last executing test programs: 11.705753141s ago: executing program 4 (id=194): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0x10, 0x5, 0x0, 0x3, 0xe661, 0x4, 0x7, 0x20003, 0x6, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xb, 0x17, 0x1, 0x7, 0x77a, 0x3e, 0x18e, 0x200006, 0x6, 0x3, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd74, 0x0, 0x8, 0x9, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x4, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0xfffffffd, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x5, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 11.495004636s ago: executing program 2 (id=195): inotify_init1(0x80000) io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bfc, 0x1, 0xfffffffe, 0xc}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) dup(r1) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 10.534716767s ago: executing program 2 (id=196): syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x86, "fe90b9634e6c3ef1f1576bdaf90811c5f7edc3445526c4e27dfa183a389339f5c29dac5070d6276c9c054b2cd3e4567cccf6ef0600d78b51bf3d40b24751ab238cc22bcf6b9053cc9ae3ea6857c7f262feded9f13b6d7049e72aa26d9a7d13f5cc394dc1b9a78b0456623915d40d20c4aa5bbd2fe623726560bbe981faf6d6faf38eea408bd2"}, &(0x7f00000001c0)=0x8e) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000002140)={0x1, 0x0, [{0x258, 0x0, 0x8000000000000001}]}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000240)={0x0, 0x10, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0]}) 9.748453065s ago: executing program 4 (id=198): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x20, 0x11, 0x37, "54c82d38ae10e87d28fd58274112770cb6e1297efa9a8a9695940d646d56135f96fa5d374dab321a6e573b614210959dd9965d7d150fb6"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x53}, 0x0, 0x0, 0x0}) 9.292611315s ago: executing program 2 (id=199): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x2fa77e8ce0582f97, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x400c814) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x58, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc6a}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x2, "fef8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.898076886s ago: executing program 4 (id=204): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc038563c, &(0x7f0000000340)={0x0, 0x1, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2", 0x0, 0xfffffffffffffffc, 0x4, 0x8, 0x9, 0x0, 0x7e, 0x0, [0x10000009, 0x800000, 0x0, 0x2]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000f00)=0x7) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r5 = syz_open_dev$video4linux(&(0x7f0000000480), 0x100000000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0x9a0000, 0x0, 0x7a, 0xffffffffffffffff, 0x0, 0x0}) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x11a, 0x4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.442628356s ago: executing program 0 (id=207): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000a40), 0x3d, 0x22, 0x0) 6.942982346s ago: executing program 4 (id=208): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0x10, 0x5, 0x0, 0x3, 0xe661, 0x4, 0x7, 0x20003, 0x6, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xb, 0x17, 0x1, 0x7, 0x77a, 0x3e, 0x18e, 0x200006, 0x6, 0x3, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd74, 0x0, 0x8, 0x9, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x4, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0xfffffffd, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x5, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.550924155s ago: executing program 0 (id=209): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x22, @string={0x22, 0x3, "52f9a3f4418397e64044a9fe5800038c29bfd94d56f492c76f83e60e8364350f"}}, 0x0, 0x0, 0x0}, 0x0) 5.691673125s ago: executing program 3 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="07c0741c727c98932068a41992b7d2f70ea9", 0x12}], 0x1) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x3abd}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000040)=0x1) readv(r3, &(0x7f0000000200)=[{0x0}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000180)) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r6, 0x5501) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f00000002c0)=[{{}, 0x11, 0x2, 0x8}, {{}, 0x5, 0x57, 0xa}], 0x30) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)=ANY=[@ANYBLOB="180000002f00090028bd70b6233b03000000000000000e80"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_create1(0x80000) 5.560043937s ago: executing program 3 (id=211): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x3, 0xfffffff4, 0xb5a3664e6e5b4adc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 5.537071728s ago: executing program 4 (id=212): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.931395991s ago: executing program 0 (id=213): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4.712086666s ago: executing program 1 (id=214): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000006c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe5\xea\x9f6C\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\xf2\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x7bc3, 0x1, 0x3, 0x3, 0xfd}, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 4.53151569s ago: executing program 1 (id=215): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x20, 0x11, 0x37, "54c82d38ae10e87d28fd58274112770cb6e1297efa9a8a9695940d646d56135f96fa5d374dab321a6e573b614210959dd9965d7d150fb6"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x53}, 0x0, 0x0, 0x0}) 4.345509814s ago: executing program 2 (id=216): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000680)=""/68, 0x401}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000880)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r7, @ANYBLOB="23002bbd7000fcdbdf250f000000680007800800020003007f000c000300ff010000000000000c0003002f0d00000000000008000200040000000c00030008000000000000000c0004000b000000000000000c00040002000000000000000c000300ffffff7f000000000c0003000100000000000000100004800900010073797a300000000000000980080002000f00000008000200020000000800020004000000"], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x90) 4.245939777s ago: executing program 3 (id=217): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x1}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(0x3) 3.997574642s ago: executing program 3 (id=218): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc038563c, &(0x7f0000000340)={0x0, 0x1, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2", 0x0, 0xfffffffffffffffc, 0x4, 0x8, 0x9, 0x0, 0x7e, 0x0, [0x10000009, 0x800000, 0x0, 0x2]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000f00)=0x7) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r5 = syz_open_dev$video4linux(&(0x7f0000000480), 0x100000000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0x9a0000, 0x0, 0x7a, 0xffffffffffffffff, 0x0, 0x0}) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x11a, 0x4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.951873203s ago: executing program 0 (id=219): r0 = syz_usb_connect(0x2, 0x5e, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.390341735s ago: executing program 2 (id=220): io_setup(0x9, &(0x7f0000000000)) r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x8, 0x2, 0x40, 0x8, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000040), 0x0) socket$kcm(0x2, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r8, 0x0) 3.284197427s ago: executing program 0 (id=221): syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x86, "fe90b9634e6c3ef1f1576bdaf90811c5f7edc3445526c4e27dfa183a389339f5c29dac5070d6276c9c054b2cd3e4567cccf6ef0600d78b51bf3d40b24751ab238cc22bcf6b9053cc9ae3ea6857c7f262feded9f13b6d7049e72aa26d9a7d13f5cc394dc1b9a78b0456623915d40d20c4aa5bbd2fe623726560bbe981faf6d6faf38eea408bd2"}, &(0x7f00000001c0)=0x8e) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000240)={0x0, 0x10, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0]}) 3.091822382s ago: executing program 3 (id=222): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0x10, 0x5, 0x0, 0x3, 0xe661, 0x4, 0x7, 0x20003, 0x6, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xb, 0x17, 0x1, 0x7, 0x77a, 0x3e, 0x18e, 0x200006, 0x6, 0x3, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd74, 0x0, 0x8, 0x9, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x4, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0xfffffffd, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x5, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.73003973s ago: executing program 1 (id=223): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x4d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 2.410790007s ago: executing program 4 (id=224): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0}, {0x1e, 0x8611, 0x45, &(0x7f00000000c0)="253ae1ff09423e082b90f40900000000000000fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3404aa4063169b921fe2c0b93c0e66e21421bd29fcb0c"}], 0x2}) 2.192200592s ago: executing program 0 (id=225): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.554398146s ago: executing program 3 (id=226): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x2fa77e8ce0582f97, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x400c814) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x58, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc6a}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x2, "fef8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.328988471s ago: executing program 1 (id=227): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x3, 0xfffffff4, 0xb5a3664e6e5b4adc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 355.529243ms ago: executing program 1 (id=228): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x1}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(0x3) 111.083248ms ago: executing program 2 (id=229): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=230): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000580)="48e2d3471398ef321d689c1798856872f3f1b35ed0ee8a45f46f9e7e2b242fffa342bfc2a1db4f32b111649e81978dcb85aba497104591f16048c522517a814a355f8cfb80777005113b312db6ca01b684c45626dcc87e97536893844f1bc0d11eba1882ef146288891616da40b24be83479781db5adbcbdb1f5124c7b25fe090b1235b742", 0x85}], 0x1, 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40000, 0x0) kernel console output (not intermixed with test programs): hsr0' with parent 'hsr' already present! [ 79.030684][ T4281] Cannot create hsr debugfs directory [ 79.081845][ T4277] device hsr_slave_0 entered promiscuous mode [ 79.090363][ T4277] device hsr_slave_1 entered promiscuous mode [ 79.097003][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.105355][ T4277] Cannot create hsr debugfs directory [ 79.397379][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.419828][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.437985][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.454130][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.480564][ T4282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.494782][ T4282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.523789][ T4282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.535480][ T4282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.565119][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.575028][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.589247][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.606383][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.692305][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.705304][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.733519][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.744998][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.856914][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.872768][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.884690][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.902723][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.913943][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.931972][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.944619][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.954615][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.976452][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.987648][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.995260][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.015995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.030630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.062526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.073352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.088357][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.095799][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.113979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.124380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.135358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.146246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.155514][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.162699][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.173190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.182226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.191859][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.199146][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.216451][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.252723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.263755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.272369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.282046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.292760][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.300756][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.309972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.356067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.372832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.385159][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.392697][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.404235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.413284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.422424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.431899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.445627][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.453032][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.461934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.471423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.480453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.489928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.500315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.512925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.521388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.540651][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.557300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.566285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.576266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.591887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.604855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.613657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.631291][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.645311][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.654546][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.667914][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.677573][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.694340][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.715404][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.723849][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.736224][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.745697][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.756919][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.766719][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.776534][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.794989][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.819910][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.833873][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.852880][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.866764][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.875211][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.885155][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.903221][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.915761][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.925620][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 80.932003][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 80.940060][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.950452][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.979702][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.990644][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.999621][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 81.005837][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 81.012930][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 81.029437][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.038207][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.053817][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.065658][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.074948][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.083520][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.093260][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.102717][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.112078][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.121194][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.130627][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.138018][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.146365][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.156146][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.166270][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.189231][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.197632][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.207604][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.220610][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.228576][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.239201][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.247945][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.256954][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.267105][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.290770][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.306360][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.316069][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.326466][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.336072][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.364894][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.381383][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.390240][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.399812][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.408943][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.418225][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.428340][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.437786][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.473745][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.494928][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.510257][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.524459][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.533203][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.542829][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.557065][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.574733][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.587865][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.602607][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.615517][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.632233][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.643973][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.677129][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.697550][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.714363][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.724596][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.749875][ T4282] device veth0_vlan entered promiscuous mode [ 81.791457][ T4282] device veth1_vlan entered promiscuous mode [ 81.891478][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.921270][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.959244][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.979909][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.007247][ T4282] device veth0_macvtap entered promiscuous mode [ 82.047053][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.056852][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.067565][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.080169][ T4282] device veth1_macvtap entered promiscuous mode [ 82.103694][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.124777][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.142767][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.168955][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.185712][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.254905][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.291031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.302219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.313432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.324922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.343624][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.369932][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.381995][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.395094][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.407710][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.444216][ T4282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.454449][ T4282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.465252][ T4282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.474875][ T4282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.487934][ T4272] device veth0_vlan entered promiscuous mode [ 82.499306][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.506568][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.515152][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.534615][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.544559][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.564235][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.584108][ T4271] device veth0_vlan entered promiscuous mode [ 82.606657][ T4272] device veth1_vlan entered promiscuous mode [ 82.625226][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.635496][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.645715][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.655442][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.664994][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.675197][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.685604][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.702459][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.711110][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.744255][ T4271] device veth1_vlan entered promiscuous mode [ 82.786935][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.796752][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.809226][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.818952][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.903506][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.916007][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.934327][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.970882][ T4272] device veth0_macvtap entered promiscuous mode [ 82.991767][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.008768][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 83.012440][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 83.023885][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.035318][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.067703][ T4272] device veth1_macvtap entered promiscuous mode [ 83.078745][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 83.078836][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 83.084870][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 83.100402][ T4271] device veth0_macvtap entered promiscuous mode [ 83.113026][ T4281] device veth0_vlan entered promiscuous mode [ 83.143976][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.153316][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.164842][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.174706][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.194453][ T4271] device veth1_macvtap entered promiscuous mode [ 83.213088][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.222046][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.222631][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.240224][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.253667][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.263244][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.277361][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.291166][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.304974][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.316381][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.330807][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.344460][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.360945][ T4281] device veth1_vlan entered promiscuous mode [ 83.376217][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.388450][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.400058][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.410135][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.420368][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.434407][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.447409][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.457627][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.466668][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.499233][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.510649][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.522818][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.534022][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.549894][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.575087][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.586278][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.600053][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.611523][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.622677][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.632063][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.653359][ T4277] device veth0_vlan entered promiscuous mode [ 83.663015][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.675105][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.685533][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.696810][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.709634][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.730033][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.740152][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.748807][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.757910][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.770432][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.781386][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.787982][ T4277] device veth1_vlan entered promiscuous mode [ 83.812824][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.825219][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.839420][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.851951][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.870894][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.882072][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.981224][ T4277] device veth0_macvtap entered promiscuous mode [ 83.991939][ T4281] device veth0_macvtap entered promiscuous mode [ 84.000569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.010486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.021616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.032170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.042143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.060151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.078987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.090510][ T4281] device veth1_macvtap entered promiscuous mode [ 84.105545][ T4277] device veth1_macvtap entered promiscuous mode [ 84.154293][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.193432][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.235603][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.246885][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.256889][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.267255][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.279109][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.294029][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.305174][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.315648][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.326877][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.339545][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.375630][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.376245][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.394591][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.397730][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.412916][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.422779][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.432596][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.441496][ T4359] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.454458][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.469062][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.480862][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.490990][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.502020][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.512282][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.523832][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.535161][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.544420][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.556143][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.566528][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.580057][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.591181][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.605802][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.617657][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.629421][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.642635][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.648414][ T4359] usb 2-1: Using ep0 maxpacket: 16 [ 84.666824][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.676908][ T4359] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 84.679400][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.699870][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.701041][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.709565][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.733217][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.742621][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.755803][ T4359] usb 2-1: config 0 descriptor?? [ 84.762399][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.774981][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.780738][ T4359] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 84.800654][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.817511][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.828445][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.842346][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.855657][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.867886][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.878860][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.891189][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.903531][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.917079][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.927843][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.960536][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.971875][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.998299][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.012195][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.038295][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.048635][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.070603][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.079237][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 85.087937][ T4367] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.106467][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 85.159990][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 85.160020][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 85.166306][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 85.348622][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.367823][ T4367] process 'syz.2.3' launched './file1' with NULL argv: empty string added [ 85.369239][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.387508][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.443732][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.506566][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.530612][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.538870][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.554677][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.578924][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.631400][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.656799][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.741834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.768372][ T4316] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 85.982677][ T4316] usb 3-1: not running at top speed; connect to a high speed hub [ 85.995596][ T4316] usb 3-1: language id specifier not provided by device, defaulting to English [ 86.047919][ T4316] usb 3-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 86.090364][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.106729][ T4316] usb 3-1: Product: syz [ 86.117074][ T4316] usb 3-1: Manufacturer: syz [ 86.138372][ T4316] usb 3-1: SerialNumber: syz [ 86.836013][ T4359] gspca_sonixj: reg_r err -71 [ 86.842595][ T41] cfg80211: failed to load regulatory.db [ 86.859433][ T4359] sonixj: probe of 2-1:0.0 failed with error -71 [ 87.040156][ T4359] usb 2-1: USB disconnect, device number 2 [ 88.207801][ T4316] usb 3-1: MIDIStreaming interface descriptor not found [ 88.477515][ T4316] usb 3-1: USB disconnect, device number 2 [ 89.303160][ T4419] Zero length message leads to an empty skb [ 89.398001][ T4422] xt_l2tp: invalid flags combination: 4 [ 90.060091][ T4437] Cannot find del_set index 2 as target [ 90.233577][ T4321] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 90.366308][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 90.433254][ T4321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.472078][ T4321] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 90.492908][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.511670][ T4321] usb 3-1: Product: syz [ 90.522157][ T4321] usb 3-1: Manufacturer: syz [ 90.526853][ T4321] usb 3-1: SerialNumber: syz [ 90.559440][ T7] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 90.570983][ T4321] usb 3-1: config 0 descriptor?? [ 90.605640][ T4321] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 90.760754][ T7] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 90.777883][ T7] usb 2-1: config 0 has no interface number 0 [ 90.788153][ T14] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 90.816133][ T7] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 90.855615][ T7] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 90.895025][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.904604][ T4431] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14'. [ 90.923898][ T7] usb 2-1: Product: syz [ 90.934061][ T7] usb 2-1: Manufacturer: syz [ 90.960031][ T7] usb 2-1: SerialNumber: syz [ 90.979123][ T7] usb 2-1: config 0 descriptor?? [ 90.984992][ T4440] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 90.995059][ T14] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.021284][ T14] usb 5-1: config 0 has no interface number 0 [ 91.033613][ T14] usb 5-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.047279][ T14] usb 5-1: config 0 interface 1 has no altsetting 0 [ 91.054157][ T14] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 91.064231][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.083234][ T14] usb 5-1: config 0 descriptor?? [ 91.111511][ T14] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 91.125610][ T7] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3a:7e:ec:c4:5f:24 [ 91.236399][ T4317] usb 3-1: USB disconnect, device number 3 [ 91.288320][ T4316] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.483430][ T4316] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 91.502979][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.522301][ T4316] usb 4-1: Product: syz [ 91.526701][ T4316] usb 4-1: Manufacturer: syz [ 91.541343][ T4316] usb 4-1: SerialNumber: syz [ 91.879437][ T4466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22'. [ 91.954548][ T4469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22'. [ 91.975839][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 92.443903][ T4359] usb 2-1: USB disconnect, device number 3 [ 92.459081][ T4359] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 93.004250][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 93.033995][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 93.063196][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 93.091986][ T4316] lan78xx: probe of 4-1:1.0 failed with error -32 [ 93.440206][ T4359] usb 5-1: USB disconnect, device number 2 [ 93.715275][ T4489] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4501] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4489] [ 93.773055][ T26] audit: type=1800 audit(1783978453.676:2): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.23" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 93.940137][ T4359] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.073591][ T4316] usb 4-1: USB disconnect, device number 2 [ 94.128313][ T4359] usb 5-1: Using ep0 maxpacket: 32 [ 94.137049][ T4359] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 94.188751][ T4359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.239003][ T4359] usb 5-1: config 0 descriptor?? [ 94.310016][ T4359] as10x_usb: device has been detected [ 94.330418][ T4359] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 94.417005][ T4359] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 94.526639][ T4359] as10x_usb: error during firmware upload part1 [ 94.537465][ T4359] Registered device nBox DVB-T Dongle [ 94.545458][ T4359] usb 5-1: USB disconnect, device number 3 [ 94.625146][ T4359] Unregistered device nBox DVB-T Dongle [ 94.634420][ T4359] as10x_usb: device has been disconnected [ 94.648423][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.829183][ T14] usb 2-1: device descriptor read/64, error -71 [ 94.980025][ T4521] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET) [ 94.997458][ T4521] device syzkaller1 entered promiscuous mode [ 95.118130][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.318187][ T14] usb 2-1: device descriptor read/64, error -71 [ 95.438629][ T14] usb usb2-port1: attempt power cycle [ 95.668302][ T125] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.728617][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.821232][ T4544] nfs: Unknown parameter 'À' [ 95.858451][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.898320][ T125] usb 4-1: Using ep0 maxpacket: 16 [ 95.905201][ T14] usb 2-1: device descriptor read/8, error -71 [ 95.915207][ T125] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 95.943662][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 95.958178][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.967567][ T7] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 95.987040][ T7] usb 5-1: config 0 has no interface number 0 [ 95.993861][ T125] usb 4-1: Product: syz [ 95.998807][ T125] usb 4-1: Manufacturer: syz [ 96.003783][ T125] usb 4-1: SerialNumber: syz [ 96.020570][ T7] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.043918][ T7] usb 5-1: config 0 interface 89 has no altsetting 0 [ 96.075410][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 96.088492][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.096686][ T7] usb 5-1: Product: syz [ 96.103793][ T7] usb 5-1: Manufacturer: syz [ 96.109784][ T7] usb 5-1: SerialNumber: syz [ 96.134366][ T7] usb 5-1: config 0 descriptor?? [ 96.161502][ T7] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 96.172107][ T7] em28xx 5-1:0.89: Video interface 89 found: [ 96.178300][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.229533][ T14] usb 2-1: device descriptor read/8, error -71 [ 96.274969][ T4551] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4553] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4551] [ 96.300537][ T26] audit: type=1800 audit(1783978456.206:3): pid=4551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.33" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 96.359228][ T14] usb usb2-port1: unable to enumerate USB device [ 96.428286][ T4370] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 96.482405][ T125] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 96.505962][ T125] usb 4-1: USB disconnect, device number 3 [ 96.630169][ T4370] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.648253][ T4370] usb 3-1: config 0 has no interface number 0 [ 96.665009][ T4370] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.718428][ T4370] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.733334][ T4370] usb 3-1: config 0 interface 1 has no altsetting 0 [ 96.753266][ T4370] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 96.767172][ T7] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 96.776504][ T4370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.799677][ T4370] usb 3-1: config 0 descriptor?? [ 96.810228][ T4370] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 97.098803][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 97.201785][ T7] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 97.218560][ T7] em28xx 5-1:0.89: board has no eeprom [ 97.528305][ T7] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 97.549665][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 97.559401][ T7] em28xx 5-1:0.89: analog set to bulk mode. [ 97.566236][ T125] em28xx 5-1:0.89: Registering V4L2 extension [ 97.631462][ T7] usb 5-1: USB disconnect, device number 4 [ 97.648565][ T7] em28xx 5-1:0.89: Disconnecting em28xx [ 97.656115][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 97.721847][ T125] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 97.741510][ T125] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 97.761725][ T125] em28xx 5-1:0.89: No AC97 audio processor [ 97.785371][ T125] usb 5-1: Decoder not found [ 97.791002][ T125] em28xx 5-1:0.89: failed to create media graph [ 97.805663][ T125] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 97.848225][ T125] em28xx 5-1:0.89: Registering snapshot button... [ 97.868486][ T4316] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 97.883249][ T125] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input5 [ 97.922046][ T125] em28xx 5-1:0.89: Remote control support is not available for this card. [ 97.944430][ T7] em28xx 5-1:0.89: Closing input extension [ 97.955957][ T7] em28xx 5-1:0.89: Deregistering snapshot button [ 97.963378][ T4581] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4583] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4581] [ 98.004643][ T26] audit: type=1800 audit(1783978457.906:4): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.37" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 98.029303][ T7] em28xx 5-1:0.89: Freeing device [ 98.111639][ T4316] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 98.127068][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.160812][ T4316] usb 2-1: Product: syz [ 98.176003][ T4316] usb 2-1: Manufacturer: syz [ 98.181364][ T4316] usb 2-1: SerialNumber: syz [ 98.331551][ T4587] device syzkaller1 entered promiscuous mode [ 98.643371][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 99.067536][ T4359] usb 3-1: USB disconnect, device number 4 [ 99.083740][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.288171][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 99.290451][ T7] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 99.290478][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.292216][ T7] usb 5-1: config 0 descriptor?? [ 99.305757][ T7] as10x_usb: device has been detected [ 99.306121][ T7] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 99.338942][ T7] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 99.346366][ T7] as10x_usb: error during firmware upload part1 [ 99.346738][ T7] Registered device nBox DVB-T Dongle [ 99.514975][ T7] usb 5-1: USB disconnect, device number 5 [ 99.557815][ T7] Unregistered device nBox DVB-T Dongle [ 99.573883][ T7] as10x_usb: device has been disconnected [ 99.675148][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 99.694980][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 99.716645][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 99.744208][ T4316] lan78xx: probe of 2-1:1.0 failed with error -32 [ 100.154239][ T4614] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4615] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4614] [ 100.174154][ T26] audit: type=1800 audit(1783978460.076:5): pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.47" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 100.196778][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.218166][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.398234][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 100.405702][ T22] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 100.433810][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.451998][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 100.466690][ T22] usb 3-1: config 0 has no interfaces? [ 100.483319][ T22] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 100.502058][ T22] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 100.542408][ T4620] netlink: 92 bytes leftover after parsing attributes in process `syz.4.50'. [ 100.557347][ T22] usb 3-1: Product: syz [ 100.602721][ T22] usb 3-1: Manufacturer: syz [ 100.623186][ T22] usb 3-1: SerialNumber: syz [ 100.647011][ T22] usb 3-1: config 0 descriptor?? [ 100.712078][ T125] usb 2-1: USB disconnect, device number 8 [ 100.812090][ T4625] device syzkaller1 entered promiscuous mode [ 100.867901][ T4370] usb 3-1: USB disconnect, device number 5 [ 100.898250][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.088288][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 101.097342][ T7] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 101.106857][ T7] usb 4-1: config 0 has no interface number 0 [ 101.113436][ T7] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.123534][ T7] usb 4-1: config 0 interface 89 has no altsetting 0 [ 101.132674][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 101.142207][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.150541][ T7] usb 4-1: Product: syz [ 101.155232][ T7] usb 4-1: Manufacturer: syz [ 101.161111][ T7] usb 4-1: SerialNumber: syz [ 101.175830][ T7] usb 4-1: config 0 descriptor?? [ 101.184208][ T7] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 101.195720][ T7] em28xx 4-1:0.89: Video interface 89 found: [ 101.334327][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.358258][ T4359] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 101.539809][ T22] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 101.548352][ T22] usb 1-1: config 1 has no interface number 0 [ 101.555708][ T22] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 101.566667][ T22] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.585002][ T4359] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.595824][ T22] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 101.608177][ T4359] usb 2-1: config 0 has no interface number 0 [ 101.614513][ T4359] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.630673][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.645709][ T22] usb 1-1: Product: syz [ 101.650093][ T22] usb 1-1: Manufacturer: syz [ 101.659956][ T4359] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.674278][ T22] usb 1-1: SerialNumber: syz [ 101.680580][ T4359] usb 2-1: config 0 interface 1 has no altsetting 0 [ 101.696806][ T4359] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 101.707054][ T4630] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.715637][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.725687][ T22] usb 1-1: Error in usbnet_get_endpoints (-22) [ 101.737691][ T4359] usb 2-1: config 0 descriptor?? [ 101.763304][ T4359] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 101.795404][ T7] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 101.918138][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.120246][ T22] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 102.135685][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.146499][ T22] usb 3-1: config 0 descriptor?? [ 102.159950][ T22] cp210x 3-1:0.0: cp210x converter detected [ 102.217186][ T7] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 102.225625][ T7] em28xx 4-1:0.89: board has no eeprom [ 102.528532][ T7] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 102.536517][ T7] em28xx 4-1:0.89: analog set to bulk mode. [ 102.553100][ T7] em28xx 4-1:0.89: Registering V4L2 extension [ 102.571399][ T22] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 102.592981][ T22] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 102.607828][ T22] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 102.620809][ T22] usb 3-1: cp210x converter now attached to ttyUSB0 [ 102.632505][ T22] usb 3-1: USB disconnect, device number 6 [ 102.650968][ T4321] usb 4-1: USB disconnect, device number 4 [ 102.652150][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 102.657476][ T7] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 102.667135][ T22] cp210x 3-1:0.0: device disconnected [ 102.673779][ T4370] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 102.695376][ T4321] em28xx 4-1:0.89: Disconnecting em28xx [ 102.702322][ T7] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 102.710252][ T7] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 102.717573][ T7] em28xx 4-1:0.89: No AC97 audio processor [ 102.735304][ T7] usb 4-1: Decoder not found [ 102.740910][ T7] em28xx 4-1:0.89: failed to create media graph [ 102.747940][ T7] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 102.756308][ T7] em28xx 4-1:0.89: Registering snapshot button... [ 102.772628][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input6 [ 102.792431][ T7] em28xx 4-1:0.89: Remote control support is not available for this card. [ 102.804746][ T4321] em28xx 4-1:0.89: Closing input extension [ 102.812154][ T4321] em28xx 4-1:0.89: Deregistering snapshot button [ 102.840361][ T4321] em28xx 4-1:0.89: Freeing device [ 102.901970][ T4370] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 102.911117][ T4370] usb 5-1: config 0 has no interface number 0 [ 102.918461][ T4370] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 102.931566][ T4370] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 102.940939][ T4370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.950256][ T4370] usb 5-1: Product: syz [ 102.955033][ T4370] usb 5-1: Manufacturer: syz [ 102.959777][ T4370] usb 5-1: SerialNumber: syz [ 102.969074][ T4370] usb 5-1: config 0 descriptor?? [ 102.975564][ T4644] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 102.991659][ T4370] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 6a:50:6c:32:57:3a [ 103.357074][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 103.421719][ T4669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 103.468276][ T4317] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.659362][ T4317] usb 3-1: Using ep0 maxpacket: 32 [ 103.681327][ T4317] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 103.691255][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.704444][ T4317] usb 3-1: config 0 descriptor?? [ 103.722095][ T4317] as10x_usb: device has been detected [ 103.732446][ T4317] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 103.760348][ T4317] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 103.782578][ T4317] as10x_usb: error during firmware upload part1 [ 103.790608][ T4317] Registered device nBox DVB-T Dongle [ 103.856962][ T4370] usb 5-1: USB disconnect, device number 6 [ 103.884945][ T4370] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 103.919685][ T4317] usb 3-1: USB disconnect, device number 7 [ 103.957236][ T4317] Unregistered device nBox DVB-T Dongle [ 103.969904][ T4317] as10x_usb: device has been disconnected [ 104.144556][ T4359] usb 2-1: USB disconnect, device number 9 [ 104.230259][ T4321] usb 1-1: USB disconnect, device number 2 [ 104.628158][ T4359] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 104.856280][ T4359] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 104.879697][ T4705] netlink: 92 bytes leftover after parsing attributes in process `syz.4.66'. [ 104.897648][ T4359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.947651][ T4359] usb 2-1: Product: syz [ 104.983228][ T4359] usb 2-1: Manufacturer: syz [ 105.007254][ T4359] usb 2-1: SerialNumber: syz [ 105.082851][ T4700] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4710] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4700] [ 105.174418][ T26] audit: type=1800 audit(1783978465.076:6): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.64" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 105.439080][ T4316] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 105.474443][ T4359] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 105.608183][ T4316] usb 3-1: device descriptor read/64, error -71 [ 105.888391][ T4316] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 105.928375][ T4370] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.058250][ T4316] usb 3-1: device descriptor read/64, error -71 [ 106.129887][ T4370] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.178447][ T4316] usb usb3-port1: attempt power cycle [ 106.185157][ T4370] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.294133][ T4370] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 106.318242][ T4370] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 106.333590][ T4370] usb 5-1: Product: syz [ 106.357437][ T4370] usb 5-1: Manufacturer: syz [ 106.365753][ T4370] usb 5-1: SerialNumber: syz [ 106.394869][ T4370] usb 5-1: config 0 descriptor?? [ 106.504723][ T4359] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 106.561189][ T4359] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 106.588228][ T4316] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 106.690081][ T4316] usb 3-1: device descriptor read/8, error -71 [ 106.697536][ T4359] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 106.733313][ T4359] lan78xx: probe of 2-1:1.0 failed with error -32 [ 106.878187][ T4370] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.983803][ T4316] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 107.032379][ T4316] usb 3-1: device descriptor read/8, error -71 [ 107.091026][ T4370] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.112863][ T4370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.152365][ T4370] usb 4-1: config 0 descriptor?? [ 107.167507][ T4370] cp210x 4-1:0.0: cp210x converter detected [ 107.171292][ T4316] usb usb3-port1: unable to enumerate USB device [ 107.567256][ T4370] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 107.590702][ T4370] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 107.637049][ T4370] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 107.666843][ T4321] usb 2-1: USB disconnect, device number 10 [ 107.686718][ T4370] usb 4-1: cp210x converter now attached to ttyUSB0 [ 107.732047][ T4370] usb 4-1: USB disconnect, device number 5 [ 107.762136][ T4370] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 107.805667][ T4370] cp210x 4-1:0.0: device disconnected [ 108.248662][ T4359] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 108.448427][ T4359] usb 2-1: Using ep0 maxpacket: 32 [ 108.461432][ T4359] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.485540][ T4774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.75'. [ 108.491174][ T4359] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.516230][ T4359] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 108.528199][ T125] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.534548][ T4359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.536194][ T4774] tipc: Started in network mode [ 108.546347][ T4359] usb 2-1: Product: syz [ 108.550468][ T4774] tipc: Node identity 4, cluster identity 4711 [ 108.563118][ T4359] usb 2-1: Manufacturer: syz [ 108.602984][ T4359] usb 2-1: SerialNumber: syz [ 109.390923][ T4774] tipc: Node number set to 4 [ 109.396828][ T4774] tipc: Cannot configure node identity twice [ 109.410623][ T4359] usb 2-1: config 0 descriptor?? [ 109.500799][ T4359] usb 5-1: USB disconnect, device number 7 [ 109.559806][ T125] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 109.604792][ T125] usb 1-1: config 1 has no interface number 0 [ 109.636388][ T125] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 109.694462][ T125] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.741917][ T125] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 109.778172][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.799841][ T125] usb 1-1: Product: syz [ 109.810701][ T125] usb 1-1: Manufacturer: syz [ 109.815823][ T125] usb 1-1: SerialNumber: syz [ 109.835569][ T4766] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 109.850048][ T125] usb 1-1: Error in usbnet_get_endpoints (-22) [ 109.904908][ T4792] netlink: 92 bytes leftover after parsing attributes in process `syz.3.78'. [ 110.288281][ T125] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.478148][ T125] usb 5-1: Using ep0 maxpacket: 16 [ 110.491754][ T125] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 110.502633][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.511034][ T125] usb 5-1: Product: syz [ 110.515484][ T125] usb 5-1: Manufacturer: syz [ 110.522824][ T125] usb 5-1: SerialNumber: syz [ 110.908493][ T4359] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.962056][ T125] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 110.986295][ T125] usb 5-1: USB disconnect, device number 8 [ 111.111965][ T4359] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 111.122097][ T4359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.131668][ T4359] usb 4-1: Product: syz [ 111.136590][ T4359] usb 4-1: Manufacturer: syz [ 111.141699][ T4359] usb 4-1: SerialNumber: syz [ 111.562190][ T4359] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 112.113476][ T22] usb 1-1: USB disconnect, device number 3 [ 112.591355][ T4359] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 112.605604][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.624780][ T4359] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 112.646901][ T4359] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 112.678532][ T4260] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 112.699520][ T4359] lan78xx: probe of 4-1:1.0 failed with error -32 [ 112.798166][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 112.805085][ T22] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 112.816027][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.851105][ T22] usb 1-1: config 0 descriptor?? [ 112.866577][ T22] as10x_usb: device has been detected [ 112.875151][ T22] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 112.889888][ T4260] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.911798][ T4260] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 112.923876][ T22] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 112.932817][ T4260] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 112.946771][ T22] as10x_usb: error during firmware upload part1 [ 112.953455][ T4260] usb 3-1: Product: syz [ 112.964404][ T22] Registered device nBox DVB-T Dongle [ 112.978215][ T4260] usb 3-1: Manufacturer: syz [ 113.007664][ T4260] usb 3-1: SerialNumber: syz [ 113.014092][ T4260] usb 3-1: config 0 descriptor?? [ 113.070520][ T4260] usb 1-1: USB disconnect, device number 4 [ 113.126730][ T4260] Unregistered device nBox DVB-T Dongle [ 113.138858][ T4260] as10x_usb: device has been disconnected [ 113.196371][ T22] usb 2-1: USB disconnect, device number 11 [ 114.131680][ T4260] usb 4-1: USB disconnect, device number 6 [ 114.372721][ T4854] netlink: 92 bytes leftover after parsing attributes in process `syz.0.92'. [ 114.688159][ T4370] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 114.708259][ T4260] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 114.891791][ T4370] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 114.900144][ T4260] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 114.900754][ T4370] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 114.915306][ T4260] usb 4-1: config 0 has no interface number 0 [ 114.917900][ T4370] usb 2-1: config 150 has no interface number 0 [ 114.924636][ T4260] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 114.948497][ T4370] usb 2-1: config 150 interface 204 has no altsetting 0 [ 114.969559][ T4260] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 114.979369][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.979478][ T4370] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 114.987459][ T4260] usb 4-1: Product: syz [ 114.987477][ T4260] usb 4-1: Manufacturer: syz [ 114.987488][ T4260] usb 4-1: SerialNumber: syz [ 114.999415][ T4260] usb 4-1: config 0 descriptor?? [ 115.008075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 115.030726][ T4370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.030750][ T4853] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.038811][ T4370] usb 2-1: Product: syz [ 115.060817][ T4370] usb 2-1: Manufacturer: syz [ 115.065618][ T4370] usb 2-1: SerialNumber: syz [ 115.084484][ T4260] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 46:39:04:1d:cb:00 [ 115.288593][ T4370] xr_serial 2-1:150.204: skipping garbage [ 115.311948][ T4370] xr_serial 2-1:150.204: xr_serial converter detected [ 115.350900][ T4370] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 115.380760][ T4370] xr_serial: probe of ttyUSB0 failed with error -71 [ 115.450232][ T4370] usb 2-1: USB disconnect, device number 12 [ 115.463220][ T4260] usb 3-1: USB disconnect, device number 12 [ 115.507322][ T4370] xr_serial 2-1:150.204: device disconnected [ 115.718524][ T4321] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.908272][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 115.923334][ T4321] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 115.946436][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.976896][ T4321] usb 1-1: Product: syz [ 115.978305][ T4260] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 115.997332][ T4321] usb 1-1: Manufacturer: syz [ 116.014212][ T4321] usb 1-1: SerialNumber: syz [ 116.178226][ T4260] usb 3-1: Using ep0 maxpacket: 32 [ 116.195682][ T4260] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 116.234618][ T4260] usb 3-1: config 0 has no interface number 0 [ 116.241603][ T41] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 116.272779][ T4260] usb 3-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30 [ 116.307119][ T4260] usb 3-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 116.359944][ T4260] usb 3-1: config 0 interface 131 has no altsetting 0 [ 116.389534][ T4260] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 116.428212][ T41] usb 2-1: Using ep0 maxpacket: 32 [ 116.436558][ T41] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 116.457766][ T4321] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 116.461578][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.483502][ T41] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.486045][ T4321] usb 1-1: USB disconnect, device number 5 [ 116.521253][ T4260] usb 3-1: Product: syz [ 116.546274][ T41] usb 2-1: config 0 has no interface number 0 [ 116.555069][ T4260] usb 3-1: Manufacturer: syz [ 116.578318][ T4260] usb 3-1: SerialNumber: syz [ 116.583676][ T41] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.607678][ T4260] usb 3-1: config 0 descriptor?? [ 116.609697][ T4370] usb 4-1: USB disconnect, device number 7 [ 116.626427][ T41] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.651207][ T4260] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 116.667432][ T4370] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 116.701891][ T41] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.754695][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.767888][ T41] usb 2-1: Product: syz [ 116.774258][ T41] usb 2-1: Manufacturer: syz [ 116.782183][ T41] usb 2-1: SerialNumber: syz [ 116.800487][ T41] usb 2-1: config 0 descriptor?? [ 116.816210][ T41] smsc95xx v2.0.0 [ 116.833403][ T41] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 116.855977][ T41] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 117.348342][ T4370] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.508248][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.516053][ T4370] usb 1-1: device descriptor read/64, error -71 [ 117.674162][ T4260] gspca_topro: reg_w err -71 [ 117.711691][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 117.718803][ T4260] gspca_topro: Sensor soi763a [ 117.724505][ T7] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 117.770261][ T4260] usb 3-1: USB disconnect, device number 13 [ 117.786293][ T7] usb 4-1: config 0 has no interface number 0 [ 117.795170][ T4370] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.826713][ T7] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.863371][ T7] usb 4-1: config 0 interface 89 has no altsetting 0 [ 117.913158][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 117.939072][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.955064][ T7] usb 4-1: Product: syz [ 117.962825][ T7] usb 4-1: Manufacturer: syz [ 117.968014][ T7] usb 4-1: SerialNumber: syz [ 117.968699][ T4370] usb 1-1: device descriptor read/64, error -71 [ 117.990922][ T7] usb 4-1: config 0 descriptor?? [ 118.008478][ T7] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 118.026710][ T7] em28xx 4-1:0.89: Video interface 89 found: [ 118.108321][ T4370] usb usb1-port1: attempt power cycle [ 118.518376][ T4370] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.613764][ T7] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 119.093000][ T4370] usb 1-1: device descriptor read/8, error -71 [ 119.420404][ T4321] usb 2-1: USB disconnect, device number 13 [ 119.437029][ T4929] device syzkaller1 entered promiscuous mode [ 119.558218][ T4370] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.618963][ T4370] usb 1-1: device descriptor read/8, error -71 [ 119.738410][ T4370] usb usb1-port1: unable to enumerate USB device [ 119.804462][ T7] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 119.804522][ T7] em28xx 4-1:0.89: board has no eeprom [ 119.871526][ T7] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 119.891074][ T4942] netlink: 92 bytes leftover after parsing attributes in process `syz.2.107'. [ 119.897922][ T7] em28xx 4-1:0.89: analog set to bulk mode. [ 119.929391][ T4321] em28xx 4-1:0.89: Registering V4L2 extension [ 119.964330][ T7] usb 4-1: USB disconnect, device number 8 [ 119.993312][ T7] em28xx 4-1:0.89: Disconnecting em28xx [ 120.123181][ T4321] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 120.143607][ T4321] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 120.156878][ T4321] em28xx 4-1:0.89: No AC97 audio processor [ 120.178790][ T4321] usb 4-1: Decoder not found [ 120.205932][ T4321] em28xx 4-1:0.89: failed to create media graph [ 120.223315][ T4321] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 120.251481][ T4321] em28xx 4-1:0.89: Registering snapshot button... [ 120.295323][ T4321] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input7 [ 120.367677][ T4321] em28xx 4-1:0.89: Remote control support is not available for this card. [ 120.412725][ T7] em28xx 4-1:0.89: Closing input extension [ 120.423524][ T7] em28xx 4-1:0.89: Deregistering snapshot button [ 120.467986][ T7] em28xx 4-1:0.89: Freeing device [ 120.828390][ T4260] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 120.858220][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 121.693086][ T7] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 121.708278][ T4260] usb 5-1: Using ep0 maxpacket: 8 [ 121.708279][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.710121][ T4260] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 121.734638][ T7] usb 4-1: config 0 descriptor?? [ 121.750190][ T7] cp210x 4-1:0.0: cp210x converter detected [ 121.771001][ T4260] usb 5-1: config 0 has no interface number 0 [ 121.789432][ T4260] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 121.801464][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.857853][ T4260] usb 5-1: Product: syz [ 121.862423][ T22] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 121.882187][ T4260] usb 5-1: Manufacturer: syz [ 121.901962][ T4260] usb 5-1: SerialNumber: syz [ 121.920524][ T4260] usb 5-1: config 0 descriptor?? [ 122.058227][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 122.073450][ T22] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 122.096256][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.122038][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.135746][ T22] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 122.146282][ T7] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 122.151566][ T22] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 122.174105][ T7] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 122.181750][ T22] usb 3-1: Product: syz [ 122.187540][ T7] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 122.187557][ T22] usb 3-1: Manufacturer: syz [ 122.205059][ T22] usb 3-1: SerialNumber: syz [ 122.215001][ T22] usb 3-1: config 0 descriptor?? [ 122.227818][ T22] ldusb 3-1:0.0: Interrupt in endpoint not found [ 122.253481][ T7] usb 4-1: cp210x converter now attached to ttyUSB0 [ 122.378278][ T7] usb 4-1: USB disconnect, device number 9 [ 122.403738][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 122.444768][ T7] cp210x 4-1:0.0: device disconnected [ 122.468617][ T4321] usb 3-1: USB disconnect, device number 14 [ 122.495942][ T4976] device syzkaller1 entered promiscuous mode [ 123.491353][ T4321] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 123.593829][ T4260] usb 5-1: USB disconnect, device number 9 [ 123.658247][ T4321] usb 3-1: device descriptor read/64, error -71 [ 123.786240][ T4998] netlink: 92 bytes leftover after parsing attributes in process `syz.3.126'. [ 123.972001][ T4321] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 124.258281][ T4260] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.813967][ T4990] ptrace attach of ""[4999] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4990] [ 124.833456][ T26] audit: type=1800 audit(1783978484.736:7): pid=4990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.120" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 124.855590][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.932384][ T4260] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 124.948241][ T4321] usb 3-1: device descriptor read/64, error -71 [ 124.977903][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.005476][ T4260] usb 5-1: Product: syz [ 125.018330][ T4260] usb 5-1: Manufacturer: syz [ 125.027617][ T4260] usb 5-1: SerialNumber: syz [ 125.078595][ T4321] usb usb3-port1: attempt power cycle [ 125.239063][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 125.438277][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 125.449263][ T7] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 125.456022][ T4260] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 125.485900][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.518327][ T4321] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 125.531859][ T7] usb 1-1: config 0 descriptor?? [ 125.562708][ T7] as10x_usb: device has been detected [ 125.569075][ T4321] usb 3-1: device descriptor read/8, error -71 [ 125.584475][ T7] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 125.645160][ T7] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 125.679960][ T7] as10x_usb: error during firmware upload part1 [ 125.708691][ T7] Registered device nBox DVB-T Dongle [ 125.749100][ T7] usb 1-1: USB disconnect, device number 10 [ 125.835237][ T7] Unregistered device nBox DVB-T Dongle [ 125.836440][ T7] as10x_usb: device has been disconnected [ 125.848814][ T4321] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 125.883443][ T5013] device syzkaller1 entered promiscuous mode [ 125.898752][ T4321] usb 3-1: device descriptor read/8, error -71 [ 126.028349][ T4321] usb usb3-port1: unable to enumerate USB device [ 126.315202][ T5018] netlink: 36 bytes leftover after parsing attributes in process `syz.1.131'. [ 126.349482][ T5018] tipc: Started in network mode [ 126.365264][ T5018] tipc: Node identity 4, cluster identity 4711 [ 126.373142][ T5018] tipc: Node number set to 4 [ 126.402806][ T5018] tipc: Cannot configure node identity twice [ 126.504510][ T4260] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 126.504582][ T4260] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 126.504836][ T4260] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 126.544535][ T4260] lan78xx: probe of 5-1:1.0 failed with error -32 [ 126.728406][ T7] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 126.928244][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 126.934682][ T4321] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 126.946961][ T7] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 126.956529][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.967614][ T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 126.983661][ T7] usb 3-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 126.999224][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.013031][ T7] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 127.024227][ T7] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 127.038278][ T7] usb 3-1: Product: syz [ 127.042559][ T7] usb 3-1: Manufacturer: syz [ 127.047508][ T7] usb 3-1: SerialNumber: syz [ 127.058212][ T4260] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.066402][ T7] usb 3-1: config 0 descriptor?? [ 127.095124][ T7] ldusb 3-1:0.0: Interrupt in endpoint not found [ 127.120211][ T4321] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 127.128813][ T4321] usb 4-1: config 1 has no interface number 0 [ 127.135044][ T4321] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 127.147815][ T4321] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.164266][ T4321] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 127.177347][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.186548][ T4321] usb 4-1: Product: syz [ 127.199103][ T4321] usb 4-1: Manufacturer: syz [ 127.203759][ T4321] usb 4-1: SerialNumber: syz [ 127.219407][ T5027] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 127.231705][ T4321] usb 4-1: Error in usbnet_get_endpoints (-22) [ 127.278465][ T4260] usb 1-1: Using ep0 maxpacket: 8 [ 127.288417][ T4321] usb 3-1: USB disconnect, device number 19 [ 127.304742][ T4260] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 127.318566][ T4260] usb 1-1: config 0 has no interface number 0 [ 127.336792][ T4260] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 127.351770][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.364000][ T4260] usb 1-1: Product: syz [ 127.374347][ T4260] usb 1-1: Manufacturer: syz [ 127.383808][ T4260] usb 1-1: SerialNumber: syz [ 127.394884][ T4260] usb 1-1: config 0 descriptor?? [ 127.580169][ T4321] usb 5-1: USB disconnect, device number 10 [ 127.724734][ T5040] netlink: 92 bytes leftover after parsing attributes in process `syz.4.138'. [ 129.268220][ T7] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 129.479744][ T7] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 129.488392][ T7] usb 5-1: config 0 has no interface number 0 [ 129.494654][ T7] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 129.517143][ T7] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 129.537100][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.548215][ T7] usb 5-1: Product: syz [ 129.553081][ T7] usb 5-1: Manufacturer: syz [ 129.558808][ T7] usb 5-1: SerialNumber: syz [ 129.566505][ T7] usb 5-1: config 0 descriptor?? [ 129.572569][ T5051] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.592231][ T7] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, f6:b1:6b:17:65:f0 [ 129.728249][ T4316] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 129.784662][ T4260] usb 1-1: USB disconnect, device number 11 [ 129.797481][ T7] usb 5-1: USB disconnect, device number 11 [ 129.823573][ T7] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 129.918284][ T4316] usb 2-1: device descriptor read/64, error -71 [ 130.085084][ T4260] usb 4-1: USB disconnect, device number 10 [ 130.198218][ T4316] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.368242][ T4316] usb 2-1: device descriptor read/64, error -71 [ 130.498326][ T4316] usb usb2-port1: attempt power cycle [ 130.528116][ T4260] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 130.753704][ T4260] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 130.775584][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.802503][ T4260] usb 4-1: config 0 descriptor?? [ 130.821200][ T4260] cp210x 4-1:0.0: cp210x converter detected [ 130.828344][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 130.908299][ T4316] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 130.968573][ T22] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 130.976928][ T4316] usb 2-1: device descriptor read/8, error -71 [ 131.018424][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 131.027274][ T7] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 131.039202][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.049716][ T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 131.061205][ T7] usb 1-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 131.077529][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.097317][ T7] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 131.107313][ T7] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 131.121402][ T7] usb 1-1: Product: syz [ 131.126661][ T7] usb 1-1: Manufacturer: syz [ 131.132767][ T7] usb 1-1: SerialNumber: syz [ 131.152316][ T7] usb 1-1: config 0 descriptor?? [ 131.174030][ T7] ldusb 1-1:0.0: Interrupt in endpoint not found [ 131.190684][ T22] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.210213][ T22] usb 3-1: config 0 has no interface number 0 [ 131.221511][ T22] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.243338][ T4260] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 131.258288][ T4316] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 131.272257][ T22] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.283420][ T22] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.297451][ T4260] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 131.307602][ T4260] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 131.315359][ T4316] usb 2-1: device descriptor read/8, error -71 [ 131.327013][ T22] usb 3-1: config 0 interface 1 has no altsetting 0 [ 131.336533][ T22] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 131.346822][ T4260] usb 4-1: cp210x converter now attached to ttyUSB0 [ 131.356560][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.375204][ T7] usb 1-1: USB disconnect, device number 12 [ 131.390097][ T22] usb 3-1: config 0 descriptor?? [ 131.438546][ T4316] usb usb2-port1: unable to enumerate USB device [ 131.549483][ T4370] usb 4-1: USB disconnect, device number 11 [ 131.845729][ T22] usbhid 3-1:0.1: can't add hid device: -71 [ 131.930125][ T22] usbhid: probe of 3-1:0.1 failed with error -71 [ 132.124599][ T22] usb 3-1: USB disconnect, device number 20 [ 132.406680][ T4370] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 132.425348][ T4370] cp210x 4-1:0.0: device disconnected [ 132.838263][ T4370] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.890516][ T5130] device syzkaller1 entered promiscuous mode [ 132.898303][ T22] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 132.923131][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930009][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.009368][ T125] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 133.030037][ T4370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.045762][ T4370] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.077686][ T4370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.100159][ T4370] usb 4-1: config 0 descriptor?? [ 133.109168][ T22] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 133.121978][ T4370] pwc: Askey VC010 type 2 USB webcam detected. [ 133.126538][ T22] usb 3-1: config 1 has no interface number 0 [ 133.134750][ T22] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 133.153972][ T22] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.177750][ T22] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 133.198266][ T125] usb 2-1: Using ep0 maxpacket: 32 [ 133.538394][ T4370] pwc: recv_control_msg error -32 req 02 val 2b00 [ 134.058556][ T125] usb 2-1: config 0 has an invalid interface number: 131 but max is 0 [ 134.067146][ T4370] pwc: recv_control_msg error -32 req 02 val 2700 [ 134.074262][ T125] usb 2-1: config 0 has no interface number 0 [ 134.078102][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.081397][ T125] usb 2-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30 [ 134.100441][ T4370] pwc: recv_control_msg error -32 req 02 val 2c00 [ 134.107321][ T125] usb 2-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 134.121540][ T4370] pwc: recv_control_msg error -32 req 04 val 1000 [ 134.128740][ T125] usb 2-1: config 0 interface 131 has no altsetting 0 [ 134.135779][ T22] usb 3-1: Product: syz [ 134.135902][ T4370] pwc: recv_control_msg error -32 req 04 val 1300 [ 134.150778][ T22] usb 3-1: Manufacturer: syz [ 134.154706][ T125] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 134.164172][ T22] usb 3-1: SerialNumber: syz [ 134.165333][ T4370] pwc: recv_control_msg error -71 req 04 val 1400 [ 134.180373][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.189120][ T125] usb 2-1: Product: syz [ 134.193781][ T4370] pwc: recv_control_msg error -71 req 02 val 2000 [ 134.200663][ T125] usb 2-1: Manufacturer: syz [ 134.208355][ T125] usb 2-1: SerialNumber: syz [ 134.208589][ T4370] pwc: recv_control_msg error -71 req 02 val 2100 [ 134.222695][ T125] usb 2-1: config 0 descriptor?? [ 134.229996][ T4370] pwc: recv_control_msg error -71 req 04 val 1500 [ 134.238100][ T125] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 134.240102][ T5115] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 134.247126][ T4370] pwc: recv_control_msg error -71 req 02 val 2500 [ 134.263538][ T4370] pwc: recv_control_msg error -71 req 02 val 2400 [ 134.270818][ T4370] pwc: recv_control_msg error -71 req 02 val 2600 [ 134.278694][ T4370] pwc: recv_control_msg error -71 req 02 val 2900 [ 134.283298][ T22] usb 3-1: Error in usbnet_get_endpoints (-22) [ 134.285645][ T4370] pwc: recv_control_msg error -71 req 02 val 2800 [ 134.327216][ T4370] pwc: recv_control_msg error -71 req 04 val 1100 [ 134.364813][ T4370] pwc: recv_control_msg error -71 req 04 val 1200 [ 134.397284][ T4370] pwc: Registered as video103. [ 134.408670][ T4370] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 134.455133][ T4370] usb 4-1: USB disconnect, device number 12 [ 134.926347][ T5146] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5150] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5146] [ 134.985458][ T26] audit: type=1800 audit(1783978494.886:8): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.161" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 135.078133][ T4370] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 135.239596][ T125] gspca_topro: reg_w err -71 [ 135.278114][ T4370] usb 4-1: Using ep0 maxpacket: 32 [ 135.285165][ T4370] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 135.294179][ T125] gspca_topro: Sensor soi763a [ 135.320583][ T125] usb 2-1: USB disconnect, device number 18 [ 135.354371][ T4370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.396311][ T4370] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 135.448445][ T4370] usb 4-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 135.497829][ T4370] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.527787][ T4370] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 135.564729][ T4370] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 135.611703][ T4370] usb 4-1: Product: syz [ 135.632188][ T4370] usb 4-1: Manufacturer: syz [ 135.652274][ T4370] usb 4-1: SerialNumber: syz [ 135.685085][ T4370] usb 4-1: config 0 descriptor?? [ 135.711519][ T4370] ldusb 4-1:0.0: Interrupt in endpoint not found [ 135.918592][ T22] usb 4-1: USB disconnect, device number 13 [ 136.148167][ T4370] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 136.208177][ T125] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 136.318220][ T4316] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 136.339886][ T4370] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.350031][ T4370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.361216][ T4370] usb 2-1: config 0 descriptor?? [ 136.368956][ T4370] cp210x 2-1:0.0: cp210x converter detected [ 136.391945][ T125] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.400789][ T125] usb 5-1: config 0 has no interface number 0 [ 136.406981][ T125] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.428158][ T125] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.440156][ T125] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.454216][ T125] usb 5-1: config 0 interface 1 has no altsetting 0 [ 136.471890][ T125] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 136.482321][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.494827][ T125] usb 5-1: config 0 descriptor?? [ 136.509959][ T4316] usb 1-1: Using ep0 maxpacket: 32 [ 136.521482][ T4316] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 136.532445][ T4316] usb 1-1: config 0 has no interface number 0 [ 136.541558][ T4316] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.553978][ T4316] usb 1-1: config 0 interface 89 has no altsetting 0 [ 136.565483][ T4316] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 136.576575][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.596989][ T4316] usb 1-1: Product: syz [ 136.601662][ T4316] usb 1-1: Manufacturer: syz [ 136.606820][ T4316] usb 1-1: SerialNumber: syz [ 136.621954][ T4316] usb 1-1: config 0 descriptor?? [ 136.636602][ T4316] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 136.647017][ T4316] em28xx 1-1:0.89: Video interface 89 found: [ 136.773968][ T4370] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 136.785533][ T4370] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 136.798711][ T4370] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 136.819130][ T4370] usb 2-1: cp210x converter now attached to ttyUSB0 [ 136.909927][ T125] usbhid 5-1:0.1: can't add hid device: -71 [ 136.919636][ T125] usbhid: probe of 5-1:0.1 failed with error -71 [ 136.947203][ T125] usb 5-1: USB disconnect, device number 12 [ 136.987824][ T7] usb 2-1: USB disconnect, device number 19 [ 137.008172][ T4370] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 137.019298][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.034461][ T7] cp210x 2-1:0.0: device disconnected [ 137.188276][ T4370] usb 4-1: device descriptor read/64, error -71 [ 137.242761][ T4316] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 137.439779][ T125] usb 3-1: USB disconnect, device number 21 [ 137.473906][ T4370] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 137.638300][ T4370] usb 4-1: device descriptor read/64, error -71 [ 137.778563][ T4370] usb usb4-port1: attempt power cycle [ 138.066576][ T5181] netlink: 92 bytes leftover after parsing attributes in process `syz.1.174'. [ 138.208488][ T4370] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 138.262740][ T4316] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 138.287451][ T4370] usb 4-1: device descriptor read/8, error -71 [ 138.311976][ T4316] em28xx 1-1:0.89: board has no eeprom [ 138.408153][ T4316] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 138.421729][ T4316] em28xx 1-1:0.89: analog set to bulk mode. [ 138.453454][ T4359] em28xx 1-1:0.89: Registering V4L2 extension [ 138.491982][ T4316] usb 1-1: USB disconnect, device number 13 [ 138.545124][ T4316] em28xx 1-1:0.89: Disconnecting em28xx [ 138.551039][ T125] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 138.559124][ T14] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 138.568226][ T4370] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 138.612209][ T4370] usb 4-1: device descriptor read/8, error -71 [ 138.623903][ T4359] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 138.635860][ T4359] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 138.656687][ T4359] em28xx 1-1:0.89: No AC97 audio processor [ 138.702562][ T4359] usb 1-1: Decoder not found [ 138.707591][ T4359] em28xx 1-1:0.89: failed to create media graph [ 138.738607][ T4370] usb usb4-port1: unable to enumerate USB device [ 138.758458][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 138.764642][ T125] usb 2-1: Using ep0 maxpacket: 32 [ 138.779747][ T125] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 138.794081][ T14] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 138.804683][ T4359] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 138.822384][ T14] usb 3-1: config 0 has no interface number 0 [ 138.831229][ T125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.844986][ T14] usb 3-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30 [ 138.861682][ T125] usb 2-1: config 0 has no interface number 0 [ 138.868651][ T125] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.884990][ T14] usb 3-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 138.905253][ T14] usb 3-1: config 0 interface 131 has no altsetting 0 [ 138.924487][ T125] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 138.958901][ T4359] em28xx 1-1:0.89: Registering snapshot button... [ 138.958962][ T14] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 138.966972][ T4359] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input12 [ 138.988182][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.012024][ T125] usb 2-1: Product: syz [ 139.016509][ T125] usb 2-1: Manufacturer: syz [ 139.022887][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.052360][ T125] usb 2-1: SerialNumber: syz [ 139.081520][ T14] usb 3-1: Product: syz [ 139.085855][ T14] usb 3-1: Manufacturer: syz [ 139.103799][ T125] usb 2-1: config 0 descriptor?? [ 139.110799][ T14] usb 3-1: SerialNumber: syz [ 139.122437][ T125] smsc95xx v2.0.0 [ 139.126314][ T125] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 139.128340][ T4359] em28xx 1-1:0.89: Remote control support is not available for this card. [ 139.151593][ T14] usb 3-1: config 0 descriptor?? [ 139.173213][ T14] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 139.182155][ T125] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 139.184156][ T4316] em28xx 1-1:0.89: Closing input extension [ 139.202625][ T4316] em28xx 1-1:0.89: Deregistering snapshot button [ 139.234334][ T4316] em28xx 1-1:0.89: Freeing device [ 139.758202][ T4316] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 139.968756][ T4316] usb 1-1: Using ep0 maxpacket: 32 [ 139.975934][ T4316] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 139.994195][ T4316] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 140.024571][ T4316] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 140.061316][ T4316] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 140.077322][ T4316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.100977][ T4316] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 140.120566][ T4316] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 140.138202][ T4260] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 140.167243][ T14] gspca_topro: reg_w err -71 [ 140.188275][ T4316] usb 1-1: Product: syz [ 140.194020][ T4316] usb 1-1: Manufacturer: syz [ 140.204759][ T4316] usb 1-1: SerialNumber: syz [ 140.218292][ T14] gspca_topro: Sensor soi763a [ 140.219406][ T4316] usb 1-1: config 0 descriptor?? [ 140.242736][ T14] usb 3-1: USB disconnect, device number 22 [ 140.244880][ T4316] ldusb 1-1:0.0: Interrupt in endpoint not found [ 140.329947][ T4260] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 140.368415][ T4260] usb 4-1: config 1 has no interface number 0 [ 140.414046][ T4260] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 140.427604][ T4260] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.460808][ T4260] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 140.480717][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.492284][ T4260] usb 4-1: Product: syz [ 140.496500][ T4260] usb 4-1: Manufacturer: syz [ 140.506333][ T4260] usb 4-1: SerialNumber: syz [ 140.521894][ T4316] usb 1-1: USB disconnect, device number 14 [ 140.542265][ T5217] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 140.563367][ T4260] usb 4-1: Error in usbnet_get_endpoints (-22) [ 141.088210][ T4316] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 141.282954][ T4316] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.295100][ T4316] usb 3-1: config 0 has no interface number 0 [ 141.303729][ T4316] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.322940][ T4316] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.335614][ T4316] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.353132][ T4260] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 141.363640][ T4316] usb 3-1: config 0 interface 1 has no altsetting 0 [ 141.373744][ T4316] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 141.387782][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.407474][ T4316] usb 3-1: config 0 descriptor?? [ 141.577542][ T4260] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.593501][ T4260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.615773][ T4260] usb 5-1: config 0 descriptor?? [ 141.634506][ T4260] cp210x 5-1:0.0: cp210x converter detected [ 141.838237][ T4316] usbhid 3-1:0.1: can't add hid device: -71 [ 141.844973][ T4316] usbhid: probe of 3-1:0.1 failed with error -71 [ 141.867904][ T4316] usb 3-1: USB disconnect, device number 23 [ 142.057214][ T4260] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 142.066111][ T4260] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 142.075818][ T4260] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 142.111057][ T4260] usb 5-1: cp210x converter now attached to ttyUSB0 [ 142.196661][ T5278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.185'. [ 142.207071][ T5278] tipc: Started in network mode [ 142.213846][ T5278] tipc: Node identity 4, cluster identity 4711 [ 142.221129][ T5278] tipc: Node number set to 4 [ 142.225969][ T5278] tipc: Cannot configure node identity twice [ 142.274714][ T4370] usb 5-1: USB disconnect, device number 13 [ 142.297642][ T4370] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.310779][ T4370] cp210x 5-1:0.0: device disconnected [ 142.708190][ T4260] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 142.874485][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 142.908289][ T4260] usb 3-1: Using ep0 maxpacket: 32 [ 142.919834][ T4260] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 142.949576][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.987134][ T4260] usb 3-1: config 0 descriptor?? [ 143.004998][ T5299] netlink: 92 bytes leftover after parsing attributes in process `syz.4.187'. [ 143.028609][ T4260] as10x_usb: device has been detected [ 143.037788][ T4260] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 143.117472][ T125] usb 4-1: USB disconnect, device number 18 [ 143.137912][ T4316] usb 2-1: USB disconnect, device number 20 [ 143.157277][ T4260] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 143.216330][ T4260] as10x_usb: error during firmware upload part1 [ 143.231861][ T4260] Registered device nBox DVB-T Dongle [ 143.241862][ T4260] usb 3-1: USB disconnect, device number 24 [ 143.314561][ T4260] Unregistered device nBox DVB-T Dongle [ 143.319982][ T4260] as10x_usb: device has been disconnected [ 143.698330][ T125] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 143.848386][ T4370] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 143.952101][ T125] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 144.018171][ T4370] usb 1-1: device descriptor read/64, error -71 [ 144.029735][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.078079][ T125] usb 4-1: Product: syz [ 144.088415][ T4316] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.109521][ T125] usb 4-1: Manufacturer: syz [ 144.117401][ T125] usb 4-1: SerialNumber: syz [ 144.288121][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 144.296543][ T4316] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 144.308517][ T4370] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 144.325654][ T4316] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 144.376311][ T4316] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 144.419014][ T4316] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 144.488264][ T4370] usb 1-1: device descriptor read/64, error -71 [ 144.520326][ T4316] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.548696][ T125] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 144.570952][ T125] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 144.587351][ T4316] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 144.614504][ T125] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 144.625450][ T4370] usb usb1-port1: attempt power cycle [ 144.629919][ T4316] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 144.656424][ T125] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 144.672805][ T4316] usb 5-1: Product: syz [ 144.692039][ T125] lan78xx: probe of 4-1:1.0 failed with error -32 [ 144.701347][ T4316] usb 5-1: Manufacturer: syz [ 144.752306][ T4316] usb 5-1: SerialNumber: syz [ 144.825756][ T4316] usb 5-1: config 0 descriptor?? [ 144.911773][ T4316] ldusb 5-1:0.0: Interrupt in endpoint not found [ 145.071347][ T4370] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 145.105392][ T4316] usb 5-1: USB disconnect, device number 14 [ 145.136585][ T4370] usb 1-1: device descriptor read/8, error -71 [ 145.448141][ T4370] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 145.488862][ T4370] usb 1-1: device descriptor read/8, error -71 [ 145.619983][ T4370] usb usb1-port1: unable to enumerate USB device [ 146.068152][ T4316] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 146.269684][ T4316] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 146.289378][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.330857][ T4316] usb 5-1: config 0 descriptor?? [ 146.353618][ T4316] cp210x 5-1:0.0: cp210x converter detected [ 146.423280][ T125] usb 4-1: USB disconnect, device number 19 [ 146.744086][ T4316] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 146.758229][ T4260] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 146.786685][ T4316] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 146.799034][ T4316] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 146.818789][ T4316] usb 5-1: cp210x converter now attached to ttyUSB0 [ 146.958253][ T4260] usb 3-1: Using ep0 maxpacket: 32 [ 146.971308][ T5358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.201'. [ 146.980835][ T4260] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 146.984101][ T125] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 147.000622][ T4260] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.025125][ T4260] usb 3-1: config 0 has no interface number 0 [ 147.032441][ T4260] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.064692][ T4316] usb 5-1: USB disconnect, device number 15 [ 147.075708][ T4260] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 147.087577][ T4316] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 147.101921][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.111516][ T4316] cp210x 5-1:0.0: device disconnected [ 147.122792][ T4260] usb 3-1: Product: syz [ 147.127179][ T4260] usb 3-1: Manufacturer: syz [ 147.138384][ T4260] usb 3-1: SerialNumber: syz [ 147.150046][ T4260] usb 3-1: config 0 descriptor?? [ 147.159819][ T4260] smsc95xx v2.0.0 [ 147.163715][ T4260] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 147.175032][ T4260] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 147.211028][ T125] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 147.220756][ T125] usb 4-1: config 1 has no interface number 0 [ 147.227269][ T125] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 147.238076][ T125] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.255585][ T125] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 147.266118][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.275867][ T125] usb 4-1: Product: syz [ 147.281148][ T125] usb 4-1: Manufacturer: syz [ 147.287376][ T125] usb 4-1: SerialNumber: syz [ 147.297031][ T5351] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 147.311348][ T125] usb 4-1: Error in usbnet_get_endpoints (-22) [ 147.629484][ T5369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 147.714117][ T5371] netlink: 92 bytes leftover after parsing attributes in process `syz.4.204'. [ 148.238132][ T125] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 148.438163][ T125] usb 2-1: Using ep0 maxpacket: 32 [ 148.446365][ T125] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 148.458210][ T125] usb 2-1: config 0 has no interface number 0 [ 148.464791][ T125] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.475764][ T125] usb 2-1: config 0 interface 89 has no altsetting 0 [ 148.491771][ T125] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 148.501745][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.510692][ T125] usb 2-1: Product: syz [ 148.515074][ T125] usb 2-1: Manufacturer: syz [ 148.528408][ T125] usb 2-1: SerialNumber: syz [ 148.542367][ T125] usb 2-1: config 0 descriptor?? [ 148.562433][ T125] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 148.574680][ T125] em28xx 2-1:0.89: Video interface 89 found: [ 148.848205][ T4316] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 149.038149][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 149.045760][ T4316] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 149.054307][ T4316] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 149.065771][ T4316] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 149.076218][ T4316] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 149.089916][ T4316] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.099266][ T4316] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 149.108674][ T4316] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 149.117319][ T4316] usb 5-1: Product: syz [ 149.121779][ T4316] usb 5-1: Manufacturer: syz [ 149.126826][ T4316] usb 5-1: SerialNumber: syz [ 149.142731][ T4316] usb 5-1: config 0 descriptor?? [ 149.151084][ T4316] ldusb 5-1:0.0: Interrupt in endpoint not found [ 149.165894][ T125] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 149.208367][ T4370] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 149.356772][ T4316] usb 5-1: USB disconnect, device number 16 [ 149.403609][ T4370] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.412327][ T4370] usb 1-1: config 0 has no interface number 0 [ 149.422424][ T4370] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.435400][ T4370] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.446099][ T4370] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.460071][ T4370] usb 1-1: config 0 interface 1 has no altsetting 0 [ 149.467060][ T4370] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 149.476694][ T4370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.493416][ T4370] usb 1-1: config 0 descriptor?? [ 149.754051][ T4316] usb 4-1: USB disconnect, device number 20 [ 149.909831][ C0] raw-gadget.4 gadget.0: ignoring, device is not running [ 149.918156][ C0] raw-gadget.4 gadget.0: ignoring, device is not running [ 149.925737][ T4370] usbhid 1-1:0.1: can't add hid device: -32 [ 149.932346][ T4370] usbhid: probe of 1-1:0.1 failed with error -32 [ 149.953055][ T4370] usb 1-1: USB disconnect, device number 19 [ 150.184984][ T125] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 150.196886][ T125] em28xx 2-1:0.89: board has no eeprom [ 150.258110][ T4316] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 150.278250][ T125] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 150.286310][ T125] em28xx 2-1:0.89: analog set to bulk mode. [ 150.305773][ T125] usb 2-1: USB disconnect, device number 21 [ 150.314610][ T125] em28xx 2-1:0.89: Disconnecting em28xx [ 150.320983][ T14] em28xx 2-1:0.89: Registering V4L2 extension [ 150.407842][ T14] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 150.416059][ T14] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 150.426890][ T14] em28xx 2-1:0.89: No AC97 audio processor [ 150.438261][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 150.445475][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.459013][ T4316] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.459297][ T14] usb 2-1: Decoder not found [ 150.471115][ T4316] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 150.482932][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.503872][ T14] em28xx 2-1:0.89: failed to create media graph [ 150.512436][ T14] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 150.521168][ T14] em28xx 2-1:0.89: Registering snapshot button... [ 150.530838][ T14] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input16 [ 150.543676][ T14] em28xx 2-1:0.89: Remote control support is not available for this card. [ 150.553016][ T125] em28xx 2-1:0.89: Closing input extension [ 150.559790][ T125] em28xx 2-1:0.89: Deregistering snapshot button [ 150.575044][ T4316] usb 5-1: Product: syz [ 150.587341][ T4316] usb 5-1: Manufacturer: syz [ 150.612665][ T4316] usb 5-1: SerialNumber: syz [ 150.636564][ T4316] usb 5-1: config 0 descriptor?? [ 150.649908][ T125] em28xx 2-1:0.89: Freeing device [ 151.080843][ T4321] usb 3-1: USB disconnect, device number 25 [ 151.298229][ T125] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 151.349146][ T5426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.216'. [ 151.364257][ T5426] tipc: Started in network mode [ 151.369909][ T5426] tipc: Node identity 4, cluster identity 4711 [ 151.376468][ T5426] tipc: Node number set to 4 [ 151.384862][ T5426] tipc: Cannot configure node identity twice [ 151.500190][ T125] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.525632][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 151.528847][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.550666][ T125] usb 2-1: config 0 descriptor?? [ 151.560736][ T125] cp210x 2-1:0.0: cp210x converter detected [ 151.632169][ T5434] netlink: 92 bytes leftover after parsing attributes in process `syz.3.218'. [ 151.963053][ T125] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 151.971949][ T125] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 151.980092][ T125] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 151.988503][ T125] usb 2-1: cp210x converter now attached to ttyUSB0 [ 152.175552][ T4321] usb 2-1: USB disconnect, device number 22 [ 152.192486][ T4321] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 152.206972][ T4321] cp210x 2-1:0.0: device disconnected [ 152.378381][ T4260] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 152.569619][ T4260] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 152.580000][ T4260] usb 3-1: config 1 has no interface number 0 [ 152.594127][ T4260] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 152.613404][ T4260] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.639642][ T4260] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 152.654152][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.662665][ T4260] usb 3-1: Product: syz [ 152.672456][ T4260] usb 3-1: Manufacturer: syz [ 152.680326][ T4260] usb 3-1: SerialNumber: syz [ 152.688392][ T125] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 152.737957][ T5437] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.753051][ T4260] usb 3-1: Error in usbnet_get_endpoints (-22) [ 152.888117][ T125] usb 4-1: Using ep0 maxpacket: 32 [ 152.895210][ T125] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 152.904434][ T125] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 152.916302][ T125] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 152.928495][ T125] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 152.939110][ T125] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 152.955690][ T125] usb 4-1: config 0 interface 0 has no altsetting 0 [ 152.965896][ T125] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 152.975624][ T125] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 153.021636][ T4260] usb 5-1: USB disconnect, device number 17 [ 153.048103][ T125] usb 4-1: Product: syz [ 153.063777][ T125] usb 4-1: Manufacturer: syz [ 153.082408][ T125] usb 4-1: SerialNumber: syz [ 153.108240][ T4321] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 153.121314][ T125] usb 4-1: config 0 descriptor?? [ 153.132789][ T125] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 153.156164][ T125] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 153.300794][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.313358][ T4321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.324481][ T4321] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.334789][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.343049][ T5445] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 153.343692][ T4321] usb 2-1: SerialNumber: syz [ 153.359316][ T22] usb 4-1: USB disconnect, device number 21 [ 153.377193][ T22] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 153.518226][ T4260] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 153.548187][ T125] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 153.579190][ T4321] usb 2-1: 0:2 : does not exist [ 153.600430][ T4321] usb 2-1: USB disconnect, device number 23 [ 153.668229][ T4260] usb 5-1: device descriptor read/64, error -71 [ 153.728160][ T125] usb 1-1: Using ep0 maxpacket: 32 [ 153.735666][ T125] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 153.744237][ T125] usb 1-1: config 0 has no interface number 0 [ 153.750569][ T125] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.760655][ T125] usb 1-1: config 0 interface 89 has no altsetting 0 [ 153.770074][ T125] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 153.779464][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.787653][ T125] usb 1-1: Product: syz [ 153.792065][ T125] usb 1-1: Manufacturer: syz [ 153.797576][ T125] usb 1-1: SerialNumber: syz [ 153.804838][ T125] usb 1-1: config 0 descriptor?? [ 153.812694][ T125] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 153.823047][ T125] em28xx 1-1:0.89: Video interface 89 found: [ 153.824362][ T4397] udevd[4397]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.938294][ T4260] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 154.089759][ T4260] usb 5-1: device descriptor read/64, error -71 [ 154.188198][ T22] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 154.208447][ T4260] usb usb5-port1: attempt power cycle [ 154.378105][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 154.385054][ T22] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 154.403041][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.413500][ T22] usb 4-1: config 0 has no interface number 0 [ 154.421000][ T22] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.421030][ T125] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 154.436738][ T22] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 154.451164][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.462075][ T22] usb 4-1: Product: syz [ 154.469934][ T22] usb 4-1: Manufacturer: syz [ 154.476736][ T22] usb 4-1: SerialNumber: syz [ 154.486434][ T22] usb 4-1: config 0 descriptor?? [ 154.500732][ T22] smsc95xx v2.0.0 [ 154.506432][ T22] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 154.525859][ T22] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 154.638150][ T4260] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 154.679550][ T4260] usb 5-1: device descriptor read/8, error -71 [ 154.948112][ T4260] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 154.988747][ T4260] usb 5-1: device descriptor read/8, error -71 [ 155.108900][ T4260] usb usb5-port1: unable to enumerate USB device [ 155.332549][ T14] usb 3-1: USB disconnect, device number 26 [ 155.474619][ T125] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 155.486491][ T125] em28xx 1-1:0.89: board has no eeprom [ 155.559610][ T125] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 155.571486][ T125] em28xx 1-1:0.89: analog set to bulk mode. [ 155.611266][ T125] usb 1-1: USB disconnect, device number 20 [ 155.625907][ T125] em28xx 1-1:0.89: Disconnecting em28xx [ 155.636933][ T4370] em28xx 1-1:0.89: Registering V4L2 extension [ 155.703026][ T4370] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 155.715179][ T4370] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 155.732881][ T4370] em28xx 1-1:0.89: No AC97 audio processor [ 155.745645][ T4370] usb 1-1: Decoder not found [ 155.756540][ T4370] em28xx 1-1:0.89: failed to create media graph [ 155.798306][ T4370] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 155.828536][ T4370] em28xx 1-1:0.89: Registering snapshot button... [ 155.836145][ T5480] ================================================================== [ 155.845141][ T5480] BUG: KASAN: use-after-free in v4l2_open+0x32d/0x340 [ 155.852042][ T5480] Read of size 4 at addr ffff88802ef347e8 by task v4l_id/5480 [ 155.860109][ T5480] [ 155.862537][ T5480] CPU: 1 PID: 5480 Comm: v4l_id Not tainted syzkaller #0 [ 155.869639][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.879790][ T5480] Call Trace: [ 155.883160][ T5480] [ 155.886084][ T5480] dump_stack_lvl+0x188/0x24e [ 155.890851][ T5480] ? __lock_acquire+0x7c40/0x7c40 [ 155.896007][ T5480] ? show_regs_print_info+0x12/0x12 [ 155.901495][ T5480] ? load_image+0x410/0x410 [ 155.906106][ T5480] ? __virt_addr_valid+0x467/0x540 [ 155.911224][ T5480] ? v4l2_open+0x32d/0x340 [ 155.915632][ T5480] print_report+0xa8/0x210 [ 155.920092][ T5480] kasan_report+0x10b/0x140 [ 155.924635][ T5480] ? v4l2_open+0x32d/0x340 [ 155.929296][ T5480] v4l2_open+0x32d/0x340 [ 155.933711][ T5480] chrdev_open+0x585/0x5f0 [ 155.938374][ T5480] ? cd_forget+0x160/0x160 [ 155.942778][ T5480] ? fsnotify_perm+0x39b/0x550 [ 155.947544][ T5480] ? cd_forget+0x160/0x160 [ 155.952029][ T5480] do_dentry_open+0x7dd/0x10b0 [ 155.956812][ T5480] path_openat+0x2674/0x2f10 [ 155.961402][ T5480] ? verify_lock_unused+0x140/0x140 [ 155.966694][ T5480] ? do_sys_openat2+0xdd/0x4f0 [ 155.971854][ T5480] ? do_filp_open+0x420/0x420 [ 155.976619][ T5480] do_filp_open+0x1ee/0x420 [ 155.981577][ T5480] ? vfs_tmpfile+0x470/0x470 [ 155.986354][ T5480] ? _raw_spin_unlock+0x24/0x40 [ 155.991417][ T5480] ? alloc_fd+0x590/0x640 [ 155.995864][ T5480] do_sys_openat2+0x14b/0x4f0 [ 156.001165][ T5480] ? do_sys_open+0xe0/0xe0 [ 156.005937][ T5480] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.012285][ T5480] ? lock_chain_count+0x20/0x20 [ 156.017356][ T5480] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.023660][ T5480] __x64_sys_openat+0x135/0x160 [ 156.028704][ T5480] do_syscall_64+0x4c/0xa0 [ 156.033238][ T5480] ? clear_bhb_loop+0x60/0xb0 [ 156.038123][ T5480] ? clear_bhb_loop+0x60/0xb0 [ 156.043293][ T5480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.049379][ T5480] RIP: 0033:0x7f11072a7407 [ 156.054055][ T5480] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 156.074005][ T5480] RSP: 002b:00007ffe4c269a60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 156.082427][ T5480] RAX: ffffffffffffffda RBX: 00007f11071bb880 RCX: 00007f11072a7407 [ 156.090859][ T5480] RDX: 0000000000000000 RSI: 00007ffe4c269f1c RDI: ffffffffffffff9c [ 156.098826][ T5480] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 156.107330][ T5480] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 156.115385][ T5480] R13: 00007ffe4c269cb0 R14: 00007f1107a38000 R15: 000055a8244c94d8 [ 156.123560][ T5480] [ 156.126569][ T5480] [ 156.128870][ T5480] Allocated by task 4370: [ 156.133181][ T5480] kasan_set_track+0x4b/0x70 [ 156.138036][ T5480] __kasan_kmalloc+0x8e/0xa0 [ 156.142777][ T5480] em28xx_v4l2_init+0xf5/0x2d90 [ 156.147634][ T5480] em28xx_init_extension+0x118/0x1c0 [ 156.153301][ T5480] process_one_work+0x8ab/0x1160 [ 156.158480][ T5480] worker_thread+0xdd1/0x12a0 [ 156.163238][ T5480] kthread+0x29d/0x330 [ 156.167289][ T5480] ret_from_fork+0x1f/0x30 [ 156.171795][ T5480] [ 156.174172][ T5480] Freed by task 4370: [ 156.178238][ T5480] kasan_set_track+0x4b/0x70 [ 156.182936][ T5480] kasan_save_free_info+0x27/0x40 [ 156.188134][ T5480] ____kasan_slab_free+0x126/0x1f0 [ 156.193243][ T5480] slab_free_freelist_hook+0x133/0x1b0 [ 156.198808][ T5480] __kmem_cache_free+0xb6/0x200 [ 156.203858][ T5480] em28xx_v4l2_init+0x15f7/0x2d90 [ 156.208977][ T5480] em28xx_init_extension+0x118/0x1c0 [ 156.214350][ T5480] process_one_work+0x8ab/0x1160 [ 156.219421][ T5480] worker_thread+0xdd1/0x12a0 [ 156.224178][ T5480] kthread+0x29d/0x330 [ 156.228354][ T5480] ret_from_fork+0x1f/0x30 [ 156.233085][ T5480] [ 156.235418][ T5480] The buggy address belongs to the object at ffff88802ef34000 [ 156.235418][ T5480] which belongs to the cache kmalloc-8k of size 8192 [ 156.249588][ T5480] The buggy address is located 2024 bytes inside of [ 156.249588][ T5480] 8192-byte region [ffff88802ef34000, ffff88802ef36000) [ 156.263224][ T5480] [ 156.265541][ T5480] The buggy address belongs to the physical page: [ 156.271952][ T5480] page:ffffea0000bbcc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ef30 [ 156.282272][ T5480] head:ffffea0000bbcc00 order:3 compound_mapcount:0 compound_pincount:0 [ 156.290577][ T5480] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 156.298643][ T5480] raw: 00fff00000010200 ffffea0001d79000 dead000000000002 ffff888017442280 [ 156.307388][ T5480] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 156.316042][ T5480] page dumped because: kasan: bad access detected [ 156.322644][ T5480] page_owner tracks the page as allocated [ 156.328406][ T5480] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 48, tgid 48 (kworker/u4:3), ts 84475164626, free_ts 84231913649 [ 156.351151][ T5480] post_alloc_hook+0x173/0x1a0 [ 156.355906][ T5480] get_page_from_freelist+0x206b/0x2180 [ 156.361493][ T5480] __alloc_pages+0x1ec/0x4f0 [ 156.366091][ T5480] alloc_slab_page+0x5d/0x180 [ 156.371018][ T5480] new_slab+0x87/0x2d0 [ 156.375623][ T5480] ___slab_alloc+0xbc5/0x1240 [ 156.380407][ T5480] __kmem_cache_alloc_node+0x126/0x270 [ 156.386052][ T5480] __kmalloc+0xa3/0x240 [ 156.390288][ T5480] __sta_info_alloc+0x88/0x25e0 [ 156.395303][ T5480] ieee80211_ibss_add_sta+0x5fa/0x8d0 [ 156.400777][ T5480] ieee80211_ibss_rx_queued_mgmt+0x1559/0x2eb0 [ 156.407539][ T5480] ieee80211_iface_work+0x72c/0xc70 [ 156.412734][ T5480] cfg80211_wiphy_work+0x224/0x260 [ 156.417934][ T5480] process_one_work+0x8ab/0x1160 [ 156.422967][ T5480] worker_thread+0xaf5/0x12a0 [ 156.428002][ T5480] kthread+0x29d/0x330 [ 156.432376][ T5480] page last free stack trace: [ 156.437176][ T5480] free_unref_page_prepare+0x8e5/0x9e0 [ 156.442645][ T5480] free_unref_page+0x2e/0x3f0 [ 156.447999][ T5480] qlist_free_all+0x76/0xe0 [ 156.452683][ T5480] kasan_quarantine_reduce+0x144/0x160 [ 156.458937][ T5480] __kasan_slab_alloc+0x1e/0x80 [ 156.464338][ T5480] slab_post_alloc_hook+0x4b/0x490 [ 156.469543][ T5480] __kmem_cache_alloc_node+0x19d/0x270 [ 156.475276][ T5480] kmalloc_trace+0x26/0xe0 [ 156.479833][ T5480] kernfs_fop_open+0x3ce/0xc60 [ 156.484623][ T5480] do_dentry_open+0x7dd/0x10b0 [ 156.489584][ T5480] path_openat+0x2674/0x2f10 [ 156.494182][ T5480] do_filp_open+0x1ee/0x420 [ 156.498709][ T5480] do_sys_openat2+0x14b/0x4f0 [ 156.503843][ T5480] __x64_sys_openat+0x135/0x160 [ 156.508694][ T5480] do_syscall_64+0x4c/0xa0 [ 156.513208][ T5480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.519095][ T5480] [ 156.522031][ T5480] Memory state around the buggy address: [ 156.528013][ T5480] ffff88802ef34680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.536419][ T5480] ffff88802ef34700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.544539][ T5480] >ffff88802ef34780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.552697][ T5480] ^ [ 156.560630][ T5480] ffff88802ef34800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.569065][ T5480] ffff88802ef34880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.577297][ T5480] ================================================================== [ 156.644734][ T4370] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input17 [ 156.730686][ T4370] em28xx 1-1:0.89: Remote control support is not available for this card. [ 156.752148][ T125] em28xx 1-1:0.89: Closing input extension [ 156.770394][ T125] em28xx 1-1:0.89: Deregistering snapshot button [ 156.775614][ T5480] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.775635][ T5480] CPU: 1 PID: 5480 Comm: v4l_id Not tainted syzkaller #0 [ 156.775652][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.775661][ T5480] Call Trace: [ 156.775667][ T5480] [ 156.775673][ T5480] dump_stack_lvl+0x188/0x24e [ 156.775698][ T5480] ? memcpy+0x3c/0x60 [ 156.775713][ T5480] ? show_regs_print_info+0x12/0x12 [ 156.775733][ T5480] ? load_image+0x410/0x410 [ 156.775754][ T5480] panic+0x2d3/0x710 [ 156.775770][ T5480] ? bpf_jit_dump+0xd0/0xd0 [ 156.775785][ T5480] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 156.775803][ T5480] ? _raw_spin_unlock+0x40/0x40 [ 156.775818][ T5480] ? print_memory_metadata+0x314/0x400 [ 156.775838][ T5480] check_panic_on_warn+0x80/0xa0 [ 156.775856][ T5480] ? v4l2_open+0x32d/0x340 [ 156.775872][ T5480] end_report+0x66/0x110 [ 156.775891][ T5480] kasan_report+0x118/0x140 [ 156.775911][ T5480] ? v4l2_open+0x32d/0x340 [ 156.775930][ T5480] v4l2_open+0x32d/0x340 [ 156.775948][ T5480] chrdev_open+0x585/0x5f0 [ 156.775968][ T5480] ? cd_forget+0x160/0x160 [ 156.775985][ T5480] ? fsnotify_perm+0x39b/0x550 [ 156.776001][ T5480] ? cd_forget+0x160/0x160 [ 156.776018][ T5480] do_dentry_open+0x7dd/0x10b0 [ 156.776053][ T5480] path_openat+0x2674/0x2f10 [ 156.776076][ T5480] ? verify_lock_unused+0x140/0x140 [ 156.776095][ T5480] ? do_sys_openat2+0xdd/0x4f0 [ 156.776115][ T5480] ? do_filp_open+0x420/0x420 [ 156.776136][ T5480] do_filp_open+0x1ee/0x420 [ 156.776153][ T5480] ? vfs_tmpfile+0x470/0x470 [ 156.776176][ T5480] ? _raw_spin_unlock+0x24/0x40 [ 156.776191][ T5480] ? alloc_fd+0x590/0x640 [ 156.776212][ T5480] do_sys_openat2+0x14b/0x4f0 [ 156.776231][ T5480] ? do_sys_open+0xe0/0xe0 [ 156.776249][ T5480] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.776270][ T5480] ? lock_chain_count+0x20/0x20 [ 156.776287][ T5480] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.776308][ T5480] __x64_sys_openat+0x135/0x160 [ 156.776328][ T5480] do_syscall_64+0x4c/0xa0 [ 156.776346][ T5480] ? clear_bhb_loop+0x60/0xb0 [ 156.776364][ T5480] ? clear_bhb_loop+0x60/0xb0 [ 156.776383][ T5480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.776400][ T5480] RIP: 0033:0x7f11072a7407 [ 156.776414][ T5480] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 156.776427][ T5480] RSP: 002b:00007ffe4c269a60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 156.776446][ T5480] RAX: ffffffffffffffda RBX: 00007f11071bb880 RCX: 00007f11072a7407 [ 156.776458][ T5480] RDX: 0000000000000000 RSI: 00007ffe4c269f1c RDI: ffffffffffffff9c [ 156.776469][ T5480] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 156.776479][ T5480] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 156.776488][ T5480] R13: 00007ffe4c269cb0 R14: 00007f1107a38000 R15: 000055a8244c94d8 [ 156.776504][ T5480] [ 156.777348][ T5480] Kernel Offset: disabled [ 157.079881][ T5480] Rebooting in 86400 seconds..