last executing test programs: 10.717438953s ago: executing program 1 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x8d, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a440000102030109027b0002010420020904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed3d052415010005241500001524120004a317a88b045e4f"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 10.223384322s ago: executing program 2 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xdc}}, 0x0) 10.078792564s ago: executing program 2 (id=181): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5, 0x4, 0x6, 0xe48d}, {0xbd6, 0x7, 0x0, 0x2}]}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 9.913588197s ago: executing program 3 (id=183): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 8.842915004s ago: executing program 1 (id=184): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.142709011s ago: executing program 3 (id=187): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) 6.67252522s ago: executing program 2 (id=188): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.567201358s ago: executing program 1 (id=189): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.505612913s ago: executing program 0 (id=190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.55724315s ago: executing program 3 (id=191): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a00)='thread_noise\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 5.459281408s ago: executing program 0 (id=192): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r5, 0x0, 0x0, 0x0) 5.350909097s ago: executing program 3 (id=193): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5, 0x4, 0x6, 0xe48d}, {0xbd6, 0x7, 0x0, 0x2}]}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 4.69631283s ago: executing program 2 (id=194): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000040)={0x20, 0x8, 0x3, "832366"}, 0x0, 0x0, 0x0, 0x0}) 4.482133187s ago: executing program 0 (id=195): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.981916627s ago: executing program 1 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.818547581s ago: executing program 1 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}}, 0x24}}, 0x0) 2.646225326s ago: executing program 1 (id=198): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)={0x0, 0x33}, 0x0, 0x0}) 2.435510963s ago: executing program 0 (id=199): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.556396794s ago: executing program 2 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.522758817s ago: executing program 3 (id=201): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a00)='thread_noise\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 1.407517286s ago: executing program 3 (id=202): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 386.704308ms ago: executing program 2 (id=203): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8ce9f471c33916f2) dup(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec010203010902"], 0x0) 253.595849ms ago: executing program 0 (id=204): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf25020000000800", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 0s ago: executing program 0 (id=205): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5, 0x4, 0x6, 0xe48d}, {0xbd6, 0x7, 0x0, 0x2}]}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 70.400606][ T5776] cgroup: Unknown subsys name 'net' [ 70.564885][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.830920][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.837740][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.174465][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.929853][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.935795][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.938184][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.945268][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.952811][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.960579][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.967438][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.980504][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.982278][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.988561][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.996038][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.010692][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.011133][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.018682][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.026427][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.034964][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.046706][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.055926][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.063752][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.073138][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.082660][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.090712][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.100905][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.117508][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.588884][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 74.610872][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 74.760682][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 74.840282][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.847761][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.855514][ T5789] bridge_slave_0: entered allmulticast mode [ 74.862692][ T5789] bridge_slave_0: entered promiscuous mode [ 74.875407][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.882893][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.890205][ T5789] bridge_slave_1: entered allmulticast mode [ 74.897022][ T5789] bridge_slave_1: entered promiscuous mode [ 74.909357][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.916489][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.924152][ T5787] bridge_slave_0: entered allmulticast mode [ 74.931744][ T5787] bridge_slave_0: entered promiscuous mode [ 74.939900][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 74.967081][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.974439][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.981730][ T5787] bridge_slave_1: entered allmulticast mode [ 74.989270][ T5787] bridge_slave_1: entered promiscuous mode [ 75.062647][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.096510][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.110077][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.121413][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.141556][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.149153][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.156673][ T5786] bridge_slave_0: entered allmulticast mode [ 75.163800][ T5786] bridge_slave_0: entered promiscuous mode [ 75.211411][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.218831][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.225965][ T5786] bridge_slave_1: entered allmulticast mode [ 75.233118][ T5786] bridge_slave_1: entered promiscuous mode [ 75.248825][ T5787] team0: Port device team_slave_0 added [ 75.258550][ T5789] team0: Port device team_slave_0 added [ 75.267516][ T5789] team0: Port device team_slave_1 added [ 75.291940][ T5787] team0: Port device team_slave_1 added [ 75.375152][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.382334][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.408378][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.422580][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.430794][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.457233][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.470794][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.483745][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.493427][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.500602][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.507913][ T5788] bridge_slave_0: entered allmulticast mode [ 75.514867][ T5788] bridge_slave_0: entered promiscuous mode [ 75.522853][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.530016][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.556057][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.570439][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.577595][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.604440][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.636543][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.643924][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.651434][ T5788] bridge_slave_1: entered allmulticast mode [ 75.659027][ T5788] bridge_slave_1: entered promiscuous mode [ 75.736175][ T5786] team0: Port device team_slave_0 added [ 75.746885][ T5786] team0: Port device team_slave_1 added [ 75.786589][ T5789] hsr_slave_0: entered promiscuous mode [ 75.793165][ T5789] hsr_slave_1: entered promiscuous mode [ 75.828532][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.841608][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.854109][ T5787] hsr_slave_0: entered promiscuous mode [ 75.860947][ T5787] hsr_slave_1: entered promiscuous mode [ 75.868322][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.876045][ T5787] Cannot create hsr debugfs directory [ 75.940571][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.947680][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.975090][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.002832][ T5788] team0: Port device team_slave_0 added [ 76.029163][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.036150][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.062691][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.076248][ T5788] team0: Port device team_slave_1 added [ 76.140075][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.147081][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.148335][ T5103] Bluetooth: hci3: command tx timeout [ 76.174484][ T50] Bluetooth: hci0: command tx timeout [ 76.180769][ T5103] Bluetooth: hci1: command tx timeout [ 76.185284][ T50] Bluetooth: hci2: command tx timeout [ 76.191987][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.231057][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.238205][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.264746][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.311977][ T5786] hsr_slave_0: entered promiscuous mode [ 76.318739][ T5786] hsr_slave_1: entered promiscuous mode [ 76.325126][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.333539][ T5786] Cannot create hsr debugfs directory [ 76.478823][ T5788] hsr_slave_0: entered promiscuous mode [ 76.485210][ T5788] hsr_slave_1: entered promiscuous mode [ 76.491960][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.499863][ T5788] Cannot create hsr debugfs directory [ 76.611964][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.654028][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.688795][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.700035][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.821419][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.841148][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.852274][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.863319][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.949056][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.960680][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.970356][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.982438][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.104711][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.133704][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.144717][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.157307][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.191263][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.242772][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.279176][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.286507][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.317759][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.334368][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.341573][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.433928][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.449852][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.457048][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.476714][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.494187][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.501366][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.546976][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.561528][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.598639][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.605764][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.662545][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.670542][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.705573][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.773733][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.781076][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.796753][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.803999][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.884380][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.094685][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.206362][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.228107][ T5803] Bluetooth: hci2: command tx timeout [ 78.234158][ T5803] Bluetooth: hci1: command tx timeout [ 78.241565][ T50] Bluetooth: hci0: command tx timeout [ 78.241743][ T5103] Bluetooth: hci3: command tx timeout [ 78.340187][ T5787] veth0_vlan: entered promiscuous mode [ 78.400188][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.420539][ T5787] veth1_vlan: entered promiscuous mode [ 78.432471][ T5789] veth0_vlan: entered promiscuous mode [ 78.460156][ T5789] veth1_vlan: entered promiscuous mode [ 78.475897][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.553185][ T5787] veth0_macvtap: entered promiscuous mode [ 78.565607][ T5787] veth1_macvtap: entered promiscuous mode [ 78.584024][ T5788] veth0_vlan: entered promiscuous mode [ 78.616085][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.635582][ T5789] veth0_macvtap: entered promiscuous mode [ 78.650605][ T5788] veth1_vlan: entered promiscuous mode [ 78.669085][ T5789] veth1_macvtap: entered promiscuous mode [ 78.691417][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.705824][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.716151][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.731146][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.740108][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.759369][ T5786] veth0_vlan: entered promiscuous mode [ 78.815856][ T5786] veth1_vlan: entered promiscuous mode [ 78.842944][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.853764][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.866938][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.902167][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.913854][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.925666][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.938394][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.950203][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.960444][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.971851][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.985059][ T5788] veth0_macvtap: entered promiscuous mode [ 79.004687][ T5788] veth1_macvtap: entered promiscuous mode [ 79.053556][ T2903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.068933][ T2903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.094441][ T5786] veth0_macvtap: entered promiscuous mode [ 79.136444][ T5786] veth1_macvtap: entered promiscuous mode [ 79.152983][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.159426][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.161116][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.176975][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.191451][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.208312][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.219609][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.266529][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.278827][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.289794][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.301842][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.314345][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.330591][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.342167][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.354488][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.365192][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.375085][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.385669][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.400845][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.424282][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.440150][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.450541][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.461298][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.471334][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.481867][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.493255][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.502658][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.511989][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.515623][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.529506][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.538870][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.549040][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.575516][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.585050][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.595119][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.605308][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.739538][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.751195][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.825999][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.853534][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.895108][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.927493][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.977896][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.999259][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.025399][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.115120][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.124452][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.198584][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 80.247630][ T5855] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 80.279437][ T5855] usb 4-1: config 0 has no interface number 0 [ 80.302735][ T5855] usb 4-1: config 0 interface 89 has no altsetting 0 [ 80.309049][ T5103] Bluetooth: hci1: command tx timeout [ 80.314930][ T5796] Bluetooth: hci0: command tx timeout [ 80.315467][ T5103] Bluetooth: hci2: command tx timeout [ 80.327678][ T5103] Bluetooth: hci3: command tx timeout [ 80.549664][ T5855] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 80.562268][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.570990][ T5855] usb 4-1: Product: syz [ 80.575304][ T5855] usb 4-1: Manufacturer: syz [ 80.580453][ T5855] usb 4-1: SerialNumber: syz [ 80.609645][ T5855] usb 4-1: config 0 descriptor?? [ 81.068036][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.573910][ T5855] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 81.596411][ T5855] em28xx 4-1:0.89: Video interface 89 found: bulk [ 81.757392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 81.787559][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 81.809033][ T27] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 81.820998][ T27] usb 3-1: config 0 has no interface number 0 [ 81.841723][ T27] usb 3-1: config 0 interface 89 has no altsetting 0 [ 81.870440][ T5895] syz.1.5[5895]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.881812][ T27] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 81.906516][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.920432][ T5905] input: syz1 as /devices/virtual/input/input5 [ 81.926103][ T27] usb 3-1: Product: syz [ 81.944900][ T27] usb 3-1: Manufacturer: syz [ 81.951223][ T27] usb 3-1: SerialNumber: syz [ 81.987396][ T27] usb 3-1: config 0 descriptor?? [ 82.011677][ T5855] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 82.035503][ T27] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 82.047543][ T27] em28xx 3-1:0.89: Video interface 89 found: bulk [ 82.387555][ T5796] Bluetooth: hci3: command tx timeout [ 82.393049][ T5803] Bluetooth: hci2: command tx timeout [ 82.398585][ T5103] Bluetooth: hci1: command tx timeout [ 82.467539][ T5103] Bluetooth: hci0: command tx timeout [ 82.631358][ T27] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 83.072478][ T5855] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 83.087457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 83.102208][ T5855] em28xx 4-1:0.89: board has no eeprom [ 83.168128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.176910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.207336][ T5855] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 83.215651][ T5855] em28xx 4-1:0.89: analog set to bulk mode. [ 83.236779][ T5878] em28xx 4-1:0.89: Registering V4L2 extension [ 83.253410][ T5855] usb 4-1: USB disconnect, device number 2 [ 83.271134][ T5855] em28xx 4-1:0.89: Disconnecting em28xx [ 83.377776][ T5778] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.393387][ T5878] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 83.416441][ T5878] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 83.447559][ T5878] em28xx 4-1:0.89: No AC97 audio processor [ 83.467473][ T5878] usb 4-1: Decoder not found [ 83.513516][ T5878] em28xx 4-1:0.89: failed to create media graph [ 83.542297][ T5878] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 83.618470][ T5878] em28xx 4-1:0.89: Registering snapshot button... [ 83.637410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 83.649401][ T5778] usb 1-1: config 0 has no interfaces? [ 83.657555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 83.690072][ T27] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 83.699318][ T5878] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input6 [ 83.727078][ T27] em28xx 3-1:0.89: board has no eeprom [ 83.745459][ T5778] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 83.746512][ T5878] em28xx 4-1:0.89: Remote control support is not available for this card. [ 83.788503][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.803282][ T5778] usb 1-1: Product: syz [ 83.820492][ T5778] usb 1-1: Manufacturer: syz [ 83.827788][ T27] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 83.842195][ T27] em28xx 3-1:0.89: analog set to bulk mode. [ 83.848432][ T5778] usb 1-1: SerialNumber: syz [ 83.872416][ T5778] usb 1-1: config 0 descriptor?? [ 83.926598][ T23] em28xx 3-1:0.89: Registering V4L2 extension [ 83.958836][ T5916] input: syz1 as /devices/virtual/input/input7 [ 83.986004][ T27] usb 3-1: USB disconnect, device number 2 [ 84.081890][ T27] em28xx 3-1:0.89: Disconnecting em28xx [ 84.179293][ T23] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 84.197239][ T23] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 84.247824][ T23] em28xx 3-1:0.89: No AC97 audio processor [ 84.258533][ T23] usb 3-1: Decoder not found [ 84.263273][ T23] em28xx 3-1:0.89: failed to create media graph [ 84.287827][ T23] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 84.314737][ T23] em28xx 3-1:0.89: Registering snapshot button... [ 84.325426][ T23] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input8 [ 84.349797][ T23] em28xx 3-1:0.89: Remote control support is not available for this card. [ 84.367230][ T27] em28xx 3-1:0.89: Closing input extension [ 84.378357][ T27] em28xx 3-1:0.89: Deregistering snapshot button [ 84.429380][ T5855] em28xx 4-1:0.89: Closing input extension [ 84.460910][ T5855] em28xx 4-1:0.89: Deregistering snapshot button [ 84.489394][ T27] em28xx 3-1:0.89: Freeing device [ 84.589074][ T5855] em28xx 4-1:0.89: Freeing device [ 84.826965][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.947625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.737269][ T5855] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.938226][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 85.980079][ T5855] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 86.012345][ T5855] usb 4-1: config 0 has no interface number 0 [ 86.021356][ T5855] usb 4-1: config 0 interface 89 has no altsetting 0 [ 86.041089][ T5855] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 86.054920][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.092995][ T5855] usb 4-1: Product: syz [ 86.103246][ T5855] usb 4-1: Manufacturer: syz [ 86.108961][ T5855] usb 4-1: SerialNumber: syz [ 86.131978][ T5855] usb 4-1: config 0 descriptor?? [ 86.170460][ T5855] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 86.193776][ T5855] em28xx 4-1:0.89: Video interface 89 found: bulk [ 86.315423][ T5878] usb 1-1: USB disconnect, device number 2 [ 86.460964][ T5961] tipc: Started in network mode [ 86.466280][ T5961] tipc: Node identity aae486263df5, cluster identity 4711 [ 86.475576][ T5961] tipc: Enabled bearer , priority 0 [ 86.482553][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.492043][ T5961] syzkaller0: entered promiscuous mode [ 86.498687][ T5961] syzkaller0: entered allmulticast mode [ 86.512729][ T5960] tipc: Resetting bearer [ 86.571151][ T5960] tipc: Disabling bearer [ 86.677981][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 86.686152][ T23] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 86.695125][ T23] usb 2-1: config 0 has no interface number 0 [ 86.705598][ T23] usb 2-1: config 0 interface 89 has no altsetting 0 [ 86.756421][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 86.773199][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.789316][ T23] usb 2-1: Product: syz [ 86.793846][ T23] usb 2-1: Manufacturer: syz [ 86.803967][ T23] usb 2-1: SerialNumber: syz [ 86.812884][ T5855] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 86.831460][ T23] usb 2-1: config 0 descriptor?? [ 86.841106][ T23] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 86.851026][ T23] em28xx 2-1:0.89: Video interface 89 found: bulk [ 87.194830][ T964] cfg80211: failed to load regulatory.db [ 87.214697][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 87.441036][ T5855] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 87.451556][ T23] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 87.459286][ T5855] em28xx 4-1:0.89: board has no eeprom [ 87.917281][ T5855] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 87.927441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.935836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.944759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.945193][ T5855] em28xx 4-1:0.89: analog set to bulk mode. [ 87.981109][ T5878] em28xx 4-1:0.89: Registering V4L2 extension [ 88.001061][ T5855] usb 4-1: USB disconnect, device number 3 [ 88.019377][ T5855] em28xx 4-1:0.89: Disconnecting em28xx [ 88.088769][ T5878] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 88.138538][ T5878] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 88.145797][ T5878] em28xx 4-1:0.89: No AC97 audio processor [ 88.162708][ T5878] usb 4-1: Decoder not found [ 88.172351][ T5878] em28xx 4-1:0.89: failed to create media graph [ 88.188564][ T5878] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 88.205663][ T5878] em28xx 4-1:0.89: Registering snapshot button... [ 88.241904][ T5878] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input9 [ 88.294466][ T5878] em28xx 4-1:0.89: Remote control support is not available for this card. [ 88.304572][ T5855] em28xx 4-1:0.89: Closing input extension [ 88.316895][ T5855] em28xx 4-1:0.89: Deregistering snapshot button [ 88.350903][ T5855] em28xx 4-1:0.89: Freeing device [ 88.488457][ T23] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 88.510606][ T23] em28xx 2-1:0.89: board has no eeprom [ 88.587599][ T23] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 88.606287][ T23] em28xx 2-1:0.89: analog set to bulk mode. [ 88.629285][ T5855] em28xx 2-1:0.89: Registering V4L2 extension [ 88.642440][ T23] usb 2-1: USB disconnect, device number 2 [ 88.661048][ T23] em28xx 2-1:0.89: Disconnecting em28xx [ 88.689017][ T5991] tipc: Started in network mode [ 88.700473][ T5991] tipc: Node identity 6ae18fc33e51, cluster identity 4711 [ 88.713033][ T5991] tipc: Enabled bearer , priority 0 [ 88.750477][ T5855] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 88.758108][ T5991] syzkaller0: entered promiscuous mode [ 88.763689][ T5991] syzkaller0: entered allmulticast mode [ 88.769967][ T5855] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 88.790406][ T5855] em28xx 2-1:0.89: No AC97 audio processor [ 88.799304][ T5990] tipc: Resetting bearer [ 88.807070][ T5855] usb 2-1: Decoder not found [ 88.846789][ T5855] em28xx 2-1:0.89: failed to create media graph [ 88.855525][ T5990] tipc: Disabling bearer [ 88.894896][ T5855] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 88.906222][ T5855] em28xx 2-1:0.89: Registering snapshot button... [ 88.919397][ T5855] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input10 [ 88.934552][ T5855] em28xx 2-1:0.89: Remote control support is not available for this card. [ 88.948759][ T23] em28xx 2-1:0.89: Closing input extension [ 88.954811][ T23] em28xx 2-1:0.89: Deregistering snapshot button [ 88.995602][ T23] em28xx 2-1:0.89: Freeing device [ 88.997974][ T5994] fuse: Bad value for 'fd' [ 89.280038][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 89.377825][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 89.677429][ T5778] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.897765][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 89.921373][ T5778] usb 1-1: config 0 has no interfaces? [ 89.941980][ T5778] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 89.952353][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.961023][ T5778] usb 1-1: Product: syz [ 89.965223][ T5778] usb 1-1: Manufacturer: syz [ 89.971568][ T5778] usb 1-1: SerialNumber: syz [ 89.984100][ T5778] usb 1-1: config 0 descriptor?? [ 90.046317][ T6025] tipc: Enabled bearer , priority 0 [ 90.056006][ T6025] syzkaller0: entered promiscuous mode [ 90.061948][ T6025] syzkaller0: entered allmulticast mode [ 90.072298][ T6024] tipc: Resetting bearer [ 90.087327][ T964] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.104060][ T6024] tipc: Disabling bearer [ 90.215311][ T5778] usb 1-1: USB disconnect, device number 3 [ 90.254075][ T6027] tipc: Enabled bearer , priority 0 [ 90.264123][ T6027] syzkaller0: entered promiscuous mode [ 90.269840][ T6027] syzkaller0: entered allmulticast mode [ 90.277294][ T964] usb 2-1: Using ep0 maxpacket: 32 [ 90.284718][ T964] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 90.293249][ T964] usb 2-1: config 0 has no interface number 0 [ 90.299630][ T964] usb 2-1: config 0 interface 89 has no altsetting 0 [ 90.309404][ T964] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 90.312246][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.40'. [ 90.318831][ T964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.336115][ T964] usb 2-1: Product: syz [ 90.340796][ T964] usb 2-1: Manufacturer: syz [ 90.345454][ T964] usb 2-1: SerialNumber: syz [ 90.351833][ T6027] tipc: Resetting bearer [ 90.352929][ T964] usb 2-1: config 0 descriptor?? [ 90.375754][ T964] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 90.385751][ T964] em28xx 2-1:0.89: Video interface 89 found: bulk [ 90.386039][ T6026] tipc: Resetting bearer [ 90.416259][ T6026] tipc: Disabling bearer [ 90.538796][ T6029] fuse: Bad value for 'fd' [ 90.648148][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 91.005792][ T964] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 91.549426][ T6053] kvm: kvm [6052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5500000800 [ 91.562130][ T6053] kvm: kvm [6052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100000800 [ 91.579097][ T6053] kvm: kvm [6052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa600000000 [ 91.834140][ T964] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 91.849593][ T964] em28xx 2-1:0.89: board has no eeprom [ 91.927273][ T5828] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.936662][ T964] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 91.998129][ T964] em28xx 2-1:0.89: analog set to bulk mode. [ 92.004748][ T8] em28xx 2-1:0.89: Registering V4L2 extension [ 92.048195][ T964] usb 2-1: USB disconnect, device number 3 [ 92.102081][ T964] em28xx 2-1:0.89: Disconnecting em28xx [ 92.176750][ T8] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 92.184443][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.195853][ T8] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 92.212141][ T5828] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 92.224566][ T8] em28xx 2-1:0.89: No AC97 audio processor [ 92.234593][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.248201][ T8] usb 2-1: Decoder not found [ 92.252859][ T8] em28xx 2-1:0.89: failed to create media graph [ 92.276042][ T5828] usb 4-1: config 0 descriptor?? [ 92.288245][ T8] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 92.305954][ T8] em28xx 2-1:0.89: Registering snapshot button... [ 92.320762][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 92.333372][ T8] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input11 [ 92.359850][ T8] em28xx 2-1:0.89: Remote control support is not available for this card. [ 92.380177][ T964] em28xx 2-1:0.89: Closing input extension [ 92.386275][ T964] em28xx 2-1:0.89: Deregistering snapshot button [ 92.453743][ T964] em28xx 2-1:0.89: Freeing device [ 92.581688][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 92.701019][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 92.736279][ T5828] pwc: recv_control_msg error -32 req 02 val 2b00 [ 92.762393][ T5828] pwc: recv_control_msg error -32 req 02 val 2700 [ 92.798915][ T5828] pwc: recv_control_msg error -32 req 02 val 2c00 [ 92.834380][ T5828] pwc: recv_control_msg error -32 req 04 val 1000 [ 92.850080][ T5828] pwc: recv_control_msg error -32 req 04 val 1300 [ 92.870749][ T5828] pwc: recv_control_msg error -32 req 04 val 1400 [ 92.882408][ T5828] pwc: recv_control_msg error -32 req 02 val 2000 [ 92.895859][ T5828] pwc: recv_control_msg error -32 req 02 val 2100 [ 92.919724][ T5828] pwc: recv_control_msg error -32 req 04 val 1500 [ 92.936998][ T5828] pwc: recv_control_msg error -71 req 02 val 2500 [ 92.955056][ T5828] pwc: recv_control_msg error -71 req 02 val 2400 [ 92.972468][ T5828] pwc: recv_control_msg error -71 req 02 val 2600 [ 92.993159][ T5828] pwc: recv_control_msg error -71 req 02 val 2900 [ 93.015398][ T5828] pwc: recv_control_msg error -71 req 02 val 2800 [ 93.040789][ T5828] pwc: recv_control_msg error -71 req 04 val 1100 [ 93.056760][ T5828] pwc: recv_control_msg error -71 req 04 val 1200 [ 93.067297][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.091548][ T5828] pwc: Registered as video103. [ 93.109289][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 93.154522][ T5828] usb 4-1: USB disconnect, device number 4 [ 93.287288][ T23] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 93.315166][ T23] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 93.332277][ T23] usb 2-1: config 220 has no interface number 2 [ 93.344028][ T23] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 93.360034][ T23] usb 2-1: config 220 interface 0 has no altsetting 0 [ 93.367045][ T23] usb 2-1: config 220 interface 76 has no altsetting 0 [ 93.375166][ T23] usb 2-1: config 220 interface 1 has no altsetting 0 [ 93.385403][ T23] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 93.418588][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.426662][ T23] usb 2-1: Product: syz [ 93.442624][ T23] usb 2-1: Manufacturer: syz [ 93.447353][ T23] usb 2-1: SerialNumber: syz [ 93.571939][ T6100] input: syz1 as /devices/virtual/input/input13 [ 93.662123][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 93.745366][ T23] usb 2-1: selecting invalid altsetting 0 [ 93.764946][ T23] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 93.774442][ T23] usb 2-1: No valid video chain found. [ 93.814947][ T23] usb 2-1: selecting invalid altsetting 0 [ 93.830712][ T23] usbtest: probe of 2-1:220.1 failed with error -22 [ 93.855961][ T23] usb 2-1: USB disconnect, device number 4 [ 93.988285][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.177780][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 94.193090][ T8] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 94.201789][ T8] usb 1-1: config 0 has no interface number 0 [ 94.217409][ T8] usb 1-1: config 0 interface 89 has no altsetting 0 [ 94.227276][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 94.236646][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.258646][ T8] usb 1-1: Product: syz [ 94.266158][ T8] usb 1-1: Manufacturer: syz [ 94.272793][ T8] usb 1-1: SerialNumber: syz [ 94.280199][ T8] usb 1-1: config 0 descriptor?? [ 94.289506][ T8] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 94.299636][ T8] em28xx 1-1:0.89: Video interface 89 found: bulk [ 94.555355][ T6134] input: syz1 as /devices/virtual/input/input14 [ 94.778054][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 94.917502][ T8] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 95.761081][ T8] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 95.786348][ T8] em28xx 1-1:0.89: board has no eeprom [ 95.817302][ T5828] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.877664][ T8] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 95.885057][ T8] em28xx 1-1:0.89: analog set to bulk mode. [ 95.931517][ T5778] em28xx 1-1:0.89: Registering V4L2 extension [ 95.988587][ T8] usb 1-1: USB disconnect, device number 4 [ 95.996797][ T8] em28xx 1-1:0.89: Disconnecting em28xx [ 96.048527][ T5828] usb 3-1: config 0 has no interfaces? [ 96.097844][ T5828] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 96.137240][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.170517][ T5778] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 96.185127][ T5828] usb 3-1: Product: syz [ 96.201431][ T5828] usb 3-1: Manufacturer: syz [ 96.206182][ T5778] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 96.287293][ T5828] usb 3-1: SerialNumber: syz [ 96.299351][ T5778] em28xx 1-1:0.89: No AC97 audio processor [ 96.309406][ T5828] usb 3-1: config 0 descriptor?? [ 96.326820][ T5778] usb 1-1: Decoder not found [ 96.342083][ T5778] em28xx 1-1:0.89: failed to create media graph [ 96.360211][ T5778] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 96.418448][ T5778] em28xx 1-1:0.89: Registering snapshot button... [ 96.448809][ T5778] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input15 [ 96.515729][ T5778] em28xx 1-1:0.89: Remote control support is not available for this card. [ 96.534019][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 96.574318][ T8] em28xx 1-1:0.89: Closing input extension [ 96.582197][ T8] em28xx 1-1:0.89: Deregistering snapshot button [ 96.602739][ T8] em28xx 1-1:0.89: Freeing device [ 96.911013][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.87'. [ 97.006253][ T6163] pimreg: entered allmulticast mode [ 97.021313][ T6192] pimreg: left allmulticast mode [ 97.998313][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 98.047236][ T5828] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.297242][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 98.314025][ T5828] usb 1-1: config 0 has no interfaces? [ 98.329315][ T5828] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 98.349593][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.373660][ T5828] usb 1-1: Product: syz [ 98.380489][ T5828] usb 1-1: Manufacturer: syz [ 98.385986][ T5828] usb 1-1: SerialNumber: syz [ 98.401406][ T5828] usb 1-1: config 0 descriptor?? [ 98.615522][ T5828] usb 1-1: USB disconnect, device number 5 [ 98.755972][ T5878] usb 3-1: USB disconnect, device number 3 [ 98.757282][ T5778] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.977907][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.018634][ T5778] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.030875][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.056155][ T5778] usb 2-1: config 0 descriptor?? [ 99.082107][ T5778] pwc: Askey VC010 type 2 USB webcam detected. [ 99.115148][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 99.397393][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.505023][ T5778] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.518801][ T5778] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.532107][ T5778] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.551876][ T5778] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.560802][ T5778] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.584837][ T5778] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.587314][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 99.602994][ T5778] pwc: recv_control_msg error -32 req 02 val 2000 [ 99.608129][ T27] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 99.622830][ T27] usb 3-1: config 0 has no interface number 0 [ 99.623672][ T5778] pwc: recv_control_msg error -32 req 02 val 2100 [ 99.631049][ T27] usb 3-1: config 0 interface 89 has no altsetting 0 [ 99.676063][ T27] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 99.692970][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.701954][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.111'. [ 99.723390][ T27] usb 3-1: Product: syz [ 99.751607][ T27] usb 3-1: Manufacturer: syz [ 99.757873][ T27] usb 3-1: SerialNumber: syz [ 99.765419][ T27] usb 3-1: config 0 descriptor?? [ 99.780352][ T27] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 99.806746][ T27] em28xx 3-1:0.89: Video interface 89 found: bulk [ 99.837245][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.855351][ T5778] pwc: recv_control_msg error -71 req 02 val 2500 [ 99.873155][ T5778] pwc: recv_control_msg error -71 req 02 val 2400 [ 99.895349][ T5778] pwc: recv_control_msg error -71 req 02 val 2600 [ 99.939611][ T5778] pwc: recv_control_msg error -71 req 02 val 2900 [ 99.946713][ T5778] pwc: recv_control_msg error -71 req 02 val 2800 [ 99.953970][ T5778] pwc: recv_control_msg error -71 req 04 val 1100 [ 99.965823][ T5778] pwc: recv_control_msg error -71 req 04 val 1200 [ 99.997620][ T5778] pwc: Registered as video103. [ 100.022026][ T5778] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 100.070960][ T23] usb 1-1: config 0 has no interfaces? [ 100.081526][ T5778] usb 2-1: USB disconnect, device number 5 [ 100.190626][ T23] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 100.211507][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.230846][ T23] usb 1-1: Product: syz [ 100.249349][ T23] usb 1-1: Manufacturer: syz [ 100.280673][ T23] usb 1-1: SerialNumber: syz [ 100.347061][ T23] usb 1-1: config 0 descriptor?? [ 100.537488][ T27] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 100.892748][ T6256] pimreg: entered allmulticast mode [ 101.194440][ T6256] pimreg: left allmulticast mode [ 101.243324][ T27] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 101.290648][ T27] em28xx 3-1:0.89: board has no eeprom [ 101.387651][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 101.727342][ T5778] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.737869][ T27] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 101.752354][ T27] em28xx 3-1:0.89: analog set to bulk mode. [ 101.765522][ T23] em28xx 3-1:0.89: Registering V4L2 extension [ 101.822025][ T27] usb 3-1: USB disconnect, device number 4 [ 102.008743][ T27] em28xx 3-1:0.89: Disconnecting em28xx [ 102.063199][ T5778] usb 2-1: config 0 has no interfaces? [ 102.139232][ T5778] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 102.154647][ T23] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 102.162728][ T23] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 102.169965][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.169992][ T5778] usb 2-1: Product: syz [ 102.170007][ T5778] usb 2-1: Manufacturer: syz [ 102.170023][ T5778] usb 2-1: SerialNumber: syz [ 102.248140][ T23] em28xx 3-1:0.89: No AC97 audio processor [ 102.265301][ T23] usb 3-1: Decoder not found [ 102.275169][ T5778] usb 2-1: config 0 descriptor?? [ 102.307292][ T23] em28xx 3-1:0.89: failed to create media graph [ 102.313662][ T23] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 102.351001][ T23] em28xx 3-1:0.89: Registering snapshot button... [ 102.364191][ T23] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input17 [ 102.381046][ T23] em28xx 3-1:0.89: Remote control support is not available for this card. [ 102.392654][ T27] em28xx 3-1:0.89: Closing input extension [ 102.403430][ T27] em28xx 3-1:0.89: Deregistering snapshot button [ 102.426154][ T27] em28xx 3-1:0.89: Freeing device [ 102.607265][ T5855] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.847197][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 102.854664][ T5855] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 102.863314][ T5855] usb 4-1: config 0 has no interface number 0 [ 102.871120][ T5855] usb 4-1: config 0 interface 89 has no altsetting 0 [ 102.882009][ T5855] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 102.891696][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.900369][ T5855] usb 4-1: Product: syz [ 102.904744][ T5855] usb 4-1: Manufacturer: syz [ 102.915590][ T5855] usb 4-1: SerialNumber: syz [ 102.930079][ T5855] usb 4-1: config 0 descriptor?? [ 102.938705][ T5855] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 102.948738][ T5855] em28xx 4-1:0.89: Video interface 89 found: bulk [ 103.030590][ T6294] pimreg: entered allmulticast mode [ 103.037349][ T5828] usb 1-1: USB disconnect, device number 6 [ 103.114677][ T6276] pimreg: left allmulticast mode [ 103.550016][ T5855] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 103.919230][ T5778] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.286611][ T5778] usb 1-1: config 0 has no interfaces? [ 104.305692][ T5778] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 104.321591][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.334276][ T5778] usb 1-1: Product: syz [ 104.338839][ T5778] usb 1-1: Manufacturer: syz [ 104.343821][ T5778] usb 1-1: SerialNumber: syz [ 104.365741][ T5778] usb 1-1: config 0 descriptor?? [ 104.557377][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.588694][ T5855] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 104.619509][ T5855] em28xx 4-1:0.89: board has no eeprom [ 104.640565][ T23] usb 2-1: USB disconnect, device number 6 [ 104.708039][ T5855] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 104.725963][ T5855] em28xx 4-1:0.89: analog set to bulk mode. [ 104.733974][ T5878] em28xx 4-1:0.89: Registering V4L2 extension [ 104.758165][ T5855] usb 4-1: USB disconnect, device number 5 [ 104.789216][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 104.800985][ T5855] em28xx 4-1:0.89: Disconnecting em28xx [ 104.821718][ T8] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 104.839096][ T8] usb 3-1: config 0 has no interface number 0 [ 104.842770][ T5878] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 104.859576][ T5878] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 104.866783][ T8] usb 3-1: config 0 interface 89 has no altsetting 0 [ 104.873914][ T5878] em28xx 4-1:0.89: No AC97 audio processor [ 104.890894][ T5878] usb 4-1: Decoder not found [ 104.891203][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 104.910266][ T5878] em28xx 4-1:0.89: failed to create media graph [ 104.922556][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.922577][ T5878] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 104.942924][ T5878] em28xx 4-1:0.89: Registering snapshot button... [ 104.951968][ T8] usb 3-1: Product: syz [ 104.957382][ T8] usb 3-1: Manufacturer: syz [ 104.962110][ T8] usb 3-1: SerialNumber: syz [ 104.963992][ T5878] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input18 [ 104.970211][ T8] usb 3-1: config 0 descriptor?? [ 104.986342][ T8] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 104.998268][ T8] em28xx 3-1:0.89: Video interface 89 found: bulk [ 105.015648][ T5878] em28xx 4-1:0.89: Remote control support is not available for this card. [ 105.035182][ T5855] em28xx 4-1:0.89: Closing input extension [ 105.039140][ T6307] pimreg: entered allmulticast mode [ 105.050351][ T5855] em28xx 4-1:0.89: Deregistering snapshot button [ 105.082355][ T5855] em28xx 4-1:0.89: Freeing device [ 105.087673][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.174030][ T6307] pimreg: left allmulticast mode [ 105.297811][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 105.339597][ T23] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 105.350049][ T23] usb 2-1: config 0 has no interface number 0 [ 105.361111][ T23] usb 2-1: config 0 interface 89 has no altsetting 0 [ 105.382781][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 105.393568][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.402375][ T23] usb 2-1: Product: syz [ 105.410204][ T23] usb 2-1: Manufacturer: syz [ 105.419607][ T23] usb 2-1: SerialNumber: syz [ 105.432560][ T23] usb 2-1: config 0 descriptor?? [ 105.458079][ T23] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 105.467745][ T23] em28xx 2-1:0.89: Video interface 89 found: bulk [ 105.647267][ T5855] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.663683][ T8] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 105.839915][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.855421][ T5855] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 105.876200][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.901919][ T5855] usb 4-1: config 0 descriptor?? [ 105.915724][ T5855] pwc: Askey VC010 type 2 USB webcam detected. [ 106.075903][ T23] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 106.296617][ T8] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 106.306898][ T8] em28xx 3-1:0.89: board has no eeprom [ 106.331299][ T5855] pwc: recv_control_msg error -32 req 02 val 2b00 [ 106.358388][ T5855] pwc: recv_control_msg error -32 req 02 val 2700 [ 106.368892][ T5855] pwc: recv_control_msg error -32 req 02 val 2c00 [ 106.379895][ T5855] pwc: recv_control_msg error -32 req 04 val 1000 [ 106.399134][ T5855] pwc: recv_control_msg error -32 req 04 val 1300 [ 106.411460][ T5855] pwc: recv_control_msg error -32 req 04 val 1400 [ 106.420244][ T5855] pwc: recv_control_msg error -32 req 02 val 2000 [ 106.427870][ T5855] pwc: recv_control_msg error -32 req 02 val 2100 [ 106.638177][ T5855] pwc: recv_control_msg error -71 req 02 val 2500 [ 106.650187][ T5855] pwc: recv_control_msg error -71 req 02 val 2400 [ 106.657202][ T5855] pwc: recv_control_msg error -71 req 02 val 2600 [ 106.664227][ T5855] pwc: recv_control_msg error -71 req 02 val 2900 [ 106.672199][ T5855] pwc: recv_control_msg error -71 req 02 val 2800 [ 106.679699][ T5855] pwc: recv_control_msg error -71 req 04 val 1100 [ 106.686633][ T5855] pwc: recv_control_msg error -71 req 04 val 1200 [ 106.696918][ T23] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 106.706996][ T5855] pwc: Registered as video103. [ 106.719844][ T5855] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 106.729516][ T23] em28xx 2-1:0.89: board has no eeprom [ 106.754774][ T5855] usb 4-1: USB disconnect, device number 6 [ 106.768098][ T8] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 106.777869][ T8] em28xx 3-1:0.89: analog set to bulk mode. [ 106.794589][ T964] em28xx 3-1:0.89: Registering V4L2 extension [ 106.834502][ T8] usb 3-1: USB disconnect, device number 5 [ 106.876719][ T8] em28xx 3-1:0.89: Disconnecting em28xx [ 106.967254][ T23] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 106.969279][ T964] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 106.979510][ T23] em28xx 2-1:0.89: analog set to bulk mode. [ 106.999520][ T964] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 107.002807][ T23] usb 2-1: USB disconnect, device number 7 [ 107.025418][ T964] em28xx 3-1:0.89: No AC97 audio processor [ 107.046571][ T23] em28xx 2-1:0.89: Disconnecting em28xx [ 107.063224][ T964] usb 3-1: Decoder not found [ 107.082193][ T964] em28xx 3-1:0.89: failed to create media graph [ 107.091018][ T964] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 107.099611][ T964] em28xx 3-1:0.89: Registering snapshot button... [ 107.110199][ T964] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input20 [ 107.121794][ T964] em28xx 3-1:0.89: Remote control support is not available for this card. [ 107.130886][ T8] em28xx 3-1:0.89: Closing input extension [ 107.136785][ T8] em28xx 3-1:0.89: Deregistering snapshot button [ 107.148201][ T785] em28xx 2-1:0.89: Registering V4L2 extension [ 107.158007][ T8] em28xx 3-1:0.89: Freeing device [ 107.229497][ T785] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 107.236734][ T785] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 107.245490][ T785] em28xx 2-1:0.89: No AC97 audio processor [ 107.256556][ T785] usb 2-1: Decoder not found [ 107.264116][ T785] em28xx 2-1:0.89: failed to create media graph [ 107.271897][ T785] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 107.289064][ T785] em28xx 2-1:0.89: Registering snapshot button... [ 107.303214][ T785] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input21 [ 107.315732][ T785] em28xx 2-1:0.89: Remote control support is not available for this card. [ 107.330518][ T23] em28xx 2-1:0.89: Closing input extension [ 107.336652][ T23] em28xx 2-1:0.89: Deregistering snapshot button [ 107.352191][ T23] em28xx 2-1:0.89: Freeing device [ 107.594155][ T23] usb 1-1: USB disconnect, device number 7 [ 107.722094][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.132'. [ 108.125259][ T6358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'. [ 108.467340][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.764224][ T23] usb 3-1: config 0 has no interfaces? [ 108.782923][ T23] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 108.804297][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.857351][ T23] usb 3-1: Product: syz [ 108.861738][ T23] usb 3-1: Manufacturer: syz [ 108.866340][ T23] usb 3-1: SerialNumber: syz [ 108.910507][ T23] usb 3-1: config 0 descriptor?? [ 109.231017][ T964] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 109.472529][ T6359] pimreg: entered allmulticast mode [ 109.661123][ T6365] pimreg: left allmulticast mode [ 109.696926][ T964] usb 1-1: config 0 has no interfaces? [ 109.710498][ T964] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 109.761286][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.796258][ T964] usb 1-1: Product: syz [ 109.801754][ T964] usb 1-1: Manufacturer: syz [ 109.812001][ T964] usb 1-1: SerialNumber: syz [ 109.830370][ T964] usb 1-1: config 0 descriptor?? [ 110.147412][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.367494][ T785] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.403572][ T23] usb 4-1: config 0 has no interfaces? [ 110.414965][ T6364] pimreg: entered allmulticast mode [ 110.469294][ T23] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 110.481733][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.498891][ T23] usb 4-1: Product: syz [ 110.503322][ T23] usb 4-1: Manufacturer: syz [ 110.508064][ T23] usb 4-1: SerialNumber: syz [ 110.524478][ T23] usb 4-1: config 0 descriptor?? [ 110.597294][ T785] usb 2-1: Using ep0 maxpacket: 32 [ 110.615128][ T785] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 110.657159][ T785] usb 2-1: config 0 has no interface number 0 [ 110.678637][ T785] usb 2-1: config 0 interface 89 has no altsetting 0 [ 110.743913][ T785] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 110.763383][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.783889][ T785] usb 2-1: Product: syz [ 110.804824][ T785] usb 2-1: Manufacturer: syz [ 110.810097][ T785] usb 2-1: SerialNumber: syz [ 110.828135][ T785] usb 2-1: config 0 descriptor?? [ 110.854460][ T785] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 110.878510][ T785] em28xx 2-1:0.89: Video interface 89 found: bulk [ 110.899664][ T6369] pimreg: entered allmulticast mode [ 110.934233][ T6369] pimreg: left allmulticast mode [ 111.457005][ T23] usb 3-1: USB disconnect, device number 6 [ 111.466234][ T785] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 112.007281][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.054630][ T8] usb 1-1: USB disconnect, device number 8 [ 112.287256][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 112.304084][ T785] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 112.326501][ T23] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 112.342833][ T785] em28xx 2-1:0.89: board has no eeprom [ 112.355143][ T23] usb 3-1: config 0 has no interface number 0 [ 112.366760][ T23] usb 3-1: config 0 interface 89 has no altsetting 0 [ 112.380406][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 112.390850][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.399467][ T23] usb 3-1: Product: syz [ 112.408303][ T23] usb 3-1: Manufacturer: syz [ 112.416117][ T23] usb 3-1: SerialNumber: syz [ 112.430080][ T23] usb 3-1: config 0 descriptor?? [ 112.437188][ T785] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 112.450223][ T785] em28xx 2-1:0.89: analog set to bulk mode. [ 112.457897][ T23] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 112.472935][ T27] em28xx 2-1:0.89: Registering V4L2 extension [ 112.492277][ T785] usb 2-1: USB disconnect, device number 8 [ 112.498478][ T23] em28xx 3-1:0.89: Video interface 89 found: bulk [ 112.531752][ T785] em28xx 2-1:0.89: Disconnecting em28xx [ 112.561426][ T27] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 112.571877][ T27] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 112.592242][ T27] em28xx 2-1:0.89: No AC97 audio processor [ 112.605952][ T27] usb 2-1: Decoder not found [ 112.607346][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.611270][ T27] em28xx 2-1:0.89: failed to create media graph [ 112.667377][ T27] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 112.685757][ T27] em28xx 2-1:0.89: Registering snapshot button... [ 112.705787][ T27] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input22 [ 112.743829][ T27] em28xx 2-1:0.89: Remote control support is not available for this card. [ 112.779781][ T785] em28xx 2-1:0.89: Closing input extension [ 112.800141][ T785] em28xx 2-1:0.89: Deregistering snapshot button [ 112.817438][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 112.826675][ T8] usb 1-1: config 0 has no interfaces? [ 112.839450][ T8] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 112.867057][ T785] em28xx 2-1:0.89: Freeing device [ 112.897234][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.905301][ T8] usb 1-1: Product: syz [ 112.979524][ T8] usb 1-1: Manufacturer: syz [ 112.984199][ T8] usb 1-1: SerialNumber: syz [ 112.994171][ T8] usb 1-1: config 0 descriptor?? [ 113.077603][ T23] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 113.114732][ T27] usb 4-1: USB disconnect, device number 7 [ 113.224334][ T8] usb 1-1: USB disconnect, device number 9 [ 113.617405][ T785] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.718762][ T23] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 113.728641][ T23] em28xx 3-1:0.89: board has no eeprom [ 113.807215][ T785] usb 2-1: Using ep0 maxpacket: 32 [ 113.824178][ T785] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 113.832450][ T785] usb 2-1: config 0 has no interface number 0 [ 113.839026][ T785] usb 2-1: config 0 interface 89 has no altsetting 0 [ 113.852532][ T785] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 113.862151][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.871195][ T785] usb 2-1: Product: syz [ 113.879513][ T785] usb 2-1: Manufacturer: syz [ 113.895935][ T785] usb 2-1: SerialNumber: syz [ 113.922625][ T785] usb 2-1: config 0 descriptor?? [ 113.949731][ T785] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 113.980327][ T785] em28xx 2-1:0.89: Video interface 89 found: bulk [ 114.187243][ T23] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 114.194659][ T23] em28xx 3-1:0.89: analog set to bulk mode. [ 114.201837][ T5878] em28xx 3-1:0.89: Registering V4L2 extension [ 114.220762][ T23] usb 3-1: USB disconnect, device number 7 [ 114.238585][ T23] em28xx 3-1:0.89: Disconnecting em28xx [ 114.428693][ T5878] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 114.440038][ T5878] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 114.456986][ T5878] em28xx 3-1:0.89: No AC97 audio processor [ 114.468482][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 114.548207][ T5878] usb 3-1: Decoder not found [ 114.555563][ T5878] em28xx 3-1:0.89: failed to create media graph [ 114.574121][ T785] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 114.587366][ T5878] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 114.596902][ T5878] em28xx 3-1:0.89: Registering snapshot button... [ 114.605811][ T5878] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input23 [ 114.620733][ T5878] em28xx 3-1:0.89: Remote control support is not available for this card. [ 114.631114][ T23] em28xx 3-1:0.89: Closing input extension [ 114.651151][ T23] em28xx 3-1:0.89: Deregistering snapshot button [ 114.711009][ T23] em28xx 3-1:0.89: Freeing device [ 114.891950][ T8] usb 1-1: config 0 has no interfaces? [ 114.964652][ T8] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 115.067885][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.233037][ T8] usb 1-1: Product: syz [ 115.291979][ T8] usb 1-1: Manufacturer: syz [ 115.296758][ T8] usb 1-1: SerialNumber: syz [ 115.337429][ T6418] fuse: Bad value for 'fd' [ 115.391746][ T8] usb 1-1: config 0 descriptor?? [ 115.710886][ T6408] pimreg: left allmulticast mode [ 115.827421][ T5878] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 115.947359][ T5855] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 116.007225][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 116.025436][ T785] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 116.049450][ T5878] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 116.078348][ T785] em28xx 2-1:0.89: board has no eeprom [ 116.093038][ T5878] usb 4-1: config 0 has no interface number 0 [ 116.107431][ T5878] usb 4-1: config 0 interface 89 has no altsetting 0 [ 116.117931][ T5878] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 116.127866][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.136335][ T5878] usb 4-1: Product: syz [ 116.140800][ T5878] usb 4-1: Manufacturer: syz [ 116.145587][ T5878] usb 4-1: SerialNumber: syz [ 116.153697][ T5878] usb 4-1: config 0 descriptor?? [ 116.165460][ T5878] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 116.175213][ T785] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 116.182917][ T785] em28xx 2-1:0.89: analog set to bulk mode. [ 116.192312][ T5855] usb 3-1: config 0 has no interfaces? [ 116.198448][ T5878] em28xx 4-1:0.89: Video interface 89 found: bulk [ 116.206303][ T27] em28xx 2-1:0.89: Registering V4L2 extension [ 116.216980][ T5855] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 116.231922][ T785] usb 2-1: USB disconnect, device number 9 [ 116.239642][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.251551][ T785] em28xx 2-1:0.89: Disconnecting em28xx [ 116.257779][ T5855] usb 3-1: Product: syz [ 116.262307][ T5855] usb 3-1: Manufacturer: syz [ 116.276804][ T5855] usb 3-1: SerialNumber: syz [ 116.315491][ T5855] usb 3-1: config 0 descriptor?? [ 116.414098][ T27] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 116.440149][ T27] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 116.474988][ T27] em28xx 2-1:0.89: No AC97 audio processor [ 116.497015][ T27] usb 2-1: Decoder not found [ 116.507190][ T27] em28xx 2-1:0.89: failed to create media graph [ 116.525009][ T27] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 116.553004][ T27] em28xx 2-1:0.89: Registering snapshot button... [ 116.574586][ T27] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input24 [ 116.600337][ T27] em28xx 2-1:0.89: Remote control support is not available for this card. [ 116.617277][ T785] em28xx 2-1:0.89: Closing input extension [ 116.624118][ T785] em28xx 2-1:0.89: Deregistering snapshot button [ 116.685623][ T6424] pimreg: entered allmulticast mode [ 116.706825][ T785] em28xx 2-1:0.89: Freeing device [ 116.775906][ T6424] pimreg: left allmulticast mode [ 116.820552][ T5878] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 116.896146][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'. [ 117.461219][ T5878] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 117.465672][ T5828] usb 1-1: USB disconnect, device number 10 [ 117.525126][ T5878] em28xx 4-1:0.89: board has no eeprom [ 117.627289][ T5878] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 117.650802][ T5878] em28xx 4-1:0.89: analog set to bulk mode. [ 117.667067][ T785] em28xx 4-1:0.89: Registering V4L2 extension [ 117.686642][ T5878] usb 4-1: USB disconnect, device number 8 [ 117.729637][ T5878] em28xx 4-1:0.89: Disconnecting em28xx [ 117.807739][ T785] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 117.814783][ T785] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 117.855858][ T785] em28xx 4-1:0.89: No AC97 audio processor [ 117.867993][ T785] usb 4-1: Decoder not found [ 117.872612][ T785] em28xx 4-1:0.89: failed to create media graph [ 117.895877][ T5828] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 117.895892][ T785] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 117.914449][ T785] em28xx 4-1:0.89: Registering snapshot button... [ 117.933184][ T785] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input25 [ 117.952889][ T785] em28xx 4-1:0.89: Remote control support is not available for this card. [ 118.004290][ T5878] em28xx 4-1:0.89: Closing input extension [ 118.027201][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 118.088986][ T5878] em28xx 4-1:0.89: Deregistering snapshot button [ 118.112373][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.129322][ T5828] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 118.142678][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.162798][ T5828] usb 1-1: config 0 descriptor?? [ 118.172776][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 118.192604][ T5878] em28xx 4-1:0.89: Freeing device [ 118.417291][ T27] usb 2-1: config 0 has no interfaces? [ 118.430041][ T27] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 118.462712][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.551316][ T27] usb 2-1: Product: syz [ 118.601079][ T27] usb 2-1: Manufacturer: syz [ 118.617169][ T27] usb 2-1: SerialNumber: syz [ 118.631210][ T5828] pwc: recv_control_msg error -32 req 02 val 2b00 [ 118.632577][ T27] usb 2-1: config 0 descriptor?? [ 118.675099][ T5828] pwc: recv_control_msg error -32 req 02 val 2700 [ 118.760199][ T5828] pwc: recv_control_msg error -32 req 02 val 2c00 [ 118.806620][ T5878] usb 3-1: USB disconnect, device number 8 [ 118.857987][ T5828] pwc: recv_control_msg error -32 req 04 val 1000 [ 118.870900][ T5828] pwc: recv_control_msg error -32 req 04 val 1300 [ 118.927280][ T5828] pwc: recv_control_msg error -32 req 04 val 1400 [ 118.978942][ T5828] pwc: recv_control_msg error -32 req 02 val 2000 [ 118.989120][ T5828] pwc: recv_control_msg error -32 req 02 val 2100 [ 118.997480][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.019921][ T6443] pimreg: entered allmulticast mode [ 119.050451][ T6454] fuse: Bad value for 'fd' [ 119.198277][ T5828] pwc: recv_control_msg error -71 req 02 val 2500 [ 119.206365][ T5828] pwc: recv_control_msg error -71 req 02 val 2400 [ 119.214426][ T5828] pwc: recv_control_msg error -71 req 02 val 2600 [ 119.222023][ T5828] pwc: recv_control_msg error -71 req 02 val 2900 [ 119.232991][ T6443] pimreg: left allmulticast mode [ 119.240815][ T5828] pwc: recv_control_msg error -71 req 02 val 2800 [ 119.261622][ T5828] pwc: recv_control_msg error -71 req 04 val 1100 [ 119.275072][ T5828] pwc: recv_control_msg error -71 req 04 val 1200 [ 119.309464][ T5828] pwc: Registered as video103. [ 119.361279][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 119.434997][ T5828] usb 1-1: USB disconnect, device number 11 [ 119.465623][ T8] usb 4-1: config 0 has no interfaces? [ 119.530538][ T8] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 119.584021][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.601964][ T8] usb 4-1: Product: syz [ 119.613111][ T8] usb 4-1: Manufacturer: syz [ 119.621465][ T8] usb 4-1: SerialNumber: syz [ 119.691326][ T8] usb 4-1: config 0 descriptor?? [ 119.787205][ T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 119.967188][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 119.981894][ T27] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 120.019044][ T27] usb 3-1: config 0 has no interface number 0 [ 120.037607][ T27] usb 3-1: config 0 interface 89 has no altsetting 0 [ 120.046658][ T6452] pimreg: entered allmulticast mode [ 120.055699][ T27] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 120.068635][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.083785][ T27] usb 3-1: Product: syz [ 120.093813][ T27] usb 3-1: Manufacturer: syz [ 120.119397][ T6452] pimreg: left allmulticast mode [ 120.167192][ T27] usb 3-1: SerialNumber: syz [ 120.183254][ T27] usb 3-1: config 0 descriptor?? [ 120.193873][ T27] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 120.204013][ T27] em28xx 3-1:0.89: Video interface 89 found: bulk [ 120.377306][ T785] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 120.580183][ T785] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 120.593484][ T785] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 120.623170][ T785] usb 1-1: config 220 has no interface number 2 [ 120.636188][ T785] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 120.665037][ T785] usb 1-1: config 220 interface 0 has no altsetting 0 [ 120.702864][ T785] usb 1-1: config 220 interface 76 has no altsetting 0 [ 120.723030][ T785] usb 1-1: config 220 interface 1 has no altsetting 0 [ 120.774349][ T785] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 120.785816][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.800238][ T785] usb 1-1: Product: syz [ 120.804694][ T785] usb 1-1: Manufacturer: syz [ 120.812231][ T27] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 120.820902][ T785] usb 1-1: SerialNumber: syz [ 121.053398][ T785] usb 1-1: selecting invalid altsetting 0 [ 121.101563][ T8] usb 2-1: USB disconnect, device number 10 [ 121.112927][ T785] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 121.173484][ T785] usb 1-1: No valid video chain found. [ 121.221033][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 121.252574][ T785] usb 1-1: selecting invalid altsetting 0 [ 121.258850][ T785] usbtest: probe of 1-1:220.1 failed with error -22 [ 121.270167][ T785] usb 1-1: USB disconnect, device number 12 [ 121.878742][ T27] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 121.887686][ T27] em28xx 3-1:0.89: board has no eeprom [ 121.947312][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 121.968883][ T5778] usb 4-1: USB disconnect, device number 9 [ 121.977216][ T27] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 122.017931][ T27] em28xx 3-1:0.89: analog set to bulk mode. [ 122.031320][ T785] em28xx 3-1:0.89: Registering V4L2 extension [ 122.072617][ T27] usb 3-1: USB disconnect, device number 9 [ 122.097713][ T27] em28xx 3-1:0.89: Disconnecting em28xx [ 122.146150][ T785] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 122.154059][ T785] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 122.180069][ T785] em28xx 3-1:0.89: No AC97 audio processor [ 122.190476][ T8] usb 2-1: config 0 has no interfaces? [ 122.215135][ T8] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 122.215281][ T785] usb 3-1: Decoder not found [ 122.225682][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.246203][ T8] usb 2-1: Product: syz [ 122.251028][ T8] usb 2-1: Manufacturer: syz [ 122.255991][ T8] usb 2-1: SerialNumber: syz [ 122.265704][ T785] em28xx 3-1:0.89: failed to create media graph [ 122.273682][ T8] usb 2-1: config 0 descriptor?? [ 122.297608][ T785] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 122.315557][ T785] em28xx 3-1:0.89: Registering snapshot button... [ 122.331489][ T785] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input27 [ 122.344452][ T785] em28xx 3-1:0.89: Remote control support is not available for this card. [ 122.354156][ T27] em28xx 3-1:0.89: Closing input extension [ 122.360426][ T27] em28xx 3-1:0.89: Deregistering snapshot button [ 122.377266][ T27] em28xx 3-1:0.89: Freeing device [ 122.487659][ T5778] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 122.611878][ T6478] pimreg: entered allmulticast mode [ 122.677237][ T5778] usb 4-1: Using ep0 maxpacket: 32 [ 122.690016][ T5778] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 122.707258][ T5778] usb 4-1: config 0 has no interface number 0 [ 122.722787][ T5778] usb 4-1: config 0 interface 89 has no altsetting 0 [ 122.764678][ T5778] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 122.775988][ T6478] pimreg: left allmulticast mode [ 122.791594][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.824411][ T5778] usb 4-1: Product: syz [ 122.836058][ T5778] usb 4-1: Manufacturer: syz [ 122.850142][ T5778] usb 4-1: SerialNumber: syz [ 122.872246][ T5778] usb 4-1: config 0 descriptor?? [ 122.885789][ T5778] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 122.903216][ T5778] em28xx 4-1:0.89: Video interface 89 found: bulk [ 122.971585][ T6496] input: syz1 as /devices/virtual/input/input28 [ 123.067272][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 123.247403][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 123.261738][ T8] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 123.271878][ T8] usb 3-1: config 0 has no interface number 0 [ 123.288479][ T8] usb 3-1: config 0 interface 89 has no altsetting 0 [ 123.304172][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 123.318311][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.332854][ T8] usb 3-1: Product: syz [ 123.337436][ T8] usb 3-1: Manufacturer: syz [ 123.344352][ T8] usb 3-1: SerialNumber: syz [ 123.357356][ T8] usb 3-1: config 0 descriptor?? [ 123.378721][ T8] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 123.399492][ T8] em28xx 3-1:0.89: Video interface 89 found: bulk [ 123.518102][ T5778] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 123.852773][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 123.992333][ T8] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 124.267292][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 124.447627][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 124.455330][ T27] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 124.464555][ T27] usb 1-1: config 0 has no interface number 0 [ 124.471329][ T27] usb 1-1: config 0 interface 89 has no altsetting 0 [ 124.484670][ T27] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 124.494056][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.502227][ T27] usb 1-1: Product: syz [ 124.506436][ T27] usb 1-1: Manufacturer: syz [ 124.511164][ T27] usb 1-1: SerialNumber: syz [ 124.519195][ T27] usb 1-1: config 0 descriptor?? [ 124.529843][ T27] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 124.540353][ T27] em28xx 1-1:0.89: Video interface 89 found: bulk [ 124.618965][ T8] em28xx 3-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 124.634294][ T8] em28xx 3-1:0.89: board has no eeprom [ 124.703943][ T785] usb 2-1: USB disconnect, device number 11 [ 124.717500][ T8] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 124.725950][ T8] em28xx 3-1:0.89: analog set to bulk mode. [ 124.739205][ T964] em28xx 3-1:0.89: Registering V4L2 extension [ 124.764402][ T8] usb 3-1: USB disconnect, device number 10 [ 124.787581][ T5778] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 124.812899][ T5778] em28xx 4-1:0.89: board has no eeprom [ 124.865378][ T964] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 124.875697][ T8] em28xx 3-1:0.89: Disconnecting em28xx [ 124.890752][ T964] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 124.902733][ T964] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 124.911574][ T964] em28xx 3-1:0.89: No AC97 audio processor [ 124.917846][ T5778] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 124.930346][ T5778] em28xx 4-1:0.89: analog set to bulk mode. [ 124.936761][ T964] usb 3-1: Decoder not found [ 124.941653][ T964] em28xx 3-1:0.89: failed to create media graph [ 124.952832][ T5778] usb 4-1: USB disconnect, device number 10 [ 124.959101][ T964] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 124.973813][ T964] em28xx 3-1:0.89: Registering snapshot button... [ 124.982696][ T5778] em28xx 4-1:0.89: Disconnecting em28xx [ 124.989821][ T964] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input29 [ 125.007420][ T964] em28xx 3-1:0.89: Remote control support is not available for this card. [ 125.016121][ T8] em28xx 3-1:0.89: Closing input extension [ 125.023461][ T8] em28xx 3-1:0.89: Deregistering snapshot button [ 125.034769][ T5875] em28xx 4-1:0.89: Registering V4L2 extension [ 125.051119][ T8] em28xx 3-1:0.89: Freeing device [ 125.102339][ T5875] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 125.111588][ T5875] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 125.126384][ T5875] em28xx 4-1:0.89: No AC97 audio processor [ 125.136127][ T5875] usb 4-1: Decoder not found [ 125.142104][ T5875] em28xx 4-1:0.89: failed to create media graph [ 125.149361][ T5875] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 125.168794][ T5875] em28xx 4-1:0.89: Registering snapshot button... [ 125.193525][ T5875] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input30 [ 125.210558][ T27] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 125.221777][ T5875] em28xx 4-1:0.89: Remote control support is not available for this card. [ 125.236497][ T5778] em28xx 4-1:0.89: Closing input extension [ 125.242722][ T5778] em28xx 4-1:0.89: Deregistering snapshot button [ 125.280495][ T5778] em28xx 4-1:0.89: Freeing device [ 125.287210][ T785] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 125.499858][ T785] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 125.510211][ T785] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 125.524167][ T785] usb 2-1: config 220 has no interface number 2 [ 125.538241][ T785] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 125.571993][ T785] usb 2-1: config 220 interface 0 has no altsetting 0 [ 125.594343][ T785] usb 2-1: config 220 interface 76 has no altsetting 0 [ 125.616973][ T785] usb 2-1: config 220 interface 1 has no altsetting 0 [ 125.648987][ T785] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 125.664147][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.675873][ T785] usb 2-1: Product: syz [ 125.692192][ T785] usb 2-1: Manufacturer: syz [ 125.697262][ T785] usb 2-1: SerialNumber: syz [ 125.839244][ T27] em28xx 1-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 125.851001][ T27] em28xx 1-1:0.89: board has no eeprom [ 125.857280][ T5778] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 125.887394][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.954987][ T785] usb 2-1: selecting invalid altsetting 0 [ 125.970497][ T785] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 125.976998][ T785] usb 2-1: No valid video chain found. [ 126.009078][ T785] usb 2-1: selecting invalid altsetting 0 [ 126.014944][ T785] usbtest: probe of 2-1:220.1 failed with error -22 [ 126.039501][ T785] usb 2-1: USB disconnect, device number 12 [ 126.066747][ T5778] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 126.082187][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.102304][ T23] usb 3-1: config 0 has no interfaces? [ 126.103967][ T5778] usb 4-1: Product: syz [ 126.119807][ T5778] usb 4-1: Manufacturer: syz [ 126.124650][ T5778] usb 4-1: SerialNumber: syz [ 126.133483][ T5778] usb 4-1: config 0 descriptor?? [ 126.153825][ T5778] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 126.176366][ T23] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 126.202202][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.211208][ T23] usb 3-1: Product: syz [ 126.215546][ T23] usb 3-1: Manufacturer: syz [ 126.220870][ T23] usb 3-1: SerialNumber: syz [ 126.229664][ T23] usb 3-1: config 0 descriptor?? [ 126.317212][ T27] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 126.324760][ T27] em28xx 1-1:0.89: analog set to bulk mode. [ 126.331089][ T23] em28xx 1-1:0.89: Registering V4L2 extension [ 126.407836][ T27] usb 1-1: USB disconnect, device number 13 [ 126.455990][ T23] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 126.471765][ T27] em28xx 1-1:0.89: Disconnecting em28xx [ 126.480880][ T23] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 126.490186][ T23] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 126.497761][ T23] em28xx 1-1:0.89: No AC97 audio processor [ 126.524331][ T23] usb 1-1: Decoder not found [ 126.536632][ T23] em28xx 1-1:0.89: failed to create media graph [ 126.567055][ T23] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 126.607213][ T5778] gspca_stk1135: reg_w 0x0 err -71 [ 126.618534][ T23] em28xx 1-1:0.89: Registering snapshot button... [ 126.636132][ T5778] gspca_stk1135: serial bus timeout: status=0x00 [ 126.638298][ T23] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input31 [ 126.663728][ T5778] gspca_stk1135: Sensor write failed [ 126.686900][ T5778] gspca_stk1135: serial bus timeout: status=0x00 [ 126.717740][ T5778] gspca_stk1135: Sensor write failed [ 126.724416][ T23] em28xx 1-1:0.89: Remote control support is not available for this card. [ 126.757622][ T5778] gspca_stk1135: serial bus timeout: status=0x00 [ 126.761610][ T27] em28xx 1-1:0.89: Closing input extension [ 126.770421][ T5778] gspca_stk1135: Sensor read failed [ 126.770480][ T27] em28xx 1-1:0.89: Deregistering snapshot button [ 126.798775][ T5778] gspca_stk1135: serial bus timeout: status=0x00 [ 126.820547][ T27] em28xx 1-1:0.89: Freeing device [ 126.838987][ T5778] gspca_stk1135: Sensor read failed [ 126.844258][ T5778] gspca_stk1135: Detected sensor type unknown (0x0) [ 126.868898][ T5778] gspca_stk1135: serial bus timeout: status=0x00 [ 126.879863][ T5778] gspca_stk1135: Sensor read failed [ 126.894961][ T6523] pimreg: entered allmulticast mode [ 126.900543][ T5778] gspca_stk1135: serial bus timeout: status=0x00 [ 126.915890][ T5778] gspca_stk1135: Sensor read failed [ 126.922999][ T6531] pimreg: left allmulticast mode [ 126.931184][ T5778] gspca_stk1135: serial bus timeout: status=0x00 [ 126.942222][ T5778] gspca_stk1135: Sensor write failed [ 126.948234][ T5778] gspca_stk1135: serial bus timeout: status=0x00 [ 126.954660][ T5778] gspca_stk1135: Sensor write failed [ 126.972177][ T5778] stk1135: probe of 4-1:0.0 failed with error -71 [ 127.007513][ T5778] usb 4-1: USB disconnect, device number 11 [ 127.027413][ T5875] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 127.230560][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.272056][ T6538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.186'. [ 127.281228][ T5875] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.300919][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.328079][ T6538] Zero length message leads to an empty skb [ 127.335884][ T5875] usb 2-1: config 0 descriptor?? [ 127.358361][ T5875] pwc: Askey VC010 type 2 USB webcam detected. [ 127.617333][ T5778] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 127.775011][ T5875] pwc: recv_control_msg error -32 req 02 val 2b00 [ 127.791350][ T5875] pwc: recv_control_msg error -32 req 02 val 2700 [ 127.800288][ T5875] pwc: recv_control_msg error -32 req 02 val 2c00 [ 127.807616][ T5778] usb 4-1: Using ep0 maxpacket: 32 [ 127.816588][ T5875] pwc: recv_control_msg error -32 req 04 val 1000 [ 127.825929][ T5778] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 127.841257][ T5778] usb 4-1: config 0 has no interface number 0 [ 127.853113][ T5875] pwc: recv_control_msg error -32 req 04 val 1300 [ 127.860421][ T5778] usb 4-1: config 0 interface 89 has no altsetting 0 [ 127.868284][ T5875] pwc: recv_control_msg error -32 req 04 val 1400 [ 127.885229][ T5778] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 127.896013][ T5875] pwc: recv_control_msg error -32 req 02 val 2000 [ 127.908349][ T5875] pwc: recv_control_msg error -32 req 02 val 2100 [ 127.915042][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.970374][ T5778] usb 4-1: Product: syz [ 127.979103][ T5778] usb 4-1: Manufacturer: syz [ 127.990575][ T5778] usb 4-1: SerialNumber: syz [ 128.008539][ T5778] usb 4-1: config 0 descriptor?? [ 128.024487][ T5778] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 128.034453][ T5778] em28xx 4-1:0.89: Video interface 89 found: bulk [ 128.153201][ T5875] pwc: recv_control_msg error -71 req 02 val 2500 [ 128.162688][ T5875] pwc: recv_control_msg error -71 req 02 val 2400 [ 128.171570][ T5875] pwc: recv_control_msg error -71 req 02 val 2600 [ 128.191718][ T5875] pwc: recv_control_msg error -71 req 02 val 2900 [ 128.199066][ T5875] pwc: recv_control_msg error -71 req 02 val 2800 [ 128.217904][ T5875] pwc: recv_control_msg error -71 req 04 val 1100 [ 128.233121][ T5875] pwc: recv_control_msg error -71 req 04 val 1200 [ 128.286566][ T5875] pwc: Registered as video103. [ 128.342883][ T5875] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 128.385469][ T5875] usb 2-1: USB disconnect, device number 13 [ 128.646848][ T5778] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 128.746512][ T23] usb 3-1: USB disconnect, device number 11 [ 129.237618][ T5828] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 129.267043][ T5778] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 129.285576][ T5778] em28xx 4-1:0.89: board has no eeprom [ 129.362218][ T5778] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 129.367194][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 129.369789][ T5778] em28xx 4-1:0.89: analog set to bulk mode. [ 129.391638][ T5875] em28xx 4-1:0.89: Registering V4L2 extension [ 129.410546][ T5778] usb 4-1: USB disconnect, device number 12 [ 129.426101][ T5778] em28xx 4-1:0.89: Disconnecting em28xx [ 129.440800][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 129.449482][ T5828] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 129.469084][ T5828] usb 2-1: config 0 has no interface number 0 [ 129.492619][ T5828] usb 2-1: config 0 interface 89 has no altsetting 0 [ 129.505078][ T5875] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 129.515400][ T5828] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 129.527182][ T5875] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 129.534318][ T5875] em28xx 4-1:0.89: No AC97 audio processor [ 129.555012][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.565630][ T5828] usb 2-1: Product: syz [ 129.580578][ T5828] usb 2-1: Manufacturer: syz [ 129.586174][ T5875] usb 4-1: Decoder not found [ 129.596098][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.596134][ T5828] usb 2-1: SerialNumber: syz [ 129.611823][ T5875] em28xx 4-1:0.89: failed to create media graph [ 129.614862][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 129.622463][ T5875] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 129.638475][ T5828] usb 2-1: config 0 descriptor?? [ 129.645352][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.652127][ T5875] em28xx 4-1:0.89: Registering snapshot button... [ 129.666461][ T5828] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 129.669620][ T23] usb 3-1: config 0 descriptor?? [ 129.683063][ T5875] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input33 [ 129.697274][ T5828] em28xx 2-1:0.89: Video interface 89 found: bulk [ 129.716111][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 129.716359][ T5875] em28xx 4-1:0.89: Remote control support is not available for this card. [ 129.737806][ T5778] em28xx 4-1:0.89: Closing input extension [ 129.743808][ T5778] em28xx 4-1:0.89: Deregistering snapshot button [ 129.790442][ T5778] em28xx 4-1:0.89: Freeing device [ 130.121215][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 130.137330][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 130.147957][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 130.156482][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 130.164746][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 130.172650][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 130.180364][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 130.189273][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 130.204364][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 130.213570][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 130.224595][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 130.231797][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 130.243021][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 130.257006][ T5828] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 130.264591][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 130.273026][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 130.295417][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 130.304049][ T23] pwc: Registered as video103. [ 130.328899][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 130.345683][ T23] usb 3-1: USB disconnect, device number 12 [ 130.557443][ T5875] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 130.790822][ T5875] usb 4-1: config 0 has no interfaces? [ 130.823612][ T5875] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 130.848937][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.857673][ T5875] usb 4-1: Product: syz [ 130.861931][ T5875] usb 4-1: Manufacturer: syz [ 130.872446][ T5875] usb 4-1: SerialNumber: syz [ 130.888436][ T5828] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 130.904517][ T5828] em28xx 2-1:0.89: board has no eeprom [ 130.911857][ T5875] usb 4-1: config 0 descriptor?? [ 130.998956][ T5828] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 131.018406][ T5828] em28xx 2-1:0.89: analog set to bulk mode. [ 131.024820][ T5778] em28xx 2-1:0.89: Registering V4L2 extension [ 131.041902][ T5828] usb 2-1: USB disconnect, device number 14 [ 131.053420][ T5828] em28xx 2-1:0.89: Disconnecting em28xx [ 131.075937][ T5778] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 131.086300][ T5778] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 131.093907][ T5875] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 131.107876][ T5778] em28xx 2-1:0.89: No AC97 audio processor [ 131.129690][ T5778] usb 2-1: Decoder not found [ 131.154398][ T5778] em28xx 2-1:0.89: failed to create media graph [ 131.165047][ T5778] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 131.174732][ T6561] pimreg: entered allmulticast mode [ 131.183657][ T5778] em28xx 2-1:0.89: Registering snapshot button... [ 131.191017][ T5778] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input35 [ 131.213158][ T5778] em28xx 2-1:0.89: Remote control support is not available for this card. [ 131.224826][ T5828] em28xx 2-1:0.89: Closing input extension [ 131.234261][ T5828] em28xx 2-1:0.89: Deregistering snapshot button [ 131.257321][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 131.258461][ T5828] em28xx 2-1:0.89: Freeing device [ 131.297994][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 131.308516][ T5875] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 131.332658][ T5875] usb 3-1: config 0 has no interface number 0 [ 131.341755][ T5875] usb 3-1: config 0 interface 89 has no altsetting 0 [ 131.349817][ T6561] pimreg: left allmulticast mode [ 131.370258][ T5875] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 131.388029][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.403082][ T5875] usb 3-1: Product: syz [ 131.429954][ T5875] usb 3-1: Manufacturer: syz [ 131.434631][ T5875] usb 3-1: SerialNumber: syz [ 131.469287][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.493261][ T27] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 131.498350][ T5875] usb 3-1: config 0 descriptor?? [ 131.529811][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.550206][ T5875] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 131.564696][ T27] usb 1-1: config 0 descriptor?? [ 131.574671][ T5875] em28xx 3-1:0.89: Video interface 89 found: bulk [ 131.581685][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 131.856653][ T6571] kvm: pic: non byte write [ 131.994880][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 132.008223][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 132.016461][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 132.031903][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 132.054768][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 132.071622][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 132.083815][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 132.098679][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 132.157716][ T5875] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 132.315418][ T27] pwc: recv_control_msg error -71 req 02 val 2500 [ 132.322849][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 132.346544][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 132.354414][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 132.361883][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 132.372643][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 132.380382][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 132.394625][ T27] pwc: Registered as video103. [ 132.414900][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 132.477748][ T27] usb 1-1: USB disconnect, device number 14 [ 132.745526][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'. [ 133.117306][ T5828] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 133.193029][ T5875] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 133.201750][ T5875] em28xx 3-1:0.89: board has no eeprom [ 133.272281][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.278835][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.282221][ T5875] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 133.293087][ T5875] em28xx 3-1:0.89: analog set to bulk mode. [ 133.299401][ T8] em28xx 3-1:0.89: Registering V4L2 extension [ 133.312806][ T5875] usb 3-1: USB disconnect, device number 13 [ 133.317315][ T5855] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 133.327009][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 133.346359][ T5828] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 133.361058][ T5875] em28xx 3-1:0.89: Disconnecting em28xx [ 133.373676][ T8] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 133.384817][ T5828] usb 2-1: config 0 has no interface number 0 [ 133.392624][ T8] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 133.400533][ T5828] usb 2-1: config 0 interface 89 has no altsetting 0 [ 133.408695][ T8] em28xx 3-1:0.89: No AC97 audio processor [ 133.419577][ T5828] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 133.429953][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.438663][ T8] usb 3-1: Decoder not found [ 133.443292][ T8] em28xx 3-1:0.89: failed to create media graph [ 133.454982][ T8] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 133.462263][ T5828] usb 2-1: Product: syz [ 133.466499][ T5828] usb 2-1: Manufacturer: syz [ 133.472426][ T5828] usb 2-1: SerialNumber: syz [ 133.478093][ T8] em28xx 3-1:0.89: Registering snapshot button... [ 133.486664][ T5828] usb 2-1: config 0 descriptor?? [ 133.493369][ T8] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input37 [ 133.508356][ T5828] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 133.520900][ T5828] em28xx 2-1:0.89: Video interface 89 found: bulk [ 133.528282][ T8] em28xx 3-1:0.89: Remote control support is not available for this card. [ 133.537049][ T5875] em28xx 3-1:0.89: Closing input extension [ 133.543371][ T5875] em28xx 3-1:0.89: Deregistering snapshot button [ 133.544751][ T5855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.560427][ T5855] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.570467][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.584994][ T5855] usb 1-1: config 0 descriptor?? [ 133.594200][ T5875] em28xx 3-1:0.89: Freeing device [ 133.606384][ T5855] pwc: Askey VC010 type 2 USB webcam detected. [ 133.872945][ T5875] usb 4-1: USB disconnect, device number 13 [ 134.088456][ T5855] pwc: recv_control_msg error -32 req 02 val 2b00 [ 134.110876][ T5855] pwc: recv_control_msg error -32 req 02 val 2700 [ 134.122162][ T5855] pwc: recv_control_msg error -32 req 02 val 2c00 [ 134.130734][ T5828] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 134.139479][ T5855] pwc: recv_control_msg error -32 req 04 val 1000 [ 134.152354][ T5855] pwc: recv_control_msg error -32 req 04 val 1300 [ 134.173228][ T5855] pwc: recv_control_msg error -32 req 04 val 1400 [ 134.183448][ T5855] pwc: recv_control_msg error -32 req 02 val 2000 [ 134.203921][ T5855] pwc: recv_control_msg error -32 req 02 val 2100 [ 134.427949][ T5855] pwc: recv_control_msg error -71 req 02 val 2500 [ 134.478057][ T5855] pwc: recv_control_msg error -71 req 02 val 2400 [ 134.497601][ T5875] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 134.526738][ T5855] pwc: recv_control_msg error -71 req 02 val 2600 [ 134.556592][ T5855] pwc: recv_control_msg error -71 req 02 val 2900 [ 134.577416][ T5855] pwc: recv_control_msg error -71 req 02 val 2800 [ 134.601484][ T5855] pwc: recv_control_msg error -71 req 04 val 1100 [ 134.630994][ T5855] pwc: recv_control_msg error -71 req 04 val 1200 [ 134.661925][ T5855] pwc: Registered as video103. [ 134.700967][ T5855] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 134.724633][ T5875] usb 4-1: config 0 has no interfaces? [ 134.761803][ T5828] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 134.797523][ T5875] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 134.813900][ T5855] usb 1-1: USB disconnect, device number 15 [ 134.815237][ T5828] em28xx 2-1:0.89: board has no eeprom [ 134.835230][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.854144][ T5875] usb 4-1: Product: syz [ 134.864329][ T5875] usb 4-1: Manufacturer: syz [ 134.874486][ T5875] usb 4-1: SerialNumber: syz [ 134.890756][ T5875] usb 4-1: config 0 descriptor?? [ 135.265975][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 135.278100][ T5828] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 135.300801][ T5828] em28xx 2-1:0.89: analog set to bulk mode. [ 135.315019][ T5875] em28xx 2-1:0.89: Registering V4L2 extension [ 135.427331][ T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 135.459556][ T5828] usb 2-1: USB disconnect, device number 15 [ 135.470083][ T5875] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 135.496240][ T5828] em28xx 2-1:0.89: Disconnecting em28xx [ 135.516395][ T5875] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 135.526377][ T5875] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 135.540039][ T5875] em28xx 2-1:0.89: No AC97 audio processor [ 135.550765][ T5875] usb 2-1: Decoder not found [ 135.574536][ T5875] em28xx 2-1:0.89: failed to create media graph [ 135.615296][ T5875] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 135.628105][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 135.637006][ T27] usb 3-1: config 0 has no interfaces? [ 135.649503][ T27] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 135.668494][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.683634][ T5875] em28xx 2-1:0.89: Registering snapshot button... [ 135.688465][ T6605] ================================================================== [ 135.698223][ T6605] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430 [ 135.705803][ T6605] Read of size 8 at addr ffff88807ebd8738 by task v4l_id/6605 [ 135.713261][ T6605] [ 135.715687][ T6605] CPU: 1 PID: 6605 Comm: v4l_id Not tainted syzkaller #0 [ 135.722807][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.732859][ T6605] Call Trace: [ 135.736136][ T6605] [ 135.739083][ T6605] dump_stack_lvl+0x16c/0x230 [ 135.743786][ T6605] ? __lock_acquire+0x7c80/0x7c80 [ 135.748808][ T6605] ? show_regs_print_info+0x20/0x20 [ 135.753999][ T6605] ? load_image+0x3b0/0x3b0 [ 135.758496][ T6605] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 135.763864][ T6605] ? __virt_addr_valid+0x18c/0x540 [ 135.768966][ T6605] ? __virt_addr_valid+0x469/0x540 [ 135.774068][ T6605] print_report+0xac/0x220 [ 135.778480][ T6605] ? v4l2_fh_open+0xca/0x430 [ 135.783065][ T6605] kasan_report+0x117/0x150 [ 135.787575][ T6605] ? v4l2_fh_open+0xca/0x430 [ 135.792297][ T6605] v4l2_fh_open+0xca/0x430 [ 135.796748][ T6605] em28xx_v4l2_open+0x157/0x980 [ 135.801652][ T6605] v4l2_open+0x212/0x360 [ 135.805931][ T6605] chrdev_open+0x59e/0x670 [ 135.808404][ T5875] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input39 [ 135.810358][ T6605] ? cd_forget+0x160/0x160 [ 135.825286][ T6605] ? fsnotify_perm+0x3ed/0x5e0 [ 135.830062][ T6605] ? cd_forget+0x160/0x160 [ 135.834480][ T6605] do_dentry_open+0x8c6/0x1500 [ 135.839260][ T6605] path_openat+0x274b/0x3190 [ 135.843897][ T6605] ? __kasan_slab_alloc+0x6c/0x80 [ 135.848936][ T6605] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.855062][ T6605] ? verify_lock_unused+0x140/0x140 [ 135.860285][ T6605] ? do_filp_open+0x3d0/0x3d0 [ 135.864972][ T6605] ? __virt_addr_valid+0x18c/0x540 [ 135.870094][ T6605] do_filp_open+0x1c5/0x3d0 [ 135.874601][ T6605] ? vfs_tmpfile+0x490/0x490 [ 135.879190][ T6605] ? _raw_spin_unlock+0x28/0x40 [ 135.884056][ T6605] ? alloc_fd+0x58f/0x630 [ 135.888383][ T6605] do_sys_openat2+0x12c/0x1c0 [ 135.893054][ T6605] ? do_sys_open+0xe0/0xe0 [ 135.897464][ T6605] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 135.903438][ T6605] ? lock_chain_count+0x20/0x20 [ 135.908287][ T6605] ? lock_chain_count+0x20/0x20 [ 135.913127][ T6605] __x64_sys_openat+0x139/0x160 [ 135.918150][ T6605] do_syscall_64+0x55/0xb0 [ 135.922665][ T6605] ? clear_bhb_loop+0x40/0x90 [ 135.927450][ T6605] ? clear_bhb_loop+0x40/0x90 [ 135.932157][ T6605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.938142][ T6605] RIP: 0033:0x7f74fb0a7407 [ 135.942555][ T6605] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 135.962241][ T6605] RSP: 002b:00007ffc38d52800 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 135.970649][ T6605] RAX: ffffffffffffffda RBX: 00007f74fb769880 RCX: 00007f74fb0a7407 [ 135.978642][ T6605] RDX: 0000000000000000 RSI: 00007ffc38d52f1c RDI: ffffffffffffff9c [ 135.986693][ T6605] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 135.994685][ T6605] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 136.002662][ T6605] R13: 00007ffc38d52a50 R14: 00007f74fb8c8000 R15: 000055de00ebe4d8 [ 136.010724][ T6605] [ 136.013756][ T6605] [ 136.016068][ T6605] Allocated by task 5875: [ 136.020385][ T6605] kasan_set_track+0x4e/0x70 [ 136.024981][ T6605] __kasan_kmalloc+0x8f/0xa0 [ 136.029606][ T6605] em28xx_v4l2_init+0x10b/0x2e70 [ 136.034581][ T6605] em28xx_init_extension+0x11c/0x1b0 [ 136.039881][ T6605] process_scheduled_works+0xa45/0x15b0 [ 136.045421][ T6605] worker_thread+0xa55/0xfc0 [ 136.050007][ T6605] kthread+0x2fa/0x390 [ 136.054066][ T6605] ret_from_fork+0x48/0x80 [ 136.058476][ T6605] ret_from_fork_asm+0x11/0x20 [ 136.063321][ T6605] [ 136.065637][ T6605] Freed by task 5875: [ 136.069633][ T6605] kasan_set_track+0x4e/0x70 [ 136.074251][ T6605] kasan_save_free_info+0x2e/0x50 [ 136.079268][ T6605] ____kasan_slab_free+0x126/0x1e0 [ 136.084370][ T6605] slab_free_freelist_hook+0x130/0x1b0 [ 136.089825][ T6605] __kmem_cache_free+0xba/0x1f0 [ 136.094671][ T6605] em28xx_v4l2_init+0x1670/0x2e70 [ 136.099695][ T6605] em28xx_init_extension+0x11c/0x1b0 [ 136.104976][ T6605] process_scheduled_works+0xa45/0x15b0 [ 136.110531][ T6605] worker_thread+0xa55/0xfc0 [ 136.115112][ T6605] kthread+0x2fa/0x390 [ 136.119188][ T6605] ret_from_fork+0x48/0x80 [ 136.123599][ T6605] ret_from_fork_asm+0x11/0x20 [ 136.128369][ T6605] [ 136.130689][ T6605] The buggy address belongs to the object at ffff88807ebd8000 [ 136.130689][ T6605] which belongs to the cache kmalloc-8k of size 8192 [ 136.144759][ T6605] The buggy address is located 1848 bytes inside of [ 136.144759][ T6605] freed 8192-byte region [ffff88807ebd8000, ffff88807ebda000) [ 136.158912][ T6605] [ 136.161229][ T6605] The buggy address belongs to the physical page: [ 136.167898][ T6605] page:ffffea0001faf600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ebd8 [ 136.178213][ T6605] head:ffffea0001faf600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 136.187152][ T6605] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 136.195492][ T6605] page_type: 0xffffffff() [ 136.199832][ T6605] raw: 00fff00000000840 ffff888017842280 ffffea0001f59400 dead000000000003 [ 136.208505][ T6605] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 136.217158][ T6605] page dumped because: kasan: bad access detected [ 136.223570][ T6605] page_owner tracks the page as allocated [ 136.229302][ T6605] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5461, tgid 5461 (dhcpcd-run-hook), ts 47413545567, free_ts 47411816119 [ 136.250245][ T6605] post_alloc_hook+0x1cd/0x210 [ 136.255012][ T6605] get_page_from_freelist+0x195c/0x19f0 [ 136.260555][ T6605] __alloc_pages+0x1e3/0x460 [ 136.265162][ T6605] alloc_slab_page+0x5d/0x170 [ 136.269849][ T6605] new_slab+0x87/0x2e0 [ 136.273918][ T6605] ___slab_alloc+0xc6d/0x12f0 [ 136.278593][ T6605] __kmem_cache_alloc_node+0x1a2/0x260 [ 136.284047][ T6605] kmalloc_trace+0x2a/0xe0 [ 136.288486][ T6605] tomoyo_init_log+0x1104/0x1f10 [ 136.293417][ T6605] tomoyo_supervisor+0x32d/0x1080 [ 136.298437][ T6605] tomoyo_env_perm+0x14a/0x1e0 [ 136.303198][ T6605] tomoyo_find_next_domain+0x1594/0x1a60 [ 136.308834][ T6605] tomoyo_bprm_check_security+0x116/0x170 [ 136.314552][ T6605] security_bprm_check+0x62/0xa0 [ 136.319483][ T6605] bprm_execve+0xa51/0x16f0 [ 136.323981][ T6605] do_execveat_common+0x51b/0x6c0 [ 136.329044][ T6605] page last free stack trace: [ 136.333899][ T6605] free_unref_page_prepare+0x7ce/0x8e0 [ 136.339461][ T6605] free_unref_page+0x32/0x2e0 [ 136.344248][ T6605] __unfreeze_partials+0x1cf/0x210 [ 136.349372][ T6605] put_cpu_partial+0x17c/0x250 [ 136.354149][ T6605] __slab_free+0x31d/0x410 [ 136.358562][ T6605] qlist_free_all+0x75/0xe0 [ 136.363071][ T6605] kasan_quarantine_reduce+0x143/0x160 [ 136.368569][ T6605] __kasan_slab_alloc+0x22/0x80 [ 136.373473][ T6605] slab_post_alloc_hook+0x6e/0x4d0 [ 136.378583][ T6605] __kmem_cache_alloc_node+0x13e/0x260 [ 136.384058][ T6605] __kmalloc+0xa4/0x240 [ 136.388257][ T6605] tomoyo_supervisor+0xb70/0x1080 [ 136.393309][ T6605] tomoyo_env_perm+0x14a/0x1e0 [ 136.398086][ T6605] tomoyo_find_next_domain+0x1594/0x1a60 [ 136.403734][ T6605] tomoyo_bprm_check_security+0x116/0x170 [ 136.409536][ T6605] security_bprm_check+0x62/0xa0 [ 136.414466][ T6605] [ 136.416782][ T6605] Memory state around the buggy address: [ 136.422445][ T6605] ffff88807ebd8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.430511][ T6605] ffff88807ebd8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.438588][ T6605] >ffff88807ebd8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.446680][ T6605] ^ [ 136.452570][ T6605] ffff88807ebd8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.460632][ T6605] ffff88807ebd8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.468770][ T6605] ================================================================== [ 136.481354][ T27] usb 3-1: Product: syz [ 136.485602][ T27] usb 3-1: Manufacturer: syz [ 136.492038][ T27] usb 3-1: SerialNumber: syz [ 136.512654][ T5875] em28xx 2-1:0.89: Remote control support is not available for this card. [ 136.548155][ T27] usb 3-1: config 0 descriptor?? [ 136.606810][ T5828] em28xx 2-1:0.89: Closing input extension [ 136.612941][ T6605] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 136.620360][ T6605] CPU: 1 PID: 6605 Comm: v4l_id Not tainted syzkaller #0 [ 136.627426][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.637594][ T6605] Call Trace: [ 136.640897][ T6605] [ 136.643864][ T6605] dump_stack_lvl+0x16c/0x230 [ 136.648579][ T6605] ? show_regs_print_info+0x20/0x20 [ 136.653854][ T6605] ? load_image+0x3b0/0x3b0 [ 136.658391][ T6605] panic+0x2c0/0x710 [ 136.662326][ T6605] ? bpf_jit_dump+0xd0/0xd0 [ 136.666875][ T6605] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 136.672800][ T6605] ? _raw_spin_unlock+0x40/0x40 [ 136.677684][ T6605] ? print_memory_metadata+0x314/0x400 [ 136.683345][ T6605] ? v4l2_fh_open+0xca/0x430 [ 136.687964][ T6605] check_panic_on_warn+0x84/0xa0 [ 136.692927][ T6605] ? v4l2_fh_open+0xca/0x430 [ 136.697553][ T6605] end_report+0x6f/0x140 [ 136.701828][ T6605] kasan_report+0x128/0x150 [ 136.706356][ T6605] ? v4l2_fh_open+0xca/0x430 [ 136.710974][ T6605] v4l2_fh_open+0xca/0x430 [ 136.715428][ T6605] em28xx_v4l2_open+0x157/0x980 [ 136.720314][ T6605] v4l2_open+0x212/0x360 [ 136.724579][ T6605] chrdev_open+0x59e/0x670 [ 136.729038][ T6605] ? cd_forget+0x160/0x160 [ 136.733478][ T6605] ? fsnotify_perm+0x3ed/0x5e0 [ 136.738363][ T6605] ? cd_forget+0x160/0x160 [ 136.742802][ T6605] do_dentry_open+0x8c6/0x1500 [ 136.747602][ T6605] path_openat+0x274b/0x3190 [ 136.752319][ T6605] ? __kasan_slab_alloc+0x6c/0x80 [ 136.757371][ T6605] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.763477][ T6605] ? verify_lock_unused+0x140/0x140 [ 136.768711][ T6605] ? do_filp_open+0x3d0/0x3d0 [ 136.773421][ T6605] ? __virt_addr_valid+0x18c/0x540 [ 136.778578][ T6605] do_filp_open+0x1c5/0x3d0 [ 136.783111][ T6605] ? vfs_tmpfile+0x490/0x490 [ 136.787751][ T6605] ? _raw_spin_unlock+0x28/0x40 [ 136.792723][ T6605] ? alloc_fd+0x58f/0x630 [ 136.797078][ T6605] do_sys_openat2+0x12c/0x1c0 [ 136.801786][ T6605] ? do_sys_open+0xe0/0xe0 [ 136.806242][ T6605] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 136.812249][ T6605] ? lock_chain_count+0x20/0x20 [ 136.817126][ T6605] ? lock_chain_count+0x20/0x20 [ 136.822000][ T6605] __x64_sys_openat+0x139/0x160 [ 136.826878][ T6605] do_syscall_64+0x55/0xb0 [ 136.831325][ T6605] ? clear_bhb_loop+0x40/0x90 [ 136.836022][ T6605] ? clear_bhb_loop+0x40/0x90 [ 136.840725][ T6605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.846735][ T6605] RIP: 0033:0x7f74fb0a7407 [ 136.851262][ T6605] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 136.871245][ T6605] RSP: 002b:00007ffc38d52800 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 136.879696][ T6605] RAX: ffffffffffffffda RBX: 00007f74fb769880 RCX: 00007f74fb0a7407 [ 136.887691][ T6605] RDX: 0000000000000000 RSI: 00007ffc38d52f1c RDI: ffffffffffffff9c [ 136.895680][ T6605] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 136.903687][ T6605] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 136.911683][ T6605] R13: 00007ffc38d52a50 R14: 00007f74fb8c8000 R15: 000055de00ebe4d8 [ 136.919689][ T6605] [ 136.923009][ T6605] Kernel Offset: disabled [ 136.927343][ T6605] Rebooting in 86400 seconds..