[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 15.996796][ C1] random: crng init done [ 16.001313][ C1] random: 7 urandom warning(s) missed due to ratelimiting Warning: Permanently added '10.128.0.129' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program [ 57.817803][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 57.825506][ T94] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.827786][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 57.833454][ T12] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.843285][ T152] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.848651][ T102] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 57.937961][ T152] usb 5-1: Using ep0 maxpacket: 32 [ 57.948101][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 57.949131][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 57.953410][ T94] usb 1-1: Using ep0 maxpacket: 32 [ 57.963645][ T12] usb 6-1: Using ep0 maxpacket: 32 [ 57.969089][ T102] usb 4-1: Using ep0 maxpacket: 32 [ 58.057922][ T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.067871][ T152] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 58.081095][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.087900][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.090999][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 58.100750][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 58.127700][ T102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.137547][ T102] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 58.152612][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.162398][ T12] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 58.175396][ T94] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.185445][ T94] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 58.267844][ T152] usb 5-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 58.277138][ T152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.285569][ T152] usb 5-1: Product: syz [ 58.289845][ T152] usb 5-1: Manufacturer: syz [ 58.294421][ T152] usb 5-1: SerialNumber: syz [ 58.299232][ T21] usb 2-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 58.308539][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.316513][ T21] usb 2-1: Product: syz [ 58.320746][ T21] usb 2-1: Manufacturer: syz [ 58.325359][ T21] usb 2-1: SerialNumber: syz [ 58.332294][ T152] usb 5-1: config 0 descriptor?? [ 58.340809][ T21] usb 2-1: config 0 descriptor?? [ 58.358115][ T5] usb 3-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 58.367252][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.375497][ T5] usb 3-1: Product: syz [ 58.379766][ T5] usb 3-1: Manufacturer: syz [ 58.382518][ T152] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 58.384362][ T5] usb 3-1: SerialNumber: syz [ 58.384459][ T12] usb 6-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 58.393711][ T152] em28xx 5-1:0.0: Video interface 0 found: [ 58.402135][ T21] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 58.407350][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.407365][ T12] usb 6-1: Product: syz [ 58.407378][ T12] usb 6-1: Manufacturer: syz [ 58.407392][ T12] usb 6-1: SerialNumber: syz [ 58.407483][ T94] usb 1-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 58.413267][ T21] em28xx 2-1:0.0: Video interface 0 found: [ 58.458793][ T94] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.466941][ T94] usb 1-1: Product: syz [ 58.471165][ T94] usb 1-1: Manufacturer: syz [ 58.475754][ T94] usb 1-1: SerialNumber: syz [ 58.480460][ T102] usb 4-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 58.489558][ T102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.497536][ T102] usb 4-1: Product: syz [ 58.501753][ T102] usb 4-1: Manufacturer: syz [ 58.506415][ T102] usb 4-1: SerialNumber: syz [ 58.512761][ T5] usb 3-1: config 0 descriptor?? [ 58.521517][ T102] usb 4-1: config 0 descriptor?? [ 58.527525][ T12] usb 6-1: config 0 descriptor?? [ 58.533524][ T94] usb 1-1: config 0 descriptor?? [ 58.559693][ T5] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) executing program executing program [ 58.568997][ T5] em28xx 3-1:0.0: Video interface 0 found: [ 58.576497][ T102] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 58.585999][ T102] em28xx 4-1:0.0: Video interface 0 found: [ 58.594108][ T12] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 58.603432][ T12] em28xx 6-1:0.0: Video interface 0 found: [ 58.611742][ T94] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 58.621230][ T94] em28xx 1-1:0.0: Video interface 0 found: [ 58.647776][ T21] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 58.653913][ T152] em28xx 5-1:0.0: unknown em28xx chip ID (0) executing program executing program executing program executing program [ 58.857769][ T94] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 58.864147][ T5] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 58.870425][ T12] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 58.876636][ T102] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 58.877828][ T21] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 58.890774][ T21] em28xx 2-1:0.0: board has no eeprom [ 58.896204][ T152] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 58.904442][ T152] em28xx 5-1:0.0: board has no eeprom [ 59.017626][ T152] em28xx 5-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 59.025992][ T152] em28xx 5-1:0.0: analog set to bulk mode. [ 59.034359][ T21] em28xx 2-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 59.042649][ T21] em28xx 2-1:0.0: analog set to bulk mode. [ 59.051769][ T152] usb 5-1: USB disconnect, device number 2 [ 59.059509][ T152] em28xx 5-1:0.0: Disconnecting em28xx [ 59.066909][ T21] usb 2-1: USB disconnect, device number 2 [ 59.073600][ T21] em28xx 2-1:0.0: Disconnecting em28xx [ 59.079392][ T370] em28xx 5-1:0.0: Registering V4L2 extension [ 59.107763][ T102] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 59.116020][ T102] em28xx 4-1:0.0: board has no eeprom [ 59.122258][ T12] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 59.130403][ T12] em28xx 6-1:0.0: board has no eeprom [ 59.130476][ T370] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 59.136028][ T5] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 59.142896][ T370] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 59.142910][ T370] em28xx 5-1:0.0: No AC97 audio processor [ 59.150916][ T5] em28xx 3-1:0.0: board has no eeprom [ 59.166079][ T370] usb 5-1: Decoder not found [ 59.169230][ T94] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 59.173736][ T370] em28xx 5-1:0.0: failed to create media graph [ 59.177864][ T370] em28xx 5-1:0.0: V4L2 device video0 deregistered [ 59.181811][ T94] em28xx 1-1:0.0: board has no eeprom [ 59.191919][ T370] em28xx 5-1:0.0: Binding DVB extension [ 59.206037][ T370] em28xx 5-1:0.0: no endpoint for DVB mode and transfer type 0 [ 59.213758][ T370] em28xx 5-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 59.222098][ T370] em28xx 5-1:0.0: Remote control support is not available for this card. [ 59.231336][ T17] em28xx 2-1:0.0: Registering V4L2 extension [ 59.250396][ T17] em28xx 2-1:0.0: Config register raw data: 0xffffffed [ 59.257285][ T17] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 59.264465][ T17] em28xx 2-1:0.0: No AC97 audio processor [ 59.271136][ T17] usb 2-1: Decoder not found [ 59.275784][ T17] em28xx 2-1:0.0: failed to create media graph [ 59.282153][ T17] em28xx 2-1:0.0: V4L2 device video0 deregistered [ 59.289925][ T17] em28xx 2-1:0.0: Binding DVB extension [ 59.295538][ T17] em28xx 2-1:0.0: no endpoint for DVB mode and transfer type 0 [ 59.297683][ T5] em28xx 3-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 59.303264][ T17] em28xx 2-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 59.311348][ T5] em28xx 3-1:0.0: analog set to bulk mode. [ 59.319777][ T17] em28xx 2-1:0.0: Remote control support is not available for this card. [ 59.325864][ T94] em28xx 1-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 59.334601][ T152] em28xx 5-1:0.0: Closing input extension [ 59.342502][ T94] em28xx 1-1:0.0: analog set to bulk mode. [ 59.342571][ T102] em28xx 4-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 59.342590][ T102] em28xx 4-1:0.0: analog set to bulk mode. [ 59.364839][ T152] em28xx 5-1:0.0: Freeing device [ 59.368403][ T12] em28xx 6-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 59.368426][ T12] em28xx 6-1:0.0: analog set to bulk mode. [ 59.382638][ T21] em28xx 2-1:0.0: Closing input extension [ 59.397742][ T21] em28xx 2-1:0.0: Freeing device [ 59.399504][ T369] em28xx 3-1:0.0: Registering V4L2 extension [ 59.419819][ T94] usb 1-1: USB disconnect, device number 2 [ 59.426332][ T94] em28xx 1-1:0.0: Disconnecting em28xx [ 59.434831][ T12] usb 6-1: USB disconnect, device number 2 [ 59.443048][ T5] usb 3-1: USB disconnect, device number 2 [ 59.451021][ T102] usb 4-1: USB disconnect, device number 2 [ 59.460227][ T12] em28xx 6-1:0.0: Disconnecting em28xx [ 59.466909][ T5] em28xx 3-1:0.0: Disconnecting em28xx [ 59.473649][ T102] em28xx 4-1:0.0: Disconnecting em28xx [ 59.491706][ T369] em28xx 3-1:0.0: Config register raw data: 0xffffffed [ 59.498811][ T369] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 59.505758][ T369] em28xx 3-1:0.0: No AC97 audio processor [ 59.513217][ T369] usb 3-1: Decoder not found [ 59.517945][ T369] em28xx 3-1:0.0: failed to create media graph [ 59.524271][ T369] em28xx 3-1:0.0: V4L2 device video0 deregistered [ 59.532298][ T369] em28xx 3-1:0.0: Binding DVB extension [ 59.538272][ T369] em28xx 3-1:0.0: no endpoint for DVB mode and transfer type 0 [ 59.545859][ T369] em28xx 3-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 59.554338][ T369] em28xx 3-1:0.0: Remote control support is not available for this card. [ 59.563239][ T5] em28xx 3-1:0.0: Closing input extension [ 59.571119][ T5] em28xx 3-1:0.0: Freeing device [ 59.587154][ T369] em28xx 1-1:0.0: Registering V4L2 extension [ 59.603083][ T369] em28xx 1-1:0.0: Config register raw data: 0xffffffed [ 59.610331][ T369] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 59.618393][ T369] em28xx 1-1:0.0: No AC97 audio processor [ 59.625450][ T369] usb 1-1: Decoder not found [ 59.630163][ T369] em28xx 1-1:0.0: failed to create media graph [ 59.636446][ T369] em28xx 1-1:0.0: V4L2 device video0 deregistered [ 59.644410][ T369] em28xx 1-1:0.0: Binding DVB extension [ 59.650606][ T369] em28xx 1-1:0.0: no endpoint for DVB mode and transfer type 0 [ 59.658353][ T369] em28xx 1-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 59.666615][ T369] em28xx 1-1:0.0: Remote control support is not available for this card. [ 59.675114][ T366] em28xx 4-1:0.0: Registering V4L2 extension [ 59.690085][ T366] em28xx 4-1:0.0: Config register raw data: 0xffffffed [ 59.696997][ T366] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 59.704682][ T366] em28xx 4-1:0.0: No AC97 audio processor [ 59.711126][ T366] usb 4-1: Decoder not found [ 59.715736][ T366] em28xx 4-1:0.0: failed to create media graph [ 59.722015][ T366] em28xx 4-1:0.0: V4L2 device video0 deregistered [ 59.729313][ T366] em28xx 4-1:0.0: Binding DVB extension [ 59.734900][ T366] em28xx 4-1:0.0: no endpoint for DVB mode and transfer type 0 [ 59.742583][ T366] em28xx 4-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 59.750999][ T366] em28xx 4-1:0.0: Remote control support is not available for this card. [ 59.759851][ T401] em28xx 6-1:0.0: Registering V4L2 extension [ 59.767787][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 59.776981][ T152] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.792534][ T401] em28xx 6-1:0.0: Config register raw data: 0xffffffed [ 59.799925][ T401] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 59.807086][ T401] em28xx 6-1:0.0: No AC97 audio processor [ 59.814814][ T401] usb 6-1: Decoder not found [ 59.819655][ T401] em28xx 6-1:0.0: failed to create media graph [ 59.825961][ T401] em28xx 6-1:0.0: V4L2 device video0 deregistered [ 59.833821][ T401] em28xx 6-1:0.0: Binding DVB extension [ 59.840355][ T401] em28xx 6-1:0.0: no endpoint for DVB mode and transfer type 0 [ 59.848481][ T401] em28xx 6-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 59.856850][ T401] em28xx 6-1:0.0: Remote control support is not available for this card. [ 59.865566][ T94] em28xx 1-1:0.0: Closing input extension [ 59.867695][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 59.871429][ T102] em28xx 4-1:0.0: Closing input extension [ 59.883952][ T94] em28xx 1-1:0.0: Freeing device [ 59.887587][ T152] usb 5-1: Using ep0 maxpacket: 32 [ 59.891807][ T12] em28xx 6-1:0.0: Closing input extension [ 59.902248][ T102] em28xx 4-1:0.0: Freeing device [ 59.912443][ T12] em28xx 6-1:0.0: Freeing device [ 59.957776][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 59.997694][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.007683][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 60.021852][ T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.032289][ T152] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 60.047656][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 60.167563][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.177367][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 60.247651][ T21] usb 2-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 60.256766][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.257490][ T94] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 60.264830][ T21] usb 2-1: Product: syz [ 60.264843][ T21] usb 2-1: Manufacturer: syz [ 60.272647][ T102] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 60.276466][ T21] usb 2-1: SerialNumber: syz [ 60.280063][ T152] usb 5-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 60.281242][ T12] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.288570][ T152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.288584][ T152] usb 5-1: Product: syz [ 60.322150][ T152] usb 5-1: Manufacturer: syz [ 60.326735][ T152] usb 5-1: SerialNumber: syz [ 60.332996][ T21] usb 2-1: config 0 descriptor?? [ 60.344421][ T152] usb 5-1: config 0 descriptor?? [ 60.367689][ T5] usb 3-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 60.376827][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.385200][ T5] usb 3-1: Product: syz [ 60.389442][ T5] usb 3-1: Manufacturer: syz [ 60.389594][ T21] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 60.394048][ T5] usb 3-1: SerialNumber: syz [ 60.403370][ T21] em28xx 2-1:0.0: Video interface 0 found: [ 60.408794][ T102] usb 4-1: Using ep0 maxpacket: 32 [ 60.418978][ T12] usb 6-1: Using ep0 maxpacket: 32 [ 60.422405][ T152] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 60.424243][ T94] usb 1-1: Using ep0 maxpacket: 32 [ 60.433427][ T152] em28xx 5-1:0.0: Video interface 0 found: [ 60.445992][ T5] usb 3-1: config 0 descriptor?? [ 60.489207][ T5] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 60.498763][ T5] em28xx 3-1:0.0: Video interface 0 found: [ 60.537654][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.547600][ T12] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 60.560825][ T94] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.570735][ T94] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 executing program executing program [ 60.584068][ T102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.594768][ T102] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 28 executing program [ 60.677593][ T152] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 60.684046][ T21] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 60.738145][ T5] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 60.767728][ T102] usb 4-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 60.777267][ T102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.785458][ T102] usb 4-1: Product: syz [ 60.789768][ T102] usb 4-1: Manufacturer: syz [ 60.794349][ T102] usb 4-1: SerialNumber: syz [ 60.799053][ T94] usb 1-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 60.808596][ T94] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.816564][ T94] usb 1-1: Product: syz [ 60.820844][ T94] usb 1-1: Manufacturer: syz [ 60.825446][ T94] usb 1-1: SerialNumber: syz [ 60.830178][ T12] usb 6-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=5c.26 [ 60.839286][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.847269][ T12] usb 6-1: Product: syz [ 60.851515][ T12] usb 6-1: Manufacturer: syz [ 60.856191][ T12] usb 6-1: SerialNumber: syz [ 60.863557][ T12] usb 6-1: config 0 descriptor?? [ 60.869453][ T94] usb 1-1: config 0 descriptor?? [ 60.875533][ T102] usb 4-1: config 0 descriptor?? [ 60.907568][ T152] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 60.909577][ T94] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 60.915655][ T152] em28xx 5-1:0.0: board has no eeprom [ 60.925007][ T94] em28xx 1-1:0.0: Video interface 0 found: [ 60.927076][ T12] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 60.945746][ T12] em28xx 6-1:0.0: Video interface 0 found: [ 60.953836][ T102] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 60.957555][ T21] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 60.963510][ T102] em28xx 4-1:0.0: Video interface 0 found: [ 60.971629][ T21] em28xx 2-1:0.0: board has no eeprom [ 61.067411][ T152] em28xx 5-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 61.075644][ T152] em28xx 5-1:0.0: analog set to bulk mode. [ 61.085680][ T152] usb 5-1: USB disconnect, device number 3 [ 61.087581][ T5] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 61.094208][ T21] em28xx 2-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 61.099669][ T5] em28xx 3-1:0.0: board has no eeprom executing program executing program executing program [ 61.107942][ T21] em28xx 2-1:0.0: analog set to bulk mode. [ 61.114686][ T152] em28xx 5-1:0.0: Disconnecting em28xx [ 61.129364][ T21] usb 2-1: USB disconnect, device number 3 [ 61.144558][ T21] em28xx 2-1:0.0: Disconnecting em28xx [ 61.150375][ T17] em28xx 5-1:0.0: Registering V4L2 extension [ 61.171628][ T17] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 61.178724][ T17] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 61.185664][ T17] em28xx 5-1:0.0: No AC97 audio processor [ 61.193296][ T17] usb 5-1: Decoder not found [ 61.198126][ T17] em28xx 5-1:0.0: failed to create media graph [ 61.206366][ T17] em28xx 5-1:0.0: V4L2 device video0 deregistered [ 61.214464][ T17] em28xx 5-1:0.0: Binding DVB extension [ 61.215083][ T437] ================================================================== [ 61.220660][ T17] em28xx 5-1:0.0: no endpoint for DVB mode and transfer type 0 [ 61.228230][ T437] BUG: KASAN: use-after-free in v4l2_fh_init+0x279/0x2c0 [ 61.228241][ T437] Read of size 8 at addr ffff8881c56308c8 by task v4l_id/437 [ 61.228244][ T437] [ 61.228258][ T437] CPU: 0 PID: 437 Comm: v4l_id Not tainted 5.7.0-rc1-syzkaller #0 [ 61.228265][ T437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.228274][ T437] Call Trace: [ 61.235993][ T17] em28xx 5-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 61.243003][ T437] dump_stack+0xef/0x16e [ 61.243020][ T437] print_address_description.constprop.0.cold+0xd3/0x314 [ 61.243036][ T437] ? v4l2_fh_init+0x279/0x2c0 [ 61.250410][ T17] em28xx 5-1:0.0: Remote control support is not available for this card. [ 61.252688][ T437] __kasan_report.cold+0x37/0x92 [ 61.261814][ T370] em28xx 2-1:0.0: Registering V4L2 extension [ 61.271546][ T437] ? v4l2_fh_init+0x279/0x2c0 [ 61.271559][ T437] ? v4l2_fh_init+0x279/0x2c0 [ 61.271570][ T437] kasan_report+0x33/0x50 [ 61.271582][ T437] v4l2_fh_init+0x279/0x2c0 [ 61.271598][ T437] v4l2_fh_open+0x88/0xc0 [ 61.285180][ T370] em28xx 2-1:0.0: Config register raw data: 0xffffffed [ 61.287327][ T437] em28xx_v4l2_open+0x11a/0x570 [ 61.287351][ T437] v4l2_open+0x20f/0x3d0 [ 61.287368][ T437] ? v4l2_release+0x390/0x390 [ 61.294381][ T370] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 61.299045][ T437] chrdev_open+0x219/0x5c0 [ 61.299057][ T437] ? cdev_put.part.0+0x50/0x50 [ 61.299071][ T437] ? security_file_open+0x84/0x410 [ 61.299083][ T437] do_dentry_open+0x4ac/0x1160 [ 61.299094][ T437] ? cdev_put.part.0+0x50/0x50 [ 61.299109][ T437] ? chmod_common+0x3c0/0x3c0 [ 61.307517][ T370] em28xx 2-1:0.0: No AC97 audio processor [ 61.312430][ T437] ? inode_permission+0xbe/0x3a0 [ 61.319660][ T370] usb 2-1: Decoder not found [ 61.323185][ T437] path_openat+0x1a0b/0x2740 [ 61.323205][ T437] ? do_sys_openat2+0x3fc/0x7d0 [ 61.327935][ T370] em28xx 2-1:0.0: failed to create media graph [ 61.332195][ T437] ? path_lookupat.isra.0+0x530/0x530 [ 61.336857][ T370] em28xx 2-1:0.0: V4L2 device video1 deregistered [ 61.340982][ T437] do_filp_open+0x192/0x260 [ 61.340994][ T437] ? may_open_dev+0xf0/0xf0 [ 61.341006][ T437] ? __alloc_fd+0x46d/0x600 [ 61.341016][ T437] ? do_raw_spin_lock+0x129/0x290 [ 61.341034][ T437] ? _raw_spin_unlock+0x1a/0x30 [ 61.350097][ T370] em28xx 2-1:0.0: Binding DVB extension [ 61.352698][ T437] ? __alloc_fd+0x46d/0x600 [ 61.356947][ T370] em28xx 2-1:0.0: no endpoint for DVB mode and transfer type 0 [ 61.362724][ T437] do_sys_openat2+0x585/0x7d0 [ 61.362735][ T437] ? file_open_root+0x400/0x400 [ 61.362747][ T437] ? __secure_computing+0xb4/0x280 [ 61.362759][ T437] ? syscall_trace_enter+0x41d/0xcd0 [ 61.362771][ T437] do_sys_open+0xc3/0x140 [ 61.362786][ T437] ? filp_open+0x70/0x70 [ 61.369717][ T370] em28xx 2-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 61.374096][ T437] ? trace_hardirqs_off_caller+0x55/0x200 [ 61.378872][ T370] em28xx 2-1:0.0: Remote control support is not available for this card. [ 61.383921][ T437] do_syscall_64+0xb6/0x5a0 [ 61.388968][ T152] em28xx 5-1:0.0: Closing input extension [ 61.393528][ T437] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.407456][ T21] em28xx 2-1:0.0: Closing input extension [ 61.409951][ T437] RIP: 0033:0x7f4b7120f840 [ 61.415567][ T21] em28xx 2-1:0.0: Freeing device [ 61.420238][ T437] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 61.420245][ T437] RSP: 002b:00007ffc5b2f1638 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 61.420258][ T437] RAX: ffffffffffffffda RBX: 00007ffc5b2f17a8 RCX: 00007f4b7120f840 [ 61.420266][ T437] RDX: 00007f4b711fbea0 RSI: 0000000000000000 RDI: 00007ffc5b2f1f25 [ 61.420273][ T437] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 61.420285][ T437] R10: 0000000000000002 R11: 0000000000000246 R12: 000056242adba8d0 [ 61.420297][ T437] R13: 00007ffc5b2f17a0 R14: 0000000000000000 R15: 0000000000000000 [ 61.639562][ T437] [ 61.641883][ T437] The buggy address belongs to the page: [ 61.647613][ T437] page:ffffea0007158c00 refcount:0 mapcount:-128 mapping:0000000041a24cc8 index:0x0 [ 61.657909][ T437] flags: 0x200000000000000() [ 61.662681][ T437] raw: 0200000000000000 ffffea000726c108 ffffea0007159a08 0000000000000000 [ 61.671414][ T437] raw: 0000000000000000 0000000000000002 00000000ffffff7f 0000000000000000 [ 61.680083][ T437] page dumped because: kasan: bad access detected [ 61.686482][ T437] [ 61.688789][ T437] Memory state around the buggy address: [ 61.694598][ T437] ffff8881c5630780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 61.702662][ T437] ffff8881c5630800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 61.710716][ T437] >ffff8881c5630880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 61.719336][ T437] ^ [ 61.725750][ T437] ffff8881c5630900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 61.733814][ T437] ffff8881c5630980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 61.741860][ T437] ================================================================== [ 61.752703][ T437] Disabling lock debugging due to kernel taint [ 61.759464][ T437] Kernel panic - not syncing: panic_on_warn set ... [ 61.766553][ T437] CPU: 0 PID: 437 Comm: v4l_id Tainted: G B 5.7.0-rc1-syzkaller #0 [ 61.775740][ T437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.785949][ T437] Call Trace: [ 61.789219][ T437] dump_stack+0xef/0x16e [ 61.793547][ T437] panic+0x2aa/0x6e1 [ 61.797439][ T437] ? add_taint.cold+0x16/0x16 [ 61.802121][ T437] ? v4l2_fh_init+0x279/0x2c0 [ 61.806820][ T437] ? trace_hardirqs_on+0x55/0x200 [ 61.811850][ T437] ? v4l2_fh_init+0x279/0x2c0 [ 61.816506][ T437] end_report+0x4d/0x53 [ 61.820641][ T437] __kasan_report.cold+0x72/0x92 [ 61.825784][ T437] ? v4l2_fh_init+0x279/0x2c0 [ 61.830464][ T437] ? v4l2_fh_init+0x279/0x2c0 [ 61.835137][ T437] kasan_report+0x33/0x50 [ 61.839485][ T437] v4l2_fh_init+0x279/0x2c0 [ 61.843966][ T437] v4l2_fh_open+0x88/0xc0 [ 61.848536][ T437] em28xx_v4l2_open+0x11a/0x570 [ 61.853369][ T437] v4l2_open+0x20f/0x3d0 [ 61.857597][ T437] ? v4l2_release+0x390/0x390 [ 61.862252][ T437] chrdev_open+0x219/0x5c0 [ 61.866817][ T437] ? cdev_put.part.0+0x50/0x50 [ 61.871567][ T437] ? security_file_open+0x84/0x410 [ 61.876749][ T437] do_dentry_open+0x4ac/0x1160 [ 61.881514][ T437] ? cdev_put.part.0+0x50/0x50 [ 61.886265][ T437] ? chmod_common+0x3c0/0x3c0 [ 61.890935][ T437] ? inode_permission+0xbe/0x3a0 [ 61.895851][ T437] path_openat+0x1a0b/0x2740 [ 61.900628][ T437] ? do_sys_openat2+0x3fc/0x7d0 [ 61.905560][ T437] ? path_lookupat.isra.0+0x530/0x530 [ 61.910939][ T437] do_filp_open+0x192/0x260 [ 61.915425][ T437] ? may_open_dev+0xf0/0xf0 [ 61.920298][ T437] ? __alloc_fd+0x46d/0x600 [ 61.924808][ T437] ? do_raw_spin_lock+0x129/0x290 [ 61.929921][ T437] ? _raw_spin_unlock+0x1a/0x30 [ 61.935210][ T437] ? __alloc_fd+0x46d/0x600 [ 61.939888][ T437] do_sys_openat2+0x585/0x7d0 [ 61.944551][ T437] ? file_open_root+0x400/0x400 [ 61.949396][ T437] ? __secure_computing+0xb4/0x280 [ 61.954499][ T437] ? syscall_trace_enter+0x41d/0xcd0 [ 61.959863][ T437] do_sys_open+0xc3/0x140 [ 61.964177][ T437] ? filp_open+0x70/0x70 [ 61.968401][ T437] ? trace_hardirqs_off_caller+0x55/0x200 [ 61.974234][ T437] do_syscall_64+0xb6/0x5a0 [ 61.979253][ T437] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.985146][ T437] RIP: 0033:0x7f4b7120f840 [ 61.989578][ T437] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 62.009284][ T437] RSP: 002b:00007ffc5b2f1638 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 62.017717][ T437] RAX: ffffffffffffffda RBX: 00007ffc5b2f17a8 RCX: 00007f4b7120f840 [ 62.025781][ T437] RDX: 00007f4b711fbea0 RSI: 0000000000000000 RDI: 00007ffc5b2f1f25 [ 62.033884][ T437] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 62.041963][ T437] R10: 0000000000000002 R11: 0000000000000246 R12: 000056242adba8d0 [ 62.049929][ T437] R13: 00007ffc5b2f17a0 R14: 0000000000000000 R15: 0000000000000000 [ 62.059490][ T437] Kernel Offset: disabled [ 62.063807][ T437] Rebooting in 86400 seconds..