./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3692122461 <...> [ 39.665208][ T29] audit: type=1400 audit(1730406016.009:78): avc: denied { transition } for pid=5685 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.693155][ T29] audit: type=1400 audit(1730406016.009:79): avc: denied { noatsecure } for pid=5685 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.712794][ T29] audit: type=1400 audit(1730406016.009:80): avc: denied { write } for pid=5685 comm="sh" path="pipe:[5148]" dev="pipefs" ino=5148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.735851][ T29] audit: type=1400 audit(1730406016.009:81): avc: denied { rlimitinh } for pid=5685 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.754726][ T29] audit: type=1400 audit(1730406016.009:82): avc: denied { siginh } for pid=5685 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.773219][ T29] audit: type=1400 audit(1730406016.029:83): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 40.153412][ T29] audit: type=1400 audit(1730406016.489:84): avc: denied { write } for pid=5692 comm="sftp-server" path="pipe:[4464]" dev="pipefs" ino=4464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 40.665477][ T29] audit: type=1400 audit(1730406017.009:85): avc: denied { append } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.713803][ T29] audit: type=1400 audit(1730406017.009:86): avc: denied { open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.737770][ T29] audit: type=1400 audit(1730406017.009:87): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. execve("./syz-executor3692122461", ["./syz-executor3692122461"], 0x7fff7e467e70 /* 10 vars */) = 0 brk(NULL) = 0x55556acab000 brk(0x55556acabd00) = 0x55556acabd00 arch_prctl(ARCH_SET_FS, 0x55556acab380) = 0 set_tid_address(0x55556acab650) = 5821 set_robust_list(0x55556acab660, 24) = 0 rseq(0x55556acabca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3692122461", 4096) = 28 getrandom("\x23\xc0\x66\x8e\x59\xd1\xbf\x04", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556acabd00 brk(0x55556acccd00) = 0x55556acccd00 brk(0x55556accd000) = 0x55556accd000 mprotect(0x7f7f92cad000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5822 attached [pid 5822] set_robust_list(0x55556acab660, 24) = 0 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... clone resumed>, child_tidptr=0x55556acab650) = 5822 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5824 attached ./strace-static-x86_64: Process 5823 attached , child_tidptr=0x55556acab650) = 5823 [pid 5824] set_robust_list(0x55556acab660, 24 [pid 5823] set_robust_list(0x55556acab660, 24 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... set_robust_list resumed>) = 0 [pid 5823] <... set_robust_list resumed>) = 0 [pid 5824] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5822] <... clone resumed>, child_tidptr=0x55556acab650) = 5824 ./strace-static-x86_64: Process 5825 attached [pid 5824] <... prctl resumed>) = 0 [pid 5824] setpgid(0, 0) = 0 [pid 5825] set_robust_list(0x55556acab660, 24 [pid 5824] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... set_robust_list resumed>) = 0 [pid 5821] <... clone resumed>, child_tidptr=0x55556acab650) = 5825 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... clone resumed>, child_tidptr=0x55556acab650) = 5826 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5826 attached [pid 5824] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5827 attached [pid 5826] set_robust_list(0x55556acab660, 24 [pid 5824] write(3, "1000", 4 [pid 5827] set_robust_list(0x55556acab660, 24 [pid 5826] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5828 attached [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... clone resumed>, child_tidptr=0x55556acab650) = 5827 [pid 5824] <... write resumed>) = 4 [pid 5821] <... clone resumed>, child_tidptr=0x55556acab650) = 5828 [pid 5828] set_robust_list(0x55556acab660, 24 [pid 5827] <... set_robust_list resumed>) = 0 [pid 5826] <... prctl resumed>) = 0 [pid 5824] close(3 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5828] <... set_robust_list resumed>) = 0 [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] setpgid(0, 0 [pid 5824] <... close resumed>) = 0 ./strace-static-x86_64: Process 5829 attached [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... prctl resumed>) = 0 [pid 5826] <... setpgid resumed>) = 0 [pid 5824] write(1, "executing program\n", 18executing program [pid 5821] <... clone resumed>, child_tidptr=0x55556acab650) = 5829 [pid 5829] set_robust_list(0x55556acab660, 24 [pid 5827] setpgid(0, 0 [pid 5826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... write resumed>) = 18 [pid 5826] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR./strace-static-x86_64: Process 5830 attached [pid 5829] <... set_robust_list resumed>) = 0 [pid 5827] <... setpgid resumed>) = 0 [pid 5826] write(3, "1000", 4 [pid 5824] <... openat resumed>) = 3 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] set_robust_list(0x55556acab660, 24 [pid 5828] <... clone resumed>, child_tidptr=0x55556acab650) = 5830 [pid 5827] <... openat resumed>) = 3 [pid 5830] <... set_robust_list resumed>) = 0 [pid 5830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5827] write(3, "1000", 4) = 4 [pid 5830] setpgid(0, 0 [pid 5829] <... clone resumed>, child_tidptr=0x55556acab650) = 5831 [pid 5827] close(3 [pid 5830] <... setpgid resumed>) = 0 executing program [pid 5827] <... close resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] write(1, "executing program\n", 18) = 18 [pid 5827] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5830] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, USB_RAW_IOCTL_INIT./strace-static-x86_64: Process 5831 attached [pid 5830] write(3, "1000", 4 [pid 5826] <... write resumed>) = 4 [pid 5824] ioctl(3, USB_RAW_IOCTL_INIT [pid 5831] set_robust_list(0x55556acab660, 24 [pid 5830] <... write resumed>) = 4 [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] close(3 [pid 5826] close(3 [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] <... set_robust_list resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5831] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5831] <... prctl resumed>) = 0 [pid 5830] write(1, "executing program\n", 18 [pid 5826] write(1, "executing program\n", 18 [pid 5824] <... ioctl resumed>, 0) = 0 [pid 5831] setpgid(0, 0 [pid 5827] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUNexecuting program executing program [ 52.374731][ T29] audit: type=1400 audit(1730406028.719:88): avc: denied { execmem } for pid=5821 comm="syz-executor369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5831] <... setpgid resumed>) = 0 [pid 5830] <... write resumed>) = 18 [pid 5827] <... ioctl resumed>, 0) = 0 [pid 5826] <... write resumed>) = 18 [pid 5831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5831] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5831] write(3, "1000", 4 [pid 5830] ioctl(3, USB_RAW_IOCTL_INIT [pid 5826] <... openat resumed>) = 3 [pid 5831] <... write resumed>) = 4 [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] ioctl(3, USB_RAW_IOCTL_INIT [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] close(3 [pid 5830] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] <... ioctl resumed>, 0) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUNexecuting program [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] write(1, "executing program\n", 18) = 18 [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] <... ioctl resumed>, 0) = 0 [pid 5831] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_INIT [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 52.401838][ T29] audit: type=1400 audit(1730406028.739:89): avc: denied { read write } for pid=5824 comm="syz-executor369" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.432776][ T29] audit: type=1400 audit(1730406028.739:90): avc: denied { open } for pid=5824 comm="syz-executor369" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 52.476168][ T29] audit: type=1400 audit(1730406028.739:91): avc: denied { ioctl } for pid=5827 comm="syz-executor369" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5824] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 52.634773][ T965] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.673800][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [pid 5827] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5830] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 52.693824][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 52.701388][ T5836] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 52.713845][ T5838] usb 5-1: new high-speed USB device number 2 using dummy_hcd [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5824] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 9 [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5824] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 27 [ 52.803817][ T965] usb 1-1: Using ep0 maxpacket: 32 [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5824] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5827] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5824] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 52.833271][ T965] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 52.841623][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 52.846762][ T965] usb 1-1: config 0 has no interface number 0 [ 52.852834][ T965] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 52.873826][ T5836] usb 2-1: Using ep0 maxpacket: 32 [pid 5824] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5827] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5830] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5824] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5831] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5824] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5827] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5824] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5831] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5830] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5826] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5824] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5824] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 52.879085][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 52.884370][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 52.892700][ T8] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 52.901320][ T965] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 52.910517][ T8] usb 3-1: config 0 has no interface number 0 [ 52.916746][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.924985][ T5836] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [pid 5826] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5831] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] <... ioctl resumed>, 0x7ffd539ac300) = 27 [ 52.933154][ T5836] usb 2-1: config 0 has no interface number 0 [ 52.939336][ T5838] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 52.947549][ T8] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 52.957605][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 52.965782][ T5838] usb 5-1: config 0 has no interface number 0 [ 52.971835][ T5838] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 4 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5830] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5824] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5824] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5831] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5830] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5827] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5826] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5830] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5827] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5824] <... ioctl resumed>, 0) = 0 [pid 5831] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5830] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 52.981884][ T965] usb 1-1: Product: syz [ 52.986080][ T9] usb 4-1: config 0 has no interface number 0 [ 52.992199][ T9] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 53.002285][ T965] usb 1-1: Manufacturer: syz [ 53.006965][ T5836] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 53.016991][ T965] usb 1-1: SerialNumber: syz [ 53.025083][ T965] usb 1-1: config 0 descriptor?? [pid 5827] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5831] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5830] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5826] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5824] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5830] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5824] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5824] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5830] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5831] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5830] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5830] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5826] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5831] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5826] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5831] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 53.039849][ T5824] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 53.041930][ T8] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 53.059114][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 53.071108][ T965] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 53.080964][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5826] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [ 53.089034][ T5838] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 53.098143][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.106229][ T8] usb 3-1: Product: syz [ 53.110409][ T8] usb 3-1: Manufacturer: syz [ 53.115077][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.123164][ T5836] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 53.132253][ T965] em28xx 1-1:0.132: Video interface 132 found: bulk [ 53.138908][ T9] usb 4-1: Product: syz [ 53.143060][ T9] usb 4-1: Manufacturer: syz [ 53.147692][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.155693][ T8] usb 3-1: SerialNumber: syz [ 53.160944][ T5838] usb 5-1: Product: syz [ 53.165679][ T5838] usb 5-1: Manufacturer: syz [ 53.170288][ T5838] usb 5-1: SerialNumber: syz [ 53.175656][ T8] usb 3-1: config 0 descriptor?? [ 53.180747][ T9] usb 4-1: SerialNumber: syz [ 53.185429][ T5836] usb 2-1: Product: syz [pid 5826] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5827] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5830] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5830] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5830] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5830] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5830] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5827] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5830] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5826] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5827] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5826] <... ioctl resumed>, 0x2) = 0 [ 53.189607][ T5836] usb 2-1: Manufacturer: syz [ 53.196057][ T9] usb 4-1: config 0 descriptor?? [ 53.197597][ T5827] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.201769][ T5836] usb 2-1: SerialNumber: syz [ 53.215555][ T5830] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 53.218652][ T5838] usb 5-1: config 0 descriptor?? [ 53.228636][ T5836] usb 2-1: config 0 descriptor?? [pid 5826] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5826] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5826] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5824] exit_group(0) = ? [pid 5831] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5826] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5831] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 53.236838][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 53.237720][ T5826] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 53.248551][ T8] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 53.263589][ T9] em28xx 4-1:0.132: Video interface 132 found: bulk [ 53.272578][ T5836] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 53.273512][ T5831] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [pid 5831] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5824] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5824, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5822] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5831] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd539ac300) = 0 [pid 5822] <... restart_syscall resumed>) = 0 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached [pid 5843] set_robust_list(0x55556acab660, 24 [pid 5822] <... clone resumed>, child_tidptr=0x55556acab650) = 5843 [pid 5843] <... set_robust_list resumed>) = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5843] write(1, "executing program\n", 18executing program ) = 18 [pid 5843] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [ 53.282932][ T5836] em28xx 2-1:0.132: Video interface 132 found: bulk [ 53.296336][ T8] em28xx 3-1:0.132: Video interface 132 found: bulk [ 53.311127][ T5838] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 53.321024][ T5838] em28xx 5-1:0.132: Video interface 132 found: bulk [ 53.334177][ T965] em28xx 1-1:0.132: unknown em28xx chip ID (0) [pid 5843] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd539ad310) = 0 [pid 5843] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5830] exit_group(0) = ? [pid 5827] exit_group(0 [pid 5830] +++ exited with 0 +++ [pid 5827] <... exit_group resumed>) = ? [pid 5828] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5830, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 53.397199][ T965] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 53.406102][ T965] em28xx 1-1:0.132: board has no eeprom [pid 5828] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5827] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5827, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] exit_group(0) = ? ./strace-static-x86_64: Process 5844 attached [pid 5828] <... clone resumed>, child_tidptr=0x55556acab650) = 5844 [pid 5844] set_robust_list(0x55556acab660, 24) = 0 [pid 5826] +++ exited with 0 +++ [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5826, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5844] <... prctl resumed>) = 0 [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5844] setpgid(0, 0) = 0 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5844] write(3, "1000", 4 [pid 5823] <... restart_syscall resumed>) = 0 executing program [pid 5844] <... write resumed>) = 4 [pid 5844] close(3) = 0 [pid 5844] write(1, "executing program\n", 18) = 18 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5844] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5847 attached [pid 5844] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd539ad310) = 0 [pid 5844] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5847] set_robust_list(0x55556acab660, 24 [pid 5823] <... clone resumed>, child_tidptr=0x55556acab650) = 5846 [pid 5847] <... set_robust_list resumed>) = 0 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... clone resumed>, child_tidptr=0x55556acab650) = 5847 [pid 5847] <... prctl resumed>) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 53.463806][ T965] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 53.471758][ T965] em28xx 1-1:0.132: analog set to bulk mode. [ 53.480030][ T5841] em28xx 1-1:0.132: Registering V4L2 extension [ 53.494136][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 53.501131][ T965] usb 1-1: USB disconnect, device number 2 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] setpgid(0, 0) = 0 [pid 5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1000", 4) = 4 [pid 5847] close(3executing program ) = 0 [pid 5847] write(1, "executing program\n", 18) = 18 [pid 5847] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5847] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd539ad310) = 0 [pid 5847] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ./strace-static-x86_64: Process 5846 attached [pid 5831] exit_group(0) = ? [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5846] set_robust_list(0x55556acab660, 24) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] +++ exited with 0 +++ [pid 5846] <... prctl resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5831, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5846] setpgid(0, 0 [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5846] <... setpgid resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] <... clone resumed>, child_tidptr=0x55556acab650) = 5849 [pid 5846] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5849 attached [pid 5846] write(3, "1000", 4 [pid 5849] set_robust_list(0x55556acab660, 24 [pid 5846] <... write resumed>) = 4 [pid 5849] <... set_robust_list resumed>) = 0 [pid 5846] close(3 [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5846] <... close resumed>) = 0 [pid 5849] <... prctl resumed>) = 0 [pid 5846] write(1, "executing program\n", 18executing program [pid 5849] setpgid(0, 0 [pid 5846] <... write resumed>) = 18 [pid 5849] <... setpgid resumed>) = 0 [pid 5846] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5846] <... openat resumed>) = 3 [ 53.511371][ T5841] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 53.524968][ T8] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 53.533580][ T5841] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 53.542864][ T5836] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 53.554228][ T965] em28xx 1-1:0.132: Disconnecting em28xx [pid 5846] ioctl(3, USB_RAW_IOCTL_INIT [pid 5849] <... openat resumed>) = 3 [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 executing program [pid 5849] write(3, "1000", 4 [pid 5846] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5849] <... write resumed>) = 4 [pid 5849] close(3) = 0 [pid 5849] write(1, "executing program\n", 18) = 18 [pid 5849] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5846] <... ioctl resumed>, 0) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_INIT [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5849] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 53.577496][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 53.586455][ T9] em28xx 4-1:0.132: board has no eeprom [ 53.586546][ T5838] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 53.598753][ T5841] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 53.607926][ T5841] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 53.615217][ T8] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 53.625218][ T8] em28xx 3-1:0.132: board has no eeprom [ 53.631771][ T5841] em28xx 1-1:0.132: No AC97 audio processor [ 53.637785][ T5836] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 53.648223][ T5841] usb 1-1: Decoder not found [ 53.652811][ T5841] em28xx 1-1:0.132: failed to create media graph [ 53.659235][ T5836] em28xx 2-1:0.132: board has no eeprom [ 53.664841][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 53.672646][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 53.679400][ T5841] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 53.686952][ T5838] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 53.697200][ T5841] em28xx 1-1:0.132: Remote control support is not available for this card. [ 53.705853][ T8] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 53.713655][ T8] em28xx 3-1:0.132: analog set to bulk mode. [ 53.721452][ T9] usb 4-1: USB disconnect, device number 2 [ 53.727338][ T5838] em28xx 5-1:0.132: board has no eeprom [ 53.733568][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 53.739458][ T5836] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 53.748122][ T5851] em28xx 4-1:0.132: Registering V4L2 extension [ 53.754957][ T5836] em28xx 2-1:0.132: analog set to bulk mode. [ 53.762562][ T8] usb 3-1: USB disconnect, device number 2 [ 53.770778][ T8] em28xx 3-1:0.132: Disconnecting em28xx [ 53.777598][ T5836] usb 2-1: USB disconnect, device number 2 [ 53.784134][ T5836] em28xx 2-1:0.132: Disconnecting em28xx [ 53.813796][ T5838] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 53.821645][ T5838] em28xx 5-1:0.132: analog set to bulk mode. [ 53.830709][ T5851] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 53.839775][ T5838] usb 5-1: USB disconnect, device number 2 [ 53.846370][ T5838] em28xx 5-1:0.132: Disconnecting em28xx [ 53.852055][ T5851] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 53.859740][ T5851] em28xx 4-1:0.132: No AC97 audio processor [ 53.866644][ T5851] usb 4-1: Decoder not found [ 53.871346][ T5851] em28xx 4-1:0.132: failed to create media graph [ 53.878037][ T5851] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 53.886475][ T5851] em28xx 4-1:0.132: Remote control support is not available for this card. [ 53.895180][ T965] em28xx 1-1:0.132: Closing input extension [ 53.901236][ T5854] em28xx 3-1:0.132: Registering V4L2 extension [ 53.917602][ T965] em28xx 1-1:0.132: Freeing device [ 53.973598][ T5854] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 53.982052][ T5854] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 53.989226][ T5854] em28xx 3-1:0.132: No AC97 audio processor [ 53.996018][ T5854] usb 3-1: Decoder not found [ 54.000621][ T5854] em28xx 3-1:0.132: failed to create media graph [ 54.007904][ T5854] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 54.015629][ T5854] em28xx 3-1:0.132: Remote control support is not available for this card. [ 54.024301][ T5841] em28xx 2-1:0.132: Registering V4L2 extension [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 54.066343][ T5841] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 54.073371][ T5841] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 54.081440][ T5841] em28xx 2-1:0.132: No AC97 audio processor [ 54.088457][ T5841] usb 2-1: Decoder not found [ 54.093049][ T5841] em28xx 2-1:0.132: failed to create media graph [ 54.099682][ T5841] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 54.107151][ T5841] em28xx 2-1:0.132: Remote control support is not available for this card. [ 54.115838][ T5856] em28xx 5-1:0.132: Registering V4L2 extension [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 54.156804][ T5856] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 54.164711][ T5856] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 54.171825][ T5856] em28xx 5-1:0.132: No AC97 audio processor [ 54.178755][ T5856] usb 5-1: Decoder not found [ 54.183357][ T5856] em28xx 5-1:0.132: failed to create media graph [ 54.189748][ T5856] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 54.197155][ T5856] em28xx 5-1:0.132: Remote control support is not available for this card. [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 54.205811][ T9] em28xx 4-1:0.132: Closing input extension [ 54.211712][ T8] em28xx 3-1:0.132: Closing input extension [ 54.217887][ T5836] em28xx 2-1:0.132: Closing input extension [ 54.224016][ T965] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 54.234157][ T9] em28xx 4-1:0.132: Freeing device [ 54.241835][ T8] em28xx 3-1:0.132: Freeing device [ 54.247432][ T5838] em28xx 5-1:0.132: Closing input extension [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 54.258685][ T5836] em28xx 2-1:0.132: Freeing device [ 54.265260][ T5838] em28xx 5-1:0.132: Freeing device [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 9 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 27 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5843] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 4 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5843] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 54.383811][ T965] usb 1-1: Using ep0 maxpacket: 32 [ 54.397786][ T965] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 54.406866][ T965] usb 1-1: config 0 has no interface number 0 [ 54.413160][ T965] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 54.435750][ T965] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 54.445087][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.453065][ T965] usb 1-1: Product: syz [ 54.457637][ T965] usb 1-1: Manufacturer: syz [ 54.462214][ T965] usb 1-1: SerialNumber: syz [ 54.468038][ T965] usb 1-1: config 0 descriptor?? [pid 5843] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5843] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd539ac300) = 0 [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 54.485425][ T5843] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 54.498662][ T965] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 54.508837][ T965] em28xx 1-1:0.132: Video interface 132 found: bulk [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5846] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5849] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 54.554268][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 54.563843][ T5836] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 54.571400][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 54.579178][ T5838] usb 5-1: new high-speed USB device number 3 using dummy_hcd [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5843] exit_group(0) = ? [pid 5843] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE./strace-static-x86_64: Process 5874 attached [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5874] set_robust_list(0x55556acab660, 24 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5822] <... clone resumed>, child_tidptr=0x55556acab650) = 5874 [pid 5874] <... set_robust_list resumed>) = 0 [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5874] <... prctl resumed>) = 0 [pid 5847] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5849] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5846] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5844] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] setpgid(0, 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5874] <... setpgid resumed>) = 0 [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5846] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5874] <... openat resumed>) = 3 [pid 5847] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5844] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5874] write(3, "1000", 4 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... write resumed>) = 4 [ 54.733836][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 54.739100][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 54.744466][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 54.749690][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 54.772909][ T8] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [pid 5874] close(3 [pid 5849] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... close resumed>) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 executing program [pid 5874] write(1, "executing program\n", 18 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5874] <... write resumed>) = 18 [pid 5874] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5846] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5844] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5849] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd539ad310) = 0 [pid 5874] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5849] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5874] <... ioctl resumed>, 0) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 54.781951][ T965] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 54.788316][ T5836] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 54.796602][ T8] usb 3-1: config 0 has no interface number 0 [ 54.802684][ T8] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 54.812796][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 54.821013][ T5838] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5849] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5844] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5849] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5844] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5847] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5849] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 54.829342][ T5836] usb 2-1: config 0 has no interface number 0 [ 54.835543][ T9] usb 4-1: config 0 has no interface number 0 [ 54.841629][ T9] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 54.851656][ T5838] usb 5-1: config 0 has no interface number 0 [ 54.857786][ T5836] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 54.867846][ T5838] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5849] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5847] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5846] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5844] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [ 54.901749][ T5838] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 54.911050][ T8] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 54.921312][ T965] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 54.930118][ T5836] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 54.939255][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 54.948320][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.956321][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.964324][ T965] em28xx 1-1:0.132: board has no eeprom [ 54.969926][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.978082][ T5838] usb 5-1: Product: syz [ 54.982232][ T5838] usb 5-1: Manufacturer: syz [ 54.986868][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.994892][ T8] usb 3-1: Product: syz [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5849] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [ 54.999020][ T8] usb 3-1: Manufacturer: syz [ 55.003581][ T8] usb 3-1: SerialNumber: syz [ 55.008192][ T5836] usb 2-1: Product: syz [ 55.012334][ T5836] usb 2-1: Manufacturer: syz [ 55.016938][ T5838] usb 5-1: SerialNumber: syz [ 55.021888][ T9] usb 4-1: Product: syz [ 55.026082][ T5836] usb 2-1: SerialNumber: syz [ 55.031013][ T9] usb 4-1: Manufacturer: syz [ 55.036263][ T5838] usb 5-1: config 0 descriptor?? [ 55.042777][ T5836] usb 2-1: config 0 descriptor?? [pid 5849] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5849] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5847] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5849] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5849] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5847] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5849] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5846] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5846] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 55.048629][ T8] usb 3-1: config 0 descriptor?? [ 55.049196][ T5849] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 55.053760][ T9] usb 4-1: SerialNumber: syz [ 55.065360][ T965] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 55.066473][ T5847] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 55.073186][ T965] em28xx 1-1:0.132: analog set to bulk mode. [ 55.088132][ T5838] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [pid 5846] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5847] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5844] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5846] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5844] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5846] <... ioctl resumed>, 0x7ffd539ac300) = 0 [ 55.096413][ T5846] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 55.100343][ T8] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 55.115887][ T9] usb 4-1: config 0 descriptor?? [ 55.121797][ T5856] em28xx 1-1:0.132: Registering V4L2 extension [ 55.130107][ T5838] em28xx 5-1:0.132: Video interface 132 found: bulk [ 55.134375][ T5844] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [pid 5844] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd539ac300) = 0 [ 55.138578][ T5836] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 55.153833][ T965] usb 1-1: USB disconnect, device number 3 [ 55.160377][ T5856] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 55.171018][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 55.180896][ T965] em28xx 1-1:0.132: Disconnecting em28xx [ 55.187266][ T8] em28xx 3-1:0.132: Video interface 132 found: bulk [ 55.193937][ T5836] em28xx 2-1:0.132: Video interface 132 found: bulk [ 55.200677][ T9] em28xx 4-1:0.132: Video interface 132 found: bulk [ 55.225260][ T5856] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 55.232306][ T5856] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 55.239491][ T5856] em28xx 1-1:0.132: No AC97 audio processor [ 55.246635][ T5856] usb 1-1: Decoder not found [ 55.251248][ T5856] em28xx 1-1:0.132: failed to create media graph [ 55.257647][ T5856] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 55.266476][ T5856] em28xx 1-1:0.132: Remote control support is not available for this card. [pid 5849] exit_group(0) = ? [pid 5849] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5849, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5878 attached , child_tidptr=0x55556acab650) = 5878 [pid 5878] set_robust_list(0x55556acab660, 24) = 0 [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] exit_group(0 [pid 5878] setpgid(0, 0 [pid 5847] <... exit_group resumed>) = ? [pid 5878] <... setpgid resumed>) = 0 [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] +++ exited with 0 +++ [pid 5878] <... openat resumed>) = 3 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5847, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5878] write(3, "1000", 4) = 4 [pid 5878] close(3) = 0 [ 55.275180][ T965] em28xx 1-1:0.132: Closing input extension [ 55.284316][ T965] em28xx 1-1:0.132: Freeing device [pid 5878] write(1, "executing program\n", 18executing program ) = 18 ./strace-static-x86_64: Process 5880 attached [pid 5878] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5880] set_robust_list(0x55556acab660, 24 [pid 5878] ioctl(3, USB_RAW_IOCTL_INIT [pid 5825] <... clone resumed>, child_tidptr=0x55556acab650) = 5880 [pid 5880] <... set_robust_list resumed>) = 0 [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5878] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5880] <... prctl resumed>) = 0 [pid 5878] <... ioctl resumed>, 0) = 0 [pid 5880] setpgid(0, 0) = 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] <... openat resumed>) = 3 [pid 5880] write(3, "1000", 4 [pid 5846] exit_group(0 [pid 5880] <... write resumed>) = 4 [pid 5846] <... exit_group resumed>) = ? [pid 5880] close(3) = 0 [pid 5846] +++ exited with 0 +++ executing program [pid 5880] write(1, "executing program\n", 18 [pid 5844] exit_group(0 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5846, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5880] <... write resumed>) = 18 [pid 5844] <... exit_group resumed>) = ? [pid 5880] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5844] +++ exited with 0 +++ [pid 5880] ioctl(3, USB_RAW_IOCTL_INIT [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5828] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 ./strace-static-x86_64: Process 5881 attached [pid 5880] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5828] restart_syscall(<... resuming interrupted clone ...> [pid 5881] set_robust_list(0x55556acab660, 24 [pid 5828] <... restart_syscall resumed>) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55556acab650) = 5881 [pid 5881] <... set_robust_list resumed>) = 0 [pid 5880] <... ioctl resumed>, 0) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5881] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5882 attached [pid 5881] setpgid(0, 0) = 0 [pid 5882] set_robust_list(0x55556acab660, 24 [pid 5828] <... clone resumed>, child_tidptr=0x55556acab650) = 5882 [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5882] <... set_robust_list resumed>) = 0 [pid 5882] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5881] <... openat resumed>) = 3 [ 55.354034][ T5838] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 55.384904][ T8] em28xx 3-1:0.132: unknown em28xx chip ID (0) executing program [pid 5881] write(3, "1000", 4 [pid 5882] <... prctl resumed>) = 0 [pid 5881] <... write resumed>) = 4 [pid 5882] setpgid(0, 0 [pid 5881] close(3) = 0 [pid 5882] <... setpgid resumed>) = 0 [pid 5881] write(1, "executing program\n", 18 [pid 5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5881] <... write resumed>) = 18 [pid 5881] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5882] <... openat resumed>) = 3 [pid 5882] write(3, "1000", 4 [pid 5881] ioctl(3, USB_RAW_IOCTL_INIT [pid 5882] <... write resumed>) = 4 [pid 5882] close(3) = 0 executing program [pid 5881] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] write(1, "executing program\n", 18) = 18 [pid 5881] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5882] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5881] <... ioctl resumed>, 0) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_INIT [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5874] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 55.415571][ T5838] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 55.424488][ T5838] em28xx 5-1:0.132: board has no eeprom [ 55.430147][ T5836] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 55.437149][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 55.447695][ T8] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 55.456915][ T8] em28xx 3-1:0.132: board has no eeprom [ 55.493919][ T5838] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 55.502294][ T5838] em28xx 5-1:0.132: analog set to bulk mode. [ 55.509352][ T5836] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 55.518689][ T8] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 55.526591][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 55.535519][ T5856] em28xx 5-1:0.132: Registering V4L2 extension [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 55.543054][ T5836] em28xx 2-1:0.132: board has no eeprom [ 55.548888][ T5838] usb 5-1: USB disconnect, device number 3 [ 55.555879][ T8] em28xx 3-1:0.132: analog set to bulk mode. [ 55.561940][ T9] em28xx 4-1:0.132: board has no eeprom [ 55.568894][ T5838] em28xx 5-1:0.132: Disconnecting em28xx [ 55.583911][ T8] usb 3-1: USB disconnect, device number 3 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 55.590439][ T8] em28xx 3-1:0.132: Disconnecting em28xx [ 55.604031][ T965] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 55.624158][ T5836] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 55.632014][ T5836] em28xx 2-1:0.132: analog set to bulk mode. [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 55.638664][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 55.647236][ T5856] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 55.654864][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 55.661751][ T5856] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 55.669852][ T5836] usb 2-1: USB disconnect, device number 3 [ 55.677500][ T9] usb 4-1: USB disconnect, device number 3 [ 55.683842][ T5856] em28xx 5-1:0.132: No AC97 audio processor [ 55.694577][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 55.702016][ T5836] em28xx 2-1:0.132: Disconnecting em28xx [ 55.709214][ T5856] usb 5-1: Decoder not found [ 55.713859][ T5856] em28xx 5-1:0.132: failed to create media graph [ 55.720195][ T5856] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 55.728067][ T5856] em28xx 5-1:0.132: Remote control support is not available for this card. [ 55.737149][ T5841] em28xx 3-1:0.132: Registering V4L2 extension [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 9 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 55.753926][ T965] usb 1-1: Using ep0 maxpacket: 32 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 27 [ 55.777922][ T965] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 55.787336][ T965] usb 1-1: config 0 has no interface number 0 [ 55.793438][ T965] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 55.803542][ T5841] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 55.810667][ T5841] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 55.818267][ T5841] em28xx 3-1:0.132: No AC97 audio processor [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 4 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [ 55.824977][ T5841] usb 3-1: Decoder not found [ 55.829713][ T5841] em28xx 3-1:0.132: failed to create media graph [ 55.836158][ T5841] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 55.843690][ T5841] em28xx 3-1:0.132: Remote control support is not available for this card. [ 55.852505][ T5854] em28xx 2-1:0.132: Registering V4L2 extension [ 55.859250][ T965] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 55.869658][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd539ac300) = 0 [ 55.877973][ T965] usb 1-1: Product: syz [ 55.882315][ T965] usb 1-1: Manufacturer: syz [ 55.887173][ T965] usb 1-1: SerialNumber: syz [ 55.894017][ T965] usb 1-1: config 0 descriptor?? [ 55.904168][ T5874] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 55.918130][ T5854] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 55.925263][ T5854] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 55.932372][ T5854] em28xx 2-1:0.132: No AC97 audio processor [ 55.940137][ T965] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 55.950481][ T965] em28xx 1-1:0.132: Video interface 132 found: bulk [ 55.957966][ T5854] usb 2-1: Decoder not found [ 55.962574][ T5854] em28xx 2-1:0.132: failed to create media graph [ 55.968973][ T5854] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 55.977017][ T5854] em28xx 2-1:0.132: Remote control support is not available for this card. [ 55.985697][ T5851] em28xx 4-1:0.132: Registering V4L2 extension [ 56.030986][ T5851] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 56.038081][ T5851] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 56.047588][ T5851] em28xx 4-1:0.132: No AC97 audio processor [ 56.055357][ T5851] usb 4-1: Decoder not found [ 56.059985][ T5851] em28xx 4-1:0.132: failed to create media graph [ 56.066359][ T5851] em28xx 4-1:0.132: V4L2 device video103 deregistered [pid 5874] exit_group(0) = ? [pid 5874] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 56.074112][ T5851] em28xx 4-1:0.132: Remote control support is not available for this card. [ 56.082731][ T5838] em28xx 5-1:0.132: Closing input extension [ 56.089139][ T8] em28xx 3-1:0.132: Closing input extension [ 56.096524][ T5838] em28xx 5-1:0.132: Freeing device [ 56.102789][ T5836] em28xx 2-1:0.132: Closing input extension [ 56.109806][ T9] em28xx 4-1:0.132: Closing input extension [ 56.117450][ T8] em28xx 3-1:0.132: Freeing device [pid 5822] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5896 attached , child_tidptr=0x55556acab650) = 5896 [pid 5896] set_robust_list(0x55556acab660, 24) = 0 [pid 5896] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5896] setpgid(0, 0) = 0 executing program [pid 5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5896] write(3, "1000", 4) = 4 [pid 5896] close(3) = 0 [pid 5896] write(1, "executing program\n", 18) = 18 [pid 5896] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5896] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd539ad310) = 0 [pid 5896] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 56.139653][ T5836] em28xx 2-1:0.132: Freeing device [ 56.146111][ T9] em28xx 4-1:0.132: Freeing device [ 56.184050][ T965] em28xx 1-1:0.132: unknown em28xx chip ID (0) [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 56.255765][ T965] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 56.266364][ T965] em28xx 1-1:0.132: board has no eeprom [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5881] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5881] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 56.333813][ T965] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 56.341640][ T965] em28xx 1-1:0.132: analog set to bulk mode. [ 56.347678][ T5851] em28xx 1-1:0.132: Registering V4L2 extension [ 56.360401][ T965] usb 1-1: USB disconnect, device number 4 [ 56.370693][ T965] em28xx 1-1:0.132: Disconnecting em28xx [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5880] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 56.400784][ T5851] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 56.408390][ T5851] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 56.416965][ T5838] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.424455][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 56.431936][ T5851] em28xx 1-1:0.132: No AC97 audio processor [ 56.439117][ T5851] usb 1-1: Decoder not found [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5881] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 56.444194][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 56.451774][ T5851] em28xx 1-1:0.132: failed to create media graph [ 56.458297][ T5836] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 56.465893][ T5851] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 56.475350][ T5851] em28xx 1-1:0.132: Remote control support is not available for this card. [ 56.484015][ T965] em28xx 1-1:0.132: Closing input extension [ 56.492258][ T965] em28xx 1-1:0.132: Freeing device [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5881] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5880] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5878] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 27 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 56.593844][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 56.603825][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 56.613792][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 56.622779][ T8] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 56.631195][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 56.636691][ T8] usb 3-1: config 0 has no interface number 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 9 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 27 [pid 5881] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5896] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 9 [ 56.642897][ T5838] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 56.651161][ T8] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 56.661291][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 56.669542][ T5838] usb 5-1: config 0 has no interface number 0 [ 56.676117][ T5838] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 56.686298][ T9] usb 4-1: config 0 has no interface number 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5881] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5882] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5880] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5878] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5882] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5880] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5878] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5881] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5881] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5882] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5878] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5881] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 56.692425][ T9] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 56.703574][ T5836] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 56.711764][ T5836] usb 2-1: config 0 has no interface number 0 [ 56.718182][ T5836] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5881] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5880] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5896] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5881] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 56.742334][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 56.751546][ T8] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 56.760779][ T5838] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 56.770006][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.778053][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.786161][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [ 56.794186][ T8] usb 3-1: Product: syz [ 56.798430][ T5836] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 56.807515][ T9] usb 4-1: Product: syz [ 56.811680][ T9] usb 4-1: Manufacturer: syz [ 56.816294][ T8] usb 3-1: Manufacturer: syz [ 56.820874][ T8] usb 3-1: SerialNumber: syz [ 56.825537][ T965] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 56.833408][ T5838] usb 5-1: Product: syz [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 56.837687][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.845698][ T5838] usb 5-1: Manufacturer: syz [ 56.850273][ T5838] usb 5-1: SerialNumber: syz [ 56.855148][ T9] usb 4-1: SerialNumber: syz [ 56.861159][ T5836] usb 2-1: Product: syz [ 56.866032][ T8] usb 3-1: config 0 descriptor?? [ 56.871949][ T9] usb 4-1: config 0 descriptor?? [ 56.877586][ T5880] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.877727][ T5836] usb 2-1: Manufacturer: syz [ 56.890019][ T5838] usb 5-1: config 0 descriptor?? [pid 5880] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5882] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5880] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5878] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5878] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5882] <... ioctl resumed>, 0x2) = 0 [pid 5878] <... ioctl resumed>, 0x2) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5878] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5882] <... ioctl resumed>, 0) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5878] <... ioctl resumed>, 0) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5896] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5882] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd539ac300) = 0 [pid 5881] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5878] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5881] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5881] <... ioctl resumed>, 0x2) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 56.895120][ T5836] usb 2-1: SerialNumber: syz [ 56.901585][ T8] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 56.912170][ T8] em28xx 3-1:0.132: Video interface 132 found: bulk [ 56.913351][ T5882] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 56.919617][ T5836] usb 2-1: config 0 descriptor?? [ 56.931066][ T5878] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5878] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5881] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd539ac300) = 0 [ 56.936217][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 56.949535][ T5838] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 56.950793][ T5881] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 56.959329][ T9] em28xx 4-1:0.132: Video interface 132 found: bulk [ 56.973012][ T5838] em28xx 5-1:0.132: Video interface 132 found: bulk [pid 5896] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 9 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 27 [ 56.987176][ T5836] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 56.996989][ T5836] em28xx 2-1:0.132: Video interface 132 found: bulk [ 57.003807][ T965] usb 1-1: Using ep0 maxpacket: 32 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 4 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 57.039275][ T965] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 57.047540][ T965] usb 1-1: config 0 has no interface number 0 [ 57.053636][ T965] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5880] exit_group(0) = ? [pid 5880] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5880, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5904 attached [pid 5882] exit_group(0) = ? [pid 5904] set_robust_list(0x55556acab660, 24 [pid 5896] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] <... set_robust_list resumed>) = 0 [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5896] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5882] +++ exited with 0 +++ [pid 5904] <... prctl resumed>) = 0 [pid 5896] <... ioctl resumed>, 0x2) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55556acab650) = 5904 [pid 5896] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5904] setpgid(0, 0 [pid 5828] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5882, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5904] <... setpgid resumed>) = 0 [pid 5828] restart_syscall(<... resuming interrupted clone ...> [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5896] <... ioctl resumed>, 0) = 0 [pid 5904] <... openat resumed>) = 3 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5828] <... restart_syscall resumed>) = 0 [ 57.106331][ T965] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 57.115469][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.125683][ T965] usb 1-1: Product: syz [ 57.129880][ T965] usb 1-1: Manufacturer: syz [ 57.134543][ T965] usb 1-1: SerialNumber: syz [ 57.140748][ T965] usb 1-1: config 0 descriptor?? [pid 5904] write(3, "1000", 4) = 4 [pid 5896] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5904] close(3 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5878] exit_group(0) = ? [pid 5904] <... close resumed>) = 0 [pid 5896] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5904] write(1, "executing program\n", 18./strace-static-x86_64: Process 5905 attached ) = 18 [pid 5878] +++ exited with 0 +++ [pid 5905] set_robust_list(0x55556acab660, 24) = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5905] setpgid(0, 0) = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 5905] write(3, "1000", 4 [pid 5904] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5828] <... clone resumed>, child_tidptr=0x55556acab650) = 5905 [pid 5905] <... write resumed>) = 4 [pid 5904] <... openat resumed>) = 3 [pid 5881] exit_group(0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5878, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5905] close(3 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5905] <... close resumed>) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_INIT [pid 5881] <... exit_group resumed>) = ? [pid 5829] <... restart_syscall resumed>) = 0 executing program [pid 5905] write(1, "executing program\n", 18) = 18 [pid 5904] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5904] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN./strace-static-x86_64: Process 5906 attached [pid 5905] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5904] <... ioctl resumed>, 0) = 0 [pid 5881] +++ exited with 0 +++ [pid 5906] set_robust_list(0x55556acab660, 24 [pid 5829] <... clone resumed>, child_tidptr=0x55556acab650) = 5906 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5881, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5905] <... openat resumed>) = 3 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5904] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5823] <... restart_syscall resumed>) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5905] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd539ad310) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5905] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN./strace-static-x86_64: Process 5907 attached , 0) = 0 [pid 5907] set_robust_list(0x55556acab660, 24) = 0 [pid 5823] <... clone resumed>, child_tidptr=0x55556acab650) = 5907 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5906] <... set_robust_list resumed>) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] setpgid(0, 0 [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5907] <... setpgid resumed>) = 0 [pid 5905] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] <... prctl resumed>) = 0 [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5906] setpgid(0, 0) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] <... openat resumed>) = 3 [ 57.162938][ T5896] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 57.178930][ T965] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 57.189107][ T965] em28xx 1-1:0.132: Video interface 132 found: bulk [ 57.195870][ T8] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 57.204395][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [pid 5907] write(3, "1000", 4 [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 5907] <... write resumed>) = 4 [pid 5907] close(3) = 0 [pid 5907] write(1, "executing program\n", 18) = 18 [pid 5907] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5906] <... openat resumed>) = 3 [pid 5906] write(3, "1000", 4 [pid 5907] <... openat resumed>) = 3 [pid 5906] <... write resumed>) = 4 [pid 5906] close(3 [pid 5907] ioctl(3, USB_RAW_IOCTL_INIT [pid 5906] <... close resumed>) = 0 [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] write(1, "executing program\n", 18executing program [pid 5907] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5906] <... write resumed>) = 18 [pid 5906] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5907] <... ioctl resumed>, 0) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd539ad310) = 0 [pid 5906] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] <... ioctl resumed>, 0) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 57.234046][ T5838] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 57.253994][ T5836] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 57.262168][ T8] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 57.271568][ T8] em28xx 3-1:0.132: board has no eeprom [ 57.278300][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 57.287272][ T9] em28xx 4-1:0.132: board has no eeprom [ 57.295313][ T5838] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 57.304073][ T5838] em28xx 5-1:0.132: board has no eeprom [ 57.315550][ T5836] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 57.324258][ T5836] em28xx 2-1:0.132: board has no eeprom [ 57.333807][ T8] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 57.341655][ T8] em28xx 3-1:0.132: analog set to bulk mode. [ 57.347716][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 57.355677][ T5851] em28xx 3-1:0.132: Registering V4L2 extension [ 57.362296][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 57.369971][ T8] usb 3-1: USB disconnect, device number 4 [ 57.375897][ T5838] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5896] exit_group(0) = ? [pid 5896] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5822] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5910 attached [pid 5910] set_robust_list(0x55556acab660, 24 [pid 5822] <... clone resumed>, child_tidptr=0x55556acab650) = 5910 [pid 5910] <... set_robust_list resumed>) = 0 [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 57.384526][ T8] em28xx 3-1:0.132: Disconnecting em28xx [ 57.390262][ T5836] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 57.399147][ T5838] em28xx 5-1:0.132: analog set to bulk mode. [ 57.405717][ T5836] em28xx 2-1:0.132: analog set to bulk mode. [ 57.413410][ T9] usb 4-1: USB disconnect, device number 4 [ 57.420736][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 57.428020][ T5838] usb 5-1: USB disconnect, device number 4 [pid 5910] setpgid(0, 0) = 0 [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5910] write(3, "1000", 4) = 4 executing program [pid 5910] close(3) = 0 [pid 5910] write(1, "executing program\n", 18) = 18 [pid 5910] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5910] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd539ad310) = 0 [pid 5910] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 57.435367][ T5836] usb 2-1: USB disconnect, device number 4 [ 57.441715][ T5836] em28xx 2-1:0.132: Disconnecting em28xx [ 57.454530][ T5838] em28xx 5-1:0.132: Disconnecting em28xx [ 57.464264][ T965] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 57.477285][ T5851] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 57.484422][ T5851] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 57.491507][ T5851] em28xx 3-1:0.132: No AC97 audio processor [ 57.498166][ T5851] usb 3-1: Decoder not found [ 57.502754][ T5851] em28xx 3-1:0.132: failed to create media graph [ 57.509220][ T5851] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 57.516615][ T5851] em28xx 3-1:0.132: Remote control support is not available for this card. [ 57.525276][ T5854] em28xx 4-1:0.132: Registering V4L2 extension [ 57.535966][ T965] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 57.544927][ T965] em28xx 1-1:0.132: board has no eeprom [ 57.573140][ T5854] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 57.580217][ T5854] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 57.587588][ T5854] em28xx 4-1:0.132: No AC97 audio processor [ 57.594639][ T5854] usb 4-1: Decoder not found [ 57.599220][ T5854] em28xx 4-1:0.132: failed to create media graph [ 57.606725][ T965] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 57.614560][ T5854] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 57.621659][ T965] em28xx 1-1:0.132: analog set to bulk mode. [ 57.628190][ T5854] em28xx 4-1:0.132: Remote control support is not available for this card. [ 57.637112][ T5841] em28xx 5-1:0.132: Registering V4L2 extension [ 57.644698][ T965] usb 1-1: USB disconnect, device number 5 [ 57.651062][ T965] em28xx 1-1:0.132: Disconnecting em28xx [ 57.683374][ T5841] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 57.690669][ T5841] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 57.697866][ T5841] em28xx 5-1:0.132: No AC97 audio processor [ 57.704667][ T5841] usb 5-1: Decoder not found [ 57.709266][ T5841] em28xx 5-1:0.132: failed to create media graph [ 57.716292][ T5841] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 57.723966][ T5841] em28xx 5-1:0.132: Remote control support is not available for this card. [ 57.732568][ T5856] em28xx 2-1:0.132: Registering V4L2 extension [ 57.773408][ T5856] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 57.782515][ T5856] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 57.789785][ T5856] em28xx 2-1:0.132: No AC97 audio processor [ 57.797162][ T5856] usb 2-1: Decoder not found [ 57.801764][ T5856] em28xx 2-1:0.132: failed to create media graph [ 57.808193][ T5856] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 57.815669][ T5856] em28xx 2-1:0.132: Remote control support is not available for this card. [ 57.824373][ T8] em28xx 3-1:0.132: Closing input extension [ 57.830305][ T5851] em28xx 1-1:0.132: Registering V4L2 extension [ 57.839425][ T8] em28xx 3-1:0.132: Freeing device [ 57.902383][ T5851] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 57.910167][ T5851] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 57.918806][ T5851] em28xx 1-1:0.132: No AC97 audio processor [ 57.925419][ T5851] usb 1-1: Decoder not found [ 57.930026][ T5851] em28xx 1-1:0.132: failed to create media graph [ 57.936557][ T5851] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 57.944023][ T5851] em28xx 1-1:0.132: Remote control support is not available for this card. [ 57.952622][ T9] em28xx 4-1:0.132: Closing input extension [ 57.958578][ T5838] em28xx 5-1:0.132: Closing input extension [ 57.964662][ T5836] em28xx 2-1:0.132: Closing input extension [ 57.971128][ T965] em28xx 1-1:0.132: Closing input extension [ 57.977723][ T9] em28xx 4-1:0.132: Freeing device [ 57.988602][ T5838] em28xx 5-1:0.132: Freeing device [ 57.994870][ T5836] em28xx 2-1:0.132: Freeing device [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 58.007331][ T965] em28xx 1-1:0.132: Freeing device [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5905] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 58.153810][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5905] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5905] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5910] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5904] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 58.283865][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 58.303830][ T5838] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.313823][ T965] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 58.321381][ T5836] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 58.328968][ T8] usb 3-1: Using ep0 maxpacket: 32 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 9 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5905] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 27 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 4 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [ 58.366026][ T8] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 58.374384][ T8] usb 3-1: config 0 has no interface number 0 [ 58.380492][ T8] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5905] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5904] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 58.415596][ T8] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 58.424683][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.432638][ T8] usb 3-1: Product: syz [ 58.437013][ T8] usb 3-1: Manufacturer: syz [ 58.441594][ T8] usb 3-1: SerialNumber: syz [ 58.446348][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 58.453447][ T8] usb 3-1: config 0 descriptor?? [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5905] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] <... ioctl resumed>, 0x2) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5904] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5905] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 27 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5904] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5906] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5906] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 9 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 58.463806][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 58.464735][ T5904] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.476688][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 58.485419][ T9] usb 4-1: config 0 has no interface number 0 [ 58.491663][ T9] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 58.503841][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 58.509063][ T965] usb 1-1: Using ep0 maxpacket: 32 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5906] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5910] <... ioctl resumed>, 0x7ffd539ac300) = 18 [pid 5907] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5905] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5905] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5910] <... ioctl resumed>, 0x7ffd539ac300) = 9 [pid 5907] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5906] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5905] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 58.514655][ T8] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 58.524499][ T5838] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 58.532665][ T5838] usb 5-1: config 0 has no interface number 0 [ 58.539043][ T8] em28xx 3-1:0.132: Video interface 132 found: bulk [ 58.546276][ T5838] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5910] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5905] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 58.558664][ T5836] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 58.567047][ T965] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 58.575302][ T965] usb 1-1: config 0 has no interface number 0 [ 58.581401][ T965] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 58.591594][ T5836] usb 2-1: config 0 has no interface number 0 [ 58.597758][ T5836] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5906] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5905] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5906] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5910] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5907] <... ioctl resumed>, 0x7ffd539ac300) = 4 [pid 5906] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5910] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5906] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5907] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5905] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5905] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [ 58.607911][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 58.617115][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.625385][ T9] usb 4-1: Product: syz [ 58.629549][ T9] usb 4-1: Manufacturer: syz [ 58.634173][ T9] usb 4-1: SerialNumber: syz [ 58.641777][ T5838] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 58.651927][ T9] usb 4-1: config 0 descriptor?? [ 58.657004][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5905] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5910] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5905] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5907] <... ioctl resumed>, 0x7ffd539ac300) = 8 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd539ac300) = 0 [ 58.665406][ T5838] usb 5-1: Product: syz [ 58.667125][ T5905] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 58.669684][ T965] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 58.685803][ T5838] usb 5-1: Manufacturer: syz [ 58.690414][ T5838] usb 5-1: SerialNumber: syz [ 58.695129][ T5836] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 58.705712][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [pid 5904] exit_group(0) = ? [pid 5906] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5904] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5904, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5906] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5929 attached [pid 5906] <... ioctl resumed>, 0) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5825] <... clone resumed>, child_tidptr=0x55556acab650) = 5929 [pid 5929] set_robust_list(0x55556acab660, 24) = 0 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 58.715919][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.724722][ T5838] usb 5-1: config 0 descriptor?? [ 58.729729][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.737933][ T9] em28xx 4-1:0.132: Video interface 132 found: bulk [ 58.744702][ T5836] usb 2-1: Product: syz [ 58.748884][ T5836] usb 2-1: Manufacturer: syz [ 58.753498][ T5836] usb 2-1: SerialNumber: syz [ 58.756007][ T5906] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [pid 5929] setpgid(0, 0) = 0 [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5929] write(3, "1000", 4) = 4 executing program [pid 5929] close(3) = 0 [pid 5929] write(1, "executing program\n", 18) = 18 [pid 5929] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5929] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5907] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5907] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5906] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5907] <... ioctl resumed>, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [ 58.758147][ T965] usb 1-1: Product: syz [ 58.769483][ T965] usb 1-1: Manufacturer: syz [ 58.775054][ T965] usb 1-1: SerialNumber: syz [ 58.780402][ T5836] usb 2-1: config 0 descriptor?? [ 58.787182][ T965] usb 1-1: config 0 descriptor?? [ 58.791505][ T5907] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 58.794033][ T8] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 58.805853][ T5838] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [pid 5910] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5910] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5907] <... ioctl resumed>, 0x7ffd539ac300) = 0 [pid 5910] <... ioctl resumed>, 0x2) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f7f92cb33ec) = -1 EINVAL (Invalid argument) [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd539ac300) = 0 [ 58.815728][ T5838] em28xx 5-1:0.132: Video interface 132 found: bulk [ 58.826408][ T5836] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 58.836231][ T5836] em28xx 2-1:0.132: Video interface 132 found: bulk [ 58.837869][ T5910] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [pid 5905] exit_group(0) = ? [pid 5905] +++ exited with 0 +++ [pid 5828] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5828] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556acab650) = 5930 ./strace-static-x86_64: Process 5930 attached [pid 5930] set_robust_list(0x55556acab660, 24) = 0 [pid 5930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5930] setpgid(0, 0) = 0 [pid 5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5930] write(3, "1000", 4) = 4 [ 58.863487][ T965] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 58.873697][ T965] em28xx 1-1:0.132: Video interface 132 found: bulk [ 58.881710][ T8] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 58.890443][ T8] em28xx 3-1:0.132: board has no eeprom [pid 5930] close(3) = 0 [pid 5930] write(1, "executing program\n", 18executing program ) = 18 [pid 5930] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5930] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd539ad310) = 0 [pid 5930] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 58.954101][ T8] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 58.962005][ T8] em28xx 3-1:0.132: analog set to bulk mode. [ 58.968205][ T5851] em28xx 3-1:0.132: Registering V4L2 extension [ 58.974500][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5906] exit_group(0) = ? [pid 5906] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5906, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556acab650) = 5932 ./strace-static-x86_64: Process 5932 attached [pid 5932] set_robust_list(0x55556acab660, 24) = 0 [pid 5932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5932] setpgid(0, 0) = 0 [pid 5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5932] write(3, "1000", 4) = 4 [pid 5932] close(3executing program ) = 0 [pid 5932] write(1, "executing program\n", 18) = 18 [pid 5932] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5932] ioctl(3, USB_RAW_IOCTL_INIT [pid 5907] exit_group(0 [pid 5932] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5910] exit_group(0 [pid 5907] <... exit_group resumed>) = ? [ 58.997356][ T5851] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 59.007504][ T8] usb 3-1: USB disconnect, device number 5 [ 59.013819][ T5851] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 59.022822][ T8] em28xx 3-1:0.132: Disconnecting em28xx [ 59.038579][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 59.047685][ T9] em28xx 4-1:0.132: board has no eeprom [pid 5932] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5910] <... exit_group resumed>) = ? [pid 5932] <... ioctl resumed>, 0) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5907] +++ exited with 0 +++ [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5936 attached [pid 5910] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5910, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5823] <... clone resumed>, child_tidptr=0x55556acab650) = 5936 [pid 5936] set_robust_list(0x55556acab660, 24) = 0 [pid 5936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5936] setpgid(0, 0) = 0 [pid 5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 59.064085][ T5838] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 59.086395][ T5851] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 59.093438][ T5851] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 59.100925][ T5851] em28xx 3-1:0.132: No AC97 audio processor [ 59.106863][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [pid 5936] write(3, "1000", 4./strace-static-x86_64: Process 5937 attached ) = 4 [pid 5937] set_robust_list(0x55556acab660, 24 [pid 5936] close(3 [pid 5822] <... clone resumed>, child_tidptr=0x55556acab650) = 5937 executing program [pid 5937] <... set_robust_list resumed>) = 0 [pid 5936] <... close resumed>) = 0 [pid 5937] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5936] write(1, "executing program\n", 18) = 18 [pid 5937] <... prctl resumed>) = 0 [pid 5936] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5937] setpgid(0, 0 [pid 5936] <... openat resumed>) = 3 [pid 5937] <... setpgid resumed>) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_INIT [pid 5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5936] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5936] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5937] <... openat resumed>) = 3 [pid 5936] <... ioctl resumed>, 0) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5937] write(3, "1000", 4executing program ) = 4 [pid 5937] close(3) = 0 [pid 5937] write(1, "executing program\n", 18) = 18 [pid 5937] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5937] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd539ad310) = 0 [pid 5937] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 59.115017][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 59.122238][ T5851] usb 3-1: Decoder not found [ 59.127779][ T5836] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 59.135660][ T965] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 59.142170][ T9] usb 4-1: USB disconnect, device number 5 [ 59.148801][ T5851] em28xx 3-1:0.132: failed to create media graph [ 59.156321][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 59.162028][ T5838] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 59.170827][ T5851] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 59.177653][ T5838] em28xx 5-1:0.132: board has no eeprom [ 59.183906][ T5851] em28xx 3-1:0.132: Remote control support is not available for this card. [ 59.192512][ T5856] em28xx 4-1:0.132: Registering V4L2 extension [ 59.216395][ T965] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 59.228338][ T965] em28xx 1-1:0.132: board has no eeprom [ 59.234982][ T5836] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 59.243672][ T5836] em28xx 2-1:0.132: board has no eeprom [ 59.249626][ T5838] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 59.257554][ T5856] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 59.264738][ T5838] em28xx 5-1:0.132: analog set to bulk mode. [ 59.270920][ T5856] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 59.279523][ T5838] usb 5-1: USB disconnect, device number 5 [ 59.285389][ T5856] em28xx 4-1:0.132: No AC97 audio processor [ 59.292296][ T5838] em28xx 5-1:0.132: Disconnecting em28xx [ 59.298161][ T5856] usb 4-1: Decoder not found [ 59.302756][ T5856] em28xx 4-1:0.132: failed to create media graph [ 59.309159][ T5856] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 59.315966][ T965] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 59.324049][ T965] em28xx 1-1:0.132: analog set to bulk mode. [ 59.331607][ T5856] em28xx 4-1:0.132: Remote control support is not available for this card. [ 59.340232][ T5836] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 59.348251][ T9] em28xx 4-1:0.132: Closing input extension [ 59.355493][ T965] usb 1-1: USB disconnect, device number 6 [ 59.361833][ T965] em28xx 1-1:0.132: Disconnecting em28xx [ 59.367536][ T5836] em28xx 2-1:0.132: analog set to bulk mode. [ 59.374112][ T8] em28xx 3-1:0.132: Closing input extension [ 59.380848][ T5856] em28xx 2-1:0.132: Registering V4L2 extension [ 59.387667][ T9] em28xx 4-1:0.132: Freeing device [ 59.395187][ T5836] usb 2-1: USB disconnect, device number 5 [ 59.401413][ T5836] em28xx 2-1:0.132: Disconnecting em28xx [ 59.411258][ T8] em28xx 3-1:0.132: Freeing device [ 59.479088][ T5856] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 59.488105][ T5856] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 59.500242][ T5856] em28xx 2-1:0.132: No AC97 audio processor [ 59.507165][ T5856] usb 2-1: Decoder not found [ 59.511764][ T5856] em28xx 2-1:0.132: failed to create media graph [ 59.518283][ T5856] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 59.526351][ T5856] em28xx 2-1:0.132: Remote control support is not available for this card. [ 59.526427][ T5945] ================================================================== [ 59.535325][ T5851] em28xx 5-1:0.132: Registering V4L2 extension [ 59.542953][ T5945] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 59.556532][ T5945] Read of size 8 at addr ffff888022b10738 by task v4l_id/5945 [ 59.563982][ T5945] [ 59.566298][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: v4l_id Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0 [ 59.576618][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.586667][ T5945] Call Trace: [ 59.589939][ T5945] [ 59.592865][ T5945] dump_stack_lvl+0x116/0x1f0 [ 59.597564][ T5945] print_report+0xc3/0x620 [ 59.599362][ T5851] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 59.601970][ T5945] ? __virt_addr_valid+0x5e/0x590 [ 59.609088][ T5851] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 59.613945][ T5945] ? __phys_addr+0xc6/0x150 [ 59.613969][ T5945] kasan_report+0xd9/0x110 [ 59.621264][ T5851] em28xx 5-1:0.132: No AC97 audio processor [ 59.625509][ T5945] ? v4l2_fh_init+0x27d/0x2c0 [ 59.625530][ T5945] ? v4l2_fh_init+0x27d/0x2c0 [ 59.625551][ T5945] v4l2_fh_init+0x27d/0x2c0 [ 59.631012][ T5851] videodev: could not get a free minor [ 59.635788][ T5945] v4l2_fh_open+0x83/0xc0 [ 59.635816][ T5945] em28xx_v4l2_open+0x250/0x7e0 [ 59.640583][ T5851] em28xx 5-1:0.132: unable to register video device (error=-23). [ 59.645108][ T5945] v4l2_open+0x222/0x490 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5930] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5929] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5930] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5929] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 59.645141][ T5945] ? __pfx_v4l2_open+0x10/0x10 [ 59.645166][ T5945] chrdev_open+0x237/0x6a0 [ 59.645186][ T5945] ? __pfx_chrdev_open+0x10/0x10 [ 59.650671][ T5851] em28xx 5-1:0.132: Remote control support is not available for this card. [ 59.655081][ T5945] ? security_file_open+0x62a/0x9d0 [ 59.655119][ T5945] do_dentry_open+0x6ca/0x1530 [ 59.659764][ T5841] em28xx 1-1:0.132: Registering V4L2 extension [ 59.664239][ T5945] ? __pfx_chrdev_open+0x10/0x10 [ 59.664262][ T5945] ? inode_permission+0xdd/0x5f0 [ 59.664283][ T5945] vfs_open+0x82/0x3f0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5930] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [ 59.664300][ T5945] ? may_open+0x1f2/0x400 [ 59.703839][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 59.703986][ T5945] path_openat+0x1e6a/0x2d60 [ 59.708789][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 59.714844][ T5945] ? __pfx_path_openat+0x10/0x10 [ 59.714863][ T5945] ? __pfx___lock_acquire+0x10/0x10 [ 59.714882][ T5945] do_filp_open+0x1dc/0x430 [ 59.714898][ T5945] ? __pfx_do_filp_open+0x10/0x10 [ 59.714913][ T5945] ? find_held_lock+0x2d/0x110 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5929] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5930] <... ioctl resumed>, 0x7ffd539ad310) = 0 [ 59.714941][ T5945] ? _raw_spin_unlock+0x28/0x50 [ 59.746992][ T5841] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 59.752522][ T5945] ? alloc_fd+0x2d7/0x6c0 [ 59.757652][ T5841] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 59.762594][ T5945] do_sys_openat2+0x17a/0x1e0 [ 59.767578][ T5841] em28xx 1-1:0.132: No AC97 audio processor [ 59.772046][ T5945] ? __pfx_do_sys_openat2+0x10/0x10 [ 59.777134][ T5841] videodev: could not get a free minor [ 59.781589][ T5945] ? do_user_addr_fault+0xe50/0x13f0 [ 59.788832][ T5841] em28xx 1-1:0.132: unable to register video device (error=-23). [ 59.792868][ T5945] ? __pfx_lock_release+0x10/0x10 [ 59.801016][ T5841] em28xx 1-1:0.132: Remote control support is not available for this card. [ 59.804757][ T5945] ? trace_lock_acquire+0x14a/0x1d0 [ 59.804785][ T5945] __x64_sys_openat+0x175/0x210 [ 59.804807][ T5945] ? __pfx___x64_sys_openat+0x10/0x10 [ 59.811247][ T965] em28xx 1-1:0.132: Closing input extension [ 59.815840][ T5945] ? do_user_addr_fault+0x83d/0x13f0 [ 59.815870][ T5945] do_syscall_64+0xcd/0x250 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5929] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [ 59.815897][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.824604][ T965] em28xx 1-1:0.132: Freeing device [ 59.826570][ T5945] RIP: 0033:0x7f17bcd719a4 [ 59.834360][ T5836] em28xx 2-1:0.132: Closing input extension [ 59.839243][ T5945] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 59.849364][ T5838] em28xx 5-1:0.132: Closing input extension [ 59.852949][ T5945] RSP: 002b:00007ffe5656a370 EFLAGS: 00000246 [ 59.866002][ T5838] em28xx 5-1:0.132: Freeing device [ 59.868972][ T5945] ORIG_RAX: 0000000000000101 [ 59.868983][ T5945] RAX: ffffffffffffffda RBX: 00007ffe5656a588 RCX: 00007f17bcd719a4 [ 59.883803][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 59.884575][ T5945] RDX: 0000000000000000 RSI: 00007ffe5656bf1d RDI: 00000000ffffff9c [ 59.890054][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 59.894042][ T5945] RBP: 00007ffe5656bf1d R08: 0000000000000000 R09: 0000000000000000 [ 59.894056][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.894067][ T5945] R13: 00007ffe5656a5a0 R14: 0000564a0eb67670 R15: 00007f17bcf34a80 [ 59.894084][ T5945] [ 59.894091][ T5945] [ 59.894096][ T5945] Allocated by task 5856: [ 59.894104][ T5945] kasan_save_stack+0x33/0x60 [ 59.913016][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 59.919543][ T5945] kasan_save_track+0x14/0x30 [ 59.919566][ T5945] __kasan_kmalloc+0xaa/0xb0 [ 59.919581][ T5945] em28xx_v4l2_init+0x114/0x4050 [ 59.919600][ T5945] em28xx_init_extension+0x137/0x200 [ 59.919621][ T5945] request_module_async+0x61/0x70 [ 59.931177][ T8] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 59.931532][ T5945] process_one_work+0x9c5/0x1ba0 [ 59.941421][ T8] usb 3-1: config 0 has no interface number 0 [ 59.949233][ T5945] worker_thread+0x6c8/0xf00 [ 59.949256][ T5945] kthread+0x2c1/0x3a0 [ 59.949273][ T5945] ret_from_fork+0x45/0x80 [ 59.949288][ T5945] ret_from_fork_asm+0x1a/0x30 [ 59.949309][ T5945] [ 59.949313][ T5945] Freed by task 5856: [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5930] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 18 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 9 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 27 [pid 5929] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 9 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5929] <... ioctl resumed>, 0x7ffd539ac300) = 27 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 4 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5930] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 4 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd539ad310) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd539ac300) = 8 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5929] <... ioctl resumed>, 0x7ffd539ad310) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 59.949321][ T5945] kasan_save_stack+0x33/0x60 [ 59.949337][ T5945] kasan_save_track+0x14/0x30 [ 59.949352][ T5945] kasan_save_free_info+0x3b/0x60 [ 59.949373][ T5945] __kasan_slab_free+0x51/0x70 [ 59.949386][ T5945] kfree+0x14f/0x4b0 [ 59.949398][ T5945] em28xx_v4l2_init+0x22a4/0x4050 [ 59.949414][ T5945] em28xx_init_extension+0x137/0x200 [ 59.949437][ T5945] request_module_async+0x61/0x70 [ 59.949460][ T5945] process_one_work+0x9c5/0x1ba0 [ 59.949475][ T5945] worker_thread+0x6c8/0xf00 [ 59.949490][ T5945] kthread+0x2c1/0x3a0 [ 59.949508][ T5945] ret_from_fork+0x45/0x80 [ 59.949526][ T5945] ret_from_fork_asm+0x1a/0x30 [ 59.949546][ T5945] [ 59.949551][ T5945] The buggy address belongs to the object at ffff888022b10000 [ 59.949551][ T5945] which belongs to the cache kmalloc-8k of size 8192 [ 59.949564][ T5945] The buggy address is located 1848 bytes inside of [ 59.949564][ T5945] freed 8192-byte region [ffff888022b10000, ffff888022b12000) [ 59.949580][ T5945] [ 59.949584][ T5945] The buggy address belongs to the physical page: [ 59.949590][ T5945] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22b10 [ 59.949605][ T5945] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 59.949617][ T5945] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 59.949632][ T5945] page_type: f5(slab) [ 59.949646][ T5945] raw: 00fff00000000040 ffff88801b042280 ffffea00008dc200 0000000000000006 [ 59.956804][ T9] usb 4-1: config 0 has no interface number 0 [ 59.962674][ T5945] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 59.968220][ T8] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 59.975693][ T5945] head: 00fff00000000040 ffff88801b042280 ffffea00008dc200 0000000000000006 [ 59.975709][ T5945] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 59.975724][ T5945] head: 00fff00000000003 ffffea00008ac401 ffffffffffffffff 0000000000000000 [ 59.975739][ T5945] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 59.975748][ T5945] page dumped because: kasan: bad access detected [ 59.984150][ T9] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 59.991625][ T5945] page_owner tracks the page as allocated [ 59.991632][ T5945] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5686, tgid 5686 (sshd), ts 39744509042, free_ts 39733771136 [ 59.997699][ T8] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 60.001222][ T5945] post_alloc_hook+0x2d1/0x350 [ 60.006536][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.013979][ T5945] get_page_from_freelist+0x101e/0x3070 [ 60.014004][ T5945] __alloc_pages_noprof+0x223/0x25a0 [ 60.014023][ T5945] alloc_pages_mpol_noprof+0x2c9/0x610 [ 60.019914][ T8] usb 3-1: Product: syz [ 60.023241][ T5945] new_slab+0x2ba/0x3f0 [ 60.023261][ T5945] ___slab_alloc+0xdac/0x1880 [ 60.023276][ T5945] __slab_alloc.constprop.0+0x56/0xb0 [ 60.029136][ T8] usb 3-1: Manufacturer: syz [ 60.030141][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 60.033434][ T5945] __kmalloc_node_track_caller_noprof+0x355/0x430 [ 60.046623][ T5945] kmalloc_reserve+0xef/0x2c0 [ 60.046647][ T5945] __alloc_skb+0x164/0x380 [ 60.046661][ T5945] netlink_dump+0x2c1/0xcc0 [ 60.051666][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.057600][ T5945] netlink_recvmsg+0xa0d/0xf30 [ 60.057623][ T5945] sock_recvmsg+0x1f6/0x250 [ 60.057643][ T5945] ____sys_recvmsg+0x219/0x6b0 [ 60.063569][ T9] usb 4-1: Product: syz [ 60.066244][ T5945] ___sys_recvmsg+0x115/0x1a0 [ 60.066265][ T5945] __sys_recvmsg+0x114/0x1e0 [ 60.066283][ T5945] page last free pid 5669 tgid 5669 stack trace: [ 60.066294][ T5945] free_unref_page+0x5f4/0xdc0 [ 60.066312][ T5945] __folio_put+0x30d/0x3d0 [ 60.066330][ T5945] do_exit+0x25b4/0x2d70 [ 60.071260][ T8] usb 3-1: SerialNumber: syz [ 60.075436][ T5945] do_group_exit+0xd3/0x2a0 [ 60.075459][ T5945] __x64_sys_exit_group+0x3e/0x50 [ 60.075481][ T5945] x64_sys_call+0x14a9/0x16a0 [ 60.077793][ T9] usb 4-1: Manufacturer: syz [ 60.081727][ T5945] do_syscall_64+0xcd/0x250 [ 60.088143][ T8] usb 3-1: config 0 descriptor?? [ 60.091008][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.099585][ T9] usb 4-1: SerialNumber: syz [ 60.100727][ T5945] [ 60.100733][ T5945] Memory state around the buggy address: [ 60.100743][ T5945] ffff888022b10600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.100754][ T5945] ffff888022b10680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.100764][ T5945] >ffff888022b10700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.100773][ T5945] ^ [ 60.100781][ T5945] ffff888022b10780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.106573][ T5929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 60.109638][ T5945] ffff888022b10800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.117685][ T9] usb 4-1: config 0 descriptor?? [ 60.119875][ T5945] ================================================================== [ 60.125026][ T5945] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 60.125038][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: v4l_id Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0 [ 60.125055][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.125064][ T5945] Call Trace: [ 60.125069][ T5945] [ 60.125076][ T5945] dump_stack_lvl+0x3d/0x1f0 [ 60.125103][ T5945] panic+0x71d/0x800 [ 60.125125][ T5945] ? __pfx_panic+0x10/0x10 [ 60.125145][ T5945] ? irqentry_exit+0x3b/0x90 [ 60.125166][ T5945] ? lockdep_hardirqs_on+0x7c/0x110 [ 60.125188][ T5945] ? preempt_schedule_thunk+0x1a/0x30 [ 60.125203][ T5945] ? preempt_schedule_common+0x44/0xc0 [ 60.125224][ T5945] ? check_panic_on_warn+0x1f/0xb0 [ 60.125247][ T5945] check_panic_on_warn+0xab/0xb0 [ 60.125268][ T5945] end_report+0x117/0x180 [ 60.125286][ T5945] kasan_report+0xe9/0x110 [ 60.125303][ T5945] ? v4l2_fh_init+0x27d/0x2c0 [ 60.125320][ T5945] ? v4l2_fh_init+0x27d/0x2c0 [ 60.125338][ T5945] v4l2_fh_init+0x27d/0x2c0 [ 60.125353][ T5945] v4l2_fh_open+0x83/0xc0 [ 60.125369][ T5945] em28xx_v4l2_open+0x250/0x7e0 [ 60.125388][ T5945] v4l2_open+0x222/0x490 [ 60.125410][ T5945] ? __pfx_v4l2_open+0x10/0x10 [ 60.125432][ T5945] chrdev_open+0x237/0x6a0 [ 60.125448][ T5945] ? __pfx_chrdev_open+0x10/0x10 [ 60.125464][ T5945] ? security_file_open+0x62a/0x9d0 [ 60.125483][ T5945] do_dentry_open+0x6ca/0x1530 [ 60.125506][ T5945] ? __pfx_chrdev_open+0x10/0x10 [ 60.125527][ T5945] ? inode_permission+0xdd/0x5f0 [ 60.125546][ T5945] vfs_open+0x82/0x3f0 [ 60.125562][ T5945] ? may_open+0x1f2/0x400 [ 60.125581][ T5945] path_openat+0x1e6a/0x2d60 [ 60.125598][ T5945] ? __pfx_path_openat+0x10/0x10 [ 60.125613][ T5945] ? __pfx___lock_acquire+0x10/0x10 [ 60.125629][ T5945] do_filp_open+0x1dc/0x430 [ 60.125643][ T5945] ? __pfx_do_filp_open+0x10/0x10 [ 60.125657][ T5945] ? find_held_lock+0x2d/0x110 [ 60.125682][ T5945] ? _raw_spin_unlock+0x28/0x50 [ 60.125700][ T5945] ? alloc_fd+0x2d7/0x6c0 [ 60.125723][ T5945] do_sys_openat2+0x17a/0x1e0 [ 60.125740][ T5945] ? __pfx_do_sys_openat2+0x10/0x10 [ 60.125759][ T5945] ? do_user_addr_fault+0xe50/0x13f0 [ 60.125782][ T5945] ? __pfx_lock_release+0x10/0x10 [ 60.125796][ T5945] ? trace_lock_acquire+0x14a/0x1d0 [ 60.125816][ T5945] __x64_sys_openat+0x175/0x210 [ 60.125835][ T5945] ? __pfx___x64_sys_openat+0x10/0x10 [ 60.125854][ T5945] ? do_user_addr_fault+0x83d/0x13f0 [ 60.125878][ T5945] do_syscall_64+0xcd/0x250 [ 60.125901][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.125922][ T5945] RIP: 0033:0x7f17bcd719a4 [ 60.125935][ T5945] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 60.125949][ T5945] RSP: 002b:00007ffe5656a370 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.125965][ T5945] RAX: ffffffffffffffda RBX: 00007ffe5656a588 RCX: 00007f17bcd719a4 [ 60.125976][ T5945] RDX: 0000000000000000 RSI: 00007ffe5656bf1d RDI: 00000000ffffff9c [ 60.125986][ T5945] RBP: 00007ffe5656bf1d R08: 0000000000000000 R09: 0000000000000000 [ 60.125995][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.126004][ T5945] R13: 00007ffe5656a5a0 R14: 0000564a0eb67670 R15: 00007f17bcf34a80 [ 60.126019][ T5945] [ 60.129648][ T5945] Kernel Offset: disabled