./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2315134293 <...> Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. execve("./syz-executor2315134293", ["./syz-executor2315134293"], 0x7ffe0539ef10 /* 10 vars */) = 0 brk(NULL) = 0x555574bc5000 brk(0x555574bc5d00) = 0x555574bc5d00 arch_prctl(ARCH_SET_FS, 0x555574bc5380) = 0 set_tid_address(0x555574bc5650) = 5870 set_robust_list(0x555574bc5660, 24) = 0 rseq(0x555574bc5ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2315134293", 4096) = 28 getrandom("\x49\xad\x4d\xfe\x83\x39\xd1\x06", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555574bc5d00 brk(0x555574be6d00) = 0x555574be6d00 brk(0x555574be7000) = 0x555574be7000 mprotect(0x7f0bb8f1f000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5872 attached , child_tidptr=0x555574bc5650) = 5872 [pid 5872] set_robust_list(0x555574bc5660, 24) = 0 [pid 5870] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5872] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5874 attached ./strace-static-x86_64: Process 5873 attached [pid 5870] <... clone resumed>, child_tidptr=0x555574bc5650) = 5873 [pid 5874] set_robust_list(0x555574bc5660, 24 [pid 5873] set_robust_list(0x555574bc5660, 24 [pid 5874] <... set_robust_list resumed>) = 0 [pid 5873] <... set_robust_list resumed>) = 0 [pid 5870] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5873] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5872] <... clone resumed>, child_tidptr=0x555574bc5650) = 5874 [pid 5874] <... prctl resumed>) = 0 [pid 5874] setpgid(0, 0./strace-static-x86_64: Process 5876 attached ./strace-static-x86_64: Process 5875 attached ) = 0 [pid 5870] <... clone resumed>, child_tidptr=0x555574bc5650) = 5876 [pid 5876] set_robust_list(0x555574bc5660, 24 [pid 5875] set_robust_list(0x555574bc5660, 24 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5873] <... clone resumed>, child_tidptr=0x555574bc5650) = 5875 [pid 5870] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5876] <... set_robust_list resumed>) = 0 [pid 5876] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5875] <... set_robust_list resumed>) = 0 [pid 5874] <... openat resumed>) = 3 [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5874] write(3, "1000", 4./strace-static-x86_64: Process 5877 attached ) = 4 [pid 5877] set_robust_list(0x555574bc5660, 24 [pid 5874] close(3./strace-static-x86_64: Process 5878 attached [pid 5870] <... clone resumed>, child_tidptr=0x555574bc5650) = 5877 [pid 5877] <... set_robust_list resumed>) = 0 [pid 5875] <... prctl resumed>) = 0 [pid 5874] <... close resumed>) = 0 [pid 5877] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5878] set_robust_list(0x555574bc5660, 24 [pid 5876] <... clone resumed>, child_tidptr=0x555574bc5650) = 5878 [pid 5875] setpgid(0, 0 [pid 5878] <... set_robust_list resumed>) = 0 executing program [pid 5875] <... setpgid resumed>) = 0 [pid 5874] write(1, "executing program\n", 18 [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5879 attached [pid 5878] <... prctl resumed>) = 0 [pid 5875] <... openat resumed>) = 3 [pid 5874] <... write resumed>) = 18 [pid 5878] setpgid(0, 0) = 0 [pid 5879] set_robust_list(0x555574bc5660, 24 [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5877] <... clone resumed>, child_tidptr=0x555574bc5650) = 5879 [pid 5875] write(3, "1000", 4 [pid 5874] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5879] <... set_robust_list resumed>) = 0 [pid 5875] <... write resumed>) = 4 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5878] <... openat resumed>) = 3 [pid 5875] close(3 [pid 5874] <... openat resumed>) = 3 [pid 5879] <... prctl resumed>) = 0 [pid 5879] setpgid(0, 0 [pid 5878] write(3, "1000", 4 [pid 5875] <... close resumed>) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_INIT [pid 5879] <... setpgid resumed>) = 0 executing program [pid 5875] write(1, "executing program\n", 18 [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5878] <... write resumed>) = 4 [pid 5875] <... write resumed>) = 18 [pid 5874] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5878] close(3 [pid 5875] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5878] <... close resumed>) = 0 [pid 5879] <... openat resumed>) = 3 [pid 5878] write(1, "executing program\n", 18executing program [pid 5875] <... openat resumed>) = 3 [pid 5874] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5879] write(3, "1000", 4 [pid 5878] <... write resumed>) = 18 [pid 5878] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5875] ioctl(3, USB_RAW_IOCTL_INIT [pid 5879] <... write resumed>) = 4 [pid 5878] <... openat resumed>) = 3 [pid 5874] <... ioctl resumed>, 0) = 0 [pid 5875] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5879] close(3) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_INIT [pid 5875] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5879] write(1, "executing program\n", 18 [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5875] <... ioctl resumed>, 0) = 0 [pid 5874] <... ioctl resumed>, 0x7ffddd5ed690) = 0 executing program [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5879] <... write resumed>) = 18 [pid 5879] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5878] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5875] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5879] <... openat resumed>) = 3 [pid 5878] <... ioctl resumed>, 0) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffddd5ed690) = 0 [pid 5879] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5879] <... ioctl resumed>, 0) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5875] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5879] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5875] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5879] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5875] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5875] <... ioctl resumed>, 0x7ffddd5ec680) = 18 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 95.656117][ T984] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.685812][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.685893][ T1780] usb 2-1: new high-speed USB device number 2 using dummy_hcd [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5879] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5875] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 95.705764][ T5883] usb 4-1: new high-speed USB device number 2 using dummy_hcd [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5879] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 95.815980][ T984] usb 1-1: Using ep0 maxpacket: 32 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 9 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5874] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] <... ioctl resumed>, 0x7ffddd5ec680) = 18 [pid 5875] <... ioctl resumed>, 0x7ffddd5ec680) = 18 [pid 5874] <... ioctl resumed>, 0x7ffddd5ec680) = 27 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5875] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 9 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5878] <... ioctl resumed>, 0x7ffddd5ec680) = 9 [pid 5879] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 95.845931][ T1780] usb 2-1: Using ep0 maxpacket: 32 [ 95.846256][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 95.866578][ T984] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 95.875782][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 95.881359][ T984] usb 1-1: config 0 has no interface number 0 [ 95.884162][ T1780] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5875] <... ioctl resumed>, 0x7ffddd5ec680) = 27 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5879] <... ioctl resumed>, 0x7ffddd5ec680) = 18 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] <... ioctl resumed>, 0x7ffddd5ec680) = 27 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5879] <... ioctl resumed>, 0x7ffddd5ec680) = 9 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5874] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 27 [pid 5874] <... ioctl resumed>, 0x7ffddd5ec680) = 4 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 95.888534][ T984] usb 1-1: config 0 interface 89 has no altsetting 0 [ 95.899876][ T1780] usb 2-1: config 0 has no interface number 0 [ 95.911148][ T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 95.914716][ T1780] usb 2-1: config 0 interface 89 has no altsetting 0 [ 95.931061][ T10] usb 3-1: config 0 has no interface number 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5875] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 4 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5874] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [ 95.940914][ T5883] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 95.956753][ T10] usb 3-1: config 0 interface 89 has no altsetting 0 [ 95.964808][ T1780] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 95.972469][ T5883] usb 4-1: config 0 has no interface number 0 [ 95.980376][ T1780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5879] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5878] <... ioctl resumed>, 0x7ffddd5ec680) = 4 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 95.980466][ T984] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 95.990418][ T1780] usb 2-1: Product: syz [ 95.998275][ T5883] usb 4-1: config 0 interface 89 has no altsetting 0 [ 96.004415][ T1780] usb 2-1: Manufacturer: syz [ 96.010722][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.017541][ T1780] usb 2-1: SerialNumber: syz [ 96.023427][ T984] usb 1-1: Product: syz [ 96.034714][ T984] usb 1-1: Manufacturer: syz [ 96.040289][ T984] usb 1-1: SerialNumber: syz [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 4 [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5879] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5879] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5878] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5879] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5875] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5875] <... ioctl resumed>, 0x7f0bb8f253ec) = 10 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffddd5ec680) = 0 [pid 5879] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [ 96.044061][ T1780] usb 2-1: config 0 descriptor?? [ 96.056766][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 96.067613][ T5883] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 96.078643][ T984] usb 1-1: config 0 descriptor?? [ 96.084206][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0bb8f253ec) = 10 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffddd5ec680) = 0 [ 96.084283][ T1780] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 96.095956][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.112717][ T10] usb 3-1: Product: syz [ 96.117834][ T1780] em28xx 2-1:0.89: Video interface 89 found: bulk [ 96.120804][ T984] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 96.135303][ T10] usb 3-1: Manufacturer: syz [ 96.140540][ T5883] usb 4-1: Product: syz [pid 5878] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5879] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5879] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5878] <... ioctl resumed>, 0) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5878] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5879] <... ioctl resumed>, 0) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5878] <... ioctl resumed>, 0) = 0 [pid 5879] <... ioctl resumed>, 0x7f0bb8f253ec) = 10 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5878] <... ioctl resumed>, 0x7f0bb8f253ec) = 10 [pid 5879] <... ioctl resumed>, 0x7ffddd5ec680) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffddd5ec680) = 0 [ 96.144874][ T5883] usb 4-1: Manufacturer: syz [ 96.149848][ T10] usb 3-1: SerialNumber: syz [ 96.156434][ T5883] usb 4-1: SerialNumber: syz [ 96.164367][ T10] usb 3-1: config 0 descriptor?? [ 96.169589][ T984] em28xx 1-1:0.89: Video interface 89 found: bulk [ 96.178453][ T5883] usb 4-1: config 0 descriptor?? [pid 5875] exit_group(0) = ? [pid 5875] +++ exited with 0 +++ [ 96.199694][ T10] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 96.211875][ T5883] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 96.221809][ T10] em28xx 3-1:0.89: Video interface 89 found: bulk [ 96.228513][ T5883] em28xx 4-1:0.89: Video interface 89 found: bulk [pid 5873] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5873] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5873] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5890 attached , child_tidptr=0x555574bc5650) = 5890 [pid 5890] set_robust_list(0x555574bc5660, 24) = 0 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5890] setpgid(0, 0) = 0 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5890] write(3, "1000", 4) = 4 [pid 5890] close(3) = 0 executing program [pid 5890] write(1, "executing program\n", 18) = 18 [pid 5890] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5874] exit_group(0 [pid 5890] ioctl(3, USB_RAW_IOCTL_INIT [pid 5874] <... exit_group resumed>) = ? [pid 5890] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5890] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5874] +++ exited with 0 +++ [pid 5872] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5890] <... ioctl resumed>, 0) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5872] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH./strace-static-x86_64: Process 5892 attached [pid 5872] <... clone resumed>, child_tidptr=0x555574bc5650) = 5892 [pid 5892] set_robust_list(0x555574bc5660, 24) = 0 [ 96.336584][ T1780] em28xx 2-1:0.89: unknown em28xx chip ID (0) [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5879] exit_group(0 [pid 5892] setpgid(0, 0 [pid 5879] <... exit_group resumed>) = ? [pid 5878] exit_group(0 [pid 5892] <... setpgid resumed>) = 0 [pid 5878] <... exit_group resumed>) = ? [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5892] write(3, "1000", 4) = 4 executing program [pid 5892] close(3) = 0 [pid 5892] write(1, "executing program\n", 18) = 18 [pid 5892] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5879] +++ exited with 0 +++ [pid 5878] +++ exited with 0 +++ [pid 5877] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5876] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5878, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5877] restart_syscall(<... resuming interrupted clone ...> [pid 5876] restart_syscall(<... resuming interrupted clone ...> [pid 5892] ioctl(3, USB_RAW_IOCTL_INIT [pid 5877] <... restart_syscall resumed>) = 0 [pid 5876] <... restart_syscall resumed>) = 0 [pid 5876] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5894 attached [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5894] set_robust_list(0x555574bc5660, 24 [pid 5877] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5876] <... clone resumed>, child_tidptr=0x555574bc5650) = 5894 [pid 5892] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN./strace-static-x86_64: Process 5896 attached [pid 5894] <... set_robust_list resumed>) = 0 [pid 5892] <... ioctl resumed>, 0) = 0 [pid 5896] set_robust_list(0x555574bc5660, 24 [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5896] <... set_robust_list resumed>) = 0 [ 96.410406][ T1780] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 96.424041][ T1780] em28xx 2-1:0.89: board has no eeprom [ 96.433634][ T984] em28xx 1-1:0.89: unknown em28xx chip ID (0) [pid 5896] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5894] <... prctl resumed>) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5877] <... clone resumed>, child_tidptr=0x555574bc5650) = 5896 [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5894] setpgid(0, 0) = 0 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5896] <... prctl resumed>) = 0 [pid 5896] setpgid(0, 0) = 0 [pid 5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5894] <... openat resumed>) = 3 [pid 5894] write(3, "1000", 4) = 4 [pid 5894] close(3) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... openat resumed>) = 3 [pid 5894] write(1, "executing program\n", 18executing program [pid 5896] write(3, "1000", 4 [pid 5894] <... write resumed>) = 18 [pid 5896] <... write resumed>) = 4 [pid 5894] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5896] close(3 [pid 5894] <... openat resumed>) = 3 [pid 5896] <... close resumed>) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_INIT [pid 5896] write(1, "executing program\n", 18 [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 executing program [pid 5896] <... write resumed>) = 18 [pid 5894] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5896] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5896] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffddd5ed690) = 0 [pid 5894] <... ioctl resumed>, 0) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0) = 0 [ 96.485863][ T1780] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 96.486828][ T10] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 96.493428][ T1780] em28xx 2-1:0.89: analog set to bulk mode. [ 96.501885][ T5883] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 96.510096][ T24] em28xx 2-1:0.89: Registering V4L2 extension [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 96.532165][ T984] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 96.545916][ T984] em28xx 1-1:0.89: board has no eeprom [ 96.577160][ T1780] usb 2-1: USB disconnect, device number 2 [ 96.609380][ T1780] em28xx 2-1:0.89: Disconnecting em28xx [ 96.616108][ T10] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 96.630523][ T984] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 96.640400][ T10] em28xx 3-1:0.89: board has no eeprom [ 96.645173][ T24] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 96.646533][ T5883] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 96.655183][ T24] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 96.662357][ T984] em28xx 1-1:0.89: analog set to bulk mode. [ 96.671439][ T24] em28xx 2-1:0.89: No AC97 audio processor [ 96.676129][ T5883] em28xx 4-1:0.89: board has no eeprom [ 96.693238][ T24] usb 2-1: Decoder not found [ 96.696103][ T984] usb 1-1: USB disconnect, device number 2 [ 96.707630][ T984] em28xx 1-1:0.89: Disconnecting em28xx [ 96.714438][ T24] em28xx 2-1:0.89: failed to create media graph [ 96.723058][ T24] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 96.740742][ T24] em28xx 2-1:0.89: Registering snapshot button... [ 96.751242][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input5 [ 96.755995][ T10] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 96.770137][ T5883] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 96.771111][ T24] em28xx 2-1:0.89: Remote control support is not available for this card. [ 96.779594][ T5883] em28xx 4-1:0.89: analog set to bulk mode. [ 96.789914][ T1780] em28xx 2-1:0.89: Closing input extension [ 96.800045][ T10] em28xx 3-1:0.89: analog set to bulk mode. [ 96.801943][ T1780] em28xx 2-1:0.89: Deregistering snapshot button [ 96.827162][ T5883] usb 4-1: USB disconnect, device number 2 [ 96.835106][ T10] usb 3-1: USB disconnect, device number 2 [ 96.843599][ T5885] em28xx 1-1:0.89: Registering V4L2 extension [ 96.852095][ T10] em28xx 3-1:0.89: Disconnecting em28xx [ 96.859192][ T5883] em28xx 4-1:0.89: Disconnecting em28xx [ 96.898723][ T1780] em28xx 2-1:0.89: Freeing device [ 96.912657][ T5885] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 96.932209][ T5885] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 96.945128][ T5885] em28xx 1-1:0.89: No AC97 audio processor [ 96.954590][ T5885] usb 1-1: Decoder not found [ 96.964863][ T5885] em28xx 1-1:0.89: failed to create media graph [ 96.971280][ T5885] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 96.979955][ T5885] em28xx 1-1:0.89: Registering snapshot button... [ 96.988512][ T5885] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input6 [ 97.004414][ T5885] em28xx 1-1:0.89: Remote control support is not available for this card. [ 97.014103][ T56] em28xx 3-1:0.89: Registering V4L2 extension [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5890] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 97.065075][ T56] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 97.072608][ T56] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 97.082197][ T56] em28xx 3-1:0.89: No AC97 audio processor [ 97.093442][ T56] usb 3-1: Decoder not found [ 97.098378][ T56] em28xx 3-1:0.89: failed to create media graph [ 97.104799][ T56] em28xx 3-1:0.89: V4L2 device video103 deregistered [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 97.113367][ T56] em28xx 3-1:0.89: Registering snapshot button... [ 97.121583][ T56] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input7 [ 97.133719][ T56] em28xx 3-1:0.89: Remote control support is not available for this card. [ 97.142688][ T5900] em28xx 4-1:0.89: Registering V4L2 extension [ 97.179644][ T5900] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 97.186793][ T5900] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 97.194306][ T5900] em28xx 4-1:0.89: No AC97 audio processor [ 97.202607][ T5900] usb 4-1: Decoder not found [ 97.207317][ T5900] em28xx 4-1:0.89: failed to create media graph [ 97.213729][ T5900] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 97.222849][ T5900] em28xx 4-1:0.89: Registering snapshot button... [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 97.225966][ T1780] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.232293][ T5900] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input8 [ 97.253880][ T5900] em28xx 4-1:0.89: Remote control support is not available for this card. [ 97.262842][ T984] em28xx 1-1:0.89: Closing input extension [ 97.268981][ T984] em28xx 1-1:0.89: Deregistering snapshot button [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 97.279749][ T10] em28xx 3-1:0.89: Closing input extension [ 97.287030][ T10] em28xx 3-1:0.89: Deregistering snapshot button [ 97.296910][ T984] em28xx 1-1:0.89: Freeing device [ 97.315007][ T5883] em28xx 4-1:0.89: Closing input extension [ 97.323359][ T5883] em28xx 4-1:0.89: Deregistering snapshot button [ 97.340246][ T10] em28xx 3-1:0.89: Freeing device [ 97.361050][ T5883] em28xx 4-1:0.89: Freeing device [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 9 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 97.402602][ T9] cfg80211: failed to load regulatory.db [ 97.418091][ T1780] usb 2-1: Using ep0 maxpacket: 32 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 27 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 4 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5890] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 97.447271][ T1780] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 97.460620][ T1780] usb 2-1: config 0 has no interface number 0 [ 97.468837][ T1780] usb 2-1: config 0 interface 89 has no altsetting 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [ 97.490765][ T1780] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 97.511046][ T1780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.520957][ T1780] usb 2-1: Product: syz [ 97.525178][ T1780] usb 2-1: Manufacturer: syz [ 97.532055][ T1780] usb 2-1: SerialNumber: syz [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5890] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5890] <... ioctl resumed>, 0) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5890] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5890] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0bb8f253ec) = 10 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffddd5ec680) = 0 [ 97.553851][ T1780] usb 2-1: config 0 descriptor?? [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 97.598647][ T1780] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 97.609497][ T1780] em28xx 2-1:0.89: Video interface 89 found: bulk [ 97.625840][ T984] usb 1-1: new high-speed USB device number 3 using dummy_hcd [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5894] <... ioctl resumed>, 0x7ffddd5ec680) = 18 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 97.705945][ T5883] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.713779][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] <... ioctl resumed>, 0x7ffddd5ec680) = 9 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5890] exit_group(0) = ? [pid 5892] <... ioctl resumed>, 0x7ffddd5ec680) = 27 [pid 5890] +++ exited with 0 +++ [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5873] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [ 97.775919][ T984] usb 1-1: Using ep0 maxpacket: 32 [ 97.804447][ T984] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 97.813977][ T984] usb 1-1: config 0 has no interface number 0 [pid 5873] restart_syscall(<... resuming interrupted clone ...> [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5873] <... restart_syscall resumed>) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5873] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5892] <... ioctl resumed>, 0x7ffddd5ec680) = 4 ./strace-static-x86_64: Process 5911 attached [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5873] <... clone resumed>, child_tidptr=0x555574bc5650) = 5911 [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5911] set_robust_list(0x555574bc5660, 24 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5911] <... set_robust_list resumed>) = 0 [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5892] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5911] setpgid(0, 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5911] <... setpgid resumed>) = 0 [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5911] <... openat resumed>) = 3 [pid 5892] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5911] write(3, "1000", 4 [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5911] <... write resumed>) = 4 [pid 5911] close(3) = 0 executing program [ 97.821509][ T984] usb 1-1: config 0 interface 89 has no altsetting 0 [pid 5911] write(1, "executing program\n", 18) = 18 [pid 5911] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5911] <... openat resumed>) = 3 [pid 5911] ioctl(3, USB_RAW_IOCTL_INIT [pid 5892] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5911] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5911] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5911] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 97.876598][ T1780] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 97.876682][ T984] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 97.892647][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 97.897996][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 97.904004][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.913146][ T984] usb 1-1: Product: syz [ 97.919453][ T984] usb 1-1: Manufacturer: syz [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5894] <... ioctl resumed>, 0x7ffddd5ec680) = 18 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5894] <... ioctl resumed>, 0x7ffddd5ec680) = 9 [pid 5896] <... ioctl resumed>, 0x7ffddd5ec680) = 9 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 27 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 27 [ 97.925146][ T984] usb 1-1: SerialNumber: syz [ 97.938369][ T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 97.950109][ T5883] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 97.952340][ T1780] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 97.958809][ T984] usb 1-1: config 0 descriptor?? [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0bb8f253ec) = 10 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffddd5ec680) = 0 [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 97.960602][ T10] usb 3-1: config 0 has no interface number 0 [ 97.968462][ T1780] em28xx 2-1:0.89: board has no eeprom [ 97.972539][ T5883] usb 4-1: config 0 has no interface number 0 [ 97.990444][ T10] usb 3-1: config 0 interface 89 has no altsetting 0 [ 97.999585][ T984] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 98.009541][ T5883] usb 4-1: config 0 interface 89 has no altsetting 0 [ 98.016745][ T984] em28xx 1-1:0.89: Video interface 89 found: bulk [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5894] <... ioctl resumed>, 0x7ffddd5ec680) = 4 [pid 5896] <... ioctl resumed>, 0x7ffddd5ec680) = 4 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5896] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5894] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5896] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5894] <... ioctl resumed>, 0x7ffddd5ec680) = 8 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [ 98.036069][ T1780] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 98.043631][ T1780] em28xx 2-1:0.89: analog set to bulk mode. [ 98.045008][ T5883] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 98.060432][ T24] em28xx 2-1:0.89: Registering V4L2 extension [ 98.062932][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 98.077501][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.087211][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.097228][ T5883] usb 4-1: Product: syz [ 98.101549][ T5883] usb 4-1: Manufacturer: syz [ 98.104692][ T1780] usb 2-1: USB disconnect, device number 3 [ 98.108298][ T10] usb 3-1: Product: syz [ 98.114502][ T1780] em28xx 2-1:0.89: Disconnecting em28xx [ 98.122832][ T5883] usb 4-1: SerialNumber: syz [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0bb8f253ec) = 10 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffddd5ec680) = 0 [ 98.133444][ T10] usb 3-1: Manufacturer: syz [ 98.150330][ T5883] usb 4-1: config 0 descriptor?? [ 98.159105][ T10] usb 3-1: SerialNumber: syz [ 98.163264][ T24] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 98.173245][ T24] em28xx 2-1:0.89: AC97 chip type couldn't be determined [pid 5892] exit_group(0) = ? [pid 5894] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0bb8f253ec) = 10 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffddd5ec680) = 0 [pid 5892] +++ exited with 0 +++ [pid 5872] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5872] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555574bc5650) = 5913 ./strace-static-x86_64: Process 5913 attached [ 98.179488][ T5883] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 98.183961][ T24] em28xx 2-1:0.89: No AC97 audio processor [ 98.196489][ T10] usb 3-1: config 0 descriptor?? [ 98.196770][ T5883] em28xx 4-1:0.89: Video interface 89 found: bulk [ 98.221595][ T10] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [pid 5913] set_robust_list(0x555574bc5660, 24) = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5913] setpgid(0, 0) = 0 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 5913] write(3, "1000", 4) = 4 [pid 5913] close(3) = 0 [pid 5913] write(1, "executing program\n", 18) = 18 [pid 5913] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5913] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffddd5ed690) = 0 [pid 5913] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 98.232102][ T10] em28xx 3-1:0.89: Video interface 89 found: bulk [ 98.234912][ T24] usb 2-1: Decoder not found [ 98.244179][ T24] em28xx 2-1:0.89: failed to create media graph [ 98.260117][ T24] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 98.269972][ T24] em28xx 2-1:0.89: Registering snapshot button... [ 98.279775][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input9 [ 98.287072][ T984] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 98.294519][ T24] em28xx 2-1:0.89: Remote control support is not available for this card. [ 98.306805][ T1780] em28xx 2-1:0.89: Closing input extension [ 98.312890][ T1780] em28xx 2-1:0.89: Deregistering snapshot button [ 98.331208][ T1780] em28xx 2-1:0.89: Freeing device [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] exit_group(0) = ? [pid 5896] +++ exited with 0 +++ [pid 5877] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5877] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5877] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5915 attached , child_tidptr=0x555574bc5650) = 5915 [pid 5894] exit_group(0) = ? [pid 5915] set_robust_list(0x555574bc5660, 24 [pid 5894] +++ exited with 0 +++ [pid 5876] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5876] restart_syscall(<... resuming interrupted clone ...> [pid 5915] <... set_robust_list resumed>) = 0 [pid 5915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5915] setpgid(0, 0) = 0 [pid 5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5876] <... restart_syscall resumed>) = 0 [pid 5915] <... openat resumed>) = 3 [pid 5876] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 98.376455][ T984] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 98.385170][ T984] em28xx 1-1:0.89: board has no eeprom [pid 5915] write(3, "1000", 4executing program ) = 4 [pid 5876] <... clone resumed>, child_tidptr=0x555574bc5650) = 5916 ./strace-static-x86_64: Process 5916 attached [pid 5915] close(3) = 0 [pid 5915] write(1, "executing program\n", 18) = 18 [pid 5916] set_robust_list(0x555574bc5660, 24 [pid 5915] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5915] ioctl(3, USB_RAW_IOCTL_INIT [pid 5916] <... set_robust_list resumed>) = 0 [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5915] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5916] <... prctl resumed>) = 0 [pid 5915] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5916] setpgid(0, 0) = 0 [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 5915] <... ioctl resumed>, 0) = 0 [pid 5916] <... openat resumed>) = 3 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5916] write(3, "1000", 4) = 4 [pid 5916] close(3) = 0 [pid 5916] write(1, "executing program\n", 18) = 18 [pid 5916] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5916] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffddd5ed690) = 0 [pid 5916] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 98.446131][ T5883] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 98.457499][ T984] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 98.464864][ T984] em28xx 1-1:0.89: analog set to bulk mode. [ 98.474049][ T9] em28xx 1-1:0.89: Registering V4L2 extension [ 98.482085][ T10] em28xx 3-1:0.89: unknown em28xx chip ID (0) [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5911] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 98.496575][ T984] usb 1-1: USB disconnect, device number 3 [ 98.515942][ T984] em28xx 1-1:0.89: Disconnecting em28xx [ 98.539994][ T5883] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 98.561419][ T9] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 98.571974][ T5883] em28xx 4-1:0.89: board has no eeprom [ 98.578227][ T9] em28xx 1-1:0.89: AC97 chip type couldn't be determined [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 98.586011][ T10] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 98.594572][ T9] em28xx 1-1:0.89: No AC97 audio processor [ 98.601018][ T10] em28xx 3-1:0.89: board has no eeprom [ 98.608972][ T9] usb 1-1: Decoder not found [ 98.613644][ T9] em28xx 1-1:0.89: failed to create media graph [ 98.620066][ T9] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 98.628853][ T9] em28xx 1-1:0.89: Registering snapshot button... [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 98.636163][ T1780] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.637182][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input10 [ 98.665298][ T9] em28xx 1-1:0.89: Remote control support is not available for this card. [ 98.674867][ T5883] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 98.683317][ T10] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 98.691068][ T984] em28xx 1-1:0.89: Closing input extension [ 98.697471][ T5883] em28xx 4-1:0.89: analog set to bulk mode. [ 98.704766][ T10] em28xx 3-1:0.89: analog set to bulk mode. [ 98.710944][ T984] em28xx 1-1:0.89: Deregistering snapshot button [ 98.723258][ T5883] usb 4-1: USB disconnect, device number 3 [ 98.737269][ T10] usb 3-1: USB disconnect, device number 3 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 98.744899][ T5883] em28xx 4-1:0.89: Disconnecting em28xx [ 98.752217][ T10] em28xx 3-1:0.89: Disconnecting em28xx [ 98.776360][ T9] em28xx 4-1:0.89: Registering V4L2 extension [ 98.787843][ T984] em28xx 1-1:0.89: Freeing device [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 9 [ 98.829543][ T1780] usb 2-1: Using ep0 maxpacket: 32 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 27 [ 98.873612][ T1780] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 98.893758][ T1780] usb 2-1: config 0 has no interface number 0 [ 98.902221][ T9] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 98.902267][ T1780] usb 2-1: config 0 interface 89 has no altsetting 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 4 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [ 98.919792][ T9] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 98.929078][ T9] em28xx 4-1:0.89: No AC97 audio processor [ 98.939835][ T9] usb 4-1: Decoder not found [ 98.945914][ T9] em28xx 4-1:0.89: failed to create media graph [ 98.947826][ T1780] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 98.952338][ T9] em28xx 4-1:0.89: V4L2 device video103 deregistered [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5913] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 98.964576][ T1780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.977373][ T9] em28xx 4-1:0.89: Registering snapshot button... [ 98.978527][ T1780] usb 2-1: Product: syz [ 98.989845][ T1780] usb 2-1: Manufacturer: syz [ 98.992336][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input11 [ 98.994605][ T1780] usb 2-1: SerialNumber: syz [ 99.009915][ T9] em28xx 4-1:0.89: Remote control support is not available for this card. [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5911] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0bb8f253ec) = 10 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffddd5ec680) = 0 [ 99.019129][ T1780] usb 2-1: config 0 descriptor?? [ 99.026093][ T5900] em28xx 3-1:0.89: Registering V4L2 extension [ 99.046660][ T1780] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 99.057864][ T1780] em28xx 2-1:0.89: Video interface 89 found: bulk [pid 5913] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 99.082068][ T5900] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 99.091948][ T5900] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 99.099925][ T5900] em28xx 3-1:0.89: No AC97 audio processor [ 99.107889][ T5900] usb 3-1: Decoder not found [ 99.112637][ T5900] em28xx 3-1:0.89: failed to create media graph [ 99.119010][ T5900] em28xx 3-1:0.89: V4L2 device video103 deregistered [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 99.131734][ T5900] em28xx 3-1:0.89: Registering snapshot button... [ 99.140322][ T5900] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input12 [ 99.151497][ T984] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.164018][ T5900] em28xx 3-1:0.89: Remote control support is not available for this card. [ 99.173493][ T5883] em28xx 4-1:0.89: Closing input extension [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5911] exit_group(0) = ? [ 99.179703][ T5883] em28xx 4-1:0.89: Deregistering snapshot button [ 99.192421][ T10] em28xx 3-1:0.89: Closing input extension [ 99.198974][ T10] em28xx 3-1:0.89: Deregistering snapshot button [ 99.214133][ T5883] em28xx 4-1:0.89: Freeing device [ 99.222927][ T10] em28xx 3-1:0.89: Freeing device [pid 5911] +++ exited with 0 +++ [pid 5873] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5873] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555574bc5650) = 5922 ./strace-static-x86_64: Process 5922 attached [pid 5922] set_robust_list(0x555574bc5660, 24) = 0 [pid 5922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5922] setpgid(0, 0) = 0 [pid 5922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5913] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5922] <... openat resumed>) = 3 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5922] write(3, "1000", 4) = 4 [pid 5913] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5922] close(3 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5922] <... close resumed>) = 0 [pid 5913] <... ioctl resumed>, 0x7ffddd5ec680) = 9 executing program [pid 5922] write(1, "executing program\n", 18 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5922] <... write resumed>) = 18 [pid 5913] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5922] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5922] <... openat resumed>) = 3 [pid 5913] <... ioctl resumed>, 0x7ffddd5ec680) = 27 [pid 5922] ioctl(3, USB_RAW_IOCTL_INIT [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5922] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5922] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5913] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 4 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 99.307392][ T984] usb 1-1: Using ep0 maxpacket: 32 [ 99.321108][ T984] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 99.336851][ T1780] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 99.340847][ T984] usb 1-1: config 0 has no interface number 0 [ 99.350454][ T984] usb 1-1: config 0 interface 89 has no altsetting 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5915] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 99.391295][ T984] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 99.404255][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.417806][ T984] usb 1-1: Product: syz [ 99.422382][ T984] usb 1-1: Manufacturer: syz [ 99.427578][ T984] usb 1-1: SerialNumber: syz [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5916] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5913] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0bb8f253ec) = 10 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffddd5ec680) = 0 [ 99.434248][ T1780] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 99.443327][ T1780] em28xx 2-1:0.89: board has no eeprom [ 99.457477][ T984] usb 1-1: config 0 descriptor?? [pid 5915] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 99.484507][ T984] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 99.496282][ T984] em28xx 1-1:0.89: Video interface 89 found: bulk [ 99.506043][ T1780] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 99.514561][ T1780] em28xx 2-1:0.89: analog set to bulk mode. [ 99.520659][ T24] em28xx 2-1:0.89: Registering V4L2 extension [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5916] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5915] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 99.536770][ T1780] usb 2-1: USB disconnect, device number 4 [ 99.548320][ T1780] em28xx 2-1:0.89: Disconnecting em28xx [ 99.566006][ T5883] usb 4-1: new high-speed USB device number 4 using dummy_hcd [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5916] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 99.596475][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.610405][ T24] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 99.617687][ T24] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 99.625284][ T24] em28xx 2-1:0.89: No AC97 audio processor [ 99.636655][ T24] usb 2-1: Decoder not found [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5915] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5913] exit_group(0) = ? [pid 5916] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 99.641314][ T24] em28xx 2-1:0.89: failed to create media graph [ 99.648834][ T24] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 99.658151][ T24] em28xx 2-1:0.89: Registering snapshot button... [ 99.668518][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input13 [ 99.684443][ T24] em28xx 2-1:0.89: Remote control support is not available for this card. [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5913] +++ exited with 0 +++ [pid 5872] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5872] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5925 attached , child_tidptr=0x555574bc5650) = 5925 [pid 5925] set_robust_list(0x555574bc5660, 24) = 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5925] setpgid(0, 0) = 0 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5925] write(3, "1000", 4) = 4 [pid 5925] close(3) = 0 executing program [pid 5925] write(1, "executing program\n", 18) = 18 [pid 5925] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5925] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffddd5ed690) = 0 [pid 5925] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 99.697503][ T1780] em28xx 2-1:0.89: Closing input extension [ 99.703609][ T1780] em28xx 2-1:0.89: Deregistering snapshot button [ 99.735621][ T1780] em28xx 2-1:0.89: Freeing device [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5915] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 9 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 27 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5916] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 99.745796][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 99.756413][ T984] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 99.773040][ T5883] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 99.782020][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 99.791676][ T5883] usb 4-1: config 0 has no interface number 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 9 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 27 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5915] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 4 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 99.803149][ T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 99.813661][ T5883] usb 4-1: config 0 interface 89 has no altsetting 0 [ 99.821750][ T10] usb 3-1: config 0 has no interface number 0 [ 99.829991][ T10] usb 3-1: config 0 interface 89 has no altsetting 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5916] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 4 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [ 99.844645][ T5883] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 99.860249][ T984] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 99.874736][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 99.885798][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.894301][ T5883] usb 4-1: Product: syz [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5922] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 99.899307][ T984] em28xx 1-1:0.89: board has no eeprom [ 99.905921][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.916754][ T5883] usb 4-1: Manufacturer: syz [ 99.921543][ T5883] usb 4-1: SerialNumber: syz [ 99.926813][ T10] usb 3-1: Product: syz [ 99.931540][ T10] usb 3-1: Manufacturer: syz [ 99.938212][ T10] usb 3-1: SerialNumber: syz [ 99.945450][ T5883] usb 4-1: config 0 descriptor?? [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5915] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5916] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5915] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5916] <... ioctl resumed>, 0) = 0 [pid 5915] <... ioctl resumed>, 0) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5915] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5916] <... ioctl resumed>, 0) = 0 [pid 5915] <... ioctl resumed>, 0) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5916] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5915] <... ioctl resumed>, 0x7f0bb8f253ec) = 10 [pid 5916] <... ioctl resumed>, 0x7f0bb8f253ec) = 10 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5915] <... ioctl resumed>, 0x7ffddd5ec680) = 0 [pid 5916] <... ioctl resumed>, 0x7ffddd5ec680) = 0 [pid 5922] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 99.952174][ T10] usb 3-1: config 0 descriptor?? [ 99.971258][ T10] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 99.980988][ T984] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 99.989955][ T5883] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 99.999853][ T984] em28xx 1-1:0.89: analog set to bulk mode. [ 100.006950][ T10] em28xx 3-1:0.89: Video interface 89 found: bulk [ 100.013741][ T5883] em28xx 4-1:0.89: Video interface 89 found: bulk [ 100.021425][ T5900] em28xx 1-1:0.89: Registering V4L2 extension [ 100.035815][ T1780] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.046277][ T984] usb 1-1: USB disconnect, device number 4 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 100.057596][ T984] em28xx 1-1:0.89: Disconnecting em28xx [ 100.094047][ T5900] em28xx 1-1:0.89: Config register raw data: 0xffffffed [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 100.101398][ T5900] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 100.110287][ T5900] em28xx 1-1:0.89: No AC97 audio processor [ 100.118016][ T5900] usb 1-1: Decoder not found [ 100.122963][ T5900] em28xx 1-1:0.89: failed to create media graph [ 100.129501][ T5900] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 100.142421][ T5900] em28xx 1-1:0.89: Registering snapshot button... [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5915] exit_group(0) = ? [pid 5916] exit_group(0) = ? [pid 5915] +++ exited with 0 +++ [pid 5877] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5915, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5877] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5877] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5928 attached [pid 5916] +++ exited with 0 +++ [pid 5876] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5916, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5876] restart_syscall(<... resuming interrupted clone ...> [pid 5928] set_robust_list(0x555574bc5660, 24) = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5877] <... clone resumed>, child_tidptr=0x555574bc5650) = 5928 [pid 5928] setpgid(0, 0 [pid 5876] <... restart_syscall resumed>) = 0 [pid 5928] <... setpgid resumed>) = 0 [ 100.150802][ T5900] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input14 [ 100.165037][ T5900] em28xx 1-1:0.89: Remote control support is not available for this card. [ 100.174322][ T984] em28xx 1-1:0.89: Closing input extension [ 100.181446][ T984] em28xx 1-1:0.89: Deregistering snapshot button [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5876] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5928] <... openat resumed>) = 3 [pid 5928] write(3, "1000", 4./strace-static-x86_64: Process 5929 attached ) = 4 [pid 5922] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5876] <... clone resumed>, child_tidptr=0x555574bc5650) = 5929 [pid 5929] set_robust_list(0x555574bc5660, 24 [pid 5928] close(3) = 0 [ 100.212892][ T984] em28xx 1-1:0.89: Freeing device [ 100.219197][ T1780] usb 2-1: Using ep0 maxpacket: 32 [ 100.248178][ T5883] em28xx 4-1:0.89: unknown em28xx chip ID (0) [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITEexecuting program [pid 5929] <... set_robust_list resumed>) = 0 [pid 5928] write(1, "executing program\n", 18 [pid 5922] <... ioctl resumed>, 0x7ffddd5ec680) = 18 [pid 5928] <... write resumed>) = 18 [pid 5928] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5929] <... prctl resumed>) = 0 [pid 5922] <... ioctl resumed>, 0x7ffddd5ec680) = 9 [pid 5929] setpgid(0, 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5929] <... setpgid resumed>) = 0 [pid 5922] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITEexecuting program [pid 5929] <... openat resumed>) = 3 [pid 5928] <... openat resumed>) = 3 [pid 5922] <... ioctl resumed>, 0x7ffddd5ec680) = 27 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5929] write(3, "1000", 4) = 4 [pid 5929] close(3) = 0 [pid 5929] write(1, "executing program\n", 18) = 18 [pid 5929] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5929] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffddd5ed690) = 0 [pid 5929] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5928] ioctl(3, USB_RAW_IOCTL_INIT [pid 5929] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5928] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5928] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5922] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5922] <... ioctl resumed>, 0x7ffddd5ec680) = 4 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [ 100.260885][ T1780] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 100.267796][ T10] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 100.286443][ T1780] usb 2-1: config 0 has no interface number 0 [ 100.295509][ T1780] usb 2-1: config 0 interface 89 has no altsetting 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [ 100.313867][ T1780] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 100.330079][ T1780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.340381][ T1780] usb 2-1: Product: syz [ 100.344907][ T1780] usb 2-1: Manufacturer: syz [ 100.350703][ T1780] usb 2-1: SerialNumber: syz [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0bb8f253ec) = 10 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffddd5ec680) = 0 [ 100.357138][ T10] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 100.366734][ T10] em28xx 3-1:0.89: board has no eeprom [ 100.376479][ T1780] usb 2-1: config 0 descriptor?? [ 100.390662][ T5883] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 100.391959][ T1780] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [pid 5925] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [ 100.408994][ T1780] em28xx 2-1:0.89: Video interface 89 found: bulk [ 100.409560][ T5883] em28xx 4-1:0.89: board has no eeprom [ 100.435932][ T10] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 100.443607][ T10] em28xx 3-1:0.89: analog set to bulk mode. [ 100.453036][ T5900] em28xx 3-1:0.89: Registering V4L2 extension [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 100.464472][ T10] usb 3-1: USB disconnect, device number 4 [ 100.487159][ T5883] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 100.505800][ T5883] em28xx 4-1:0.89: analog set to bulk mode. [ 100.516841][ T10] em28xx 3-1:0.89: Disconnecting em28xx [ 100.535254][ T5883] usb 4-1: USB disconnect, device number 4 [ 100.544026][ T5883] em28xx 4-1:0.89: Disconnecting em28xx [ 100.550959][ T984] usb 1-1: new high-speed USB device number 5 using dummy_hcd [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 100.562638][ T5900] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 100.571939][ T5900] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 100.580184][ T5900] em28xx 3-1:0.89: No AC97 audio processor [ 100.590884][ T5900] usb 3-1: Decoder not found [ 100.596603][ T5900] em28xx 3-1:0.89: failed to create media graph [ 100.603211][ T5900] em28xx 3-1:0.89: V4L2 device video103 deregistered [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5922] exit_group(0) = ? [pid 5922] +++ exited with 0 +++ [pid 5873] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5922, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5925] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5873] restart_syscall(<... resuming interrupted clone ...> [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5873] <... restart_syscall resumed>) = 0 [pid 5873] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555574bc5650) = 5933 ./strace-static-x86_64: Process 5933 attached [ 100.614162][ T5900] em28xx 3-1:0.89: Registering snapshot button... [ 100.625294][ T5900] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input15 [ 100.639690][ T5900] em28xx 3-1:0.89: Remote control support is not available for this card. [ 100.650098][ T9] em28xx 4-1:0.89: Registering V4L2 extension [pid 5933] set_robust_list(0x555574bc5660, 24) = 0 [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5933] setpgid(0, 0) = 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5933] write(3, "1000", 4) = 4 [pid 5933] close(3) = 0 executing program [pid 5933] write(1, "executing program\n", 18) = 18 [ 100.686213][ T1780] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 100.693271][ T9] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 100.700961][ T9] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 100.708854][ T9] em28xx 4-1:0.89: No AC97 audio processor [ 100.718852][ T9] usb 4-1: Decoder not found [ 100.723708][ T9] em28xx 4-1:0.89: failed to create media graph [pid 5933] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5933] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffddd5ed690) = 0 [pid 5933] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5925] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 18 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 9 [ 100.732086][ T984] usb 1-1: Using ep0 maxpacket: 32 [ 100.737488][ T9] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 100.746056][ T9] em28xx 4-1:0.89: Registering snapshot button... [ 100.753808][ T1780] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 100.755231][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input16 [ 100.776905][ T1780] em28xx 2-1:0.89: board has no eeprom [pid 5933] <... ioctl resumed>, 0) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5925] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5933] <... ioctl resumed>, 0x7ffddd5ed690) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5925] <... ioctl resumed>, 0x7ffddd5ec680) = 27 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [ 100.780009][ T9] em28xx 4-1:0.89: Remote control support is not available for this card. [ 100.797392][ T984] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 100.806064][ T10] em28xx 3-1:0.89: Closing input extension [ 100.811933][ T984] usb 1-1: config 0 has no interface number 0 [ 100.818610][ T10] em28xx 3-1:0.89: Deregistering snapshot button [ 100.825802][ T984] usb 1-1: config 0 interface 89 has no altsetting 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 4 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffddd5ec680) = 8 [ 100.835756][ T1780] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 100.839690][ T5883] em28xx 4-1:0.89: Closing input extension [ 100.847630][ T1780] em28xx 2-1:0.89: analog set to bulk mode. [ 100.850511][ T5883] em28xx 4-1:0.89: Deregistering snapshot button [ 100.867254][ T10] em28xx 3-1:0.89: Freeing device [ 100.875346][ T984] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 100.876541][ T1780] usb 2-1: USB disconnect, device number 5 [ 100.894273][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.907592][ T984] usb 1-1: Product: syz [ 100.912768][ T984] usb 1-1: Manufacturer: syz [ 100.916941][ T1780] em28xx 2-1:0.89: Disconnecting em28xx [ 100.918527][ T984] usb 1-1: SerialNumber: syz [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffddd5ed690) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0bb8f253ec) = 10 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffddd5ec680) = 0 [ 100.950363][ T24] em28xx 2-1:0.89: Registering V4L2 extension [ 100.977590][ T5883] em28xx 4-1:0.89: Freeing device [ 100.988261][ T984] usb 1-1: config 0 descriptor?? [ 101.025015][ T984] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 101.058739][ T984] em28xx 1-1:0.89: Video interface 89 found: bulk [ 101.071268][ T24] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 101.088355][ T24] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 101.098076][ T24] em28xx 2-1:0.89: No AC97 audio processor [ 101.112022][ T24] usb 2-1: Decoder not found [ 101.117456][ T24] em28xx 2-1:0.89: failed to create media graph [ 101.124821][ T24] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 101.134314][ T24] em28xx 2-1:0.89: Registering snapshot button... [ 101.134779][ T5935] ================================================================== [ 101.143753][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input17 [ 101.149024][ T5935] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 101.149089][ T5935] Read of size 8 at addr ffff88807a52c740 by task v4l_id/5935 [ 101.149108][ T5935] [ 101.149144][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: v4l_id Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) [ 101.149167][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.149188][ T5935] Call Trace: [ 101.149196][ T5935] [ 101.149205][ T5935] dump_stack_lvl+0x189/0x250 [ 101.149247][ T5935] ? rcu_is_watching+0x15/0xb0 [ 101.149283][ T5935] ? __kasan_check_byte+0x12/0x40 [ 101.149312][ T5935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.149344][ T5935] ? rcu_is_watching+0x15/0xb0 [ 101.149374][ T5935] ? lock_release+0x4b/0x3e0 [ 101.149402][ T5935] ? __virt_addr_valid+0x1c8/0x5c0 [ 101.149424][ T5935] ? __virt_addr_valid+0x4a5/0x5c0 [ 101.149447][ T5935] print_report+0xca/0x240 [ 101.149473][ T5935] ? v4l2_fh_open+0xc7/0x430 [ 101.149504][ T5935] kasan_report+0x118/0x150 [ 101.149537][ T5935] ? v4l2_fh_open+0xc7/0x430 [ 101.149576][ T5935] v4l2_fh_open+0xc7/0x430 [ 101.149616][ T5935] em28xx_v4l2_open+0x157/0x9a0 [ 101.149656][ T5935] v4l2_open+0x20f/0x360 [ 101.149680][ T5935] chrdev_open+0x4cc/0x5e0 [ 101.149714][ T5935] ? __pfx_chrdev_open+0x10/0x10 [ 101.149748][ T5935] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 101.149785][ T5935] ? __pfx_chrdev_open+0x10/0x10 [ 101.149815][ T5935] do_dentry_open+0x953/0x13f0 [ 101.149859][ T5935] vfs_open+0x3b/0x340 [ 101.149892][ T5935] ? path_openat+0x2ecd/0x3830 [ 101.149916][ T5935] path_openat+0x2ee5/0x3830 [ 101.149940][ T5935] ? arch_stack_walk+0xfc/0x150 [ 101.149985][ T5935] ? stack_depot_save_flags+0x40/0x860 [ 101.150025][ T5935] ? __pfx_path_openat+0x10/0x10 [ 101.150046][ T5935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.150082][ T5935] do_filp_open+0x1fa/0x410 [ 101.150105][ T5935] ? __lock_acquire+0xab9/0xd20 [ 101.150140][ T5935] ? __pfx_do_filp_open+0x10/0x10 [ 101.150177][ T5935] ? _raw_spin_unlock+0x28/0x50 [ 101.150214][ T5935] ? alloc_fd+0x64c/0x6c0 [ 101.150250][ T5935] do_sys_openat2+0x121/0x1c0 [ 101.150287][ T5935] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.150323][ T5935] ? exc_page_fault+0x76/0xf0 [ 101.150358][ T5935] ? do_user_addr_fault+0xc8a/0x1390 [ 101.150388][ T5935] __x64_sys_openat+0x138/0x170 [ 101.150426][ T5935] do_syscall_64+0xfa/0x3b0 [ 101.150462][ T5935] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.150494][ T5935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.150516][ T5935] ? clear_bhb_loop+0x60/0xb0 [ 101.150543][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.150565][ T5935] RIP: 0033:0x7fa6016a7407 [ 101.150594][ T5935] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 101.150616][ T5935] RSP: 002b:00007ffd36034d20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 101.150657][ T5935] RAX: ffffffffffffffda RBX: 00007fa601e32880 RCX: 00007fa6016a7407 [ 101.150676][ T5935] RDX: 0000000000000000 RSI: 00007ffd36035f1e RDI: ffffffffffffff9c [ 101.150693][ T5935] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 101.150708][ T5935] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 101.150722][ T5935] R13: 00007ffd36034f70 R14: 00007fa601f99000 R15: 00005603b2bee4d8 [ 101.150749][ T5935] [ 101.150758][ T5935] [ 101.497177][ T5935] Allocated by task 24: [ 101.501596][ T5935] kasan_save_track+0x3e/0x80 [ 101.506369][ T5935] __kasan_kmalloc+0x93/0xb0 [ 101.510974][ T5935] __kmalloc_cache_noprof+0x230/0x3d0 [ 101.516370][ T5935] em28xx_v4l2_init+0x10b/0x2e70 [ 101.521409][ T5935] em28xx_init_extension+0x120/0x1c0 [ 101.526716][ T5935] process_scheduled_works+0xade/0x17b0 [ 101.532388][ T5935] worker_thread+0x8a0/0xda0 [ 101.537110][ T5935] kthread+0x70e/0x8a0 [ 101.541206][ T5935] ret_from_fork+0x3f9/0x770 [ 101.545810][ T5935] ret_from_fork_asm+0x1a/0x30 [ 101.550607][ T5935] [ 101.552955][ T5935] Freed by task 24: [ 101.556794][ T5935] kasan_save_track+0x3e/0x80 [ 101.561674][ T5935] kasan_save_free_info+0x46/0x50 [ 101.566713][ T5935] __kasan_slab_free+0x5b/0x80 [ 101.571480][ T5935] kfree+0x18e/0x440 [ 101.575551][ T5935] em28xx_v4l2_init+0x1683/0x2e70 [ 101.580782][ T5935] em28xx_init_extension+0x120/0x1c0 [ 101.586215][ T5935] process_scheduled_works+0xade/0x17b0 [ 101.591787][ T5935] worker_thread+0x8a0/0xda0 [ 101.596414][ T5935] kthread+0x70e/0x8a0 [ 101.600502][ T5935] ret_from_fork+0x3f9/0x770 [ 101.605221][ T5935] ret_from_fork_asm+0x1a/0x30 [ 101.610015][ T5935] [ 101.612482][ T5935] The buggy address belongs to the object at ffff88807a52c000 [ 101.612482][ T5935] which belongs to the cache kmalloc-8k of size 8192 [ 101.626925][ T5935] The buggy address is located 1856 bytes inside of [ 101.626925][ T5935] freed 8192-byte region [ffff88807a52c000, ffff88807a52e000) [ 101.641308][ T5935] [ 101.643661][ T5935] The buggy address belongs to the physical page: [ 101.650368][ T5935] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a528 [ 101.659410][ T5935] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 101.668110][ T5935] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 101.675805][ T5935] page_type: f5(slab) [ 101.679908][ T5935] raw: 00fff00000000040 ffff88801a842280 ffffea0001f1e800 0000000000000004 [ 101.688709][ T5935] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 101.697596][ T5935] head: 00fff00000000040 ffff88801a842280 ffffea0001f1e800 0000000000000004 [ 101.706325][ T5935] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 101.715415][ T5935] head: 00fff00000000003 ffffea0001e94a01 00000000ffffffff 00000000ffffffff [ 101.724294][ T5935] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 101.733089][ T5935] page dumped because: kasan: bad access detected [ 101.739554][ T5935] page_owner tracks the page as allocated [ 101.745373][ T5935] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5611, tgid 5611 (start-stop-daem), ts 63982931925, free_ts 63980363194 [ 101.767305][ T5935] post_alloc_hook+0x240/0x2a0 [ 101.772354][ T5935] get_page_from_freelist+0x21e4/0x22c0 [ 101.777920][ T5935] __alloc_frozen_pages_noprof+0x181/0x370 [ 101.783865][ T5935] alloc_pages_mpol+0x232/0x4a0 [ 101.788934][ T5935] allocate_slab+0x8a/0x370 [ 101.793456][ T5935] ___slab_alloc+0xbeb/0x1410 [ 101.798157][ T5935] __kmalloc_cache_noprof+0x296/0x3d0 [ 101.803534][ T5935] tomoyo_init_log+0x111f/0x1f70 [ 101.808502][ T5935] tomoyo_supervisor+0x340/0x1480 [ 101.813632][ T5935] tomoyo_env_perm+0x149/0x1e0 [ 101.818407][ T5935] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 101.824675][ T5935] tomoyo_bprm_check_security+0x11c/0x180 [ 101.830408][ T5935] security_bprm_check+0x89/0x270 [ 101.835641][ T5935] bprm_execve+0x8ee/0x1450 [ 101.840270][ T5935] do_execveat_common+0x510/0x6a0 [ 101.845316][ T5935] __x64_sys_execve+0x94/0xb0 [ 101.850269][ T5935] page last free pid 5611 tgid 5611 stack trace: [ 101.856795][ T5935] __free_frozen_pages+0xbc4/0xd30 [ 101.862355][ T5935] __slab_free+0x303/0x3c0 [ 101.866871][ T5935] qlist_free_all+0x97/0x140 [ 101.871664][ T5935] kasan_quarantine_reduce+0x148/0x160 [ 101.877166][ T5935] __kasan_slab_alloc+0x22/0x80 [ 101.882221][ T5935] __kmalloc_noprof+0x224/0x4f0 [ 101.887166][ T5935] tomoyo_supervisor+0xbd5/0x1480 [ 101.892207][ T5935] tomoyo_env_perm+0x149/0x1e0 [ 101.897069][ T5935] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 101.903163][ T5935] tomoyo_bprm_check_security+0x11c/0x180 [ 101.909181][ T5935] security_bprm_check+0x89/0x270 [ 101.914345][ T5935] bprm_execve+0x8ee/0x1450 [ 101.919126][ T5935] do_execveat_common+0x510/0x6a0 [ 101.924486][ T5935] __x64_sys_execve+0x94/0xb0 [ 101.929987][ T5935] do_syscall_64+0xfa/0x3b0 [ 101.935158][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.941524][ T5935] [ 101.944139][ T5935] Memory state around the buggy address: [ 101.949880][ T5935] ffff88807a52c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.958234][ T5935] ffff88807a52c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.966583][ T5935] >ffff88807a52c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.974689][ T5935] ^ [ 101.980876][ T5935] ffff88807a52c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.988979][ T5935] ffff88807a52c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.997398][ T5935] ================================================================== [ 102.009937][ T5935] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.017364][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: v4l_id Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) [ 102.028323][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.038845][ T5935] Call Trace: [ 102.042232][ T5935] [ 102.045190][ T5935] dump_stack_lvl+0x99/0x250 [ 102.050332][ T5935] ? __asan_memcpy+0x40/0x70 [ 102.055383][ T5935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.060689][ T5935] ? __pfx__printk+0x10/0x10 [ 102.065657][ T5935] vpanic+0x281/0x750 [ 102.069741][ T5935] ? preempt_schedule+0xae/0xc0 [ 102.074697][ T5935] ? __pfx_vpanic+0x10/0x10 [ 102.079307][ T5935] ? preempt_schedule_common+0x83/0xd0 [ 102.084893][ T5935] ? preempt_schedule+0xae/0xc0 [ 102.089767][ T5935] ? __pfx_preempt_schedule+0x10/0x10 [ 102.095330][ T5935] panic+0xb9/0xc0 [ 102.099156][ T5935] ? __pfx_panic+0x10/0x10 [ 102.103605][ T5935] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 102.120874][ T5935] ? v4l2_fh_open+0xc7/0x430 [ 102.125614][ T5935] check_panic_on_warn+0x89/0xb0 [ 102.130682][ T5935] ? v4l2_fh_open+0xc7/0x430 [ 102.136112][ T5935] end_report+0x78/0x160 [ 102.140589][ T5935] kasan_report+0x129/0x150 [ 102.145393][ T5935] ? v4l2_fh_open+0xc7/0x430 [ 102.150132][ T5935] v4l2_fh_open+0xc7/0x430 [ 102.154677][ T5935] em28xx_v4l2_open+0x157/0x9a0 [ 102.159665][ T5935] v4l2_open+0x20f/0x360 [ 102.163940][ T5935] chrdev_open+0x4cc/0x5e0 [ 102.168670][ T5935] ? __pfx_chrdev_open+0x10/0x10 [ 102.173743][ T5935] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 102.180691][ T5935] ? __pfx_chrdev_open+0x10/0x10 [ 102.185928][ T5935] do_dentry_open+0x953/0x13f0 [ 102.191310][ T5935] vfs_open+0x3b/0x340 [ 102.196149][ T5935] ? path_openat+0x2ecd/0x3830 [ 102.201141][ T5935] path_openat+0x2ee5/0x3830 [ 102.205852][ T5935] ? arch_stack_walk+0xfc/0x150 [ 102.210746][ T5935] ? stack_depot_save_flags+0x40/0x860 [ 102.216541][ T5935] ? __pfx_path_openat+0x10/0x10 [ 102.221643][ T5935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.228025][ T5935] do_filp_open+0x1fa/0x410 [ 102.232600][ T5935] ? __lock_acquire+0xab9/0xd20 [ 102.237773][ T5935] ? __pfx_do_filp_open+0x10/0x10 [ 102.242831][ T5935] ? _raw_spin_unlock+0x28/0x50 [ 102.247702][ T5935] ? alloc_fd+0x64c/0x6c0 [ 102.252147][ T5935] do_sys_openat2+0x121/0x1c0 [ 102.256935][ T5935] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.262287][ T5935] ? exc_page_fault+0x76/0xf0 [ 102.266991][ T5935] ? do_user_addr_fault+0xc8a/0x1390 [ 102.272478][ T5935] __x64_sys_openat+0x138/0x170 [ 102.277357][ T5935] do_syscall_64+0xfa/0x3b0 [ 102.281984][ T5935] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.287381][ T5935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.293725][ T5935] ? clear_bhb_loop+0x60/0xb0 [ 102.298533][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.305248][ T5935] RIP: 0033:0x7fa6016a7407 [ 102.309786][ T5935] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 102.329680][ T5935] RSP: 002b:00007ffd36034d20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 102.338115][ T5935] RAX: ffffffffffffffda RBX: 00007fa601e32880 RCX: 00007fa6016a7407 [ 102.346554][ T5935] RDX: 0000000000000000 RSI: 00007ffd36035f1e RDI: ffffffffffffff9c [ 102.354663][ T5935] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 102.362748][ T5935] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 102.370914][ T5935] R13: 00007ffd36034f70 R14: 00007fa601f99000 R15: 00005603b2bee4d8 [ 102.379176][ T5935] [ 102.382809][ T5935] Kernel Offset: disabled [ 102.387335][ T5935] Rebooting in 86400 seconds..