Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 111.130958][ T8157] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.131882][ T2955] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.141735][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.148217][ T4862] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 111.161051][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.168596][ T4879] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.491061][ T8157] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 111.500194][ T8157] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 111.510093][ T8157] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.521606][ T7] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 111.530624][ T8157] usb 3-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f [ 111.539919][ T7] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 111.549500][ T8157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.551402][ T36] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 111.557760][ T7] usb 2-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.568202][ T36] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 111.582410][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f [ 111.588277][ T4879] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 111.596260][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.605034][ T2955] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 111.622028][ T4862] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 111.628163][ T8157] em28xx 3-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 111.641055][ T8157] em28xx 3-1:255.0: Video interface 0 found: isoc [ 111.651414][ T4862] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 111.660759][ T4862] usb 6-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.683220][ T7] em28xx 2-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 111.691206][ T36] usb 5-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.697966][ T7] em28xx 2-1:255.0: Video interface 0 found: isoc [ 111.703144][ T4879] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 111.703180][ T4879] usb 4-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.703214][ T4879] usb 4-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f [ 111.703235][ T4879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.747292][ T2955] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 111.757341][ T2955] usb 1-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.768530][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f [ 111.778080][ T4862] usb 6-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f executing program [ 111.787219][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.795400][ T2955] usb 1-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f [ 111.804703][ T4862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.815945][ T2955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program [ 111.863031][ T4862] em28xx 6-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 111.871137][ T8157] em28xx 3-1:255.0: unknown em28xx chip ID (0) [ 111.874149][ T36] em28xx 5-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 111.893346][ T2955] em28xx 1-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 111.904575][ T4879] em28xx 4-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 111.933845][ T4862] em28xx 6-1:255.0: Video interface 0 found: isoc [ 111.940380][ T2955] em28xx 1-1:255.0: Video interface 0 found: isoc [ 111.941240][ T7] em28xx 2-1:255.0: unknown em28xx chip ID (0) [ 111.950810][ T36] em28xx 5-1:255.0: Video interface 0 found: isoc [ 111.959575][ T4879] em28xx 4-1:255.0: Video interface 0 found: isoc executing program executing program executing program executing program [ 112.100924][ T8157] em28xx 3-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.122655][ T8157] em28xx 3-1:255.0: board has no eeprom [ 112.170942][ T4862] em28xx 6-1:255.0: unknown em28xx chip ID (0) [ 112.190981][ T36] em28xx 5-1:255.0: unknown em28xx chip ID (0) [ 112.201656][ T7] em28xx 2-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.210981][ T4879] em28xx 4-1:255.0: unknown em28xx chip ID (0) [ 112.217311][ T2955] em28xx 1-1:255.0: unknown em28xx chip ID (0) [ 112.220708][ T7] em28xx 2-1:255.0: board has no eeprom [ 112.251071][ T8157] em28xx 3-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 112.259348][ T8157] em28xx 3-1:255.0: analog set to isoc mode. [ 112.282083][ T8157] usb 3-1: USB disconnect, device number 2 [ 112.306247][ T8157] em28xx 3-1:255.0: Disconnecting em28xx [ 112.312848][ T8500] em28xx 3-1:255.0: Registering V4L2 extension [ 112.340915][ T7] em28xx 2-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 112.349126][ T7] em28xx 2-1:255.0: analog set to isoc mode. [ 112.359086][ T7] usb 2-1: USB disconnect, device number 2 [ 112.366772][ T7] em28xx 2-1:255.0: Disconnecting em28xx [ 112.384189][ T8500] em28xx 3-1:255.0: Config register raw data: 0xffffffed [ 112.393300][ T8500] em28xx 3-1:255.0: AC97 chip type couldn't be determined [ 112.402236][ T8500] em28xx 3-1:255.0: No AC97 audio processor [ 112.410597][ T8500] usb 3-1: Decoder not found [ 112.420903][ T8500] em28xx 3-1:255.0: failed to create media graph [ 112.428811][ T8500] em28xx 3-1:255.0: V4L2 device video71 deregistered [ 112.452753][ T4862] em28xx 6-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.454695][ T8500] em28xx 3-1:255.0: Binding DVB extension [ 112.461032][ T36] em28xx 5-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.461074][ T36] em28xx 5-1:255.0: board has no eeprom [ 112.486879][ T4862] em28xx 6-1:255.0: board has no eeprom [ 112.495704][ T8500] em28xx 3-1:255.0: no endpoint for DVB mode and transfer type 0 [ 112.520928][ T2955] em28xx 1-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.529125][ T2955] em28xx 1-1:255.0: board has no eeprom [ 112.534831][ T4879] em28xx 4-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.543202][ T8500] em28xx 3-1:255.0: failed to pre-allocate USB transfer buffers for DVB. [ 112.551157][ T4879] em28xx 4-1:255.0: board has no eeprom [ 112.588559][ T8500] em28xx 3-1:255.0: Registering input extension [ 112.605296][ T8] em28xx 2-1:255.0: Registering V4L2 extension [ 112.640791][ T36] em28xx 5-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 112.648828][ T36] em28xx 5-1:255.0: analog set to isoc mode. [ 112.660775][ T4862] em28xx 6-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 112.668884][ T4862] em28xx 6-1:255.0: analog set to isoc mode. [ 112.680906][ T2955] em28xx 1-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 112.688916][ T2955] em28xx 1-1:255.0: analog set to isoc mode. [ 112.695106][ T4879] em28xx 4-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 112.703364][ T4879] em28xx 4-1:255.0: analog set to isoc mode. [ 112.716887][ T2955] usb 1-1: USB disconnect, device number 2 [ 112.724997][ T4862] usb 6-1: USB disconnect, device number 2 [ 112.733773][ T4879] usb 4-1: USB disconnect, device number 2 [ 112.740289][ T4879] em28xx 4-1:255.0: Disconnecting em28xx [ 112.747965][ T36] usb 5-1: USB disconnect, device number 2 [ 112.758125][ T36] em28xx 5-1:255.0: Disconnecting em28xx [ 112.758243][ T8] em28xx 2-1:255.0: Config register raw data: 0xffffffed [ 112.764901][ T2955] em28xx 1-1:255.0: Disconnecting em28xx [ 112.777676][ T4862] em28xx 6-1:255.0: Disconnecting em28xx [ 112.804968][ T8] em28xx 2-1:255.0: AC97 chip type couldn't be determined [ 112.834446][ T8] em28xx 2-1:255.0: No AC97 audio processor [ 112.864186][ T8] usb 2-1: Decoder not found [ 112.868947][ T8] em28xx 2-1:255.0: failed to create media graph [ 112.882481][ T8] em28xx 2-1:255.0: V4L2 device video71 deregistered [ 112.898729][ T8] em28xx 2-1:255.0: Binding DVB extension [ 112.910828][ T8] em28xx 2-1:255.0: no endpoint for DVB mode and transfer type 0 [ 112.919241][ T8] em28xx 2-1:255.0: failed to pre-allocate USB transfer buffers for DVB. [ 112.927943][ T8] em28xx 2-1:255.0: Registering input extension [ 112.934543][ T8157] em28xx 3-1:255.0: Closing input extension [ 112.950974][ T8470] em28xx 4-1:255.0: Registering V4L2 extension [ 112.964157][ T8157] em28xx 3-1:255.0: Freeing device [ 113.014942][ T8470] em28xx 4-1:255.0: Config register raw data: 0xffffffed [ 113.022560][ T8470] em28xx 4-1:255.0: AC97 chip type couldn't be determined [ 113.029855][ T8470] em28xx 4-1:255.0: No AC97 audio processor [ 113.041617][ T8470] usb 4-1: Decoder not found [ 113.046234][ T8470] em28xx 4-1:255.0: failed to create media graph [ 113.059664][ T8470] em28xx 4-1:255.0: V4L2 device video71 deregistered [ 113.070139][ T8470] em28xx 4-1:255.0: Binding DVB extension [ 113.077953][ T8470] em28xx 4-1:255.0: no endpoint for DVB mode and transfer type 0 [ 113.087267][ T8470] em28xx 4-1:255.0: failed to pre-allocate USB transfer buffers for DVB. [ 113.096955][ T8470] em28xx 4-1:255.0: Registering input extension [ 113.104635][ T20] em28xx 5-1:255.0: Registering V4L2 extension [ 113.135800][ T20] em28xx 5-1:255.0: Config register raw data: 0xffffffed [ 113.142909][ T20] em28xx 5-1:255.0: AC97 chip type couldn't be determined [ 113.150007][ T20] em28xx 5-1:255.0: No AC97 audio processor [ 113.162843][ T20] usb 5-1: Decoder not found [ 113.167454][ T20] em28xx 5-1:255.0: failed to create media graph [ 113.180316][ T20] em28xx 5-1:255.0: V4L2 device video71 deregistered [ 113.189679][ T20] em28xx 5-1:255.0: Binding DVB extension [ 113.196431][ T20] em28xx 5-1:255.0: no endpoint for DVB mode and transfer type 0 [ 113.205155][ T20] em28xx 5-1:255.0: failed to pre-allocate USB transfer buffers for DVB. [ 113.215343][ T20] em28xx 5-1:255.0: Registering input extension [ 113.222692][ T8565] em28xx 6-1:255.0: Registering V4L2 extension [ 113.250211][ T8565] em28xx 6-1:255.0: Config register raw data: 0xffffffed [ 113.257516][ T8565] em28xx 6-1:255.0: AC97 chip type couldn't be determined [ 113.266149][ T8565] em28xx 6-1:255.0: No AC97 audio processor [ 113.273984][ T8565] usb 6-1: Decoder not found [ 113.278589][ T8565] em28xx 6-1:255.0: failed to create media graph [ 113.291532][ T8565] em28xx 6-1:255.0: V4L2 device video71 deregistered [ 113.299735][ T8565] em28xx 6-1:255.0: Binding DVB extension [ 113.307993][ T8565] em28xx 6-1:255.0: no endpoint for DVB mode and transfer type 0 [ 113.317110][ T8565] em28xx 6-1:255.0: failed to pre-allocate USB transfer buffers for DVB. [ 113.326748][ T8565] em28xx 6-1:255.0: Registering input extension [ 113.334506][ T8566] em28xx 1-1:255.0: Registering V4L2 extension [ 113.340941][ T8157] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.360589][ T8566] em28xx 1-1:255.0: Config register raw data: 0xffffffed [ 113.369031][ T8566] em28xx 1-1:255.0: AC97 chip type couldn't be determined [ 113.377259][ T8566] em28xx 1-1:255.0: No AC97 audio processor [ 113.384970][ T8566] usb 1-1: Decoder not found [ 113.389572][ T8566] em28xx 1-1:255.0: failed to create media graph [ 113.402774][ T8566] em28xx 1-1:255.0: V4L2 device video71 deregistered [ 113.412052][ T8566] em28xx 1-1:255.0: Binding DVB extension [ 113.417818][ T8566] em28xx 1-1:255.0: no endpoint for DVB mode and transfer type 0 [ 113.427877][ T8566] em28xx 1-1:255.0: failed to pre-allocate USB transfer buffers for DVB. [ 113.437529][ T8566] em28xx 1-1:255.0: Registering input extension [ 113.444798][ T7] em28xx 2-1:255.0: Closing input extension [ 113.452174][ T4879] em28xx 4-1:255.0: Closing input extension [ 113.458135][ T36] em28xx 5-1:255.0: Closing input extension [ 113.466603][ T4862] em28xx 6-1:255.0: Closing input extension [ 113.471520][ T7] em28xx 2-1:255.0: Freeing device [ 113.475780][ T2955] em28xx 1-1:255.0: Closing input extension [ 113.494053][ T4879] em28xx 4-1:255.0: Freeing device [ 113.504071][ T36] em28xx 5-1:255.0: Freeing device [ 113.514077][ T4862] em28xx 6-1:255.0: Freeing device [ 113.524317][ T2955] em28xx 1-1:255.0: Freeing device [ 113.710757][ T8157] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 113.719785][ T8157] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 113.729466][ T8157] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.740857][ T8157] usb 3-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f [ 113.750067][ T8157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.792765][ T8157] em28xx 3-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 113.802544][ T8157] em28xx 3-1:255.0: Video interface 0 found: isoc [ 113.840765][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.890723][ T4862] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 113.898372][ T36] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.920745][ T4879] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.928301][ T2955] usb 1-1: new high-speed USB device number 3 using dummy_hcd executing program [ 114.030849][ T8157] em28xx 3-1:255.0: unknown em28xx chip ID (0) [ 114.200745][ T7] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 114.209943][ T7] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 114.219796][ T7] usb 2-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.231436][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f [ 114.240742][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.270730][ T8157] em28xx 3-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.282473][ T8157] em28xx 3-1:255.0: board has no eeprom [ 114.301253][ T36] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 114.302803][ T7] em28xx 2-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 114.310127][ T36] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 114.328333][ T4862] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 114.338018][ T2955] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 114.346126][ T7] em28xx 2-1:255.0: Video interface 0 found: isoc [ 114.347024][ T4879] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 114.365773][ T2955] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 114.375606][ T4862] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 114.385113][ T4879] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 114.394675][ T4862] usb 6-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.400638][ T8157] em28xx 3-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 114.406064][ T2955] usb 1-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.420093][ T8157] em28xx 3-1:255.0: analog set to isoc mode. [ 114.425179][ T4879] usb 4-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.435697][ T8] em28xx 3-1:255.0: Registering V4L2 extension [ 114.442326][ T36] usb 5-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.460524][ T4862] usb 6-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f [ 114.462130][ T8157] usb 3-1: USB disconnect, device number 3 [ 114.470077][ T4862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.484972][ T2955] usb 1-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f [ 114.494970][ T4879] usb 4-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f [ 114.507427][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f executing program [ 114.513478][ T8] em28xx 3-1:255.0: reading from i2c device at 0xb8 failed (error=-19) [ 114.523600][ T2955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.536359][ T4879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.538604][ T8157] em28xx 3-1:255.0: Disconnecting em28xx [ 114.549296][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.561512][ T4862] em28xx 6-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 114.590606][ T4862] em28xx 6-1:255.0: Video interface 0 found: isoc [ 114.593756][ T7] em28xx 2-1:255.0: unknown em28xx chip ID (0) [ 114.612301][ T8] em28xx 3-1:255.0: Config register raw data: 0xffffffed [ 114.621199][ T8] em28xx 3-1:255.0: AC97 chip type couldn't be determined [ 114.633304][ T4879] em28xx 4-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 114.644280][ T2955] em28xx 1-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 114.655841][ T36] em28xx 5-1:255.0: New device @ 480 Mbps (2040:6513, interface 0, class 0) [ 114.668177][ T8] em28xx 3-1:255.0: No AC97 audio processor [ 114.683383][ T4879] em28xx 4-1:255.0: Video interface 0 found: isoc [ 114.689891][ T2955] em28xx 1-1:255.0: Video interface 0 found: isoc [ 114.696913][ T36] em28xx 5-1:255.0: Video interface 0 found: isoc [ 114.705244][ T8] usb 3-1: Decoder not found [ 114.721893][ T8] em28xx 3-1:255.0: failed to create media graph executing program [ 114.761030][ T8] em28xx 3-1:255.0: V4L2 device video71 deregistered [ 114.791366][ T8] em28xx 3-1:255.0: Binding DVB extension [ 114.802803][ T8] em28xx 3-1:255.0: no endpoint for DVB mode and transfer type 0 executing program executing program [ 114.811499][ T8] em28xx 3-1:255.0: failed to pre-allocate USB transfer buffers for DVB. [ 114.820187][ T8] em28xx 3-1:255.0: Registering input extension [ 114.840746][ T8157] em28xx 3-1:255.0: Closing input extension executing program [ 114.870955][ T7] em28xx 2-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.879163][ T7] em28xx 2-1:255.0: board has no eeprom [ 114.886401][ T8157] em28xx 3-1:255.0: Freeing device [ 114.891101][ T4862] em28xx 6-1:255.0: unknown em28xx chip ID (0) [ 115.000851][ T36] em28xx 5-1:255.0: unknown em28xx chip ID (0) [ 115.007129][ T4879] em28xx 4-1:255.0: unknown em28xx chip ID (0) [ 115.013537][ T2955] em28xx 1-1:255.0: unknown em28xx chip ID (0) [ 115.020909][ T7] em28xx 2-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 115.029767][ T7] em28xx 2-1:255.0: analog set to isoc mode. [ 115.036945][ T8] em28xx 2-1:255.0: Registering V4L2 extension [ 115.048881][ T7] usb 2-1: USB disconnect, device number 3 [ 115.057853][ T7] em28xx 2-1:255.0: Disconnecting em28xx [ 115.084373][ T8] em28xx 2-1:255.0: Config register raw data: 0xffffffed [ 115.091686][ T8] em28xx 2-1:255.0: AC97 chip type couldn't be determined [ 115.099450][ T8] em28xx 2-1:255.0: No AC97 audio processor [ 115.111024][ T8] usb 2-1: Decoder not found [ 115.123431][ T8] em28xx 2-1:255.0: failed to create media graph [ 115.135487][ T4862] em28xx 6-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 115.139311][ T8] em28xx 2-1:255.0: V4L2 device video71 deregistered [ 115.150896][ T4862] em28xx 6-1:255.0: board has no eeprom [ 115.167066][ T8] em28xx 2-1:255.0: Binding DVB extension [ 115.182618][ T8] em28xx 2-1:255.0: no endpoint for DVB mode and transfer type 0 [ 115.196967][ T8] em28xx 2-1:255.0: failed to pre-allocate USB transfer buffers for DVB. [ 115.215196][ T8] em28xx 2-1:255.0: Registering input extension [ 115.227505][ T7] em28xx 2-1:255.0: Closing input extension [ 115.238856][ T7] em28xx 2-1:255.0: Freeing device [ 115.251667][ T8157] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.280699][ T4862] em28xx 6-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 115.288726][ T4862] em28xx 6-1:255.0: analog set to isoc mode. [ 115.295680][ T4879] em28xx 4-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 115.303993][ T2955] em28xx 1-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 115.312276][ T36] em28xx 5-1:255.0: reading from i2c device at 0xa0 failed (error=-5) [ 115.320444][ T36] em28xx 5-1:255.0: board has no eeprom [ 115.322952][ T4879] em28xx 4-1:255.0: board has no eeprom [ 115.334871][ T2955] em28xx 1-1:255.0: board has no eeprom [ 115.353092][ T8566] em28xx 6-1:255.0: Registering V4L2 extension [ 115.373685][ T4862] usb 6-1: USB disconnect, device number 3 [ 115.380076][ T4862] em28xx 6-1:255.0: Disconnecting em28xx [ 115.448304][ T8566] em28xx 6-1:255.0: Config register raw data: 0xffffffed [ 115.455436][ T8566] em28xx 6-1:255.0: AC97 chip type couldn't be determined [ 115.463186][ T8566] em28xx 6-1:255.0: No AC97 audio processor [ 115.475082][ T8566] usb 6-1: Decoder not found [ 115.479762][ T8566] em28xx 6-1:255.0: failed to create media graph [ 115.490562][ T4879] em28xx 4-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 115.498669][ T36] em28xx 5-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 115.506786][ T2955] em28xx 1-1:255.0: Identified as Hauppauge WinTV HVR 950 (card=16) [ 115.518409][ T8566] em28xx 6-1:255.0: V4L2 device video71 deregistered [ 115.525921][ T36] em28xx 5-1:255.0: analog set to isoc mode. [ 115.532328][ T4879] em28xx 4-1:255.0: analog set to isoc mode. [ 115.538403][ T2955] em28xx 1-1:255.0: analog set to isoc mode. [ 115.547369][ T8745] ================================================================== [ 115.548379][ T8566] em28xx 6-1:255.0: Binding DVB extension [ 115.555560][ T8745] BUG: KASAN: use-after-free in v4l2_fh_init+0x279/0x2c0 [ 115.555659][ T8745] Read of size 8 at addr ffff8880316fc8b8 by task v4l_id/8745 [ 115.555678][ T8745] [ 115.555685][ T8745] CPU: 0 PID: 8745 Comm: v4l_id Not tainted 5.13.0-rc2-next-20210518-syzkaller #0 [ 115.555709][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.555722][ T8745] Call Trace: [ 115.555731][ T8745] dump_stack_lvl+0x13e/0x1d6 [ 115.555767][ T8745] ? v4l2_fh_init+0x279/0x2c0 [ 115.572526][ T2955] usb 1-1: USB disconnect, device number 3 [ 115.575941][ T8745] print_address_description.constprop.0.cold+0x6c/0x309 [ 115.580691][ T36] usb 5-1: USB disconnect, device number 3 [ 115.587464][ T8745] ? v4l2_fh_init+0x279/0x2c0 [ 115.587494][ T8745] ? v4l2_fh_init+0x279/0x2c0 [ 115.601890][ T4879] usb 4-1: USB disconnect, device number 3 [ 115.605486][ T8745] kasan_report.cold+0x83/0xdf [ 115.605522][ T8745] ? v4l2_fh_init+0x279/0x2c0 [ 115.616205][ T4879] em28xx 4-1:255.0: Disconnecting em28xx [ 115.622979][ T8745] v4l2_fh_init+0x279/0x2c0 [ 115.623011][ T8745] v4l2_fh_open+0x88/0xc0 [ 115.623035][ T8745] em28xx_v4l2_open+0x11c/0x570 [ 115.633659][ T2955] em28xx 1-1:255.0: Disconnecting em28xx [ 115.638138][ T8745] v4l2_open+0x21c/0x3f0 [ 115.651872][ T8566] em28xx 6-1:255.0: no endpoint for DVB mode and transfer type 0 [ 115.653479][ T8745] ? v4l2_release+0x3b0/0x3b0 [ 115.653508][ T8745] chrdev_open+0x266/0x770 [ 115.661908][ T8566] em28xx 6-1:255.0: failed to pre-allocate USB transfer buffers for DVB. [ 115.663610][ T8745] ? cdev_device_add+0x210/0x210 [ 115.663641][ T8745] ? security_file_open+0x205/0x4f0 [ 115.670797][ T8566] em28xx 6-1:255.0: Registering input extension [ 115.672782][ T8745] do_dentry_open+0x4b9/0x11c0 [ 115.678577][ T4862] em28xx 6-1:255.0: Closing input extension [ 115.682606][ T8745] ? cdev_device_add+0x210/0x210 [ 115.682632][ T8745] ? may_open+0x1f6/0x420 [ 115.682660][ T8745] path_openat+0x1c09/0x27d0 [ 115.698040][ T36] em28xx 5-1:255.0: Disconnecting em28xx [ 115.699423][ T8745] ? path_lookupat+0x850/0x850 [ 115.710956][ T8566] em28xx 4-1:255.0: Registering V4L2 extension [ 115.713161][ T8745] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 115.713200][ T8745] do_filp_open+0x190/0x3d0 [ 115.737996][ T8566] em28xx 4-1:255.0: Config register raw data: 0xffffffed [ 115.740129][ T8745] ? may_open_dev+0xf0/0xf0 [ 115.740167][ T8745] ? rwlock_bug.part.0+0x90/0x90 [ 115.744623][ T8566] em28xx 4-1:255.0: AC97 chip type couldn't be determined [ 115.749036][ T8745] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 115.749060][ T8745] ? _find_next_bit+0x1e3/0x260 [ 115.755111][ T8566] em28xx 4-1:255.0: No AC97 audio processor [ 115.759412][ T8745] ? _raw_spin_unlock+0x24/0x40 [ 115.759443][ T8745] ? alloc_fd+0x2f0/0x670 [ 115.774204][ T8566] usb 4-1: Decoder not found [ 115.776055][ T8745] do_sys_openat2+0x16d/0x420 [ 115.793055][ T8566] em28xx 4-1:255.0: failed to create media graph [ 115.799549][ T8745] ? build_open_flags+0x6f0/0x6f0 [ 115.799581][ T8745] ? __context_tracking_exit+0xb8/0xe0 [ 115.815917][ T8566] em28xx 4-1:255.0: V4L2 device video72 deregistered [ 115.816525][ T8745] __x64_sys_open+0x119/0x1c0 [ 115.829761][ T8566] em28xx 4-1:255.0: Binding DVB extension [ 115.830237][ T8745] ? do_sys_open+0x140/0x140 [ 115.850589][ T8566] em28xx 4-1:255.0: no endpoint for DVB mode and transfer type 0 [ 115.851667][ T8745] ? __secure_computing+0x104/0x360 [ 115.851703][ T8745] do_syscall_64+0x31/0xb0 [ 115.858397][ T8566] em28xx 4-1:255.0: failed to pre-allocate USB transfer buffers for DVB. [ 115.863009][ T8745] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 115.863036][ T8745] RIP: 0033:0x7f74678c6840 [ 115.863055][ T8745] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 115.863075][ T8745] RSP: 002b:00007fff387ef948 EFLAGS: 00000246 [ 115.872356][ T8566] em28xx 4-1:255.0: Registering input extension [ 115.873333][ T8745] ORIG_RAX: 0000000000000002 [ 115.886950][ T8565] em28xx 5-1:255.0: Registering V4L2 extension [ 115.890692][ T8745] RAX: ffffffffffffffda RBX: 00007fff387efab8 RCX: 00007f74678c6840 [ 115.890711][ T8745] RDX: 00007f74678b2ea0 RSI: 0000000000000000 RDI: 00007fff387f0f1d [ 115.890726][ T8745] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 115.890740][ T8745] R10: 0000000000000002 R11: 0000000000000246 R12: 000055bb14d828d0 [ 115.890755][ T8745] R13: 00007fff387efab0 R14: 0000000000000000 R15: 0000000000000000 [ 115.919567][ T8565] em28xx 5-1:255.0: Config register raw data: 0xffffffed [ 115.929032][ T8745] [ 115.929039][ T8745] The buggy address belongs to the page: [ 115.929047][ T8745] page:ffffea0000c5bf00 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x316fc [ 115.929070][ T8745] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 115.935243][ T8565] em28xx 5-1:255.0: AC97 chip type couldn't be determined [ 115.941334][ T8745] raw: 00fff00000000000 ffff88813fffb910 ffffea0000b63308 0000000000000000 [ 115.941354][ T8745] raw: 0000000000000000 0000000000000002 00000000ffffff7f 0000000000000000 [ 115.941366][ T8745] page dumped because: kasan: bad access detected [ 115.941376][ T8745] page_owner tracks the page as freed [ 115.941381][ T8745] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), pid 8566, ts 115359279942, free_ts 115546435685 [ 115.946630][ T8565] em28xx 5-1:255.0: No AC97 audio processor [ 115.952188][ T8745] get_page_from_freelist+0x125c/0x2ed0 [ 115.952215][ T8745] __alloc_pages+0x1b2/0x500 [ 115.952234][ T8745] alloc_pages+0x18c/0x2a0 [ 115.952252][ T8745] kmalloc_order+0x34/0xf0 [ 115.970857][ T8565] usb 5-1: Decoder not found [ 115.976121][ T8745] kmalloc_order_trace+0x14/0x120 [ 115.995179][ T8565] em28xx 5-1:255.0: failed to create media graph [ 115.999030][ T8745] em28xx_v4l2_init.cold+0x67/0x3265 [ 115.999060][ T8745] em28xx_init_extension+0x12f/0x1f0 [ 116.005964][ T8565] em28xx 5-1:255.0: V4L2 device video72 deregistered [ 116.007248][ T8745] request_module_async+0x5d/0x70 [ 116.007274][ T8745] process_one_work+0x98d/0x1600 [ 116.029232][ T8565] em28xx 5-1:255.0: Binding DVB extension [ 116.031862][ T8745] worker_thread+0x64c/0x1120 [ 116.031888][ T8745] kthread+0x3b1/0x4a0 [ 116.031906][ T8745] ret_from_fork+0x1f/0x30 [ 116.042371][ T8565] em28xx 5-1:255.0: no endpoint for DVB mode and transfer type 0 [ 116.049218][ T8745] page last free stack trace: [ 116.049226][ T8745] __free_pages_ok+0x4cb/0xf30 [ 116.049259][ T8745] kref_put.isra.0+0x6f/0xa0 [ 116.055946][ T8767] general protection fault, probably for non-canonical address 0xdffffc0000000413: 0000 [#1] PREEMPT SMP KASAN [ 116.060995][ T8745] em28xx_v4l2_init.cold+0x238/0x3265 [ 116.076760][ T8767] KASAN: probably user-memory-access in range [0x0000000000002098-0x000000000000209f] [ 116.082632][ T8745] em28xx_init_extension+0x12f/0x1f0 [ 116.088148][ T8767] CPU: 1 PID: 8767 Comm: v4l_id Not tainted 5.13.0-rc2-next-20210518-syzkaller #0 [ 116.092711][ T8745] request_module_async+0x5d/0x70 [ 116.097108][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.101496][ T8745] process_one_work+0x98d/0x1600 [ 116.106056][ T8767] RIP: 0010:em28xx_resolution_set.isra.0+0xe8/0x730 [ 116.111053][ T8745] worker_thread+0x64c/0x1120 [ 116.117352][ T8767] Code: 0f 85 cd 05 00 00 44 0f b6 a5 3c 01 00 00 48 8d bb 98 20 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 41 83 e4 10 <80> 3c 02 00 0f 85 19 06 00 00 48 8b 83 98 20 00 00 31 ff 44 89 e6 [ 116.122605][ T8745] kthread+0x3b1/0x4a0 [ 116.127854][ T8767] RSP: 0018:ffffc9000223f830 EFLAGS: 00010246 [ 116.134501][ T8745] ret_from_fork+0x1f/0x30 [ 116.139493][ T8767] [ 116.139497][ T8767] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 116.144395][ T8745] [ 116.144399][ T8745] Memory state around the buggy address: [ 116.150098][ T8767] RDX: 0000000000000413 RSI: ffffffff8612fa2d RDI: 0000000000002098 [ 116.154748][ T8745] ffff8880316fc780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 116.158783][ T8767] RBP: ffff888016730000 R08: 0000000000000002 R09: 0000000000000002 [ 116.163172][ T8745] ffff8880316fc800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 116.170853][ T8767] R10: ffffffff861319e4 R11: 0000000000000000 R12: 0000000000000000 [ 116.175532][ T8745] >ffff8880316fc880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 116.180268][ T8767] R13: ffff888016730000 R14: ffff88801673013c R15: 0000000000000000 [ 116.184829][ T8745] ^ [ 116.184840][ T8745] ffff8880316fc900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 116.196506][ T8767] FS: 00007f402f174700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 116.201854][ T8745] ffff8880316fc980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 116.211371][ T8767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.216625][ T8745] ================================================================== [ 116.411169][ T8767] CR2: 00007f402e865d70 CR3: 000000001cfc9000 CR4: 00000000001506e0 [ 116.419137][ T8767] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.427090][ T8767] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.435047][ T8767] Call Trace: [ 116.438317][ T8767] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 116.444551][ T8767] ? em28xx_set_outfmt.isra.0+0x420/0x420 [ 116.450259][ T8767] ? em28xx_write_reg_bits+0x110/0x110 [ 116.455700][ T8767] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 116.461516][ T8767] em28xx_v4l2_open+0x45b/0x570 [ 116.466369][ T8767] v4l2_open+0x21c/0x3f0 [ 116.470617][ T8767] ? v4l2_release+0x3b0/0x3b0 [ 116.475289][ T8767] chrdev_open+0x266/0x770 [ 116.479713][ T8767] ? cdev_device_add+0x210/0x210 [ 116.484636][ T8767] ? security_file_open+0x205/0x4f0 [ 116.489911][ T8767] do_dentry_open+0x4b9/0x11c0 [ 116.494662][ T8767] ? cdev_device_add+0x210/0x210 [ 116.499580][ T8767] ? may_open+0x1f6/0x420 [ 116.503895][ T8767] path_openat+0x1c09/0x27d0 [ 116.508474][ T8767] ? path_lookupat+0x850/0x850 [ 116.513227][ T8767] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 116.519193][ T8767] do_filp_open+0x190/0x3d0 [ 116.523683][ T8767] ? may_open_dev+0xf0/0xf0 [ 116.528172][ T8767] ? rwlock_bug.part.0+0x90/0x90 [ 116.533099][ T8767] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 116.539317][ T8767] ? _find_next_bit+0x1e3/0x260 [ 116.544159][ T8767] ? _raw_spin_unlock+0x24/0x40 [ 116.548992][ T8767] ? alloc_fd+0x2f0/0x670 [ 116.553317][ T8767] do_sys_openat2+0x16d/0x420 [ 116.558163][ T8767] ? build_open_flags+0x6f0/0x6f0 [ 116.563170][ T8767] ? __context_tracking_exit+0xb8/0xe0 [ 116.568616][ T8767] __x64_sys_open+0x119/0x1c0 [ 116.573277][ T8767] ? do_sys_open+0x140/0x140 [ 116.577850][ T8767] ? __secure_computing+0x104/0x360 [ 116.583031][ T8767] do_syscall_64+0x31/0xb0 [ 116.587556][ T8767] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 116.593449][ T8767] RIP: 0033:0x7f402eb43840 [ 116.597872][ T8767] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 116.617466][ T8767] RSP: 002b:00007fffb63fff98 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 116.625892][ T8767] RAX: ffffffffffffffda RBX: 00007fffb6400108 RCX: 00007f402eb43840 [ 116.633850][ T8767] RDX: 00007f402eb2fea0 RSI: 0000000000000000 RDI: 00007fffb6400f1d [ 116.641806][ T8767] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 116.649762][ T8767] R10: 0000000000000002 R11: 0000000000000246 R12: 000055843527a8d0 [ 116.657714][ T8767] R13: 00007fffb6400100 R14: 0000000000000000 R15: 0000000000000000 [ 116.665673][ T8767] Modules linked in: [ 116.672575][ T8767] ---[ end trace ed8958bd17db1a96 ]--- [ 116.678228][ T8767] RIP: 0010:em28xx_resolution_set.isra.0+0xe8/0x730 [ 116.685196][ T8767] Code: 0f 85 cd 05 00 00 44 0f b6 a5 3c 01 00 00 48 8d bb 98 20 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 41 83 e4 10 <80> 3c 02 00 0f 85 19 06 00 00 48 8b 83 98 20 00 00 31 ff 44 89 e6 [ 116.692575][ T8565] em28xx 5-1:255.0: failed to pre-allocate USB transfer buffers for DVB. [ 116.705242][ T8157] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 116.722667][ T8767] RSP: 0018:ffffc9000223f830 EFLAGS: 00010246 [ 116.728843][ T8767] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 116.737168][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.744957][ T8157] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 116.754522][ T8767] RDX: 0000000000000413 RSI: ffffffff8612fa2d RDI: 0000000000002098 [ 116.758548][ T8565] em28xx 5-1:255.0: Registering input extension [ 116.762640][ T8157] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.773284][ T20] em28xx 1-1:255.0: Registering V4L2 extension [ 116.780138][ T8767] RBP: ffff888016730000 R08: 0000000000000002 R09: 0000000000000002 [ 116.794426][ T8767] R10: ffffffff861319e4 R11: 0000000000000000 R12: 0000000000000000 [ 116.802756][ T8157] usb 3-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=7f.4f [ 116.812037][ T8767] R13: ffff888016730000 R14: ffff88801673013c R15: 0000000000000000 [ 116.820114][ T8157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.823017][ T20] em28xx 1-1:255.0: Config register raw data: 0xffffffed [ 116.828219][ T8767] FS: 00007f402f174700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 116.842917][ T20] em28xx 1-1:255.0: AC97 chip type couldn't be determined [ 116.851372][ T8767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.858880][ T8767] CR2: 00007f6471ab5000 CR3: 000000001cfc9000 CR4: 00000000001506f0 [ 116.867118][ T8767] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.869221][ T20] em28xx 1-1:255.0: No AC97 audio processor [ 116.875570][ T8767] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.889243][ T8767] Kernel panic - not syncing: Fatal exception [ 116.896170][ T8767] Kernel Offset: disabled [ 116.900486][ T8767] Rebooting in 86400 seconds..