/0x550
[ 122.680642][ T5793] getname_flags+0x93/0xf0
[ 122.685071][ T5793] do_sys_openat2+0xb7/0x260
[ 122.689831][ T5793] __x64_sys_openat+0x174/0x210
[ 122.695151][ T5793] do_syscall_64+0xcd/0x570
[ 122.699662][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.705818][ T5793]
[ 122.708154][ T5793] Memory state around the buggy address:
[ 122.713880][ T5793] ffff88811e46c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 122.721958][ T5793] ffff88811e46c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 122.730590][ T5793] >ffff88811e46c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 122.738955][ T5793] ^
[ 122.744988][ T5793] ffff88811e46c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 122.753350][ T5793] ffff88811e46c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 122.762137][ T5793] ==================================================================
[ 122.771266][ T5793] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 122.778858][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary)
[ 122.788450][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 122.798993][ T5793] Call Trace:
[ 122.802427][ T5793]
[ 122.805467][ T5793] dump_stack_lvl+0x3d/0x1f0
[ 122.810113][ T5793] vpanic+0x640/0x6f0
[ 122.814226][ T5793] panic+0xca/0xd0
[ 122.818074][ T5793] ? __pfx_panic+0x10/0x10
[ 122.822533][ T5793] ? check_panic_on_warn+0x1f/0xb0
[ 122.828480][ T5793] check_panic_on_warn+0xab/0xb0
[ 122.833686][ T5793] end_report+0x107/0x160
[ 122.838234][ T5793] kasan_report+0xee/0x110
[ 122.842757][ T5793] ? v4l2_fh_init+0x27d/0x2c0
[ 122.847856][ T5793] v4l2_fh_init+0x27d/0x2c0
[ 122.852505][ T5793] v4l2_fh_open+0x64/0xa0
[ 122.856982][ T5793] em28xx_v4l2_open+0x24e/0x7e0
[ 122.861990][ T5793] v4l2_open+0x1d2/0x5e0
[ 122.866360][ T5793] ? __pfx_v4l2_open+0x10/0x10
[ 122.871494][ T5793] chrdev_open+0x234/0x6a0
[ 122.876110][ T5793] ? __pfx_chrdev_open+0x10/0x10
[ 122.881263][ T5793] do_dentry_open+0x723/0x13e0
[ 122.886308][ T5793] ? __pfx_chrdev_open+0x10/0x10
[ 122.891777][ T5793] ? inode_permission+0x37b/0x640
[ 122.897126][ T5793] vfs_open+0x82/0x3f0
[ 122.901866][ T5793] ? may_open+0x1f2/0x400
[ 122.906246][ T5793] path_openat+0x2078/0x3140
[ 122.910967][ T5793] ? __pfx_path_openat+0x10/0x10
[ 122.916276][ T5793] do_filp_open+0x20b/0x470
[ 122.920892][ T5793] ? __pfx_do_filp_open+0x10/0x10
[ 122.926214][ T5793] ? alloc_fd+0x420/0x760
[ 122.930575][ T5793] do_sys_openat2+0x120/0x260
[ 122.935279][ T5793] ? __pfx_do_sys_openat2+0x10/0x10
[ 122.940943][ T5793] __x64_sys_openat+0x174/0x210
[ 122.945912][ T5793] ? __pfx___x64_sys_openat+0x10/0x10
[ 122.951322][ T5793] ? do_user_addr_fault+0x83f/0x1240
[ 122.956777][ T5793] do_syscall_64+0xcd/0x570
[ 122.961393][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.967394][ T5793] RIP: 0033:0x7f4bf0379407
[ 122.971998][ T5793] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 122.992417][ T5793] RSP: 002b:00007ffdcdd2bf80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 123.001111][ T5793] RAX: ffffffffffffffda RBX: 00007f4bf028b880 RCX: 00007f4bf0379407
[ 123.009182][ T5793] RDX: 0000000000000000 RSI: 00007ffdcdd2df24 RDI: ffffffffffffff9c
[ 123.017513][ T5793] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 123.025507][ T5793] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 123.033947][ T5793] R13: 00007ffdcdd2c1d0 R14: 00007f4bf0b0f000 R15: 0000562ffeded4d8
[ 123.042117][ T5793]
[ 123.045363][ T5793] Kernel Offset: disabled
[ 123.049868][ T5793] Rebooting in 86400 seconds..