Warning: Permanently added '10.128.0.196' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 34.331309][ T4294] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.341256][ T2238] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.343177][ T2627] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.349134][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.356920][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 34.364375][ T17] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 34.591097][ T4294] usb 2-1: Using ep0 maxpacket: 32 [ 34.611349][ T2627] usb 4-1: Using ep0 maxpacket: 32 [ 34.616571][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 34.641104][ T2238] usb 3-1: Using ep0 maxpacket: 32 [ 34.646312][ T17] usb 5-1: Using ep0 maxpacket: 32 [ 34.651660][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 34.711348][ T4294] usb 2-1: config 0 has an invalid interface number: 192 but max is 0 [ 34.719722][ T4294] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 34.729758][ T4294] usb 2-1: config 0 has no interface number 0 [ 34.736000][ T4294] usb 2-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 34.746732][ T4294] usb 2-1: config 0 interface 192 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 34.757720][ T4294] usb 2-1: config 0 interface 192 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 34.768812][ T4294] usb 2-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 34.779631][ T4294] usb 2-1: config 0 interface 192 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 34.790749][ T4294] usb 2-1: config 0 interface 192 altsetting 8 endpoint 0x82 has invalid maxpacket 1587, setting to 64 [ 34.801805][ T4294] usb 2-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 34.811141][ T2238] usb 3-1: config 0 has an invalid interface number: 192 but max is 0 [ 34.812529][ T4294] usb 2-1: config 0 interface 192 altsetting 8 bulk endpoint 0xE has invalid maxpacket 64 [ 34.820647][ T2238] usb 3-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 34.830531][ T4294] usb 2-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 34.830551][ T4294] usb 2-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 34.840441][ T2238] usb 3-1: config 0 has no interface number 0 [ 34.840560][ T17] usb 5-1: config 0 has an invalid interface number: 192 but max is 0 [ 34.851098][ T4294] usb 2-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 34.861755][ T17] usb 5-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 34.861770][ T17] usb 5-1: config 0 has no interface number 0 [ 34.867810][ T4294] usb 2-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 34.875983][ T24] usb 1-1: config 0 has an invalid interface number: 192 but max is 0 [ 34.886617][ T4294] usb 2-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 34.896508][ T24] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 34.896525][ T24] usb 1-1: config 0 has no interface number 0 [ 34.902602][ T4294] usb 2-1: config 0 interface 192 altsetting 8 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 34.902615][ T4294] usb 2-1: config 0 interface 192 has no altsetting 0 [ 34.902691][ T2627] usb 4-1: config 0 has an invalid interface number: 192 but max is 0 [ 34.914291][ T2238] usb 3-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 34.921607][ T2627] usb 4-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 34.921619][ T2627] usb 4-1: config 0 has no interface number 0 [ 34.921668][ T7] usb 6-1: config 0 has an invalid interface number: 192 but max is 0 [ 34.932316][ T2238] usb 3-1: config 0 interface 192 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 34.942206][ T7] usb 6-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 34.948252][ T2238] usb 3-1: config 0 interface 192 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 34.961448][ T7] usb 6-1: config 0 has no interface number 0 [ 34.968162][ T2238] usb 3-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 34.976571][ T2627] usb 4-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 34.986994][ T2238] usb 3-1: config 0 interface 192 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 34.996842][ T2627] usb 4-1: config 0 interface 192 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 35.002864][ T2238] usb 3-1: config 0 interface 192 altsetting 8 endpoint 0x82 has invalid maxpacket 1587, setting to 64 [ 35.002883][ T2238] usb 3-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 35.011121][ T2627] usb 4-1: config 0 interface 192 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 35.022134][ T2238] usb 3-1: config 0 interface 192 altsetting 8 bulk endpoint 0xE has invalid maxpacket 64 [ 35.022149][ T2238] usb 3-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 35.022166][ T2238] usb 3-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 35.032141][ T2627] usb 4-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 35.043097][ T2238] usb 3-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 35.043118][ T2238] usb 3-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 35.049178][ T2627] usb 4-1: config 0 interface 192 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 35.059861][ T2238] usb 3-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 35.059886][ T2238] usb 3-1: config 0 interface 192 altsetting 8 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 35.070474][ T2627] usb 4-1: config 0 interface 192 altsetting 8 endpoint 0x82 has invalid maxpacket 1587, setting to 64 [ 35.081408][ T2238] usb 3-1: config 0 interface 192 has no altsetting 0 [ 35.082788][ T17] usb 5-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 35.092383][ T2627] usb 4-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 35.092411][ T2627] usb 4-1: config 0 interface 192 altsetting 8 bulk endpoint 0xE has invalid maxpacket 64 [ 35.092430][ T2627] usb 4-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 35.103443][ T17] usb 5-1: config 0 interface 192 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 35.103466][ T17] usb 5-1: config 0 interface 192 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 35.114182][ T2627] usb 4-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 35.125111][ T17] usb 5-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 35.134990][ T2627] usb 4-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 35.145673][ T17] usb 5-1: config 0 interface 192 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 35.156328][ T2627] usb 4-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 35.156342][ T2627] usb 4-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 35.156358][ T2627] usb 4-1: config 0 interface 192 altsetting 8 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 35.156379][ T2627] usb 4-1: config 0 interface 192 has no altsetting 0 [ 35.167050][ T17] usb 5-1: config 0 interface 192 altsetting 8 endpoint 0x82 has invalid maxpacket 1587, setting to 64 [ 35.205858][ T7] usb 6-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 35.210296][ T17] usb 5-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 35.223518][ T7] usb 6-1: config 0 interface 192 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 35.234510][ T17] usb 5-1: config 0 interface 192 altsetting 8 bulk endpoint 0xE has invalid maxpacket 64 [ 35.234525][ T17] usb 5-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 35.234546][ T17] usb 5-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 35.241317][ T7] usb 6-1: config 0 interface 192 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 35.251910][ T17] usb 5-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 35.262575][ T7] usb 6-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 35.262595][ T7] usb 6-1: config 0 interface 192 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 35.272471][ T17] usb 5-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 35.272490][ T17] usb 5-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 35.283088][ T7] usb 6-1: config 0 interface 192 altsetting 8 endpoint 0x82 has invalid maxpacket 1587, setting to 64 [ 35.294021][ T17] usb 5-1: config 0 interface 192 altsetting 8 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 35.304947][ T7] usb 6-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 35.315604][ T17] usb 5-1: config 0 interface 192 has no altsetting 0 [ 35.317322][ T24] usb 1-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 35.326311][ T7] usb 6-1: config 0 interface 192 altsetting 8 bulk endpoint 0xE has invalid maxpacket 64 [ 35.326328][ T7] usb 6-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 35.326343][ T7] usb 6-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 35.326364][ T7] usb 6-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 35.337029][ T24] usb 1-1: config 0 interface 192 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 35.337050][ T24] usb 1-1: config 0 interface 192 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 35.348002][ T7] usb 6-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 35.358729][ T24] usb 1-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 35.369397][ T7] usb 6-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 35.382586][ T24] usb 1-1: config 0 interface 192 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 35.382606][ T24] usb 1-1: config 0 interface 192 altsetting 8 endpoint 0x82 has invalid maxpacket 1587, setting to 64 [ 35.389348][ T7] usb 6-1: config 0 interface 192 altsetting 8 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 35.400375][ T24] usb 1-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 35.410942][ T7] usb 6-1: config 0 interface 192 has no altsetting 0 [ 35.600729][ T4294] usb 2-1: New USB device found, idVendor=eb1a, idProduct=5051, bcdDevice=14.94 [ 35.601307][ T24] usb 1-1: config 0 interface 192 altsetting 8 bulk endpoint 0xE has invalid maxpacket 64 [ 35.612001][ T4294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.622657][ T24] usb 1-1: config 0 interface 192 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 35.622675][ T24] usb 1-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 35.622692][ T24] usb 1-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 35.622715][ T24] usb 1-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 35.633674][ T4294] usb 2-1: Product: syz [ 35.644570][ T24] usb 1-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 35.644593][ T24] usb 1-1: config 0 interface 192 altsetting 8 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 35.655253][ T4294] usb 2-1: Manufacturer: syz [ 35.665911][ T24] usb 1-1: config 0 interface 192 has no altsetting 0 [ 35.838151][ T4294] usb 2-1: SerialNumber: syz [ 35.840408][ T17] usb 5-1: New USB device found, idVendor=eb1a, idProduct=5051, bcdDevice=14.94 [ 35.844259][ T2627] usb 4-1: New USB device found, idVendor=eb1a, idProduct=5051, bcdDevice=14.94 [ 35.851858][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.860897][ T2627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.868849][ T17] usb 5-1: Product: syz [ 35.876822][ T2627] usb 4-1: Product: syz [ 35.876837][ T2627] usb 4-1: Manufacturer: syz [ 35.880996][ T17] usb 5-1: Manufacturer: syz [ 35.881009][ T17] usb 5-1: SerialNumber: syz [ 35.885139][ T2627] usb 4-1: SerialNumber: syz [ 35.894691][ T2238] usb 3-1: New USB device found, idVendor=eb1a, idProduct=5051, bcdDevice=14.94 [ 35.898973][ T7] usb 6-1: New USB device found, idVendor=eb1a, idProduct=5051, bcdDevice=14.94 [ 35.903657][ T2238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.912689][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.921717][ T2238] usb 3-1: Product: syz [ 35.929670][ T7] usb 6-1: Product: syz [ 35.937667][ T2238] usb 3-1: Manufacturer: syz [ 35.941817][ T7] usb 6-1: Manufacturer: syz [ 35.945943][ T2238] usb 3-1: SerialNumber: syz [ 35.950531][ T7] usb 6-1: SerialNumber: syz [ 35.957968][ T24] usb 1-1: New USB device found, idVendor=eb1a, idProduct=5051, bcdDevice=14.94 [ 35.968612][ T2627] usb 4-1: config 0 descriptor?? [ 35.973446][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.973460][ T24] usb 1-1: Product: syz [ 35.973481][ T24] usb 1-1: Manufacturer: syz [ 35.973495][ T24] usb 1-1: SerialNumber: syz [ 35.979975][ T7] usb 6-1: config 0 descriptor?? [ 36.011462][ T2238] usb 3-1: config 0 descriptor?? [ 36.017383][ T17] usb 5-1: config 0 descriptor?? [ 36.023626][ T24] usb 1-1: config 0 descriptor?? [ 36.031698][ T4402] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 36.039726][ T4406] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 36.047470][ T4397] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 36.071420][ T4408] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 36.114934][ T4294] usb 2-1: config 0 descriptor?? [ 36.124527][ T4403] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 36.140930][ T4404] raw-gadget gadget: fail, usb_ep_enable returned -22 executing program executing program executing program executing program [ 36.303405][ T2238] em28xx 3-1:0.192: New device syz syz @ 480 Mbps (eb1a:5051, interface 192, class 192) [ 36.311727][ T2627] em28xx 4-1:0.192: New device syz syz @ 480 Mbps (eb1a:5051, interface 192, class 192) [ 36.313295][ T2238] em28xx 3-1:0.192: Video interface 192 found: [ 36.323191][ T2627] em28xx 4-1:0.192: Video interface 192 found: [ 36.342222][ T24] em28xx 1-1:0.192: New device syz syz @ 480 Mbps (eb1a:5051, interface 192, class 192) executing program executing program [ 36.352143][ T24] em28xx 1-1:0.192: Video interface 192 found: [ 36.362264][ T17] em28xx 5-1:0.192: New device syz syz @ 480 Mbps (eb1a:5051, interface 192, class 192) [ 36.372465][ T17] em28xx 5-1:0.192: Video interface 192 found: [ 36.382321][ T7] em28xx 6-1:0.192: New device syz syz @ 480 Mbps (eb1a:5051, interface 192, class 192) [ 36.392103][ T7] em28xx 6-1:0.192: Video interface 192 found: [ 36.412373][ T4294] em28xx 2-1:0.192: New device syz syz @ 480 Mbps (eb1a:5051, interface 192, class 192) [ 36.422131][ T4294] em28xx 2-1:0.192: Video interface 192 found: [ 36.554292][ T17] em28xx 5-1:0.192: unknown em28xx chip ID (0) [ 36.560783][ T2238] em28xx 3-1:0.192: unknown em28xx chip ID (0) [ 36.567145][ T24] em28xx 1-1:0.192: unknown em28xx chip ID (0) [ 36.590200][ T7] em28xx 6-1:0.192: unknown em28xx chip ID (0) [ 36.619891][ T4294] em28xx 2-1:0.192: unknown em28xx chip ID (0) [ 36.630740][ T2627] em28xx 4-1:0.192: unknown em28xx chip ID (0) [ 36.710225][ T2238] em28xx 3-1:0.192: reading from i2c device at 0xa0 failed (error=-5) [ 36.718714][ T2238] em28xx 3-1:0.192: board has no eeprom [ 36.720203][ T7] em28xx 6-1:0.192: reading from i2c device at 0xa0 failed (error=-5) [ 36.724516][ T24] em28xx 1-1:0.192: reading from i2c device at 0xa0 failed (error=-5) [ 36.732464][ T7] em28xx 6-1:0.192: board has no eeprom [ 36.740602][ T24] em28xx 1-1:0.192: board has no eeprom [ 36.740684][ T17] em28xx 5-1:0.192: reading from i2c device at 0xa0 failed (error=-5) [ 36.760162][ T17] em28xx 5-1:0.192: board has no eeprom [ 36.769814][ T2627] em28xx 4-1:0.192: reading from i2c device at 0xa0 failed (error=-5) [ 36.778067][ T2627] em28xx 4-1:0.192: board has no eeprom [ 36.784045][ T4294] em28xx 2-1:0.192: reading from i2c device at 0xa0 failed (error=-5) [ 36.792311][ T4294] em28xx 2-1:0.192: board has no eeprom [ 36.899647][ T17] em28xx 5-1:0.192: Identified as EM2860/TVP5150 Reference Design (card=29) [ 36.899668][ T2627] em28xx 4-1:0.192: Identified as EM2860/TVP5150 Reference Design (card=29) [ 36.908356][ T17] em28xx 5-1:0.192: analog set to bulk mode. [ 36.909796][ T24] em28xx 1-1:0.192: Identified as EM2860/TVP5150 Reference Design (card=29) [ 36.917133][ T2627] em28xx 4-1:0.192: analog set to bulk mode. [ 36.923222][ T24] em28xx 1-1:0.192: analog set to bulk mode. [ 36.931987][ T4294] em28xx 2-1:0.192: Identified as EM2860/TVP5150 Reference Design (card=29) [ 36.937913][ T2238] em28xx 3-1:0.192: Identified as EM2860/TVP5150 Reference Design (card=29) [ 36.943971][ T4294] em28xx 2-1:0.192: analog set to bulk mode. [ 36.952564][ T2238] em28xx 3-1:0.192: analog set to bulk mode. [ 36.957359][ T17] usb 5-1: USB disconnect, device number 2 [ 36.961310][ T7] em28xx 6-1:0.192: Identified as EM2860/TVP5150 Reference Design (card=29) [ 36.987819][ T7] em28xx 6-1:0.192: analog set to bulk mode. [ 36.990567][ T2238] usb 3-1: USB disconnect, device number 2 [ 37.018547][ T4417] em28xx 4-1:0.192: Registering V4L2 extension [ 37.022049][ T17] em28xx 5-1:0.192: Disconnecting em28xx [ 37.029439][ T4294] usb 2-1: USB disconnect, device number 2 [ 37.044815][ T24] usb 1-1: USB disconnect, device number 2 [ 37.064620][ T2627] usb 4-1: USB disconnect, device number 2 [ 37.074175][ T7] usb 6-1: USB disconnect, device number 2 [ 37.081072][ T4294] em28xx 2-1:0.192: Disconnecting em28xx [ 37.089219][ T2238] em28xx 3-1:0.192: Disconnecting em28xx [ 37.104475][ T24] em28xx 1-1:0.192: Disconnecting em28xx [ 37.108331][ T2627] em28xx 4-1:0.192: Disconnecting em28xx [ 37.124656][ T7] em28xx 6-1:0.192: Disconnecting em28xx [ 37.163604][ T4417] em28xx 4-1:0.192: Config register raw data: 0xffffffed [ 37.170920][ T4417] em28xx 4-1:0.192: AC97 chip type couldn't be determined [ 37.178043][ T4417] em28xx 4-1:0.192: No AC97 audio processor [ 37.191238][ T4417] usb 4-1: Decoder not found [ 37.195939][ T4417] em28xx 4-1:0.192: failed to create media graph [ 37.203025][ T4417] em28xx 4-1:0.192: V4L2 device video0 deregistered [ 37.214341][ T4417] em28xx 4-1:0.192: Remote control support is not available for this card. [ 37.223305][ T4419] em28xx 5-1:0.192: Registering V4L2 extension [ 37.237775][ T4419] em28xx 5-1:0.192: Config register raw data: 0xffffffed [ 37.245121][ T4419] em28xx 5-1:0.192: AC97 chip type couldn't be determined [ 37.252305][ T4419] em28xx 5-1:0.192: No AC97 audio processor [ 37.260275][ T4419] usb 5-1: Decoder not found [ 37.264885][ T4419] em28xx 5-1:0.192: failed to create media graph [ 37.271989][ T4419] em28xx 5-1:0.192: V4L2 device video0 deregistered [ 37.280290][ T4419] em28xx 5-1:0.192: Remote control support is not available for this card. [ 37.280548][ T4509] ================================================================== [ 37.289037][ T2212] em28xx 1-1:0.192: Registering V4L2 extension [ 37.297123][ T4509] BUG: KASAN: use-after-free in v4l2_fh_init+0x279/0x2c0 [ 37.297136][ T4509] Read of size 8 at addr ffff8881068008b0 by task v4l_id/4509 [ 37.297140][ T4509] [ 37.297155][ T4509] CPU: 0 PID: 4509 Comm: v4l_id Not tainted 5.10.0-syzkaller #0 [ 37.297163][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.297168][ T4509] Call Trace: [ 37.297185][ T4509] dump_stack+0x107/0x163 [ 37.297196][ T4509] ? v4l2_fh_init+0x279/0x2c0 [ 37.297207][ T4509] ? v4l2_fh_init+0x279/0x2c0 [ 37.297234][ T4509] print_address_description.constprop.0.cold+0xae/0x4c8 [ 37.297249][ T4509] ? vprintk_func+0x93/0x140 [ 37.297260][ T4509] ? v4l2_fh_init+0x279/0x2c0 [ 37.297271][ T4509] ? v4l2_fh_init+0x279/0x2c0 [ 37.297281][ T4509] kasan_report.cold+0x1f/0x37 [ 37.297295][ T4509] ? memmove+0x60/0x60 [ 37.297306][ T4509] ? v4l2_fh_init+0x279/0x2c0 [ 37.297333][ T4509] v4l2_fh_init+0x279/0x2c0 [ 37.297346][ T4509] v4l2_fh_open+0x88/0xc0 [ 37.297361][ T4509] em28xx_v4l2_open+0x11c/0x570 [ 37.297376][ T4509] v4l2_open+0x21c/0x3f0 [ 37.297397][ T4509] ? v4l2_release+0x3b0/0x3b0 [ 37.311801][ T2212] em28xx 1-1:0.192: Config register raw data: 0xffffffed [ 37.317964][ T4509] chrdev_open+0x266/0x770 [ 37.317984][ T4509] ? cdev_device_add+0x210/0x210 [ 37.320551][ T2212] em28xx 1-1:0.192: AC97 chip type couldn't be determined [ 37.327986][ T4509] ? security_file_open+0x205/0x4f0 [ 37.328008][ T4509] do_dentry_open+0x4b4/0x1090 [ 37.338070][ T2212] em28xx 1-1:0.192: No AC97 audio processor [ 37.341298][ T4509] ? cdev_device_add+0x210/0x210 [ 37.341311][ T4509] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 37.341329][ T4509] ? may_open+0x1e4/0x400 [ 37.350677][ T2212] usb 1-1: Decoder not found [ 37.354950][ T4509] path_openat+0x1bdc/0x27a0 [ 37.361959][ T2212] em28xx 1-1:0.192: failed to create media graph [ 37.366507][ T4509] ? path_lookupat+0x830/0x830 [ 37.389337][ T2212] em28xx 1-1:0.192: V4L2 device video1 deregistered [ 37.393753][ T4509] ? lock_downgrade+0x6d0/0x6d0 [ 37.410400][ T2212] em28xx 1-1:0.192: Remote control support is not available for this card. [ 37.411774][ T4509] ? lockdep_hardirqs_on_prepare+0x3f0/0x3f0 [ 37.418776][ T4500] em28xx 3-1:0.192: Registering V4L2 extension [ 37.423152][ T4509] do_filp_open+0x17e/0x3c0 [ 37.423166][ T4509] ? may_open_dev+0xf0/0xf0 [ 37.423187][ T4509] ? do_raw_spin_lock+0x120/0x2b0 [ 37.423209][ T4509] ? rwlock_bug.part.0+0x90/0x90 [ 37.485768][ T4500] em28xx 3-1:0.192: Config register raw data: 0xffffffed [ 37.486706][ T4509] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 37.493291][ T4500] em28xx 3-1:0.192: AC97 chip type couldn't be determined [ 37.498090][ T4509] ? _raw_spin_unlock+0x1a/0x30 [ 37.498109][ T4509] ? alloc_fd+0x2da/0x650 [ 37.506722][ T4500] em28xx 3-1:0.192: No AC97 audio processor [ 37.512634][ T4509] do_sys_openat2+0x16d/0x420 [ 37.512651][ T4509] ? build_open_flags+0x680/0x680 [ 37.512671][ T4509] __x64_sys_open+0x119/0x1c0 [ 37.539617][ T4500] usb 3-1: Decoder not found [ 37.544718][ T4509] ? do_sys_open+0x140/0x140 [ 37.550945][ T4500] em28xx 3-1:0.192: failed to create media graph [ 37.558002][ T4509] ? __secure_computing+0xb4/0x290 [ 37.558022][ T4509] do_syscall_64+0x2d/0x40 [ 37.581460][ T4500] em28xx 3-1:0.192: V4L2 device video1 deregistered [ 37.582780][ T4509] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 37.588617][ T4500] em28xx 3-1:0.192: Remote control support is not available for this card. [ 37.591991][ T4509] RIP: 0033:0x7fe4c7b68840 [ 37.592006][ T4509] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 37.592016][ T4509] RSP: 002b:00007ffe08204868 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 37.592033][ T4509] RAX: ffffffffffffffda RBX: 00007ffe082049d8 RCX: 00007fe4c7b68840 [ 37.592047][ T4509] RDX: 00007fe4c7b54ea0 RSI: 0000000000000000 RDI: 00007ffe08204f23 [ 37.596822][ T4520] general protection fault, probably for non-canonical address 0xdffffc0000000410: 0000 [#1] SMP KASAN [ 37.602930][ T4509] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 37.608012][ T4520] KASAN: probably user-memory-access in range [0x0000000000002080-0x0000000000002087] [ 37.612396][ T4509] R10: 0000000000000002 R11: 0000000000000246 R12: 00005587a0da08d0 [ 37.618953][ T4520] CPU: 1 PID: 4520 Comm: v4l_id Not tainted 5.10.0-syzkaller #0 [ 37.624812][ T4509] R13: 00007ffe082049d0 R14: 0000000000000000 R15: 0000000000000000 [ 37.633368][ T4520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.637749][ T4509] [ 37.657356][ T4520] RIP: 0010:em28xx_resolution_set.isra.0+0xe8/0x730 [ 37.665739][ T4509] The buggy address belongs to the page: [ 37.673692][ T4520] Code: 0f 85 cd 05 00 00 44 0f b6 a5 3c 01 00 00 48 8d bb 80 20 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 41 83 e4 10 <80> 3c 02 00 0f 85 19 06 00 00 48 8b 83 80 20 00 00 31 ff 44 89 e6 [ 37.681650][ T4509] page:00000000dbd868f8 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x106800 [ 37.692625][ T4520] RSP: 0018:ffffc90000637840 EFLAGS: 00010246 [ 37.700570][ T4509] flags: 0x200000000000000() [ 37.710070][ T4520] [ 37.718020][ T4509] raw: 0200000000000000 ffff88823fffab50 ffff88823fffab50 0000000000000000 [ 37.725612][ T4520] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 37.733557][ T4509] raw: 0000000000000000 0000000000000002 00000000ffffff7f 0000000000000000 [ 37.743753][ T4520] RDX: 0000000000000410 RSI: ffffffff84407d2d RDI: 0000000000002080 [ 37.746054][ T4509] page dumped because: kasan: bad access detected [ 37.752615][ T4520] RBP: ffff888110dac000 R08: 0000000000000002 R09: ffffffff8a033677 [ 37.758209][ T4509] [ 37.777800][ T4520] R10: ffffffff84409d04 R11: 0000000000000000 R12: 0000000000000000 [ 37.788317][ T4509] Memory state around the buggy address: [ 37.788342][ T4509] ffff888106800780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.794417][ T4520] R13: ffff888110dac000 R14: ffff888110dac13c R15: 0000000000000000 [ 37.798980][ T4509] ffff888106800800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.801290][ T4520] FS: 00007f1fb6c6d700(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 37.809842][ T4509] >ffff888106800880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.817793][ T4520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.826343][ T4509] ^ [ 37.834292][ T4520] CR2: 000055eb516b35c8 CR3: 00000001088a1000 CR4: 00000000001506e0 [ 37.840688][ T4509] ffff888106800900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.848642][ T4520] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.850944][ T4509] ffff888106800980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.858889][ T4520] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.864485][ T4509] ================================================================== [ 37.872514][ T4520] Call Trace: [ 37.880697][ T4509] Kernel panic - not syncing: panic_on_warn set ... [ 37.888513][ T4520] ? v4l2_fh_open+0x90/0xc0 [ 37.979819][ T4520] ? em28xx_set_outfmt.isra.0+0x420/0x420 [ 37.985539][ T4520] ? em28xx_write_reg_bits+0x110/0x110 [ 37.990997][ T4520] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 37.996958][ T4520] em28xx_v4l2_open+0x45b/0x570 [ 38.001791][ T4520] v4l2_open+0x21c/0x3f0 [ 38.006011][ T4520] ? v4l2_release+0x3b0/0x3b0 [ 38.010668][ T4520] chrdev_open+0x266/0x770 [ 38.015063][ T4520] ? cdev_device_add+0x210/0x210 [ 38.019998][ T4520] ? security_file_open+0x205/0x4f0 [ 38.025178][ T4520] do_dentry_open+0x4b4/0x1090 [ 38.029923][ T4520] ? cdev_device_add+0x210/0x210 [ 38.034845][ T4520] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 38.041065][ T4520] ? may_open+0x1e4/0x400 [ 38.045464][ T4520] path_openat+0x1bdc/0x27a0 [ 38.050036][ T4520] ? path_lookupat+0x830/0x830 [ 38.054785][ T4520] ? get_partial_node.part.0+0x24c/0x300 [ 38.060398][ T4520] ? lockdep_hardirqs_on_prepare+0x3f0/0x3f0 [ 38.066351][ T4520] do_filp_open+0x17e/0x3c0 [ 38.070828][ T4520] ? may_open_dev+0xf0/0xf0 [ 38.075306][ T4520] ? do_raw_spin_lock+0x120/0x2b0 [ 38.080333][ T4520] ? rwlock_bug.part.0+0x90/0x90 [ 38.085274][ T4520] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 38.091525][ T4520] ? _raw_spin_unlock+0x1a/0x30 [ 38.096358][ T4520] ? alloc_fd+0x2da/0x650 [ 38.100669][ T4520] do_sys_openat2+0x16d/0x420 [ 38.105326][ T4520] ? build_open_flags+0x680/0x680 [ 38.110328][ T4520] __x64_sys_open+0x119/0x1c0 [ 38.114983][ T4520] ? do_sys_open+0x140/0x140 [ 38.119551][ T4520] ? __secure_computing+0xb4/0x290 [ 38.124645][ T4520] do_syscall_64+0x2d/0x40 [ 38.129040][ T4520] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 38.134908][ T4520] RIP: 0033:0x7f1fb663d840 [ 38.139431][ T4520] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 38.159009][ T4520] RSP: 002b:00007ffc9a812dd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 38.167399][ T4520] RAX: ffffffffffffffda RBX: 00007ffc9a812f48 RCX: 00007f1fb663d840 [ 38.175348][ T4520] RDX: 00007f1fb6629ea0 RSI: 0000000000000000 RDI: 00007ffc9a814f23 [ 38.183428][ T4520] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 38.191387][ T4520] R10: 0000000000000002 R11: 0000000000000246 R12: 00005595f11448d0 [ 38.199347][ T4520] R13: 00007ffc9a812f40 R14: 0000000000000000 R15: 0000000000000000 [ 38.207322][ T4520] Modules linked in: [ 38.211841][ T4509] Kernel Offset: disabled [ 38.216156][ T4509] Rebooting in 86400 seconds..