em_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 34.659431][ T29] audit: type=1400 audit(1776606302.128:59): avc: denied { write } for pid=2949 comm="sh" path="pipe:[493]" dev="pipefs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 34.681514][ T29] audit: type=1400 audit(1776606302.128:60): avc: denied { rlimitinh } for pid=2949 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 34.700477][ T29] audit: type=1400 audit(1776606302.128:61): avc: denied { siginh } for pid=2949 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 39.228167][ T2952] sshd-session (2952) used greatest stack depth: 23384 bytes left
Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts.
2026/04/19 13:45:17 parsed 1 programs
[ 49.749308][ T29] audit: type=1400 audit(1776606317.228:62): avc: denied { node_bind } for pid=2969 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 49.770217][ T29] audit: type=1400 audit(1776606317.238:63): avc: denied { module_request } for pid=2969 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 52.551330][ T29] audit: type=1400 audit(1776606320.028:64): avc: denied { mounton } for pid=2979 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 52.575345][ T29] audit: type=1400 audit(1776606320.058:65): avc: denied { mount } for pid=2979 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 52.587699][ T2979] cgroup: Unknown subsys name 'net'
[ 52.604718][ T29] audit: type=1400 audit(1776606320.088:66): avc: denied { unmount } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 52.724320][ T2979] cgroup: Unknown subsys name 'cpuset'
[ 52.733497][ T2979] cgroup: Unknown subsys name 'rlimit'
[ 52.918033][ T29] audit: type=1400 audit(1776606320.398:67): avc: denied { setattr } for pid=2979 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 52.941425][ T29] audit: type=1400 audit(1776606320.398:68): avc: denied { create } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 52.962236][ T29] audit: type=1400 audit(1776606320.408:69): avc: denied { write } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 52.983115][ T29] audit: type=1400 audit(1776606320.408:70): avc: denied { read } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 53.009659][ T29] audit: type=1400 audit(1776606320.488:71): avc: denied { sys_module } for pid=2979 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 53.155063][ T2983] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 53.180832][ T2979] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 54.773002][ T29] kauditd_printk_skb: 9 callbacks suppressed
[ 54.773024][ T29] audit: type=1400 audit(1776606322.258:81): avc: denied { read } for pid=2989 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 54.841179][ T29] audit: type=1400 audit(1776606322.258:82): avc: denied { open } for pid=2989 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 54.891421][ T29] audit: type=1400 audit(1776606322.258:83): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 54.957724][ T29] audit: type=1400 audit(1776606322.438:84): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/root/syzkaller.WjtlAF/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 55.052660][ T29] audit: type=1400 audit(1776606322.438:85): avc: denied { mount } for pid=2989 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 55.139045][ T29] audit: type=1400 audit(1776606322.458:86): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/root/syzkaller.WjtlAF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 55.185437][ T29] audit: type=1400 audit(1776606322.458:87): avc: denied { mount } for pid=2989 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 55.242561][ T29] audit: type=1400 audit(1776606322.478:88): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/root/syzkaller.WjtlAF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 55.289546][ T29] audit: type=1400 audit(1776606322.478:89): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/root/syzkaller.WjtlAF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 55.326338][ T2989] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 55.396982][ T29] audit: type=1400 audit(1776606322.478:90): avc: denied { unmount } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
2026/04/19 13:45:38 executed programs: 0
[ 71.086272][ T3012] syz-executor (3012) used greatest stack depth: 22520 bytes left
[ 71.512974][ T3539] modprobe (3539) used greatest stack depth: 21928 bytes left
2026/04/19 13:46:26 executed programs: 10
[ 119.095774][ T29] kauditd_printk_skb: 16 callbacks suppressed
[ 119.095823][ T29] audit: type=1400 audit(1776606386.578:107): avc: denied { read write } for pid=5742 comm="syz.5.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 119.170465][ T29] audit: type=1400 audit(1776606386.578:108): avc: denied { open } for pid=5742 comm="syz.5.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 119.222219][ T29] audit: type=1400 audit(1776606386.578:109): avc: denied { ioctl } for pid=5742 comm="syz.5.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 119.383750][ T2818] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 119.555051][ T2818] usb 6-1: Using ep0 maxpacket: 32
[ 119.578951][ T2818] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 119.587462][ T2818] usb 6-1: config 0 has no interface number 0
[ 119.606473][ T2818] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 119.632595][ T2818] usb 6-1: config 0 interface 89 has no altsetting 0
[ 119.641735][ T2818] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 119.650850][ T2818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 119.671403][ T2818] usb 6-1: Product: syz
[ 119.675810][ T2818] usb 6-1: Manufacturer: syz
[ 119.680440][ T2818] usb 6-1: SerialNumber: syz
[ 119.691682][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 119.710935][ T2818] usb 6-1: config 0 descriptor??
[ 119.737942][ T2818] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 119.756960][ T2818] em28xx 6-1:0.89: Video interface 89 found:
[ 119.821371][ T28] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 119.851400][ T10] usb 2-1: Using ep0 maxpacket: 32
[ 119.863655][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[ 119.881340][ T10] usb 2-1: config 0 has no interface number 0
[ 119.897154][ T10] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 119.909565][ T10] usb 2-1: config 0 interface 89 has no altsetting 0
[ 119.922401][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 119.941375][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 119.949533][ T10] usb 2-1: Product: syz
[ 119.970513][ T10] usb 2-1: Manufacturer: syz
[ 119.988468][ T10] usb 2-1: SerialNumber: syz
[ 119.998847][ T10] usb 2-1: config 0 descriptor??
[ 120.004116][ T28] usb 7-1: Using ep0 maxpacket: 32
[ 120.011008][ T28] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 120.020982][ T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 120.029772][ T2818] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[ 120.031766][ T10] em28xx 2-1:0.89: Video interface 89 found:
[ 120.038769][ T28] usb 7-1: config 0 has no interface number 0
[ 120.050024][ T28] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 120.060991][ T28] usb 7-1: config 0 interface 89 has no altsetting 0
[ 120.070195][ T28] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 120.079853][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 120.088199][ T28] usb 7-1: Product: syz
[ 120.093373][ T28] usb 7-1: Manufacturer: syz
[ 120.098021][ T28] usb 7-1: SerialNumber: syz
[ 120.107243][ T28] usb 7-1: config 0 descriptor??
[ 120.128194][ T28] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 120.138117][ T2818] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 120.146659][ T2818] em28xx 6-1:0.89: board has no eeprom
[ 120.153935][ T28] em28xx 7-1:0.89: Video interface 89 found:
[ 120.221405][ T2818] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[ 120.224725][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 120.229521][ T2818] em28xx 6-1:0.89: analog set to bulk mode.
[ 120.242962][ T23] em28xx 6-1:0.89: Registering V4L2 extension
[ 120.269632][ T2818] usb 6-1: USB disconnect, device number 2
[ 120.277977][ T2818] em28xx 6-1:0.89: Disconnecting em28xx
[ 120.281889][ T10] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[ 120.311016][ T23] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[ 120.330066][ T23] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[ 120.341306][ T23] em28xx 6-1:0.89: No AC97 audio processor
[ 120.354974][ T23] usb 6-1: Decoder not found
[ 120.359906][ T23] em28xx 6-1:0.89: failed to create media graph
[ 120.364169][ T10] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 120.367196][ T23] em28xx 6-1:0.89: V4L2 device video0 deregistered
[ 120.389960][ T23] em28xx 6-1:0.89: Registering snapshot button...
[ 120.391638][ T9] usb 3-1: Using ep0 maxpacket: 32
[ 120.398012][ T28] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[ 120.408440][ T10] em28xx 2-1:0.89: board has no eeprom
[ 120.416132][ T23] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input5
[ 120.420430][ T9] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[ 120.435084][ T3054] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 120.439555][ T23] em28xx 6-1:0.89: Remote control support is not available for this card.
[ 120.449883][ T9] usb 3-1: config 0 has no interface number 0
[ 120.458032][ T9] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 120.464993][ T2818] em28xx 6-1:0.89: Closing input extension
[ 120.470582][ T9] usb 3-1: config 0 interface 89 has no altsetting 0
[ 120.481644][ T10] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[ 120.488926][ T10] em28xx 2-1:0.89: analog set to bulk mode.
[ 120.495463][ T28] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 120.501115][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 120.513157][ T2818] em28xx 6-1:0.89: Deregistering snapshot button
[ 120.519773][ T28] em28xx 7-1:0.89: board has no eeprom
[ 120.524271][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 120.540617][ T9] usb 3-1: Product: syz
[ 120.562054][ T9] usb 3-1: Manufacturer: syz
[ 120.572389][ T10] usb 2-1: USB disconnect, device number 2
[ 120.578296][ T1117] em28xx 2-1:0.89: Registering V4L2 extension
[ 120.593327][ T10] em28xx 2-1:0.89: Disconnecting em28xx
[ 120.601120][ T9] usb 3-1: SerialNumber: syz
[ 120.611394][ T3054] usb 4-1: Using ep0 maxpacket: 32
[ 120.611396][ T28] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[ 120.611429][ T28] em28xx 7-1:0.89: analog set to bulk mode.
[ 120.621146][ T3054] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[ 120.637577][ T2818] em28xx 6-1:0.89: Freeing device
[ 120.654341][ T9] usb 3-1: config 0 descriptor??
[ 120.662528][ T3054] usb 4-1: config 0 has no interface number 0
[ 120.673729][ T3054] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 120.694997][ T3054] usb 4-1: config 0 interface 89 has no altsetting 0
[ 120.706352][ T9] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 120.723827][ T28] usb 7-1: USB disconnect, device number 2
[ 120.739648][ T9] em28xx 3-1:0.89: Video interface 89 found:
[ 120.760067][ T3054] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 120.771401][ T1117] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[ 120.784462][ T28] em28xx 7-1:0.89: Disconnecting em28xx
[ 120.791464][ T1117] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[ 120.798653][ T3054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 120.813799][ T1117] em28xx 2-1:0.89: No AC97 audio processor
[ 120.820275][ T3054] usb 4-1: Product: syz
[ 120.825021][ T3054] usb 4-1: Manufacturer: syz
[ 120.831915][ T3054] usb 4-1: SerialNumber: syz
[ 120.838862][ T1117] usb 2-1: Decoder not found
[ 120.844320][ T1117] em28xx 2-1:0.89: failed to create media graph
[ 120.858024][ T3054] usb 4-1: config 0 descriptor??
[ 120.871559][ T1117] em28xx 2-1:0.89: V4L2 device video0 deregistered
[ 120.884315][ T3054] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 120.902978][ T1117] em28xx 2-1:0.89: Registering snapshot button...
[ 120.925565][ T3054] em28xx 4-1:0.89: Video interface 89 found:
[ 120.932271][ T9] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[ 120.943854][ T1117] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input6
[ 120.983388][ T1117] em28xx 2-1:0.89: Remote control support is not available for this card.
[ 121.002240][ T23] em28xx 7-1:0.89: Registering V4L2 extension
[ 121.009168][ T9] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 121.033279][ T9] em28xx 3-1:0.89: board has no eeprom
[ 121.051428][ T2818] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 121.071691][ T23] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[ 121.078710][ T23] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[ 121.088061][ T23] em28xx 7-1:0.89: No AC97 audio processor
[ 121.098472][ T23] usb 7-1: Decoder not found
[ 121.103330][ T23] em28xx 7-1:0.89: failed to create media graph
[ 121.109754][ T9] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[ 121.110060][ T23] em28xx 7-1:0.89: V4L2 device video0 deregistered
[ 121.119263][ T9] em28xx 3-1:0.89: analog set to bulk mode.
[ 121.130740][ T23] em28xx 7-1:0.89: Registering snapshot button...
[ 121.140909][ T23] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input7
[ 121.142339][ T3054] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[ 121.159350][ T9] usb 3-1: USB disconnect, device number 2
[ 121.167236][ T9] em28xx 3-1:0.89: Disconnecting em28xx
[ 121.174591][ T23] em28xx 7-1:0.89: Remote control support is not available for this card.
[ 121.190158][ T10] em28xx 2-1:0.89: Closing input extension
[ 121.199490][ T10] em28xx 2-1:0.89: Deregistering snapshot button
[ 121.211338][ T2818] usb 6-1: Using ep0 maxpacket: 32
[ 121.218571][ T2818] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 121.227429][ T2818] usb 6-1: config 0 has no interface number 0
[ 121.233644][ T2818] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 121.244515][ T2818] usb 6-1: config 0 interface 89 has no altsetting 0
[ 121.248093][ T1117] em28xx 3-1:0.89: Registering V4L2 extension
[ 121.257251][ T2818] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 121.261615][ T3054] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 121.268096][ T2818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 121.284267][ T10] em28xx 2-1:0.89: Freeing device
[ 121.293271][ T2818] usb 6-1: Product: syz
[ 121.297504][ T2818] usb 6-1: Manufacturer: syz
[ 121.300299][ T3054] em28xx 4-1:0.89: board has no eeprom
[ 121.313358][ T2818] usb 6-1: SerialNumber: syz
[ 121.341006][ T2818] usb 6-1: config 0 descriptor??
[ 121.365140][ T2818] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 121.371501][ T3054] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[ 121.385240][ T2818] em28xx 6-1:0.89: Video interface 89 found:
[ 121.395088][ T1117] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[ 121.411377][ T3054] em28xx 4-1:0.89: analog set to bulk mode.
[ 121.420239][ T1117] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[ 121.440886][ T1117] em28xx 3-1:0.89: No AC97 audio processor
[ 121.463987][ T1117] usb 3-1: Decoder not found
[ 121.475502][ T3054] usb 4-1: USB disconnect, device number 2
[ 121.488440][ T1117] em28xx 3-1:0.89: failed to create media graph
[ 121.496778][ T3054] em28xx 4-1:0.89: Disconnecting em28xx
[ 121.503118][ T1117] em28xx 3-1:0.89: V4L2 device video0 deregistered
[ 121.512226][ T1117] em28xx 3-1:0.89: Registering snapshot button...
[ 121.516535][ T5790] ==================================================================
[ 121.526785][ T5790] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[ 121.527044][ T1117] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input8
[ 121.534302][ T5790] Read of size 8 at addr ffff88811623c788 by task v4l_id/5790
[ 121.534327][ T5790]
[ 121.534360][ T5790] CPU: 1 UID: 0 PID: 5790 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 121.534393][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 121.534418][ T5790] Call Trace:
[ 121.534457][ T5790]
[ 121.534504][ T5790] dump_stack_lvl+0x100/0x190
[ 121.534626][ T5790] print_report+0x156/0x4c9
[ 121.534753][ T5790] ? __virt_addr_valid+0x239/0x430
[ 121.534875][ T5790] ? v4l2_fh_init+0x27d/0x2c0
[ 121.534963][ T5790] kasan_report+0xdf/0x1e0
[ 121.535099][ T5790] ? v4l2_fh_init+0x27d/0x2c0
[ 121.535186][ T5790] v4l2_fh_init+0x27d/0x2c0
[ 121.535263][ T5790] v4l2_fh_open+0x64/0xa0
[ 121.535353][ T5790] em28xx_v4l2_open+0x11e/0x570
[ 121.535474][ T5790] v4l2_open+0x1d2/0x490
[ 121.535565][ T5790] ? __pfx_v4l2_open+0x10/0x10
[ 121.535648][ T5790] chrdev_open+0x234/0x6a0
[ 121.535749][ T5790] ? __pfx_chrdev_open+0x10/0x10
[ 121.535850][ T5790] ? path_get+0x61/0x80
[ 121.536001][ T5790] do_dentry_open+0x68b/0x14b0
[ 121.536154][ T5790] ? __pfx_chrdev_open+0x10/0x10
[ 121.536259][ T5790] ? inode_permission+0x374/0x620
[ 121.536387][ T5790] vfs_open+0x82/0x3f0
[ 121.536495][ T5790] ? may_open+0x1f3/0x410
[ 121.536622][ T5790] path_openat+0x208c/0x31a0
[ 121.536740][ T5790] ? __pfx_path_openat+0x10/0x10
[ 121.536844][ T5790] do_file_open+0x20e/0x430
[ 121.536943][ T5790] ? __pfx_do_file_open+0x10/0x10
[ 121.537094][ T5790] ? alloc_fd+0x42a/0x730
[ 121.537194][ T5790] ? do_getname+0x191/0x390
[ 121.537339][ T5790] do_sys_openat2+0x10d/0x1e0
[ 121.537476][ T5790] ? __pfx_do_sys_openat2+0x10/0x10
[ 121.537623][ T5790] __x64_sys_openat+0x12d/0x210
[ 121.537759][ T5790] ? __pfx___x64_sys_openat+0x10/0x10
[ 121.537905][ T5790] ? do_user_addr_fault+0x3e3/0x11d0
[ 121.538054][ T5790] do_syscall_64+0x106/0x7b0
[ 121.538152][ T5790] ? irqentry_exit+0x117/0x620
[ 121.538241][ T5790] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.538329][ T5790] RIP: 0033:0x7f4c7d894407
[ 121.538403][ T5790] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 121.538496][ T5790] RSP: 002b:00007fff5c743d40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 121.538582][ T5790] RAX: ffffffffffffffda RBX: 00007f4c7d7a6880 RCX: 00007f4c7d894407
[ 121.538637][ T5790] RDX: 0000000000000000 RSI: 00007fff5c744f26 RDI: ffffffffffffff9c
[ 121.538729][ T5790] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 121.538796][ T5790] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 121.538849][ T5790] R13: 00007fff5c743f90 R14: 00007f4c7e02a000 R15: 00005562360c94d8
[ 121.538926][ T5790]
[ 121.538974][ T5790]
[ 121.593574][ T1117] em28xx 3-1:0.89: Remote control support is not available for this card.
[ 121.594421][ T5790] Allocated by task 1117:
[ 121.826941][ T5790] kasan_save_stack+0x30/0x50
[ 121.831670][ T5790] kasan_save_track+0x14/0x30
[ 121.836382][ T5790] __kasan_kmalloc+0x8f/0xa0
[ 121.841007][ T5790] em28xx_v4l2_init.cold+0x94/0x3503
[ 121.846337][ T5790] em28xx_init_extension+0x13a/0x200
[ 121.851661][ T5790] request_module_async+0x61/0x80
[ 121.856711][ T5790] process_one_work+0xa23/0x19a0
[ 121.861679][ T5790] worker_thread+0x5ef/0xe50
[ 121.866301][ T5790] kthread+0x370/0x450
[ 121.870397][ T5790] ret_from_fork+0x6c3/0xcb0
[ 121.875032][ T5790] ret_from_fork_asm+0x1a/0x30
[ 121.879843][ T5790]
[ 121.882186][ T5790] Freed by task 1117:
[ 121.886180][ T5790] kasan_save_stack+0x30/0x50
[ 121.890907][ T5790] kasan_save_track+0x14/0x30
[ 121.895636][ T5790] kasan_save_free_info+0x3b/0x70
[ 121.900693][ T5790] __kasan_slab_free+0x43/0x70
[ 121.905500][ T5790] kfree+0x1dc/0x640
[ 121.909419][ T5790] kref_put.isra.0+0x56/0x90
[ 121.914041][ T5790] em28xx_v4l2_init.cold+0x280/0x3503
[ 121.919450][ T5790] em28xx_init_extension+0x13a/0x200
[ 121.924762][ T5790] request_module_async+0x61/0x80
[ 121.929813][ T5790] process_one_work+0xa23/0x19a0
[ 121.934780][ T5790] worker_thread+0x5ef/0xe50
[ 121.939405][ T5790] kthread+0x370/0x450
[ 121.943499][ T5790] ret_from_fork+0x6c3/0xcb0
[ 121.948125][ T5790] ret_from_fork_asm+0x1a/0x30
[ 121.952935][ T5790]
[ 121.955273][ T5790] The buggy address belongs to the object at ffff88811623c000
[ 121.955273][ T5790] which belongs to the cache kmalloc-8k of size 8192
[ 121.969343][ T5790] The buggy address is located 1928 bytes inside of
[ 121.969343][ T5790] freed 8192-byte region [ffff88811623c000, ffff88811623e000)
[ 121.983342][ T5790]
[ 121.985684][ T5790] The buggy address belongs to the physical page:
[ 121.992151][ T5790] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116238
[ 122.001031][ T5790] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 122.009557][ T5790] flags: 0x200000000000040(head|node=0|zone=2)
[ 122.015762][ T5790] page_type: f5(slab)
[ 122.019780][ T5790] raw: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
[ 122.028394][ T5790] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 122.037008][ T5790] head: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
[ 122.045701][ T5790] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 122.054394][ T5790] head: 0200000000000003 ffffea0004588e01 00000000ffffffff 00000000ffffffff
[ 122.063088][ T5790] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 122.071780][ T5790] page dumped because: kasan: bad access detected
[ 122.078219][ T5790] page_owner tracks the page as allocated
[ 122.083948][ T5790] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3530, tgid 3530 (syz-executor), ts 72285333526, free_ts 70109364732
[ 122.105349][ T5790] post_alloc_hook+0x153/0x170
[ 122.110168][ T5790] get_page_from_freelist+0xf10/0x39f0
[ 122.115650][ T5790] __alloc_frozen_pages_noprof+0x273/0x2860
[ 122.121577][ T5790] new_slab+0xa6/0x6c0
[ 122.125713][ T5790] refill_objects+0x26b/0x400
[ 122.130423][ T5790] __pcs_replace_empty_main+0x1ab/0x660
[ 122.136014][ T5790] __kmalloc_noprof+0x645/0x810
[ 122.140910][ T5790] cache_create_net+0xa2/0x1f0
[ 122.145721][ T5790] gss_svc_init_net+0x69/0x640
[ 122.150513][ T5790] ops_init+0x1e2/0x5f0
[ 122.154699][ T5790] setup_net+0x118/0x3a0
[ 122.158976][ T5790] copy_net_ns+0x440/0x780
[ 122.163453][ T5790] create_new_namespaces+0x3ea/0xc00
[ 122.168793][ T5790] unshare_nsproxy_namespaces+0xc3/0x1f0
[ 122.174474][ T5790] ksys_unshare+0x473/0xad0
[ 122.179007][ T5790] __x64_sys_unshare+0x31/0x40
[ 122.183792][ T5790] page last free pid 3488 tgid 3488 stack trace:
[ 122.190133][ T5790] __free_frozen_pages+0x7b1/0xfb0
[ 122.195289][ T5790] qlist_free_all+0x47/0xe0
[ 122.199830][ T5790] kasan_quarantine_reduce+0x1a0/0x1f0
[ 122.205329][ T5790] __kasan_slab_alloc+0x4e/0x70
[ 122.210218][ T5790] kmem_cache_alloc_noprof+0x2e7/0x6a0
[ 122.215703][ T5790] mas_alloc_nodes+0x280/0x390
[ 122.220493][ T5790] mas_preallocate+0x39c/0xf10
[ 122.225291][ T5790] commit_merge+0x3e3/0xae0
[ 122.229820][ T5790] vma_expand+0x7d3/0xce0
[ 122.234175][ T5790] vma_merge_new_range+0x3a8/0x9c0
[ 122.239330][ T5790] __mmap_region+0x8e4/0x26e0
[ 122.244059][ T5790] mmap_region+0x180/0x3e0
[ 122.248519][ T5790] do_mmap+0xc53/0x12d0
[ 122.252731][ T5790] vm_mmap_pgoff+0x201/0x390
[ 122.257372][ T5790] ksys_mmap_pgoff+0x3c8/0x650
[ 122.262167][ T5790] __x64_sys_mmap+0x125/0x190
[ 122.266875][ T5790]
[ 122.269215][ T5790] Memory state around the buggy address:
[ 122.274866][ T5790] ffff88811623c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 122.282946][ T5790] ffff88811623c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 122.291022][ T5790] >ffff88811623c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 122.299185][ T5790] ^
[ 122.303529][ T5790] ffff88811623c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 122.311611][ T5790] ffff88811623c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 122.319703][ T5790] ==================================================================
[ 122.327998][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 122.329417][ T28] em28xx 7-1:0.89: Closing input extension
[ 122.342324][ T5790] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 122.349571][ T5790] CPU: 0 UID: 0 PID: 5790 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full)
[ 122.358549][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 122.368696][ T5790] Call Trace:
[ 122.372007][ T5790]
[ 122.374963][ T5790] dump_stack_lvl+0x100/0x190
[ 122.379707][ T5790] vpanic+0x552/0x970
[ 122.383717][ T5790] ? __pfx_vpanic+0x10/0x10
[ 122.388259][ T5790] ? v4l2_fh_init+0x27d/0x2c0
[ 122.392978][ T5790] panic+0xd1/0xe0
[ 122.396735][ T5790] ? __pfx_panic+0x10/0x10
[ 122.401189][ T5790] ? v4l2_fh_init+0x27d/0x2c0
[ 122.405895][ T5790] ? preempt_schedule_common+0x42/0xc0
[ 122.411405][ T5790] ? check_panic_on_warn+0x1f/0x90
[ 122.416547][ T5790] check_panic_on_warn.cold+0x19/0x34
[ 122.421996][ T5790] end_report.part.0+0x3a/0x90
[ 122.426807][ T5790] kasan_report.cold+0xe/0x18
[ 122.431525][ T5790] ? v4l2_fh_init+0x27d/0x2c0
[ 122.436255][ T5790] v4l2_fh_init+0x27d/0x2c0
[ 122.440792][ T5790] v4l2_fh_open+0x64/0xa0
[ 122.445162][ T5790] em28xx_v4l2_open+0x11e/0x570
[ 122.450057][ T5790] v4l2_open+0x1d2/0x490
[ 122.454331][ T5790] ? __pfx_v4l2_open+0x10/0x10
[ 122.459131][ T5790] chrdev_open+0x234/0x6a0
[ 122.463594][ T5790] ? __pfx_chrdev_open+0x10/0x10
[ 122.468620][ T5790] ? path_get+0x61/0x80
[ 122.472822][ T5790] do_dentry_open+0x68b/0x14b0
[ 122.477661][ T5790] ? __pfx_chrdev_open+0x10/0x10
[ 122.482657][ T5790] ? inode_permission+0x374/0x620
[ 122.487740][ T5790] vfs_open+0x82/0x3f0
[ 122.491876][ T5790] ? may_open+0x1f3/0x410
[ 122.496274][ T5790] path_openat+0x208c/0x31a0
[ 122.500922][ T5790] ? __pfx_path_openat+0x10/0x10
[ 122.505929][ T5790] do_file_open+0x20e/0x430
[ 122.510475][ T5790] ? __pfx_do_file_open+0x10/0x10
[ 122.515541][ T5790] ? alloc_fd+0x42a/0x730
[ 122.519907][ T5790] ? do_getname+0x191/0x390
[ 122.524461][ T5790] do_sys_openat2+0x10d/0x1e0
[ 122.529182][ T5790] ? __pfx_do_sys_openat2+0x10/0x10
[ 122.534446][ T5790] __x64_sys_openat+0x12d/0x210
[ 122.539344][ T5790] ? __pfx___x64_sys_openat+0x10/0x10
[ 122.544757][ T5790] ? do_user_addr_fault+0x3e3/0x11d0
[ 122.550089][ T5790] do_syscall_64+0x106/0x7b0
[ 122.554714][ T5790] ? irqentry_exit+0x117/0x620
[ 122.559512][ T5790] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.565445][ T5790] RIP: 0033:0x7f4c7d894407
[ 122.569909][ T5790] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 122.589559][ T5790] RSP: 002b:00007fff5c743d40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 122.598092][ T5790] RAX: ffffffffffffffda RBX: 00007f4c7d7a6880 RCX: 00007f4c7d894407
[ 122.606099][ T5790] RDX: 0000000000000000 RSI: 00007fff5c744f26 RDI: ffffffffffffff9c
[ 122.614139][ T5790] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 122.622140][ T5790] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 122.630149][ T5790] R13: 00007fff5c743f90 R14: 00007f4c7e02a000 R15: 00005562360c94d8
[ 122.638155][ T5790]
[ 122.641782][ T5790] Kernel Offset: disabled
[ 122.646130][ T5790] Rebooting in 86400 seconds..