./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2767139084 <...> Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. execve("./syz-executor2767139084", ["./syz-executor2767139084"], 0x7ffd5c26d2b0 /* 10 vars */) = 0 brk(NULL) = 0x55555f225000 brk(0x55555f225d00) = 0x55555f225d00 arch_prctl(ARCH_SET_FS, 0x55555f225380) = 0 set_tid_address(0x55555f225650) = 5850 set_robust_list(0x55555f225660, 24) = 0 rseq(0x55555f225ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2767139084", 4096) = 28 getrandom("\xe3\x06\x59\x0f\xc7\xfe\x6d\xfc", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555f225d00 brk(0x55555f246d00) = 0x55555f246d00 brk(0x55555f247000) = 0x55555f247000 mprotect(0x7f9b95dae000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5851 attached [pid 5851] set_robust_list(0x55555f225660, 24 [pid 5850] <... clone resumed>, child_tidptr=0x55555f225650) = 5851 [pid 5851] <... set_robust_list resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5852 attached [pid 5851] <... clone resumed>, child_tidptr=0x55555f225650) = 5852 ./strace-static-x86_64: Process 5853 attached [pid 5852] set_robust_list(0x55555f225660, 24 [pid 5850] <... clone resumed>, child_tidptr=0x55555f225650) = 5853 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5853] set_robust_list(0x55555f225660, 24 [pid 5852] <... set_robust_list resumed>) = 0 [pid 5853] <... set_robust_list resumed>) = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5855 attached ./strace-static-x86_64: Process 5854 attached [pid 5852] setpgid(0, 0) = 0 [pid 5853] <... clone resumed>, child_tidptr=0x55555f225650) = 5855 [pid 5850] <... clone resumed>, child_tidptr=0x55555f225650) = 5854 [pid 5855] set_robust_list(0x55555f225660, 24 [pid 5854] set_robust_list(0x55555f225660, 24 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5855] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5856 attached [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5854] <... set_robust_list resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5850] <... clone resumed>, child_tidptr=0x55555f225650) = 5856 [pid 5856] set_robust_list(0x55555f225660, 24 [pid 5855] <... prctl resumed>) = 0 [pid 5856] <... set_robust_list resumed>) = 0 [pid 5855] setpgid(0, 0 [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] write(3, "1000", 4 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5855] <... setpgid resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5858 attached ./strace-static-x86_64: Process 5857 attached [pid 5852] <... write resumed>) = 4 [pid 5858] set_robust_list(0x55555f225660, 24 [pid 5857] set_robust_list(0x55555f225660, 24 [pid 5854] <... clone resumed>, child_tidptr=0x55555f225650) = 5857 [pid 5856] <... clone resumed>, child_tidptr=0x55555f225650) = 5858 [pid 5855] write(3, "1000", 4 [pid 5852] close(3 [pid 5855] <... write resumed>) = 4 [pid 5852] <... close resumed>) = 0 [pid 5855] close(3 [pid 5858] <... set_robust_list resumed>) = 0 [pid 5857] <... set_robust_list resumed>) = 0 [pid 5855] <... close resumed>) = 0 executing program executing program [pid 5852] write(1, "executing program\n", 18 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5855] write(1, "executing program\n", 18 [pid 5858] <... prctl resumed>) = 0 [pid 5857] <... prctl resumed>) = 0 [pid 5855] <... write resumed>) = 18 [pid 5852] <... write resumed>) = 18 [pid 5858] setpgid(0, 0 [pid 5857] setpgid(0, 0) = 0 [pid 5858] <... setpgid resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5852] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] <... openat resumed>) = 3 [pid 5855] <... openat resumed>) = 3 [pid 5857] <... openat resumed>) = 3 [pid 5857] write(3, "1000", 4) = 4 [pid 5857] close(3) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_INIT [pid 5858] <... openat resumed>) = 3 [pid 5857] write(1, "executing program\n", 18 [pid 5855] ioctl(3, USB_RAW_IOCTL_INIT [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUNexecuting program [pid 5857] <... write resumed>) = 18 [pid 5858] write(3, "1000", 4 [pid 5857] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5852] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5858] <... write resumed>) = 4 [pid 5857] <... openat resumed>) = 3 [pid 5858] close(3 [pid 5857] ioctl(3, USB_RAW_IOCTL_INIT [pid 5858] <... close resumed>) = 0 [pid 5858] write(1, "executing program\n", 18 [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 executing program [pid 5858] <... write resumed>) = 18 [pid 5857] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5858] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5858] ioctl(3, USB_RAW_IOCTL_INIT [pid 5857] <... ioctl resumed>, 0) = 0 [pid 5855] <... ioctl resumed>, 0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] <... ioctl resumed>, 0) = 0 [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] <... ioctl resumed>, 0) = 0 [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5857] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5855] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 88.195689][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.204337][ T981] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.205526][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.213079][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] <... ioctl resumed>, 0x7ffd97bde750) = 9 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5857] <... ioctl resumed>, 0x7ffd97bde750) = 9 [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] <... ioctl resumed>, 0x7ffd97bde750) = 27 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] <... ioctl resumed>, 0x7ffd97bde750) = 27 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] <... ioctl resumed>, 0x7ffd97bde750) = 9 [ 88.375581][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 88.380931][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 88.386233][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 88.398283][ T981] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 88.405512][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 88.406913][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 9 [pid 5858] <... ioctl resumed>, 0x7ffd97bde750) = 27 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 27 [ 88.420590][ T981] usb 3-1: config 0 has no interface number 0 [ 88.426875][ T9] usb 1-1: config 0 has no interface number 0 [ 88.433118][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 88.441499][ T981] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.451628][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.461597][ T10] usb 4-1: config 0 has no interface number 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 4 [pid 5857] <... ioctl resumed>, 0x7ffd97bde750) = 4 [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5857] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5852] <... ioctl resumed>, 0x7ffd97bde750) = 4 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5857] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5858] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 4 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 88.462721][ T43] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 88.468919][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.491900][ T43] usb 2-1: config 0 has no interface number 0 [ 88.500283][ T43] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.501790][ T981] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5852] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 88.518963][ T43] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 88.520410][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.531149][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.539199][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 88.546542][ T43] usb 2-1: Product: syz [ 88.554299][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.560502][ T43] usb 2-1: Manufacturer: syz [ 88.567659][ T981] usb 3-1: Product: syz [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [ 88.573091][ T43] usb 2-1: SerialNumber: syz [ 88.575921][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 88.589526][ T981] usb 3-1: Manufacturer: syz [ 88.590680][ T43] usb 2-1: config 0 descriptor?? [ 88.594257][ T981] usb 3-1: SerialNumber: syz [ 88.599414][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.612392][ T10] usb 4-1: Product: syz [ 88.617427][ T10] usb 4-1: Manufacturer: syz [ 88.622056][ T10] usb 4-1: SerialNumber: syz [pid 5857] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [ 88.628167][ T981] usb 3-1: config 0 descriptor?? [ 88.628826][ T43] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 88.633366][ T9] usb 1-1: Product: syz [ 88.646578][ T43] em28xx 2-1:0.132: Video interface 132 found: [ 88.657697][ T10] usb 4-1: config 0 descriptor?? [ 88.663478][ T9] usb 1-1: Manufacturer: syz [ 88.668369][ T9] usb 1-1: SerialNumber: syz [pid 5857] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5858] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5852] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5852] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5858] <... ioctl resumed>, 0x2) = 0 [pid 5852] <... ioctl resumed>, 0x2) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5852] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5858] <... ioctl resumed>, 0) = 0 [pid 5852] <... ioctl resumed>, 0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5852] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5858] <... ioctl resumed>, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5852] <... ioctl resumed>, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5858] <... ioctl resumed>, 0x7ffd97bde750) = 0 [pid 5857] <... ioctl resumed>, 0) = 0 [pid 5852] <... ioctl resumed>, 0x7ffd97bde750) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [ 88.676952][ T9] usb 1-1: config 0 descriptor?? [ 88.693637][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 88.705054][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 88.716049][ T981] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 88.728892][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 88.739178][ T981] em28xx 3-1:0.132: Video interface 132 found: [ 88.745758][ T9] em28xx 1-1:0.132: Video interface 132 found: [pid 5855] write(-1, NULL, 10) = -1 EBADF (Bad file descriptor) [pid 5855] exit_group(0) = ? [pid 5855] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5868 attached , child_tidptr=0x55555f225650) = 5868 [pid 5868] set_robust_list(0x55555f225660, 24) = 0 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5868] setpgid(0, 0) = 0 [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5868] write(3, "1000", 4 [pid 5852] write(-1, NULL, 10 [pid 5868] <... write resumed>) = 4 [pid 5852] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5868] close(3 [pid 5858] write(-1, NULL, 10 [pid 5852] exit_group(0 [pid 5858] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5868] <... close resumed>) = 0 [pid 5852] <... exit_group resumed>) = ? executing program [pid 5868] write(1, "executing program\n", 18 [pid 5858] exit_group(0 [pid 5868] <... write resumed>) = 18 [pid 5858] <... exit_group resumed>) = ? [pid 5868] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5868] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5858] +++ exited with 0 +++ [pid 5868] <... ioctl resumed>, 0) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5856] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5852] +++ exited with 0 +++ [pid 5857] write(-1, NULL, 10 [pid 5856] restart_syscall(<... resuming interrupted clone ...> [pid 5857] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] <... restart_syscall resumed>) = 0 [pid 5857] exit_group(0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5852, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5868] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5857] <... exit_group resumed>) = ? [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5869 attached [pid 5856] <... clone resumed>, child_tidptr=0x55555f225650) = 5869 ./strace-static-x86_64: Process 5870 attached [pid 5870] set_robust_list(0x55555f225660, 24) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x55555f225650) = 5870 [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5869] set_robust_list(0x55555f225660, 24 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5857] +++ exited with 0 +++ [pid 5870] <... prctl resumed>) = 0 [pid 5869] <... set_robust_list resumed>) = 0 [pid 5854] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5870] setpgid(0, 0 [pid 5854] restart_syscall(<... resuming interrupted clone ...> [pid 5870] <... setpgid resumed>) = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] <... prctl resumed>) = 0 [pid 5854] <... restart_syscall resumed>) = 0 [pid 5869] setpgid(0, 0 [pid 5870] write(3, "1000", 4 [pid 5869] <... setpgid resumed>) = 0 [pid 5870] <... write resumed>) = 4 [ 88.895964][ T43] em28xx 2-1:0.132: unknown em28xx chip ID (0) [pid 5870] close(3 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5872 attached [pid 5870] <... close resumed>) = 0 [pid 5869] <... openat resumed>) = 3 [pid 5870] write(1, "executing program\n", 18 [pid 5869] write(3, "1000", 4executing program [pid 5870] <... write resumed>) = 18 executing program [pid 5870] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5869] <... write resumed>) = 4 [pid 5869] close(3 [pid 5872] set_robust_list(0x55555f225660, 24 [pid 5870] <... openat resumed>) = 3 [pid 5869] <... close resumed>) = 0 [pid 5869] write(1, "executing program\n", 18) = 18 [pid 5854] <... clone resumed>, child_tidptr=0x55555f225650) = 5872 [pid 5869] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5872] <... set_robust_list resumed>) = 0 [pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5870] ioctl(3, USB_RAW_IOCTL_INIT [pid 5869] <... openat resumed>) = 3 [pid 5872] setpgid(0, 0) = 0 [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5870] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUNexecuting program [pid 5872] <... openat resumed>) = 3 [pid 5870] <... ioctl resumed>, 0) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_INIT [pid 5872] write(3, "1000", 4) = 4 [pid 5872] close(3) = 0 [pid 5872] write(1, "executing program\n", 18) = 18 [pid 5872] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd97bdf760) = 0 [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] <... ioctl resumed>, 0) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 88.973589][ T43] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 88.986307][ T981] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 88.988050][ T43] em28xx 2-1:0.132: board has no eeprom [ 88.992697][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 88.993294][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 89.049071][ T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 89.057959][ T43] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 89.057987][ T43] em28xx 2-1:0.132: analog set to bulk mode. [ 89.058590][ T5864] em28xx 2-1:0.132: Registering V4L2 extension [ 89.078634][ T10] em28xx 4-1:0.132: board has no eeprom [ 89.092085][ T981] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 89.093887][ T43] usb 2-1: USB disconnect, device number 2 [ 89.106148][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 89.113165][ T43] em28xx 2-1:0.132: Disconnecting em28xx [ 89.116632][ T981] em28xx 3-1:0.132: board has no eeprom [ 89.127470][ T9] em28xx 1-1:0.132: board has no eeprom [ 89.135569][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 89.144369][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 89.160047][ T10] usb 4-1: USB disconnect, device number 2 [ 89.169372][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 89.202368][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 89.210810][ T981] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 89.221187][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 89.228058][ T981] em28xx 3-1:0.132: analog set to bulk mode. [ 89.249420][ T5864] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 89.257811][ T9] usb 1-1: USB disconnect, device number 2 [ 89.265182][ T9] em28xx 1-1:0.132: Disconnecting em28xx [ 89.271005][ T5864] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 89.275575][ T981] usb 3-1: USB disconnect, device number 2 [ 89.279879][ T5864] em28xx 2-1:0.132: No AC97 audio processor [ 89.292362][ T981] em28xx 3-1:0.132: Disconnecting em28xx [ 89.310147][ T5864] usb 2-1: Decoder not found [ 89.315521][ T5864] em28xx 2-1:0.132: failed to create media graph [ 89.323255][ T5864] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 89.333878][ T5864] em28xx 2-1:0.132: Remote control support is not available for this card. [ 89.342946][ T5863] em28xx 4-1:0.132: Registering V4L2 extension [ 89.427270][ T5863] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 89.434523][ T5863] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 89.442132][ T5863] em28xx 4-1:0.132: No AC97 audio processor [ 89.450375][ T5863] usb 4-1: Decoder not found [ 89.455031][ T5863] em28xx 4-1:0.132: failed to create media graph [ 89.461527][ T5863] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 89.469553][ T5863] em28xx 4-1:0.132: Remote control support is not available for this card. [ 89.478682][ T5877] em28xx 3-1:0.132: Registering V4L2 extension [ 89.562662][ T5877] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 89.573045][ T5877] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 89.581389][ T5877] em28xx 3-1:0.132: No AC97 audio processor [ 89.591238][ T5877] usb 3-1: Decoder not found [ 89.595907][ T5877] em28xx 3-1:0.132: failed to create media graph [ 89.602277][ T5877] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 89.610391][ T5877] em28xx 3-1:0.132: Remote control support is not available for this card. [ 89.619073][ T5859] em28xx 1-1:0.132: Registering V4L2 extension [ 89.702132][ T5859] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 89.711945][ T5859] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 89.720956][ T5859] em28xx 1-1:0.132: No AC97 audio processor [ 89.729320][ T5859] usb 1-1: Decoder not found [ 89.733948][ T5859] em28xx 1-1:0.132: failed to create media graph [ 89.740367][ T5859] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 89.748390][ T5859] em28xx 1-1:0.132: Remote control support is not available for this card. [ 89.757238][ T9] em28xx 1-1:0.132: Closing input extension [ 89.763427][ T43] em28xx 2-1:0.132: Closing input extension [ 89.771686][ T10] em28xx 4-1:0.132: Closing input extension [ 89.778414][ T43] em28xx 2-1:0.132: Freeing device [ 89.780224][ T981] em28xx 3-1:0.132: Closing input extension [ 89.796512][ T9] em28xx 1-1:0.132: Freeing device [ 89.814864][ T981] em28xx 3-1:0.132: Freeing device [ 89.821571][ T10] em28xx 4-1:0.132: Freeing device [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5868] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5868] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5868] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5868] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 90.085932][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5868] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 90.155832][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.163635][ T981] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.175695][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5868] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 9 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 27 [ 90.255599][ T43] usb 2-1: Using ep0 maxpacket: 32 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 4 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5868] <... ioctl resumed>, 0x7ffd97bde750) = 8 [ 90.295476][ T43] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 90.304308][ T43] usb 2-1: config 0 has no interface number 0 [ 90.310468][ T43] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.325669][ T10] usb 4-1: Using ep0 maxpacket: 32 [pid 5869] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5868] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5868] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5870] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5872] <... ioctl resumed>, 0x7ffd97bde750) = 9 [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5870] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5869] <... ioctl resumed>, 0x7ffd97bde750) = 9 [pid 5868] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5872] <... ioctl resumed>, 0x7ffd97bde750) = 27 [pid 5870] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5868] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5870] <... ioctl resumed>, 0x7ffd97bde750) = 9 [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 27 [ 90.345549][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 90.350879][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 90.360201][ T43] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 90.369667][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.374710][ T981] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 90.377957][ T43] usb 2-1: Product: syz [ 90.390405][ T43] usb 2-1: Manufacturer: syz [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 27 [ 90.390784][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 90.395245][ T43] usb 2-1: SerialNumber: syz [ 90.404755][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 90.411802][ T43] usb 2-1: config 0 descriptor?? [ 90.417915][ T981] usb 3-1: config 0 has no interface number 0 [ 90.429185][ T10] usb 4-1: config 0 has no interface number 0 [ 90.435336][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5868] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5868] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5868] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 90.446064][ T9] usb 1-1: config 0 has no interface number 0 [ 90.448480][ T43] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 90.452280][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.462491][ T43] em28xx 2-1:0.132: Video interface 132 found: [ 90.473066][ T981] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5870] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5872] <... ioctl resumed>, 0x7ffd97bde750) = 4 [pid 5870] <... ioctl resumed>, 0x7ffd97bde750) = 4 [pid 5869] <... ioctl resumed>, 0x7ffd97bde750) = 4 [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5870] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5872] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5870] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5869] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5870] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5870] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5869] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5870] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5872] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5870] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5869] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5870] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 90.519813][ T981] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 90.529228][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.537527][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 90.546755][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 90.555859][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.564048][ T10] usb 4-1: Product: syz [ 90.568373][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.576434][ T981] usb 3-1: Product: syz [ 90.580677][ T9] usb 1-1: Product: syz [ 90.584933][ T9] usb 1-1: Manufacturer: syz [ 90.589640][ T981] usb 3-1: Manufacturer: syz [ 90.594280][ T981] usb 3-1: SerialNumber: syz [ 90.599135][ T10] usb 4-1: Manufacturer: syz [ 90.603755][ T10] usb 4-1: SerialNumber: syz [ 90.608582][ T9] usb 1-1: SerialNumber: syz [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5872] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5872] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [pid 5869] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5870] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5870] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5869] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5870] <... ioctl resumed>, 0) = 0 [pid 5869] <... ioctl resumed>, 0x2) = 0 [pid 5870] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5869] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5870] <... ioctl resumed>, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5869] <... ioctl resumed>, 0) = 0 [pid 5870] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5869] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5870] <... ioctl resumed>, 0x7ffd97bde750) = 0 [pid 5869] <... ioctl resumed>, 0x7ffd97bde750) = 0 [pid 5868] write(-1, NULL, 10) = -1 EBADF (Bad file descriptor) [ 90.619363][ T981] usb 3-1: config 0 descriptor?? [ 90.626627][ T10] usb 4-1: config 0 descriptor?? [ 90.632808][ T9] usb 1-1: config 0 descriptor?? [ 90.648567][ T981] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [pid 5868] exit_group(0) = ? [pid 5868] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5868, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5895 attached [pid 5895] set_robust_list(0x55555f225660, 24) = 0 [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] setpgid(0, 0) = 0 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5895] write(3, "1000", 4) = 4 [pid 5895] close(3executing program ) = 0 [pid 5895] write(1, "executing program\n", 18) = 18 [pid 5895] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5895] ioctl(3, USB_RAW_IOCTL_INIT [pid 5853] <... clone resumed>, child_tidptr=0x55555f225650) = 5895 [pid 5895] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5895] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 90.661733][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 90.675221][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 90.685625][ T981] em28xx 3-1:0.132: Video interface 132 found: [ 90.692085][ T9] em28xx 1-1:0.132: Video interface 132 found: [ 90.698473][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 90.726037][ T43] em28xx 2-1:0.132: unknown em28xx chip ID (0) [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5872] write(-1, NULL, 10) = -1 EBADF (Bad file descriptor) [pid 5872] exit_group(0) = ? [ 90.790004][ T43] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 90.798820][ T43] em28xx 2-1:0.132: board has no eeprom [pid 5872] +++ exited with 0 +++ [pid 5854] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5872, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5854] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5870] write(-1, NULL, 10) = -1 EBADF (Bad file descriptor) [ 90.855544][ T43] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 90.863452][ T43] em28xx 2-1:0.132: analog set to bulk mode. [ 90.869882][ T5864] em28xx 2-1:0.132: Registering V4L2 extension [pid 5869] write(-1, NULL, 10./strace-static-x86_64: Process 5897 attached [pid 5870] exit_group(0 [pid 5869] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5869] exit_group(0 [pid 5854] <... clone resumed>, child_tidptr=0x55555f225650) = 5897 [pid 5869] <... exit_group resumed>) = ? [pid 5870] <... exit_group resumed>) = ? [pid 5897] set_robust_list(0x55555f225660, 24 [pid 5870] +++ exited with 0 +++ [pid 5897] <... set_robust_list resumed>) = 0 [pid 5869] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5870, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5897] setpgid(0, 0) = 0 [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5856] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5899 attached [pid 5897] write(3, "1000", 4) = 4 [pid 5851] <... clone resumed>, child_tidptr=0x55555f225650) = 5899 ./strace-static-x86_64: Process 5901 attached [pid 5899] set_robust_list(0x55555f225660, 24 [pid 5897] close(3executing program ) = 0 [pid 5856] <... clone resumed>, child_tidptr=0x55555f225650) = 5901 [pid 5901] set_robust_list(0x55555f225660, 24 [pid 5899] <... set_robust_list resumed>) = 0 [pid 5897] write(1, "executing program\n", 18 [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5901] <... set_robust_list resumed>) = 0 [pid 5899] <... prctl resumed>) = 0 [pid 5897] <... write resumed>) = 18 [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5899] setpgid(0, 0 [pid 5901] <... prctl resumed>) = 0 [pid 5899] <... setpgid resumed>) = 0 [ 90.904303][ T43] usb 2-1: USB disconnect, device number 3 [ 90.915107][ T981] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 90.939582][ T43] em28xx 2-1:0.132: Disconnecting em28xx [pid 5901] setpgid(0, 0 [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5897] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5901] <... setpgid resumed>) = 0 [pid 5899] <... openat resumed>) = 3 [pid 5897] <... openat resumed>) = 3 [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5899] write(3, "1000", 4 [pid 5897] ioctl(3, USB_RAW_IOCTL_INIT [pid 5901] <... openat resumed>) = 3 [pid 5899] <... write resumed>) = 4 executing program [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5901] write(3, "1000", 4 [pid 5899] close(3 [pid 5901] <... write resumed>) = 4 [pid 5899] <... close resumed>) = 0 [pid 5901] close(3 [pid 5899] write(1, "executing program\n", 18 [pid 5901] <... close resumed>) = 0 [pid 5899] <... write resumed>) = 18 [pid 5897] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUNexecuting program [pid 5901] write(1, "executing program\n", 18 [pid 5899] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5897] <... ioctl resumed>, 0) = 0 [pid 5901] <... write resumed>) = 18 [pid 5899] <... openat resumed>) = 3 [pid 5901] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5899] ioctl(3, USB_RAW_IOCTL_INIT [pid 5901] <... openat resumed>) = 3 [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_INIT [pid 5899] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5901] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [ 90.968912][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 90.989178][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 91.007495][ T981] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5901] <... ioctl resumed>, 0) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 91.025845][ T981] em28xx 3-1:0.132: board has no eeprom [ 91.060581][ T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 91.069909][ T10] em28xx 4-1:0.132: board has no eeprom [ 91.083871][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 91.093544][ T9] em28xx 1-1:0.132: board has no eeprom [ 91.094568][ T5864] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 91.099388][ T981] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 91.107642][ T5864] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 91.115210][ T981] em28xx 3-1:0.132: analog set to bulk mode. [ 91.125296][ T5864] em28xx 2-1:0.132: No AC97 audio processor [ 91.136805][ T5864] usb 2-1: Decoder not found [ 91.139716][ T981] usb 3-1: USB disconnect, device number 3 [ 91.146695][ T5864] em28xx 2-1:0.132: failed to create media graph [ 91.149990][ T981] em28xx 3-1:0.132: Disconnecting em28xx [ 91.153945][ T5864] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 91.165514][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 91.176490][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 91.180551][ T5864] em28xx 2-1:0.132: Remote control support is not available for this card. [ 91.185572][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 91.192033][ T43] em28xx 2-1:0.132: Closing input extension [ 91.206459][ T5859] em28xx 3-1:0.132: Registering V4L2 extension [ 91.210880][ T43] em28xx 2-1:0.132: Freeing device [ 91.213709][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 91.230846][ T10] usb 4-1: USB disconnect, device number 3 [ 91.241926][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 91.259545][ T9] usb 1-1: USB disconnect, device number 3 [ 91.281562][ T9] em28xx 1-1:0.132: Disconnecting em28xx [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5895] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 91.396103][ T5859] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 91.403198][ T5859] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 91.410654][ T5859] em28xx 3-1:0.132: No AC97 audio processor [ 91.421112][ T5859] usb 3-1: Decoder not found [ 91.425804][ T5859] em28xx 3-1:0.132: failed to create media graph [ 91.432262][ T5859] em28xx 3-1:0.132: V4L2 device video103 deregistered [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 91.441192][ T5859] em28xx 3-1:0.132: Remote control support is not available for this card. [ 91.449912][ T5877] em28xx 4-1:0.132: Registering V4L2 extension [ 91.534372][ T5877] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 91.549574][ T5877] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 91.556874][ T5877] em28xx 4-1:0.132: No AC97 audio processor [ 91.564672][ T5877] usb 4-1: Decoder not found [ 91.565595][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.569353][ T5877] em28xx 4-1:0.132: failed to create media graph [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 91.583122][ T5877] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 91.593754][ T5877] em28xx 4-1:0.132: Remote control support is not available for this card. [ 91.602527][ T5879] em28xx 1-1:0.132: Registering V4L2 extension [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 91.694960][ T5879] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 91.707357][ T5879] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 91.714584][ T5879] em28xx 1-1:0.132: No AC97 audio processor [ 91.724822][ T5879] usb 1-1: Decoder not found [ 91.729721][ T5879] em28xx 1-1:0.132: failed to create media graph [ 91.736308][ T5879] em28xx 1-1:0.132: V4L2 device video103 deregistered [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 9 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 91.744461][ T5879] em28xx 1-1:0.132: Remote control support is not available for this card. [ 91.745547][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 91.753182][ T981] em28xx 3-1:0.132: Closing input extension [ 91.764246][ T10] em28xx 4-1:0.132: Closing input extension [ 91.770735][ T9] em28xx 1-1:0.132: Closing input extension [ 91.780462][ T981] em28xx 3-1:0.132: Freeing device [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 27 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 4 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 91.788244][ T43] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 91.799794][ T43] usb 2-1: config 0 has no interface number 0 [ 91.803854][ T10] em28xx 4-1:0.132: Freeing device [ 91.810806][ T43] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.817833][ T9] em28xx 1-1:0.132: Freeing device [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [ 91.851425][ T43] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 91.874629][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.892078][ T43] usb 2-1: Product: syz [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [ 91.901696][ T43] usb 2-1: Manufacturer: syz [ 91.907653][ T43] usb 2-1: SerialNumber: syz [ 91.920998][ T43] usb 2-1: config 0 descriptor?? [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 91.968839][ T43] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 91.979748][ T43] em28xx 2-1:0.132: Video interface 132 found: [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 92.009339][ T24] cfg80211: failed to load regulatory.db [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5895] write(-1, NULL, 10 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5895] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5895] exit_group(0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5895] <... exit_group resumed>) = ? [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5895] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 92.116015][ T981] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.145852][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.155957][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH./strace-static-x86_64: Process 5919 attached [pid 5919] set_robust_list(0x55555f225660, 24 [pid 5853] <... clone resumed>, child_tidptr=0x55555f225650) = 5919 [pid 5919] <... set_robust_list resumed>) = 0 [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5919] setpgid(0, 0) = 0 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5919] write(3, "1000", 4) = 4 [pid 5919] close(3) = 0 [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 executing program [pid 5919] write(1, "executing program\n", 18) = 18 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5919] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5919] <... openat resumed>) = 3 [pid 5919] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd97bdf760) = 0 [pid 5919] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 92.236777][ T43] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 92.275548][ T981] usb 3-1: Using ep0 maxpacket: 32 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] <... ioctl resumed>, 0x7ffd97bde750) = 9 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5901] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5899] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5901] <... ioctl resumed>, 0x7ffd97bde750) = 9 [pid 5897] <... ioctl resumed>, 0x7ffd97bde750) = 27 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 27 [pid 5899] <... ioctl resumed>, 0x7ffd97bde750) = 9 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 92.299636][ T43] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 92.306694][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 92.308826][ T43] em28xx 2-1:0.132: board has no eeprom [ 92.315737][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 92.329940][ T981] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 92.339012][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 27 [ 92.347473][ T981] usb 3-1: config 0 has no interface number 0 [ 92.353633][ T981] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.363713][ T10] usb 4-1: config 0 has no interface number 0 [ 92.369916][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 92.378151][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.385483][ T43] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 4 [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] <... ioctl resumed>, 0x7ffd97bde750) = 4 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5899] <... ioctl resumed>, 0x7ffd97bde750) = 4 [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5901] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5899] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5901] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 92.388337][ T9] usb 1-1: config 0 has no interface number 0 [ 92.397975][ T43] em28xx 2-1:0.132: analog set to bulk mode. [ 92.402737][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.412031][ T24] em28xx 2-1:0.132: Registering V4L2 extension [ 92.430975][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 92.440259][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5899] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5901] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5897] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [ 92.445478][ T43] usb 2-1: USB disconnect, device number 4 [ 92.449813][ T981] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 92.455964][ T43] em28xx 2-1:0.132: Disconnecting em28xx [ 92.465692][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 92.478161][ T10] usb 4-1: Product: syz [ 92.482437][ T10] usb 4-1: Manufacturer: syz [ 92.487589][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.495841][ T10] usb 4-1: SerialNumber: syz [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5901] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [ 92.503015][ T981] usb 3-1: Product: syz [ 92.507534][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.516951][ T10] usb 4-1: config 0 descriptor?? [ 92.525184][ T981] usb 3-1: Manufacturer: syz [ 92.541373][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [pid 5897] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [ 92.552656][ T9] usb 1-1: Product: syz [ 92.556989][ T981] usb 3-1: SerialNumber: syz [ 92.563038][ T9] usb 1-1: Manufacturer: syz [ 92.570632][ T981] usb 3-1: config 0 descriptor?? [ 92.576289][ T9] usb 1-1: SerialNumber: syz [ 92.590075][ T10] em28xx 4-1:0.132: Video interface 132 found: [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [pid 5899] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [ 92.602065][ T9] usb 1-1: config 0 descriptor?? [ 92.610314][ T981] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 92.623073][ T981] em28xx 3-1:0.132: Video interface 132 found: [ 92.639109][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 92.639643][ T24] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 92.649251][ T9] em28xx 1-1:0.132: Video interface 132 found: [ 92.666607][ T24] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 92.674030][ T24] em28xx 2-1:0.132: No AC97 audio processor [ 92.685774][ T24] usb 2-1: Decoder not found [ 92.690506][ T24] em28xx 2-1:0.132: failed to create media graph [ 92.697586][ T24] em28xx 2-1:0.132: V4L2 device video103 deregistered [pid 5901] write(-1, NULL, 10) = -1 EBADF (Bad file descriptor) [pid 5901] exit_group(0) = ? [pid 5901] +++ exited with 0 +++ [pid 5856] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5856] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5924 attached , child_tidptr=0x55555f225650) = 5924 [pid 5924] set_robust_list(0x55555f225660, 24) = 0 [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5924] setpgid(0, 0) = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5924] write(3, "1000", 4) = 4 [pid 5924] close(3) = 0 executing program [pid 5924] write(1, "executing program\n", 18) = 18 [pid 5924] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5924] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd97bdf760) = 0 [ 92.706535][ T24] em28xx 2-1:0.132: Remote control support is not available for this card. [ 92.715238][ T43] em28xx 2-1:0.132: Closing input extension [ 92.726717][ T43] em28xx 2-1:0.132: Freeing device [pid 5924] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5897] write(-1, NULL, 10) = -1 EBADF (Bad file descriptor) [pid 5897] exit_group(0) = ? [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5897] +++ exited with 0 +++ [pid 5854] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5854] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5926 attached [pid 5926] set_robust_list(0x55555f225660, 24) = 0 [pid 5854] <... clone resumed>, child_tidptr=0x55555f225650) = 5926 [pid 5899] write(-1, NULL, 10) = -1 EBADF (Bad file descriptor) [pid 5899] exit_group(0) = ? [pid 5926] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5899] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5926] <... prctl resumed>) = 0 [pid 5926] setpgid(0, 0) = 0 [pid 5926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5926] write(3, "1000", 4) = 4 executing program [pid 5926] close(3) = 0 [pid 5926] write(1, "executing program\n", 18) = 18 [pid 5926] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5926] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd97bdf760) = 0 [ 92.808616][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [pid 5926] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5927 attached , child_tidptr=0x55555f225650) = 5927 [pid 5927] set_robust_list(0x55555f225660, 24) = 0 [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5927] <... prctl resumed>) = 0 [pid 5926] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5927] setpgid(0, 0) = 0 [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5927] write(3, "1000", 4) = 4 [pid 5927] close(3 [pid 5919] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5927] <... close resumed>) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5927] write(1, "executing program\n", 18executing program ) = 18 [pid 5927] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5927] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd97bdf760) = 0 [pid 5927] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 92.872188][ T981] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 92.890340][ T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 92.900791][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 92.907165][ T10] em28xx 4-1:0.132: board has no eeprom [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5919] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 92.948339][ T981] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 92.957719][ T981] em28xx 3-1:0.132: board has no eeprom [ 92.965908][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 92.973864][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 92.981538][ T5879] em28xx 4-1:0.132: Registering V4L2 extension [ 92.989588][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 92.999000][ T9] em28xx 1-1:0.132: board has no eeprom [ 93.008014][ T10] usb 4-1: USB disconnect, device number 4 [ 93.019425][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 93.025230][ T981] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 93.033203][ T981] em28xx 3-1:0.132: analog set to bulk mode. [ 93.035929][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 93.058963][ T981] usb 3-1: USB disconnect, device number 4 [ 93.066566][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 93.074417][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 93.083065][ T981] em28xx 3-1:0.132: Disconnecting em28xx [ 93.096014][ T9] usb 1-1: USB disconnect, device number 4 [ 93.103525][ T9] em28xx 1-1:0.132: Disconnecting em28xx [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 93.152233][ T5879] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 93.159486][ T5879] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 93.166752][ T5879] em28xx 4-1:0.132: No AC97 audio processor [ 93.174805][ T5879] usb 4-1: Decoder not found [ 93.179484][ T5879] em28xx 4-1:0.132: failed to create media graph [ 93.188272][ T5879] em28xx 4-1:0.132: V4L2 device video103 deregistered [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 9 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 93.196560][ T5879] em28xx 4-1:0.132: Remote control support is not available for this card. [ 93.205659][ T5877] em28xx 3-1:0.132: Registering V4L2 extension [ 93.235610][ T43] usb 2-1: Using ep0 maxpacket: 32 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 27 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 4 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 93.272231][ T43] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 93.283116][ T43] usb 2-1: config 0 has no interface number 0 [ 93.289874][ T43] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [ 93.313848][ T43] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 93.322790][ T5877] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 93.324661][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.330256][ T5877] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 93.340222][ T43] usb 2-1: Product: syz [ 93.347507][ T5877] em28xx 3-1:0.132: No AC97 audio processor [ 93.351602][ T43] usb 2-1: Manufacturer: syz [ 93.357873][ T5877] usb 3-1: Decoder not found [ 93.362405][ T43] usb 2-1: SerialNumber: syz [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [ 93.365016][ T5877] em28xx 3-1:0.132: failed to create media graph [ 93.374814][ T43] usb 2-1: config 0 descriptor?? [ 93.383074][ T5877] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 93.391914][ T5877] em28xx 3-1:0.132: Remote control support is not available for this card. [ 93.400643][ T5863] em28xx 1-1:0.132: Registering V4L2 extension [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [ 93.424388][ T43] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 93.434756][ T43] em28xx 2-1:0.132: Video interface 132 found: [ 93.509686][ T5863] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 93.516944][ T5863] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 93.524099][ T5863] em28xx 1-1:0.132: No AC97 audio processor [ 93.532235][ T5863] usb 1-1: Decoder not found [ 93.536928][ T5863] em28xx 1-1:0.132: failed to create media graph [ 93.543320][ T5863] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 93.552523][ T5863] em28xx 1-1:0.132: Remote control support is not available for this card. [ 93.561328][ T10] em28xx 4-1:0.132: Closing input extension [ 93.567492][ T981] em28xx 3-1:0.132: Closing input extension [ 93.573813][ T9] em28xx 1-1:0.132: Closing input extension [ 93.583389][ T10] em28xx 4-1:0.132: Freeing device [ 93.592947][ T981] em28xx 3-1:0.132: Freeing device [ 93.603181][ T9] em28xx 1-1:0.132: Freeing device [pid 5919] write(-1, NULL, 10) = -1 EBADF (Bad file descriptor) [pid 5919] exit_group(0) = ? [pid 5919] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5938 attached , child_tidptr=0x55555f225650) = 5938 [pid 5938] set_robust_list(0x55555f225660, 24) = 0 [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5938] setpgid(0, 0) = 0 [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5938] write(3, "1000", 4) = 4 [pid 5938] close(3executing program ) = 0 [pid 5938] write(1, "executing program\n", 18) = 18 [pid 5938] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5938] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd97bdf760) = 0 [pid 5938] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5924] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 93.736431][ T43] em28xx 2-1:0.132: unknown em28xx chip ID (0) [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5927] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5926] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5924] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 93.803254][ T43] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 93.813597][ T43] em28xx 2-1:0.132: board has no eeprom [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5927] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5926] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 93.885736][ T43] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 93.894778][ T43] em28xx 2-1:0.132: analog set to bulk mode. [ 93.904202][ T24] em28xx 2-1:0.132: Registering V4L2 extension [ 93.907153][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.913707][ T43] usb 2-1: USB disconnect, device number 5 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5924] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5927] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5926] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 93.933869][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.937058][ T43] em28xx 2-1:0.132: Disconnecting em28xx [ 93.947574][ T981] usb 3-1: new high-speed USB device number 5 using dummy_hcd [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5924] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5927] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5926] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5924] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 94.051544][ T24] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 94.059046][ T24] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 94.067859][ T24] em28xx 2-1:0.132: No AC97 audio processor [ 94.075156][ T24] usb 2-1: Decoder not found [ 94.082491][ T24] em28xx 2-1:0.132: failed to create media graph [ 94.088905][ T24] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 94.095514][ T10] usb 4-1: Using ep0 maxpacket: 32 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 9 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 27 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5927] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 94.097234][ T24] em28xx 2-1:0.132: Remote control support is not available for this card. [ 94.106796][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 94.110778][ T43] em28xx 2-1:0.132: Closing input extension [ 94.120730][ T10] usb 4-1: config 0 has no interface number 0 [ 94.129771][ T43] em28xx 2-1:0.132: Freeing device [ 94.132173][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 94.140879][ T981] usb 3-1: Using ep0 maxpacket: 32 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 9 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 27 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5926] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 9 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 27 [ 94.152775][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 94.163231][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.175058][ T9] usb 1-1: config 0 has no interface number 0 [ 94.187541][ T981] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5924] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 4 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5927] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 4 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 94.197718][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.214286][ T981] usb 3-1: config 0 has no interface number 0 [ 94.221278][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 94.232071][ T981] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.244961][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5926] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5927] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5927] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5926] <... ioctl resumed>, 0x7ffd97bde750) = 4 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 8 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 94.253829][ T10] usb 4-1: Product: syz [ 94.258852][ T10] usb 4-1: Manufacturer: syz [ 94.263675][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 94.272901][ T10] usb 4-1: SerialNumber: syz [ 94.277750][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.288792][ T9] usb 1-1: Product: syz [ 94.294447][ T10] usb 4-1: config 0 descriptor?? [ 94.299839][ T9] usb 1-1: Manufacturer: syz [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5924] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5926] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5938] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5924] <... ioctl resumed>, 0x2) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5924] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [pid 5927] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 94.304599][ T9] usb 1-1: SerialNumber: syz [ 94.309624][ T981] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 94.321795][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.331169][ T9] usb 1-1: config 0 descriptor?? [ 94.339225][ T981] usb 3-1: Product: syz [ 94.344203][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [pid 5927] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [pid 5938] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5926] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [ 94.354243][ T981] usb 3-1: Manufacturer: syz [ 94.358937][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 94.365242][ T981] usb 3-1: SerialNumber: syz [ 94.372846][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 94.384070][ T9] em28xx 1-1:0.132: Video interface 132 found: [ 94.391744][ T981] usb 3-1: config 0 descriptor?? [pid 5938] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd97bde750) = 18 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 94.405396][ T981] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 94.415822][ T981] em28xx 3-1:0.132: Video interface 132 found: [ 94.445647][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5924] write(-1, NULL, 10) = -1 EBADF (Bad file descriptor) [pid 5924] exit_group(0) = ? [pid 5924] +++ exited with 0 +++ [pid 5856] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5856] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5946 attached , child_tidptr=0x55555f225650) = 5946 [pid 5946] set_robust_list(0x55555f225660, 24) = 0 [pid 5946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5946] setpgid(0, 0) = 0 [pid 5946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5927] write(-1, NULL, 10 [pid 5946] write(3, "1000", 4) = 4 [pid 5927] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5946] close(3 [pid 5927] exit_group(0 [pid 5946] <... close resumed>) = 0 [pid 5927] <... exit_group resumed>) = ? [pid 5946] write(1, "executing program\n", 18executing program ) = 18 [pid 5946] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5946] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd97bdf760) = 0 [pid 5946] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5927] +++ exited with 0 +++ [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5926] write(-1, NULL, 10) = -1 EBADF (Bad file descriptor) [pid 5946] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5938] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5926] exit_group(0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5926] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5947 attached [pid 5938] <... ioctl resumed>, 0x7ffd97bde750) = 18 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5851] <... clone resumed>, child_tidptr=0x55555f225650) = 5947 [pid 5947] set_robust_list(0x55555f225660, 24 [pid 5938] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5947] <... set_robust_list resumed>) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5938] <... ioctl resumed>, 0x7ffd97bde750) = 9 [pid 5926] +++ exited with 0 +++ [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5947] setpgid(0, 0 [pid 5938] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5854] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5926, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5947] <... setpgid resumed>) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 94.590746][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 94.605518][ T43] usb 2-1: Using ep0 maxpacket: 32 [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5938] <... ioctl resumed>, 0x7ffd97bde750) = 27 [pid 5947] write(3, "1000", 4 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5947] <... write resumed>) = 4 ./strace-static-x86_64: Process 5948 attached [pid 5947] close(3 [pid 5948] set_robust_list(0x55555f225660, 24) = 0 [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5947] <... close resumed>) = 0 [pid 5948] <... prctl resumed>) = 0 [pid 5938] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5854] <... clone resumed>, child_tidptr=0x55555f225650) = 5948 [pid 5948] setpgid(0, 0 [pid 5947] write(1, "executing program\n", 18 executing program [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5948] <... setpgid resumed>) = 0 [pid 5947] <... write resumed>) = 18 [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5947] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5947] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd97bdf760) = 0 [pid 5947] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5948] <... openat resumed>) = 3 [pid 5947] <... ioctl resumed>, 0) = 0 [pid 5938] <... ioctl resumed>, 0x7ffd97bde750) = 4 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5947] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 94.641087][ T43] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 94.645955][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 94.649645][ T43] usb 2-1: config 0 has no interface number 0 [ 94.662529][ T43] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.664699][ T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5938] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5948] write(3, "1000", 4 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5948] <... write resumed>) = 4 [pid 5948] close(3 [pid 5938] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5948] <... close resumed>) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5948] write(1, "executing program\n", 18 [pid 5938] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5948] <... write resumed>) = 18 executing program [pid 5948] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5938] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5948] <... openat resumed>) = 3 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5948] ioctl(3, USB_RAW_IOCTL_INIT [pid 5938] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5948] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5938] <... ioctl resumed>, 0x7ffd97bde750) = 8 [pid 5948] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5948] <... ioctl resumed>, 0) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 94.691150][ T981] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 94.699300][ T10] em28xx 4-1:0.132: board has no eeprom [ 94.705547][ T43] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 94.717257][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.726236][ T43] usb 2-1: Product: syz [ 94.730427][ T43] usb 2-1: Manufacturer: syz [ 94.735105][ T43] usb 2-1: SerialNumber: syz [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5938] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f9b95db43ec) = -1 EINVAL (Invalid argument) [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd97bde750) = 0 [ 94.739783][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 94.739812][ T9] em28xx 1-1:0.132: board has no eeprom [ 94.757913][ T43] usb 2-1: config 0 descriptor?? [ 94.763817][ T981] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 94.773411][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 94.781743][ T981] em28xx 3-1:0.132: board has no eeprom [ 94.785403][ T43] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 94.787522][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 94.798729][ T43] em28xx 2-1:0.132: Video interface 132 found: [ 94.803402][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 94.818602][ T5863] em28xx 4-1:0.132: Registering V4L2 extension [ 94.828558][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 94.836370][ T10] usb 4-1: USB disconnect, device number 5 [ 94.843765][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 94.855955][ T981] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 94.863815][ T981] em28xx 3-1:0.132: analog set to bulk mode. [ 94.877963][ T9] usb 1-1: USB disconnect, device number 5 [ 94.887690][ T9] em28xx 1-1:0.132: Disconnecting em28xx [ 94.897449][ T981] usb 3-1: USB disconnect, device number 5 [ 94.904828][ T981] em28xx 3-1:0.132: Disconnecting em28xx [pid 5938] write(-1, NULL, 10) = -1 EBADF (Bad file descriptor) [pid 5938] exit_group(0) = ? [pid 5938] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5938, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5952 attached , child_tidptr=0x55555f225650) = 5952 [ 94.968051][ T5863] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 94.975124][ T5863] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 94.989115][ T5863] em28xx 4-1:0.132: No AC97 audio processor [ 95.001233][ T5863] usb 4-1: Decoder not found [ 95.006039][ T5863] em28xx 4-1:0.132: failed to create media graph [pid 5952] set_robust_list(0x55555f225660, 24) = 0 [pid 5952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5952] setpgid(0, 0) = 0 [pid 5952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5952] write(3, "1000", 4) = 4 [pid 5952] close(3) = 0 [pid 5952] write(1, "executing program\n", 18executing program ) = 18 [pid 5952] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5952] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd97bdf760) = 0 [pid 5952] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd97bdf760) = 0 [ 95.012456][ T5863] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 95.021759][ T5863] em28xx 4-1:0.132: Remote control support is not available for this card. [ 95.030587][ T5877] em28xx 1-1:0.132: Registering V4L2 extension [ 95.046407][ T43] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 95.121421][ T43] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 95.130519][ T43] em28xx 2-1:0.132: board has no eeprom [ 95.135583][ T5877] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 95.143435][ T5877] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 95.156900][ T5877] em28xx 1-1:0.132: No AC97 audio processor [ 95.164311][ T5877] usb 1-1: Decoder not found [ 95.169013][ T5877] em28xx 1-1:0.132: failed to create media graph [ 95.175389][ T5877] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 95.183702][ T5877] em28xx 1-1:0.132: Remote control support is not available for this card. [ 95.192548][ T5879] em28xx 3-1:0.132: Registering V4L2 extension [ 95.207721][ T43] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 95.219828][ T43] em28xx 2-1:0.132: analog set to bulk mode. [ 95.239289][ T43] usb 2-1: USB disconnect, device number 6 [ 95.257065][ T43] em28xx 2-1:0.132: Disconnecting em28xx [ 95.299005][ T5879] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 95.306222][ T5879] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 95.313347][ T5879] em28xx 3-1:0.132: No AC97 audio processor [ 95.321136][ T5879] usb 3-1: Decoder not found [ 95.325840][ T5879] em28xx 3-1:0.132: failed to create media graph [ 95.332255][ T5879] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 95.346300][ T5879] em28xx 3-1:0.132: Remote control support is not available for this card. [ 95.355361][ T10] em28xx 4-1:0.132: Closing input extension [ 95.361927][ T9] em28xx 1-1:0.132: Closing input extension [ 95.369190][ T24] em28xx 2-1:0.132: Registering V4L2 extension [ 95.371301][ T10] em28xx 4-1:0.132: Freeing device [ 95.384178][ T9] em28xx 1-1:0.132: Freeing device [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5946] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5947] <... ioctl resumed>, 0x7ffd97bdf760) = 0 [ 95.547973][ T24] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 95.557845][ T24] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 95.565102][ T24] em28xx 2-1:0.132: No AC97 audio processor [ 95.596219][ T24] usb 2-1: Decoder not found [ 95.600969][ T24] em28xx 2-1:0.132: failed to create media graph [ 95.613229][ T24] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 95.621845][ T24] em28xx 2-1:0.132: Remote control support is not available for this card. [ 95.621953][ T5963] ================================================================== [ 95.630840][ T43] em28xx 2-1:0.132: Closing input extension [ 95.638791][ T5963] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 95.652249][ T5963] Read of size 8 at addr ffff88802497c740 by task v4l_id/5963 [ 95.659712][ T5963] [ 95.662040][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: v4l_id Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 95.662058][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.662067][ T5963] Call Trace: [ 95.662074][ T5963] [ 95.662081][ T5963] dump_stack_lvl+0x189/0x250 [ 95.662104][ T5963] ? rcu_is_watching+0x15/0xb0 [ 95.662139][ T5963] ? __kasan_check_byte+0x12/0x40 [ 95.662156][ T5963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.662175][ T5963] ? rcu_is_watching+0x15/0xb0 [ 95.662192][ T5963] ? lock_release+0x4b/0x3e0 [ 95.662210][ T5963] ? __virt_addr_valid+0x1c8/0x5c0 [ 95.662231][ T5963] ? __virt_addr_valid+0x4a5/0x5c0 [ 95.662252][ T5963] print_report+0xca/0x240 [ 95.662268][ T5963] ? v4l2_fh_open+0xc7/0x430 [ 95.662286][ T5963] kasan_report+0x118/0x150 [ 95.662303][ T5963] ? v4l2_fh_open+0xc7/0x430 [ 95.662326][ T5963] v4l2_fh_open+0xc7/0x430 [ 95.662348][ T5963] em28xx_v4l2_open+0x157/0x9a0 [ 95.662372][ T5963] v4l2_open+0x20f/0x360 [ 95.662394][ T5963] chrdev_open+0x4cc/0x5e0 [ 95.662417][ T5963] ? __pfx_chrdev_open+0x10/0x10 [ 95.662439][ T5963] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 95.662463][ T5963] ? __pfx_chrdev_open+0x10/0x10 [ 95.662483][ T5963] do_dentry_open+0x950/0x13f0 [ 95.662502][ T5963] vfs_open+0x3b/0x340 [ 95.662515][ T5963] ? path_openat+0x2ecd/0x3830 [ 95.662532][ T5963] path_openat+0x2ee5/0x3830 [ 95.662548][ T5963] ? arch_stack_walk+0xfc/0x150 [ 95.662579][ T5963] ? __pfx_path_openat+0x10/0x10 [ 95.662595][ T5963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.662616][ T5963] do_filp_open+0x1fa/0x410 [ 95.662632][ T5963] ? __lock_acquire+0xab9/0xd20 [ 95.662648][ T5963] ? __pfx_do_filp_open+0x10/0x10 [ 95.662673][ T5963] ? _raw_spin_unlock+0x28/0x50 [ 95.662696][ T5963] ? alloc_fd+0x64c/0x6c0 [ 95.662720][ T5963] do_sys_openat2+0x121/0x1c0 [ 95.662736][ T5963] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.662751][ T5963] ? exc_page_fault+0x76/0xf0 [ 95.662771][ T5963] ? do_user_addr_fault+0xc8a/0x1390 [ 95.662788][ T5963] __x64_sys_openat+0x138/0x170 [ 95.662805][ T5963] do_syscall_64+0xfa/0x3b0 [ 95.662826][ T5963] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.662845][ T5963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.662859][ T5963] ? clear_bhb_loop+0x60/0xb0 [ 95.662875][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.662889][ T5963] RIP: 0033:0x7f1c412a7407 [ 95.662902][ T5963] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 95.662915][ T5963] RSP: 002b:00007fff28036270 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 95.662932][ T5963] RAX: ffffffffffffffda RBX: 00007f1c41a25880 RCX: 00007f1c412a7407 [ 95.662943][ T5963] RDX: 0000000000000000 RSI: 00007fff28037f1d RDI: ffffffffffffff9c [ 95.662953][ T5963] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 95.662961][ T5963] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 95.662970][ T5963] R13: 00007fff280364c0 R14: 00007f1c41b8c000 R15: 0000560a515d14d8 [ 95.662986][ T5963] [ 95.662991][ T5963] [ 95.969561][ T5963] Allocated by task 24: [ 95.973708][ T5963] kasan_save_track+0x3e/0x80 [ 95.978382][ T5963] __kasan_kmalloc+0x93/0xb0 [ 95.982966][ T5963] __kmalloc_cache_noprof+0x230/0x3d0 [ 95.988353][ T5963] em28xx_v4l2_init+0x10b/0x2e70 [ 95.993391][ T5963] em28xx_init_extension+0x120/0x1c0 [ 95.998664][ T5963] process_scheduled_works+0xade/0x17b0 [ 96.004248][ T5963] worker_thread+0x8a0/0xda0 [ 96.008823][ T5963] kthread+0x70e/0x8a0 [ 96.012906][ T5963] ret_from_fork+0x3f9/0x770 [ 96.017501][ T5963] ret_from_fork_asm+0x1a/0x30 [ 96.022254][ T5963] [ 96.024576][ T5963] Freed by task 24: [ 96.028365][ T5963] kasan_save_track+0x3e/0x80 [ 96.033028][ T5963] kasan_save_free_info+0x46/0x50 [ 96.038133][ T5963] __kasan_slab_free+0x62/0x70 [ 96.042880][ T5963] kfree+0x18e/0x440 [ 96.046761][ T5963] em28xx_v4l2_init+0x1683/0x2e70 [ 96.051781][ T5963] em28xx_init_extension+0x120/0x1c0 [ 96.057054][ T5963] process_scheduled_works+0xade/0x17b0 [ 96.062761][ T5963] worker_thread+0x8a0/0xda0 [ 96.067370][ T5963] kthread+0x70e/0x8a0 [ 96.071435][ T5963] ret_from_fork+0x3f9/0x770 [ 96.076108][ T5963] ret_from_fork_asm+0x1a/0x30 [ 96.080872][ T5963] [ 96.083185][ T5963] The buggy address belongs to the object at ffff88802497c000 [ 96.083185][ T5963] which belongs to the cache kmalloc-8k of size 8192 [ 96.097228][ T5963] The buggy address is located 1856 bytes inside of [ 96.097228][ T5963] freed 8192-byte region [ffff88802497c000, ffff88802497e000) [ 96.111359][ T5963] [ 96.113815][ T5963] The buggy address belongs to the physical page: [ 96.120271][ T5963] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24978 [ 96.129104][ T5963] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 96.137679][ T5963] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 96.145643][ T5963] page_type: f5(slab) [ 96.149706][ T5963] raw: 00fff00000000040 ffff88801a842280 ffffea000083ee00 0000000000000005 [ 96.158372][ T5963] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 96.167082][ T5963] head: 00fff00000000040 ffff88801a842280 ffffea000083ee00 0000000000000005 [ 96.175750][ T5963] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 96.184427][ T5963] head: 00fff00000000003 ffffea0000925e01 00000000ffffffff 00000000ffffffff [ 96.193098][ T5963] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 96.201756][ T5963] page dumped because: kasan: bad access detected [ 96.208269][ T5963] page_owner tracks the page as allocated [ 96.213972][ T5963] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5609, tgid 5609 (init), ts 60047469698, free_ts 60007456740 [ 96.234019][ T5963] post_alloc_hook+0x240/0x2a0 [ 96.238823][ T5963] get_page_from_freelist+0x21e4/0x22c0 [ 96.244485][ T5963] __alloc_frozen_pages_noprof+0x181/0x370 [ 96.250396][ T5963] alloc_pages_mpol+0x232/0x4a0 [ 96.255344][ T5963] allocate_slab+0x8a/0x370 [ 96.259852][ T5963] ___slab_alloc+0xbeb/0x1410 [ 96.264636][ T5963] __kmalloc_cache_noprof+0x296/0x3d0 [ 96.270094][ T5963] tomoyo_init_log+0x111f/0x1f70 [ 96.275111][ T5963] tomoyo_supervisor+0x340/0x1480 [ 96.280296][ T5963] tomoyo_env_perm+0x149/0x1e0 [ 96.285099][ T5963] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 96.290723][ T5963] tomoyo_bprm_check_security+0x11c/0x180 [ 96.296441][ T5963] security_bprm_check+0x89/0x270 [ 96.301456][ T5963] bprm_execve+0x8ee/0x1450 [ 96.306054][ T5963] do_execveat_common+0x510/0x6a0 [ 96.311215][ T5963] __x64_sys_execve+0x94/0xb0 [ 96.316022][ T5963] page last free pid 5609 tgid 5609 stack trace: [ 96.322551][ T5963] __free_frozen_pages+0xbc4/0xd30 [ 96.327763][ T5963] __put_partials+0x156/0x1a0 [ 96.332448][ T5963] put_cpu_partial+0x17c/0x250 [ 96.337303][ T5963] __slab_free+0x2d5/0x3c0 [ 96.341713][ T5963] qlist_free_all+0x97/0x140 [ 96.346553][ T5963] kasan_quarantine_reduce+0x148/0x160 [ 96.351997][ T5963] __kasan_slab_alloc+0x22/0x80 [ 96.356840][ T5963] __kmalloc_noprof+0x224/0x4f0 [ 96.361765][ T5963] tomoyo_supervisor+0xbd5/0x1480 [ 96.366952][ T5963] tomoyo_path_permission+0x25a/0x380 [ 96.372403][ T5963] tomoyo_check_open_permission+0x2b6/0x3b0 [ 96.378287][ T5963] security_file_open+0xb1/0x270 [ 96.383230][ T5963] do_dentry_open+0x384/0x13f0 [ 96.388189][ T5963] vfs_open+0x3b/0x340 [ 96.392244][ T5963] path_openat+0x2ee5/0x3830 [ 96.396822][ T5963] do_filp_open+0x1fa/0x410 [ 96.401318][ T5963] [ 96.403631][ T5963] Memory state around the buggy address: [ 96.409254][ T5963] ffff88802497c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.417306][ T5963] ffff88802497c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.425493][ T5963] >ffff88802497c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.433561][ T5963] ^ [ 96.439702][ T5963] ffff88802497c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.447926][ T5963] ffff88802497c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.456118][ T5963] ================================================================== [ 96.464970][ T981] em28xx 3-1:0.132: Closing input extension [ 96.474302][ T5963] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.481623][ T5963] CPU: 1 UID: 0 PID: 5963 Comm: v4l_id Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 96.492936][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.503029][ T5963] Call Trace: [ 96.506319][ T5963] [ 96.509349][ T5963] dump_stack_lvl+0x99/0x250 [ 96.513962][ T5963] ? __asan_memcpy+0x40/0x70 [ 96.518586][ T5963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.523874][ T5963] ? __pfx__printk+0x10/0x10 [ 96.528556][ T5963] vpanic+0x281/0x750 [ 96.532537][ T5963] ? preempt_schedule+0xae/0xc0 [ 96.537399][ T5963] ? __pfx_vpanic+0x10/0x10 [ 96.541915][ T5963] ? preempt_schedule_common+0x83/0xd0 [ 96.547390][ T5963] ? preempt_schedule+0xae/0xc0 [ 96.552327][ T5963] ? __pfx_preempt_schedule+0x10/0x10 [ 96.557707][ T5963] panic+0xb9/0xc0 [ 96.561454][ T5963] ? __pfx_panic+0x10/0x10 [ 96.566216][ T5963] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 96.572115][ T5963] ? v4l2_fh_open+0xc7/0x430 [ 96.576706][ T5963] check_panic_on_warn+0x89/0xb0 [ 96.581639][ T5963] ? v4l2_fh_open+0xc7/0x430 [ 96.586439][ T5963] end_report+0x78/0x160 [ 96.590684][ T5963] kasan_report+0x129/0x150 [ 96.595212][ T5963] ? v4l2_fh_open+0xc7/0x430 [ 96.599809][ T5963] v4l2_fh_open+0xc7/0x430 [ 96.604232][ T5963] em28xx_v4l2_open+0x157/0x9a0 [ 96.609241][ T5963] v4l2_open+0x20f/0x360 [ 96.613500][ T5963] chrdev_open+0x4cc/0x5e0 [ 96.617924][ T5963] ? __pfx_chrdev_open+0x10/0x10 [ 96.622885][ T5963] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 96.629316][ T5963] ? __pfx_chrdev_open+0x10/0x10 [ 96.634267][ T5963] do_dentry_open+0x950/0x13f0 [ 96.639039][ T5963] vfs_open+0x3b/0x340 [ 96.643113][ T5963] ? path_openat+0x2ecd/0x3830 [ 96.647967][ T5963] path_openat+0x2ee5/0x3830 [ 96.652643][ T5963] ? arch_stack_walk+0xfc/0x150 [ 96.657594][ T5963] ? __pfx_path_openat+0x10/0x10 [ 96.662532][ T5963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.668606][ T5963] do_filp_open+0x1fa/0x410 [ 96.673108][ T5963] ? __lock_acquire+0xab9/0xd20 [ 96.677964][ T5963] ? __pfx_do_filp_open+0x10/0x10 [ 96.683033][ T5963] ? _raw_spin_unlock+0x28/0x50 [ 96.687887][ T5963] ? alloc_fd+0x64c/0x6c0 [ 96.692221][ T5963] do_sys_openat2+0x121/0x1c0 [ 96.696899][ T5963] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.702098][ T5963] ? exc_page_fault+0x76/0xf0 [ 96.706779][ T5963] ? do_user_addr_fault+0xc8a/0x1390 [ 96.712159][ T5963] __x64_sys_openat+0x138/0x170 [ 96.717012][ T5963] do_syscall_64+0xfa/0x3b0 [ 96.721520][ T5963] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.726717][ T5963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.732958][ T5963] ? clear_bhb_loop+0x60/0xb0 [ 96.737633][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.743613][ T5963] RIP: 0033:0x7f1c412a7407 [ 96.748117][ T5963] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 96.767806][ T5963] RSP: 002b:00007fff28036270 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 96.776313][ T5963] RAX: ffffffffffffffda RBX: 00007f1c41a25880 RCX: 00007f1c412a7407 [ 96.784287][ T5963] RDX: 0000000000000000 RSI: 00007fff28037f1d RDI: ffffffffffffff9c [ 96.792257][ T5963] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 96.800225][ T5963] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 96.808195][ T5963] R13: 00007fff280364c0 R14: 00007f1c41b8c000 R15: 0000560a515d14d8 [ 96.816171][ T5963] [ 96.819458][ T5963] Kernel Offset: disabled [ 96.823775][ T5963] Rebooting in 86400 seconds..