Warning: Permanently added '10.128.0.104' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 59.628305][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.628333][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.628833][ T107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.638553][ T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.643609][ T1751] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 59.651762][ T1750] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.868260][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 59.878292][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 59.898317][ T107] usb 2-1: Using ep0 maxpacket: 8 [ 59.903879][ T1751] usb 3-1: Using ep0 maxpacket: 8 [ 59.918453][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 59.923717][ T1750] usb 5-1: Using ep0 maxpacket: 8 [ 59.998449][ T22] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 60.006991][ T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.017891][ T22] usb 6-1: config 0 has no interface number 0 [ 60.018340][ T12] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 60.024159][ T107] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 60.032310][ T12] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.032318][ T12] usb 1-1: config 0 has no interface number 0 [ 60.032564][ T12] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 29 [ 60.040566][ T107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.040583][ T107] usb 2-1: config 0 has no interface number 0 [ 60.051115][ T12] usb 1-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice= 1.06 [ 60.057535][ T1751] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 60.067394][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.072034][ T12] usb 1-1: config 0 descriptor?? [ 60.078028][ T1751] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.084337][ T5] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 60.093361][ T1751] usb 3-1: config 0 has no interface number 0 [ 60.101705][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.101714][ T5] usb 4-1: config 0 has no interface number 0 [ 60.101812][ T1750] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 60.109900][ T22] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 29 [ 60.114779][ T1750] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.114787][ T1750] usb 5-1: config 0 has no interface number 0 [ 60.116386][ T1750] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 29 [ 60.125263][ T22] usb 6-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice= 1.06 [ 60.133717][ T1750] usb 5-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice= 1.06 [ 60.133727][ T1750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.133877][ T5] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 29 [ 60.140121][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.140652][ T107] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 29 [ 60.150378][ T5] usb 4-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice= 1.06 [ 60.150392][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.156592][ T107] usb 2-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice= 1.06 [ 60.169006][ T1750] usb 5-1: config 0 descriptor?? [ 60.175865][ T107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.189722][ T5] usb 4-1: config 0 descriptor?? [ 60.192949][ T1751] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 29 [ 60.209908][ T12] usb-storage 1-1:0.122: USB Mass Storage device detected [ 60.213402][ T1751] usb 3-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice= 1.06 [ 60.224350][ T1750] usb-storage 5-1:0.122: USB Mass Storage device detected [ 60.231570][ T1751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program executing program [ 60.268825][ T107] usb 2-1: config 0 descriptor?? [ 60.277292][ T22] usb 6-1: config 0 descriptor?? [ 60.287034][ T5] usb-storage 4-1:0.122: USB Mass Storage device detected [ 60.299992][ T1751] usb 3-1: config 0 descriptor?? [ 60.349056][ T107] usb-storage 2-1:0.122: USB Mass Storage device detected [ 60.356931][ T22] usb-storage 6-1:0.122: USB Mass Storage device detected [ 60.369178][ T1751] usb-storage 3-1:0.122: USB Mass Storage device detected executing program [ 60.441469][ T12] zr364xx 1-1:0.122: Zoran 364xx compatible webcam plugged [ 60.449251][ T12] zr364xx 1-1:0.122: model 0595:4343 detected [ 60.456296][ T12] usb 1-1: 320x240 mode selected [ 60.469874][ T5] zr364xx 4-1:0.122: Zoran 364xx compatible webcam plugged [ 60.470187][ T22] zr364xx 6-1:0.122: Zoran 364xx compatible webcam plugged [ 60.477324][ T5] zr364xx 4-1:0.122: model 0595:4343 detected [ 60.477921][ T1750] zr364xx 5-1:0.122: Zoran 364xx compatible webcam plugged [ 60.484776][ T22] zr364xx 6-1:0.122: model 0595:4343 detected [ 60.486110][ T1751] zr364xx 3-1:0.122: Zoran 364xx compatible webcam plugged [ 60.491086][ T1750] zr364xx 5-1:0.122: model 0595:4343 detected [ 60.491440][ T5] usb 4-1: 320x240 mode selected [ 60.498670][ T1751] zr364xx 3-1:0.122: model 0595:4343 detected [ 60.499089][ T1751] usb 3-1: 320x240 mode selected [ 60.506662][ T1750] usb 5-1: 320x240 mode selected executing program executing program [ 60.513618][ T107] zr364xx 2-1:0.122: Zoran 364xx compatible webcam plugged [ 60.523532][ T12] usb 1-1: Zoran 364xx controlling device video0 [ 60.524156][ T107] zr364xx 2-1:0.122: model 0595:4343 detected [ 60.524695][ T22] usb 6-1: 320x240 mode selected [ 60.550746][ T107] usb 2-1: 320x240 mode selected [ 60.575527][ T12] usb 1-1: USB disconnect, device number 2 [ 60.583861][ T5] usb 4-1: Zoran 364xx controlling device video1 [ 60.590358][ C0] usb 1-1: error submitting urb (error=-19) [ 60.597116][ T1750] usb 5-1: Zoran 364xx controlling device video2 [ 60.604465][ T1750] usb 5-1: USB disconnect, device number 2 [ 60.610633][ C0] usb 5-1: error submitting urb (error=-19) [ 60.619865][ T5] usb 4-1: USB disconnect, device number 2 [ 60.626332][ T1750] zr364xx 5-1:0.122: Zoran 364xx webcam unplugged [ 60.632919][ C0] usb 4-1: error submitting urb (error=-19) executing program [ 60.639225][ T5] zr364xx 4-1:0.122: Zoran 364xx webcam unplugged [ 60.698964][ T12] zr364xx 1-1:0.122: Zoran 364xx webcam unplugged [ 60.706997][ T22] usb 6-1: Zoran 364xx controlling device video1 [ 60.713801][ T1751] usb 3-1: Zoran 364xx controlling device video2 [ 60.723433][ T22] usb 6-1: USB disconnect, device number 2 [ 60.729883][ T1751] usb 3-1: USB disconnect, device number 2 [ 60.836668][ T22] zr364xx 6-1:0.122: Zoran 364xx webcam unplugged [ 60.848496][ T107] usb 2-1: Zoran 364xx controlling device video3 [ 60.856305][ T107] usb 2-1: USB disconnect, device number 2 [ 60.862881][ C1] usb 2-1: error submitting urb (error=-19) [ 60.871432][ T107] zr364xx 2-1:0.122: Zoran 364xx webcam unplugged [ 60.924355][ T1792] ================================================================== [ 60.932674][ T1792] BUG: KASAN: null-ptr-deref in read_word_at_a_time+0xe/0x20 [ 60.940146][ T1792] Read of size 1 at addr 0000000000000000 by task v4l_id/1792 [ 60.947597][ T1792] [ 60.949925][ T1792] CPU: 0 PID: 1792 Comm: v4l_id Not tainted 5.2.0-rc1+ #10 [ 60.957154][ T1792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.967320][ T1792] Call Trace: [ 60.970634][ T1792] dump_stack+0xca/0x13e [ 60.974879][ T1792] ? read_word_at_a_time+0xe/0x20 [ 60.979905][ T1792] ? read_word_at_a_time+0xe/0x20 [ 60.984964][ T1792] __kasan_report.cold+0x5/0x32 [ 60.989810][ T1792] ? mutex_trylock+0xd0/0x1a0 [ 60.994474][ T1792] ? read_word_at_a_time+0xe/0x20 [ 60.999497][ T1792] kasan_report+0xe/0x20 [ 61.003739][ T1792] read_word_at_a_time+0xe/0x20 [ 61.008616][ T1792] strscpy+0x8a/0x280 [ 61.012643][ T1792] zr364xx_vidioc_querycap+0xb0/0x210 [ 61.018037][ T1792] ? is_module_text_address+0xc/0x1a [ 61.023353][ T1792] v4l_querycap+0x121/0x340 [ 61.027861][ T1792] __video_do_ioctl+0x5b0/0xb30 [ 61.032715][ T1792] ? copy_overflow+0x30/0x30 [ 61.037339][ T1792] ? stack_trace_save+0x9f/0xe0 [ 61.042367][ T1792] ? stack_trace_consume_entry+0x180/0x180 [ 61.048229][ T1792] video_usercopy+0x446/0xee0 [ 61.053194][ T1792] ? copy_overflow+0x30/0x30 [ 61.057802][ T1792] ? __kprobes_text_end+0x116e58/0x116e58 [ 61.063705][ T1792] ? v4l_enumstd+0x60/0x60 [ 61.068169][ T1792] ? debug_check_no_obj_freed+0x20a/0x42e [ 61.074210][ T1792] ? do_raw_spin_lock+0x11a/0x280 [ 61.079272][ T1792] ? video_usercopy+0xee0/0xee0 [ 61.084138][ T1792] v4l2_ioctl+0x147/0x1a0 [ 61.088476][ T1792] ? video_devdata+0xa0/0xa0 [ 61.093086][ T1792] do_vfs_ioctl+0xcda/0x12e0 [ 61.097683][ T1792] ? quarantine_put+0xb2/0x150 [ 61.102826][ T1792] ? ioctl_preallocate+0x200/0x200 [ 61.107954][ T1792] ? putname+0xe1/0x120 [ 61.112119][ T1792] ? putname+0xe1/0x120 [ 61.116288][ T1792] ? rcu_read_lock_sched_held+0x113/0x130 [ 61.122024][ T1792] ? kmem_cache_free+0x258/0x2a0 [ 61.126979][ T1792] ? rcu_read_lock_sched_held+0x113/0x130 [ 61.132983][ T1792] ksys_ioctl+0x9b/0xc0 [ 61.137152][ T1792] __x64_sys_ioctl+0x6f/0xb0 [ 61.141756][ T1792] ? lockdep_hardirqs_on+0x379/0x580 [ 61.147063][ T1792] do_syscall_64+0xb7/0x560 [ 61.151590][ T1792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.157494][ T1792] RIP: 0033:0x7f88df7c3347 [ 61.161956][ T1792] Code: 90 90 90 48 8b 05 f1 fa 2a 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 90 90 90 90 90 90 90 90 90 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 fa 2a 00 31 d2 48 29 c2 64 [ 61.181921][ T1792] RSP: 002b:00007ffeb98491f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 61.190357][ T1792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f88df7c3347 [ 61.198331][ T1792] RDX: 00007ffeb9849200 RSI: 0000000080685600 RDI: 0000000000000003 [ 61.206320][ T1792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.214298][ T1792] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000400884 [ 61.222390][ T1792] R13: 00007ffeb9849350 R14: 0000000000000000 R15: 0000000000000000 [ 61.230374][ T1792] ================================================================== [ 61.238441][ T1792] Disabling lock debugging due to kernel taint [ 61.244690][ T1792] Kernel panic - not syncing: panic_on_warn set ... [ 61.251314][ T1792] CPU: 0 PID: 1792 Comm: v4l_id Tainted: G B 5.2.0-rc1+ #10 [ 61.259889][ T1792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.269951][ T1792] Call Trace: [ 61.273262][ T1792] dump_stack+0xca/0x13e [ 61.277520][ T1792] panic+0x292/0x6c9 [ 61.281419][ T1792] ? __warn_printk+0xf3/0xf3 [ 61.286005][ T1792] ? retint_kernel+0x10/0x10 [ 61.288323][ T107] dummy_hcd dummy_hcd.1: port status 0x00100503 has changes [ 61.290611][ T1792] ? trace_hardirqs_on+0x55/0x1c0 [ 61.298128][ T22] dummy_hcd dummy_hcd.5: port status 0x00100503 has changes [ 61.302988][ T1792] ? read_word_at_a_time+0xe/0x20 [ 61.315320][ T1792] end_report+0x43/0x49 [ 61.319481][ T1792] ? read_word_at_a_time+0xe/0x20 [ 61.324505][ T1792] __kasan_report.cold+0xd/0x32 [ 61.329356][ T1792] ? mutex_trylock+0xd0/0x1a0 [ 61.334030][ T1792] ? read_word_at_a_time+0xe/0x20 [ 61.339062][ T1792] kasan_report+0xe/0x20 [ 61.343327][ T1792] read_word_at_a_time+0xe/0x20 [ 61.348176][ T1792] strscpy+0x8a/0x280 [ 61.352156][ T1792] zr364xx_vidioc_querycap+0xb0/0x210 [ 61.357530][ T1792] ? is_module_text_address+0xc/0x1a [ 61.362827][ T1792] v4l_querycap+0x121/0x340 [ 61.367326][ T1792] __video_do_ioctl+0x5b0/0xb30 [ 61.372177][ T1792] ? copy_overflow+0x30/0x30 [ 61.376760][ T1792] ? stack_trace_save+0x9f/0xe0 [ 61.378289][ T107] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 61.381623][ T1792] ? stack_trace_consume_entry+0x180/0x180 [ 61.381638][ T1792] video_usercopy+0x446/0xee0 [ 61.381655][ T1792] ? copy_overflow+0x30/0x30 [ 61.389527][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.395087][ T1792] ? __kprobes_text_end+0x116e58/0x116e58 [ 61.395103][ T1792] ? v4l_enumstd+0x60/0x60 [ 61.395123][ T1792] ? debug_check_no_obj_freed+0x20a/0x42e [ 61.427708][ T1792] ? do_raw_spin_lock+0x11a/0x280 [ 61.432745][ T1792] ? video_usercopy+0xee0/0xee0 [ 61.437588][ T1792] v4l2_ioctl+0x147/0x1a0 [ 61.441915][ T1792] ? video_devdata+0xa0/0xa0 [ 61.446506][ T1792] do_vfs_ioctl+0xcda/0x12e0 [ 61.451090][ T1792] ? quarantine_put+0xb2/0x150 [ 61.455848][ T1792] ? ioctl_preallocate+0x200/0x200 [ 61.460962][ T1792] ? putname+0xe1/0x120 [ 61.465145][ T1792] ? putname+0xe1/0x120 [ 61.469401][ T1792] ? rcu_read_lock_sched_held+0x113/0x130 [ 61.475124][ T1792] ? kmem_cache_free+0x258/0x2a0 [ 61.480078][ T1792] ? rcu_read_lock_sched_held+0x113/0x130 [ 61.485811][ T1792] ksys_ioctl+0x9b/0xc0 [ 61.489977][ T1792] __x64_sys_ioctl+0x6f/0xb0 [ 61.494577][ T1792] ? lockdep_hardirqs_on+0x379/0x580 [ 61.499873][ T1792] do_syscall_64+0xb7/0x560 [ 61.504387][ T1792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.510286][ T1792] RIP: 0033:0x7f88df7c3347 [ 61.514704][ T1792] Code: 90 90 90 48 8b 05 f1 fa 2a 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 90 90 90 90 90 90 90 90 90 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 fa 2a 00 31 d2 48 29 c2 64 [ 61.518318][ T22] dummy_hcd dummy_hcd.5: port status 0x00100503 has changes [ 61.534842][ T1792] RSP: 002b:00007ffeb98491f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 61.542389][ T107] dummy_hcd dummy_hcd.1: port status 0x00100503 has changes [ 61.550530][ T1792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f88df7c3347 [ 61.565751][ T1792] RDX: 00007ffeb9849200 RSI: 0000000080685600 RDI: 0000000000000003 [ 61.573722][ T1792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.581686][ T1792] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000400884 [ 61.589653][ T1792] R13: 00007ffeb9849350 R14: 0000000000000000 R15: 0000000000000000 [ 61.598182][ T1792] Kernel Offset: disabled [ 61.602665][ T1792] Rebooting in 86400 seconds..