Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 12.465232][ C0] random: crng init done [ 12.466076][ C0] random: 7 urandom warning(s) missed due to ratelimiting [ 20.009733][ T326] can: request_module (can-proto-0) failed. [ 20.014456][ T326] can: request_module (can-proto-0) failed. [ 20.018729][ T326] can: request_module (can-proto-7) failed. [ 20.023764][ T326] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.228' (ECDSA) to the list of known hosts. 2020/10/11 16:22:23 parsed 1 programs 2020/10/11 16:22:23 executed programs: 0 [ 26.889673][ T484] cgroup: Unknown subsys name 'perf_event' [ 26.916996][ T484] cgroup: Unknown subsys name 'net_cls' [ 26.918060][ T487] cgroup: Unknown subsys name 'perf_event' [ 26.941082][ T489] cgroup: Unknown subsys name 'perf_event' [ 26.945456][ T490] cgroup: Unknown subsys name 'perf_event' [ 26.949039][ T489] cgroup: Unknown subsys name 'net_cls' [ 26.953843][ T491] cgroup: Unknown subsys name 'perf_event' [ 26.960157][ T493] cgroup: Unknown subsys name 'perf_event' [ 26.965052][ T490] cgroup: Unknown subsys name 'net_cls' [ 26.971152][ T487] cgroup: Unknown subsys name 'net_cls' [ 26.986002][ T493] cgroup: Unknown subsys name 'net_cls' [ 26.993922][ T491] cgroup: Unknown subsys name 'net_cls' [ 34.222265][ T501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.230328][ T501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.273758][ T2186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.281656][ T2186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.313068][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.343854][ T504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.351734][ T504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.363569][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.414080][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.422058][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.434057][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.458733][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.485819][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.494109][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.525593][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.557242][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.565228][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.581120][ T496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.589118][ T496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.622811][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.630683][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.635642][ T3162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.655870][ T3162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.663838][ T3162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.677616][ T499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.685536][ T499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.706736][ T496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.715557][ T496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.721522][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.743997][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.844711][ T3111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.852800][ T3111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.860249][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.873607][ T3162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.894160][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.902543][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.911473][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.982254][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 35.062174][ T72] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 35.092171][ T17] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.112210][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 35.152205][ T3162] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.222156][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 35.252182][ T3203] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.259791][ T22] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 35.268034][ T22] usb 4-1: config 0 has no interface number 0 [ 35.274370][ T22] usb 4-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 35.284146][ T22] usb 4-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 35.293943][ T22] usb 4-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 35.302244][ T72] usb 6-1: Using ep0 maxpacket: 8 [ 35.303805][ T22] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 35.318215][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.329216][ T22] usb 4-1: config 0 descriptor?? [ 35.342318][ T5] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 35.350442][ T5] usb 3-1: config 0 has no interface number 0 [ 35.356983][ T5] usb 3-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 35.367014][ T5] usb 3-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 35.376785][ T5] usb 3-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 35.382100][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 35.386652][ T5] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 35.396931][ T22] em28xx 4-1:0.86: New device @ 480 Mbps (0ccd:10af, interface 86, class 86) [ 35.400682][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.408625][ T5] usb 3-1: config 0 descriptor?? [ 35.409776][ T22] em28xx 4-1:0.86: Video interface 86 found: [ 35.430146][ T3162] usb 2-1: Using ep0 maxpacket: 8 [ 35.432122][ T72] usb 6-1: config 0 has an invalid interface number: 86 but max is 0 [ 35.443365][ T72] usb 6-1: config 0 has no interface number 0 [ 35.450589][ T72] usb 6-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 35.460533][ T72] usb 6-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 35.470515][ T72] usb 6-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 35.480524][ T72] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 35.489589][ T72] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.499628][ T5] em28xx 3-1:0.86: New device @ 480 Mbps (0ccd:10af, interface 86, class 86) [ 35.508679][ T5] em28xx 3-1:0.86: Video interface 86 found: [ 35.518124][ T72] usb 6-1: config 0 descriptor?? [ 35.532389][ T17] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 35.540514][ T17] usb 5-1: config 0 has no interface number 0 [ 35.547018][ T17] usb 5-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 35.557037][ T17] usb 5-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 35.566942][ T17] usb 5-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 35.568178][ T72] em28xx 6-1:0.86: New device @ 480 Mbps (0ccd:10af, interface 86, class 86) [ 35.576785][ T17] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 35.576801][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.576954][ T3162] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 35.585801][ T72] em28xx 6-1:0.86: Video interface 86 found: [ 35.594853][ T3162] usb 2-1: config 0 has no interface number 0 [ 35.623049][ T3203] usb 1-1: Using ep0 maxpacket: 8 [ 35.637195][ T3162] usb 2-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 35.647083][ T3162] usb 2-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 35.656845][ T3162] usb 2-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 35.666745][ T3162] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 35.675812][ T3162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.684678][ T17] usb 5-1: config 0 descriptor?? [ 35.701646][ T3162] usb 2-1: config 0 descriptor?? [ 35.723897][ T17] em28xx 5-1:0.86: New device @ 480 Mbps (0ccd:10af, interface 86, class 86) [ 35.733900][ T17] em28xx 5-1:0.86: Video interface 86 found: [ 35.739965][ T22] em28xx 4-1:0.86: unknown em28xx chip ID (0) [ 35.742147][ T5] em28xx 3-1:0.86: unknown em28xx chip ID (0) [ 35.754349][ T3162] em28xx 2-1:0.86: New device @ 480 Mbps (0ccd:10af, interface 86, class 86) [ 35.763454][ T3162] em28xx 2-1:0.86: Video interface 86 found: [ 35.792134][ T3203] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 35.800245][ T3203] usb 1-1: config 0 has no interface number 0 [ 35.806433][ T3203] usb 1-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 35.816276][ T3203] usb 1-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 35.826460][ T3203] usb 1-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 35.831995][ T72] em28xx 6-1:0.86: unknown em28xx chip ID (0) [ 35.836606][ T3203] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 35.851387][ T3203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.861261][ T3203] usb 1-1: config 0 descriptor?? [ 35.902095][ T5] em28xx 3-1:0.86: reading from i2c device at 0xa0 failed (error=-5) [ 35.910308][ T5] em28xx 3-1:0.86: board has no eeprom [ 35.914028][ T3203] em28xx 1-1:0.86: New device @ 480 Mbps (0ccd:10af, interface 86, class 86) [ 35.924998][ T3203] em28xx 1-1:0.86: Video interface 86 found: [ 35.961961][ T22] em28xx 4-1:0.86: reading from i2c device at 0xa0 failed (error=-5) [ 35.970071][ T22] em28xx 4-1:0.86: board has no eeprom [ 35.991954][ T72] em28xx 6-1:0.86: reading from i2c device at 0xa0 failed (error=-5) [ 36.000046][ T72] em28xx 6-1:0.86: board has no eeprom [ 36.021903][ T5] em28xx 3-1:0.86: Identified as Terratec Grabby (card=67) [ 36.022011][ T17] em28xx 5-1:0.86: unknown em28xx chip ID (0) [ 36.029395][ T5] em28xx 3-1:0.86: analog set to bulk mode. [ 36.038941][ T5] usb 3-1: USB disconnect, device number 2 [ 36.042052][ T3162] em28xx 2-1:0.86: unknown em28xx chip ID (0) [ 36.050101][ T5] em28xx 3-1:0.86: Disconnecting em28xx [ 36.064898][ T3204] em28xx 3-1:0.86: Registering V4L2 extension [ 36.077593][ T3204] em28xx 3-1:0.86: Config register raw data: 0xffffffed [ 36.084674][ T3204] em28xx 3-1:0.86: AC97 chip type couldn't be determined [ 36.091683][ T3204] em28xx 3-1:0.86: No AC97 audio processor [ 36.102041][ T3204] usb 3-1: Decoder not found [ 36.106634][ T3204] em28xx 3-1:0.86: failed to create media graph [ 36.114354][ T72] em28xx 6-1:0.86: Identified as Terratec Grabby (card=67) [ 36.121547][ T72] em28xx 6-1:0.86: analog set to bulk mode. [ 36.131935][ T22] em28xx 4-1:0.86: Identified as Terratec Grabby (card=67) [ 36.139226][ T22] em28xx 4-1:0.86: analog set to bulk mode. [ 36.143434][ T72] usb 6-1: USB disconnect, device number 2 [ 36.156841][ T3204] em28xx 3-1:0.86: V4L2 device video0 deregistered [ 36.163400][ T22] usb 4-1: USB disconnect, device number 2 [ 36.164444][ T22] em28xx 4-1:0.86: Disconnecting em28xx [ 36.169353][ T72] em28xx 6-1:0.86: Disconnecting em28xx [ 36.186176][ T3204] em28xx 3-1:0.86: Registering snapshot button... [ 36.194253][ T3204] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.86/input/input5 [ 36.201896][ T3203] em28xx 1-1:0.86: unknown em28xx chip ID (0) [ 36.208330][ T3204] em28xx 3-1:0.86: Remote control support is not available for this card. [ 36.219485][ T3215] em28xx 4-1:0.86: Registering V4L2 extension [ 36.227050][ T3162] em28xx 2-1:0.86: reading from i2c device at 0xa0 failed (error=-5) [ 36.235952][ T3162] em28xx 2-1:0.86: board has no eeprom [ 36.241579][ T17] em28xx 5-1:0.86: reading from i2c device at 0xa0 failed (error=-5) [ 36.250032][ T17] em28xx 5-1:0.86: board has no eeprom [ 36.260503][ T3215] em28xx 4-1:0.86: Config register raw data: 0xffffffed [ 36.267499][ T3215] em28xx 4-1:0.86: AC97 chip type couldn't be determined [ 36.274625][ T3215] em28xx 4-1:0.86: No AC97 audio processor [ 36.285741][ T3215] usb 4-1: Decoder not found [ 36.290343][ T3215] em28xx 4-1:0.86: failed to create media graph [ 36.300511][ T3215] em28xx 4-1:0.86: V4L2 device video0 deregistered [ 36.308568][ T3215] em28xx 4-1:0.86: Registering snapshot button... [ 36.318307][ T3215] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.86/input/input6 [ 36.332548][ T3215] em28xx 4-1:0.86: Remote control support is not available for this card. [ 36.342760][ T22] em28xx 4-1:0.86: Closing input extension [ 36.348765][ T22] em28xx 4-1:0.86: Deregistering snapshot button [ 36.362826][ T17] em28xx 5-1:0.86: Identified as Terratec Grabby (card=67) [ 36.370045][ T17] em28xx 5-1:0.86: analog set to bulk mode. [ 36.376110][ T3162] em28xx 2-1:0.86: Identified as Terratec Grabby (card=67) [ 36.383418][ T3162] em28xx 2-1:0.86: analog set to bulk mode. [ 36.389463][ T3203] em28xx 1-1:0.86: reading from i2c device at 0xa0 failed (error=-5) [ 36.397793][ T3203] em28xx 1-1:0.86: board has no eeprom [ 36.407028][ T5] em28xx 3-1:0.86: Closing input extension [ 36.413819][ T5] em28xx 3-1:0.86: Deregistering snapshot button [ 36.415097][ T22] em28xx 4-1:0.86: Freeing device [ 36.427706][ T3204] em28xx 6-1:0.86: Registering V4L2 extension [ 36.433297][ T17] usb 5-1: USB disconnect, device number 2 [ 36.435218][ T5] em28xx 3-1:0.86: Freeing device [ 36.440951][ T17] em28xx 5-1:0.86: Disconnecting em28xx [ 36.450595][ T3162] usb 2-1: USB disconnect, device number 2 [ 36.472304][ T3162] em28xx 2-1:0.86: Disconnecting em28xx [ 36.482864][ T3204] em28xx 6-1:0.86: Config register raw data: 0xffffffed [ 36.489804][ T3204] em28xx 6-1:0.86: AC97 chip type couldn't be determined [ 36.497009][ T3204] em28xx 6-1:0.86: No AC97 audio processor [ 36.511825][ T3203] em28xx 1-1:0.86: Identified as Terratec Grabby (card=67) [ 36.519202][ T3203] em28xx 1-1:0.86: analog set to bulk mode. [ 36.525789][ T3204] usb 6-1: Decoder not found [ 36.530459][ T3204] em28xx 6-1:0.86: failed to create media graph [ 36.539550][ T3203] usb 1-1: USB disconnect, device number 2 [ 36.547487][ T3204] em28xx 6-1:0.86: V4L2 device video0 deregistered [ 36.554384][ T3203] em28xx 1-1:0.86: Disconnecting em28xx [ 36.559495][ T3204] em28xx 6-1:0.86: Registering snapshot button... [ 36.572284][ T3204] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.86/input/input7 [ 36.583880][ T3204] em28xx 6-1:0.86: Remote control support is not available for this card. [ 36.592528][ T3215] em28xx 5-1:0.86: Registering V4L2 extension [ 36.609705][ T3215] em28xx 5-1:0.86: Config register raw data: 0xffffffed [ 36.616731][ T3215] em28xx 5-1:0.86: AC97 chip type couldn't be determined [ 36.624045][ T3215] em28xx 5-1:0.86: No AC97 audio processor [ 36.630894][ T3215] usb 5-1: Decoder not found [ 36.635587][ T3215] em28xx 5-1:0.86: failed to create media graph [ 36.646617][ T3215] em28xx 5-1:0.86: V4L2 device video0 deregistered [ 36.654556][ T3215] em28xx 5-1:0.86: Registering snapshot button... [ 36.667545][ T3215] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.86/input/input8 [ 36.678697][ T3215] em28xx 5-1:0.86: Remote control support is not available for this card. [ 36.687421][ T3243] em28xx 2-1:0.86: Registering V4L2 extension [ 36.700148][ T3243] em28xx 2-1:0.86: Config register raw data: 0xffffffed [ 36.707385][ T3243] em28xx 2-1:0.86: AC97 chip type couldn't be determined [ 36.714667][ T3243] em28xx 2-1:0.86: No AC97 audio processor [ 36.721477][ T3243] usb 2-1: Decoder not found [ 36.726129][ T3243] em28xx 2-1:0.86: failed to create media graph [ 36.732467][ T3243] em28xx 2-1:0.86: V4L2 device video0 deregistered [ 36.739695][ T3243] em28xx 2-1:0.86: Registering snapshot button... [ 36.749255][ T3243] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.86/input/input9 [ 36.760573][ T3243] em28xx 2-1:0.86: Remote control support is not available for this card. [ 36.769241][ T3254] em28xx 1-1:0.86: Registering V4L2 extension [ 36.786278][ T3254] em28xx 1-1:0.86: Config register raw data: 0xffffffed [ 36.793303][ T3254] em28xx 1-1:0.86: AC97 chip type couldn't be determined [ 36.800371][ T3254] em28xx 1-1:0.86: No AC97 audio processor [ 36.801652][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.809598][ T3254] usb 1-1: Decoder not found [ 36.818293][ T3254] em28xx 1-1:0.86: failed to create media graph [ 36.824933][ T3254] em28xx 1-1:0.86: V4L2 device video0 deregistered [ 36.832443][ T3254] em28xx 1-1:0.86: Registering snapshot button... [ 36.839722][ T3254] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.86/input/input10 [ 36.853288][ T3254] em28xx 1-1:0.86: Remote control support is not available for this card. [ 36.861861][ T72] em28xx 6-1:0.86: Closing input extension [ 36.867832][ T72] em28xx 6-1:0.86: Deregistering snapshot button [ 36.881635][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.893187][ T17] em28xx 5-1:0.86: Closing input extension [ 36.898633][ T72] em28xx 6-1:0.86: Freeing device [ 36.899192][ T17] em28xx 5-1:0.86: Deregistering snapshot button [ 36.920112][ T3162] em28xx 2-1:0.86: Closing input extension [ 36.926458][ T3162] em28xx 2-1:0.86: Deregistering snapshot button [ 36.934737][ T17] em28xx 5-1:0.86: Freeing device [ 36.943679][ T3203] em28xx 1-1:0.86: Closing input extension [ 36.954165][ T3162] em28xx 2-1:0.86: Freeing device [ 36.959431][ T3203] em28xx 1-1:0.86: Deregistering snapshot button [ 36.977586][ T3203] em28xx 1-1:0.86: Freeing device [ 37.052683][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 37.122354][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 37.171641][ T5] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 37.179754][ T5] usb 3-1: config 0 has no interface number 0 [ 37.186196][ T5] usb 3-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 37.195974][ T5] usb 3-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 37.205747][ T5] usb 3-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.215602][ T5] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 37.224683][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.236308][ T5] usb 3-1: config 0 descriptor?? [ 37.251676][ T22] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 37.259772][ T22] usb 4-1: config 0 has no interface number 0 [ 37.267759][ T22] usb 4-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 37.273919][ T5] em28xx 3-1:0.86: New device @ 480 Mbps (0ccd:10af, interface 86, class 86) [ 37.277762][ T22] usb 4-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 37.286500][ T5] em28xx 3-1:0.86: Video interface 86 found: [ 37.301700][ T72] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 37.302254][ T22] usb 4-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.302284][ T22] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 37.302299][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.334955][ T22] usb 4-1: config 0 descriptor?? [ 37.342080][ T17] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 37.349689][ T3162] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.381711][ T3203] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.414199][ T22] em28xx 4-1:0.86: New device @ 480 Mbps (0ccd:10af, interface 86, class 86) [ 37.423223][ T22] em28xx 4-1:0.86: Video interface 86 found: 2020/10/11 16:22:34 executed programs: 6 [ 37.521666][ T5] em28xx 3-1:0.86: unknown em28xx chip ID (0) [ 37.581579][ T72] usb 6-1: Using ep0 maxpacket: 8 [ 37.621449][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 37.626621][ T3162] usb 2-1: Using ep0 maxpacket: 8 [ 37.651566][ T22] em28xx 4-1:0.86: unknown em28xx chip ID (0) [ 37.671476][ T3203] usb 1-1: Using ep0 maxpacket: 8 [ 37.671542][ T5] em28xx 3-1:0.86: reading from i2c device at 0xa0 failed (error=-5) [ 37.684724][ T5] em28xx 3-1:0.86: board has no eeprom [ 37.701458][ T72] usb 6-1: config 0 has an invalid interface number: 86 but max is 0 [ 37.709571][ T72] usb 6-1: config 0 has no interface number 0 [ 37.716669][ T72] usb 6-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 37.726440][ T72] usb 6-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 37.736227][ T72] usb 6-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.746070][ T72] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 37.755145][ T72] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.764532][ T72] usb 6-1: config 0 descriptor?? [ 37.771492][ T3162] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 37.779594][ T3162] usb 2-1: config 0 has no interface number 0 [ 37.785740][ T17] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 37.793864][ T17] usb 5-1: config 0 has no interface number 0 [ 37.801763][ T72] usb 6-1: can't set config #0, error -71 [ 37.805584][ T17] usb 5-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 37.811181][ T72] usb 6-1: USB disconnect, device number 3 [ 37.817303][ T17] usb 5-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 37.817321][ T17] usb 5-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.831457][ T5] em28xx 3-1:0.86: Identified as Terratec Grabby (card=67) [ 37.833000][ T17] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 37.842698][ T5] em28xx 3-1:0.86: analog set to bulk mode. [ 37.849867][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.873780][ T3203] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 37.881921][ T3203] usb 1-1: config 0 has no interface number 0 [ 37.891582][ T22] em28xx 4-1:0.86: reading from i2c device at 0xa0 failed (error=-5) [ 37.899674][ T22] em28xx 4-1:0.86: board has no eeprom [ 37.907439][ T3204] em28xx 3-1:0.86: Registering V4L2 extension [ 37.907875][ T3162] usb 2-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 37.923369][ T3162] usb 2-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 37.923616][ T5] usb 3-1: USB disconnect, device number 3 [ 37.933119][ T3162] usb 2-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.933149][ T3162] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 37.933164][ T3162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.939995][ T3203] usb 1-1: config 0 interface 86 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 37.976013][ T3203] usb 1-1: config 0 interface 86 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 37.986026][ T3203] usb 1-1: config 0 interface 86 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.995906][ T3203] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=77.fc [ 38.004986][ T3203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.024359][ T5] em28xx 3-1:0.86: Disconnecting em28xx [ 38.025472][ T3162] usb 2-1: config 0 descriptor?? [ 38.046007][ T17] usb 5-1: config 0 descriptor?? [ 38.051120][ T3204] em28xx 3-1:0.86: Config register raw data: 0xffffffed [ 38.055766][ T3203] usb 1-1: config 0 descriptor?? [ 38.058254][ T3204] em28xx 3-1:0.86: AC97 chip type couldn't be determined [ 38.065558][ T17] usb 5-1: can't set config #0, error -71 [ 38.070009][ T3204] em28xx 3-1:0.86: No AC97 audio processor [ 38.076259][ T3162] usb 2-1: can't set config #0, error -71 [ 38.094829][ T3162] usb 2-1: USB disconnect, device number 3 [ 38.100300][ T3204] usb 3-1: Decoder not found [ 38.105460][ T3204] em28xx 3-1:0.86: failed to create media graph [ 38.108327][ T17] usb 5-1: USB disconnect, device number 3 [ 38.117775][ T3203] usb 1-1: can't set config #0, error -71 [ 38.119918][ T3204] em28xx 3-1:0.86: V4L2 device video0 deregistered [ 38.127790][ T3203] usb 1-1: USB disconnect, device number 3 [ 38.132058][ T3204] em28xx 3-1:0.86: Registering snapshot button... [ 38.142589][ T3320] ================================================================== [ 38.150729][ T3320] BUG: KASAN: use-after-free in v4l2_fh_init+0x279/0x2c0 [ 38.157734][ T3320] Read of size 8 at addr ffff8881c71c88c0 by task v4l_id/3320 [ 38.165178][ T3320] [ 38.167512][ T3320] CPU: 0 PID: 3320 Comm: v4l_id Not tainted 5.9.0-rc8-syzkaller #0 [ 38.175386][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.185423][ T3320] Call Trace: [ 38.188696][ T3320] dump_stack+0x107/0x16e [ 38.193001][ T3320] ? v4l2_fh_init+0x279/0x2c0 [ 38.197660][ T3320] ? v4l2_fh_init+0x279/0x2c0 [ 38.202335][ T3320] print_address_description.constprop.0+0x1c/0x210 [ 38.208911][ T3320] ? vprintk_func+0x93/0x133 [ 38.213484][ T3320] ? v4l2_fh_init+0x279/0x2c0 [ 38.218185][ T3320] ? v4l2_fh_init+0x279/0x2c0 [ 38.222939][ T3320] kasan_report.cold+0x37/0x7c [ 38.227681][ T3320] ? kasan_poison_shadow+0x30/0x30 [ 38.232768][ T3320] ? v4l2_fh_init+0x279/0x2c0 [ 38.237419][ T3320] v4l2_fh_init+0x279/0x2c0 [ 38.241902][ T3320] v4l2_fh_open+0x88/0xc0 [ 38.246245][ T3320] em28xx_v4l2_open+0x11c/0x570 [ 38.251074][ T3320] v4l2_open+0x20f/0x3d0 [ 38.255294][ T3320] ? v4l2_release+0x390/0x390 [ 38.259944][ T3320] chrdev_open+0x266/0x770 [ 38.264334][ T3320] ? cdev_device_add+0x210/0x210 [ 38.269250][ T3320] ? security_file_open+0x205/0x4f0 [ 38.274424][ T3320] do_dentry_open+0x4b4/0x1090 [ 38.279182][ T3320] ? cdev_device_add+0x210/0x210 [ 38.284115][ T3320] ? may_open+0x1e4/0x400 [ 38.288422][ T3320] path_openat+0x190d/0x2690 [ 38.292993][ T3320] ? path_lookupat+0x830/0x830 [ 38.297737][ T3320] ? lockdep_hardirqs_on_prepare+0x4f0/0x4f0 [ 38.303704][ T3320] do_filp_open+0x17e/0x3c0 [ 38.308201][ T3320] ? may_open_dev+0xf0/0xf0 [ 38.312704][ T3320] ? do_raw_spin_lock+0x120/0x260 [ 38.317716][ T3320] ? rwlock_bug.part.0+0x90/0x90 [ 38.322632][ T3320] ? _raw_spin_unlock+0x1a/0x30 [ 38.327467][ T3320] ? __alloc_fd+0x28d/0x600 [ 38.331954][ T3320] do_sys_openat2+0x16d/0x420 [ 38.336610][ T3320] ? build_open_flags+0x650/0x650 [ 38.341627][ T3320] __x64_sys_open+0x119/0x1c0 [ 38.346298][ T3320] ? do_sys_open+0x140/0x140 [ 38.350901][ T3320] ? __secure_computing+0xb4/0x290 [ 38.356006][ T3320] do_syscall_64+0x2d/0x40 [ 38.360408][ T3320] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 38.366281][ T3320] RIP: 0033:0x7fd929d43840 [ 38.370689][ T3320] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 38.390279][ T3320] RSP: 002b:00007fffab84c6a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 38.398707][ T3320] RAX: ffffffffffffffda RBX: 00007fffab84c818 RCX: 00007fd929d43840 [ 38.406655][ T3320] RDX: 00007fd929d2fea0 RSI: 0000000000000000 RDI: 00007fffab84cf24 [ 38.414599][ T3320] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 38.422545][ T3320] R10: 0000000000000002 R11: 0000000000000246 R12: 000055711c0688d0 [ 38.430501][ T3320] R13: 00007fffab84c810 R14: 0000000000000000 R15: 0000000000000000 [ 38.438452][ T3320] [ 38.440751][ T3320] The buggy address belongs to the page: [ 38.446376][ T3320] page:000000003de90ac5 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x1c71c8 [ 38.456853][ T3320] flags: 0x200000000000000() [ 38.461439][ T3320] raw: 0200000000000000 ffffea0007197d08 ffffea0007183508 0000000000000000 [ 38.469998][ T3320] raw: 0000000000000000 0000000000000002 00000000ffffff7f 0000000000000000 [ 38.478554][ T3320] page dumped because: kasan: bad access detected [ 38.484947][ T3320] [ 38.487266][ T3320] Memory state around the buggy address: [ 38.492881][ T3320] ffff8881c71c8780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.500918][ T3320] ffff8881c71c8800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.508956][ T3320] >ffff8881c71c8880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.516994][ T3320] ^ [ 38.523128][ T3320] ffff8881c71c8900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.531164][ T3320] ffff8881c71c8980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.539194][ T3320] ================================================================== [ 38.547223][ T3320] Disabling lock debugging due to kernel taint [ 38.554052][ T3320] Kernel panic - not syncing: panic_on_warn set ... [ 38.560633][ T3320] CPU: 0 PID: 3320 Comm: v4l_id Tainted: G B 5.9.0-rc8-syzkaller #0 [ 38.562266][ T22] em28xx 4-1:0.86: Identified as Terratec Grabby (card=67) [ 38.569897][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.577083][ T22] em28xx 4-1:0.86: analog set to bulk mode. [ 38.587083][ T3320] Call Trace: [ 38.587101][ T3320] dump_stack+0x107/0x16e [ 38.587114][ T3320] ? v4l2_fh_init+0x260/0x2c0 [ 38.587124][ T3320] panic+0x2cb/0x702 [ 38.587134][ T3320] ? __warn_printk+0xf3/0xf3 [ 38.587148][ T3320] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 38.587160][ T3320] ? trace_hardirqs_on+0x55/0x200 [ 38.587170][ T3320] ? v4l2_fh_init+0x279/0x2c0 [ 38.587179][ T3320] ? v4l2_fh_init+0x279/0x2c0 [ 38.587192][ T3320] end_report+0x4d/0x53 [ 38.587204][ T3320] kasan_report.cold+0x72/0x7c [ 38.587217][ T3320] ? kasan_poison_shadow+0x30/0x30 [ 38.587227][ T3320] ? v4l2_fh_init+0x279/0x2c0 [ 38.587238][ T3320] v4l2_fh_init+0x279/0x2c0 [ 38.587249][ T3320] v4l2_fh_open+0x88/0xc0 [ 38.587262][ T3320] em28xx_v4l2_open+0x11c/0x570 [ 38.587275][ T3320] v4l2_open+0x20f/0x3d0 [ 38.587286][ T3320] ? v4l2_release+0x390/0x390 [ 38.587297][ T3320] chrdev_open+0x266/0x770 [ 38.587308][ T3320] ? cdev_device_add+0x210/0x210 [ 38.587322][ T3320] ? security_file_open+0x205/0x4f0 [ 38.587333][ T3320] do_dentry_open+0x4b4/0x1090 [ 38.587344][ T3320] ? cdev_device_add+0x210/0x210 [ 38.587357][ T3320] ? may_open+0x1e4/0x400 [ 38.587369][ T3320] path_openat+0x190d/0x2690 [ 38.587383][ T3320] ? path_lookupat+0x830/0x830 [ 38.587397][ T3320] ? lockdep_hardirqs_on_prepare+0x4f0/0x4f0 [ 38.587407][ T3320] do_filp_open+0x17e/0x3c0 [ 38.587418][ T3320] ? may_open_dev+0xf0/0xf0 [ 38.587429][ T3320] ? do_raw_spin_lock+0x120/0x260 [ 38.587440][ T3320] ? rwlock_bug.part.0+0x90/0x90 [ 38.587452][ T3320] ? _raw_spin_unlock+0x1a/0x30 [ 38.587464][ T3320] ? __alloc_fd+0x28d/0x600 [ 38.587475][ T3320] do_sys_openat2+0x16d/0x420 [ 38.587487][ T3320] ? build_open_flags+0x650/0x650 [ 38.587499][ T3320] __x64_sys_open+0x119/0x1c0 [ 38.587510][ T3320] ? do_sys_open+0x140/0x140 [ 38.587521][ T3320] ? __secure_computing+0xb4/0x290 [ 38.587535][ T3320] do_syscall_64+0x2d/0x40 [ 38.587549][ T3320] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 38.587558][ T3320] RIP: 0033:0x7fd929d43840 [ 38.587571][ T3320] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 38.587578][ T3320] RSP: 002b:00007fffab84c6a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 38.587591][ T3320] RAX: ffffffffffffffda RBX: 00007fffab84c818 RCX: 00007fd929d43840 [ 38.587598][ T3320] RDX: 00007fd929d2fea0 RSI: 0000000000000000 RDI: 00007fffab84cf24 [ 38.587605][ T3320] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 38.587611][ T3320] R10: 0000000000000002 R11: 0000000000000246 R12: 000055711c0688d0 [ 38.587623][ T3320] R13: 00007fffab84c810 R14: 0000000000000000 R15: 0000000000000000 [ 38.623409][ T22] usb 4-1: USB disconnect, device number 3 [ 38.625831][ T3320] Kernel Offset: disabled [ 38.863977][ T3320] Rebooting in 86400 seconds..