last executing test programs: 13m51.627893574s ago: executing program 1 (id=2): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x40000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fcntl$setpipe(r4, 0x407, 0x2000000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000c80)={r5, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) dup(r6) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f00000002c0)="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", 0xfc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r9, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 13m47.251945005s ago: executing program 1 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 13m44.167576823s ago: executing program 1 (id=12): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='f', @ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) link(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) unshare(0x2a020480) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r6, 0x58, &(0x7f00000003c0)}, 0x10) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x2e, 0x0, 0x61]}}, 0x0, 0x2d}, 0x28) 13m28.480847418s ago: executing program 32 (id=12): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='f', @ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) link(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) unshare(0x2a020480) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r6, 0x58, &(0x7f00000003c0)}, 0x10) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x2e, 0x0, 0x61]}}, 0x0, 0x2d}, 0x28) 13m22.788585686s ago: executing program 4 (id=47): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8) r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 13m20.753957461s ago: executing program 4 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40804}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000440)=ANY=[], 0x0) 13m19.592600982s ago: executing program 4 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x11) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090491000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(0x3) ioctl$sock_netdev_private(r2, 0x8914, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000000) 13m16.221747885s ago: executing program 4 (id=64): r0 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000004b80)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x15c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x130, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x124, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5, [{0x6, 0xfffffff8, 0x2, 0xffff}, {0x6, 0xfffff801, 0x1000, 0x6}, {0x0, 0x20000000, 0x8, 0x1a15}, {0x9, 0x8, 0xb, 0x4}, {0x1000, 0x3, 0x1ff, 0x7}, {0xc9, 0x1, 0x7, 0x4}, {0x9, 0xc, 0x2, 0x400}, {0xcf, 0x9384, 0x800, 0x4}, {0x6, 0x7, 0x7, 0x7}, {0x9c9, 0x9, 0x3, 0x7}, {0x81, 0x3, 0x1, 0xdaf9}, {0xffffffff, 0x8, 0x5, 0x2}, {0x745, 0x3, 0xe9, 0x4a}, {0x9, 0x9, 0x5, 0x7}, {0x2f875030, 0x3, 0x7, 0x2}, {0x100, 0x2199, 0x0, 0x4}, {0x7, 0x1, 0xfcf, 0x4}]}}]}}]}, 0x15c}}, 0x24040084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050200000000000000000f000000084cc837d0abfd5399c2d6d0bb740155573a6df4b551574b15e7b1fcbe7d328463648054dd3dd5a203ef435b208e6f9e48587a475dcc77417eb3888f3c4000000010000000c80b6c1ef07e5f6dccba370ebc3d24faeb289bffc042d404b791444161b4e9ff0b85644806fe3f7df6fbfd90b8f61d9aa3f40d51b7abc0f200"/149, @ANYRES32=0x0, @ANYBLOB="4a000e0080000000080211000001ffffffffffff0802110000010000000000000000000064007f5d0301b82a01022d1a0010190700000000000000c90007001900000008000b00000004000008000e8004000100"], 0x70}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x4c}}, 0x4040810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001540)={0xa04, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x130, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x50, 0x3, "c4ec1e801b3dbf65a528e15fb2f1af5dd6c3086f32cdf1c3a406e7051f4f245b4ba1fbfaeb962b8c8d60cd8d82d235606686ac70f381a6166713db7e1f8298567fbc60a062ca74a15fe12ee5"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "f6f9365ab27a52c01ae597804fa465acc8862403bad4f9fe089977a400efb7e4d60f31b42e9012d97c26eba92580df38d6530854d963c09fe224b1cd805287f7b0b52a5f5f8d89d297729735172832cc767a55262157b2ee9d84cb0f82522b5f61516f87a29b40504c6f759c9f17a4d8c3c6a1966191328bd1ecb2b3dd7931c3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x57, 0x3, "8d78841a3a5acbef556208144eb33865b6fd2ef22ee04c343b0ee21f81fd2dd36a0e1ca60ea3009b4d52faa5e666c1a4ddc215d45303bcc4adb3877d6c4dc86bb2c1087559b86b617c4fbbad597684c91dd4b6"}]}, @NL80211_ATTR_BEACON_HEAD={0x1b1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_b, @from_mac=@device_b, {0x2, 0x4}}, 0x7, @default, 0x20, @void, @val={0x1, 0x1, [{0x12}]}, @void, @void, @void, @val={0x5, 0x46, {0x0, 0x22, 0xfe, "02ffcd0477ac2bd386bae50b9971cebc3d4a6f3ed8e9d657a7cdee5a6b65c0e22233b53a0ec861954f303526d98c6b6bcade34e62ce80c9e5673a2ad1de230e924426d"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0xb7, 0x9}}, @void, @void, @void, @void, [{0xdd, 0xa5, "026e57d8360a41527e968bfabc8d42193bcaa88ebde7945c43d976747b22bcce2565e13389dcf4bc1b78a8c6a4bc3e75ff8dc381b6321f5b8962a6a751509c68c2d041fcbbec2db94d670579f67c96d985ccd0018880a09badea1db9e426adf3fbfa948710c9dc198cf1b00355667302ccc1e9e2ad60d9af98280187c4945a6e066746ce5c0d4833b97269c5f6c49509b17f021ec26ade49a7eb830d3e79cd4efb70e38586"}, {0xdd, 0x8f, "267f094f0be1b01b075f0ed9117cc7ec6205dc64e312ea99111dfa15c4e0420fa2007714904bbe6dbc80f16078ba34428f4193fd6a77c96454820c8e93170c762c2dc816e8ea58fc976b0555834e6a40cdfc90edece63d378cbf32d83f51fecefcaeda09c8720c6b98c810ed39c83dcc246b483fd836be050a6a6d9b3410750ce05d13d13f6a771ed73ab4956cef92"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x304, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1e, 0x2, "7cd73fb0b3411d68c77bf729153bf447e11a1048d96cab6aefaf"}, @NL80211_FTM_RESP_ATTR_LCI={0xe9, 0x2, "42718e1e819126d4f5a72d29194e017b87abb14104b0f79e762fe5be7ec72067e7b5ee5be19e86eeec7d0aafc817e430b5d8aea34fbdbd2b04d98bf004ec2874cd66ad8c8d02bbf756f204c0d13844983cd79ce4c5656719ea8198f54c888126a07b780bcc0ae72f09441ca478757f0e2d4cdf07c73552b03a93ab43fc7e10a9b40924e51a25f06c0043926a4bfb919672550fc50b5bb386fedfce76b1919bb6e4103938df7afa9e1c09450f56c199a0d3b8f51ccbb15c28a8ab8479958d792bdcb494376064bc60d3893ddd48f0b85ef08c7f5a756c6cf0b4570eed01eac03707119fc9b4"}, @NL80211_FTM_RESP_ATTR_LCI={0x81, 0x2, "3f4b4c53653db303828c76b757b71d9ece2fd79c8fce6f9e821f46a01cb6b9d3d6b9b737f4d26b02cb0a7c8e4856d4a663e0c0d58fc0fecf3940e96f4d6edef71a97cebe80f5a36352e4f347b9c0244850bcff85ceb109694725cf4e61b8a75372ebddf26998f0e426501673484cad8fa8d2a755da9038d66dbacdbd91"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x87, 0x3, "8fa793dbb1361ec959bd35e7fc3f7dca3b3b3f35e3df334c9727e732fe152c8a947eace65427a97125910fc8e973fa7735795e6a2491604a83b4385e6f377e1892190ee67296e365f5eff97dc459e3a102fa6dc41ca645b619072003e0d38da630a3ff3403acdeb24c49aac5f021bb1660caf348cecdf6bf7659b3bd5744d900819b73"}, @NL80211_FTM_RESP_ATTR_LCI={0xd9, 0x2, "92fb4ab22f6c641cd4dfc5f15a9fabb1836ba98e00598338b3e36d8cf1969df4b6fe9a07c7bf38f6b7a2e3807850ec4226426b24852251638c587f66118f2780e83b5835531794015c0f34b74e5e8cb14767e8c15143b3d1393d1120cdbf1cadc234da260f65b877eb68ef79d6a9f7d322dd854179db1db16b34c148232c6953cfacbef56276850a7e9410e560ff36ae8a730e969f8e3a88663f18c0d3e320750cf44ee08ba22f458cd59eea14f9e2b5bdcee764ce3860de4f63e00319dde9cba954b4d77a0388ffc1225303170e59e4041d455dcc"}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, 'p'}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x2}, 0x7, 0x1, @device_b, 0x3, 0x40, 0xfffffffe}}]}, @NL80211_ATTR_PROBE_RESP={0x3de, 0x91, "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"}]}, 0xa04}, 0x1, 0x0, 0x0, 0x4080}, 0x44800) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c001780"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 13m14.346197535s ago: executing program 4 (id=68): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x140002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="1400000030000b07005a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x8, 0x8001}, &(0x7f00000000c0)=0x88) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r7) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfffc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13m11.679167462s ago: executing program 4 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80270001}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040014}, 0x8840) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 12m56.230348939s ago: executing program 33 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80270001}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040014}, 0x8840) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 9.13538538s ago: executing program 5 (id=2649): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d0001070000000904000505030000000921000208012294030905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x3, 0x200, 0x5, 0xf, 0x2, 0xfffff1c8}) 8.951646853s ago: executing program 0 (id=2650): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(0x0, 0x1, 0x402) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/158, 0x9e}], 0x1) 7.416753463s ago: executing program 6 (id=2655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x41, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r8, 0x0) 6.935195921s ago: executing program 0 (id=2657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x4c, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b168fa3167"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 6.706765043s ago: executing program 3 (id=2658): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000006c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @local, @loopback}, "b6371388f4031731"}}}, 0x46) 6.268337182s ago: executing program 6 (id=2659): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, 0x0) 6.221208734s ago: executing program 0 (id=2660): r0 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007"], 0x0) write$usbip_server(r0, &(0x7f0000000140)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x4}, 0xfff, 0x1, 0x37, 0x6e, 0xfffffffd, 0x0, "a6", [{0x1, 0x5, 0xfffffff8, 0x7fffffff}, {0x4, 0x6, 0x100}, {0x3ff, 0xfff, 0x6}, {0xb91, 0x5, 0x800, 0xfffffffd}, {0x3, 0x67, 0xff}, {0x1c659fb0, 0x6, 0x8, 0x9}, {0x5, 0x5, 0x10, 0x8}, {0x80000000, 0x1, 0x3, 0x9}, {0x96, 0xd4, 0x1ff, 0xa0db}, {0x9, 0x5, 0x639f, 0x10001}, {0x2, 0x6, 0x3, 0x6f}, {0xffffff0f, 0x8, 0xfffffff8, 0xfffffffe}, {0x8d, 0xfffffffa, 0x0, 0x8149}, {0x401, 0x3, 0x3, 0x80000000}, {0x4, 0x8, 0x4, 0x1}, {0xc, 0x5, 0x3, 0xbba}, {0xe90b, 0x4, 0xb4, 0x5}, {0x2604d781, 0x1, 0x0, 0x424}, {0x800, 0x0, 0x8, 0x3}, {0x7, 0x7f, 0x3ff, 0x9}, {0x40, 0x6, 0x854, 0xe}, {0x0, 0x2920, 0x9, 0x3a2}, {0x80, 0x8}, {0x0, 0xfffffffa, 0x5, 0xb0000000}, {0x80000000, 0x7, 0x528025d3}, {0x5fff55f6, 0x804c, 0xa72f, 0x9}, {0x1, 0x8, 0x5, 0x7fff}, {0x3, 0xff, 0x3, 0x5}, {0x8, 0x18, 0xfff, 0x2}, {0x80000000, 0x6252, 0x5, 0x1}, {0x4, 0x4, 0x6, 0x1e32}, {0x81, 0x7, 0x1, 0x1cc}, {0x0, 0xffffffff, 0x5, 0x9}, {0x9, 0x3, 0x8, 0x401}, {0x825, 0x6, 0xfffff31b, 0x200}, {0x0, 0x1b, 0x400, 0x829}, {0x0, 0x0, 0x101, 0x3}, {0xbf, 0x9, 0x4, 0x9}, {0x800, 0x8, 0x8, 0x6}, {0x8, 0x5, 0xfffffff7, 0x4}, {0x5, 0x401, 0x2, 0xcd1d}, {0x7, 0x200, 0xffffff7f, 0x6}, {0x1, 0x8, 0x101, 0xf}, {0xc, 0x8, 0x7, 0x45}, {0x8, 0x7, 0xa}, {0xd5, 0x1, 0x7, 0x7}, {0xd, 0x6, 0x2, 0x1}, {0x10000, 0x8, 0x10000, 0x2}, {0x6, 0x0, 0x1, 0x1}, {0x611c0442, 0xc, 0x7}, {0x6, 0x2, 0x9, 0x2}, {0x0, 0xe, 0x400001f, 0x9}, {0xadb, 0x10001, 0xfffffffe, 0x4}, {0x4, 0x9, 0xfffffffc, 0x8}, {0x8, 0x6, 0xbf90, 0x5}, {0x3, 0x0, 0x3, 0x9}, {0x4, 0xec76, 0x2}, {0x6, 0x8001, 0x40, 0x7}, {0x800, 0x8000, 0x1000, 0x6}, {0x3ff, 0x428, 0x101, 0xfffffff9}, {0x2, 0x3, 0x400, 0x3}, {0x4b, 0x7, 0x7, 0x9}, {0x5, 0x8b2e, 0x0, 0x6}, {0x80000000, 0x9, 0x4f, 0x7}, {0x9, 0x3, 0x2, 0x73843d27}, {0x7, 0x8, 0x5, 0x7f}, {0x4, 0x9, 0x5, 0xb}, {0xf, 0x3, 0x8000, 0xffff}, {0x3ff, 0x4, 0xa, 0x5}, {0x6, 0x9, 0x3, 0x9}, {0x7, 0x3ff, 0x200, 0x1}, {0x2, 0x3, 0x3000, 0x7ff}, {0x99b, 0x8000, 0x7, 0x76e}, {0xe, 0x2, 0x0, 0x2}, {0x8, 0x9, 0xf7000, 0x9}, {0x76d7, 0x8, 0x6, 0x4}, {0x9, 0x7f, 0x9, 0x7}, {0x0, 0x1, 0x9, 0xfffffffb}, {0x4f, 0x8, 0x2, 0x5cb}, {0x0, 0x0, 0xffffff34, 0x9}, {0x0, 0x5, 0x1, 0x40}, {0x5, 0x2, 0x8ec, 0xe}, {0x9, 0x522cec28, 0x8000, 0x1}, {0x2, 0x10, 0x10, 0x8000}, {0x9, 0x8000, 0x5, 0xd05}, {0x6ec1bf17, 0x7, 0x73, 0x7}, {0x1, 0x1, 0xc6fb, 0x5}, {0x8001, 0x5, 0x3ff, 0xd23}, {0x5, 0x1, 0xff}, {0x8, 0xfffffffb, 0x5, 0x800000}, {0x2, 0xd8b, 0x2, 0x5}, {0x10, 0x5e, 0x9, 0x40b1}, {0x6, 0x3, 0xc, 0x1}, {0x4, 0x7fff, 0x0, 0x3}, {0x8, 0x6, 0x7, 0x8}, {0xfffffff8, 0x44da, 0x3, 0x38}, {0xe070, 0x5, 0x800, 0x7ff}, {0x10001, 0x80000000, 0x9, 0x2}, {0x9, 0x10b, 0x2, 0x2}, {0x1, 0x8, 0x3ff, 0x7}, {0xd, 0x1, 0x200, 0x5}, {0x2, 0x81, 0x7f, 0x6}, {0xcf27, 0x4, 0x8f, 0x4}, {0x10000, 0x9, 0x3, 0x8}, {0x1ff, 0x3c00, 0x8, 0x10001}, {0x3, 0x1ff, 0x8, 0x89}, {0x40, 0xd, 0x2, 0xf72}, {0x10000, 0x0, 0x8}, {0x80000000, 0x0, 0x1380add1, 0x7}, {0x9, 0xa564, 0x4, 0x2}]}, 0x711) 5.521027047s ago: executing program 3 (id=2663): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x4d, 0x0, &(0x7f0000000340)="bb173ceb63c3910fd1351d37338e64eb23b055d90b1c72e20563fec54b3b7cf051c77ec563ab5391b3482945d6cffa6cd0c0dfd402edf2a68f3f8071d555038c13624d292769d96b886475be6d"}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 5.513592828s ago: executing program 5 (id=2664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000380)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f13942c4b", 0x2a}], 0x1) 4.936701491s ago: executing program 3 (id=2665): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 4.518020889s ago: executing program 5 (id=2667): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(0x0, 0x1, 0x402) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/158, 0x9e}], 0x1) 3.715335017s ago: executing program 2 (id=2670): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xc}) 3.540956586s ago: executing program 2 (id=2671): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c"], 0x28}}, 0x0) 3.353152192s ago: executing program 2 (id=2672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c"], 0x250}}, 0x0) 3.177839501s ago: executing program 2 (id=2673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000006c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @local, @loopback}, "b6371388f4031731"}}}, 0x46) 3.048308243s ago: executing program 3 (id=2674): exit(0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 2.592659738s ago: executing program 6 (id=2675): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x4d, 0x0, &(0x7f0000000340)="bb173ceb63c3910fd1351d37338e64eb23b055d90b1c72e20563fec54b3b7cf051c77ec563ab5391b3482945d6cffa6cd0c0dfd402edf2a68f3f8071d555038c13624d292769d96b886475be6d"}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 2.582569336s ago: executing program 0 (id=2676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 2.311887533s ago: executing program 2 (id=2677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000380)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f13942c4b", 0x2a}], 0x1) 1.931843202s ago: executing program 6 (id=2678): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 1.849497874s ago: executing program 0 (id=2679): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x108, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) 1.724271875s ago: executing program 3 (id=2680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) 1.550949918s ago: executing program 6 (id=2681): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="402a01000000cb"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002280)={0x44, &(0x7f0000001fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.195662159s ago: executing program 5 (id=2682): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xc}) 1.149361254s ago: executing program 2 (id=2683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2d707a214e80164e}, 0x805) sendmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="02", 0x1}], 0x1}}], 0x1, 0x4041094) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/171, 0xab, 0x0, 0x0}, &(0x7f0000000280)=0x40) 1.104570728s ago: executing program 0 (id=2684): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="201101000000cef0058cac6467367296d39cf81768195b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 737.034819ms ago: executing program 3 (id=2685): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, 0x0) 692.863987ms ago: executing program 5 (id=2686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x41, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 254.926498ms ago: executing program 6 (id=2687): r0 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c0071215223000"], 0x0) write$usbip_server(r0, &(0x7f0000000140)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x4}, 0xfff, 0x1, 0x37, 0x6e, 0xfffffffd, 0x0, "a6", [{0x1, 0x5, 0xfffffff8, 0x7fffffff}, {0x4, 0x6, 0x100}, {0x3ff, 0xfff, 0x6}, {0xb91, 0x5, 0x800, 0xfffffffd}, {0x3, 0x67, 0xff}, {0x1c659fb0, 0x6, 0x8, 0x9}, {0x5, 0x5, 0x10, 0x8}, {0x80000000, 0x1, 0x3, 0x9}, {0x96, 0xd4, 0x1ff, 0xa0db}, {0x9, 0x5, 0x639f, 0x10001}, {0x2, 0x6, 0x3, 0x6f}, {0xffffff0f, 0x8, 0xfffffff8, 0xfffffffe}, {0x8d, 0xfffffffa, 0x0, 0x8149}, {0x401, 0x3, 0x3, 0x80000000}, {0x4, 0x8, 0x4, 0x1}, {0xc, 0x5, 0x3, 0xbba}, {0xe90b, 0x4, 0xb4, 0x5}, {0x2604d781, 0x1, 0x0, 0x424}, {0x800, 0x0, 0x8, 0x3}, {0x7, 0x7f, 0x3ff, 0x9}, {0x40, 0x6, 0x854, 0xe}, {0x0, 0x2920, 0x9, 0x3a2}, {0x80, 0x8}, {0x0, 0xfffffffa, 0x5, 0xb0000000}, {0x80000000, 0x7, 0x528025d3}, {0x5fff55f6, 0x804c, 0xa72f, 0x9}, {0x1, 0x8, 0x5, 0x7fff}, {0x3, 0xff, 0x3, 0x5}, {0x8, 0x18, 0xfff, 0x2}, {0x80000000, 0x6252, 0x5, 0x1}, {0x4, 0x4, 0x6, 0x1e32}, {0x81, 0x7, 0x1, 0x1cc}, {0x0, 0xffffffff, 0x5, 0x9}, {0x9, 0x3, 0x8, 0x401}, {0x825, 0x6, 0xfffff31b, 0x200}, {0x0, 0x1b, 0x400, 0x829}, {0x0, 0x0, 0x101, 0x3}, {0xbf, 0x9, 0x4, 0x9}, {0x800, 0x8, 0x8, 0x6}, {0x8, 0x5, 0xfffffff7, 0x4}, {0x5, 0x401, 0x2, 0xcd1d}, {0x7, 0x200, 0xffffff7f, 0x6}, {0x1, 0x8, 0x101, 0xf}, {0xc, 0x8, 0x7, 0x45}, {0x8, 0x7, 0xa}, {0xd5, 0x1, 0x7, 0x7}, {0xd, 0x6, 0x2, 0x1}, {0x10000, 0x8, 0x10000, 0x2}, {0x6, 0x0, 0x1, 0x1}, {0x611c0442, 0xc, 0x7}, {0x6, 0x2, 0x9, 0x2}, {0x0, 0xe, 0x400001f, 0x9}, {0xadb, 0x10001, 0xfffffffe, 0x4}, {0x4, 0x9, 0xfffffffc, 0x8}, {0x8, 0x6, 0xbf90, 0x5}, {0x3, 0x0, 0x3, 0x9}, {0x4, 0xec76, 0x2}, {0x6, 0x8001, 0x40, 0x7}, {0x800, 0x8000, 0x1000, 0x6}, {0x3ff, 0x428, 0x101, 0xfffffff9}, {0x2, 0x3, 0x400, 0x3}, {0x4b, 0x7, 0x7, 0x9}, {0x5, 0x8b2e, 0x0, 0x6}, {0x80000000, 0x9, 0x4f, 0x7}, {0x9, 0x3, 0x2, 0x73843d27}, {0x7, 0x8, 0x5, 0x7f}, {0x4, 0x9, 0x5, 0xb}, {0xf, 0x3, 0x8000, 0xffff}, {0x3ff, 0x4, 0xa, 0x5}, {0x6, 0x9, 0x3, 0x9}, {0x7, 0x3ff, 0x200, 0x1}, {0x2, 0x3, 0x3000, 0x7ff}, {0x99b, 0x8000, 0x7, 0x76e}, {0xe, 0x2, 0x0, 0x2}, {0x8, 0x9, 0xf7000, 0x9}, {0x76d7, 0x8, 0x6, 0x4}, {0x9, 0x7f, 0x9, 0x7}, {0x0, 0x1, 0x9, 0xfffffffb}, {0x4f, 0x8, 0x2, 0x5cb}, {0x0, 0x0, 0xffffff34, 0x9}, {0x0, 0x5, 0x1, 0x40}, {0x5, 0x2, 0x8ec, 0xe}, {0x9, 0x522cec28, 0x8000, 0x1}, {0x2, 0x10, 0x10, 0x8000}, {0x9, 0x8000, 0x5, 0xd05}, {0x6ec1bf17, 0x7, 0x73, 0x7}, {0x1, 0x1, 0xc6fb, 0x5}, {0x8001, 0x5, 0x3ff, 0xd23}, {0x5, 0x1, 0xff}, {0x8, 0xfffffffb, 0x5, 0x800000}, {0x2, 0xd8b, 0x2, 0x5}, {0x10, 0x5e, 0x9, 0x40b1}, {0x6, 0x3, 0xc, 0x1}, {0x4, 0x7fff, 0x0, 0x3}, {0x8, 0x6, 0x7, 0x8}, {0xfffffff8, 0x44da, 0x3, 0x38}, {0xe070, 0x5, 0x800, 0x7ff}, {0x10001, 0x80000000, 0x9, 0x2}, {0x9, 0x10b, 0x2, 0x2}, {0x1, 0x8, 0x3ff, 0x7}, {0xd, 0x1, 0x200, 0x5}, {0x2, 0x81, 0x7f, 0x6}, {0xcf27, 0x4, 0x8f, 0x4}, {0x10000, 0x9, 0x3, 0x8}, {0x1ff, 0x3c00, 0x8, 0x10001}, {0x3, 0x1ff, 0x8, 0x89}, {0x40, 0xd, 0x2, 0xf72}, {0x10000, 0x0, 0x8}, {0x80000000, 0x0, 0x1380add1, 0x7}, {0x9, 0xa564, 0x4, 0x2}]}, 0x711) 0s ago: executing program 5 (id=2688): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): link: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 783.770915][T11313] macvtap9: entered promiscuous mode [ 783.777897][T11313] macvtap9: entered allmulticast mode [ 784.315148][T11320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1542'. [ 784.853113][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 785.074857][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 786.313811][T11343] syzkaller0: entered promiscuous mode [ 786.319986][T11343] syzkaller0: entered allmulticast mode [ 786.326150][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'. [ 786.440254][T11344] macvtap10: entered promiscuous mode [ 786.447033][T11344] macvtap10: entered allmulticast mode [ 786.720020][T11353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1558'. [ 787.391072][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 787.458118][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1561'. [ 789.139726][T11376] syzkaller0: entered promiscuous mode [ 789.145522][T11376] syzkaller0: entered allmulticast mode [ 789.200486][T11381] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1570'. [ 790.273390][T11392] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 790.514290][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1576'. [ 790.730278][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'. [ 792.251490][T11415] netlink: 87 bytes leftover after parsing attributes in process `syz.2.1584'. [ 792.646718][T11419] syzkaller0: entered promiscuous mode [ 792.652941][T11419] syzkaller0: entered allmulticast mode [ 792.773853][T11413] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 792.805505][T11413] syzkaller0: entered promiscuous mode [ 792.811620][T11413] syzkaller0: entered allmulticast mode [ 794.351404][T11436] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 794.394420][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1591'. [ 796.114364][T11459] syzkaller0: entered promiscuous mode [ 796.120944][T11459] syzkaller0: entered allmulticast mode [ 796.786192][T11468] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 797.382442][T11473] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1605'. [ 799.979315][T11502] syzkaller0: entered promiscuous mode [ 799.985261][T11502] syzkaller0: entered allmulticast mode [ 800.672059][T11504] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 803.190244][T11534] syzkaller0: entered promiscuous mode [ 803.196202][T11534] syzkaller0: entered allmulticast mode [ 803.653311][T11537] blktrace: Concurrent blktraces are not allowed on sg0 [ 804.265445][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1634'. [ 804.308344][T11546] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 804.430864][T11545] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1634'. [ 804.440420][T11545] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 805.205826][T11557] tipc: Enabling of bearer rejected, failed to enable media [ 806.640763][T11569] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1645'. [ 806.653870][T11571] syzkaller0: entered promiscuous mode [ 806.659980][T11571] syzkaller0: entered allmulticast mode [ 807.116103][T11575] blktrace: Concurrent blktraces are not allowed on sg0 [ 807.489424][T11582] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 809.020176][T11598] tipc: Enabling of bearer rejected, failed to enable media [ 810.119745][T11609] syzkaller0: entered promiscuous mode [ 810.125555][T11609] syzkaller0: entered allmulticast mode [ 810.880238][T11618] netlink: 'syz.2.1664': attribute type 2 has an invalid length. [ 810.888527][T11618] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 811.019960][T11619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 814.330928][T11657] syzkaller0: entered promiscuous mode [ 814.336759][T11657] syzkaller0: entered allmulticast mode [ 815.286240][T11668] netlink: 'syz.3.1680': attribute type 2 has an invalid length. [ 815.297981][T11668] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 815.434563][T11668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 815.594766][T11668] veth0_to_team: entered promiscuous mode [ 815.601599][T11668] veth0_to_team: entered allmulticast mode [ 816.111422][T11678] Bluetooth: MGMT ver 1.23 [ 816.323031][T11680] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.515311][T11680] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.746652][T11680] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.095856][T11680] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.176093][T11697] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1688'. [ 817.831593][T11680] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.873390][T11680] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.909923][T11680] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.944503][T11680] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.550770][T11707] syzkaller0: entered promiscuous mode [ 818.556594][T11707] syzkaller0: entered allmulticast mode [ 819.011620][T11717] netlink: 'syz.5.1695': attribute type 2 has an invalid length. [ 819.022210][T11717] netlink: 'syz.5.1695': attribute type 1 has an invalid length. [ 819.132916][T11717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.496497][T11733] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1702'. [ 821.965690][T11742] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1706'. [ 822.542034][T11746] syzkaller0: entered promiscuous mode [ 822.547983][T11746] syzkaller0: entered allmulticast mode [ 823.010738][T11754] netlink: 'syz.3.1709': attribute type 2 has an invalid length. [ 823.019114][T11754] netlink: 'syz.3.1709': attribute type 1 has an invalid length. [ 823.699343][T11767] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1714'. [ 825.408761][T11783] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1720'. [ 826.204394][T11794] syzkaller0: entered promiscuous mode [ 826.211120][T11794] syzkaller0: entered allmulticast mode [ 828.543330][T11819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1733'. [ 830.248597][T11835] syzkaller0: entered promiscuous mode [ 830.254444][T11835] syzkaller0: entered allmulticast mode [ 831.714704][T11859] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1746'. [ 834.514114][T11888] syzkaller0: entered promiscuous mode [ 834.520782][T11888] syzkaller0: entered allmulticast mode [ 834.521018][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1756'. [ 837.249548][T11917] syzkaller0: entered promiscuous mode [ 837.255352][T11917] syzkaller0: entered allmulticast mode [ 838.014722][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1769'. [ 838.783558][T11938] tipc: Enabled bearer , priority 0 [ 838.853641][T11938] tipc: Resetting bearer [ 838.881984][T11935] tipc: Disabling bearer [ 841.475318][T11976] syzkaller0: entered promiscuous mode [ 841.485259][T11976] syzkaller0: entered allmulticast mode [ 842.851846][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1784'. [ 844.605980][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 845.991783][T12016] syzkaller0: entered promiscuous mode [ 845.997893][T12016] syzkaller0: entered allmulticast mode [ 846.789754][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1798'. [ 849.328600][T12056] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1806'. [ 849.338431][T12056] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1806'. [ 849.348007][T12056] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1806'. [ 850.110364][T12064] tipc: Enabled bearer , priority 0 [ 850.144908][T12064] syzkaller0: entered promiscuous mode [ 850.151393][T12064] syzkaller0: entered allmulticast mode [ 850.359548][T12062] tipc: Resetting bearer [ 850.388146][T12062] tipc: Disabling bearer [ 851.595030][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 854.032538][T12107] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1823'. [ 854.043584][T12107] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1823'. [ 854.053175][T12107] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1823'. [ 855.571315][T12125] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1829'. [ 855.694895][T12127] tipc: Enabled bearer , priority 0 [ 855.752173][T12129] syzkaller0: entered promiscuous mode [ 855.758443][T12129] syzkaller0: entered allmulticast mode [ 855.802108][T12126] tipc: Resetting bearer [ 855.884720][T12126] tipc: Disabling bearer [ 858.469534][T12153] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1839'. [ 858.479466][T12153] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1839'. [ 858.493801][T12153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1839'. [ 858.981447][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1843'. [ 859.639895][T12164] tipc: Enabled bearer , priority 0 [ 859.714380][T12166] syzkaller0: entered promiscuous mode [ 859.720512][T12166] syzkaller0: entered allmulticast mode [ 859.874240][T12163] tipc: Resetting bearer [ 859.934423][T12163] tipc: Disabling bearer [ 862.536300][T12204] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1858'. [ 862.546338][T12204] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1858'. [ 862.556150][T12204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1858'. [ 863.253256][T12210] tipc: Enabled bearer , priority 0 [ 863.291339][T12210] syzkaller0: entered promiscuous mode [ 863.297141][T12210] syzkaller0: entered allmulticast mode [ 863.424951][T12209] tipc: Resetting bearer [ 863.490225][T12209] tipc: Disabling bearer [ 865.864633][T12240] syzkaller0: entered promiscuous mode [ 865.870698][T12240] syzkaller0: entered allmulticast mode [ 866.627899][T12250] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1874'. [ 866.638855][T12250] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1874'. [ 866.648445][T12250] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1874'. [ 866.886984][T12254] tipc: Enabled bearer , priority 0 [ 866.924726][T12254] syzkaller0: entered promiscuous mode [ 866.930994][T12254] syzkaller0: entered allmulticast mode [ 867.043502][T12254] tipc: Resetting bearer [ 867.096937][T12252] tipc: Resetting bearer [ 867.140956][T12252] tipc: Disabling bearer [ 867.297627][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1879'. [ 867.307009][T12259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1879'. [ 868.997699][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 869.198052][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 869.242867][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 869.255161][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 869.330000][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 869.339652][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.348910][ T24] usb 1-1: Product: syz [ 869.353370][ T24] usb 1-1: Manufacturer: syz [ 869.358431][ T24] usb 1-1: SerialNumber: syz [ 869.523111][T12287] syzkaller0: entered promiscuous mode [ 869.529002][T12287] syzkaller0: entered allmulticast mode [ 869.559958][ T24] usb 1-1: config 0 descriptor?? [ 869.599477][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 869.609376][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 869.841903][T12289] tipc: Enabled bearer , priority 0 [ 869.881396][T12289] syzkaller0: entered promiscuous mode [ 869.888614][T12289] syzkaller0: entered allmulticast mode [ 870.141362][T12291] team0: No ports can be present during mode change [ 870.200559][T12288] tipc: Resetting bearer [ 870.235801][T12288] tipc: Disabling bearer [ 870.322834][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 870.336552][ T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 870.360196][T12295] tipc: Enabled bearer , priority 0 [ 870.391637][T12295] syzkaller0: entered promiscuous mode [ 870.397821][T12295] syzkaller0: entered allmulticast mode [ 870.580152][T12295] tipc: Resetting bearer [ 870.672129][T12293] tipc: Resetting bearer [ 870.725370][T12293] tipc: Disabling bearer [ 870.915100][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 870.925210][T12300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1893'. [ 870.947918][T12301] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1892'. [ 870.957712][T12301] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1892'. [ 870.960776][ T24] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 870.967005][T12301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1892'. [ 871.023532][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 871.048812][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 871.061846][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 871.088933][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 871.112118][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 871.142141][ T24] usb 1-1: USB disconnect, device number 2 [ 872.583291][T12315] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1611167959 (3222335918 ns) > initial count (128 ns). Using initial count to start timer. [ 873.144082][T12330] syzkaller0: entered promiscuous mode [ 873.150181][T12330] syzkaller0: entered allmulticast mode [ 873.990673][T12334] team0: Unable to change to the same mode the team is in [ 874.085038][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1906'. [ 874.094623][T12340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1906'. [ 874.124336][T12338] tipc: Enabled bearer , priority 0 [ 874.149363][T12338] syzkaller0: entered promiscuous mode [ 874.155169][T12338] syzkaller0: entered allmulticast mode [ 874.210822][T12337] tipc: Enabled bearer , priority 0 [ 874.271793][T12338] tipc: Resetting bearer [ 874.298735][T12341] syzkaller0: entered promiscuous mode [ 874.304526][T12341] syzkaller0: entered allmulticast mode [ 874.323276][T12335] tipc: Resetting bearer [ 874.419312][T12335] tipc: Disabling bearer [ 874.549425][T12343] tipc: Resetting bearer [ 874.629366][T12336] tipc: Resetting bearer [ 874.661979][T12336] tipc: Disabling bearer [ 875.593294][T12356] syzkaller0: entered promiscuous mode [ 875.599918][T12356] syzkaller0: entered allmulticast mode [ 877.434079][T12376] team0: Unable to change to the same mode the team is in [ 877.501645][T12377] netlink: 'syz.0.1919': attribute type 2 has an invalid length. [ 877.510007][T12377] netlink: 'syz.0.1919': attribute type 1 has an invalid length. [ 877.769192][T12377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 878.101825][T12381] tipc: Enabled bearer , priority 0 [ 878.149522][T12381] syzkaller0: entered promiscuous mode [ 878.155459][T12381] syzkaller0: entered allmulticast mode [ 878.245148][T12381] tipc: Resetting bearer [ 878.350930][T12379] tipc: Resetting bearer [ 878.406033][T12379] tipc: Disabling bearer [ 878.893945][T12392] tipc: Enabled bearer , priority 10 [ 878.937846][T12389] tipc: Disabling bearer [ 879.396663][T12399] tipc: Enabled bearer , priority 0 [ 879.455900][T12399] syzkaller0: entered promiscuous mode [ 879.462026][T12399] syzkaller0: entered allmulticast mode [ 879.572519][T12399] tipc: Resetting bearer [ 879.621675][T12397] tipc: Resetting bearer [ 879.682673][T12397] tipc: Disabling bearer [ 880.299437][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1931'. [ 880.532417][T12410] team0: Unable to change to the same mode the team is in [ 880.676880][T12412] syzkaller0: entered promiscuous mode [ 880.683147][T12412] syzkaller0: entered allmulticast mode [ 881.043080][T12414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 881.282419][T12423] tipc: Enabled bearer , priority 0 [ 881.326548][T12423] syzkaller0: entered promiscuous mode [ 881.333365][T12423] syzkaller0: entered allmulticast mode [ 881.453687][T12422] tipc: Resetting bearer [ 881.511609][T12421] tipc: Resetting bearer [ 881.575964][T12421] tipc: Disabling bearer [ 881.951716][T12429] tipc: Enabled bearer , priority 10 [ 882.032659][T12428] tipc: Disabling bearer [ 883.109051][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1946'. [ 883.226426][T12443] tipc: Enabled bearer , priority 0 [ 883.270607][T12445] team0: Unable to change to the same mode the team is in [ 883.288861][T12448] syzkaller0: entered promiscuous mode [ 883.294778][T12448] syzkaller0: entered allmulticast mode [ 883.436697][T12443] tipc: Resetting bearer [ 883.561181][T12441] tipc: Resetting bearer [ 883.685029][T12441] tipc: Disabling bearer [ 883.961871][T12457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 884.282066][T12462] syzkaller0: entered promiscuous mode [ 884.288854][T12462] syzkaller0: entered allmulticast mode [ 884.857805][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 885.110248][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 885.120654][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 885.130859][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 885.141078][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 885.151494][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 885.161167][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.373314][ T24] usb 1-1: config 0 descriptor?? [ 885.427915][T11463] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 885.631240][ T24] hdpvr 1-1:0.0: firmware version 0x0 dated [ 885.637986][ T24] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 885.765555][T11463] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 885.775226][T11463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 885.785008][T11463] usb 6-1: Product: syz [ 885.789623][T11463] usb 6-1: Manufacturer: syz [ 885.794514][T11463] usb 6-1: SerialNumber: syz [ 885.925665][T11463] usb 6-1: config 0 descriptor?? [ 886.102321][T11463] ch341 6-1:0.0: ch341-uart converter detected [ 886.216821][ T24] hdpvr 1-1:0.0: Could not setup controls [ 886.229810][ T24] hdpvr 1-1:0.0: registering videodev failed [ 886.346728][ T24] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 886.539771][ T24] usb 1-1: USB disconnect, device number 3 [ 886.910806][T11463] usb 6-1: failed to send control message: -71 [ 886.919162][T11463] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 886.972494][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1960'. [ 887.022399][T11463] usb 6-1: USB disconnect, device number 3 [ 887.035242][T11463] ch341 6-1:0.0: device disconnected [ 887.090592][T12489] team0: Unable to change to the same mode the team is in [ 887.428319][T12493] tipc: Enabled bearer , priority 0 [ 887.489378][T12495] syzkaller0: entered promiscuous mode [ 887.495196][T12495] syzkaller0: entered allmulticast mode [ 887.582250][T12493] tipc: Resetting bearer [ 887.609198][T12491] tipc: Resetting bearer [ 887.623356][T12498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1962'. [ 887.651782][T12491] tipc: Disabling bearer [ 888.419471][T12505] syzkaller0: entered promiscuous mode [ 888.425290][T12505] syzkaller0: entered allmulticast mode [ 889.749268][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1971'. [ 889.922109][T12526] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1971'. [ 889.931754][T12526] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 890.364621][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'. [ 890.496836][T12531] team0: No ports can be present during mode change [ 890.718681][T12535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1976'. [ 891.075632][T12538] tipc: Enabled bearer , priority 10 [ 891.372235][T12540] tipc: Resetting bearer [ 891.500987][T12547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.646883][T12536] tipc: Resetting bearer [ 891.794246][T12536] tipc: Disabling bearer [ 892.041841][T12547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.312310][T12547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.712009][T12547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.148217][T12547] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.182374][T12547] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.341634][T12547] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.472476][T12547] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.245653][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1988'. [ 894.361538][T12580] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1988'. [ 894.371676][T12580] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 894.764750][T12589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1991'. [ 895.208479][ T5859] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 895.415576][T12594] tipc: Enabled bearer , priority 10 [ 895.430456][ T5859] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.441853][ T5859] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 895.451441][ T5859] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 895.460991][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.597020][ T5859] usb 6-1: config 0 descriptor?? [ 895.618494][T12594] tipc: Resetting bearer [ 895.682912][ T5859] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 895.690285][ T5859] dvb-usb: bulk message failed: -22 (3/0) [ 895.740249][ T5859] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 895.783634][T12592] tipc: Resetting bearer [ 895.840888][T12591] dvb-usb: bulk message failed: -22 (4/0) [ 895.957528][T12592] tipc: Disabling bearer [ 895.979795][ T5859] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 895.987386][ T5859] usb 6-1: media controller created [ 896.002009][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 896.096857][ T5859] dvb-usb: bulk message failed: -22 (6/0) [ 896.103775][ T5859] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 896.142558][ T5859] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 896.216922][ T5859] dvb-usb: schedule remote query interval to 150 msecs. [ 896.225259][ T5859] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 896.276028][ T5859] usb 6-1: USB disconnect, device number 4 [ 896.453361][ T5859] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 897.209133][T12612] syzkaller0: entered promiscuous mode [ 897.214925][T12612] syzkaller0: entered allmulticast mode [ 897.449735][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2003'. [ 897.504517][T12623] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.549103][T11463] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 897.590896][T12621] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2003'. [ 897.600541][T12621] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 897.640803][T12623] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.722528][T12623] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.810705][T11463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 897.822616][T11463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.832998][T11463] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 897.842876][T11463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.904167][T12623] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.930606][T11463] usb 4-1: config 0 descriptor?? [ 898.409876][T12623] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.454416][T11463] wacom 0003:056A:0317.0001: unknown main item tag 0x0 [ 898.462217][T11463] wacom 0003:056A:0317.0001: unknown main item tag 0x0 [ 898.485573][T12623] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.510242][T12630] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2005'. [ 898.524265][T12623] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.538682][T11463] wacom 0003:056A:0317.0001: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 898.562116][T12623] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.620008][T11463] wacom 0003:056A:0317.0001: hidraw0: USB HID v0.01 Device [HID 056a:0317] on usb-dummy_hcd.3-1/input0 [ 898.652801][T11463] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0317.0001/input/input10 [ 898.828483][T11463] usb 4-1: USB disconnect, device number 3 [ 899.609836][T12632] fido_id[12632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 900.422933][T12645] tipc: Enabled bearer , priority 10 [ 900.741587][T12645] tipc: Resetting bearer [ 900.942699][T12644] tipc: Resetting bearer [ 901.101231][T12644] tipc: Disabling bearer [ 901.477784][T12658] syzkaller0: entered promiscuous mode [ 901.483595][T12658] syzkaller0: entered allmulticast mode [ 901.766853][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2016'. [ 902.010808][T11463] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 902.261069][T11463] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 902.271294][T11463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 902.280058][T11463] usb 1-1: Product: syz [ 902.284509][T11463] usb 1-1: Manufacturer: syz [ 902.289524][T11463] usb 1-1: SerialNumber: syz [ 902.323040][T12666] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.410781][T11463] usb 1-1: config 0 descriptor?? [ 902.466562][T11463] ch341 1-1:0.0: ch341-uart converter detected [ 902.643614][T12666] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.984469][T12666] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.146547][T11463] usb 1-1: failed to send control message: -71 [ 903.154366][T11463] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 903.274250][T12666] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.278623][T11463] usb 1-1: USB disconnect, device number 4 [ 903.345429][T11463] ch341 1-1:0.0: device disconnected [ 903.640086][T12666] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.673190][T12666] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.766608][T12666] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.801017][T12666] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.444497][T12470] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 905.454006][T12694] tipc: Enabled bearer , priority 10 [ 905.670851][T12697] tipc: Resetting bearer [ 905.856907][T12692] tipc: Resetting bearer [ 905.885080][T12699] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2029'. [ 906.102205][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 906.123510][T12692] tipc: Disabling bearer [ 906.153132][T12470] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.165913][T12470] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 906.176896][T12470] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 906.187698][T12470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.204525][T12470] usb 1-1: config 0 descriptor?? [ 906.277739][T12470] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 906.284786][T12470] dvb-usb: bulk message failed: -22 (3/0) [ 906.458617][T12691] dvb-usb: bulk message failed: -22 (4/0) [ 906.485174][T12470] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 906.570798][T12470] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 906.578388][T12470] usb 1-1: media controller created [ 906.636165][T12470] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.739818][T12470] dvb-usb: bulk message failed: -22 (6/0) [ 906.746180][T12470] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 906.851019][T12470] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 906.909658][T12470] dvb-usb: schedule remote query interval to 150 msecs. [ 906.916951][T12470] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 907.005599][T12470] usb 1-1: USB disconnect, device number 5 [ 907.151216][T12470] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 907.199428][T12701] syzkaller0: entered promiscuous mode [ 907.205255][T12701] syzkaller0: entered allmulticast mode [ 909.959057][T12729] tipc: Enabled bearer , priority 10 [ 910.225050][T12729] tipc: Resetting bearer [ 910.279637][T12739] syzkaller0: entered promiscuous mode [ 910.285459][T12739] syzkaller0: entered allmulticast mode [ 910.311544][T12728] tipc: Resetting bearer [ 910.483127][T12728] tipc: Disabling bearer [ 910.576999][T12736] tipc: Enabled bearer , priority 0 [ 910.666326][T12732] tipc: Resetting bearer [ 910.778497][T12731] tipc: Resetting bearer [ 910.808920][T12731] tipc: Disabling bearer [ 912.099031][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'. [ 912.216926][T12754] team0: No ports can be present during mode change [ 913.243501][T12767] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1611167959 (3222335918 ns) > initial count (128 ns). Using initial count to start timer. [ 913.677661][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 913.987611][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 914.020945][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 914.033893][ T24] usb 6-1: config 0 has no interface number 0 [ 914.122564][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 914.132868][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.141506][ T24] usb 6-1: Product: syz [ 914.147488][ T24] usb 6-1: Manufacturer: syz [ 914.152414][ T24] usb 6-1: SerialNumber: syz [ 914.280362][ T24] usb 6-1: config 0 descriptor?? [ 914.330590][ T24] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 914.340065][ T24] usb 6-1: selecting invalid altsetting 1 [ 914.346099][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 914.367650][T12777] tipc: Enabled bearer , priority 10 [ 914.437825][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 914.451364][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 914.460368][ T24] usb 6-1: media controller created [ 914.612606][T12777] tipc: Resetting bearer [ 914.643123][T12779] tipc: Enabled bearer , priority 0 [ 914.701724][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 914.730298][T12781] syzkaller0: entered promiscuous mode [ 914.736114][T12781] syzkaller0: entered allmulticast mode [ 914.767454][T12779] tipc: Resetting bearer [ 914.833870][T12776] tipc: Resetting bearer [ 914.996596][T12776] tipc: Disabling bearer [ 915.033126][ T24] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 915.033502][T12778] tipc: Resetting bearer [ 915.042659][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 915.086585][T12778] tipc: Disabling bearer [ 915.094082][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 915.732827][ T24] usb 6-1: USB disconnect, device number 5 [ 915.882216][T12791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2062'. [ 916.319126][ T24] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 916.601439][T12803] syzkaller0: entered promiscuous mode [ 916.608074][T12803] syzkaller0: entered allmulticast mode [ 916.719777][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.730626][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 916.740713][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 916.750342][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.768136][ T24] usb 6-1: config 0 descriptor?? [ 916.796341][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 916.805930][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 916.832925][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 916.847949][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 916.855655][ T24] usb 6-1: media controller created [ 917.143295][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 917.165533][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 917.172014][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 917.202649][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 917.279951][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 917.288353][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 917.389943][ T24] usb 6-1: USB disconnect, device number 6 [ 917.447851][T12470] dvb-usb: bulk message failed: -22 (1/0) [ 917.454087][T12470] dvb-usb: error while querying for an remote control event. [ 917.592559][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 917.872009][T12810] tipc: Enabled bearer , priority 0 [ 917.941860][T12810] syzkaller0: entered promiscuous mode [ 917.947860][T12810] syzkaller0: entered allmulticast mode [ 918.039260][T12810] tipc: Resetting bearer [ 918.075272][T12809] tipc: Resetting bearer [ 918.151371][T12809] tipc: Disabling bearer [ 918.436470][T12817] tipc: Enabled bearer , priority 10 [ 918.644627][T12817] tipc: Resetting bearer [ 918.746139][T12815] tipc: Resetting bearer [ 918.788009][ T5859] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 918.939004][T12815] tipc: Disabling bearer [ 919.111706][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 919.123459][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 919.136121][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 919.171806][ T5859] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 919.181493][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.190241][ T5859] usb 3-1: Product: syz [ 919.194711][ T5859] usb 3-1: Manufacturer: syz [ 919.199830][ T5859] usb 3-1: SerialNumber: syz [ 919.214767][ T5859] usb 3-1: config 0 descriptor?? [ 919.226943][T12821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 919.250880][T12821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 919.295020][ T5859] usb 3-1: ucan: probing device on interface #0 [ 919.373445][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2077'. [ 919.999409][ T5859] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 920.099860][ T5859] usb 3-1: USB disconnect, device number 6 [ 920.261147][T12834] tipc: Enabled bearer , priority 0 [ 920.321509][T12834] tipc: Resetting bearer [ 920.405357][T12831] tipc: Disabling bearer [ 920.580403][T12840] tipc: Enabled bearer , priority 0 [ 920.636099][T12840] syzkaller0: entered promiscuous mode [ 920.642437][T12840] syzkaller0: entered allmulticast mode [ 920.705387][T12840] tipc: Resetting bearer [ 920.718729][T12839] tipc: Resetting bearer [ 920.763770][T12839] tipc: Disabling bearer [ 922.030094][T12855] tipc: Enabled bearer , priority 10 [ 922.281109][T12855] tipc: Resetting bearer [ 922.359781][T12854] tipc: Resetting bearer [ 922.446834][T12861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2090'. [ 922.548957][T12854] tipc: Disabling bearer [ 923.577628][ T5859] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 923.625781][T12875] tipc: Enabled bearer , priority 0 [ 923.686670][T12876] syzkaller0: entered promiscuous mode [ 923.692700][T12876] syzkaller0: entered allmulticast mode [ 923.775364][T12875] tipc: Resetting bearer [ 923.797936][ T5859] usb 6-1: Using ep0 maxpacket: 16 [ 923.826008][T12874] tipc: Resetting bearer [ 923.837629][ T5859] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 923.849672][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 923.900805][T12874] tipc: Disabling bearer [ 923.961484][ T5859] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 923.971109][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.980289][ T5859] usb 6-1: Product: syz [ 923.984764][ T5859] usb 6-1: Manufacturer: syz [ 923.989814][ T5859] usb 6-1: SerialNumber: syz [ 924.064327][ T5859] usb 6-1: config 0 descriptor?? [ 924.128326][ T5859] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 924.138067][ T5859] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 924.174350][T12884] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2100'. [ 924.300794][T12885] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2100'. [ 924.543531][T12884] bond7: entered promiscuous mode [ 924.549159][T12884] bond7: entered allmulticast mode [ 924.556213][T12884] 8021q: adding VLAN 0 to HW filter on device bond7 [ 924.605717][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 924.781856][ T5859] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 924.796979][ T5859] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 925.218547][ T5859] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 925.225836][ T5859] em28xx 6-1:0.0: No AC97 audio processor [ 925.708267][T12899] tipc: Enabled bearer , priority 10 [ 925.884781][T12899] tipc: Resetting bearer [ 925.953309][T12897] tipc: Resetting bearer [ 926.159040][T12897] tipc: Disabling bearer [ 926.276625][T12904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2106'. [ 926.563816][ T5859] usb 6-1: USB disconnect, device number 7 [ 926.572076][ T5859] em28xx 6-1:0.0: Disconnecting em28xx [ 926.649742][ T5859] em28xx 6-1:0.0: Freeing device [ 927.323501][T12917] tipc: Enabled bearer , priority 0 [ 927.352640][ T5859] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 927.365224][T12917] syzkaller0: entered promiscuous mode [ 927.372688][T12917] syzkaller0: entered allmulticast mode [ 927.469051][T12917] tipc: Resetting bearer [ 927.573450][T12916] tipc: Resetting bearer [ 927.588953][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.602013][ T5859] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 927.612494][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.670799][T12916] tipc: Disabling bearer [ 927.740676][ T5859] usb 6-1: config 0 descriptor?? [ 927.801892][T12926] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2114'. [ 928.016872][T12929] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2114'. [ 928.213980][ T5859] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 928.272822][ T5859] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0002/input/input15 [ 928.336710][T12926] bond8: entered promiscuous mode [ 928.342307][T12926] bond8: entered allmulticast mode [ 928.349724][T12926] 8021q: adding VLAN 0 to HW filter on device bond8 [ 928.422520][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 928.456865][ T5859] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 928.511398][ T5859] usb 6-1: USB disconnect, device number 8 [ 929.446561][T12940] fido_id[12940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 929.591014][T12945] tipc: Enabled bearer , priority 0 [ 929.644648][T12946] syzkaller0: entered promiscuous mode [ 929.650764][T12946] syzkaller0: entered allmulticast mode [ 929.730118][T12948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2120'. [ 929.763599][T12945] tipc: Resetting bearer [ 929.870226][T12944] tipc: Resetting bearer [ 929.939469][T12944] tipc: Disabling bearer [ 929.977536][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 930.177554][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 930.223243][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 930.235971][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 930.354611][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 930.364556][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.373399][ T24] usb 6-1: Product: syz [ 930.377933][ T24] usb 6-1: Manufacturer: syz [ 930.382799][ T24] usb 6-1: SerialNumber: syz [ 930.528072][ T24] usb 6-1: config 0 descriptor?? [ 930.598980][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 930.608764][ T24] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 930.849300][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2127'. [ 931.011230][T12959] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2127'. [ 931.020809][T12959] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 931.190185][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 931.208832][ T24] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 931.634047][ T24] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 931.634444][T12970] tipc: Enabled bearer , priority 0 [ 931.641582][ T24] em28xx 6-1:0.0: No AC97 audio processor [ 931.693239][T12974] syzkaller0: entered promiscuous mode [ 931.699336][T12974] syzkaller0: entered allmulticast mode [ 931.874856][T12970] tipc: Resetting bearer [ 932.083840][T12966] syzkaller0: entered promiscuous mode [ 932.089836][T12966] syzkaller0: entered allmulticast mode [ 932.403572][T12969] tipc: Resetting bearer [ 932.460904][T12969] tipc: Disabling bearer [ 933.023459][ T24] usb 6-1: USB disconnect, device number 9 [ 933.031570][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 933.070133][ T24] em28xx 6-1:0.0: Freeing device [ 933.273023][T12985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2134'. [ 933.940695][T12992] tipc: Enabled bearer , priority 0 [ 933.980677][T12992] syzkaller0: entered promiscuous mode [ 933.986488][T12992] syzkaller0: entered allmulticast mode [ 934.079480][T12992] tipc: Resetting bearer [ 934.185137][T12991] tipc: Resetting bearer [ 934.261440][T12991] tipc: Disabling bearer [ 935.482385][T13008] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2144'. [ 935.655598][T13009] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2144'. [ 935.877774][T13008] bond4: entered promiscuous mode [ 935.883145][T13008] bond4: entered allmulticast mode [ 935.890511][T13008] 8021q: adding VLAN 0 to HW filter on device bond4 [ 936.027717][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 936.248692][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 936.537490][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 936.562756][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 936.576067][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 936.636273][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 936.645857][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.654590][ T24] usb 6-1: Product: syz [ 936.659143][ T24] usb 6-1: Manufacturer: syz [ 936.664048][ T24] usb 6-1: SerialNumber: syz [ 936.752509][ T24] usb 6-1: config 0 descriptor?? [ 936.824759][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 936.834694][ T24] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 937.483733][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 937.522075][ T24] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 937.538365][T13030] tipc: Enabled bearer , priority 0 [ 937.563152][T13030] syzkaller0: entered promiscuous mode [ 937.569809][T13030] syzkaller0: entered allmulticast mode [ 937.671296][T13029] tipc: Resetting bearer [ 937.742436][T13029] tipc: Disabling bearer [ 937.978559][ T24] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 937.985858][ T24] em28xx 6-1:0.0: No AC97 audio processor [ 939.043123][T13049] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2160'. [ 939.257627][ T24] usb 6-1: USB disconnect, device number 10 [ 939.265796][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 939.297912][T13050] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2160'. [ 939.349813][ T24] em28xx 6-1:0.0: Freeing device [ 939.513098][T13049] bond4: entered promiscuous mode [ 939.518642][T13049] bond4: entered allmulticast mode [ 939.525601][T13049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 939.635054][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2160'. [ 941.470513][T13077] tipc: Enabled bearer , priority 0 [ 941.561881][T13076] syzkaller0: entered promiscuous mode [ 941.568218][T13076] syzkaller0: entered allmulticast mode [ 941.581689][ T5859] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 941.688619][T13074] tipc: Resetting bearer [ 941.742397][T13074] tipc: Disabling bearer [ 941.800788][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 941.812116][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 941.824180][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 942.093678][ T5859] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 942.104892][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.114007][ T5859] usb 3-1: Product: syz [ 942.118833][ T5859] usb 3-1: Manufacturer: syz [ 942.123726][ T5859] usb 3-1: SerialNumber: syz [ 942.261546][ T5859] usb 3-1: config 0 descriptor?? [ 942.278126][T13075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 942.290018][T13075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 942.325262][ T5859] usb 3-1: ucan: probing device on interface #0 [ 942.368089][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 942.590346][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 942.624039][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 942.636401][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 942.777075][ T5859] usb 3-1: ucan: failed to retrieve device info [ 942.784207][ T5859] usb 3-1: ucan: probe failed; try to update the device firmware [ 942.832515][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 942.843394][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.852004][ T24] usb 4-1: Product: syz [ 942.856458][ T24] usb 4-1: Manufacturer: syz [ 942.861566][ T24] usb 4-1: SerialNumber: syz [ 942.924131][ T5859] usb 3-1: USB disconnect, device number 7 [ 942.953846][ T24] usb 4-1: config 0 descriptor?? [ 943.016025][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 943.027751][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 943.169516][T13092] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2176'. [ 943.423197][T13094] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2176'. [ 943.616109][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 943.631035][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 943.642467][T13092] bond6: entered promiscuous mode [ 943.648215][T13092] bond6: entered allmulticast mode [ 943.655211][T13092] 8021q: adding VLAN 0 to HW filter on device bond6 [ 943.827715][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2176'. [ 943.901221][ T30] audit: type=1800 audit(1753832883.456:2): pid=13100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2178" name="/" dev="9p" ino=2 res=0 errno=0 [ 944.100336][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 944.112996][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 945.183017][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 945.186758][ T5865] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 945.394740][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 945.399691][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.411646][ T24] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 945.421195][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.427977][ T5859] usb 4-1: USB disconnect, device number 4 [ 945.440460][ T5859] em28xx 4-1:0.0: Disconnecting em28xx [ 945.470384][ T5865] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 945.479631][ T5865] usb 6-1: config 0 has no interface number 0 [ 945.518501][ T5859] em28xx 4-1:0.0: Freeing device [ 945.573445][ T24] usb 7-1: config 0 descriptor?? [ 945.596954][T13116] tipc: Enabled bearer , priority 0 [ 945.605868][ T5865] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 945.615958][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.624386][ T5865] usb 6-1: Product: syz [ 945.629157][ T5865] usb 6-1: Manufacturer: syz [ 945.634106][ T5865] usb 6-1: SerialNumber: syz [ 945.696273][T13114] tipc: Disabling bearer [ 945.760805][ T5865] usb 6-1: config 0 descriptor?? [ 945.797768][ T5865] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 945.806919][ T5865] usb 6-1: selecting invalid altsetting 1 [ 945.815740][ T5865] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 945.866590][ T5865] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 945.878879][ T5865] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 945.888439][ T5865] usb 6-1: media controller created [ 946.138204][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 946.141905][ T24] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 946.290151][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0003/input/input16 [ 946.691265][ T24] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 946.928882][ T24] usb 7-1: USB disconnect, device number 2 [ 947.059453][T13113] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 947.106393][ T5865] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 947.115598][ T5865] zl10353_read_register: readreg error (reg=127, ret==-71) [ 947.221663][ T5865] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 947.724054][T13127] fido_id[13127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 948.017115][ T5865] usb 6-1: USB disconnect, device number 11 [ 948.166340][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2191'. [ 948.467989][ T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 948.488880][T13136] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2191'. [ 948.499663][T13136] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 948.580266][T13140] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2193'. [ 948.688478][ T24] usb 7-1: device descriptor read/64, error -71 [ 948.798978][T13143] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2193'. [ 948.924347][ T5865] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 948.961135][T13140] bond7: entered promiscuous mode [ 948.966523][T13140] bond7: entered allmulticast mode [ 948.973759][T13140] 8021q: adding VLAN 0 to HW filter on device bond7 [ 948.986644][ T24] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 948.990360][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2193'. [ 949.128822][ T24] usb 7-1: device descriptor read/64, error -71 [ 949.157678][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 949.182731][ T5865] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 949.193140][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.319936][ T24] usb usb7-port1: attempt power cycle [ 949.370652][ T5865] usb 1-1: config 0 descriptor?? [ 949.387943][T12470] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 949.589592][T12470] usb 3-1: Using ep0 maxpacket: 16 [ 949.634001][T12470] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 949.646905][T12470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 949.689764][ T5865] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 949.733691][ T5865] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 949.746592][T12470] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 949.756569][T12470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.765166][T12470] usb 3-1: Product: syz [ 949.770046][T12470] usb 3-1: Manufacturer: syz [ 949.774948][T12470] usb 3-1: SerialNumber: syz [ 949.787815][ T24] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 949.809433][ T5865] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 949.817077][ T5865] usb 1-1: media controller created [ 949.845046][ T24] usb 7-1: device descriptor read/8, error -71 [ 949.882014][T12470] usb 3-1: config 0 descriptor?? [ 949.921251][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 949.989147][T12470] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 949.998979][T12470] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 950.145648][ T24] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 950.220147][ T24] usb 7-1: device descriptor read/8, error -71 [ 950.254472][ T5865] az6027: usb out operation failed. (-71) [ 950.314823][ T5865] az6027: usb out operation failed. (-71) [ 950.321170][ T5865] stb0899_attach: Driver disabled by Kconfig [ 950.328648][ T5865] az6027: no front-end attached [ 950.328648][ T5865] [ 950.339976][ T24] usb usb7-port1: unable to enumerate USB device [ 950.364920][ T5865] az6027: usb out operation failed. (-71) [ 950.371348][ T5865] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 950.383013][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 950.421760][T13156] tipc: Enabled bearer , priority 0 [ 950.509302][ T5865] dvb-usb: schedule remote query interval to 400 msecs. [ 950.516859][ T5865] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 950.563868][T12470] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 950.609313][T12470] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 950.648086][T12470] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 950.654197][T13155] tipc: Disabling bearer [ 950.655532][T12470] em28xx 3-1:0.0: No AC97 audio processor [ 950.665350][ T5865] usb 1-1: USB disconnect, device number 6 [ 951.331655][ T5865] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 951.996653][T12470] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 952.214889][T12470] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.226444][T12470] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 952.237040][T12470] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.376157][T12470] usb 7-1: config 0 descriptor?? [ 952.391141][ T5865] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 952.567426][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 952.583701][ T5866] usb 3-1: USB disconnect, device number 8 [ 952.614974][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 952.623301][ T5866] em28xx 3-1:0.0: Disconnecting em28xx [ 952.626509][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 952.644271][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 952.670155][ T5866] em28xx 3-1:0.0: Freeing device [ 952.764473][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 952.803706][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 952.812718][ T24] usb 1-1: config 0 has no interface number 0 [ 952.833605][T12470] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 952.863499][ T5865] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 952.873249][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.882032][ T5865] usb 4-1: Product: syz [ 952.886491][ T5865] usb 4-1: Manufacturer: syz [ 952.891574][ T5865] usb 4-1: SerialNumber: syz [ 952.912578][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 952.922503][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.931074][ T24] usb 1-1: Product: syz [ 952.935505][ T24] usb 1-1: Manufacturer: syz [ 952.940623][ T24] usb 1-1: SerialNumber: syz [ 952.966079][T12470] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0004/input/input18 [ 953.034323][ T5865] usb 4-1: config 0 descriptor?? [ 953.055268][T13178] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 953.112410][T13178] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 953.122003][ T24] usb 1-1: config 0 descriptor?? [ 953.267654][ T5865] usb 4-1: ucan: probing device on interface #0 [ 953.308275][ T24] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 953.318440][ T24] usb 1-1: selecting invalid altsetting 1 [ 953.325754][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 953.383585][T12470] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 953.505573][ T5865] usb 4-1: ucan: could not read protocol version, ret=27 [ 953.508401][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 953.513493][ T5865] usb 4-1: ucan: probe failed; try to update the device firmware [ 953.525126][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 953.541314][ T24] usb 1-1: media controller created [ 953.613298][ T5859] usb 7-1: USB disconnect, device number 7 [ 953.691040][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 953.794256][T13186] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2206'. [ 953.803982][T13186] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 953.813650][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 953.860246][T12470] usb 4-1: USB disconnect, device number 5 [ 954.331229][T13187] fido_id[13187]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 954.348338][ T24] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 954.355717][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 954.429990][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 955.064663][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2209'. [ 955.337894][T13197] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2208'. [ 955.718152][ T24] usb 1-1: USB disconnect, device number 7 [ 955.897516][T13201] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2208'. [ 956.093502][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 956.176988][T13197] bond1: entered promiscuous mode [ 956.184075][T13197] bond1: entered allmulticast mode [ 956.191584][T13197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 957.058654][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 957.238836][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 957.263169][ T24] usb 4-1: too many configurations: 97, using maximum allowed: 8 [ 957.297524][ T24] usb 4-1: config 6 has an invalid interface number: 43 but max is 0 [ 957.306130][ T24] usb 4-1: config 6 has no interface number 0 [ 957.309312][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2219'. [ 957.356268][ T24] usb 4-1: config 6 has an invalid interface number: 43 but max is 0 [ 957.358623][T13223] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2219'. [ 957.364990][ T24] usb 4-1: config 6 has no interface number 0 [ 957.374321][T13223] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 957.434730][ T24] usb 4-1: config 6 has an invalid interface number: 43 but max is 0 [ 957.444271][ T24] usb 4-1: config 6 has no interface number 0 [ 957.451763][ T5859] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 957.466382][ T24] usb 4-1: config 6 has an invalid interface number: 43 but max is 0 [ 957.475032][ T24] usb 4-1: config 6 has no interface number 0 [ 957.500600][ T24] usb 4-1: config 6 has an invalid interface number: 43 but max is 0 [ 957.509883][ T24] usb 4-1: config 6 has no interface number 0 [ 957.547912][ T24] usb 4-1: config 6 has an invalid interface number: 43 but max is 0 [ 957.556657][ T24] usb 4-1: config 6 has no interface number 0 [ 957.609639][ T24] usb 4-1: config 6 has an invalid interface number: 43 but max is 0 [ 957.618519][ T24] usb 4-1: config 6 has no interface number 0 [ 957.630136][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 957.653965][ T5859] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 957.663133][ T24] usb 4-1: config 6 has an invalid interface number: 43 but max is 0 [ 957.663286][ T24] usb 4-1: config 6 has no interface number 0 [ 957.678747][ T5859] usb 3-1: config 0 has no interface number 0 [ 957.745276][ T24] usb 4-1: string descriptor 0 read error: -71 [ 957.752813][ T24] usb 4-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 957.762702][ T24] usb 4-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 957.787696][ T24] usb 4-1: rejected 8 configurations due to insufficient available bus power [ 957.796974][ T24] usb 4-1: no configuration chosen from 8 choices [ 957.860551][ T5859] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 957.870896][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.883599][ T5859] usb 3-1: Product: syz [ 957.888237][ T5859] usb 3-1: Manufacturer: syz [ 957.893125][ T5859] usb 3-1: SerialNumber: syz [ 957.913310][ T24] usb 4-1: USB disconnect, device number 6 [ 958.046299][ T5859] usb 3-1: config 0 descriptor?? [ 958.100668][ T5859] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 958.110222][ T5859] usb 3-1: selecting invalid altsetting 1 [ 958.116272][ T5859] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 958.178420][ T5859] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 958.190271][ T5859] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 958.199161][ T5859] usb 3-1: media controller created [ 958.217719][ T5865] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 958.365739][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 958.533819][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.545874][ T5865] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 958.555590][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.375024][T13221] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 959.527965][ T5865] usb 1-1: config 0 descriptor?? [ 959.570172][ T5859] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 959.579848][ T5859] zl10353_read_register: readreg error (reg=127, ret==-71) [ 959.590485][ T5859] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 959.951035][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2223'. [ 959.960957][ T5865] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 960.069043][ T5865] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input19 [ 960.129194][ T5859] usb 3-1: USB disconnect, device number 9 [ 960.429771][ T5865] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 960.656965][ T5865] usb 1-1: USB disconnect, device number 8 [ 961.240796][T13245] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2227'. [ 961.370044][T13246] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2227'. [ 961.411728][T13241] fido_id[13241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 961.653816][T13245] bond5: entered promiscuous mode [ 961.660724][T13245] bond5: entered allmulticast mode [ 961.667862][T13245] 8021q: adding VLAN 0 to HW filter on device bond5 [ 961.702782][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 962.218394][T13262] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 962.225289][T13262] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 962.234550][T13262] vhci_hcd vhci_hcd.0: Device attached [ 962.439157][ T5865] vhci_hcd: vhci_device speed not set [ 962.547732][ T5865] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 962.638970][ T5859] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 962.896184][ T5859] usb 3-1: config 0 has no interfaces? [ 962.902413][ T5859] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 962.912045][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.992865][ T5859] usb 3-1: config 0 descriptor?? [ 963.038606][T13269] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2234'. [ 963.049158][T13269] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2234'. [ 963.059268][T13269] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2234'. [ 963.439368][T12470] usb 3-1: USB disconnect, device number 10 [ 963.460855][T13263] vhci_hcd: unknown pdu 1 [ 963.508678][ T4280] vhci_hcd: stop threads [ 963.513227][ T4280] vhci_hcd: release socket [ 963.518192][ T4280] vhci_hcd: disconnect device [ 963.838657][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 964.029683][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 964.122412][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 964.130903][ T24] usb 6-1: config 0 has no interface number 0 [ 964.157672][ T5865] vhci_hcd: vhci_device speed not set [ 964.292655][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 964.303084][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.311775][ T24] usb 6-1: Product: syz [ 964.316216][ T24] usb 6-1: Manufacturer: syz [ 964.322281][ T24] usb 6-1: SerialNumber: syz [ 964.458207][ T24] usb 6-1: config 0 descriptor?? [ 964.486075][ T24] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 964.495655][ T24] usb 6-1: selecting invalid altsetting 1 [ 964.501930][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 964.570152][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 964.581601][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 964.590377][ T24] usb 6-1: media controller created [ 964.615499][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2238'. [ 964.648727][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 964.776988][ T24] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 964.785899][ T24] zl10353_read_register: readreg error (reg=127, ret==-32) [ 964.805655][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 965.458783][ T24] usb 6-1: USB disconnect, device number 12 [ 966.148041][ T5865] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 966.335360][ T5865] usb 1-1: device descriptor read/64, error -71 [ 966.391430][T13303] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2247'. [ 966.401449][T13303] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2247'. [ 966.411514][T13303] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2247'. [ 966.584853][ T5865] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 966.758167][ T5865] usb 1-1: device descriptor read/64, error -71 [ 966.880220][ T5865] usb usb1-port1: attempt power cycle [ 967.257536][ T5865] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 967.295026][ T5865] usb 1-1: device descriptor read/8, error -71 [ 967.336628][ T24] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 967.505756][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 967.747303][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 967.756103][ T24] usb 7-1: config 0 has no interface number 0 [ 967.763292][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 967.774726][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 967.787207][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 967.788501][ T5865] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 967.798592][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 967.798772][ T24] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 967.832889][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 967.842499][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.861205][ T5865] usb 1-1: device descriptor read/8, error -71 [ 967.883634][ T24] usb 7-1: config 0 descriptor?? [ 967.909757][T13308] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 967.985276][ T5865] usb usb1-port1: unable to enumerate USB device [ 968.003877][ T24] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 969.608784][ T5859] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 969.705297][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2254'. [ 969.861727][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 969.904932][ T5859] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 969.913712][ T5859] usb 3-1: config 0 has no interface number 0 [ 970.056269][ T24] usb 7-1: USB disconnect, device number 8 [ 970.065331][ T5859] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 970.076045][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.085708][ T5859] usb 3-1: Product: syz [ 970.091513][ T5859] usb 3-1: Manufacturer: syz [ 970.092628][ T24] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 970.096304][ T5859] usb 3-1: SerialNumber: syz [ 970.247793][ T5859] usb 3-1: config 0 descriptor?? [ 970.318666][ T5859] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 970.328058][ T5859] usb 3-1: selecting invalid altsetting 1 [ 970.334142][ T5859] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 970.421200][ T5859] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 970.433382][ T5859] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 970.442232][ T5859] usb 3-1: media controller created [ 970.618964][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 971.019292][ T5859] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 971.026998][ T5859] zl10353_read_register: readreg error (reg=127, ret==-32) [ 971.085615][ T5859] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 971.618561][ T5859] usb 3-1: USB disconnect, device number 11 [ 972.607843][ T5859] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 972.771651][ T5859] usb 4-1: device descriptor read/64, error -71 [ 973.037587][ T5859] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 973.238913][ T5859] usb 4-1: device descriptor read/64, error -71 [ 973.364055][ T5859] usb usb4-port1: attempt power cycle [ 973.469690][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2270'. [ 973.772608][ T5859] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 973.832559][ T5859] usb 4-1: device descriptor read/8, error -71 [ 974.098245][ T5859] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 974.152703][ T5859] usb 4-1: device descriptor read/8, error -71 [ 974.273428][ T5859] usb usb4-port1: unable to enumerate USB device [ 975.498923][ T5859] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 975.698318][ T5859] usb 6-1: Using ep0 maxpacket: 16 [ 975.735020][ T5859] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 975.747378][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 975.805876][ T5859] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 975.816618][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.825177][ T5859] usb 6-1: Product: syz [ 975.829864][ T5859] usb 6-1: Manufacturer: syz [ 975.834754][ T5859] usb 6-1: SerialNumber: syz [ 975.970733][ T5859] usb 6-1: config 0 descriptor?? [ 976.009051][ T5859] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 976.018958][ T5859] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 976.216390][T13405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2283'. [ 976.651170][ T5859] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 976.667108][ T5859] em28xx 6-1:0.0: Config register raw data: 0x00 [ 978.422541][ T24] usb 6-1: USB disconnect, device number 13 [ 978.438566][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 978.476907][ T24] em28xx 6-1:0.0: Freeing device [ 979.169219][ T5859] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 979.193316][T13440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2294'. [ 979.348448][ T5859] usb 6-1: device descriptor read/64, error -71 [ 979.608290][ T5859] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 979.788886][ T5859] usb 6-1: device descriptor read/64, error -71 [ 979.931605][ T5859] usb usb6-port1: attempt power cycle [ 980.306372][ T5859] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 980.385287][ T5859] usb 6-1: device descriptor read/8, error -71 [ 980.597525][ T5865] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 980.637562][ T5859] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 980.681554][ T5859] usb 6-1: device descriptor read/8, error -71 [ 980.718297][T13461] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 980.775659][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 980.790828][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 980.803232][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 980.829254][ T5859] usb usb6-port1: unable to enumerate USB device [ 980.861381][ T5865] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 980.871443][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.880093][ T5865] usb 3-1: Product: syz [ 980.884540][ T5865] usb 3-1: Manufacturer: syz [ 980.889621][ T5865] usb 3-1: SerialNumber: syz [ 980.916992][ T5865] usb 3-1: config 0 descriptor?? [ 980.969470][ T5865] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 980.979307][ T5865] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 981.572182][ T5865] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 981.590969][ T5865] em28xx 3-1:0.0: Config register raw data: 0x00 [ 981.824337][T13476] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2307'. [ 981.859054][T13478] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2308'. [ 982.451430][T13483] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2309'. [ 983.310061][T13498] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.2313'. [ 983.380598][T13502] Bluetooth: Invalid esc byte 0x0d [ 983.558004][ T24] usb 3-1: USB disconnect, device number 12 [ 983.567917][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 983.658320][ T24] em28xx 3-1:0.0: Freeing device [ 983.959943][T13506] netlink: 'syz.5.2317': attribute type 2 has an invalid length. [ 983.968546][T13506] netlink: 'syz.5.2317': attribute type 1 has an invalid length. [ 984.089618][T13510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2319'. [ 984.114267][T13506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 984.149951][T13514] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2320'. [ 985.839223][ T5865] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 985.905960][T13534] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2328'. [ 986.078869][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.091028][ T5865] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 986.100670][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.201082][ T5865] usb 3-1: config 0 descriptor?? [ 986.656673][ T5865] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 986.689054][T13544] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2332'. [ 986.723425][ T5865] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input20 [ 986.834419][T13546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2333'. [ 987.119630][ T5865] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 987.345735][ T24] usb 3-1: USB disconnect, device number 13 [ 987.583873][ T5988] udevd[5988]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 987.643264][T13549] netlink: 'syz.3.2334': attribute type 2 has an invalid length. [ 987.651830][T13549] netlink: 'syz.3.2334': attribute type 1 has an invalid length. [ 987.903464][T13547] fido_id[13547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 987.959381][T13549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 989.419880][T13570] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.2342'. [ 990.125617][T13582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2346'. [ 990.218611][T13584] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2348'. [ 990.384425][T13587] netlink: 'syz.0.2350': attribute type 2 has an invalid length. [ 990.392854][T13587] netlink: 'syz.0.2350': attribute type 1 has an invalid length. [ 990.649121][T13587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 992.578792][T13620] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2361'. [ 992.668921][T13624] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2362'. [ 993.208297][T13630] netlink: 'syz.2.2365': attribute type 2 has an invalid length. [ 993.216524][T13630] netlink: 'syz.2.2365': attribute type 1 has an invalid length. [ 993.345673][T13630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 993.539977][T13636] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2367'. [ 994.109735][T13643] syzkaller0: entered promiscuous mode [ 994.115581][T13643] syzkaller0: entered allmulticast mode [ 994.944072][T13654] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2375'. [ 995.794391][T13668] netlink: 'syz.2.2381': attribute type 2 has an invalid length. [ 995.807064][T13668] netlink: 'syz.2.2381': attribute type 1 has an invalid length. [ 995.923593][T13668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 996.040151][T13675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2382'. [ 996.869591][T13688] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2389'. [ 997.757435][ T24] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 998.106377][ T24] usb 6-1: config 0 has no interfaces? [ 998.109564][T13702] netlink: 'syz.3.2395': attribute type 2 has an invalid length. [ 998.113867][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 998.120909][T13702] netlink: 'syz.3.2395': attribute type 1 has an invalid length. [ 998.130107][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.262028][ T24] usb 6-1: config 0 descriptor?? [ 998.311770][T13702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 998.523346][ T24] usb 6-1: USB disconnect, device number 18 [ 999.014504][T13710] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 999.592531][T13718] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2401'. [ 1000.263375][T13726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2405'. [ 1000.889488][T13732] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2407'. [ 1000.972222][T13735] netlink: 'syz.6.2409': attribute type 2 has an invalid length. [ 1000.984275][T13735] netlink: 'syz.6.2409': attribute type 1 has an invalid length. [ 1001.069109][T13735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1001.757686][T13742] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1001.764596][T13742] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1001.772979][T13742] vhci_hcd vhci_hcd.0: Device attached [ 1001.910040][T13743] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1001.918895][T13747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2413'. [ 1001.922256][ T3812] vhci_hcd: stop threads [ 1001.932852][ T3812] vhci_hcd: release socket [ 1001.937940][ T3812] vhci_hcd: disconnect device [ 1002.017667][ T24] vhci_hcd: vhci_device speed not set [ 1002.761807][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 1002.851152][T13760] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2417'. [ 1002.862721][T13760] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1003.257763][T13766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2420'. [ 1003.692472][T13769] netlink: 'syz.3.2421': attribute type 2 has an invalid length. [ 1003.701869][T13769] netlink: 'syz.3.2421': attribute type 1 has an invalid length. [ 1003.796118][T13769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1004.275808][T13783] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2426'. [ 1004.818562][T13789] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1004.825440][T13789] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1004.833901][T13789] vhci_hcd vhci_hcd.0: Device attached [ 1004.894864][T13790] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1004.908650][ T3663] vhci_hcd: stop threads [ 1004.913167][ T3663] vhci_hcd: release socket [ 1004.918178][ T3663] vhci_hcd: disconnect device [ 1005.634442][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'. [ 1005.745000][T13801] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2431'. [ 1005.756464][T13801] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1006.340585][T13811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2435'. [ 1006.541172][T13815] netlink: 'syz.0.2437': attribute type 2 has an invalid length. [ 1006.549480][T13815] netlink: 'syz.0.2437': attribute type 1 has an invalid length. [ 1006.584339][T13815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1007.116293][T13819] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2439'. [ 1007.303039][T13823] syzkaller0: entered promiscuous mode [ 1007.309288][T13823] syzkaller0: entered allmulticast mode [ 1007.994251][ T5865] IPVS: starting estimator thread 0... [ 1008.107951][T13831] IPVS: using max 192 ests per chain, 9600 per kthread [ 1008.591888][T13840] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1008.598782][T13840] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1008.607669][T13840] vhci_hcd vhci_hcd.0: Device attached [ 1008.691686][T13842] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 1008.710652][ T4280] vhci_hcd: stop threads [ 1008.715153][ T4280] vhci_hcd: release socket [ 1008.720291][ T4280] vhci_hcd: disconnect device [ 1008.730416][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 1008.830752][T13841] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2446'. [ 1008.840552][T13841] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1009.906701][T13851] tipc: Enabled bearer , priority 0 [ 1009.992180][T13854] syzkaller0: entered promiscuous mode [ 1009.998657][T13854] syzkaller0: entered allmulticast mode [ 1010.095078][T13851] tipc: Resetting bearer [ 1010.139292][T13850] tipc: Resetting bearer [ 1010.169339][ T24] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1010.232774][T13850] tipc: Disabling bearer [ 1010.329144][T13862] syzkaller0: entered promiscuous mode [ 1010.335055][T13862] syzkaller0: entered allmulticast mode [ 1010.430278][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1010.440214][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.448753][ T24] usb 7-1: Product: syz [ 1010.453226][ T24] usb 7-1: Manufacturer: syz [ 1010.458228][ T24] usb 7-1: SerialNumber: syz [ 1010.496562][ T24] usb 7-1: config 0 descriptor?? [ 1010.769482][ T24] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1011.248213][ T5865] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1011.449320][ T5865] usb 3-1: device descriptor read/64, error -71 [ 1011.698645][ T5865] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1011.897965][ T5865] usb 3-1: device descriptor read/64, error -71 [ 1012.018180][ T5865] usb usb3-port1: attempt power cycle [ 1012.050413][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2459'. [ 1012.162656][T13877] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2459'. [ 1012.173914][T13877] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1012.258066][ T24] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1012.316816][ T24] usb 7-1: USB disconnect, device number 9 [ 1012.388118][T12470] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1012.436856][ T5865] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1012.482662][ T5865] usb 3-1: device descriptor read/8, error -71 [ 1012.571439][T12470] usb 1-1: Using ep0 maxpacket: 16 [ 1012.598125][T12470] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 1012.598278][T12470] usb 1-1: config 8 has no interface number 0 [ 1012.598416][T12470] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1012.598584][T12470] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1012.598743][T12470] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1012.598980][T12470] usb 1-1: config 8 interface 39 has no altsetting 0 [ 1012.635541][T12470] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1012.635717][T12470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.635859][T12470] usb 1-1: Product: syz [ 1012.635967][T12470] usb 1-1: Manufacturer: syz [ 1012.636079][T12470] usb 1-1: SerialNumber: syz [ 1012.988082][ T5865] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1013.033874][ T5865] usb 3-1: device descriptor read/8, error -71 [ 1013.164735][T12470] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 1013.166355][ T5865] usb usb3-port1: unable to enumerate USB device [ 1013.175756][T12470] ipheth 1-1:8.39: probe with driver ipheth failed with error -22 [ 1013.428096][T12470] usb 1-1: USB disconnect, device number 13 [ 1015.760258][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2472'. [ 1015.891241][T13916] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2472'. [ 1015.900817][T13916] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1017.220699][T13935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1017.267320][ T5865] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1017.467646][ T5865] usb 7-1: device descriptor read/64, error -71 [ 1017.511902][ T5859] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1017.689635][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 1017.710631][ T5865] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1017.747835][ T5859] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 1017.756421][ T5859] usb 3-1: config 8 has no interface number 0 [ 1017.763017][ T5859] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1017.775686][ T5859] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1017.786000][ T5859] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1017.796457][ T5859] usb 3-1: config 8 interface 39 has no altsetting 0 [ 1017.872522][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2480'. [ 1017.937854][ T5865] usb 7-1: device descriptor read/64, error -71 [ 1017.970034][ T5859] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1017.980366][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.988903][ T5859] usb 3-1: Product: syz [ 1017.993366][ T5859] usb 3-1: Manufacturer: syz [ 1017.998431][ T5859] usb 3-1: SerialNumber: syz [ 1018.053775][ T5865] usb usb7-port1: attempt power cycle [ 1018.457778][ T5865] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1018.474443][ T5859] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1018.483071][ T5859] ipheth 3-1:8.39: probe with driver ipheth failed with error -71 [ 1018.557712][ T5865] usb 7-1: device descriptor read/8, error -71 [ 1018.598970][ T5859] usb 3-1: USB disconnect, device number 18 [ 1018.837706][ T5865] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1018.902636][ T5865] usb 7-1: device descriptor read/8, error -71 [ 1019.026615][ T5865] usb usb7-port1: unable to enumerate USB device [ 1020.409539][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 1020.419262][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'. [ 1021.115118][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2493'. [ 1021.197890][T13979] dummy0: entered promiscuous mode [ 1021.203624][T13979] macvtap10: entered promiscuous mode [ 1021.210615][T13979] macvtap10: entered allmulticast mode [ 1021.216365][T13979] dummy0: entered allmulticast mode [ 1022.922888][T12470] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1023.117528][T12470] usb 6-1: device descriptor read/64, error -71 [ 1023.369169][T12470] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1023.517944][T12470] usb 6-1: device descriptor read/64, error -71 [ 1023.636444][T12470] usb usb6-port1: attempt power cycle [ 1023.724617][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2504'. [ 1023.734205][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2504'. [ 1024.019479][T12470] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1024.072718][T12470] usb 6-1: device descriptor read/8, error -71 [ 1024.188164][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1024.322996][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2507'. [ 1024.347693][T12470] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1024.376768][T14017] macvtap11: entered promiscuous mode [ 1024.383821][T14017] macvtap11: entered allmulticast mode [ 1024.398278][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1024.411291][T12470] usb 6-1: device descriptor read/8, error -71 [ 1024.425372][ T24] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 1024.435325][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.446243][ T24] usb 3-1: config 0 has no interface number 0 [ 1024.452901][ T24] usb 3-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1024.465636][ T24] usb 3-1: config 0 interface 74 has no altsetting 0 [ 1024.529001][T12470] usb usb6-port1: unable to enumerate USB device [ 1024.553003][ T24] usb 3-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 1024.563191][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.571681][ T24] usb 3-1: Product: syz [ 1024.576155][ T24] usb 3-1: Manufacturer: syz [ 1024.581282][ T24] usb 3-1: SerialNumber: syz [ 1024.650980][ T24] usb 3-1: config 0 descriptor?? [ 1024.676396][ T24] em28xx 3-1:0.74: New device syz syz @ 480 Mbps (1ae7:9003, interface 74, class 74) [ 1024.686471][ T24] em28xx 3-1:0.74: Video interface 74 found: [ 1024.959721][ T24] em28xx 3-1:0.74: unknown em28xx chip ID (0) [ 1025.068535][ T24] em28xx 3-1:0.74: reading from i2c device at 0xa0 failed (error=-5) [ 1025.077015][ T24] em28xx 3-1:0.74: board has no eeprom [ 1025.147874][ T24] em28xx 3-1:0.74: writing to i2c device at 0xb8 failed (error=-5) [ 1025.156376][ T24] em28xx 3-1:0.74: couldn't read from i2c device 0xb8: error -5 [ 1025.192726][ T24] em28xx 3-1:0.74: writing to i2c device at 0xba failed (error=-5) [ 1025.201425][ T24] em28xx 3-1:0.74: couldn't read from i2c device 0xba: error -5 [ 1025.278221][ T24] em28xx 3-1:0.74: writing to i2c device at 0x90 failed (error=-5) [ 1025.286705][ T24] em28xx 3-1:0.74: couldn't read from i2c device 0x90: error -5 [ 1025.338061][ T24] em28xx 3-1:0.74: writing to i2c device at 0x42 failed (error=-5) [ 1025.348590][ T24] em28xx 3-1:0.74: couldn't read from i2c device 0x42: error -5 [ 1025.359807][ T24] em28xx 3-1:0.74: writing to i2c device at 0x60 failed (error=-5) [ 1025.368144][ T24] em28xx 3-1:0.74: couldn't read from i2c device 0x60: error -5 [ 1025.376111][ T24] em28xx 3-1:0.74: No sensor detected [ 1025.559195][ T24] em28xx 3-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91) [ 1025.570977][ T24] em28xx 3-1:0.74: Currently, V4L2 is not supported on this model [ 1025.581819][T12470] em28xx 3-1:0.74: Registering snapshot button... [ 1025.591568][T12470] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.74/input/input21 [ 1025.648733][T12470] em28xx 3-1:0.74: Remote control support is not available for this card. [ 1025.718826][ T24] usb 3-1: USB disconnect, device number 19 [ 1025.761826][ T24] em28xx 3-1:0.74: Disconnecting em28xx [ 1025.768211][ T24] em28xx 3-1:0.74: Closing input extension [ 1025.774330][ T24] em28xx 3-1:0.74: Deregistering snapshot button [ 1025.973701][ T24] em28xx 3-1:0.74: Freeing device [ 1026.237579][T12470] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1026.487424][T12470] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.498474][T12470] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1026.508131][T12470] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1026.517639][T12470] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.701696][T12470] usb 7-1: config 0 descriptor?? [ 1026.977027][T12470] usb 7-1: USB disconnect, device number 14 [ 1027.163444][T14046] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2519'. [ 1028.567553][ T5865] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1028.601342][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'. [ 1028.652393][T14068] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2529'. [ 1028.662170][T14068] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1028.782214][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.794986][ T5865] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1028.895719][ T5865] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1028.905386][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.914504][ T5865] usb 4-1: Product: syz [ 1028.919024][ T5865] usb 4-1: Manufacturer: syz [ 1028.923903][ T5865] usb 4-1: SerialNumber: syz [ 1028.939347][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1029.081163][ T5865] usb 4-1: config 0 descriptor?? [ 1029.594150][T14082] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2533'. [ 1030.528546][ T5865] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1030.757824][ T5865] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.768950][ T5865] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1030.779049][ T5865] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1030.789358][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.899868][ T5865] usb 6-1: config 0 descriptor?? [ 1031.148052][T12470] usb 6-1: USB disconnect, device number 23 [ 1031.528067][ T5865] usb 4-1: USB disconnect, device number 11 [ 1031.956454][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1032.064743][T14103] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1032.075032][T14103] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1032.358803][T14111] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2545'. [ 1033.987909][ T5865] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1034.231725][ T5865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.242876][ T5865] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1034.336135][ T5865] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1034.347384][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.355704][ T5865] usb 7-1: Product: syz [ 1034.360423][ T5865] usb 7-1: Manufacturer: syz [ 1034.365850][ T5865] usb 7-1: SerialNumber: syz [ 1034.413202][ T5865] usb 7-1: config 0 descriptor?? [ 1034.507482][ T5859] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1034.678937][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.689604][ T5859] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1034.699193][ T5859] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1034.708860][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.823387][ T5859] usb 4-1: config 0 descriptor?? [ 1035.070151][T12470] usb 4-1: USB disconnect, device number 12 [ 1035.343420][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2557'. [ 1035.378970][T14147] kAFS: No cell specified [ 1035.421914][T14143] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2557'. [ 1035.431812][T14143] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1037.058362][ T24] usb 7-1: USB disconnect, device number 15 [ 1037.648099][T14174] afs: Unknown parameter 'dy' [ 1038.339427][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2572'. [ 1038.399038][T14179] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2572'. [ 1038.408979][T14179] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1039.947786][T13083] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1040.018344][ T24] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1040.128386][T13083] usb 3-1: Using ep0 maxpacket: 32 [ 1040.152811][T13083] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1040.163125][T13083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.230832][T13083] usb 3-1: config 0 descriptor?? [ 1040.236514][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.247339][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1040.296443][ T24] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1040.307422][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.315950][ T24] usb 4-1: Product: syz [ 1040.321258][ T24] usb 4-1: Manufacturer: syz [ 1040.326153][ T24] usb 4-1: SerialNumber: syz [ 1040.411257][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2585'. [ 1040.462046][ T24] usb 4-1: config 0 descriptor?? [ 1040.495162][ T5814] Bluetooth: hci3: Malformed LE Event: 0x1b [ 1040.515822][T13083] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1040.560234][T13083] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1040.570140][T13083] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1040.590335][T14206] macvtap11: entered promiscuous mode [ 1040.597088][T14206] macvtap11: entered allmulticast mode [ 1041.319644][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2589'. [ 1041.385367][T14217] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2589'. [ 1041.395077][T14217] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1043.022707][T14237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2598'. [ 1043.097544][T14237] dummy0: entered promiscuous mode [ 1043.103381][T14237] macvtap5: entered promiscuous mode [ 1043.104348][ T5865] usb 4-1: USB disconnect, device number 13 [ 1043.110395][T14237] macvtap5: entered allmulticast mode [ 1043.121332][T14237] dummy0: entered allmulticast mode [ 1043.242503][ T5859] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1043.463429][ T5859] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.475300][ T5859] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1043.484839][ T5859] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1043.494413][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.560718][ T5859] usb 1-1: config 0 descriptor?? [ 1043.605724][ T5859] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1043.613273][ T5859] dvb-usb: bulk message failed: -22 (3/0) [ 1043.713230][ T5859] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1043.749947][ T5859] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1043.757870][ T5859] usb 1-1: media controller created [ 1043.801645][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1043.849098][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1043.879585][ T5859] dvb-usb: bulk message failed: -22 (6/0) [ 1043.886819][ T5859] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1043.967609][ T5859] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 1044.039355][ T5859] dvb-usb: schedule remote query interval to 150 msecs. [ 1044.046643][ T5859] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1044.109196][ T5859] usb 1-1: USB disconnect, device number 14 [ 1044.115601][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1044.143223][ T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1044.153107][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.239648][ T24] usb 6-1: config 0 descriptor?? [ 1044.281559][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2603'. [ 1044.319154][ T5859] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1044.389026][T14251] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2603'. [ 1044.399391][T14251] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1044.516857][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1045.818442][T14270] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1045.825431][T14270] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1045.835429][T14270] vhci_hcd vhci_hcd.0: Device attached [ 1046.047811][ T5859] vhci_hcd: vhci_device speed not set [ 1046.128465][ T5859] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1046.161573][T14268] tipc: Enabled bearer , priority 0 [ 1046.231936][T14266] tipc: Resetting bearer [ 1046.475742][T14266] tipc: Disabling bearer [ 1046.694909][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 1046.822190][T14282] macvtap5: entered promiscuous mode [ 1046.829233][T14282] macvtap5: entered allmulticast mode [ 1047.796664][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2618'. [ 1047.826551][T12470] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1047.906655][T14294] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2618'. [ 1047.916231][T14294] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1048.083208][T12470] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.094441][T12470] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1048.103950][T12470] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1048.113533][T12470] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.177996][T12470] usb 7-1: config 0 descriptor?? [ 1048.198376][T12470] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1048.205404][T12470] dvb-usb: bulk message failed: -22 (3/0) [ 1048.260679][T12470] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1048.309457][T12470] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1048.317058][T12470] usb 7-1: media controller created [ 1048.356849][T12470] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1048.448997][T12470] dvb-usb: bulk message failed: -22 (6/0) [ 1048.455649][T12470] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1048.573684][T12470] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input23 [ 1048.648467][T12470] dvb-usb: schedule remote query interval to 150 msecs. [ 1048.655760][T12470] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1048.747028][T12470] usb 7-1: USB disconnect, device number 16 [ 1048.917056][T12470] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1049.088600][T14271] vhci_hcd: connection reset by peer [ 1049.095313][ T4280] vhci_hcd: stop threads [ 1049.100460][ T4280] vhci_hcd: release socket [ 1049.105865][ T4280] vhci_hcd: disconnect device [ 1049.969881][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2626'. [ 1050.030691][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2626'. [ 1050.090055][T14313] macvtap6: entered promiscuous mode [ 1050.096734][T14313] macvtap6: entered allmulticast mode [ 1050.872298][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'. [ 1050.919153][T14324] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2630'. [ 1050.930487][T14324] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1051.293345][ T5859] vhci_hcd: vhci_device speed not set [ 1051.537669][ T5865] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1051.670863][T14333] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1051.677752][T14333] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1051.686179][T14333] vhci_hcd vhci_hcd.0: Device attached [ 1051.758304][ T5865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.769710][ T5865] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1051.779385][ T5865] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1051.789041][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.876798][ T5865] usb 7-1: config 0 descriptor?? [ 1051.897895][T12470] vhci_hcd: vhci_device speed not set [ 1051.987723][T12470] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 1052.014170][T11463] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 1052.121023][ T5865] usb 7-1: USB disconnect, device number 17 [ 1052.206004][T11463] usb 1-1: no configurations [ 1052.211394][T11463] usb 1-1: can't read configurations, error -22 [ 1052.377696][T11463] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 1052.589885][T11463] usb 1-1: no configurations [ 1052.594837][T11463] usb 1-1: can't read configurations, error -22 [ 1052.619522][T11463] usb usb1-port1: attempt power cycle [ 1052.998990][T11463] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 1053.053388][T11463] usb 1-1: no configurations [ 1053.058730][T11463] usb 1-1: can't read configurations, error -22 [ 1053.088118][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2640'. [ 1053.166189][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2640'. [ 1053.219256][T14350] macvtap6: entered promiscuous mode [ 1053.225960][T14350] macvtap6: entered allmulticast mode [ 1053.250650][T11463] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 1053.342274][T11463] usb 1-1: no configurations [ 1053.347638][T11463] usb 1-1: can't read configurations, error -22 [ 1053.381452][T11463] usb usb1-port1: unable to enumerate USB device [ 1053.805803][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2643'. [ 1053.865414][T14357] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2643'. [ 1053.875461][T14357] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1054.618461][ T5869] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1054.718722][T14334] vhci_hcd: connection reset by peer [ 1054.757938][ T4280] vhci_hcd: stop threads [ 1054.762482][ T4280] vhci_hcd: release socket [ 1054.768504][ T4280] vhci_hcd: disconnect device [ 1054.820880][T14368] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2647'. [ 1054.830708][T14368] netlink: 'syz.2.2647': attribute type 2 has an invalid length. [ 1054.839145][T14368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2647'. [ 1054.857901][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 1054.920026][ T5869] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1054.929781][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.999586][ T5869] usb 7-1: config 0 descriptor?? [ 1055.259917][ T5869] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1055.417856][T11463] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1055.607693][T11463] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.618675][T11463] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1055.628230][T11463] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1055.637755][T11463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.653047][T11463] usb 1-1: config 0 descriptor?? [ 1055.692558][T11463] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1055.699853][T11463] dvb-usb: bulk message failed: -22 (3/0) [ 1055.723651][T11463] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1055.738728][T11463] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1055.746129][T11463] usb 1-1: media controller created [ 1055.810261][T11463] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1055.870240][T11463] dvb-usb: bulk message failed: -22 (6/0) [ 1055.876904][T11463] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1055.935882][T11463] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 1055.997797][T11463] dvb-usb: schedule remote query interval to 150 msecs. [ 1056.005242][T11463] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1056.109749][T11463] usb 1-1: USB disconnect, device number 19 [ 1056.296974][T11463] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1056.442728][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 1056.518627][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 1056.571287][T14382] macvtap12: entered promiscuous mode [ 1056.578410][T14382] macvtap12: entered allmulticast mode [ 1057.059856][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 1057.105493][T14392] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2656'. [ 1057.115343][T14392] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1057.143290][T12470] vhci_hcd: vhci_device speed not set [ 1057.771096][T14403] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1057.778000][T14403] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1057.786534][T14403] vhci_hcd vhci_hcd.0: Device attached [ 1057.936238][T14408] netlink: 'syz.2.2661': attribute type 2 has an invalid length. [ 1058.087797][T13152] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 1058.098685][T12470] vhci_hcd: vhci_device speed not set [ 1058.193711][T12470] usb 33-1: device descriptor read/64, error -110 [ 1058.290532][T13152] usb 1-1: no configurations [ 1058.295650][T13152] usb 1-1: can't read configurations, error -22 [ 1058.426426][T12470] vhci_hcd: vhci_device speed not set [ 1058.487844][T13152] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 1058.499767][T12470] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 1058.703199][T13152] usb 1-1: no configurations [ 1058.709003][T13152] usb 1-1: can't read configurations, error -22 [ 1058.753557][T13152] usb usb1-port1: attempt power cycle [ 1059.277728][T13152] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 1059.287460][ T5866] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1059.318389][T13152] usb 1-1: no configurations [ 1059.323535][T13152] usb 1-1: can't read configurations, error -22 [ 1059.478262][T14425] __nla_validate_parse: 2 callbacks suppressed [ 1059.478355][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2668'. [ 1059.504178][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2668'. [ 1059.504649][T13152] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 1059.522975][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 1059.549176][ T5866] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1059.560203][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.579134][ T5866] usb 4-1: config 0 descriptor?? [ 1059.592466][T13152] usb 1-1: no configurations [ 1059.598065][T13152] usb 1-1: can't read configurations, error -22 [ 1059.645218][T13152] usb usb1-port1: unable to enumerate USB device [ 1059.803796][ T5866] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1060.439721][T14433] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2672'. [ 1060.449650][T14433] netlink: 'syz.2.2672': attribute type 2 has an invalid length. [ 1060.457901][T14433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2672'. [ 1061.082531][T14404] vhci_hcd: connection reset by peer [ 1061.090421][ T4280] vhci_hcd: stop threads [ 1061.095180][ T4280] vhci_hcd: release socket [ 1061.104105][ T4280] vhci_hcd: disconnect device [ 1063.183740][T13152] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1063.355430][T13152] usb 1-1: Using ep0 maxpacket: 32 [ 1063.371367][T13152] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1063.381330][T13152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.418693][T13152] usb 1-1: config 0 descriptor?? [ 1063.608142][T12470] vhci_hcd: vhci_device speed not set [ 1063.683093][T13152] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1063.714807][T14474] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1063.721701][T14474] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1063.730191][T14474] vhci_hcd vhci_hcd.0: Device attached [ 1063.734630][T13152] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1063.804518][T13152] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1063.814214][T13152] usb 1-1: media controller created [ 1063.885051][T14464] ===================================================== [ 1063.892964][T14464] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1063.900640][T14464] _copy_to_user+0xcc/0x120 [ 1063.905379][T14464] i2cdev_ioctl_smbus+0x586/0x660 [ 1063.910905][T14464] compat_i2cdev_ioctl+0x48f/0xb40 [ 1063.916282][T14464] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1063.922288][T14464] ia32_sys_call+0x2d5f/0x4310 [ 1063.927997][T14464] __do_fast_syscall_32+0xb0/0x150 [ 1063.929433][T13152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1063.933296][T14464] do_fast_syscall_32+0x38/0x80 [ 1063.947050][T14464] do_SYSENTER_32+0x1f/0x30 [ 1063.956640][T14464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1063.963488][T14464] [ 1063.965960][T14464] Uninit was stored to memory at: [ 1063.971816][T14464] __i2c_smbus_xfer+0x254d/0x2f60 [ 1063.977348][T14464] i2c_smbus_xfer+0x31d/0x4d0 [ 1063.982253][T14464] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1063.987760][T14464] compat_i2cdev_ioctl+0x48f/0xb40 [ 1063.993151][T14464] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1063.999110][T14464] ia32_sys_call+0x2d5f/0x4310 [ 1064.004109][T14464] __do_fast_syscall_32+0xb0/0x150 [ 1064.009732][T14464] do_fast_syscall_32+0x38/0x80 [ 1064.014836][T14464] do_SYSENTER_32+0x1f/0x30 [ 1064.019739][T14464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1064.026360][T14464] [ 1064.029012][T14464] Local variable msgbuf1.i created at: [ 1064.034628][T14464] __i2c_smbus_xfer+0x86a/0x2f60 [ 1064.040578][T14464] i2c_smbus_xfer+0x31d/0x4d0 [ 1064.045481][T14464] [ 1064.048117][T14464] Bytes 0-1 of 2 are uninitialized [ 1064.053393][T14464] Memory access of size 2 starts at ffff888059387c86 [ 1064.060985][T14464] Data copied to user address 0000000080000040 [ 1064.067615][T14464] [ 1064.070126][T14464] CPU: 0 UID: 0 PID: 14464 Comm: syz.0.2684 Not tainted 6.16.0-syzkaller-02094-g86aa72182095 #0 PREEMPT(none) [ 1064.082318][T14464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1064.092907][T14464] ===================================================== [ 1064.100195][T14464] Disabling lock debugging due to kernel taint [ 1064.106536][T14464] Kernel panic - not syncing: kmsan.panic set ... [ 1064.113160][T14464] CPU: 0 UID: 0 PID: 14464 Comm: syz.0.2684 Tainted: G B 6.16.0-syzkaller-02094-g86aa72182095 #0 PREEMPT(none) [ 1064.126713][T14464] Tainted: [B]=BAD_PAGE [ 1064.131014][T14464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1064.141263][T14464] Call Trace: [ 1064.144698][T14464] [ 1064.147765][T14464] __dump_stack+0x26/0x30 [ 1064.152332][T14464] dump_stack_lvl+0x53/0x270 [ 1064.157157][T14464] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1064.163231][T14464] dump_stack+0x1e/0x25 [ 1064.167628][T14464] panic+0x4bd/0xd50 [ 1064.171801][T14464] kmsan_report+0x31c/0x320 [ 1064.176518][T14464] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1064.183111][T14464] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1064.189359][T14464] ? kmsan_copy_to_user+0xf1/0x190 [ 1064.194677][T14464] ? _copy_to_user+0xcc/0x120 [ 1064.199550][T14464] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1064.204985][T14464] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 1064.210504][T14464] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1064.216430][T14464] ? ia32_sys_call+0x2d5f/0x4310 [ 1064.221569][T14464] ? __do_fast_syscall_32+0xb0/0x150 [ 1064.227069][T14464] ? do_fast_syscall_32+0x38/0x80 [ 1064.232323][T14464] ? do_SYSENTER_32+0x1f/0x30 [ 1064.237218][T14464] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1064.243988][T14464] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1064.249534][T14464] ? __i2c_transfer+0x11cd/0x3110 [ 1064.254792][T14464] ? kmsan_get_metadata+0xfb/0x160 [ 1064.260118][T14464] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1064.266754][T14464] ? kmsan_get_metadata+0xfb/0x160 [ 1064.272087][T14464] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1064.278134][T14464] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 1064.283548][T14464] ? kmsan_get_metadata+0xfb/0x160 [ 1064.288874][T14464] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1064.294922][T14464] kmsan_internal_check_memory+0x1e1/0x230 [ 1064.301020][T14464] kmsan_copy_to_user+0xf1/0x190 [ 1064.306169][T14464] _copy_to_user+0xcc/0x120 [ 1064.310891][T14464] i2cdev_ioctl_smbus+0x586/0x660 [ 1064.316276][T14464] compat_i2cdev_ioctl+0x48f/0xb40 [ 1064.321658][T14464] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1064.327533][T14464] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1064.333298][T14464] ? kmsan_get_metadata+0xfb/0x160 [ 1064.338714][T14464] ? kmsan_get_metadata+0xfb/0x160 [ 1064.344061][T14464] ia32_sys_call+0x2d5f/0x4310 [ 1064.349061][T14464] __do_fast_syscall_32+0xb0/0x150 [ 1064.354416][T14464] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1064.360361][T14464] do_fast_syscall_32+0x38/0x80 [ 1064.365432][T14464] do_SYSENTER_32+0x1f/0x30 [ 1064.370150][T14464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1064.376744][T14464] RIP: 0023:0xf7f17539 [ 1064.380980][T14464] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1064.400825][T14464] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1064.409484][T14464] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 1064.417634][T14464] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1064.425778][T14464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1064.433920][T14464] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1064.442083][T14464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1064.450271][T14464] [ 1064.453806][T14464] Kernel Offset: disabled [ 1064.458261][T14464] Rebooting in 86400 seconds..