last executing test programs: 6.990247301s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}, @generic={0xb7}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0xe, &(0x7f00000003c0)='\x00'/14, &(0x7f0000000400)=""/14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.760167734s ago: executing program 1 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xa, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}, @generic={0xb7}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 6.570588298s ago: executing program 1 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218240706610049000000"], 0x3e) nanosleep(&(0x7f0000000340)={0x0, 0x1dcd6500}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x1dcd6500}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x1}, &(0x7f0000000580)) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x20, r1, 0x5, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x0) 5.784286787s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000002400050600"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000c00010063616b655f6d71000c00020008000900e8030000"], 0x3c}}, 0x0) 5.615867962s ago: executing program 2 (id=16): add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) 5.523021197s ago: executing program 2 (id=17): r0 = syz_open_dev$video(&(0x7f0000000000), 0x43, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x1, {&(0x7f0000000300)}, 0x2, 0x0, 0x0}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x9, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x9, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x1, {&(0x7f0000000400)}, 0x2, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0xa) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x9) 5.468453268s ago: executing program 2 (id=18): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a20603000000000000010902190001010080fa0904000001ffffff0007058101000201"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000200), 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000200), 0x3, 0x0) r4 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x0) r5 = syz_open_dev$video(&(0x7f0000000200), 0x5, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000700)=0x1) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000700)=0x1) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000700)=0x1) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000700)=0x1) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000700)=0x1) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000700)=0x1) 5.217663585s ago: executing program 0 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}]}, 0x58}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'ip6tnl0\x00', 0x1}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='ip6tnl0\x00'}) syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4c, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c000000004011000008080808e000000104d204d200080000"}}}}}}}, 0x0) 5.137965268s ago: executing program 1 (id=21): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004058042e700001010203010902190001010080fa0904000001ffffff0007058101ff0301"], 0x0) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, &(0x7f0000000900)={0xc1, 0x0, 0x5, "1212121212"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001000), &(0x7f0000000800)) syz_usb_control_io(r0, &(0x7f0000001000), &(0x7f0000000800)) syz_usb_control_io(r0, &(0x7f0000001000), &(0x7f0000000800)) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000400)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000500)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000500)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000600)=0x1) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)={0x980900, 0x80}) 3.807637237s ago: executing program 0 (id=23): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0fd565c, &(0x7f0000000100)={0x0, 0x1, 0x1, {0x1, @pix={0x100, 0x100, 0x0, 0x1}}}) 3.781445716s ago: executing program 4 (id=24): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b32280001010203010902190001010080320904000001ffffff0007058102000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000c00)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000e00)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000001000)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000001200)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000001400)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001500)={0x84, &(0x7f0000001600)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001700)={0x84, &(0x7f0000001800)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001900)={0x84, &(0x7f0000001a00)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001b00)={0x84, &(0x7f0000001c00)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001d00)={0x84, &(0x7f0000001e00)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001f00)={0x84, &(0x7f0000002000)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002100)={0x84, &(0x7f0000002200)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002300)={0x84, &(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002500)={0x84, &(0x7f0000002600)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002700)={0x84, &(0x7f0000002800)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002900)={0x84, &(0x7f0000002a00)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002b00)={0x84, &(0x7f0000002c00)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002d00)={0x84, &(0x7f0000002e00)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002f00)={0x84, &(0x7f0000003000)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000003100)={0x84, &(0x7f0000003200)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000003300)={0x84, &(0x7f0000003400)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000003500)={0x1}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000003600), 0x0, 0x2) nanosleep(&(0x7f0000003700)={0x1}, 0x0) 3.635686624s ago: executing program 0 (id=25): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x32, 0x18, 0xb05, 0x101, 0x0, 0x0, "05010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"}}, 0x14a) read(r0, &(0x7f0000000200)=""/436, 0x1b4) read(r0, &(0x7f0000000200)=""/436, 0x1b4) read(r0, &(0x7f0000000200)=""/436, 0x1b4) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x1}}, 0xc) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300), 0x6) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x1c, "5dff00"/28}}, 0x22) 3.198742067s ago: executing program 0 (id=27): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040580425700001010203010902190001010080fa0904000001ffffff0007058101ff0301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000400)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000500)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000500)) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000600)=0x1) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)={0x980900, 0x80}) 2.878780424s ago: executing program 4 (id=28): r0 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000080), &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x409}}, {0xa, &(0x7f0000000700)=@string={0xa, 0x3, 'ABCDEFGH'}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.861946026s ago: executing program 2 (id=29): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000100)="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170005007e05000006030000000000000000000005010905a10105091901290815002501950875018102c000", 0x12f) nanosleep(&(0x7f0000000200)={0x1}, 0x0) write(r0, &(0x7f0000000300)="0c0000000300300000", 0x9) 1.99016741s ago: executing program 2 (id=31): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x32, 0x18, 0xb05, 0x101, 0x0, 0x0, "05010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"}}, 0x14a) read(r0, &(0x7f0000000200)=""/436, 0x1b4) read(r0, &(0x7f0000000200)=""/436, 0x1b4) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x1}}, 0xc) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0xe, "5dff00"/14}}, 0x14) 1.658893322s ago: executing program 0 (id=32): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c36000001010203010902190001010080fa0904000001ffffff0007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x4, &(0x7f0000000500)="33950000") r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) read(r1, &(0x7f0000000400)=""/4096, 0x1000) 1.531817041s ago: executing program 2 (id=33): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040720c0c0000010102030109022e0001010080320904000004ffffff0007050102400000070581024000000705020240000007058202400000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0xc0085508, &(0x7f0000000300)="010000004000"/72) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000100)='\x00'/16) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000110)='\x00'/16) nanosleep(&(0x7f0000000040)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl(r1, 0x8914, &(0x7f0000000080)="63616e300000000000000000000000000100"/40) syz_usb_ep_write(r0, 0x82, 0x10, &(0x7f0000000120)='AAAAAAAAAAAAAAAA') 1.457326628s ago: executing program 1 (id=34): syz_usb_connect$uac1(0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406624108000010000000109024f000201008032090400000001010000092401000109000101090401000001020000090401010101020000072401010101000b2402010202100144ac0009050109400001000007250101000000"], 0x0) 925.906709ms ago: executing program 3 (id=35): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000000140)=""/1, 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="02fa", 0x2}], 0x1) read(r0, &(0x7f0000000200)=""/1, 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="02fa", 0x2}], 0x1) 483.652401ms ago: executing program 3 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000190000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00001a0000)={0x0, 0x0, &(0x7f00001a0040)={&(0x7f00001a0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00001b0000)={0x0, 0x0, &(0x7f00001b0040)={&(0x7f00001b0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000090000)={0x0, 0x0, &(0x7f0000090040)={&(0x7f0000080000)=ANY=[@ANYBLOB="380e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f00d08001c0001000000000000000000000000000000000000000000e6060000d00d0200"], 0xe38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000a0000)={0x0, 0x0, &(0x7f00000a0040)={&(0x7f00000a0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000b0000)={0x0, 0x0, &(0x7f00000b0040)={&(0x7f00000b0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000010000)={0x0, 0x0, &(0x7f0000010040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f80d08001c0001000000000000000000000000000000000000000000ea060000d80d0200"], 0xe40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000020000)={0x0, 0x0, &(0x7f0000020040)={&(0x7f0000020080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000d0000)={0x0, 0x0, &(0x7f00000d0040)={&(0x7f00000c0000)=ANY=[@ANYBLOB="480e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000000e08001c0001000000000000000000000000000000000000000000ee060000e00d0200"], 0xe48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000e0000)={0x0, 0x0, &(0x7f00000e0040)={&(0x7f00000e0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000f0000)={0x0, 0x0, &(0x7f00000f0040)={&(0x7f00000f0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000110000)={0x0, 0x0, &(0x7f0000110040)={&(0x7f0000100000)=ANY=[@ANYBLOB="f80e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000b00e08001c000100000000000000000000000000000000000000000046070000900e0200"], 0xef8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000120000)={0x0, 0x0, &(0x7f0000120040)={&(0x7f0000120080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000130000)={0x0, 0x0, &(0x7f0000130040)={&(0x7f0000130080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000050000)={0x0, 0x0, &(0x7f0000050040)={&(0x7f0000040000)=ANY=[@ANYBLOB="000f0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000b80e08001c00010000000000000000000000000000000000000000004a070000980e0200"], 0xf00}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000060000)={0x0, 0x0, &(0x7f0000060040)={&(0x7f0000060080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000070000)={0x0, 0x0, &(0x7f0000070040)={&(0x7f0000070080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000160000)={0x0, 0x0, &(0x7f0000160040)={&(0x7f0000160080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00001d0000)={0x0, 0x0, &(0x7f00001d0040)={&(0x7f00001c0000)=ANY=[@ANYBLOB="100f0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000c80e08001c000100000000000000000000000000000000000000000052070000a80e0200"], 0xf10}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00001e0000)={0x0, 0x0, &(0x7f00001e0040)={&(0x7f00001e0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00001f0000)={0x0, 0x0, &(0x7f00001f0040)={&(0x7f00001f0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) 474.07043ms ago: executing program 3 (id=37): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x32, 0x18, 0xb05, 0x101, 0x0, 0x0, "05010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"}}, 0x14a) read(r0, &(0x7f0000000200)=""/436, 0x1b4) read(r0, &(0x7f0000000200)=""/436, 0x1b4) read(r0, &(0x7f0000000200)=""/436, 0x1b4) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x1}}, 0xc) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300), 0x6) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x1c, "5dff00"/28}}, 0x22) 293.937428ms ago: executing program 3 (id=38): r0 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x64}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) timerfd_settime(r0, 0x1, &(0x7f0000000300)={{}, {0x64, 0x3b9a06b0}}, 0x0) read(r0, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) timerfd_settime(r0, 0x1, &(0x7f0000000300)={{}, {0x65, 0x3b9a06b0}}, 0x0) read(r0, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) 221.943696ms ago: executing program 3 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}]}, 0x58}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'ip6tnl0\x00', 0x1}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='ip6tnl0\x00'}) syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4c, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c000000004011000008080808e000000104d204d200080000"}}}}}}}, 0x0) 159.310434ms ago: executing program 3 (id=40): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a20603000000000000010902190001010080fa0904000001ffffff0007058101000201"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000200), 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000200), 0x3, 0x0) r4 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x0) r5 = syz_open_dev$video(&(0x7f0000000200), 0x5, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000700)=0x1) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000700)=0x1) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000700)=0x1) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000700)=0x1) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000700)=0x1) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000700)=0x1) 68.461738ms ago: executing program 1 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, &(0x7f0000000340)) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000340)=@mgmt_frame=@beacon={{{}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x1, 0x0, 0x0, 0x1}}}, 0x4f) 0s ago: executing program 0 (id=42): r0 = syz_open_dev$video(&(0x7f0000000000), 0x43, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x1, {&(0x7f0000000300)}, 0x2, 0x0, 0x0}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x9, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x9, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x1, {&(0x7f0000000400)}, 0x2, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0xa) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. [ 64.967097][ T5601] cgroup: Unknown subsys name 'net' [ 65.073758][ T5601] cgroup: Unknown subsys name 'cpuset' [ 65.082776][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.458370][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.567883][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.572293][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.577459][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.578519][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.579650][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.580522][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.582025][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.582980][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.584378][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.584477][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.592168][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.592834][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.593938][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.596206][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.596512][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.596763][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.597618][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.605454][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.605805][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.606365][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.606552][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.614849][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.615389][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.630992][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.646212][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.619484][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.620420][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.620631][ T5631] bridge_slave_0: entered allmulticast mode [ 69.622381][ T5631] bridge_slave_0: entered promiscuous mode [ 69.633921][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.634015][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.634123][ T5628] bridge_slave_0: entered allmulticast mode [ 69.636450][ T5628] bridge_slave_0: entered promiscuous mode [ 69.640282][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.640377][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.640702][ T5628] bridge_slave_1: entered allmulticast mode [ 69.642201][ T5628] bridge_slave_1: entered promiscuous mode [ 69.704262][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.710113][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.710248][ T5631] bridge_slave_1: entered allmulticast mode [ 69.711905][ T5631] bridge_slave_1: entered promiscuous mode [ 69.798011][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.823137][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.837571][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.868792][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.881302][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.881461][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.881588][ T5629] bridge_slave_0: entered allmulticast mode [ 69.883193][ T5629] bridge_slave_0: entered promiscuous mode [ 69.899731][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.899826][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.899929][ T5632] bridge_slave_0: entered allmulticast mode [ 69.903174][ T5632] bridge_slave_0: entered promiscuous mode [ 69.938991][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.939802][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.941273][ T5629] bridge_slave_1: entered allmulticast mode [ 69.942981][ T5629] bridge_slave_1: entered promiscuous mode [ 69.961194][ T5628] team0: Port device team_slave_0 added [ 69.961403][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.961497][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.961607][ T5632] bridge_slave_1: entered allmulticast mode [ 69.964345][ T5632] bridge_slave_1: entered promiscuous mode [ 69.966242][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.966342][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.966788][ T5630] bridge_slave_0: entered allmulticast mode [ 69.968643][ T5630] bridge_slave_0: entered promiscuous mode [ 69.975586][ T5631] team0: Port device team_slave_0 added [ 69.978421][ T5631] team0: Port device team_slave_1 added [ 69.997073][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.000356][ T5628] team0: Port device team_slave_1 added [ 70.014935][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.015033][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.015439][ T5630] bridge_slave_1: entered allmulticast mode [ 70.017359][ T5630] bridge_slave_1: entered promiscuous mode [ 70.064927][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.113566][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.113663][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.113685][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.117168][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.117183][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.117205][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.225584][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.228580][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.254726][ T5629] team0: Port device team_slave_0 added [ 70.257644][ T5629] team0: Port device team_slave_1 added [ 70.276566][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.276594][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.276615][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.296325][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.335935][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.336177][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.336201][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.338959][ T5632] team0: Port device team_slave_0 added [ 70.342984][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.351069][ T5631] hsr_slave_0: entered promiscuous mode [ 70.352902][ T5631] hsr_slave_1: entered promiscuous mode [ 70.354520][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.354532][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.354554][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.369139][ T5632] team0: Port device team_slave_1 added [ 70.397424][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.397440][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.397462][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.446160][ T5628] hsr_slave_0: entered promiscuous mode [ 70.447090][ T5628] hsr_slave_1: entered promiscuous mode [ 70.447853][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 70.447947][ T5628] Cannot create hsr debugfs directory [ 70.508425][ T5630] team0: Port device team_slave_0 added [ 70.527041][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.527058][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.527079][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.541866][ T5630] team0: Port device team_slave_1 added [ 70.583930][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.583969][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.585096][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.628867][ T4933] Bluetooth: hci1: command tx timeout [ 70.634994][ T4933] Bluetooth: hci3: command tx timeout [ 70.672038][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.672081][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.672483][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.703845][ T5632] hsr_slave_0: entered promiscuous mode [ 70.704743][ T5632] hsr_slave_1: entered promiscuous mode [ 70.705393][ T4933] Bluetooth: hci0: command tx timeout [ 70.705462][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 70.705477][ T5632] Cannot create hsr debugfs directory [ 70.705647][ T4933] Bluetooth: hci4: command tx timeout [ 70.716465][ T5619] Bluetooth: hci2: command tx timeout [ 70.738134][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.738164][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.738187][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.755095][ T5629] hsr_slave_0: entered promiscuous mode [ 70.756530][ T5629] hsr_slave_1: entered promiscuous mode [ 70.757227][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 70.757244][ T5629] Cannot create hsr debugfs directory [ 70.910856][ T5630] hsr_slave_0: entered promiscuous mode [ 70.911822][ T5630] hsr_slave_1: entered promiscuous mode [ 70.912428][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 70.912443][ T5630] Cannot create hsr debugfs directory [ 71.216247][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.223246][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.235271][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.245940][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.262231][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.271853][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.273321][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.283196][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.337532][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.346704][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.347585][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.358837][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.373267][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.383205][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.394105][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.402858][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.424549][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.424943][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.492698][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.498746][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.499889][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.516798][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.528288][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.538102][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.549881][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.559187][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.656586][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.667980][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.680231][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.688117][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.698582][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.702046][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.708791][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.725540][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.734818][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.782666][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.802298][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.854372][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.854523][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.857178][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.865660][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.888851][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.898729][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.904945][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.905045][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.914412][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.923577][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.935378][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.949798][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.958787][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.971473][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.971574][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.995092][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.995172][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.047996][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.113763][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.144504][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.144610][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.171994][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.172076][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.191982][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.251328][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.263559][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.263650][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.265875][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.265966][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.307044][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.347298][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.389215][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.469377][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.482138][ T5631] veth0_vlan: entered promiscuous mode [ 72.484555][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.484670][ T3029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.487435][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.487573][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.522225][ T5631] veth1_vlan: entered promiscuous mode [ 72.532859][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.576917][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.601790][ T5628] veth0_vlan: entered promiscuous mode [ 72.643895][ T5628] veth1_vlan: entered promiscuous mode [ 72.673732][ T5631] veth0_macvtap: entered promiscuous mode [ 72.700680][ T5619] Bluetooth: hci3: command tx timeout [ 72.701839][ T5619] Bluetooth: hci1: command tx timeout [ 72.708084][ T5631] veth1_macvtap: entered promiscuous mode [ 72.739197][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.742457][ T5632] veth0_vlan: entered promiscuous mode [ 72.778302][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.781671][ T5632] veth1_vlan: entered promiscuous mode [ 72.785993][ T4933] Bluetooth: hci2: command tx timeout [ 72.786024][ T4933] Bluetooth: hci4: command tx timeout [ 72.786045][ T4933] Bluetooth: hci0: command tx timeout [ 72.787551][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.803407][ T5628] veth0_macvtap: entered promiscuous mode [ 72.806718][ T5629] veth0_vlan: entered promiscuous mode [ 72.839757][ T5628] veth1_macvtap: entered promiscuous mode [ 72.856783][ T5629] veth1_vlan: entered promiscuous mode [ 72.911680][ T1162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.946952][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.981109][ T1162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.981962][ T280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.988029][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.988695][ T5632] veth0_macvtap: entered promiscuous mode [ 72.994940][ T5632] veth1_macvtap: entered promiscuous mode [ 73.002237][ T3029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.013787][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.018234][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.058094][ T5630] veth0_vlan: entered promiscuous mode [ 73.107314][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.107371][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.126446][ T5630] veth1_vlan: entered promiscuous mode [ 73.150956][ T5629] veth0_macvtap: entered promiscuous mode [ 73.179008][ T5629] veth1_macvtap: entered promiscuous mode [ 73.226722][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.226771][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.227083][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.227096][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.317665][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.353601][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.371303][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.385838][ T5630] veth0_macvtap: entered promiscuous mode [ 73.389426][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.397025][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.409307][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.409344][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.433315][ T5631] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 73.434698][ T5631] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 73.436063][ T5631] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 73.436550][ T5631] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 73.489615][ T5630] veth1_macvtap: entered promiscuous mode [ 73.530917][ T3029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.536161][ T280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.536356][ T280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.536493][ T280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.555648][ T280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.555698][ T280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.555711][ T280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.556040][ T280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.559611][ T3029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.561931][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.563121][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.573472][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.723351][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.738112][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.738155][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.817875][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.934151][ T280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.934228][ T280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.941495][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.941539][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.990517][ T3029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.992129][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.054874][ T5715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.105276][ T5715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.119122][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.119160][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.143869][ T5719] netlink: 'syz.0.9': attribute type 16 has an invalid length. [ 74.216321][ T5720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.237743][ T3029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.237778][ T3029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.432003][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.432043][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.595279][ T5734] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.653540][ T5732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.781768][ T4933] Bluetooth: hci3: command tx timeout [ 74.785017][ T5619] Bluetooth: hci1: command tx timeout [ 74.862886][ T5622] Bluetooth: hci2: command tx timeout [ 74.862970][ T4933] Bluetooth: hci4: command tx timeout [ 74.863043][ T5619] Bluetooth: hci0: command tx timeout [ 75.252190][ T5687] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.389669][ T5757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.433547][ T5687] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice= 0.00 [ 75.458834][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.515859][ T5687] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 75.600271][ T5701] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.764526][ T5701] usb 2-1: New USB device found, idVendor=0458, idProduct=702e, bcdDevice= 1.00 [ 75.793947][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.793990][ T5701] usb 2-1: Product: syz [ 75.794514][ T5701] usb 2-1: Manufacturer: syz [ 75.794537][ T5701] usb 2-1: SerialNumber: syz [ 75.859889][ T5701] gspca_main: sonixj-2.14.0 probing 0458:702e [ 76.037171][ T5687] gspca_topro: reg_w err -110 [ 76.037429][ T5763] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 76.047481][ T5763] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 76.082483][ T5687] gspca_topro: Sensor soi763a [ 76.570201][ T5701] gspca_sonixj: reg_r err -110 [ 76.570318][ T5701] sonixj 2-1:1.0: probe with driver sonixj failed with error -110 [ 76.854845][ T5778] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0001/input/input7 [ 76.864097][ T4933] Bluetooth: hci3: command tx timeout [ 76.864140][ T5619] Bluetooth: hci1: command tx timeout [ 76.898678][ T5778] asus 0018:0B05:0101.0001: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 76.898780][ T5778] asus 0018:0B05:0101.0001: Asus failed to start multitouch: -5 [ 76.950255][ T5619] Bluetooth: hci0: command tx timeout [ 76.950309][ T5619] Bluetooth: hci4: command tx timeout [ 76.950507][ T5701] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.951547][ T5619] Bluetooth: hci2: command tx timeout [ 76.984928][ T10] usb 3-1: USB disconnect, device number 2 [ 77.121571][ T5701] usb 5-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 1.00 [ 77.160165][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.164582][ T5778] asus 0018:0B05:0101.0001: probe with driver asus failed with error -5 [ 77.176823][ T5701] usb 5-1: Product: syz [ 77.181382][ T5781] fido_id[5781]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 77.197770][ T5701] usb 5-1: Manufacturer: syz [ 77.197802][ T5701] usb 5-1: SerialNumber: syz [ 77.322405][ T5783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.440760][ T5701] usb 5-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 77.497399][ T5701] dvb_usb_rtl28xxu 5-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 77.521184][ T5767] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.538952][ T5701] usb 5-1: USB disconnect, device number 2 [ 77.681397][ T5767] usb 1-1: New USB device found, idVendor=0458, idProduct=7025, bcdDevice= 1.00 [ 77.693494][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.701717][ T5767] usb 1-1: Product: syz [ 77.705935][ T5767] usb 1-1: Manufacturer: syz [ 77.705946][ T5767] usb 1-1: SerialNumber: syz [ 77.723932][ T5767] gspca_main: sonixj-2.14.0 probing 0458:7025 [ 77.903179][ T5701] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.030764][ T5701] usb 5-1: device descriptor read/64, error -71 [ 78.198638][ T5767] gspca_sonixj: reg_r err -71 [ 78.205111][ T5767] sonixj 1-1:1.0: probe with driver sonixj failed with error -71 [ 78.228315][ T5767] usb 1-1: USB disconnect, device number 2 [ 78.281138][ T5701] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.420127][ T5701] usb 5-1: device descriptor read/64, error -71 [ 78.542533][ T5701] usb usb5-port1: attempt power cycle [ 78.555048][ T10] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0002/input/input8 [ 78.613632][ T10] asus 0018:0B05:0101.0002: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 78.613758][ T10] asus 0018:0B05:0101.0002: Asus failed to start multitouch: -5 [ 78.734705][ T10] asus 0018:0B05:0101.0002: probe with driver asus failed with error -5 [ 78.881570][ T5805] fido_id[5805]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.913122][ T5701] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.939629][ T5701] usb 5-1: device descriptor read/8, error -71 [ 78.971425][ T5767] usb 2-1: USB disconnect, device number 2 [ 79.040091][ T5612] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.170335][ T5701] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.190809][ T5612] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0036, bcdDevice= 1.00 [ 79.193242][ T5701] usb 5-1: device descriptor read/8, error -71 [ 79.209639][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.209676][ T5612] usb 1-1: Product: syz [ 79.209702][ T5612] usb 1-1: Manufacturer: syz [ 79.209717][ T5612] usb 1-1: SerialNumber: syz [ 79.233201][ T989] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 79.252181][ T5612] em28xx 1-1:1.0: New device syz syz @ 480 Mbps (0ccd:0036, interface 0, class 0) [ 79.261873][ T5612] em28xx 1-1:1.0: Video interface 0 found: bulk [ 79.310592][ T5701] usb usb5-port1: unable to enumerate USB device [ 79.360120][ T5767] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.391496][ T989] usb 3-1: not running at top speed; connect to a high speed hub [ 79.391554][ T989] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= 1.00 [ 79.412252][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.412300][ T989] usb 3-1: Product: syz [ 79.412513][ T989] usb 3-1: Manufacturer: syz [ 79.412527][ T989] usb 3-1: SerialNumber: syz [ 79.521041][ T5767] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 79.533181][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.754372][ T5767] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 79.754431][ T5767] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 79.783501][ T5767] usb 2-1: USB disconnect, device number 3 [ 79.910667][ T5612] em28xx 1-1:1.0: unknown em28xx chip ID (0) [ 79.991709][ T5612] em28xx 1-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 79.991786][ T5612] em28xx 1-1:1.0: board has no eeprom [ 80.006599][ T10] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0003/input/input11 [ 80.027976][ T10] asus 0018:0B05:0101.0003: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 80.028081][ T10] asus 0018:0B05:0101.0003: Asus failed to start multitouch: -5 [ 80.064639][ T10] asus 0018:0B05:0101.0003: probe with driver asus failed with error -5 [ 80.073390][ T5612] em28xx 1-1:1.0: Identified as Terratec Cinergy 250 USB (card=2) [ 80.073430][ T5612] em28xx 1-1:1.0: analog set to bulk mode. [ 80.082505][ T5767] em28xx 1-1:1.0: Registering V4L2 extension [ 80.121221][ T5612] usb 1-1: USB disconnect, device number 3 [ 80.141905][ T5612] em28xx 1-1:1.0: Disconnecting em28xx [ 80.153241][ T5821] fido_id[5821]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.358025][ T5767] em28xx 1-1:1.0: Config register raw data: 0xffffffed [ 80.358069][ T5767] em28xx 1-1:1.0: AC97 chip type couldn't be determined [ 80.358097][ T5767] em28xx 1-1:1.0: No AC97 audio processor [ 80.394209][ T5767] usb 1-1: Decoder not found [ 80.402307][ T5767] em28xx 1-1:1.0: failed to create media graph [ 80.402419][ T5767] em28xx 1-1:1.0: V4L2 device video103 deregistered [ 80.421669][ T5767] INFO: trying to register non-static key. [ 80.427500][ T5767] The code is fine but needs lockdep annotation, or maybe [ 80.434606][ T5767] you didn't initialize this object before use? [ 80.440841][ T5767] turning off the locking correctness validator. [ 80.447185][ T5767] CPU: 1 UID: 0 PID: 5767 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 80.456540][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.466586][ T5767] Workqueue: events request_module_async [ 80.472253][ T5767] Call Trace: [ 80.475526][ T5767] [ 80.478447][ T5767] dump_stack_lvl+0xe8/0x150 [ 80.483037][ T5767] assign_lock_key+0x133/0x150 [ 80.487821][ T5767] register_lock_class+0xcc/0x2e0 [ 80.492856][ T5767] __lock_acquire+0xaf/0x2e50 [ 80.497540][ T5767] ? __mutex_trylock_common+0x15f/0x270 [ 80.503088][ T5767] ? __pfx___mutex_trylock_common+0x10/0x10 [ 80.508972][ T5767] lock_acquire+0x115/0x350 [ 80.513461][ T5767] ? __wake_up_common_lock+0x30/0x1f0 [ 80.518828][ T5767] ? rcu_is_watching+0x16/0xb0 [ 80.523578][ T5767] _raw_spin_lock_irqsave+0x40/0x60 [ 80.528770][ T5767] ? __wake_up_common_lock+0x30/0x1f0 [ 80.534142][ T5767] __wake_up_common_lock+0x30/0x1f0 [ 80.539332][ T5767] ? __pfx___mutex_lock+0x10/0x10 [ 80.544348][ T5767] __vb2_queue_cancel+0x2de/0xde0 [ 80.549361][ T5767] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 80.554724][ T5767] vb2_core_queue_release+0x2f/0x150 [ 80.560002][ T5767] vb2_video_unregister_device+0x15b/0x200 [ 80.565799][ T5767] em28xx_v4l2_init+0x1c89/0x3150 [ 80.570820][ T5767] em28xx_init_extension+0x120/0x1d0 [ 80.576100][ T5767] ? process_scheduled_works+0x97a/0x1630 [ 80.581810][ T5767] process_scheduled_works+0xc3d/0x1630 [ 80.587365][ T5767] ? __pfx_process_scheduled_works+0x10/0x10 [ 80.593340][ T5767] ? assign_work+0x3cf/0x5d0 [ 80.597922][ T5767] worker_thread+0xa47/0xfb0 [ 80.602526][ T5767] ? __kthread_parkme+0x71/0x1f0 [ 80.607460][ T5767] kthread+0x38b/0x480 [ 80.611511][ T5767] ? __pfx_worker_thread+0x10/0x10 [ 80.616611][ T5767] ? __pfx_kthread+0x10/0x10 [ 80.621184][ T5767] ret_from_fork+0x514/0xb70 [ 80.625761][ T5767] ? __pfx_ret_from_fork+0x10/0x10 [ 80.630881][ T5767] ? __switch_to+0xc89/0x1420 [ 80.635555][ T5767] ? __pfx_kthread+0x10/0x10 [ 80.640131][ T5767] ret_from_fork_asm+0x1a/0x30 [ 80.644890][ T5767] [ 80.647955][ T5767] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 80.659823][ T5767] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 80.668218][ T5767] CPU: 1 UID: 0 PID: 5767 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 80.677566][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.687604][ T5767] Workqueue: events request_module_async [ 80.693238][ T5767] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 80.699211][ T5767] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 bc 6a 97 00 48 ba 00 00 00 00 00 fc [ 80.718802][ T5767] RSP: 0018:ffffc9000485f880 EFLAGS: 00010046 [ 80.724855][ T5767] RAX: 0000000000000000 RBX: ffff888036481740 RCX: 0000000000000001 [ 80.732812][ T5767] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000485f7e0 [ 80.740775][ T5767] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 80.748736][ T5767] R10: dffffc0000000000 R11: fffff5200090befc R12: 0000000000000000 [ 80.756697][ T5767] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880364817d0 [ 80.764654][ T5767] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 80.773566][ T5767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.780132][ T5767] CR2: 00007f2144d40e9c CR3: 000000007e738000 CR4: 00000000003526f0 [ 80.788103][ T5767] Call Trace: [ 80.791367][ T5767] [ 80.794288][ T5767] __vb2_queue_cancel+0x2de/0xde0 [ 80.799307][ T5767] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 80.804676][ T5767] vb2_core_queue_release+0x2f/0x150 [ 80.809951][ T5767] vb2_video_unregister_device+0x15b/0x200 [ 80.815751][ T5767] em28xx_v4l2_init+0x1c89/0x3150 [ 80.820784][ T5767] em28xx_init_extension+0x120/0x1d0 [ 80.826149][ T5767] ? process_scheduled_works+0x97a/0x1630 [ 80.831857][ T5767] process_scheduled_works+0xc3d/0x1630 [ 80.837399][ T5767] ? __pfx_process_scheduled_works+0x10/0x10 [ 80.843367][ T5767] ? assign_work+0x3cf/0x5d0 [ 80.847950][ T5767] worker_thread+0xa47/0xfb0 [ 80.852533][ T5767] ? __kthread_parkme+0x71/0x1f0 [ 80.857466][ T5767] kthread+0x38b/0x480 [ 80.861523][ T5767] ? __pfx_worker_thread+0x10/0x10 [ 80.866620][ T5767] ? __pfx_kthread+0x10/0x10 [ 80.871195][ T5767] ret_from_fork+0x514/0xb70 [ 80.875772][ T5767] ? __pfx_ret_from_fork+0x10/0x10 [ 80.880877][ T5767] ? __switch_to+0xc89/0x1420 [ 80.885544][ T5767] ? __pfx_kthread+0x10/0x10 [ 80.890119][ T5767] ret_from_fork_asm+0x1a/0x30 [ 80.894886][ T5767] [ 80.897891][ T5767] Modules linked in: [ 80.901780][ T5767] ---[ end trace 0000000000000000 ]--- [ 80.907215][ T5767] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 80.907238][ T5767] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 bc 6a 97 00 48 ba 00 00 00 00 00 fc [ 80.907251][ T5767] RSP: 0018:ffffc9000485f880 EFLAGS: 00010046 [ 80.907264][ T5767] RAX: 0000000000000000 RBX: ffff888036481740 RCX: 0000000000000001 [ 80.907274][ T5767] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000485f7e0 [ 80.907286][ T5767] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 80.907294][ T5767] R10: dffffc0000000000 R11: fffff5200090befc R12: 0000000000000000 [ 80.907304][ T5767] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880364817d0 [ 80.907314][ T5767] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 80.907325][ T5767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.907334][ T5767] CR2: 00007f2144d40e9c CR3: 000000007e738000 CR4: 00000000003526f0 [ 80.907349][ T5767] Kernel panic - not syncing: Fatal exception [ 81.008260][ T5767] Kernel Offset: disabled [ 81.012575][ T5767] Rebooting in 86400 seconds..