./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3734298382 <...> Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. execve("./syz-executor3734298382", ["./syz-executor3734298382"], 0x7ffc4d858c20 /* 10 vars */) = 0 brk(NULL) = 0x55555729f000 brk(0x55555729fd00) = 0x55555729fd00 arch_prctl(ARCH_SET_FS, 0x55555729f380) = 0 set_tid_address(0x55555729f650) = 5853 set_robust_list(0x55555729f660, 24) = 0 rseq(0x55555729fca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3734298382", 4096) = 28 getrandom("\x19\x21\x15\x65\x55\x0f\x21\xbf", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555729fd00 brk(0x5555572c0d00) = 0x5555572c0d00 brk(0x5555572c1000) = 0x5555572c1000 mprotect(0x7fa3ec303000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5854 attached [pid 5854] set_robust_list(0x55555729f660, 24 [pid 5853] <... clone resumed>, child_tidptr=0x55555729f650) = 5854 [pid 5854] <... set_robust_list resumed>) = 0 [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5855 attached [pid 5855] set_robust_list(0x55555729f660, 24./strace-static-x86_64: Process 5856 attached [pid 5854] <... clone resumed>, child_tidptr=0x55555729f650) = 5855 [pid 5855] <... set_robust_list resumed>) = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5853] <... clone resumed>, child_tidptr=0x55555729f650) = 5856 [pid 5856] set_robust_list(0x55555729f660, 24 [pid 5855] <... prctl resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5856] <... set_robust_list resumed>) = 0 [pid 5855] setpgid(0, 0) = 0 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5858 attached ./strace-static-x86_64: Process 5857 attached [pid 5853] <... clone resumed>, child_tidptr=0x55555729f650) = 5857 [pid 5858] set_robust_list(0x55555729f660, 24 [pid 5855] write(3, "1000", 4 [pid 5856] <... clone resumed>, child_tidptr=0x55555729f650) = 5858 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5858] <... set_robust_list resumed>) = 0 [pid 5857] set_robust_list(0x55555729f660, 24 [pid 5855] <... write resumed>) = 4 [pid 5857] <... set_robust_list resumed>) = 0 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5857] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5855] close(3./strace-static-x86_64: Process 5859 attached [pid 5858] <... prctl resumed>) = 0 [pid 5855] <... close resumed>) = 0 [pid 5853] <... clone resumed>, child_tidptr=0x55555729f650) = 5859 executing program [pid 5858] setpgid(0, 0 [pid 5855] write(1, "executing program\n", 18 [pid 5859] set_robust_list(0x55555729f660, 24 [pid 5858] <... setpgid resumed>) = 0 [pid 5855] <... write resumed>) = 18 ./strace-static-x86_64: Process 5860 attached [pid 5859] <... set_robust_list resumed>) = 0 [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5855] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5859] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5860] set_robust_list(0x55555729f660, 24 [pid 5858] <... openat resumed>) = 3 [pid 5857] <... clone resumed>, child_tidptr=0x55555729f650) = 5860 [pid 5855] <... openat resumed>) = 3 [pid 5860] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5861 attached [pid 5861] set_robust_list(0x55555729f660, 24 [pid 5859] <... clone resumed>, child_tidptr=0x55555729f650) = 5861 [pid 5858] write(3, "1000", 4 [pid 5855] ioctl(3, USB_RAW_IOCTL_INIT [pid 5861] <... set_robust_list resumed>) = 0 [pid 5860] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5858] <... write resumed>) = 4 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5858] close(3 [pid 5861] <... prctl resumed>) = 0 [pid 5860] <... prctl resumed>) = 0 [pid 5858] <... close resumed>) = 0 [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] setpgid(0, 0 [pid 5860] setpgid(0, 0 executing program [pid 5858] write(1, "executing program\n", 18 [pid 5855] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5860] <... setpgid resumed>) = 0 [pid 5858] <... write resumed>) = 18 [pid 5858] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5858] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffb01703b0) = 0 [pid 5861] <... setpgid resumed>) = 0 [pid 5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5855] <... ioctl resumed>, 0) = 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5858] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] <... openat resumed>) = 3 [pid 5860] <... openat resumed>) = 3 [pid 5858] <... ioctl resumed>, 0) = 0 [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5860] write(3, "1000", 4) = 4 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] write(3, "1000", 4) = 4 [pid 5861] close(3) = 0 executing program [pid 5861] write(1, "executing program\n", 18) = 18 [pid 5861] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] ioctl(3, USB_RAW_IOCTL_INIT [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5860] close(3executing program ) = 0 [pid 5860] write(1, "executing program\n", 18) = 18 [pid 5861] <... ioctl resumed>, 0) = 0 [pid 5860] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] <... openat resumed>) = 3 [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffb01703b0) = 0 [pid 5860] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 18 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5861] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5860] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [ 76.625068][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.644988][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.652532][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.665058][ T5863] usb 3-1: new high-speed USB device number 2 using dummy_hcd [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5855] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5855] <... ioctl resumed>, 0x7fffb016f3a0) = 9 [pid 5861] <... ioctl resumed>, 0x7fffb016f3a0) = 9 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 76.794874][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 76.814846][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 76.825071][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 76.836610][ T43] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5861] <... ioctl resumed>, 0x7fffb016f3a0) = 27 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb016f3a0) = 27 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 4 [pid 5858] <... ioctl resumed>, 0x7fffb016f3a0) = 9 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5861] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5860] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] <... ioctl resumed>, 0x7fffb016f3a0) = 4 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7fffb016f3a0) = 27 [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5860] <... ioctl resumed>, 0x7fffb016f3a0) = 9 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [ 76.837026][ T9] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 76.845877][ T43] usb 4-1: config 0 has no interface number 0 [ 76.853956][ T9] usb 1-1: config 0 has no interface number 0 [ 76.860358][ T43] usb 4-1: config 0 interface 89 has no altsetting 0 [ 76.866584][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 76.878132][ T9] usb 1-1: config 0 interface 89 has no altsetting 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5860] <... ioctl resumed>, 0x7fffb016f3a0) = 27 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [ 76.889553][ T24] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 76.894568][ T5863] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 76.899152][ T24] usb 2-1: config 0 has no interface number 0 [ 76.907834][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 76.912959][ T24] usb 2-1: config 0 interface 89 has no altsetting 0 [ 76.927794][ T5863] usb 3-1: config 0 has no interface number 0 [ 76.934320][ T5863] usb 3-1: config 0 interface 89 has no altsetting 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] <... ioctl resumed>, 0x7fffb016f3a0) = 4 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] <... ioctl resumed>, 0x7fffb016f3a0) = 4 [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [ 76.936814][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 76.941805][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.952072][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.958740][ T9] usb 1-1: Product: syz [ 76.967625][ T43] usb 4-1: Product: syz [ 76.970599][ T9] usb 1-1: Manufacturer: syz [ 76.976307][ T43] usb 4-1: Manufacturer: syz [ 76.980324][ T9] usb 1-1: SerialNumber: syz [ 76.985454][ T43] usb 4-1: SerialNumber: syz [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5855] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5855] <... ioctl resumed>, 0) = 0 [pid 5860] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] <... ioctl resumed>, 0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5861] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5855] <... ioctl resumed>, 0x7fa3ec3093ec) = 10 [pid 5861] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] <... ioctl resumed>, 0) = 0 [pid 5855] <... ioctl resumed>, 0x7fffb016f3a0) = 0 [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5860] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5861] <... ioctl resumed>, 0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5858] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [ 76.994576][ T9] usb 1-1: config 0 descriptor?? [ 77.007398][ T43] usb 4-1: config 0 descriptor?? [ 77.017100][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 77.021081][ T9] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 77.027576][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5861] <... ioctl resumed>, 0x7fa3ec3093ec) = 10 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5860] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] <... ioctl resumed>, 0x7fffb016f3a0) = 0 [ 77.037857][ T9] em28xx 1-1:0.89: Video interface 89 found: bulk [ 77.050598][ T24] usb 2-1: Product: syz [ 77.055393][ T5863] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 77.055816][ T24] usb 2-1: Manufacturer: syz [ 77.066202][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.069761][ T24] usb 2-1: SerialNumber: syz [ 77.081847][ T5863] usb 3-1: Product: syz [ 77.085956][ T43] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [pid 5858] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa3ec3093ec) = 10 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fffb016f3a0) = 0 [pid 5860] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa3ec3093ec) = 10 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fffb016f3a0) = 0 [ 77.086702][ T5863] usb 3-1: Manufacturer: syz [ 77.098778][ T24] usb 2-1: config 0 descriptor?? [ 77.101990][ T5863] usb 3-1: SerialNumber: syz [ 77.105936][ T43] em28xx 4-1:0.89: Video interface 89 found: bulk [ 77.124405][ T5863] usb 3-1: config 0 descriptor?? [ 77.128329][ T24] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 77.139067][ T24] em28xx 2-1:0.89: Video interface 89 found: bulk [pid 5855] exit_group(0) = ? [pid 5855] +++ exited with 0 +++ [pid 5854] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 77.172748][ T5863] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 77.182435][ T5863] em28xx 3-1:0.89: Video interface 89 found: bulk [pid 5854] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555729f650) = 5871 ./strace-static-x86_64: Process 5871 attached [pid 5871] set_robust_list(0x55555729f660, 24) = 0 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5871] setpgid(0, 0) = 0 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5871] write(3, "1000", 4) = 4 [pid 5871] close(3) = 0 [pid 5871] write(1, "executing program\n", 18executing program ) = 18 [pid 5871] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5871] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffb01703b0) = 0 [pid 5871] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5861] exit_group(0) = ? [pid 5861] +++ exited with 0 +++ [pid 5859] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5861, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5859] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5859] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5873 attached [pid 5873] set_robust_list(0x55555729f660, 24 [pid 5859] <... clone resumed>, child_tidptr=0x55555729f650) = 5873 [pid 5873] <... set_robust_list resumed>) = 0 [ 77.275723][ T9] em28xx 1-1:0.89: unknown em28xx chip ID (0) [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5858] exit_group(0) = ? [pid 5873] <... prctl resumed>) = 0 [pid 5873] setpgid(0, 0) = 0 [pid 5858] +++ exited with 0 +++ [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5856] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5873] write(3, "1000", 4 [pid 5860] exit_group(0 [pid 5873] <... write resumed>) = 4 [pid 5873] close(3 [pid 5860] <... exit_group resumed>) = ? [pid 5873] <... close resumed>) = 0 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 5874 attached [pid 5873] write(1, "executing program\n", 18) = 18 [pid 5873] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5874] set_robust_list(0x55555729f660, 24) = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5873] <... openat resumed>) = 3 [pid 5860] +++ exited with 0 +++ [pid 5856] <... clone resumed>, child_tidptr=0x55555729f650) = 5874 [pid 5874] setpgid(0, 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_INIT [pid 5857] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5860, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5874] <... setpgid resumed>) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5873] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5873] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [ 77.343944][ T9] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 77.355078][ T9] em28xx 1-1:0.89: board has no eeprom [ 77.366762][ T43] em28xx 4-1:0.89: unknown em28xx chip ID (0) [pid 5857] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5875 attached [pid 5874] <... openat resumed>) = 3 [pid 5873] <... ioctl resumed>, 0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] set_robust_list(0x55555729f660, 24 [pid 5874] write(3, "1000", 4 [pid 5857] <... clone resumed>, child_tidptr=0x55555729f650) = 5875 [pid 5875] <... set_robust_list resumed>) = 0 [pid 5874] <... write resumed>) = 4 [pid 5874] close(3 [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5874] <... close resumed>) = 0 [pid 5875] <... prctl resumed>) = 0 [pid 5874] write(1, "executing program\n", 18 [pid 5875] setpgid(0, 0executing program [pid 5874] <... write resumed>) = 18 [pid 5875] <... setpgid resumed>) = 0 [pid 5874] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5874] <... openat resumed>) = 3 [pid 5875] write(3, "1000", 4 [pid 5874] ioctl(3, USB_RAW_IOCTL_INIT [pid 5875] <... write resumed>) = 4 [pid 5875] close(3 [pid 5874] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5875] <... close resumed>) = 0 executing program [pid 5874] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 5875] write(1, "executing program\n", 18) = 18 [pid 5875] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5874] <... ioctl resumed>, 0) = 0 [ 77.395472][ T24] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 77.415135][ T9] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 77.423903][ T9] em28xx 1-1:0.89: analog set to bulk mode. [ 77.429903][ T43] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 77.429947][ T43] em28xx 4-1:0.89: board has no eeprom [pid 5875] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffb01703b0) = 0 [pid 5875] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 77.448534][ T5863] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 77.459146][ T5867] em28xx 1-1:0.89: Registering V4L2 extension [ 77.474930][ T24] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 77.482426][ T9] usb 1-1: USB disconnect, device number 2 [ 77.489320][ T43] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 77.496742][ T24] em28xx 2-1:0.89: board has no eeprom [ 77.509888][ T9] em28xx 1-1:0.89: Disconnecting em28xx [ 77.513439][ T43] em28xx 4-1:0.89: analog set to bulk mode. [ 77.524659][ T5863] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 77.538093][ T43] usb 4-1: USB disconnect, device number 2 [ 77.550576][ T5863] em28xx 3-1:0.89: board has no eeprom [ 77.555138][ T43] em28xx 4-1:0.89: Disconnecting em28xx [ 77.560831][ T5867] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 77.564885][ T24] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 77.569510][ T5867] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 77.584672][ T5867] em28xx 1-1:0.89: No AC97 audio processor [ 77.592360][ T24] em28xx 2-1:0.89: analog set to bulk mode. [ 77.593548][ T5867] usb 1-1: Decoder not found [ 77.605656][ T5867] em28xx 1-1:0.89: failed to create media graph [ 77.609794][ T24] usb 2-1: USB disconnect, device number 2 [ 77.617970][ T5867] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 77.620576][ T5867] em28xx 1-1:0.89: Registering snapshot button... [ 77.634812][ T5863] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 77.642254][ T24] em28xx 2-1:0.89: Disconnecting em28xx [ 77.646445][ T5863] em28xx 3-1:0.89: analog set to bulk mode. [ 77.658437][ T5867] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input5 [ 77.674640][ T5863] usb 3-1: USB disconnect, device number 2 [ 77.686137][ T5863] em28xx 3-1:0.89: Disconnecting em28xx [ 77.695632][ T5867] em28xx 1-1:0.89: Remote control support is not available for this card. [ 77.704570][ T5868] em28xx 4-1:0.89: Registering V4L2 extension [ 77.732287][ T5868] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 77.740027][ T5868] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 77.747125][ T5868] em28xx 4-1:0.89: No AC97 audio processor [ 77.754862][ T5868] usb 4-1: Decoder not found [ 77.759560][ T5868] em28xx 4-1:0.89: failed to create media graph [ 77.765994][ T5868] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 77.774330][ T5868] em28xx 4-1:0.89: Registering snapshot button... [ 77.783240][ T5868] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input6 [ 77.795819][ T5868] em28xx 4-1:0.89: Remote control support is not available for this card. [ 77.804567][ T5878] em28xx 2-1:0.89: Registering V4L2 extension [ 77.832627][ T5878] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 77.839822][ T5878] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 77.846948][ T5878] em28xx 2-1:0.89: No AC97 audio processor [ 77.853995][ T5878] usb 2-1: Decoder not found [ 77.858720][ T5878] em28xx 2-1:0.89: failed to create media graph [ 77.865001][ T5878] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 77.873344][ T5878] em28xx 2-1:0.89: Registering snapshot button... [ 77.880892][ T5878] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input7 [ 77.892788][ T5878] em28xx 2-1:0.89: Remote control support is not available for this card. [ 77.901865][ T24] em28xx 2-1:0.89: Closing input extension [ 77.908200][ T24] em28xx 2-1:0.89: Deregistering snapshot button [ 77.920748][ T5877] em28xx 3-1:0.89: Registering V4L2 extension [ 77.926517][ T24] em28xx 2-1:0.89: Freeing device [ 77.966420][ T5877] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 77.974072][ T5877] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 77.981446][ T5877] em28xx 3-1:0.89: No AC97 audio processor [ 77.990192][ T5877] usb 3-1: Decoder not found [ 77.994847][ T5877] em28xx 3-1:0.89: failed to create media graph [ 78.001110][ T5877] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 78.009665][ T5877] em28xx 3-1:0.89: Registering snapshot button... [ 78.018623][ T5877] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input8 [ 78.030634][ T5877] em28xx 3-1:0.89: Remote control support is not available for this card. [ 78.039733][ T5863] em28xx 3-1:0.89: Closing input extension [ 78.046056][ T5863] em28xx 3-1:0.89: Deregistering snapshot button [ 78.055911][ T9] em28xx 1-1:0.89: Closing input extension [ 78.061760][ T9] em28xx 1-1:0.89: Deregistering snapshot button [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7fffb01703b0) = 0 [ 78.071789][ T5863] em28xx 3-1:0.89: Freeing device [ 78.084364][ T43] em28xx 4-1:0.89: Closing input extension [ 78.094249][ T9] em28xx 1-1:0.89: Freeing device [ 78.101209][ T43] em28xx 4-1:0.89: Deregistering snapshot button [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 78.143273][ T43] em28xx 4-1:0.89: Freeing device [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5874] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 18 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5871] <... ioctl resumed>, 0x7fffb01703b0) = 0 [ 78.234916][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5873] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5871] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 18 [pid 5874] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5875] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5874] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 9 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 27 [pid 5873] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5871] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5871] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [ 78.365316][ T5863] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.385099][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 78.405113][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 4 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5875] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 78.405156][ T24] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 78.421127][ T24] usb 2-1: config 0 has no interface number 0 [ 78.427304][ T24] usb 2-1: config 0 interface 89 has no altsetting 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5871] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5873] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5873] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 18 [pid 5874] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 78.474920][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.484289][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 78.493467][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.501628][ T24] usb 2-1: Product: syz [ 78.506022][ T24] usb 2-1: Manufacturer: syz [ 78.510632][ T24] usb 2-1: SerialNumber: syz [ 78.517442][ T24] usb 2-1: config 0 descriptor?? [pid 5874] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa3ec3093ec) = 10 [pid 5875] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5873] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5874] <... ioctl resumed>, 0x7fffb016f3a0) = 0 [pid 5875] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 9 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5871] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5875] <... ioctl resumed>, 0x7fffb016f3a0) = 27 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5871] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [ 78.534852][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 78.552765][ T24] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 78.562423][ T24] em28xx 2-1:0.89: Video interface 89 found: bulk [ 78.564894][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 78.577290][ T5863] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 9 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5871] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5871] <... ioctl resumed>, 0x7fffb016f3a0) = 27 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] <... ioctl resumed>, 0x7fffb016f3a0) = 4 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5871] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5875] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5873] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5873] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5871] <... ioctl resumed>, 0x7fffb016f3a0) = 4 [ 78.586357][ T5863] usb 3-1: config 0 has no interface number 0 [ 78.592792][ T5863] usb 3-1: config 0 interface 89 has no altsetting 0 [ 78.601049][ T9] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 78.610063][ T9] usb 1-1: config 0 has no interface number 0 [ 78.616857][ T9] usb 1-1: config 0 interface 89 has no altsetting 0 [ 78.625012][ T43] usb 4-1: Using ep0 maxpacket: 32 [pid 5873] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5875] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5873] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5871] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5873] <... ioctl resumed>, 0x7fffb016f3a0) = 9 [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5871] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5873] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5871] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5873] <... ioctl resumed>, 0x7fffb016f3a0) = 27 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 78.641603][ T5863] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 78.651422][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.660637][ T5863] usb 3-1: Product: syz [ 78.665218][ T5863] usb 3-1: Manufacturer: syz [ 78.670129][ T5863] usb 3-1: SerialNumber: syz [ 78.670610][ T43] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 78.683705][ T43] usb 4-1: config 0 has no interface number 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 4 [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5871] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5873] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa3ec3093ec) = 10 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fffb016f3a0) = 0 [ 78.684837][ T5863] usb 3-1: config 0 descriptor?? [ 78.694838][ T43] usb 4-1: config 0 interface 89 has no altsetting 0 [ 78.695486][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 78.706869][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 78.710878][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.725409][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5874] exit_group(0) = ? [pid 5873] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5874] +++ exited with 0 +++ [pid 5873] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5873] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa3ec3093ec) = 10 [pid 5856] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5873] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5856] restart_syscall(<... resuming interrupted clone ...> [pid 5873] <... ioctl resumed>, 0x7fffb016f3a0) = 0 [ 78.730297][ T5863] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 78.738228][ T43] usb 4-1: Product: syz [ 78.748127][ T9] usb 1-1: Product: syz [ 78.753234][ T43] usb 4-1: Manufacturer: syz [ 78.755645][ T5863] em28xx 3-1:0.89: Video interface 89 found: bulk [ 78.755831][ T9] usb 1-1: Manufacturer: syz [ 78.760873][ T43] usb 4-1: SerialNumber: syz [ 78.767121][ T9] usb 1-1: SerialNumber: syz [ 78.776751][ T43] usb 4-1: config 0 descriptor?? [pid 5856] <... restart_syscall resumed>) = 0 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5888 attached [pid 5871] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5856] <... clone resumed>, child_tidptr=0x55555729f650) = 5888 [pid 5871] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5888] set_robust_list(0x55555729f660, 24 [pid 5871] <... ioctl resumed>, 0) = 0 [pid 5888] <... set_robust_list resumed>) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5871] <... ioctl resumed>, 0) = 0 [pid 5888] <... prctl resumed>) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5888] setpgid(0, 0) = 0 [pid 5871] <... ioctl resumed>, 0x7fa3ec3093ec) = 10 [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5888] <... openat resumed>) = 3 [pid 5871] <... ioctl resumed>, 0x7fffb016f3a0) = 0 [pid 5888] write(3, "1000", 4) = 4 [pid 5888] close(3) = 0 [pid 5888] write(1, "executing program\n", 18executing program ) = 18 [ 78.799879][ T43] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 78.803739][ T9] usb 1-1: config 0 descriptor?? [ 78.815946][ T43] em28xx 4-1:0.89: Video interface 89 found: bulk [pid 5888] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5888] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffb01703b0) = 0 [pid 5888] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 78.845433][ T24] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 78.847705][ T9] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 78.863466][ T9] em28xx 1-1:0.89: Video interface 89 found: bulk [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5875] exit_group(0) = ? [pid 5875] +++ exited with 0 +++ [pid 5857] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5857] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5857] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5889 attached , child_tidptr=0x55555729f650) = 5889 [pid 5889] set_robust_list(0x55555729f660, 24) = 0 [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5889] setpgid(0, 0) = 0 [ 78.919160][ T24] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 78.927444][ T24] em28xx 2-1:0.89: board has no eeprom [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5889] write(3, "1000", 4) = 4 [pid 5889] close(3) = 0 [pid 5889] write(1, "executing program\n", 18executing program ) = 18 [pid 5889] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5889] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffb01703b0) = 0 [pid 5889] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5873] exit_group(0) = ? [pid 5889] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5873] +++ exited with 0 +++ [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5859] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5859] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5891 attached , child_tidptr=0x55555729f650) = 5891 [ 78.984853][ T24] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 78.992481][ T24] em28xx 2-1:0.89: analog set to bulk mode. [ 78.999074][ T5878] em28xx 2-1:0.89: Registering V4L2 extension [ 79.005244][ T5863] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 79.025107][ T24] usb 2-1: USB disconnect, device number 3 [pid 5891] set_robust_list(0x55555729f660, 24 [pid 5871] exit_group(0 [pid 5891] <... set_robust_list resumed>) = 0 [pid 5871] <... exit_group resumed>) = ? [pid 5891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5891] setpgid(0, 0) = 0 [pid 5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5891] write(3, "1000", 4 [pid 5871] +++ exited with 0 +++ [pid 5854] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5891] <... write resumed>) = 4 [pid 5891] close(3) = 0 executing program [pid 5854] <... clone resumed>, child_tidptr=0x55555729f650) = 5892 [pid 5891] write(1, "executing program\n", 18) = 18 [pid 5891] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ./strace-static-x86_64: Process 5892 attached [ 79.043226][ T24] em28xx 2-1:0.89: Disconnecting em28xx [ 79.070168][ T5863] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 79.079050][ T43] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 79.085608][ T5863] em28xx 3-1:0.89: board has no eeprom [pid 5891] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffb01703b0) = 0 [pid 5892] set_robust_list(0x55555729f660, 24 [pid 5891] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] <... set_robust_list resumed>) = 0 [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5892] setpgid(0, 0) = 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5892] write(3, "1000", 4) = 4 [pid 5892] close(3) = 0 executing program [pid 5892] write(1, "executing program\n", 18) = 18 [pid 5892] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5892] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffb01703b0) = 0 [ 79.095501][ T5878] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 79.102519][ T5878] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 79.113018][ T5878] em28xx 2-1:0.89: No AC97 audio processor [ 79.120385][ T5878] usb 2-1: Decoder not found [ 79.125419][ T9] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 79.125430][ T5878] em28xx 2-1:0.89: failed to create media graph [ 79.125453][ T5878] em28xx 2-1:0.89: V4L2 device video103 deregistered [pid 5892] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 79.145468][ T5863] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 79.153798][ T5863] em28xx 3-1:0.89: analog set to bulk mode. [ 79.154413][ T5878] em28xx 2-1:0.89: Registering snapshot button... [ 79.171666][ T43] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 79.171920][ T5863] usb 3-1: USB disconnect, device number 3 [ 79.181562][ T43] em28xx 4-1:0.89: board has no eeprom [ 79.192570][ T5878] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input9 [ 79.195775][ T5863] em28xx 3-1:0.89: Disconnecting em28xx [ 79.211265][ T5878] em28xx 2-1:0.89: Remote control support is not available for this card. [ 79.213869][ T9] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 79.221633][ T24] em28xx 2-1:0.89: Closing input extension [ 79.233834][ T9] em28xx 1-1:0.89: board has no eeprom [ 79.240443][ T24] em28xx 2-1:0.89: Deregistering snapshot button [ 79.253013][ T5877] em28xx 3-1:0.89: Registering V4L2 extension [ 79.255763][ T43] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 79.268790][ T24] em28xx 2-1:0.89: Freeing device [ 79.276376][ T43] em28xx 4-1:0.89: analog set to bulk mode. [ 79.294805][ T9] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 79.307131][ T9] em28xx 1-1:0.89: analog set to bulk mode. [ 79.313450][ T43] usb 4-1: USB disconnect, device number 3 [ 79.319631][ T5877] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 79.330711][ T5877] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 79.341128][ T5877] em28xx 3-1:0.89: No AC97 audio processor [ 79.345846][ T43] em28xx 4-1:0.89: Disconnecting em28xx [ 79.355193][ T9] usb 1-1: USB disconnect, device number 3 [ 79.372194][ T9] em28xx 1-1:0.89: Disconnecting em28xx [ 79.386883][ T5877] usb 3-1: Decoder not found [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5888] <... ioctl resumed>, 0x7fffb01703b0) = 0 [ 79.405391][ T5877] em28xx 3-1:0.89: failed to create media graph [ 79.424520][ T5877] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 79.434377][ T5877] em28xx 3-1:0.89: Registering snapshot button... [ 79.444688][ T5877] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input10 [ 79.458581][ T5877] em28xx 3-1:0.89: Remote control support is not available for this card. [ 79.469160][ T5878] em28xx 4-1:0.89: Registering V4L2 extension [ 79.498856][ T5878] em28xx 4-1:0.89: Config register raw data: 0xffffffed [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 79.506111][ T5878] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 79.513182][ T5878] em28xx 4-1:0.89: No AC97 audio processor [ 79.520814][ T5878] usb 4-1: Decoder not found [ 79.525781][ T5878] em28xx 4-1:0.89: failed to create media graph [ 79.532501][ T5878] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 79.540782][ T5878] em28xx 4-1:0.89: Registering snapshot button... [ 79.556179][ T5878] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input11 [ 79.570012][ T5878] em28xx 4-1:0.89: Remote control support is not available for this card. [ 79.579520][ T43] em28xx 4-1:0.89: Closing input extension [ 79.585471][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.593127][ T43] em28xx 4-1:0.89: Deregistering snapshot button [ 79.603338][ T5867] em28xx 1-1:0.89: Registering V4L2 extension [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 18 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 79.606781][ T43] em28xx 4-1:0.89: Freeing device [ 79.654462][ T5867] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 79.663175][ T5867] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 79.670959][ T5867] em28xx 1-1:0.89: No AC97 audio processor [ 79.679192][ T5867] usb 1-1: Decoder not found [ 79.684013][ T5867] em28xx 1-1:0.89: failed to create media graph [ 79.690396][ T5867] em28xx 1-1:0.89: V4L2 device video103 deregistered [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 79.699877][ T5867] em28xx 1-1:0.89: Registering snapshot button... [ 79.708576][ T5867] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input12 [ 79.720836][ T5867] em28xx 1-1:0.89: Remote control support is not available for this card. [ 79.729492][ T5863] em28xx 3-1:0.89: Closing input extension [ 79.735425][ T5863] em28xx 3-1:0.89: Deregistering snapshot button [ 79.745467][ T9] em28xx 1-1:0.89: Closing input extension [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 18 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5891] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 9 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 79.751303][ T9] em28xx 1-1:0.89: Deregistering snapshot button [ 79.760683][ T5863] em28xx 3-1:0.89: Freeing device [ 79.777109][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 79.789099][ T9] em28xx 1-1:0.89: Freeing device [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 27 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5891] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5888] <... ioctl resumed>, 0x7fffb016f3a0) = 4 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 79.810749][ T24] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 79.823134][ T24] usb 2-1: config 0 has no interface number 0 [ 79.838961][ T24] usb 2-1: config 0 interface 89 has no altsetting 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [ 79.894094][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 79.908193][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.916806][ T24] usb 2-1: Product: syz [ 79.922183][ T24] usb 2-1: Manufacturer: syz [ 79.927047][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.935835][ T24] usb 2-1: SerialNumber: syz [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5891] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5889] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5888] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5888] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5891] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5888] <... ioctl resumed>, 0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5888] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5891] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5888] <... ioctl resumed>, 0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5888] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa3ec3093ec) = 10 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fffb016f3a0) = 0 [pid 5892] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] <... ioctl resumed>, 0x7fffb01703b0) = 0 [ 79.945281][ T24] usb 2-1: config 0 descriptor?? [ 79.962099][ T24] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 79.973490][ T24] em28xx 2-1:0.89: Video interface 89 found: bulk [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5891] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 18 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5891] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 18 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 9 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5891] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5892] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [ 80.076814][ T5863] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.104843][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 80.115782][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [pid 5891] <... ioctl resumed>, 0x7fffb016f3a0) = 27 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5891] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 4 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5889] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5891] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5888] exit_group(0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5888] <... exit_group resumed>) = ? [ 80.125908][ T43] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 80.134134][ T43] usb 4-1: config 0 has no interface number 0 [ 80.140666][ T43] usb 4-1: config 0 interface 89 has no altsetting 0 [pid 5891] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5888] +++ exited with 0 +++ [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5856] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5891] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5891] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP_ENABLE./strace-static-x86_64: Process 5904 attached , 0x7fa3ec3093ec) = 10 [ 80.184212][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 80.193481][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.201793][ T43] usb 4-1: Product: syz [ 80.210056][ T43] usb 4-1: Manufacturer: syz [ 80.214695][ T43] usb 4-1: SerialNumber: syz [ 80.221422][ T43] usb 4-1: config 0 descriptor?? [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 5904] set_robust_list(0x55555729f660, 24 [pid 5856] <... clone resumed>, child_tidptr=0x55555729f650) = 5904 [pid 5904] <... set_robust_list resumed>) = 0 [pid 5891] <... ioctl resumed>, 0x7fffb016f3a0) = 0 [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5889] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5904] <... prctl resumed>) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5904] setpgid(0, 0 [pid 5889] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5904] <... setpgid resumed>) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5889] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5904] <... openat resumed>) = 3 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5904] write(3, "1000", 4) = 4 [pid 5904] close(3 [pid 5889] <... ioctl resumed>, 0x7fffb016f3a0) = 9 [pid 5904] <... close resumed>) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] write(1, "executing program\n", 18executing program ) = 18 [pid 5889] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5904] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5904] <... openat resumed>) = 3 [pid 5889] <... ioctl resumed>, 0x7fffb016f3a0) = 27 [pid 5904] ioctl(3, USB_RAW_IOCTL_INIT [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] <... ioctl resumed>, 0x7fffb01703b0) = 0 [ 80.235710][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 80.244797][ T43] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 80.254416][ T43] em28xx 4-1:0.89: Video interface 89 found: bulk [ 80.265237][ T24] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 80.275623][ T5863] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [pid 5904] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5889] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5892] <... ioctl resumed>, 0x7fffb016f3a0) = 18 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] <... ioctl resumed>, 0x7fffb016f3a0) = 4 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 9 [pid 5889] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5892] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5889] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 80.284311][ T5863] usb 3-1: config 0 has no interface number 0 [ 80.291544][ T5863] usb 3-1: config 0 interface 89 has no altsetting 0 [ 80.299618][ T9] usb 1-1: Using ep0 maxpacket: 32 [pid 5889] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5892] <... ioctl resumed>, 0x7fffb016f3a0) = 27 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] <... ioctl resumed>, 0x7fffb01703b0) = 0 [ 80.329520][ T9] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 80.330435][ T24] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 80.339563][ T9] usb 1-1: config 0 has no interface number 0 [ 80.347612][ T24] em28xx 2-1:0.89: board has no eeprom [ 80.353966][ T5863] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 80.367498][ T9] usb 1-1: config 0 interface 89 has no altsetting 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 4 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 8 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5889] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5892] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5889] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] <... ioctl resumed>, 0) = 0 [pid 5892] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 5889] <... ioctl resumed>, 0) = 0 [ 80.374891][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.383381][ T5863] usb 3-1: Product: syz [ 80.387893][ T5863] usb 3-1: Manufacturer: syz [ 80.392527][ T5863] usb 3-1: SerialNumber: syz [ 80.401527][ T5863] usb 3-1: config 0 descriptor?? [ 80.414289][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [pid 5889] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 5892] <... ioctl resumed>, 0x7fffb016f3a0) = 8 [pid 5889] <... ioctl resumed>, 0x7fa3ec3093ec) = 10 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fffb016f3a0) = 0 [pid 5891] exit_group(0) = ? [ 80.414833][ T24] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 80.423411][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.430893][ T24] em28xx 2-1:0.89: analog set to bulk mode. [ 80.440158][ T9] usb 1-1: Product: syz [ 80.445753][ T5868] em28xx 2-1:0.89: Registering V4L2 extension [ 80.452387][ T5863] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 80.460820][ T24] usb 2-1: USB disconnect, device number 4 [pid 5891] +++ exited with 0 +++ [pid 5859] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5891, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5859] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5859] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5906 attached [pid 5906] set_robust_list(0x55555729f660, 24 [pid 5859] <... clone resumed>, child_tidptr=0x55555729f650) = 5906 [pid 5906] <... set_robust_list resumed>) = 0 [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5906] setpgid(0, 0) = 0 [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5906] write(3, "1000", 4) = 4 [pid 5906] close(3) = 0 [pid 5906] write(1, "executing program\n", 18executing program ) = 18 [pid 5906] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5906] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffb01703b0) = 0 [pid 5906] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [ 80.477301][ T9] usb 1-1: Manufacturer: syz [ 80.499390][ T9] usb 1-1: SerialNumber: syz [ 80.508354][ T24] em28xx 2-1:0.89: Disconnecting em28xx [ 80.510796][ T5863] em28xx 3-1:0.89: Video interface 89 found: bulk [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] <... ioctl resumed>, 0x7fffb01703b0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa3ec3093ec) = 10 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fffb016f3a0) = 0 [ 80.539013][ T9] usb 1-1: config 0 descriptor?? [ 80.545156][ T43] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 80.551625][ T5868] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 80.566089][ T5868] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 80.580211][ T5868] em28xx 2-1:0.89: No AC97 audio processor [ 80.583236][ T9] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 80.588003][ T5868] usb 2-1: Decoder not found [ 80.601082][ T5868] em28xx 2-1:0.89: failed to create media graph [ 80.602491][ T9] em28xx 1-1:0.89: Video interface 89 found: bulk [ 80.607993][ T5868] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 80.622440][ T5868] em28xx 2-1:0.89: Registering snapshot button... [pid 5889] exit_group(0) = ? [pid 5889] +++ exited with 0 +++ [pid 5857] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5857] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5857] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5909 attached [ 80.632970][ T43] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 80.641451][ T43] em28xx 4-1:0.89: board has no eeprom [ 80.648935][ T5868] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input13 [ 80.662224][ T5868] em28xx 2-1:0.89: Remote control support is not available for this card. [ 80.672719][ T24] em28xx 2-1:0.89: Closing input extension [ 80.680702][ T24] em28xx 2-1:0.89: Deregistering snapshot button [pid 5909] set_robust_list(0x55555729f660, 24 [pid 5857] <... clone resumed>, child_tidptr=0x55555729f650) = 5909 [pid 5909] <... set_robust_list resumed>) = 0 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5909] setpgid(0, 0) = 0 [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5909] write(3, "1000", 4executing program ) = 4 [pid 5909] close(3) = 0 [pid 5909] write(1, "executing program\n", 18) = 18 [pid 5909] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5909] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffb01703b0) = 0 [ 80.696524][ T24] em28xx 2-1:0.89: Freeing device [ 80.715788][ T43] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 80.723097][ T43] em28xx 4-1:0.89: analog set to bulk mode. [ 80.737363][ T5863] em28xx 3-1:0.89: unknown em28xx chip ID (0) [pid 5909] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5892] exit_group(0) = ? [ 80.744566][ T5868] em28xx 4-1:0.89: Registering V4L2 extension [ 80.761801][ T43] usb 4-1: USB disconnect, device number 4 [pid 5892] +++ exited with 0 +++ [pid 5854] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5913 attached , child_tidptr=0x55555729f650) = 5913 [pid 5913] set_robust_list(0x55555729f660, 24) = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5913] setpgid(0, 0) = 0 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5913] write(3, "1000", 4executing program ) = 4 [pid 5913] close(3) = 0 [pid 5913] write(1, "executing program\n", 18) = 18 [pid 5913] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [ 80.807707][ T43] em28xx 4-1:0.89: Disconnecting em28xx [ 80.841767][ T5863] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 80.848172][ T5868] em28xx 4-1:0.89: Config register raw data: 0xffffffed [pid 5913] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffb01703b0) = 0 [pid 5913] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5904] <... ioctl resumed>, 0x7fffb01703b0) = 0 [ 80.857528][ T5868] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 80.864714][ T5868] em28xx 4-1:0.89: No AC97 audio processor [ 80.872704][ T5863] em28xx 3-1:0.89: board has no eeprom [ 80.881053][ T5868] usb 4-1: Decoder not found [ 80.890301][ T9] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 80.890880][ T5868] em28xx 4-1:0.89: failed to create media graph [ 80.902788][ T5868] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 80.910857][ T5868] em28xx 4-1:0.89: Registering snapshot button... [ 80.911108][ T5910] ================================================================== [ 80.919368][ T5868] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input14 [ 80.925438][ T5910] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 80.925494][ T5910] Read of size 8 at addr ffff88807afd8740 by task v4l_id/5910 [ 80.925506][ T5910] [ 80.925526][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: v4l_id Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 80.925541][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.925560][ T5910] Call Trace: [ 80.925567][ T5910] [ 80.925574][ T5910] dump_stack_lvl+0x189/0x250 [ 80.925596][ T5910] ? rcu_is_watching+0x15/0xb0 [ 80.925619][ T5910] ? __kasan_check_byte+0x12/0x40 [ 80.925637][ T5910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.925655][ T5910] ? rcu_is_watching+0x15/0xb0 [ 80.925679][ T5910] ? lock_release+0x4b/0x3e0 [ 80.925698][ T5910] ? __virt_addr_valid+0x1c8/0x5c0 [ 80.925720][ T5910] ? __virt_addr_valid+0x4a5/0x5c0 [ 80.925741][ T5910] print_report+0xca/0x240 [ 80.925756][ T5910] ? v4l2_fh_open+0xc7/0x430 [ 80.925775][ T5910] kasan_report+0x118/0x150 [ 80.925793][ T5910] ? v4l2_fh_open+0xc7/0x430 [ 80.925815][ T5910] v4l2_fh_open+0xc7/0x430 [ 80.925838][ T5910] em28xx_v4l2_open+0x157/0x9a0 [ 80.925861][ T5910] v4l2_open+0x20f/0x360 [ 80.925883][ T5910] chrdev_open+0x4cc/0x5e0 [ 80.925905][ T5910] ? __pfx_chrdev_open+0x10/0x10 [ 80.925927][ T5910] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 80.925951][ T5910] ? __pfx_chrdev_open+0x10/0x10 [ 80.925969][ T5910] do_dentry_open+0x950/0x13f0 [ 80.925991][ T5910] vfs_open+0x3b/0x340 [ 80.926004][ T5910] ? path_openat+0x2ecd/0x3830 [ 80.926022][ T5910] path_openat+0x2ee5/0x3830 [ 80.926039][ T5910] ? arch_stack_walk+0xfc/0x150 [ 80.926071][ T5910] ? __pfx_path_openat+0x10/0x10 [ 80.926087][ T5910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.926111][ T5910] do_filp_open+0x1fa/0x410 [ 80.926127][ T5910] ? __lock_acquire+0xab9/0xd20 [ 80.926144][ T5910] ? __pfx_do_filp_open+0x10/0x10 [ 80.926169][ T5910] ? _raw_spin_unlock+0x28/0x50 [ 80.926191][ T5910] ? alloc_fd+0x64c/0x6c0 [ 80.926215][ T5910] do_sys_openat2+0x121/0x1c0 [ 80.926232][ T5910] ? __pfx_do_sys_openat2+0x10/0x10 [ 80.926248][ T5910] ? exc_page_fault+0x76/0xf0 [ 80.926269][ T5910] ? do_user_addr_fault+0xc8a/0x1390 [ 80.926286][ T5910] __x64_sys_openat+0x138/0x170 [ 80.926304][ T5910] do_syscall_64+0xfa/0x3b0 [ 80.926324][ T5910] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.926344][ T5910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.926358][ T5910] ? clear_bhb_loop+0x60/0xb0 [ 80.926375][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.926390][ T5910] RIP: 0033:0x7f0a2cea7407 [ 80.926408][ T5910] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 80.926424][ T5910] RSP: 002b:00007ffd5b5ecc60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 80.926442][ T5910] RAX: ffffffffffffffda RBX: 00007f0a2d687880 RCX: 00007f0a2cea7407 [ 80.926454][ T5910] RDX: 0000000000000000 RSI: 00007ffd5b5eef1e RDI: ffffffffffffff9c [ 80.926465][ T5910] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 80.926474][ T5910] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 80.926484][ T5910] R13: 00007ffd5b5eceb0 R14: 00007f0a2d7ee000 R15: 0000555f3ce114d8 [ 80.926502][ T5910] [ 80.926508][ T5910] [ 80.938457][ T5868] em28xx 4-1:0.89: Remote control support is not available for this card. [ 80.943468][ T5910] Allocated by task 5868: [ 80.951582][ T43] em28xx 4-1:0.89: Closing input extension [ 80.953276][ T5910] kasan_save_track+0x3e/0x80 [ 80.964517][ T43] em28xx 4-1:0.89: Deregistering snapshot button [ 80.974426][ T5910] __kasan_kmalloc+0x93/0xb0 [ 80.974446][ T5910] __kmalloc_cache_noprof+0x230/0x3d0 [ 80.974462][ T5910] em28xx_v4l2_init+0x10b/0x2e70 [ 80.974478][ T5910] em28xx_init_extension+0x120/0x1c0 [ 80.974491][ T5910] process_scheduled_works+0xade/0x17b0 [ 80.974507][ T5910] worker_thread+0x8a0/0xda0 [ 80.974522][ T5910] kthread+0x70e/0x8a0 [ 80.974540][ T5910] ret_from_fork+0x3f9/0x770 [ 80.974554][ T5910] ret_from_fork_asm+0x1a/0x30 [ 80.974567][ T5910] [ 80.974572][ T5910] Freed by task 5868: [ 80.974581][ T5910] kasan_save_track+0x3e/0x80 [ 80.974593][ T5910] kasan_save_free_info+0x46/0x50 [ 80.974610][ T5910] __kasan_slab_free+0x62/0x70 [ 80.974624][ T5910] kfree+0x18e/0x440 [ 80.974637][ T5910] em28xx_v4l2_init+0x1683/0x2e70 [ 80.974653][ T5910] em28xx_init_extension+0x120/0x1c0 [ 80.974677][ T5910] process_scheduled_works+0xade/0x17b0 [ 80.974693][ T5910] worker_thread+0x8a0/0xda0 [ 80.974707][ T5910] kthread+0x70e/0x8a0 [ 80.974723][ T5910] ret_from_fork+0x3f9/0x770 [ 80.974738][ T5910] ret_from_fork_asm+0x1a/0x30 [ 80.974751][ T5910] [ 80.974755][ T5910] The buggy address belongs to the object at ffff88807afd8000 [ 80.974755][ T5910] which belongs to the cache kmalloc-8k of size 8192 [ 80.974769][ T5910] The buggy address is located 1856 bytes inside of [ 80.974769][ T5910] freed 8192-byte region [ffff88807afd8000, ffff88807afda000) [ 81.004922][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 81.005384][ T5910] [ 81.005391][ T5910] The buggy address belongs to the physical page: [ 81.436595][ T5910] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807afdc000 pfn:0x7afd8 [ 81.446831][ T5910] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 81.455356][ T5910] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 81.462911][ T5910] page_type: f5(slab) [ 81.466895][ T5910] raw: 00fff00000000040 ffff88801a842280 ffffea0001e9a200 0000000000000004 [ 81.475503][ T5910] raw: ffff88807afdc000 0000000080020001 00000000f5000000 0000000000000000 [ 81.484087][ T5910] head: 00fff00000000040 ffff88801a842280 ffffea0001e9a200 0000000000000004 [ 81.492764][ T5910] head: ffff88807afdc000 0000000080020001 00000000f5000000 0000000000000000 [ 81.501439][ T5910] head: 00fff00000000003 ffffea0001ebf601 00000000ffffffff 00000000ffffffff [ 81.510138][ T5910] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 81.518808][ T5910] page dumped because: kasan: bad access detected [ 81.525241][ T5910] page_owner tracks the page as allocated [ 81.530959][ T5910] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5560, tgid 5560 (dhcpcd-run-hook), ts 48809157520, free_ts 48597004285 [ 81.551822][ T5910] post_alloc_hook+0x240/0x2a0 [ 81.556584][ T5910] get_page_from_freelist+0x21e4/0x22c0 [ 81.562120][ T5910] __alloc_frozen_pages_noprof+0x181/0x370 [ 81.567931][ T5910] alloc_pages_mpol+0x232/0x4a0 [ 81.572989][ T5910] allocate_slab+0x8a/0x370 [ 81.577495][ T5910] ___slab_alloc+0xbeb/0x1410 [ 81.582163][ T5910] __kmalloc_cache_noprof+0x296/0x3d0 [ 81.587531][ T5910] tomoyo_init_log+0x111f/0x1f70 [ 81.592448][ T5910] tomoyo_supervisor+0x340/0x1480 [ 81.597466][ T5910] tomoyo_env_perm+0x149/0x1e0 [ 81.602350][ T5910] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 81.607994][ T5910] tomoyo_bprm_check_security+0x11c/0x180 [ 81.613720][ T5910] security_bprm_check+0x89/0x270 [ 81.618841][ T5910] bprm_execve+0x8ee/0x1450 [ 81.623347][ T5910] do_execveat_common+0x510/0x6a0 [ 81.628359][ T5910] __x64_sys_execve+0x94/0xb0 [ 81.633026][ T5910] page last free pid 5551 tgid 5551 stack trace: [ 81.639425][ T5910] __free_frozen_pages+0xbc4/0xd30 [ 81.644535][ T5910] __put_partials+0x156/0x1a0 [ 81.649197][ T5910] put_cpu_partial+0x17c/0x250 [ 81.653964][ T5910] __slab_free+0x2d5/0x3c0 [ 81.658376][ T5910] qlist_free_all+0x97/0x140 [ 81.662958][ T5910] kasan_quarantine_reduce+0x148/0x160 [ 81.668425][ T5910] __kasan_slab_alloc+0x22/0x80 [ 81.673285][ T5910] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 81.678746][ T5910] getname_flags+0xb8/0x540 [ 81.683332][ T5910] do_sys_openat2+0xbc/0x1c0 [ 81.687991][ T5910] __x64_sys_openat+0x138/0x170 [ 81.692829][ T5910] do_syscall_64+0xfa/0x3b0 [ 81.697346][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.703245][ T5910] [ 81.705572][ T5910] Memory state around the buggy address: [ 81.711285][ T5910] ffff88807afd8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.719345][ T5910] ffff88807afd8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.727406][ T5910] >ffff88807afd8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.735462][ T5910] ^ [ 81.741610][ T5910] ffff88807afd8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.749765][ T5910] ffff88807afd8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffb016f3a0) = 18 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffb01703b0) = 0 [ 81.757834][ T5910] ================================================================== [ 81.778200][ T5863] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 81.788131][ T9] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 81.793702][ T5910] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 81.793722][ T5910] CPU: 1 UID: 0 PID: 5910 Comm: v4l_id Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 81.793743][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.793753][ T5910] Call Trace: [ 81.793760][ T5910] [ 81.793767][ T5910] dump_stack_lvl+0x99/0x250 [ 81.793793][ T5910] ? __asan_memcpy+0x40/0x70 [ 81.793815][ T5910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.793835][ T5910] ? __pfx__printk+0x10/0x10 [ 81.793861][ T5910] vpanic+0x281/0x750 [ 81.793878][ T5910] ? preempt_schedule+0xae/0xc0 [ 81.793899][ T5910] ? __pfx_vpanic+0x10/0x10 [ 81.793915][ T5910] ? preempt_schedule_common+0x83/0xd0 [ 81.793934][ T5910] ? preempt_schedule+0xae/0xc0 [ 81.793953][ T5910] ? __pfx_preempt_schedule+0x10/0x10 [ 81.793975][ T5910] panic+0xb9/0xc0 [ 81.793992][ T5910] ? __pfx_panic+0x10/0x10 [ 81.794010][ T5910] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 81.794033][ T5910] ? v4l2_fh_open+0xc7/0x430 [ 81.794053][ T5910] check_panic_on_warn+0x89/0xb0 [ 81.794069][ T5910] ? v4l2_fh_open+0xc7/0x430 [ 81.794088][ T5910] end_report+0x78/0x160 [ 81.794105][ T5910] kasan_report+0x129/0x150 [ 81.794123][ T5910] ? v4l2_fh_open+0xc7/0x430 [ 81.794146][ T5910] v4l2_fh_open+0xc7/0x430 [ 81.794169][ T5910] em28xx_v4l2_open+0x157/0x9a0 [ 81.794194][ T5910] v4l2_open+0x20f/0x360 [ 81.794217][ T5910] chrdev_open+0x4cc/0x5e0 [ 81.794239][ T5910] ? __pfx_chrdev_open+0x10/0x10 [ 81.794261][ T5910] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 81.794285][ T5910] ? __pfx_chrdev_open+0x10/0x10 [ 81.794312][ T5910] do_dentry_open+0x950/0x13f0 [ 81.794333][ T5910] vfs_open+0x3b/0x340 [ 81.794347][ T5910] ? path_openat+0x2ecd/0x3830 [ 81.794366][ T5910] path_openat+0x2ee5/0x3830 [ 81.794383][ T5910] ? arch_stack_walk+0xfc/0x150 [ 81.794416][ T5910] ? __pfx_path_openat+0x10/0x10 [ 81.794433][ T5910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.794457][ T5910] do_filp_open+0x1fa/0x410 [ 81.794475][ T5910] ? __lock_acquire+0xab9/0xd20 [ 81.794493][ T5910] ? __pfx_do_filp_open+0x10/0x10 [ 81.794519][ T5910] ? _raw_spin_unlock+0x28/0x50 [ 81.794536][ T5910] ? alloc_fd+0x64c/0x6c0 [ 81.794556][ T5910] do_sys_openat2+0x121/0x1c0 [ 81.794571][ T5910] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.794588][ T5910] ? exc_page_fault+0x76/0xf0 [ 81.794609][ T5910] ? do_user_addr_fault+0xc8a/0x1390 [ 81.794627][ T5910] __x64_sys_openat+0x138/0x170 [ 81.794646][ T5910] do_syscall_64+0xfa/0x3b0 [ 81.794666][ T5910] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.794686][ T5910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.794702][ T5910] ? clear_bhb_loop+0x60/0xb0 [ 81.794719][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.794738][ T5910] RIP: 0033:0x7f0a2cea7407 [ 81.794753][ T5910] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 81.794766][ T5910] RSP: 002b:00007ffd5b5ecc60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 81.794785][ T5910] RAX: ffffffffffffffda RBX: 00007f0a2d687880 RCX: 00007f0a2cea7407 [ 81.794797][ T5910] RDX: 0000000000000000 RSI: 00007ffd5b5eef1e RDI: ffffffffffffff9c [ 81.794809][ T5910] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 81.794819][ T5910] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 81.794829][ T5910] R13: 00007ffd5b5eceb0 R14: 00007f0a2d7ee000 R15: 0000555f3ce114d8 [ 81.794847][ T5910] [ 81.796497][ T5910] Kernel Offset: disabled