./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4047250666 <...> Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. execve("./syz-executor4047250666", ["./syz-executor4047250666"], 0x7ffde71c8890 /* 10 vars */) = 0 brk(NULL) = 0x55555f3d4000 brk(0x55555f3d4d00) = 0x55555f3d4d00 arch_prctl(ARCH_SET_FS, 0x55555f3d4380) = 0 set_tid_address(0x55555f3d4650) = 5837 set_robust_list(0x55555f3d4660, 24) = 0 rseq(0x55555f3d4ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4047250666", 4096) = 28 getrandom("\x02\xeb\xba\x10\xdc\x60\x09\x61", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555f3d4d00 brk(0x55555f3f5d00) = 0x55555f3f5d00 brk(0x55555f3f6000) = 0x55555f3f6000 mprotect(0x7f912df56000, 16384, PROT_READ) = 0 mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000 mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000 mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5838 attached , child_tidptr=0x55555f3d4650) = 5838 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5838] set_robust_list(0x55555f3d4660, 24) = 0 ./strace-static-x86_64: Process 5839 attached [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5839] set_robust_list(0x55555f3d4660, 24./strace-static-x86_64: Process 5840 attached [pid 5837] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5839 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5839] <... set_robust_list resumed>) = 0 [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5838] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5840 [pid 5840] set_robust_list(0x55555f3d4660, 24) = 0 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5841 attached [pid 5841] set_robust_list(0x55555f3d4660, 24 [pid 5840] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5842 attached [pid 5837] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5841 [pid 5841] <... set_robust_list resumed>) = 0 [pid 5840] setpgid(0, 0 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5842] set_robust_list(0x55555f3d4660, 24 [pid 5841] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5839] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5842 [pid 5840] <... setpgid resumed>) = 0 [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5842] <... set_robust_list resumed>) = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5842] setpgid(0, 0) = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5840] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5843 attached ./strace-static-x86_64: Process 5844 attached [pid 5842] <... openat resumed>) = 3 [pid 5841] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5843 [pid 5840] write(3, "1000", 4 [pid 5837] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5844 [pid 5843] set_robust_list(0x55555f3d4660, 24 [pid 5840] <... write resumed>) = 4 [pid 5840] close(3 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5844] set_robust_list(0x55555f3d4660, 24 [pid 5842] write(3, "1000", 4 [pid 5840] <... close resumed>) = 0 [pid 5844] <... set_robust_list resumed>) = 0 [pid 5843] <... set_robust_list resumed>) = 0 [pid 5842] <... write resumed>) = 4 [pid 5840] write(1, "executing program\n", 18./strace-static-x86_64: Process 5845 attached [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5842] close(3executing program ) = 0 ./strace-static-x86_64: Process 5846 attached [pid 5837] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5845 [pid 5845] set_robust_list(0x55555f3d4660, 24 [pid 5843] <... prctl resumed>) = 0 [pid 5840] <... write resumed>) = 18 [pid 5846] set_robust_list(0x55555f3d4660, 24 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5844] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5846 [pid 5843] setpgid(0, 0 [pid 5842] write(1, "executing program\n", 18 [pid 5840] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWRexecuting program [pid 5846] <... set_robust_list resumed>) = 0 [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5843] <... setpgid resumed>) = 0 [pid 5842] <... write resumed>) = 18 [pid 5840] <... openat resumed>) = 3 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5842] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5840] ioctl(3, USB_RAW_IOCTL_INIT./strace-static-x86_64: Process 5847 attached [pid 5846] <... prctl resumed>) = 0 [pid 5842] <... openat resumed>) = 3 [pid 5843] <... openat resumed>) = 3 [pid 5847] set_robust_list(0x55555f3d4660, 24 [pid 5846] setpgid(0, 0 [pid 5845] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5847 [pid 5842] ioctl(3, USB_RAW_IOCTL_INIT [pid 5847] <... set_robust_list resumed>) = 0 [pid 5846] <... setpgid resumed>) = 0 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5843] write(3, "1000", 4 [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] <... prctl resumed>) = 0 [pid 5842] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5847] setpgid(0, 0 [pid 5846] <... openat resumed>) = 3 [pid 5843] <... write resumed>) = 4 [pid 5840] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5847] <... setpgid resumed>) = 0 [pid 5846] write(3, "1000", 4executing program [pid 5843] close(3 [pid 5840] <... ioctl resumed>, 0) = 0 [pid 5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5846] <... write resumed>) = 4 [pid 5842] <... ioctl resumed>, 0) = 0 [pid 5843] <... close resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5843] write(1, "executing program\n", 18 [pid 5847] write(3, "1000", 4 [pid 5843] <... write resumed>) = 18 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... write resumed>) = 4 [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] close(3) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCHexecuting program [pid 5847] write(1, "executing program\n", 18) = 18 [pid 5847] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5846] close(3 [pid 5843] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] ioctl(3, USB_RAW_IOCTL_INIT [pid 5846] <... close resumed>) = 0 [pid 5843] <... openat resumed>) = 3 [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] write(1, "executing program\n", 18 [pid 5843] ioctl(3, USB_RAW_IOCTL_INITexecuting program [pid 5846] <... write resumed>) = 18 [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5846] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5847] <... ioctl resumed>, 0) = 0 [pid 5846] <... openat resumed>) = 3 [pid 5843] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_INIT [pid 5843] <... ioctl resumed>, 0) = 0 [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5846] <... ioctl resumed>, 0) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 75.606727][ T973] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.606727][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.646403][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 75.646403][ T5848] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.656672][ T2151] usb 4-1: new high-speed USB device number 2 using dummy_hcd [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 9 [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5842] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5840] <... ioctl resumed>, 0x7ffeff25d010) = 27 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5842] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 75.766380][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 75.776368][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 75.792997][ T973] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 75.804091][ T973] usb 1-1: config 0 has no interface number 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 27 [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 4 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5842] <... ioctl resumed>, 0x7ffeff25d010) = 4 [pid 5840] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5847] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5846] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5843] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 75.804609][ T46] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 75.811272][ T973] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.818658][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 75.833757][ T46] usb 2-1: config 0 has no interface number 0 [ 75.840174][ T46] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.846389][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 75.856405][ T2151] usb 4-1: Using ep0 maxpacket: 32 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5840] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5847] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5842] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5842] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5843] <... ioctl resumed>, 0x7ffeff25d010) = 27 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 75.867975][ T973] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 75.878052][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.887142][ T973] usb 1-1: Product: syz [ 75.889825][ T25] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 75.891780][ T973] usb 1-1: Manufacturer: syz [ 75.899655][ T46] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 75.905666][ T973] usb 1-1: SerialNumber: syz [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] <... ioctl resumed>, 0x7ffeff25d010) = 27 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 75.915268][ T25] usb 3-1: config 0 has no interface number 0 [ 75.924702][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.926041][ T5848] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 75.933447][ T25] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.943967][ T973] usb 1-1: config 0 descriptor?? [ 75.951361][ T2151] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffeff25d010) = 27 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5840] <... ioctl resumed>, 0x2) = 0 [pid 5847] <... ioctl resumed>, 0x7ffeff25d010) = 4 [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5840] <... ioctl resumed>, 0) = 0 [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] <... ioctl resumed>, 0x7ffeff25d010) = 4 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5842] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5840] <... ioctl resumed>, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [pid 5847] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 75.958183][ T5848] usb 5-1: config 0 has no interface number 0 [ 75.964606][ T46] usb 2-1: Product: syz [ 75.972719][ T5848] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.974951][ T46] usb 2-1: Manufacturer: syz [ 75.989264][ T2151] usb 4-1: config 0 has no interface number 0 [ 75.995415][ T2151] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.005515][ T46] usb 2-1: SerialNumber: syz [ 76.013661][ T46] usb 2-1: config 0 descriptor?? [pid 5842] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffeff25d010) = 4 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5842] <... ioctl resumed>, 0x2) = 0 [pid 5840] <... ioctl resumed>, 0x7ffeff25d010) = 0 [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5842] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5842] <... ioctl resumed>, 0) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5846] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5842] <... ioctl resumed>, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5847] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5842] <... ioctl resumed>, 0x7ffeff25d010) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5843] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5846] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5847] <... ioctl resumed>, 0x7ffeff25d010) = 8 [ 76.033090][ T973] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 76.044545][ T973] em28xx 1-1:0.132: Video interface 132 found: [ 76.055888][ T5848] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 76.055889][ T2151] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 76.055934][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5846] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] <... ioctl resumed>, 0x7ffeff25d010) = 8 [ 76.066593][ T46] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 76.075731][ T5848] usb 5-1: Product: syz [ 76.083226][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.094203][ T5848] usb 5-1: Manufacturer: syz [ 76.096521][ T25] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 76.104999][ T5848] usb 5-1: SerialNumber: syz [ 76.109700][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [ 76.131990][ T2151] usb 4-1: Product: syz [ 76.136209][ T2151] usb 4-1: Manufacturer: syz [ 76.136305][ T46] em28xx 2-1:0.132: Video interface 132 found: [ 76.148803][ T2151] usb 4-1: SerialNumber: syz [ 76.152007][ T5848] usb 5-1: config 0 descriptor?? [ 76.155007][ T25] usb 3-1: Product: syz [ 76.163996][ T2151] usb 4-1: config 0 descriptor?? [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d010) = 0 [pid 5846] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d010) = 0 [ 76.176116][ T5848] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 76.195599][ T5848] em28xx 5-1:0.132: Video interface 132 found: [ 76.198215][ T2151] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 76.213259][ T25] usb 3-1: Manufacturer: syz [ 76.218127][ T2151] em28xx 4-1:0.132: Video interface 132 found: [ 76.224511][ T25] usb 3-1: SerialNumber: syz [pid 5843] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] <... ioctl resumed>, 0) = 0 [pid 5840] <... ioctl resumed>, 0x7ffeff25e050) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5840] <... ioctl resumed>, 0x7ffeff25d040) = 1 [pid 5843] <... ioctl resumed>, 0x7ffeff25d010) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d040) = 1 [ 76.233018][ T25] usb 3-1: config 0 descriptor?? [ 76.248992][ T25] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 76.259926][ T25] em28xx 3-1:0.132: Video interface 132 found: [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d040) = 1 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d040) = 1 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5840] exit_group(0 [pid 5843] <... ioctl resumed>, 0x7ffeff25e050) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5840] <... exit_group resumed>) = ? [pid 5843] <... ioctl resumed>, 0x7ffeff25d040) = 1 [pid 5840] +++ exited with 0 +++ [pid 5838] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5840, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5838] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5842] exit_group(0) = ? [pid 5838] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5857 ./strace-static-x86_64: Process 5857 attached [pid 5857] set_robust_list(0x55555f3d4660, 24) = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5842] +++ exited with 0 +++ [pid 5839] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5857] <... prctl resumed>) = 0 [pid 5857] setpgid(0, 0) = 0 [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5859 attached [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5859] set_robust_list(0x55555f3d4660, 24 [pid 5839] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5859 [pid 5857] <... openat resumed>) = 3 executing program [pid 5857] write(3, "1000", 4 [pid 5859] <... set_robust_list resumed>) = 0 [pid 5857] <... write resumed>) = 4 [pid 5857] close(3 [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5857] <... close resumed>) = 0 [pid 5857] write(1, "executing program\n", 18) = 18 [pid 5857] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5857] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffeff25e020) = 0 [pid 5857] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 76.476024][ T973] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 76.494197][ T46] em28xx 2-1:0.132: unknown em28xx chip ID (0) [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5859] <... prctl resumed>) = 0 [pid 5859] setpgid(0, 0) = 0 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5859] write(3, "1000", 4) = 4 [pid 5859] close(3executing program ) = 0 [pid 5859] write(1, "executing program\n", 18) = 18 [pid 5859] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5859] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffeff25e020) = 0 [pid 5859] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] exit_group(0) = ? [pid 5847] +++ exited with 0 +++ [pid 5845] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5847, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5845] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5846] exit_group(0 [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5846] <... exit_group resumed>) = ? [ 76.563776][ T46] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 76.569140][ T973] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 76.576684][ T46] em28xx 2-1:0.132: board has no eeprom [ 76.589415][ T973] em28xx 1-1:0.132: board has no eeprom [ 76.598151][ T5848] em28xx 5-1:0.132: unknown em28xx chip ID (0) [pid 5846] +++ exited with 0 +++ [pid 5845] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5862 ./strace-static-x86_64: Process 5862 attached [pid 5862] set_robust_list(0x55555f3d4660, 24 [pid 5844] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5846, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5862] <... set_robust_list resumed>) = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5862] setpgid(0, 0) = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5862] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5863 attached [ 76.610179][ T2151] em28xx 4-1:0.132: unknown em28xx chip ID (0) [pid 5863] set_robust_list(0x55555f3d4660, 24 [pid 5862] write(3, "1000", 4 [pid 5844] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5863 [pid 5863] <... set_robust_list resumed>) = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5863] setpgid(0, 0) = 0 [pid 5862] <... write resumed>) = 4 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5862] close(3 [pid 5863] <... openat resumed>) = 3 [pid 5862] <... close resumed>) = 0 executing program [pid 5862] write(1, "executing program\n", 18) = 18 [pid 5863] write(3, "1000", 4 [pid 5862] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5863] <... write resumed>) = 4 [pid 5862] <... openat resumed>) = 3 [pid 5863] close(3 [pid 5862] ioctl(3, USB_RAW_IOCTL_INIT [pid 5843] exit_group(0 [pid 5863] <... close resumed>) = 0 [pid 5862] <... ioctl resumed>, 0x7ffeff25e020) = 0 executing program [pid 5863] write(1, "executing program\n", 18 [pid 5862] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5863] <... write resumed>) = 18 [pid 5862] <... ioctl resumed>, 0) = 0 [pid 5863] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5863] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffeff25e020) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 76.647197][ T973] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 76.655105][ T973] em28xx 1-1:0.132: analog set to bulk mode. [ 76.662502][ T9] em28xx 1-1:0.132: Registering V4L2 extension [ 76.666439][ T46] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 76.675002][ T5848] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [pid 5863] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5862] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5843] <... exit_group resumed>) = ? [pid 5863] <... ioctl resumed>, 0) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 76.700042][ T46] em28xx 2-1:0.132: analog set to bulk mode. [ 76.706428][ T2151] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 76.715296][ T2151] em28xx 4-1:0.132: board has no eeprom [ 76.719851][ T973] usb 1-1: USB disconnect, device number 2 [ 76.728793][ T25] em28xx 3-1:0.132: unknown em28xx chip ID (0) [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] +++ exited with 0 +++ [pid 5841] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5841] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5867 attached [pid 5867] set_robust_list(0x55555f3d4660, 24 [pid 5841] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5867 [pid 5867] <... set_robust_list resumed>) = 0 [pid 5867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5867] setpgid(0, 0) = 0 [pid 5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5867] write(3, "1000", 4) = 4 [pid 5867] close(3) = 0 [pid 5867] write(1, "executing program\n", 18executing program ) = 18 [pid 5867] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5867] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffeff25e020) = 0 [pid 5867] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 76.748069][ T46] usb 2-1: USB disconnect, device number 2 [ 76.755495][ T46] em28xx 2-1:0.132: Disconnecting em28xx [ 76.764702][ T5848] em28xx 5-1:0.132: board has no eeprom [ 76.772326][ T973] em28xx 1-1:0.132: Disconnecting em28xx [ 76.826388][ T2151] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 76.839171][ T2151] em28xx 4-1:0.132: analog set to bulk mode. [ 76.846389][ T5848] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 76.854259][ T5848] em28xx 5-1:0.132: analog set to bulk mode. [ 76.862117][ T25] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 76.873708][ T5848] usb 5-1: USB disconnect, device number 2 [ 76.875854][ T2151] usb 4-1: USB disconnect, device number 2 [ 76.887178][ T25] em28xx 3-1:0.132: board has no eeprom [ 76.894126][ T2151] em28xx 4-1:0.132: Disconnecting em28xx [ 76.903722][ T5848] em28xx 5-1:0.132: Disconnecting em28xx [ 76.917016][ T9] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 76.924351][ T9] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 76.931637][ T9] em28xx 1-1:0.132: No AC97 audio processor [ 76.941426][ T9] usb 1-1: Decoder not found [ 76.946059][ T9] em28xx 1-1:0.132: failed to create media graph [ 76.953042][ T9] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 76.956637][ T25] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 76.964364][ T9] em28xx 1-1:0.132: Remote control support is not available for this card. [ 76.969591][ T25] em28xx 3-1:0.132: analog set to bulk mode. [ 76.977920][ T973] em28xx 1-1:0.132: Closing input extension [ 76.989547][ T5853] em28xx 2-1:0.132: Registering V4L2 extension [ 77.000256][ T973] em28xx 1-1:0.132: Freeing device [ 77.018970][ T25] usb 3-1: USB disconnect, device number 2 [ 77.031692][ T25] em28xx 3-1:0.132: Disconnecting em28xx [ 77.111277][ T5853] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 77.119616][ T5853] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 77.126898][ T5853] em28xx 2-1:0.132: No AC97 audio processor [ 77.134324][ T5853] usb 2-1: Decoder not found [ 77.139121][ T5853] em28xx 2-1:0.132: failed to create media graph [ 77.145526][ T5853] em28xx 2-1:0.132: V4L2 device video103 deregistered [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 77.153939][ T5853] em28xx 2-1:0.132: Remote control support is not available for this card. [ 77.162682][ T5866] em28xx 5-1:0.132: Registering V4L2 extension [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 77.228620][ T5866] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 77.235779][ T5866] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 77.244267][ T5866] em28xx 5-1:0.132: No AC97 audio processor [ 77.252204][ T5866] usb 5-1: Decoder not found [ 77.257255][ T5866] em28xx 5-1:0.132: failed to create media graph [ 77.263944][ T5866] em28xx 5-1:0.132: V4L2 device video103 deregistered [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 77.272733][ T5866] em28xx 5-1:0.132: Remote control support is not available for this card. [ 77.281633][ T5848] em28xx 5-1:0.132: Closing input extension [ 77.287878][ T5868] em28xx 4-1:0.132: Registering V4L2 extension [ 77.291795][ T5848] em28xx 5-1:0.132: Freeing device [ 77.308812][ T973] usb 1-1: new high-speed USB device number 3 using dummy_hcd [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 77.382799][ T5868] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 77.390741][ T5868] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 77.398979][ T5868] em28xx 4-1:0.132: No AC97 audio processor [ 77.405847][ T5868] usb 4-1: Decoder not found [ 77.410633][ T5868] em28xx 4-1:0.132: failed to create media graph [ 77.417042][ T5868] em28xx 4-1:0.132: V4L2 device video103 deregistered [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5862] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 77.424858][ T5868] em28xx 4-1:0.132: Remote control support is not available for this card. [ 77.434311][ T5872] em28xx 3-1:0.132: Registering V4L2 extension [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 9 [ 77.480191][ T973] usb 1-1: Using ep0 maxpacket: 32 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 27 [ 77.512998][ T5872] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 77.520143][ T5872] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 77.528377][ T5872] em28xx 3-1:0.132: No AC97 audio processor [ 77.531867][ T973] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 77.537077][ T5872] usb 3-1: Decoder not found [ 77.545605][ T973] usb 1-1: config 0 has no interface number 0 [ 77.548255][ T5872] em28xx 3-1:0.132: failed to create media graph [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5862] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5857] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 4 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [ 77.560195][ T5872] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 77.560272][ T973] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.570395][ T5872] em28xx 3-1:0.132: Remote control support is not available for this card. [ 77.586655][ T46] em28xx 2-1:0.132: Closing input extension [ 77.592529][ T973] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 77.592638][ T25] em28xx 3-1:0.132: Closing input extension [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5862] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 77.605841][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.611686][ T46] em28xx 2-1:0.132: Freeing device [ 77.617846][ T973] usb 1-1: Product: syz [ 77.622213][ T2151] em28xx 4-1:0.132: Closing input extension [ 77.624912][ T973] usb 1-1: Manufacturer: syz [ 77.636065][ T973] usb 1-1: SerialNumber: syz [ 77.637847][ T25] em28xx 3-1:0.132: Freeing device [ 77.640922][ T5848] usb 5-1: new high-speed USB device number 3 using dummy_hcd [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d010) = 0 [ 77.668786][ T2151] em28xx 4-1:0.132: Freeing device [ 77.671654][ T973] usb 1-1: config 0 descriptor?? [pid 5862] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 77.713399][ T973] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 77.725587][ T973] em28xx 1-1:0.132: Video interface 132 found: [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 9 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 77.806364][ T5848] usb 5-1: Using ep0 maxpacket: 32 [pid 5859] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5862] <... ioctl resumed>, 0x7ffeff25d010) = 27 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5863] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5862] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 4 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5859] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 77.835212][ T5848] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 77.845020][ T5848] usb 5-1: config 0 has no interface number 0 [ 77.851646][ T5848] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5862] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5857] <... ioctl resumed>, 0x7ffeff25d040) = 1 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5862] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5863] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5862] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [ 77.900293][ T5848] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 77.909493][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.918122][ T5848] usb 5-1: Product: syz [ 77.922310][ T5848] usb 5-1: Manufacturer: syz [ 77.927350][ T5848] usb 5-1: SerialNumber: syz [ 77.933657][ T5848] usb 5-1: config 0 descriptor?? [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d010) = 0 [pid 5859] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [ 77.956447][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.967820][ T5848] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 77.968685][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.978567][ T5848] em28xx 5-1:0.132: Video interface 132 found: [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5863] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5859] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 78.006798][ T2151] usb 4-1: new high-speed USB device number 3 using dummy_hcd [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5863] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] exit_group(0 [pid 5859] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5857] <... exit_group resumed>) = ? [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5857] +++ exited with 0 +++ [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5859] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5867] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5859] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5859] <... ioctl resumed>, 0x7ffeff25d010) = 27 [pid 5838] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5867] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5838] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d040) = 1 [pid 5838] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5887 [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 ./strace-static-x86_64: Process 5887 attached [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5863] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5867] <... ioctl resumed>, 0x7ffeff25d010) = 27 [ 78.136356][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 78.150454][ T973] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 78.156718][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 78.162620][ T46] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 78.171807][ T46] usb 2-1: config 0 has no interface number 0 [ 78.178640][ T2151] usb 4-1: Using ep0 maxpacket: 32 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5887] set_robust_list(0x55555f3d4660, 24) = 0 [pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5863] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5887] <... prctl resumed>) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] setpgid(0, 0) = 0 [pid 5863] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5863] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5887] <... openat resumed>) = 3 [pid 5887] write(3, "1000", 4 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] <... write resumed>) = 4 [pid 5887] close(3) = 0 [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5863] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5859] <... ioctl resumed>, 0x7ffeff25e020) = 0 executing program [pid 5887] write(1, "executing program\n", 18 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 78.185182][ T25] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 78.195574][ T46] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.207038][ T25] usb 3-1: config 0 has no interface number 0 [ 78.213259][ T25] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.226459][ T2151] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5887] <... write resumed>) = 18 [pid 5867] <... ioctl resumed>, 0x7ffeff25d010) = 4 [pid 5863] <... ioctl resumed>, 0x7ffeff25d010) = 27 [pid 5887] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5859] <... ioctl resumed>, 0x7ffeff25d010) = 4 [pid 5887] <... openat resumed>) = 3 [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffeff25e020) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5863] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5859] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5887] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5867] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5863] <... ioctl resumed>, 0x7ffeff25d010) = 4 [pid 5859] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5859] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5863] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5859] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5867] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5863] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] <... ioctl resumed>, 0) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5859] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5863] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 78.229984][ T973] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 78.235425][ T2151] usb 4-1: config 0 has no interface number 0 [ 78.248882][ T973] em28xx 1-1:0.132: board has no eeprom [ 78.250292][ T2151] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5859] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5863] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5867] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [ 78.286187][ T46] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 78.295738][ T25] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 78.304958][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.313218][ T2151] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 78.322357][ T46] usb 2-1: Product: syz [ 78.322774][ T973] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 78.326614][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.342554][ T973] em28xx 1-1:0.132: analog set to bulk mode. [ 78.342639][ T5866] em28xx 1-1:0.132: Registering V4L2 extension [ 78.348595][ T46] usb 2-1: Manufacturer: syz [ 78.348615][ T46] usb 2-1: SerialNumber: syz [ 78.349667][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.367997][ T973] usb 1-1: USB disconnect, device number 3 [ 78.373455][ T46] usb 2-1: config 0 descriptor?? [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5862] exit_group(0) = ? [pid 5862] +++ exited with 0 +++ [pid 5845] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5845] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5859] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5889 attached [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d010) = 0 [pid 5845] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5889 [pid 5889] set_robust_list(0x55555f3d4660, 24) = 0 [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5889] setpgid(0, 0) = 0 [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5889] write(3, "1000", 4) = 4 [pid 5889] close(3executing program ) = 0 [pid 5889] write(1, "executing program\n", 18) = 18 [ 78.388029][ T5848] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 78.396513][ T25] usb 3-1: Product: syz [ 78.400799][ T25] usb 3-1: Manufacturer: syz [ 78.405470][ T25] usb 3-1: SerialNumber: syz [ 78.422906][ T973] em28xx 1-1:0.132: Disconnecting em28xx [pid 5889] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5889] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffeff25e020) = 0 [pid 5889] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 78.428948][ T46] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 78.439702][ T2151] usb 4-1: Product: syz [ 78.461065][ T2151] usb 4-1: Manufacturer: syz [ 78.465737][ T2151] usb 4-1: SerialNumber: syz [ 78.472732][ T46] em28xx 2-1:0.132: Video interface 132 found: [ 78.477491][ T5848] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5867] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5863] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5867] <... ioctl resumed>, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5863] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5867] <... ioctl resumed>, 0x7ffeff25d010) = 0 [pid 5863] <... ioctl resumed>, 0) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d010) = 0 [ 78.480896][ T25] usb 3-1: config 0 descriptor?? [ 78.499122][ T2151] usb 4-1: config 0 descriptor?? [ 78.501850][ T5848] em28xx 5-1:0.132: board has no eeprom [ 78.523870][ T2151] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 78.540076][ T25] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 78.550548][ T2151] em28xx 4-1:0.132: Video interface 132 found: [ 78.557603][ T25] em28xx 3-1:0.132: Video interface 132 found: [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d040) = 1 [ 78.586414][ T5848] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 78.596160][ T5848] em28xx 5-1:0.132: analog set to bulk mode. [ 78.605613][ T5866] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 78.618603][ T5848] usb 5-1: USB disconnect, device number 3 [ 78.625204][ T5848] em28xx 5-1:0.132: Disconnecting em28xx [ 78.630964][ T5866] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 78.638272][ T5866] em28xx 1-1:0.132: No AC97 audio processor [ 78.645924][ T5866] usb 1-1: Decoder not found [ 78.650858][ T5866] em28xx 1-1:0.132: failed to create media graph [ 78.657410][ T5866] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 78.665263][ T5866] em28xx 1-1:0.132: Remote control support is not available for this card. [ 78.674146][ T9] em28xx 5-1:0.132: Registering V4L2 extension [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d040) = 1 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d040) = 1 [ 78.764033][ T9] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 78.771491][ T9] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 78.779700][ T9] em28xx 5-1:0.132: No AC97 audio processor [ 78.787286][ T9] usb 5-1: Decoder not found [ 78.791927][ T9] em28xx 5-1:0.132: failed to create media graph [ 78.800149][ T9] em28xx 5-1:0.132: V4L2 device video103 deregistered [pid 5859] exit_group(0) = ? [ 78.808311][ T9] em28xx 5-1:0.132: Remote control support is not available for this card. [ 78.817089][ T973] em28xx 1-1:0.132: Closing input extension [ 78.824109][ T5848] em28xx 5-1:0.132: Closing input extension [ 78.833826][ T973] em28xx 1-1:0.132: Freeing device [ 78.840985][ T5848] em28xx 5-1:0.132: Freeing device [pid 5859] +++ exited with 0 +++ [pid 5839] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5859, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5839] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5896 attached [pid 5896] set_robust_list(0x55555f3d4660, 24) = 0 [pid 5896] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5896] setpgid(0, 0) = 0 [pid 5839] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5896 [pid 5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5896] write(3, "1000", 4) = 4 [pid 5896] close(3) = 0 [pid 5896] write(1, "executing program\n", 18executing program ) = 18 [ 78.862402][ T46] em28xx 2-1:0.132: unknown em28xx chip ID (0) [pid 5896] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5896] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffeff25e020) = 0 [pid 5896] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5863] exit_group(0) = ? [pid 5863] +++ exited with 0 +++ [pid 5844] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5844] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5867] exit_group(0) = ? [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5897 attached [ 78.939273][ T46] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 78.948203][ T46] em28xx 2-1:0.132: board has no eeprom [ 78.956927][ T2151] em28xx 4-1:0.132: unknown em28xx chip ID (0) , child_tidptr=0x55555f3d4650) = 5897 [pid 5897] set_robust_list(0x55555f3d4660, 24 [pid 5867] +++ exited with 0 +++ [pid 5897] <... set_robust_list resumed>) = 0 [pid 5841] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5867, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5841] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5897] <... prctl resumed>) = 0 [pid 5897] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5898 attached [pid 5898] set_robust_list(0x55555f3d4660, 24 [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5841] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5898 [pid 5898] <... set_robust_list resumed>) = 0 [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5897] <... openat resumed>) = 3 [pid 5898] <... prctl resumed>) = 0 [pid 5897] write(3, "1000", 4 [pid 5898] setpgid(0, 0 [pid 5897] <... write resumed>) = 4 [pid 5898] <... setpgid resumed>) = 0 [ 78.979590][ T25] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 79.006490][ T46] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 79.014480][ T46] em28xx 2-1:0.132: analog set to bulk mode. [pid 5897] close(3executing program [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5897] <... close resumed>) = 0 [pid 5889] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5887] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] write(3, "1000", 4 [pid 5897] write(1, "executing program\n", 18 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] <... write resumed>) = 4 [pid 5897] <... write resumed>) = 18 [pid 5898] close(3 [pid 5897] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5898] <... close resumed>) = 0 [pid 5897] <... openat resumed>) = 3 [pid 5898] write(1, "executing program\n", 18executing program [pid 5897] ioctl(3, USB_RAW_IOCTL_INIT [pid 5898] <... write resumed>) = 18 [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5897] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5898] <... openat resumed>) = 3 [pid 5898] ioctl(3, USB_RAW_IOCTL_INIT [pid 5897] <... ioctl resumed>, 0) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 79.024877][ T5872] em28xx 2-1:0.132: Registering V4L2 extension [ 79.032908][ T2151] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 79.042125][ T2151] em28xx 4-1:0.132: board has no eeprom [ 79.049883][ T46] usb 2-1: USB disconnect, device number 3 [ 79.057945][ T46] em28xx 2-1:0.132: Disconnecting em28xx [ 79.066031][ T25] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 79.075114][ T25] em28xx 3-1:0.132: board has no eeprom [ 79.116346][ T2151] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 79.124248][ T2151] em28xx 4-1:0.132: analog set to bulk mode. [ 79.133951][ T2151] usb 4-1: USB disconnect, device number 3 [ 79.140160][ T25] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 79.146583][ T5848] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.150914][ T2151] em28xx 4-1:0.132: Disconnecting em28xx [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 79.155583][ T973] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.161519][ T25] em28xx 3-1:0.132: analog set to bulk mode. [ 79.179706][ T25] usb 3-1: USB disconnect, device number 3 [ 79.186892][ T25] em28xx 3-1:0.132: Disconnecting em28xx [ 79.195455][ T5872] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 79.202997][ T5872] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 79.210902][ T5872] em28xx 2-1:0.132: No AC97 audio processor [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 79.217903][ T5872] usb 2-1: Decoder not found [ 79.222543][ T5872] em28xx 2-1:0.132: failed to create media graph [ 79.229262][ T5872] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 79.237077][ T5872] em28xx 2-1:0.132: Remote control support is not available for this card. [ 79.245742][ T5868] em28xx 4-1:0.132: Registering V4L2 extension [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [ 79.313571][ T5868] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 79.320908][ T5868] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 79.328188][ T5868] em28xx 4-1:0.132: No AC97 audio processor [ 79.335063][ T5868] usb 4-1: Decoder not found [ 79.336360][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 79.339818][ T5868] em28xx 4-1:0.132: failed to create media graph [ 79.345500][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 79.351343][ T5868] em28xx 4-1:0.132: V4L2 device video103 deregistered [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5889] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5887] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5889] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5887] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5887] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5889] <... ioctl resumed>, 0x7ffeff25d010) = 27 [pid 5887] <... ioctl resumed>, 0x7ffeff25d010) = 27 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 79.365730][ T5868] em28xx 4-1:0.132: Remote control support is not available for this card. [ 79.375062][ T5853] em28xx 3-1:0.132: Registering V4L2 extension [ 79.384656][ T5848] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 79.393362][ T973] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 79.405145][ T5848] usb 5-1: config 0 has no interface number 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5889] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5887] <... ioctl resumed>, 0x7ffeff25d010) = 4 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] <... ioctl resumed>, 0x7ffeff25d010) = 4 [pid 5887] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5889] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5887] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5889] <... ioctl resumed>, 0x7ffeff25d010) = 8 [ 79.411737][ T973] usb 1-1: config 0 has no interface number 0 [ 79.420395][ T5848] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 79.430686][ T973] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5889] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5887] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5889] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5887] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [ 79.464981][ T973] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 79.479455][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.481362][ T5853] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 79.491365][ T5848] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 79.496406][ T5853] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 79.505426][ T973] usb 1-1: Product: syz [ 79.511430][ T5853] em28xx 3-1:0.132: No AC97 audio processor [ 79.517835][ T973] usb 1-1: Manufacturer: syz [ 79.523313][ T5853] usb 3-1: Decoder not found [ 79.525600][ T973] usb 1-1: SerialNumber: syz [ 79.530305][ T5853] em28xx 3-1:0.132: failed to create media graph [ 79.536429][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.542174][ T5853] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 79.552444][ T5848] usb 5-1: Product: syz [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [ 79.557610][ T5853] em28xx 3-1:0.132: Remote control support is not available for this card. [ 79.563611][ T973] usb 1-1: config 0 descriptor?? [ 79.568942][ T46] em28xx 2-1:0.132: Closing input extension [ 79.577895][ T5848] usb 5-1: Manufacturer: syz [ 79.579978][ T2151] em28xx 4-1:0.132: Closing input extension [ 79.584436][ T5848] usb 5-1: SerialNumber: syz [ 79.595233][ T25] em28xx 3-1:0.132: Closing input extension [ 79.600252][ T25] em28xx 3-1:0.132: Freeing device [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d010) = 0 [pid 5889] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d010) = 0 [ 79.609556][ T973] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 79.609851][ T46] em28xx 2-1:0.132: Freeing device [ 79.622038][ T973] em28xx 1-1:0.132: Video interface 132 found: [ 79.633867][ T2151] em28xx 4-1:0.132: Freeing device [ 79.636445][ T5848] usb 5-1: config 0 descriptor?? [ 79.664717][ T5848] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 79.674754][ T5848] em28xx 5-1:0.132: Video interface 132 found: [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d040) = 1 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d040) = 1 [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 79.946410][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 79.954064][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.961643][ T2151] usb 4-1: new high-speed USB device number 4 using dummy_hcd [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5887] exit_group(0) = ? [pid 5887] +++ exited with 0 +++ [pid 5838] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5838] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 ./strace-static-x86_64: Process 5908 attached [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5908] set_robust_list(0x55555f3d4660, 24 [pid 5838] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5908 [pid 5908] <... set_robust_list resumed>) = 0 [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5908] setpgid(0, 0) = 0 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5908] write(3, "1000", 4) = 4 [pid 5908] close(3) = 0 [pid 5908] write(1, "executing program\n", 18 [pid 5889] exit_group(0executing program [pid 5908] <... write resumed>) = 18 [ 80.040640][ T973] em28xx 1-1:0.132: unknown em28xx chip ID (0) [pid 5908] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5889] <... exit_group resumed>) = ? [pid 5908] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffeff25e020) = 0 [pid 5908] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] +++ exited with 0 +++ [pid 5845] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5845] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5909 attached , child_tidptr=0x55555f3d4650) = 5909 [pid 5909] set_robust_list(0x55555f3d4660, 24) = 0 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5909] setpgid(0, 0) = 0 [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5909] write(3, "1000", 4) = 4 [pid 5909] close(3) = 0 [pid 5909] write(1, "executing program\n", 18executing program ) = 18 [pid 5909] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5909] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffeff25e020) = 0 [pid 5909] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 80.108500][ T973] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 80.118158][ T973] em28xx 1-1:0.132: board has no eeprom [ 80.127611][ T5848] em28xx 5-1:0.132: unknown em28xx chip ID (0) [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5898] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5896] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 80.156391][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 80.161651][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 80.167104][ T2151] usb 4-1: Using ep0 maxpacket: 32 [ 80.176626][ T973] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 80.184703][ T973] em28xx 1-1:0.132: analog set to bulk mode. [ 80.192783][ T9] em28xx 1-1:0.132: Registering V4L2 extension [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffeff25d010) = 9 [pid 5898] <... ioctl resumed>, 0x7ffeff25d010) = 27 [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 27 [ 80.200901][ T5848] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 80.210817][ T5848] em28xx 5-1:0.132: board has no eeprom [ 80.219305][ T973] usb 1-1: USB disconnect, device number 4 [ 80.221987][ T25] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 80.226203][ T973] em28xx 1-1:0.132: Disconnecting em28xx [ 80.237614][ T46] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 27 [ 80.249701][ T2151] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 80.258488][ T25] usb 3-1: config 0 has no interface number 0 [ 80.266153][ T46] usb 2-1: config 0 has no interface number 0 [ 80.272361][ T2151] usb 4-1: config 0 has no interface number 0 [ 80.279981][ T25] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.290946][ T46] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5898] <... ioctl resumed>, 0x7ffeff25d010) = 4 [pid 5896] <... ioctl resumed>, 0x7ffeff25d010) = 4 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5898] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5896] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5898] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5896] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5898] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5896] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 4 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 80.301040][ T2151] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.307737][ T5848] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 80.322126][ T46] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 80.327713][ T5848] em28xx 5-1:0.132: analog set to bulk mode. [ 80.331334][ T25] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 80.348776][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [ 80.363518][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.371631][ T5848] usb 5-1: USB disconnect, device number 4 [ 80.372482][ T5848] em28xx 5-1:0.132: Disconnecting em28xx [ 80.381359][ T2151] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 80.386142][ T9] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 80.392579][ T46] usb 2-1: Product: syz [ 80.402139][ T9] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 80.403948][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.416641][ T9] em28xx 1-1:0.132: No AC97 audio processor [ 80.419273][ T46] usb 2-1: Manufacturer: syz [ 80.429366][ T9] usb 1-1: Decoder not found [ 80.429647][ T25] usb 3-1: Product: syz [ 80.434597][ T9] em28xx 1-1:0.132: failed to create media graph [ 80.438345][ T46] usb 2-1: SerialNumber: syz [ 80.439364][ T25] usb 3-1: Manufacturer: syz [ 80.448322][ T9] em28xx 1-1:0.132: V4L2 device video103 deregistered [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5898] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5898] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5896] <... ioctl resumed>, 0) = 0 [pid 5898] <... ioctl resumed>, 0x2) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5898] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5896] <... ioctl resumed>, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [pid 5898] <... ioctl resumed>, 0) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_READ [ 80.450924][ T46] usb 2-1: config 0 descriptor?? [ 80.456649][ T9] em28xx 1-1:0.132: Remote control support is not available for this card. [ 80.461069][ T2151] usb 4-1: Product: syz [ 80.476086][ T5866] em28xx 5-1:0.132: Registering V4L2 extension [ 80.479773][ T25] usb 3-1: SerialNumber: syz [ 80.490277][ T2151] usb 4-1: Manufacturer: syz [ 80.496441][ T2151] usb 4-1: SerialNumber: syz [ 80.503506][ T25] usb 3-1: config 0 descriptor?? [pid 5898] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [pid 5896] <... ioctl resumed>, 0x7ffeff25d010) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d010) = 0 [pid 5897] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [ 80.517672][ T46] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 80.529056][ T46] em28xx 2-1:0.132: Video interface 132 found: [ 80.536377][ T2151] usb 4-1: config 0 descriptor?? [ 80.549639][ T25] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 80.560351][ T25] em28xx 3-1:0.132: Video interface 132 found: [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d010) = 0 [ 80.578387][ T2151] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 80.589169][ T2151] em28xx 4-1:0.132: Video interface 132 found: [ 80.609365][ T5866] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 80.618932][ T5866] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 80.626175][ T5866] em28xx 5-1:0.132: No AC97 audio processor [ 80.633752][ T5866] usb 5-1: Decoder not found [ 80.639597][ T5866] em28xx 5-1:0.132: failed to create media graph [ 80.646019][ T5866] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 80.654390][ T5866] em28xx 5-1:0.132: Remote control support is not available for this card. [ 80.663166][ T973] em28xx 1-1:0.132: Closing input extension [ 80.669307][ T5848] em28xx 5-1:0.132: Closing input extension [ 80.679802][ T5848] em28xx 5-1:0.132: Freeing device [ 80.685897][ T973] em28xx 1-1:0.132: Freeing device [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5898] <... ioctl resumed>, 0x7ffeff25e050) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5898] <... ioctl resumed>, 0x7ffeff25d040) = 1 [pid 5896] <... ioctl resumed>, 0x7ffeff25d040) = 1 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e050) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d040) = 1 [pid 5909] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5908] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5909] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5908] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5898] exit_group(0) = ? [pid 5896] exit_group(0 [pid 5898] +++ exited with 0 +++ [pid 5896] <... exit_group resumed>) = ? [pid 5841] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5841] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5916 attached [pid 5896] +++ exited with 0 +++ [pid 5916] set_robust_list(0x55555f3d4660, 24 [pid 5839] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5916] <... set_robust_list resumed>) = 0 [pid 5841] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5916 [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5917 attached , child_tidptr=0x55555f3d4650) = 5917 [pid 5917] set_robust_list(0x55555f3d4660, 24 [pid 5916] <... prctl resumed>) = 0 [pid 5909] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5916] setpgid(0, 0 [pid 5917] <... set_robust_list resumed>) = 0 [pid 5916] <... setpgid resumed>) = 0 [pid 5917] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5897] exit_group(0 [pid 5917] <... prctl resumed>) = 0 [pid 5917] setpgid(0, 0 [pid 5909] <... ioctl resumed>, 0x7ffeff25d010) = 18 [pid 5897] <... exit_group resumed>) = ? [pid 5917] <... setpgid resumed>) = 0 [pid 5916] <... openat resumed>) = 3 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 80.963418][ T25] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 80.979387][ T46] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 80.987672][ T5848] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.995831][ T973] usb 1-1: new high-speed USB device number 5 using dummy_hcd [pid 5916] write(3, "1000", 4 [pid 5917] <... openat resumed>) = 3 [pid 5916] <... write resumed>) = 4 [pid 5909] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5897] +++ exited with 0 +++ [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5908] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5844] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5916] close(3) = 0 [pid 5916] write(1, "executing program\n", 18 [pid 5917] write(3, "1000", 4executing program [pid 5916] <... write resumed>) = 18 [pid 5917] <... write resumed>) = 4 [pid 5917] close(3executing program ) = 0 [pid 5908] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5916] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5917] write(1, "executing program\n", 18 [pid 5916] <... openat resumed>) = 3 [pid 5917] <... write resumed>) = 18 [pid 5916] ioctl(3, USB_RAW_IOCTL_INIT./strace-static-x86_64: Process 5918 attached [pid 5917] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5916] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5916] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5918] set_robust_list(0x55555f3d4660, 24 [pid 5844] <... clone resumed>, child_tidptr=0x55555f3d4650) = 5918 [pid 5917] <... openat resumed>) = 3 [pid 5917] ioctl(3, USB_RAW_IOCTL_INIT [pid 5918] <... set_robust_list resumed>) = 0 [pid 5917] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5917] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5918] setpgid(0, 0) = 0 [pid 5916] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5917] <... ioctl resumed>, 0) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 81.012025][ T2151] em28xx 4-1:0.132: unknown em28xx chip ID (0) [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5918] <... openat resumed>) = 3 [pid 5918] write(3, "1000", 4) = 4 [pid 5918] close(3) = 0 executing program [pid 5918] write(1, "executing program\n", 18) = 18 [pid 5918] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5918] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffeff25e020) = 0 [pid 5918] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5909] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 81.036588][ T25] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 81.050448][ T25] em28xx 3-1:0.132: board has no eeprom [ 81.056144][ T46] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 81.065961][ T46] em28xx 2-1:0.132: board has no eeprom [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5908] <... ioctl resumed>, 0x7ffeff25e020) = 0 [ 81.088707][ T2151] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 81.097535][ T2151] em28xx 4-1:0.132: board has no eeprom [ 81.116542][ T25] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 81.124413][ T25] em28xx 3-1:0.132: analog set to bulk mode. [ 81.130532][ T46] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 81.138969][ T5853] em28xx 3-1:0.132: Registering V4L2 extension [ 81.147244][ T25] usb 3-1: USB disconnect, device number 4 [ 81.153906][ T25] em28xx 3-1:0.132: Disconnecting em28xx [ 81.159764][ T2151] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 81.167699][ T46] em28xx 2-1:0.132: analog set to bulk mode. [ 81.174407][ T2151] em28xx 4-1:0.132: analog set to bulk mode. [ 81.176400][ T5848] usb 5-1: Using ep0 maxpacket: 32 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5909] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 9 [pid 5908] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 18 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 9 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 81.187859][ T46] usb 2-1: USB disconnect, device number 4 [ 81.188572][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 81.194558][ T46] em28xx 2-1:0.132: Disconnecting em28xx [ 81.223689][ T2151] usb 4-1: USB disconnect, device number 4 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5909] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5908] <... ioctl resumed>, 0x7ffeff25d010) = 27 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 27 [ 81.233089][ T973] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 81.237771][ T2151] em28xx 4-1:0.132: Disconnecting em28xx [ 81.248625][ T5848] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 81.265901][ T973] usb 1-1: config 0 has no interface number 0 [ 81.272518][ T5848] usb 5-1: config 0 has no interface number 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5908] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 4 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [ 81.286438][ T973] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.297222][ T5853] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 81.298321][ T5848] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.304569][ T5853] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 81.323420][ T5853] em28xx 3-1:0.132: No AC97 audio processor [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5909] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5908] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5909] <... ioctl resumed>, 0x7ffeff25d010) = 4 [ 81.331543][ T973] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 81.333313][ T5853] usb 3-1: Decoder not found [ 81.346658][ T5853] em28xx 3-1:0.132: failed to create media graph [ 81.353373][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.354120][ T5853] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 81.367058][ T973] usb 1-1: Product: syz [ 81.371593][ T5853] em28xx 3-1:0.132: Remote control support is not available for this card. [ 81.373323][ T5921] ================================================================== [ 81.382353][ T5868] em28xx 2-1:0.132: Registering V4L2 extension [ 81.389160][ T5921] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc8/0x430 [ 81.389235][ T5921] Read of size 8 at addr ffff888021fe4738 by task v4l_id/5921 [ 81.410273][ T5921] [ 81.412635][ T5921] CPU: 0 UID: 0 PID: 5921 Comm: v4l_id Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 81.412656][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.412670][ T5921] Call Trace: [ 81.412683][ T5921] [ 81.412690][ T5921] dump_stack_lvl+0x241/0x360 [ 81.412715][ T5921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.412733][ T5921] ? __pfx__printk+0x10/0x10 [ 81.412749][ T5921] ? _printk+0xd5/0x120 [ 81.412764][ T5921] ? __virt_addr_valid+0x183/0x530 [ 81.412781][ T5921] ? __virt_addr_valid+0x183/0x530 [ 81.412798][ T5921] print_report+0x169/0x550 [ 81.412819][ T5921] ? __virt_addr_valid+0x183/0x530 [ 81.412834][ T5921] ? __virt_addr_valid+0x183/0x530 [ 81.412849][ T5921] ? __virt_addr_valid+0x45f/0x530 [ 81.412864][ T5921] ? __phys_addr+0xba/0x170 [ 81.412889][ T5921] ? v4l2_fh_open+0xc8/0x430 [ 81.412907][ T5921] kasan_report+0x143/0x180 [ 81.412928][ T5921] ? v4l2_fh_open+0xc8/0x430 [ 81.412947][ T5921] v4l2_fh_open+0xc8/0x430 [ 81.412967][ T5921] em28xx_v4l2_open+0x14c/0x9d0 [ 81.412991][ T5921] v4l2_open+0x22f/0x370 [ 81.413017][ T5921] chrdev_open+0x521/0x600 [ 81.413041][ T5921] ? __pfx_chrdev_open+0x10/0x10 [ 81.413063][ T5921] ? file_set_fsnotify_mode_from_watchers+0x123/0x640 [ 81.413091][ T5921] ? __pfx_chrdev_open+0x10/0x10 [ 81.413111][ T5921] do_dentry_open+0xdec/0x1960 [ 81.413136][ T5921] ? vfs_open+0x31/0x370 [ 81.413158][ T5921] vfs_open+0x3b/0x370 [ 81.413180][ T5921] path_openat+0x2c81/0x3590 [ 81.413209][ T5921] ? __pfx_path_openat+0x10/0x10 [ 81.413232][ T5921] do_filp_open+0x27f/0x4e0 [ 81.413249][ T5921] ? __pfx_do_filp_open+0x10/0x10 [ 81.413264][ T5921] ? do_raw_spin_lock+0x14f/0x370 [ 81.413299][ T5921] do_sys_openat2+0x13e/0x1d0 [ 81.413321][ T5921] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.413348][ T5921] __x64_sys_openat+0x247/0x2a0 [ 81.413372][ T5921] ? __pfx___x64_sys_openat+0x10/0x10 [ 81.413395][ T5921] ? exc_page_fault+0x590/0x8b0 [ 81.413415][ T5921] ? do_syscall_64+0xb6/0x230 [ 81.413436][ T5921] do_syscall_64+0xf3/0x230 [ 81.413464][ T5921] ? clear_bhb_loop+0x35/0x90 [ 81.413488][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.413511][ T5921] RIP: 0033:0x7f54fcb169a4 [ 81.413530][ T5921] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 81.413544][ T5921] RSP: 002b:00007fffb1b93fa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.413561][ T5921] RAX: ffffffffffffffda RBX: 00007fffb1b941b8 RCX: 00007f54fcb169a4 [ 81.413574][ T5921] RDX: 0000000000000000 RSI: 00007fffb1b95f1d RDI: 00000000ffffff9c [ 81.413585][ T5921] RBP: 00007fffb1b95f1d R08: 0000000000000000 R09: 0000000000000000 [ 81.413595][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.413605][ T5921] R13: 00007fffb1b941d0 R14: 0000563ad3530670 R15: 00007f54fcfdea80 [ 81.413634][ T5921] [ 81.413640][ T5921] [ 81.700926][ T5921] Allocated by task 5853: [ 81.705256][ T5921] kasan_save_track+0x3f/0x80 [ 81.709952][ T5921] __kasan_kmalloc+0x98/0xb0 [ 81.714569][ T5921] __kmalloc_cache_noprof+0x243/0x390 [ 81.719962][ T5921] em28xx_v4l2_init+0xfd/0x2f40 [ 81.724824][ T5921] em28xx_init_extension+0x120/0x1c0 [ 81.730128][ T5921] process_scheduled_works+0xabe/0x18e0 [ 81.735768][ T5921] worker_thread+0x870/0xd30 [ 81.740364][ T5921] kthread+0x7a9/0x920 [ 81.744448][ T5921] ret_from_fork+0x4b/0x80 [ 81.748871][ T5921] ret_from_fork_asm+0x1a/0x30 [ 81.753640][ T5921] [ 81.755959][ T5921] Freed by task 5853: [ 81.759933][ T5921] kasan_save_track+0x3f/0x80 [ 81.764613][ T5921] kasan_save_free_info+0x40/0x50 [ 81.769646][ T5921] __kasan_slab_free+0x59/0x70 [ 81.774432][ T5921] kfree+0x196/0x430 [ 81.778334][ T5921] em28xx_v4l2_init+0x16d7/0x2f40 [ 81.783359][ T5921] em28xx_init_extension+0x120/0x1c0 [ 81.788654][ T5921] process_scheduled_works+0xabe/0x18e0 [ 81.794204][ T5921] worker_thread+0x870/0xd30 [ 81.798798][ T5921] kthread+0x7a9/0x920 [ 81.802874][ T5921] ret_from_fork+0x4b/0x80 [ 81.807296][ T5921] ret_from_fork_asm+0x1a/0x30 [ 81.812066][ T5921] [ 81.814386][ T5921] The buggy address belongs to the object at ffff888021fe4000 [ 81.814386][ T5921] which belongs to the cache kmalloc-8k of size 8192 [ 81.828468][ T5921] The buggy address is located 1848 bytes inside of [ 81.828468][ T5921] freed 8192-byte region [ffff888021fe4000, ffff888021fe6000) [ 81.842451][ T5921] [ 81.844780][ T5921] The buggy address belongs to the physical page: [ 81.851189][ T5921] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21fe0 [ 81.859964][ T5921] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 81.868463][ T5921] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 81.876449][ T5921] page_type: f5(slab) [ 81.880447][ T5921] raw: 00fff00000000040 ffff88801b042280 ffffea000072d800 0000000000000005 [ 81.889145][ T5921] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 81.897772][ T5921] head: 00fff00000000040 ffff88801b042280 ffffea000072d800 0000000000000005 [ 81.906460][ T5921] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 81.915147][ T5921] head: 00fff00000000003 ffffea000087f801 ffffffffffffffff 0000000000000000 [ 81.923830][ T5921] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 81.932501][ T5921] page dumped because: kasan: bad access detected [ 81.938919][ T5921] page_owner tracks the page as allocated [ 81.944630][ T5921] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5573, tgid 5573 (rcS), ts 49873231342, free_ts 49871194881 [ 81.964431][ T5921] post_alloc_hook+0x1f4/0x240 [ 81.969228][ T5921] get_page_from_freelist+0x365c/0x37a0 [ 81.974795][ T5921] __alloc_frozen_pages_noprof+0x292/0x710 [ 81.980614][ T5921] alloc_pages_mpol+0x311/0x660 [ 81.985482][ T5921] allocate_slab+0x8f/0x3a0 [ 81.989991][ T5921] ___slab_alloc+0xc27/0x14a0 [ 81.994676][ T5921] __slab_alloc+0x58/0xa0 [ 81.999015][ T5921] __kmalloc_cache_noprof+0x27b/0x390 [ 82.004393][ T5921] tomoyo_init_log+0x11f4/0x20d0 [ 82.009345][ T5921] tomoyo_supervisor+0x3b2/0x1860 [ 82.014368][ T5921] tomoyo_env_perm+0x178/0x210 [ 82.019138][ T5921] tomoyo_find_next_domain+0x1495/0x1dd0 [ 82.024780][ T5921] tomoyo_bprm_check_security+0x117/0x180 [ 82.030503][ T5921] security_bprm_check+0x86/0x250 [ 82.035537][ T5921] bprm_execve+0x8d3/0x1430 [ 82.040041][ T5921] do_execveat_common+0x57f/0x710 [ 82.045068][ T5921] page last free pid 5573 tgid 5573 stack trace: [ 82.051391][ T5921] free_frozen_pages+0xe0d/0x10e0 [ 82.056865][ T5921] __put_partials+0x160/0x1c0 [ 82.061551][ T5921] put_cpu_partial+0x17c/0x250 [ 82.066316][ T5921] __slab_free+0x290/0x380 [ 82.070732][ T5921] qlist_free_all+0x9a/0x140 [ 82.075323][ T5921] kasan_quarantine_reduce+0x14f/0x170 [ 82.080781][ T5921] __kasan_slab_alloc+0x23/0x80 [ 82.085634][ T5921] __kmalloc_cache_noprof+0x1d9/0x390 [ 82.091015][ T5921] tomoyo_init_log+0x11f4/0x20d0 [ 82.095961][ T5921] tomoyo_supervisor+0x3b2/0x1860 [ 82.100985][ T5921] tomoyo_env_perm+0x178/0x210 [ 82.105752][ T5921] tomoyo_find_next_domain+0x1495/0x1dd0 [ 82.111388][ T5921] tomoyo_bprm_check_security+0x117/0x180 [ 82.117118][ T5921] security_bprm_check+0x86/0x250 [ 82.122157][ T5921] bprm_execve+0x8d3/0x1430 [ 82.126662][ T5921] do_execveat_common+0x57f/0x710 [ 82.131694][ T5921] [ 82.134020][ T5921] Memory state around the buggy address: [ 82.139646][ T5921] ffff888021fe4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.147707][ T5921] ffff888021fe4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.155768][ T5921] >ffff888021fe4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.163824][ T5921] ^ [ 82.169713][ T5921] ffff888021fe4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.177774][ T5921] ffff888021fe4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.185834][ T5921] ================================================================== [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5908] <... ioctl resumed>, 0x7ffeff25e020) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5908] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f912df5c3ec) = -1 EINVAL (Invalid argument) [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeff25d010) = 0 [pid 5909] <... ioctl resumed>, 0x7ffeff25d010) = 8 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeff25e020) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeff25d010) = 8 [ 82.194312][ T973] usb 1-1: Manufacturer: syz [ 82.200108][ T973] usb 1-1: SerialNumber: syz [ 82.211859][ T973] usb 1-1: config 0 descriptor?? [ 82.225293][ T973] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 82.235565][ T973] em28xx 1-1:0.132: Video interface 132 found: [ 82.250239][ T5848] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 82.267020][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.275212][ T5848] usb 5-1: Product: syz [ 82.282769][ T5848] usb 5-1: Manufacturer: syz [ 82.287836][ T5848] usb 5-1: SerialNumber: syz [ 82.293778][ T5921] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.301017][ T5921] CPU: 0 UID: 0 PID: 5921 Comm: v4l_id Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 82.311370][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 82.321441][ T5921] Call Trace: [ 82.324729][ T5921] [ 82.327667][ T5921] dump_stack_lvl+0x241/0x360 [ 82.332358][ T5921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.337559][ T5921] ? __pfx__printk+0x10/0x10 [ 82.342148][ T5921] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.348147][ T5921] ? vscnprintf+0x5d/0x90 [ 82.352501][ T5921] panic+0x349/0x880 [ 82.356419][ T5921] ? check_panic_on_warn+0x21/0xb0 [ 82.361564][ T5921] ? __pfx_panic+0x10/0x10 [ 82.366020][ T5921] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 82.372013][ T5921] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.378349][ T5921] check_panic_on_warn+0x86/0xb0 [ 82.383303][ T5921] ? v4l2_fh_open+0xc8/0x430 [ 82.387903][ T5921] end_report+0x77/0x160 [ 82.392154][ T5921] kasan_report+0x154/0x180 [ 82.396670][ T5921] ? v4l2_fh_open+0xc8/0x430 [ 82.401304][ T5921] v4l2_fh_open+0xc8/0x430 [ 82.405732][ T5921] em28xx_v4l2_open+0x14c/0x9d0 [ 82.410597][ T5921] v4l2_open+0x22f/0x370 [ 82.414873][ T5921] chrdev_open+0x521/0x600 [ 82.419335][ T5921] ? __pfx_chrdev_open+0x10/0x10 [ 82.424402][ T5921] ? file_set_fsnotify_mode_from_watchers+0x123/0x640 [ 82.431194][ T5921] ? __pfx_chrdev_open+0x10/0x10 [ 82.436152][ T5921] do_dentry_open+0xdec/0x1960 [ 82.440953][ T5921] ? vfs_open+0x31/0x370 [ 82.445220][ T5921] vfs_open+0x3b/0x370 [ 82.449316][ T5921] path_openat+0x2c81/0x3590 [ 82.453936][ T5921] ? __pfx_path_openat+0x10/0x10 [ 82.458893][ T5921] do_filp_open+0x27f/0x4e0 [ 82.463407][ T5921] ? __pfx_do_filp_open+0x10/0x10 [ 82.468445][ T5921] ? do_raw_spin_lock+0x14f/0x370 [ 82.473526][ T5921] do_sys_openat2+0x13e/0x1d0 [ 82.478218][ T5921] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.483516][ T5921] __x64_sys_openat+0x247/0x2a0 [ 82.488383][ T5921] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.493793][ T5921] ? exc_page_fault+0x590/0x8b0 [ 82.498653][ T5921] ? do_syscall_64+0xb6/0x230 [ 82.503335][ T5921] do_syscall_64+0xf3/0x230 [ 82.507847][ T5921] ? clear_bhb_loop+0x35/0x90 [ 82.512543][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.518445][ T5921] RIP: 0033:0x7f54fcb169a4 [ 82.522872][ T5921] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 82.542511][ T5921] RSP: 002b:00007fffb1b93fa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.550953][ T5921] RAX: ffffffffffffffda RBX: 00007fffb1b941b8 RCX: 00007f54fcb169a4 [ 82.558937][ T5921] RDX: 0000000000000000 RSI: 00007fffb1b95f1d RDI: 00000000ffffff9c [ 82.566917][ T5921] RBP: 00007fffb1b95f1d R08: 0000000000000000 R09: 0000000000000000 [ 82.574894][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.582873][ T5921] R13: 00007fffb1b941d0 R14: 0000563ad3530670 R15: 00007f54fcfdea80 [ 82.590857][ T5921] [ 82.594223][ T5921] Kernel Offset: disabled [ 82.598549][ T5921] Rebooting in 86400 seconds..