Warning: Permanently added '10.128.1.62' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 41.089236][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.329216][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 41.449325][ T12] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 41.457575][ T12] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.467724][ T12] usb 1-1: config 0 has no interface number 0 [ 41.473877][ T12] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 29 [ 41.483927][ T12] usb 1-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice= 1.06 [ 41.492983][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.502659][ T12] usb 1-1: config 0 descriptor?? [ 41.550327][ T12] usb-storage 1-1:0.122: USB Mass Storage device detected [ 41.591391][ T12] zr364xx 1-1:0.122: Zoran 364xx compatible webcam plugged [ 41.598604][ T12] zr364xx 1-1:0.122: model 0595:4343 detected [ 41.605065][ T12] usb 1-1: 320x240 mode selected executing program [ 41.770530][ T12] usb 1-1: Zoran 364xx controlling device video0 [ 41.778075][ T12] usb 1-1: USB disconnect, device number 2 [ 41.789436][ T12] zr364xx 1-1:0.122: Zoran 364xx webcam unplugged [ 42.169571][ T12] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.409207][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 42.529264][ T12] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 42.537501][ T12] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.547654][ T12] usb 1-1: config 0 has no interface number 0 [ 42.553814][ T12] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 29 [ 42.563865][ T12] usb 1-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice= 1.06 [ 42.572966][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.582351][ T12] usb 1-1: config 0 descriptor?? [ 42.620005][ T12] usb-storage 1-1:0.122: USB Mass Storage device detected [ 42.670994][ T12] zr364xx 1-1:0.122: Zoran 364xx compatible webcam plugged [ 42.678223][ T12] zr364xx 1-1:0.122: model 0595:4343 detected [ 42.684517][ T12] usb 1-1: 320x240 mode selected executing program [ 42.840426][ T12] usb 1-1: Zoran 364xx controlling device video0 [ 42.848077][ T12] usb 1-1: USB disconnect, device number 3 [ 42.949553][ T1770] ================================================================== [ 42.957765][ T1770] BUG: KASAN: null-ptr-deref in read_word_at_a_time+0xe/0x20 [ 42.965140][ T1770] Read of size 1 at addr 0000000000000000 by task v4l_id/1770 [ 42.972589][ T1770] [ 42.974926][ T1770] CPU: 1 PID: 1770 Comm: v4l_id Not tainted 5.2.0-rc1+ #10 [ 42.982112][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.992168][ T1770] Call Trace: [ 42.995466][ T1770] dump_stack+0xca/0x13e [ 42.999719][ T1770] ? read_word_at_a_time+0xe/0x20 [ 43.004772][ T1770] ? read_word_at_a_time+0xe/0x20 [ 43.009819][ T1770] __kasan_report.cold+0x5/0x32 [ 43.014676][ T1770] ? mutex_trylock+0xd0/0x1a0 [ 43.019356][ T1770] ? read_word_at_a_time+0xe/0x20 [ 43.024396][ T1770] kasan_report+0xe/0x20 [ 43.028643][ T1770] read_word_at_a_time+0xe/0x20 [ 43.033499][ T1770] strscpy+0x8a/0x280 [ 43.037534][ T1770] zr364xx_vidioc_querycap+0xb0/0x210 [ 43.042908][ T1770] ? is_module_text_address+0xc/0x1a [ 43.048199][ T1770] v4l_querycap+0x121/0x340 [ 43.052706][ T1770] __video_do_ioctl+0x5b0/0xb30 [ 43.057564][ T1770] ? copy_overflow+0x30/0x30 [ 43.062158][ T1770] ? stack_trace_save+0x9f/0xe0 [ 43.067009][ T1770] ? stack_trace_consume_entry+0x180/0x180 [ 43.072821][ T1770] video_usercopy+0x446/0xee0 [ 43.077500][ T1770] ? copy_overflow+0x30/0x30 [ 43.082094][ T1770] ? __kprobes_text_end+0x116e58/0x116e58 [ 43.087816][ T1770] ? v4l_enumstd+0x60/0x60 [ 43.092251][ T1770] ? debug_check_no_obj_freed+0x20a/0x42e [ 43.097970][ T1770] ? do_raw_spin_lock+0x11a/0x280 [ 43.102994][ T1770] ? video_usercopy+0xee0/0xee0 [ 43.107844][ T1770] v4l2_ioctl+0x147/0x1a0 [ 43.112177][ T1770] ? video_devdata+0xa0/0xa0 [ 43.116803][ T1770] do_vfs_ioctl+0xcda/0x12e0 [ 43.121400][ T1770] ? quarantine_put+0xb2/0x150 [ 43.126189][ T1770] ? ioctl_preallocate+0x200/0x200 [ 43.131303][ T1770] ? putname+0xe1/0x120 [ 43.135458][ T1770] ? putname+0xe1/0x120 [ 43.139621][ T1770] ? rcu_read_lock_sched_held+0x113/0x130 [ 43.145437][ T1770] ? kmem_cache_free+0x258/0x2a0 [ 43.150381][ T1770] ? putname+0xe1/0x120 [ 43.154539][ T1770] ? do_sys_open+0x2e7/0x580 [ 43.159129][ T1770] ? filp_open+0x70/0x70 [ 43.163384][ T1770] ksys_ioctl+0x9b/0xc0 [ 43.167540][ T1770] __x64_sys_ioctl+0x6f/0xb0 [ 43.172124][ T1770] ? lockdep_hardirqs_on+0x379/0x580 [ 43.177407][ T1770] do_syscall_64+0xb7/0x560 [ 43.181911][ T1770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.187802][ T1770] RIP: 0033:0x7f4aa4d26347 [ 43.192224][ T1770] Code: 90 90 90 48 8b 05 f1 fa 2a 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 90 90 90 90 90 90 90 90 90 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 fa 2a 00 31 d2 48 29 c2 64 [ 43.212174][ T1770] RSP: 002b:00007ffeeb56a318 EFLAGS: 00000206 ORIG_RAX: 0000000000000010 [ 43.220613][ T1770] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4aa4d26347 [ 43.228585][ T1770] RDX: 00007ffeeb56a320 RSI: 0000000080685600 RDI: 0000000000000003 [ 43.236560][ T1770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 43.244536][ T1770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000400884 [ 43.252510][ T1770] R13: 00007ffeeb56a470 R14: 0000000000000000 R15: 0000000000000000 [ 43.260490][ T1770] ================================================================== [ 43.268547][ T1770] Disabling lock debugging due to kernel taint [ 43.274770][ T1770] Kernel panic - not syncing: panic_on_warn set ... [ 43.281367][ T1770] CPU: 1 PID: 1770 Comm: v4l_id Tainted: G B 5.2.0-rc1+ #10 [ 43.289950][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.299999][ T1770] Call Trace: [ 43.303299][ T1770] dump_stack+0xca/0x13e [ 43.307548][ T1770] panic+0x292/0x6c9 [ 43.311452][ T1770] ? __warn_printk+0xf3/0xf3 [ 43.316045][ T1770] ? retint_kernel+0x10/0x10 [ 43.320652][ T1770] ? trace_hardirqs_on+0x55/0x1c0 [ 43.325674][ T1770] ? read_word_at_a_time+0xe/0x20 [ 43.330699][ T1770] end_report+0x43/0x49 [ 43.334856][ T1770] ? read_word_at_a_time+0xe/0x20 [ 43.339882][ T1770] __kasan_report.cold+0xd/0x32 [ 43.344927][ T1770] ? mutex_trylock+0xd0/0x1a0 [ 43.349604][ T1770] ? read_word_at_a_time+0xe/0x20 [ 43.354715][ T1770] kasan_report+0xe/0x20 [ 43.358955][ T1770] read_word_at_a_time+0xe/0x20 [ 43.363803][ T1770] strscpy+0x8a/0x280 [ 43.367781][ T1770] zr364xx_vidioc_querycap+0xb0/0x210 [ 43.373151][ T1770] ? is_module_text_address+0xc/0x1a [ 43.378455][ T1770] v4l_querycap+0x121/0x340 [ 43.382955][ T1770] __video_do_ioctl+0x5b0/0xb30 [ 43.388890][ T1770] ? copy_overflow+0x30/0x30 [ 43.393478][ T1770] ? stack_trace_save+0x9f/0xe0 [ 43.398322][ T1770] ? stack_trace_consume_entry+0x180/0x180 [ 43.404126][ T1770] video_usercopy+0x446/0xee0 [ 43.408797][ T1770] ? copy_overflow+0x30/0x30 [ 43.413402][ T1770] ? __kprobes_text_end+0x116e58/0x116e58 [ 43.419120][ T1770] ? v4l_enumstd+0x60/0x60 [ 43.423533][ T1770] ? debug_check_no_obj_freed+0x20a/0x42e [ 43.429250][ T1770] ? do_raw_spin_lock+0x11a/0x280 [ 43.434275][ T1770] ? video_usercopy+0xee0/0xee0 [ 43.439121][ T1770] v4l2_ioctl+0x147/0x1a0 [ 43.443448][ T1770] ? video_devdata+0xa0/0xa0 [ 43.448036][ T1770] do_vfs_ioctl+0xcda/0x12e0 [ 43.452629][ T1770] ? quarantine_put+0xb2/0x150 [ 43.457396][ T1770] ? ioctl_preallocate+0x200/0x200 [ 43.462505][ T1770] ? putname+0xe1/0x120 [ 43.466656][ T1770] ? putname+0xe1/0x120 [ 43.470842][ T1770] ? rcu_read_lock_sched_held+0x113/0x130 [ 43.476651][ T1770] ? kmem_cache_free+0x258/0x2a0 [ 43.481599][ T1770] ? putname+0xe1/0x120 [ 43.485756][ T1770] ? do_sys_open+0x2e7/0x580 [ 43.490343][ T1770] ? filp_open+0x70/0x70 [ 43.494589][ T1770] ksys_ioctl+0x9b/0xc0 [ 43.498774][ T1770] __x64_sys_ioctl+0x6f/0xb0 [ 43.507131][ T1770] ? lockdep_hardirqs_on+0x379/0x580 [ 43.512436][ T1770] do_syscall_64+0xb7/0x560 [ 43.518450][ T1770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.524348][ T1770] RIP: 0033:0x7f4aa4d26347 [ 43.528767][ T1770] Code: 90 90 90 48 8b 05 f1 fa 2a 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 90 90 90 90 90 90 90 90 90 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 fa 2a 00 31 d2 48 29 c2 64 [ 43.548456][ T1770] RSP: 002b:00007ffeeb56a318 EFLAGS: 00000206 ORIG_RAX: 0000000000000010 [ 43.556869][ T1770] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4aa4d26347 [ 43.564839][ T1770] RDX: 00007ffeeb56a320 RSI: 0000000080685600 RDI: 0000000000000003 [ 43.572830][ T1770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 43.580898][ T1770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000400884 [ 43.588875][ T1770] R13: 00007ffeeb56a470 R14: 0000000000000000 R15: 0000000000000000 [ 43.597248][ T1770] Kernel Offset: disabled [ 43.601572][ T1770] Rebooting in 86400 seconds..