last executing test programs: 19.005057395s ago: executing program 3 (id=9): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 16.21569661s ago: executing program 2 (id=13): pipe(&(0x7f0000000440)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/190, 0xbe}], 0x1}, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x2, 0xfb, "baf2157a453a208132d68c067b02b4ffe220af", 0x6391, 0x6}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000040)="0aeaf8666419269c04409ce8") r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x80000008, 0x2, 0x80000000, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x8, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x4, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x4200, 0x2, 0x400008, 0x12, 0x4, 0x2, 0xda, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x2, 0x4, 0x0, 0x403, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x7fffffff, 0x401, 0xc, 0x3, 0x379, 0xc, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x21, 0x3, 0x4, 0x7f, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x0, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x1, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x81, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x2000050, 0x2, 0x764, 0xb, 0x400402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1dd, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0xb028, 0x3b, 0x2, 0x5, 0x800, 0x6, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xe54, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffe, 0x7, 0x12, 0x6, 0xf, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 15.886078817s ago: executing program 3 (id=14): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5, 0x4, 0x6, 0xe48d}, {0xbd6, 0x7, 0x0, 0x2}]}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 15.516577767s ago: executing program 2 (id=15): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5, 0x4, 0x6, 0xe48d}, {0xbd6, 0x7, 0x0, 0x2}]}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 12.212369494s ago: executing program 2 (id=19): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)={0x0, 0x33}, 0x0, 0x0}) 11.686728986s ago: executing program 3 (id=20): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)={0x0, 0x33}, 0x0, 0x0}) 10.408376009s ago: executing program 0 (id=22): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5, 0x4, 0x6, 0xe48d}, {0xbd6, 0x7, 0x0, 0x2}]}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 9.345726185s ago: executing program 1 (id=24): pipe(&(0x7f0000000440)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/190, 0xbe}], 0x1}, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x2, 0xfb, "baf2157a453a208132d68c067b02b4ffe220af", 0x6391, 0x6}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000040)="0aeaf8666419269c04409ce8") r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x80000008, 0x2, 0x80000000, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x8, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x4, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x4200, 0x2, 0x400008, 0x12, 0x4, 0x2, 0xda, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x2, 0x4, 0x0, 0x403, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x7fffffff, 0x401, 0xc, 0x3, 0x379, 0xc, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x21, 0x3, 0x4, 0x7f, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x0, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x1, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x81, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x2000050, 0x2, 0x764, 0xb, 0x400402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1dd, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0xb028, 0x3b, 0x2, 0x5, 0x800, 0x6, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xe54, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffe, 0x7, 0x12, 0x6, 0xf, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 8.832086507s ago: executing program 2 (id=25): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5, 0x4, 0x6, 0xe48d}, {0xbd6, 0x7, 0x0, 0x2}]}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 8.378993333s ago: executing program 3 (id=26): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)={0x0, 0x33}, 0x0, 0x0}) 8.30546537s ago: executing program 1 (id=27): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.800251301s ago: executing program 0 (id=28): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) syz_emit_ethernet(0x10b, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 6.217847398s ago: executing program 1 (id=29): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000040)={0x20, 0x8, 0x3, "832366"}, 0x0, 0x0, 0x0, 0x0}) 5.293037422s ago: executing program 0 (id=30): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 5.270897954s ago: executing program 2 (id=31): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)={0x0, 0x33}, 0x0, 0x0}) 5.107828088s ago: executing program 3 (id=32): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)={0x0, 0x33}, 0x0, 0x0}) 3.236894679s ago: executing program 1 (id=33): pipe(&(0x7f0000000440)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/190, 0xbe}], 0x1}, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x2, 0xfb, "baf2157a453a208132d68c067b02b4ffe220af", 0x6391, 0x6}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) syz_open_pts(r0, 0x103100) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x80000008, 0x2, 0x80000000, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x8, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x4, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x4200, 0x2, 0x400008, 0x12, 0x4, 0x2, 0xda, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x2, 0x4, 0x0, 0x403, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x7fffffff, 0x401, 0xc, 0x3, 0x379, 0xc, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x21, 0x3, 0x4, 0x7f, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x0, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x1, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x81, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x2000050, 0x2, 0x764, 0xb, 0x400402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1dd, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0xb028, 0x3b, 0x2, 0x5, 0x800, 0x6, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xe54, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffe, 0x7, 0x12, 0x6, 0xf, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2.315107073s ago: executing program 1 (id=34): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.139099967s ago: executing program 0 (id=35): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec010203010902"], 0x0) 2.050243614s ago: executing program 2 (id=36): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000040)={0x20, 0x8, 0x3, "832366"}, 0x0, 0x0, 0x0, 0x0}) 1.860709589s ago: executing program 3 (id=37): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5, 0x4, 0x6, 0xe48d}, {0xbd6, 0x7, 0x0, 0x2}]}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 285.067417ms ago: executing program 1 (id=38): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5, 0x4, 0x6, 0xe48d}, {0xbd6, 0x7, 0x0, 0x2}]}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 104.827201ms ago: executing program 0 (id=39): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32, @ANYBLOB="0800050006000000100017800400020500000000000000000c00178004000200040006001c001780040004000400030004000600040005"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 0s ago: executing program 0 (id=40): pipe(&(0x7f0000000440)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/190, 0xbe}], 0x1}, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x2, 0xfb, "baf2157a453a208132d68c067b02b4ffe220af", 0x6391, 0x6}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) syz_open_pts(r0, 0x103100) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000040)="0aeaf8666419269c04409ce8") r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x80000008, 0x2, 0x80000000, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x8, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x4, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x4200, 0x2, 0x400008, 0x12, 0x4, 0x2, 0xda, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x2, 0x4, 0x0, 0x403, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x7fffffff, 0x401, 0xc, 0x3, 0x379, 0xc, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x21, 0x3, 0x4, 0x7f, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x0, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x1, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x81, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x2000050, 0x2, 0x764, 0xb, 0x400402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1dd, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0xb028, 0x3b, 0x2, 0x5, 0x800, 0x6, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xe54, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffe, 0x7, 0x12, 0x6, 0xf, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. [ 63.766982][ T5770] cgroup: Unknown subsys name 'net' [ 63.933841][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.264522][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.401622][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.411038][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.418802][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.428065][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.435314][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.444970][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.452818][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.460236][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.484438][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.491544][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.493201][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.499956][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.507192][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.514302][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.520266][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.529341][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.541887][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.553811][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.629382][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.638709][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.646656][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.656417][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.665665][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.673871][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.972044][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 68.001065][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 68.098674][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 68.221038][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.229902][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.237792][ T5784] bridge_slave_0: entered allmulticast mode [ 68.244708][ T5784] bridge_slave_0: entered promiscuous mode [ 68.253702][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.261063][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.268364][ T5780] bridge_slave_0: entered allmulticast mode [ 68.275087][ T5780] bridge_slave_0: entered promiscuous mode [ 68.301544][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.308920][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.316043][ T5784] bridge_slave_1: entered allmulticast mode [ 68.323614][ T5784] bridge_slave_1: entered promiscuous mode [ 68.330987][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.338408][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.345594][ T5780] bridge_slave_1: entered allmulticast mode [ 68.352349][ T5780] bridge_slave_1: entered promiscuous mode [ 68.401303][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 68.416176][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.425727][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.432968][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.441595][ T5788] bridge_slave_0: entered allmulticast mode [ 68.449123][ T5788] bridge_slave_0: entered promiscuous mode [ 68.474155][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.485483][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.495101][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.502592][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.510347][ T5788] bridge_slave_1: entered allmulticast mode [ 68.516991][ T5788] bridge_slave_1: entered promiscuous mode [ 68.531141][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.627825][ T5784] team0: Port device team_slave_0 added [ 68.636323][ T5780] team0: Port device team_slave_0 added [ 68.644429][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.657722][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.675031][ T5784] team0: Port device team_slave_1 added [ 68.692861][ T5780] team0: Port device team_slave_1 added [ 68.763651][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.771876][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.779767][ T5792] bridge_slave_0: entered allmulticast mode [ 68.786460][ T5792] bridge_slave_0: entered promiscuous mode [ 68.794760][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.801883][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.828171][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.841936][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.849081][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.875402][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.887045][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.894714][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.920904][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.940643][ T5788] team0: Port device team_slave_0 added [ 68.946902][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.954221][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.966025][ T5792] bridge_slave_1: entered allmulticast mode [ 68.974218][ T5792] bridge_slave_1: entered promiscuous mode [ 68.998725][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.005706][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.031771][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.044233][ T5788] team0: Port device team_slave_1 added [ 69.072831][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.124910][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.161729][ T5784] hsr_slave_0: entered promiscuous mode [ 69.169794][ T5784] hsr_slave_1: entered promiscuous mode [ 69.177081][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.184318][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.211050][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.223542][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.230679][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.256956][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.271446][ T5792] team0: Port device team_slave_0 added [ 69.279650][ T5792] team0: Port device team_slave_1 added [ 69.330484][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.337598][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.363947][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.380217][ T5780] hsr_slave_0: entered promiscuous mode [ 69.386469][ T5780] hsr_slave_1: entered promiscuous mode [ 69.392916][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.401599][ T5780] Cannot create hsr debugfs directory [ 69.418448][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.425439][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.451451][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.545706][ T5788] hsr_slave_0: entered promiscuous mode [ 69.552691][ T5788] hsr_slave_1: entered promiscuous mode [ 69.558923][ T50] Bluetooth: hci1: command tx timeout [ 69.559274][ T5782] Bluetooth: hci0: command tx timeout [ 69.571871][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.579699][ T5788] Cannot create hsr debugfs directory [ 69.603559][ T5792] hsr_slave_0: entered promiscuous mode [ 69.610543][ T5792] hsr_slave_1: entered promiscuous mode [ 69.616706][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.624397][ T5792] Cannot create hsr debugfs directory [ 69.637700][ T5782] Bluetooth: hci2: command tx timeout [ 69.717626][ T5782] Bluetooth: hci3: command tx timeout [ 69.989679][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.002144][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.013106][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.023917][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.085262][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.097036][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.126467][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.146803][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.209276][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.227219][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.255852][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.288815][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.330382][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.356056][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.370914][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.396922][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.407702][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.462420][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.486897][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.494203][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.513954][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.531336][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.538532][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.576806][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.625458][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.632754][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.651689][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.658961][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.680226][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.772984][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.811964][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.819201][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.845703][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.854403][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.936056][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.003604][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.060681][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.067898][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.113642][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.120883][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.223638][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.329887][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.375419][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.428711][ T5784] veth0_vlan: entered promiscuous mode [ 71.496342][ T5792] veth0_vlan: entered promiscuous mode [ 71.505072][ T5784] veth1_vlan: entered promiscuous mode [ 71.526962][ T5780] veth0_vlan: entered promiscuous mode [ 71.544251][ T5792] veth1_vlan: entered promiscuous mode [ 71.583989][ T5784] veth0_macvtap: entered promiscuous mode [ 71.591882][ T5780] veth1_vlan: entered promiscuous mode [ 71.619460][ T5784] veth1_macvtap: entered promiscuous mode [ 71.647081][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.647236][ T5782] Bluetooth: hci1: command tx timeout [ 71.653939][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.659321][ T50] Bluetooth: hci0: command tx timeout [ 71.673486][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.691188][ T5792] veth0_macvtap: entered promiscuous mode [ 71.709739][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.720458][ T50] Bluetooth: hci2: command tx timeout [ 71.729260][ T5792] veth1_macvtap: entered promiscuous mode [ 71.754285][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.779420][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.790890][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.804304][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.812296][ T50] Bluetooth: hci3: command tx timeout [ 71.822750][ T5780] veth0_macvtap: entered promiscuous mode [ 71.834282][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.845252][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.856977][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.865893][ T5780] veth1_macvtap: entered promiscuous mode [ 71.873657][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.883502][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.893245][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.902176][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.931882][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.943345][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.952478][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.962976][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.053866][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.064545][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.074911][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.086748][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.098181][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.108269][ T5788] veth0_vlan: entered promiscuous mode [ 72.123517][ T5788] veth1_vlan: entered promiscuous mode [ 72.127070][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.138318][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.152176][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.165895][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.176302][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.187141][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.204779][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.218880][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.229052][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.238073][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.246886][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.319117][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.326986][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.355779][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.375657][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.395992][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.396382][ T5788] veth0_macvtap: entered promiscuous mode [ 72.412115][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.443798][ T5788] veth1_macvtap: entered promiscuous mode [ 72.516310][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.543835][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.564699][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.585587][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.595654][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.624336][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.634938][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.646045][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.670483][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.682624][ T5871] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.725254][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.735959][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.746704][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.756878][ T5876] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.757887][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.779783][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.790339][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.802554][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.815340][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.820469][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.841891][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.857040][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.861119][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.877200][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.158557][ T5880] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6'. [ 73.173994][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.189976][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.214540][ T5880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6'. [ 73.352383][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.397530][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.491395][ T5881] kvm: pic: non byte write [ 73.561308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 73.637918][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.659736][ T5892] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 73.663279][ T5889] kvm: pic: non byte write [ 73.686842][ T5892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 73.718102][ T50] Bluetooth: hci0: command tx timeout [ 73.718460][ T5782] Bluetooth: hci1: command tx timeout [ 73.797708][ T5782] Bluetooth: hci2: command tx timeout [ 73.844880][ T9] usb 2-1: config 0 has no interfaces? [ 73.873033][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 73.877663][ T5782] Bluetooth: hci3: command tx timeout [ 73.890944][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.904661][ T9] usb 2-1: Product: syz [ 73.909533][ T9] usb 2-1: Manufacturer: syz [ 73.914393][ T9] usb 2-1: SerialNumber: syz [ 73.933096][ T9] usb 2-1: config 0 descriptor?? [ 74.087752][ T5836] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 74.250309][ T5887] pimreg: entered allmulticast mode [ 74.295043][ T5887] pimreg: left allmulticast mode [ 74.310013][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.330615][ T5836] usb 3-1: config 0 has no interfaces? [ 74.362291][ T5836] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 74.382528][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.402839][ T5836] usb 3-1: Product: syz [ 74.407962][ T5836] usb 3-1: Manufacturer: syz [ 74.417744][ T5836] usb 3-1: SerialNumber: syz [ 74.438639][ T2128] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.439927][ T5836] usb 3-1: config 0 descriptor?? [ 74.457783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.657567][ T2128] usb 4-1: Using ep0 maxpacket: 32 [ 74.668280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.676842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.686106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.705043][ T2128] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 74.724929][ T2128] usb 4-1: config 0 has no interface number 0 [ 74.759548][ T2128] usb 4-1: config 0 interface 89 has no altsetting 0 [ 74.773446][ T2128] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 74.790926][ T2128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.800776][ T2128] usb 4-1: Product: syz [ 74.805120][ T2128] usb 4-1: Manufacturer: syz [ 74.811742][ T2128] usb 4-1: SerialNumber: syz [ 74.821639][ T2128] usb 4-1: config 0 descriptor?? [ 74.843388][ T2128] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 74.860293][ T2128] em28xx 4-1:0.89: Video interface 89 found: bulk [ 75.247540][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.337791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.459340][ T2128] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 75.594801][ T9] usb 1-1: config 0 has no interfaces? [ 75.604435][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 75.614216][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.624768][ T9] usb 1-1: Product: syz [ 75.629231][ T9] usb 1-1: Manufacturer: syz [ 75.633910][ T9] usb 1-1: SerialNumber: syz [ 75.648584][ T9] usb 1-1: config 0 descriptor?? [ 75.797594][ T5782] Bluetooth: hci0: command tx timeout [ 75.797939][ T50] Bluetooth: hci1: command tx timeout [ 75.877612][ T50] Bluetooth: hci2: command tx timeout [ 75.957855][ T50] Bluetooth: hci3: command tx timeout [ 76.279637][ T5829] usb 2-1: USB disconnect, device number 2 [ 76.307937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 76.443683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.468998][ T5909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 76.527507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 76.545824][ T2128] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 76.557813][ T2128] em28xx 4-1:0.89: board has no eeprom [ 76.627603][ T2128] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 76.636220][ T2128] em28xx 4-1:0.89: analog set to bulk mode. [ 76.645502][ T5898] em28xx 4-1:0.89: Registering V4L2 extension [ 76.665199][ T2128] usb 4-1: USB disconnect, device number 2 [ 76.707661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.724514][ T2128] em28xx 4-1:0.89: Disconnecting em28xx [ 76.736937][ T5898] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 76.756818][ T5898] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 76.802267][ T5898] em28xx 4-1:0.89: No AC97 audio processor [ 76.837091][ T5829] usb 3-1: USB disconnect, device number 2 [ 76.845411][ T5898] usb 4-1: Decoder not found [ 76.866347][ T5898] em28xx 4-1:0.89: failed to create media graph [ 76.877121][ T5898] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 76.908948][ T5898] em28xx 4-1:0.89: Registering snapshot button... [ 76.945207][ T5898] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input5 [ 76.999617][ T5898] em28xx 4-1:0.89: Remote control support is not available for this card. [ 77.027906][ T2128] em28xx 4-1:0.89: Closing input extension [ 77.073638][ T2128] em28xx 4-1:0.89: Deregistering snapshot button [ 77.202982][ T2128] em28xx 4-1:0.89: Freeing device [ 77.274169][ T5913] input: syz1 as /devices/virtual/input/input6 [ 77.967585][ T1186] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.087937][ T5793] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.160362][ T5829] usb 1-1: USB disconnect, device number 2 [ 78.363159][ T1186] usb 4-1: config 0 has no interfaces? [ 78.490358][ T5793] usb 3-1: config 0 has no interfaces? [ 78.503640][ T1186] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 78.551735][ T5793] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 78.579998][ T5934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 78.589899][ T1186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.603365][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.615571][ T1186] usb 4-1: Product: syz [ 78.621935][ T5829] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.687718][ T5793] usb 3-1: Product: syz [ 78.693436][ T1186] usb 4-1: Manufacturer: syz [ 78.707666][ T5793] usb 3-1: Manufacturer: syz [ 78.713665][ T1186] usb 4-1: SerialNumber: syz [ 78.734152][ T5793] usb 3-1: SerialNumber: syz [ 78.744305][ T1186] usb 4-1: config 0 descriptor?? [ 78.758234][ T5793] usb 3-1: config 0 descriptor?? [ 78.947699][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 78.954866][ T5829] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 78.987523][ T5829] usb 1-1: config 0 has no interface number 0 [ 79.000539][ T5829] usb 1-1: config 0 interface 89 has no altsetting 0 [ 79.018695][ T5829] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 79.054967][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.079166][ T5829] usb 1-1: Product: syz [ 79.086125][ T5829] usb 1-1: Manufacturer: syz [ 79.104716][ T5928] pimreg: entered allmulticast mode [ 79.112283][ T5829] usb 1-1: SerialNumber: syz [ 79.143600][ T5829] usb 1-1: config 0 descriptor?? [ 79.155751][ T5924] pimreg: entered allmulticast mode [ 79.186363][ T5829] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 79.210634][ T5829] em28xx 1-1:0.89: Video interface 89 found: bulk [ 79.276951][ T5924] pimreg: left allmulticast mode [ 79.778700][ T5829] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 80.307659][ T1186] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.408340][ T5829] em28xx 1-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 80.492201][ T5829] em28xx 1-1:0.89: board has no eeprom [ 80.575480][ T1186] usb 2-1: config 0 has no interfaces? [ 80.596826][ T1186] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 80.617075][ T1186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.635411][ T1186] usb 2-1: Product: syz [ 80.661470][ T1186] usb 2-1: Manufacturer: syz [ 80.684375][ T1186] usb 2-1: SerialNumber: syz [ 80.712549][ T1186] usb 2-1: config 0 descriptor?? [ 80.828326][ T1186] usb 3-1: USB disconnect, device number 3 [ 80.908013][ T5829] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 80.924380][ T5829] em28xx 1-1:0.89: analog set to bulk mode. [ 80.943400][ T8] em28xx 1-1:0.89: Registering V4L2 extension [ 81.094906][ T8] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 81.106795][ T5829] usb 1-1: USB disconnect, device number 3 [ 81.118590][ T8] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 81.132171][ T5829] em28xx 1-1:0.89: Disconnecting em28xx [ 81.138155][ T8] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 81.147552][ T8] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 81.155838][ T5940] pimreg: entered allmulticast mode [ 81.161548][ T8] em28xx 1-1:0.89: No AC97 audio processor [ 81.186896][ T8] usb 1-1: Decoder not found [ 81.192046][ T8] em28xx 1-1:0.89: failed to create media graph [ 81.202724][ T8] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 81.212610][ T8] em28xx 1-1:0.89: Registering snapshot button... [ 81.223762][ T8] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input7 [ 81.237269][ T8] em28xx 1-1:0.89: Remote control support is not available for this card. [ 81.253425][ T5829] em28xx 1-1:0.89: Closing input extension [ 81.261356][ T5829] em28xx 1-1:0.89: Deregistering snapshot button [ 81.272354][ T5940] pimreg: left allmulticast mode [ 81.284180][ T5829] em28xx 1-1:0.89: Freeing device [ 81.347667][ T2128] usb 4-1: USB disconnect, device number 3 [ 81.407827][ T1186] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 81.617690][ T1186] usb 3-1: Using ep0 maxpacket: 32 [ 81.646282][ T1186] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 81.662208][ T1186] usb 3-1: config 0 has no interface number 0 [ 81.677213][ T1186] usb 3-1: config 0 interface 89 has no altsetting 0 [ 81.693070][ T1186] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 81.702628][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.718471][ T1186] usb 3-1: Product: syz [ 81.722891][ T1186] usb 3-1: Manufacturer: syz [ 81.730022][ T1186] usb 3-1: SerialNumber: syz [ 81.736611][ T1186] usb 3-1: config 0 descriptor?? [ 81.744738][ T1186] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 81.771384][ T1186] em28xx 3-1:0.89: Video interface 89 found: bulk [ 81.886731][ T23] cfg80211: failed to load regulatory.db [ 81.892954][ T2128] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.925031][ T5951] input: syz1 as /devices/virtual/input/input8 [ 82.107537][ T2128] usb 4-1: Using ep0 maxpacket: 32 [ 82.121747][ T2128] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 82.129959][ T2128] usb 4-1: config 0 has no interface number 0 [ 82.136167][ T2128] usb 4-1: config 0 interface 89 has no altsetting 0 [ 82.146192][ T2128] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 82.156534][ T2128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.165172][ T2128] usb 4-1: Product: syz [ 82.171606][ T2128] usb 4-1: Manufacturer: syz [ 82.178605][ T2128] usb 4-1: SerialNumber: syz [ 82.191439][ T2128] usb 4-1: config 0 descriptor?? [ 82.201311][ T2128] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 82.211147][ T2128] em28xx 4-1:0.89: Video interface 89 found: bulk [ 82.357805][ T1186] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 82.814215][ T2128] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 82.976870][ T1186] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 82.994013][ T1186] em28xx 3-1:0.89: board has no eeprom [ 83.097624][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.341362][ T23] usb 1-1: config 0 has no interfaces? [ 83.372792][ T23] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 83.393627][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.425841][ T23] usb 1-1: Product: syz [ 83.469650][ T2128] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 83.477644][ T1186] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 83.487534][ T23] usb 1-1: Manufacturer: syz [ 83.492178][ T23] usb 1-1: SerialNumber: syz [ 83.503807][ T1186] em28xx 3-1:0.89: analog set to bulk mode. [ 83.514447][ T2128] em28xx 4-1:0.89: board has no eeprom [ 83.532111][ T8] em28xx 3-1:0.89: Registering V4L2 extension [ 83.540158][ T5829] usb 2-1: USB disconnect, device number 3 [ 83.551680][ T5958] netlink: 100 bytes leftover after parsing attributes in process `syz.1.23'. [ 83.570476][ T23] usb 1-1: config 0 descriptor?? [ 83.668492][ T1186] usb 3-1: USB disconnect, device number 4 [ 83.674526][ T8] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 83.685506][ T1186] em28xx 3-1:0.89: Disconnecting em28xx [ 83.756188][ T8] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 83.788253][ T8] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 83.795650][ T8] em28xx 3-1:0.89: No AC97 audio processor [ 83.839417][ T8] usb 3-1: Decoder not found [ 83.844132][ T8] em28xx 3-1:0.89: failed to create media graph [ 83.854821][ T8] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 83.864975][ T8] em28xx 3-1:0.89: Registering snapshot button... [ 83.876988][ T8] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input9 [ 83.882269][ T5956] pimreg: entered allmulticast mode [ 83.920694][ T5956] pimreg: left allmulticast mode [ 83.931634][ T5962] input: syz1 as /devices/virtual/input/input10 [ 83.942118][ T8] em28xx 3-1:0.89: Remote control support is not available for this card. [ 83.957936][ T2128] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 83.965428][ T2128] em28xx 4-1:0.89: analog set to bulk mode. [ 83.985991][ T42] em28xx 4-1:0.89: Registering V4L2 extension [ 84.112368][ T42] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 84.112556][ T8] usb 4-1: USB disconnect, device number 4 [ 84.122070][ T42] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 84.138928][ T8] em28xx 4-1:0.89: Disconnecting em28xx [ 84.154230][ T42] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 84.166345][ T42] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 84.180516][ T42] em28xx 4-1:0.89: No AC97 audio processor [ 84.191507][ T42] usb 4-1: Decoder not found [ 84.196245][ T42] em28xx 4-1:0.89: failed to create media graph [ 84.221559][ T42] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 84.232223][ T42] em28xx 4-1:0.89: Registering snapshot button... [ 84.243926][ T42] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input11 [ 84.257394][ T42] em28xx 4-1:0.89: Remote control support is not available for this card. [ 84.270025][ T1186] em28xx 3-1:0.89: Closing input extension [ 84.316860][ T1186] em28xx 3-1:0.89: Deregistering snapshot button [ 84.333749][ T8] em28xx 4-1:0.89: Closing input extension [ 84.350544][ T1186] em28xx 3-1:0.89: Freeing device [ 84.355734][ T8] em28xx 4-1:0.89: Deregistering snapshot button [ 84.436484][ T8] em28xx 4-1:0.89: Freeing device [ 84.947576][ T1186] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.097579][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.108259][ T2128] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.163170][ T1186] usb 3-1: config 0 has no interfaces? [ 85.173906][ T1186] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 85.186210][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.195524][ T1186] usb 3-1: Product: syz [ 85.204880][ T1186] usb 3-1: Manufacturer: syz [ 85.215377][ T1186] usb 3-1: SerialNumber: syz [ 85.226848][ T1186] usb 3-1: config 0 descriptor?? [ 85.277628][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 85.285913][ T8] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 85.295761][ T8] usb 4-1: config 0 has no interface number 0 [ 85.306745][ T8] usb 4-1: config 0 interface 89 has no altsetting 0 [ 85.317784][ T2128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.334884][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 85.337662][ T2128] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 85.356533][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.365690][ T8] usb 4-1: Product: syz [ 85.372360][ T8] usb 4-1: Manufacturer: syz [ 85.377117][ T8] usb 4-1: SerialNumber: syz [ 85.382337][ T2128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.391947][ T8] usb 4-1: config 0 descriptor?? [ 85.400029][ T8] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 85.412633][ T8] em28xx 4-1:0.89: Video interface 89 found: bulk [ 85.433215][ T2128] usb 2-1: config 0 descriptor?? [ 85.454783][ T2128] pwc: Askey VC010 type 2 USB webcam detected. [ 85.641256][ T5970] pimreg: left allmulticast mode [ 85.862798][ T2128] pwc: recv_control_msg error -32 req 02 val 2b00 [ 85.871609][ T2128] pwc: recv_control_msg error -32 req 02 val 2700 [ 85.885099][ T2128] pwc: recv_control_msg error -32 req 02 val 2c00 [ 85.905001][ T2128] pwc: recv_control_msg error -32 req 04 val 1000 [ 85.915509][ T2128] pwc: recv_control_msg error -32 req 04 val 1300 [ 85.931398][ T2128] pwc: recv_control_msg error -32 req 04 val 1400 [ 85.942312][ T2128] pwc: recv_control_msg error -32 req 02 val 2000 [ 85.961229][ T2128] pwc: recv_control_msg error -32 req 02 val 2100 [ 86.014688][ T8] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 86.171462][ T2128] pwc: recv_control_msg error -71 req 02 val 2500 [ 86.195374][ T2128] pwc: recv_control_msg error -71 req 02 val 2400 [ 86.202710][ T2128] pwc: recv_control_msg error -71 req 02 val 2600 [ 86.210306][ T2128] pwc: recv_control_msg error -71 req 02 val 2900 [ 86.227200][ T2128] pwc: recv_control_msg error -71 req 02 val 2800 [ 86.243908][ T2128] pwc: recv_control_msg error -71 req 04 val 1100 [ 86.260154][ T42] usb 1-1: USB disconnect, device number 4 [ 86.287395][ T2128] pwc: recv_control_msg error -71 req 04 val 1200 [ 86.322644][ T2128] pwc: Registered as video103. [ 86.356573][ T2128] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 86.445763][ T2128] usb 2-1: USB disconnect, device number 4 [ 86.590157][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 86.660645][ T8] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 86.670637][ T8] em28xx 4-1:0.89: board has no eeprom [ 87.157698][ T8] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 87.166396][ T8] em28xx 4-1:0.89: analog set to bulk mode. [ 87.197526][ T2128] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.215471][ T8] em28xx 4-1:0.89: Registering V4L2 extension [ 87.364533][ T8] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 87.374923][ T5829] usb 4-1: USB disconnect, device number 5 [ 87.381266][ T8] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 87.391290][ T5829] em28xx 4-1:0.89: Disconnecting em28xx [ 87.397978][ T8] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 87.424242][ T8] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 87.434899][ T8] em28xx 4-1:0.89: No AC97 audio processor [ 87.447715][ T2128] usb 2-1: Using ep0 maxpacket: 32 [ 87.452240][ T8] usb 4-1: Decoder not found [ 87.472193][ T8] em28xx 4-1:0.89: failed to create media graph [ 87.481060][ T8] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 87.494618][ T8] em28xx 4-1:0.89: Registering snapshot button... [ 87.512725][ T8] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input13 [ 87.539249][ T2128] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 87.544917][ T8] em28xx 4-1:0.89: Remote control support is not available for this card. [ 87.575360][ T5829] em28xx 4-1:0.89: Closing input extension [ 87.585210][ T2128] usb 2-1: config 0 has no interface number 0 [ 87.586718][ T5829] em28xx 4-1:0.89: Deregistering snapshot button [ 87.612926][ T5829] em28xx 4-1:0.89: Freeing device [ 87.646250][ T2128] usb 2-1: config 0 interface 89 has no altsetting 0 [ 87.680624][ T2128] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 87.697506][ T2128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.721920][ T2128] usb 2-1: Product: syz [ 87.727666][ T2128] usb 2-1: Manufacturer: syz [ 87.737741][ T2128] usb 2-1: SerialNumber: syz [ 87.750165][ T2128] usb 2-1: config 0 descriptor?? [ 87.762030][ T1186] usb 3-1: USB disconnect, device number 5 [ 87.789701][ T2128] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 87.817576][ T2128] em28xx 2-1:0.89: Video interface 89 found: bulk [ 88.227538][ T1186] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 88.279566][ T5829] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.317804][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 88.396243][ T2128] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 88.417574][ T1186] usb 3-1: Using ep0 maxpacket: 32 [ 88.425436][ T1186] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 88.433866][ T1186] usb 3-1: config 0 has no interface number 0 [ 88.444274][ T1186] usb 3-1: config 0 interface 89 has no altsetting 0 [ 88.454618][ T1186] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 88.468282][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.476385][ T1186] usb 3-1: Product: syz [ 88.486693][ T1186] usb 3-1: Manufacturer: syz [ 88.492183][ T5829] usb 1-1: config 0 has no interfaces? [ 88.502566][ T1186] usb 3-1: SerialNumber: syz [ 88.507580][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 88.516885][ T8] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 88.526783][ T5829] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 88.537568][ T8] usb 4-1: config 0 has no interface number 0 [ 88.545079][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.554862][ T1186] usb 3-1: config 0 descriptor?? [ 88.560147][ T8] usb 4-1: config 0 interface 89 has no altsetting 0 [ 88.569642][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 88.580401][ T5829] usb 1-1: Product: syz [ 88.585825][ T5829] usb 1-1: Manufacturer: syz [ 88.590634][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.600568][ T1186] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 88.610392][ T5829] usb 1-1: SerialNumber: syz [ 88.620953][ T8] usb 4-1: Product: syz [ 88.628551][ T5829] usb 1-1: config 0 descriptor?? [ 88.633675][ T1186] em28xx 3-1:0.89: Video interface 89 found: bulk [ 88.642067][ T8] usb 4-1: Manufacturer: syz [ 88.648338][ T8] usb 4-1: SerialNumber: syz [ 88.656574][ T8] usb 4-1: config 0 descriptor?? [ 88.671825][ T8] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 88.682523][ T8] em28xx 4-1:0.89: Video interface 89 found: bulk [ 88.938964][ T5991] pimreg: entered allmulticast mode [ 89.006860][ T5990] pimreg: left allmulticast mode [ 89.030146][ T2128] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=131) [ 89.041823][ T2128] em28xx 2-1:0.89: board has no eeprom [ 89.184687][ T1186] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 89.298046][ T2128] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 89.305521][ T2128] em28xx 2-1:0.89: analog set to bulk mode. [ 89.312390][ T5912] em28xx 2-1:0.89: Registering V4L2 extension [ 89.313155][ T8] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 89.323149][ T2128] usb 2-1: USB disconnect, device number 5 [ 89.332901][ T2128] em28xx 2-1:0.89: Disconnecting em28xx [ 89.377201][ T5912] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 89.385749][ T5912] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 89.395529][ T5912] em28xx 2-1:0.89: No AC97 audio processor [ 89.404398][ T5912] usb 2-1: Decoder not found [ 89.409199][ T5912] em28xx 2-1:0.89: failed to create media graph [ 89.415488][ T5912] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 89.425186][ T5912] em28xx 2-1:0.89: Registering snapshot button... [ 89.433140][ T5912] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input14 [ 89.447326][ T5912] em28xx 2-1:0.89: Remote control support is not available for this card. [ 89.456395][ T2128] em28xx 2-1:0.89: Closing input extension [ 89.462674][ T2128] em28xx 2-1:0.89: Deregistering snapshot button [ 89.484381][ T2128] em28xx 2-1:0.89: Freeing device [ 89.803523][ T1186] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 89.813545][ T1186] em28xx 3-1:0.89: board has no eeprom [ 89.952158][ T5998] input: syz1 as /devices/virtual/input/input15 [ 89.963443][ T8] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 89.980311][ T8] em28xx 4-1:0.89: board has no eeprom [ 90.297651][ T1186] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 90.305254][ T1186] em28xx 3-1:0.89: analog set to bulk mode. [ 90.313154][ T5829] em28xx 3-1:0.89: Registering V4L2 extension [ 90.442745][ T5912] usb 3-1: USB disconnect, device number 6 [ 90.443893][ T5829] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 90.450517][ T5912] em28xx 3-1:0.89: Disconnecting em28xx [ 90.466516][ T5829] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 90.474533][ T8] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 90.485005][ T5829] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 90.492302][ T8] em28xx 4-1:0.89: analog set to bulk mode. [ 90.498600][ T5829] em28xx 3-1:0.89: No AC97 audio processor [ 90.510356][ T5829] usb 3-1: Decoder not found [ 90.514984][ T5829] em28xx 3-1:0.89: failed to create media graph [ 90.524774][ T5829] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 90.536973][ T5829] em28xx 3-1:0.89: Registering snapshot button... [ 90.559444][ T5829] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input16 [ 90.593353][ T5829] em28xx 3-1:0.89: Remote control support is not available for this card. [ 90.623045][ T1186] em28xx 4-1:0.89: Registering V4L2 extension [ 90.673623][ T2128] usb 4-1: USB disconnect, device number 6 [ 90.691202][ T2128] em28xx 4-1:0.89: Disconnecting em28xx [ 90.695277][ T1186] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 90.704404][ T1186] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 90.713177][ T1186] em28xx 4-1:0.89: No AC97 audio processor [ 90.731711][ T1186] usb 4-1: Decoder not found [ 90.743766][ T1186] em28xx 4-1:0.89: failed to create media graph [ 90.760014][ T1186] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 90.773098][ T1186] em28xx 4-1:0.89: Registering snapshot button... [ 90.795437][ T1186] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input17 [ 90.826164][ T1186] em28xx 4-1:0.89: Remote control support is not available for this card. [ 90.884590][ T5912] em28xx 3-1:0.89: Closing input extension [ 90.906488][ T1186] usb 1-1: USB disconnect, device number 5 [ 90.910349][ T5912] em28xx 3-1:0.89: Deregistering snapshot button [ 90.947757][ T2128] em28xx 4-1:0.89: Closing input extension [ 90.977274][ T5912] em28xx 3-1:0.89: Freeing device [ 90.983369][ T2128] em28xx 4-1:0.89: Deregistering snapshot button [ 91.047154][ T2128] em28xx 4-1:0.89: Freeing device [ 91.087678][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 91.291736][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.302014][ T23] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 91.312456][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.328280][ T23] usb 2-1: config 0 descriptor?? [ 91.353052][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 91.487572][ T5912] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 91.517698][ T1186] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.647559][ T5829] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 91.687559][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 91.697258][ T5912] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 91.697583][ T1186] usb 1-1: Using ep0 maxpacket: 32 [ 91.711590][ T5912] usb 3-1: config 0 has no interface number 0 [ 91.718859][ T5912] usb 3-1: config 0 interface 89 has no altsetting 0 [ 91.730885][ T5912] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 91.741646][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.753092][ T5912] usb 3-1: Product: syz [ 91.758435][ T5912] usb 3-1: Manufacturer: syz [ 91.763651][ T5912] usb 3-1: SerialNumber: syz [ 91.771915][ T1186] usb 1-1: config 0 has no interfaces? [ 91.781751][ T5912] usb 3-1: config 0 descriptor?? [ 91.789764][ T5912] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 91.804986][ T5912] em28xx 3-1:0.89: Video interface 89 found: bulk [ 91.813138][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 91.824183][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 91.833330][ T1186] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 91.834480][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 91.849550][ T1186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.859352][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 91.867348][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 91.880946][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 91.893440][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 91.903847][ T5829] usb 4-1: config 0 has no interfaces? [ 91.911415][ T1186] usb 1-1: Product: syz [ 91.912517][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 91.915630][ T1186] usb 1-1: Manufacturer: syz [ 91.915647][ T1186] usb 1-1: SerialNumber: syz [ 91.944525][ T5829] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 91.957597][ T1186] usb 1-1: config 0 descriptor?? [ 91.965709][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.003752][ T5829] usb 4-1: Product: syz [ 92.012912][ T5829] usb 4-1: Manufacturer: syz [ 92.022804][ T5829] usb 4-1: SerialNumber: syz [ 92.045764][ T5829] usb 4-1: config 0 descriptor?? [ 92.130411][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 92.145108][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 92.158717][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 92.166062][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 92.176029][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 92.186804][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 92.196897][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 92.216817][ T23] pwc: Registered as video103. [ 92.237200][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 92.305387][ T23] usb 2-1: USB disconnect, device number 6 [ 92.315712][ T5829] usb 1-1: USB disconnect, device number 6 [ 92.408557][ T5912] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 92.463814][ T6015] pimreg: entered allmulticast mode [ 92.516182][ T6015] pimreg: left allmulticast mode [ 93.003907][ T6023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.39'. [ 93.037332][ T5912] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=131) [ 93.060874][ T5912] em28xx 3-1:0.89: board has no eeprom [ 93.197561][ T5829] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 93.223443][ T6026] input: syz1 as /devices/virtual/input/input19 [ 93.307520][ T5912] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 93.329593][ T5912] em28xx 3-1:0.89: analog set to bulk mode. [ 93.342222][ T2128] em28xx 3-1:0.89: Registering V4L2 extension [ 93.353748][ T5912] usb 3-1: USB disconnect, device number 7 [ 93.395729][ T5829] usb 2-1: config 0 has no interfaces? [ 93.396056][ T5912] em28xx 3-1:0.89: Disconnecting em28xx [ 93.434737][ T5829] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 93.495056][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.522001][ T5829] usb 2-1: Product: syz [ 93.526361][ T5829] usb 2-1: Manufacturer: syz [ 93.529794][ T2128] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 93.531513][ T5829] usb 2-1: SerialNumber: syz [ 93.545705][ T5829] usb 2-1: config 0 descriptor?? [ 93.552036][ T2128] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 93.564710][ T2128] em28xx 3-1:0.89: No AC97 audio processor [ 93.589182][ T2128] usb 3-1: Decoder not found [ 93.611490][ T2128] em28xx 3-1:0.89: failed to create media graph [ 93.643927][ T2128] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 93.666357][ T2128] em28xx 3-1:0.89: Registering snapshot button... [ 93.666802][ T6029] ================================================================== [ 93.680890][ T6029] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430 [ 93.688266][ T6029] Read of size 8 at addr ffff88804ef98738 by task v4l_id/6029 [ 93.695704][ T6029] [ 93.698048][ T6029] CPU: 0 PID: 6029 Comm: v4l_id Not tainted syzkaller #0 [ 93.705051][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.715102][ T6029] Call Trace: [ 93.718374][ T6029] [ 93.721326][ T6029] dump_stack_lvl+0x16c/0x230 [ 93.726080][ T6029] ? __lock_acquire+0x7c80/0x7c80 [ 93.731093][ T6029] ? show_regs_print_info+0x20/0x20 [ 93.736279][ T6029] ? load_image+0x3b0/0x3b0 [ 93.740765][ T6029] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 93.746129][ T6029] ? __virt_addr_valid+0x18c/0x540 [ 93.751321][ T6029] ? __virt_addr_valid+0x469/0x540 [ 93.756505][ T6029] print_report+0xac/0x220 [ 93.760908][ T6029] ? v4l2_fh_open+0xca/0x430 [ 93.765494][ T6029] kasan_report+0x117/0x150 [ 93.770017][ T6029] ? v4l2_fh_open+0xca/0x430 [ 93.774607][ T6029] v4l2_fh_open+0xca/0x430 [ 93.779030][ T6029] em28xx_v4l2_open+0x157/0x980 [ 93.783873][ T6029] v4l2_open+0x212/0x360 [ 93.788102][ T6029] chrdev_open+0x59e/0x670 [ 93.792520][ T6029] ? cd_forget+0x160/0x160 [ 93.796921][ T6029] ? fsnotify_perm+0x3ed/0x5e0 [ 93.801678][ T6029] ? cd_forget+0x160/0x160 [ 93.806078][ T6029] do_dentry_open+0x8c6/0x1500 [ 93.810851][ T6029] path_openat+0x274b/0x3190 [ 93.815439][ T6029] ? __kasan_slab_alloc+0x6c/0x80 [ 93.820452][ T6029] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.826511][ T6029] ? verify_lock_unused+0x140/0x140 [ 93.831698][ T6029] ? do_filp_open+0x3d0/0x3d0 [ 93.836361][ T6029] ? __virt_addr_valid+0x18c/0x540 [ 93.841474][ T6029] do_filp_open+0x1c5/0x3d0 [ 93.845967][ T6029] ? vfs_tmpfile+0x490/0x490 [ 93.850553][ T6029] ? _raw_spin_unlock+0x28/0x40 [ 93.855395][ T6029] ? alloc_fd+0x58f/0x630 [ 93.859715][ T6029] do_sys_openat2+0x12c/0x1c0 [ 93.864384][ T6029] ? do_sys_open+0xe0/0xe0 [ 93.868785][ T6029] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 93.874750][ T6029] ? lock_chain_count+0x20/0x20 [ 93.879601][ T6029] ? lock_chain_count+0x20/0x20 [ 93.884434][ T6029] __x64_sys_openat+0x139/0x160 [ 93.889271][ T6029] do_syscall_64+0x55/0xb0 [ 93.893681][ T6029] ? clear_bhb_loop+0x40/0x90 [ 93.898352][ T6029] ? clear_bhb_loop+0x40/0x90 [ 93.903016][ T6029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.908914][ T6029] RIP: 0033:0x7f19dfea7407 [ 93.913521][ T6029] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 93.933219][ T6029] RSP: 002b:00007fffe311d9e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 93.941620][ T6029] RAX: ffffffffffffffda RBX: 00007f19e0697880 RCX: 00007f19dfea7407 [ 93.949679][ T6029] RDX: 0000000000000000 RSI: 00007fffe311df1d RDI: ffffffffffffff9c [ 93.957638][ T6029] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 93.965594][ T6029] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 93.973550][ T6029] R13: 00007fffe311dc30 R14: 00007f19e07f6000 R15: 000055d9a3fcf4d8 [ 93.981520][ T6029] [ 93.984526][ T6029] [ 93.986843][ T6029] Allocated by task 2128: [ 93.991156][ T6029] kasan_set_track+0x4e/0x70 [ 93.995738][ T6029] __kasan_kmalloc+0x8f/0xa0 [ 94.000319][ T6029] em28xx_v4l2_init+0x10b/0x2e70 [ 94.005247][ T6029] em28xx_init_extension+0x11c/0x1b0 [ 94.010514][ T6029] process_scheduled_works+0xa45/0x15b0 [ 94.016043][ T6029] worker_thread+0xa55/0xfc0 [ 94.020619][ T6029] kthread+0x2fa/0x390 [ 94.024686][ T6029] ret_from_fork+0x48/0x80 [ 94.029094][ T6029] ret_from_fork_asm+0x11/0x20 [ 94.033932][ T6029] [ 94.036236][ T6029] Freed by task 2128: [ 94.040219][ T6029] kasan_set_track+0x4e/0x70 [ 94.044792][ T6029] kasan_save_free_info+0x2e/0x50 [ 94.049807][ T6029] ____kasan_slab_free+0x126/0x1e0 [ 94.054919][ T6029] slab_free_freelist_hook+0x130/0x1b0 [ 94.060367][ T6029] __kmem_cache_free+0xba/0x1f0 [ 94.065206][ T6029] em28xx_v4l2_init+0x1670/0x2e70 [ 94.070227][ T6029] em28xx_init_extension+0x11c/0x1b0 [ 94.075495][ T6029] process_scheduled_works+0xa45/0x15b0 [ 94.081022][ T6029] worker_thread+0xa55/0xfc0 [ 94.085589][ T6029] kthread+0x2fa/0x390 [ 94.089645][ T6029] ret_from_fork+0x48/0x80 [ 94.094058][ T6029] ret_from_fork_asm+0x11/0x20 [ 94.098812][ T6029] [ 94.101128][ T6029] The buggy address belongs to the object at ffff88804ef98000 [ 94.101128][ T6029] which belongs to the cache kmalloc-8k of size 8192 [ 94.115182][ T6029] The buggy address is located 1848 bytes inside of [ 94.115182][ T6029] freed 8192-byte region [ffff88804ef98000, ffff88804ef9a000) [ 94.129138][ T6029] [ 94.131444][ T6029] The buggy address belongs to the physical page: [ 94.137844][ T6029] page:ffffea00013be600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ef98 [ 94.147970][ T6029] head:ffffea00013be600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 94.156881][ T6029] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 94.165282][ T6029] page_type: 0xffffffff() [ 94.169593][ T6029] raw: 00fff00000000840 ffff888017842280 ffffea0001f94e00 0000000000000005 [ 94.178156][ T6029] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 94.186715][ T6029] page dumped because: kasan: bad access detected [ 94.193114][ T6029] page_owner tracks the page as allocated [ 94.198804][ T6029] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5539, tgid 5539 (start-stop-daem), ts 40560076456, free_ts 40553194372 [ 94.219618][ T6029] post_alloc_hook+0x1cd/0x210 [ 94.224369][ T6029] get_page_from_freelist+0x195c/0x19f0 [ 94.229896][ T6029] __alloc_pages+0x1e3/0x460 [ 94.234465][ T6029] alloc_slab_page+0x5d/0x170 [ 94.239125][ T6029] new_slab+0x87/0x2e0 [ 94.243171][ T6029] ___slab_alloc+0xc6d/0x12f0 [ 94.247851][ T6029] __kmem_cache_alloc_node+0x1a2/0x260 [ 94.253290][ T6029] kmalloc_trace+0x2a/0xe0 [ 94.257692][ T6029] tomoyo_init_log+0x1104/0x1f10 [ 94.262609][ T6029] tomoyo_supervisor+0x32d/0x1080 [ 94.267617][ T6029] tomoyo_env_perm+0x14a/0x1e0 [ 94.272368][ T6029] tomoyo_find_next_domain+0x1594/0x1a60 [ 94.277980][ T6029] tomoyo_bprm_check_security+0x116/0x170 [ 94.283682][ T6029] security_bprm_check+0x62/0xa0 [ 94.288596][ T6029] bprm_execve+0xa51/0x16f0 [ 94.293079][ T6029] do_execveat_common+0x51b/0x6c0 [ 94.298082][ T6029] page last free stack trace: [ 94.302730][ T6029] free_unref_page_prepare+0x7ce/0x8e0 [ 94.308190][ T6029] free_unref_page+0x32/0x2e0 [ 94.312850][ T6029] __unfreeze_partials+0x1cf/0x210 [ 94.317943][ T6029] put_cpu_partial+0x17c/0x250 [ 94.322693][ T6029] __slab_free+0x31d/0x410 [ 94.327089][ T6029] qlist_free_all+0x75/0xe0 [ 94.331572][ T6029] kasan_quarantine_reduce+0x143/0x160 [ 94.337012][ T6029] __kasan_slab_alloc+0x22/0x80 [ 94.341841][ T6029] slab_post_alloc_hook+0x6e/0x4d0 [ 94.346937][ T6029] kmem_cache_alloc+0x11e/0x2e0 [ 94.351770][ T6029] __pmd_alloc+0x116/0x880 [ 94.356255][ T6029] handle_mm_fault+0xb3d/0x4920 [ 94.361099][ T6029] __get_user_pages+0x5ea/0x1470 [ 94.366031][ T6029] get_user_pages_remote+0x3de/0xc10 [ 94.371309][ T6029] get_arg_page+0x29e/0x5a0 [ 94.375796][ T6029] copy_string_kernel+0x165/0x220 [ 94.380822][ T6029] [ 94.383128][ T6029] Memory state around the buggy address: [ 94.388738][ T6029] ffff88804ef98600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.396823][ T6029] ffff88804ef98680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.404860][ T6029] >ffff88804ef98700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.412917][ T6029] ^ [ 94.418798][ T6029] ffff88804ef98780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.426838][ T6029] ffff88804ef98800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.434880][ T6029] ================================================================== [ 94.476632][ T2128] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input20 [ 94.507558][ T6029] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 94.514889][ T6029] CPU: 1 PID: 6029 Comm: v4l_id Not tainted syzkaller #0 [ 94.521913][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.531951][ T6029] Call Trace: [ 94.535213][ T6029] [ 94.538127][ T6029] dump_stack_lvl+0x16c/0x230 [ 94.542789][ T6029] ? show_regs_print_info+0x20/0x20 [ 94.547997][ T6029] ? load_image+0x3b0/0x3b0 [ 94.552483][ T6029] panic+0x2c0/0x710 [ 94.556359][ T6029] ? bpf_jit_dump+0xd0/0xd0 [ 94.560846][ T6029] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 94.566760][ T6029] ? _raw_spin_unlock+0x40/0x40 [ 94.571614][ T6029] ? print_memory_metadata+0x314/0x400 [ 94.577121][ T6029] ? v4l2_fh_open+0xca/0x430 [ 94.581762][ T6029] check_panic_on_warn+0x84/0xa0 [ 94.586750][ T6029] ? v4l2_fh_open+0xca/0x430 [ 94.591359][ T6029] end_report+0x6f/0x140 [ 94.595605][ T6029] kasan_report+0x128/0x150 [ 94.600111][ T6029] ? v4l2_fh_open+0xca/0x430 [ 94.604711][ T6029] v4l2_fh_open+0xca/0x430 [ 94.609138][ T6029] em28xx_v4l2_open+0x157/0x980 [ 94.614089][ T6029] v4l2_open+0x212/0x360 [ 94.618341][ T6029] chrdev_open+0x59e/0x670 [ 94.622765][ T6029] ? cd_forget+0x160/0x160 [ 94.627185][ T6029] ? fsnotify_perm+0x3ed/0x5e0 [ 94.631958][ T6029] ? cd_forget+0x160/0x160 [ 94.636380][ T6029] do_dentry_open+0x8c6/0x1500 [ 94.641153][ T6029] path_openat+0x274b/0x3190 [ 94.645760][ T6029] ? __kasan_slab_alloc+0x6c/0x80 [ 94.650794][ T6029] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.656956][ T6029] ? verify_lock_unused+0x140/0x140 [ 94.662160][ T6029] ? do_filp_open+0x3d0/0x3d0 [ 94.666949][ T6029] ? __virt_addr_valid+0x18c/0x540 [ 94.672078][ T6029] do_filp_open+0x1c5/0x3d0 [ 94.676591][ T6029] ? vfs_tmpfile+0x490/0x490 [ 94.681206][ T6029] ? _raw_spin_unlock+0x28/0x40 [ 94.687911][ T6029] ? alloc_fd+0x58f/0x630 [ 94.692877][ T6029] do_sys_openat2+0x12c/0x1c0 [ 94.697586][ T6029] ? do_sys_open+0xe0/0xe0 [ 94.702013][ T6029] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 94.708000][ T6029] ? lock_chain_count+0x20/0x20 [ 94.712854][ T6029] ? lock_chain_count+0x20/0x20 [ 94.717715][ T6029] __x64_sys_openat+0x139/0x160 [ 94.722588][ T6029] do_syscall_64+0x55/0xb0 [ 94.727104][ T6029] ? clear_bhb_loop+0x40/0x90 [ 94.731795][ T6029] ? clear_bhb_loop+0x40/0x90 [ 94.736478][ T6029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.742393][ T6029] RIP: 0033:0x7f19dfea7407 [ 94.746813][ T6029] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 94.766432][ T6029] RSP: 002b:00007fffe311d9e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 94.774863][ T6029] RAX: ffffffffffffffda RBX: 00007f19e0697880 RCX: 00007f19dfea7407 [ 94.782854][ T6029] RDX: 0000000000000000 RSI: 00007fffe311df1d RDI: ffffffffffffff9c [ 94.790837][ T6029] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 94.798812][ T6029] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 94.806783][ T6029] R13: 00007fffe311dc30 R14: 00007f19e07f6000 R15: 000055d9a3fcf4d8 [ 94.814757][ T6029] [ 94.818056][ T6029] Kernel Offset: disabled [ 94.822371][ T6029] Rebooting in 86400 seconds..