last executing test programs: 6.454662092s ago: executing program 3 (id=245): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000104000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.316220516s ago: executing program 3 (id=259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x1400, 0x0, 0x6e, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x2, 0x0, @private=0xa010100, {0x5, 0x4, 0x1, 0x1a, 0xeef, 0x65, 0x8, 0x6, 0x6c, 0xcc5, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0xe}}, "7fc5bcfa70da8eab"}}}, 0x46) 4.133164163s ago: executing program 1 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7033a80db3f898fefb0008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 3.926405776s ago: executing program 1 (id=262): r0 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000740)=ANY=[@ANYBLOB="00148b"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="2017ac"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x20, 0x0, 0x3, "cda9cc"}, 0x0, 0x0, 0x0, 0x0}) 3.765035582s ago: executing program 3 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004020}, 0x80) 3.679972617s ago: executing program 3 (id=265): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) close(r0) 3.572436262s ago: executing program 3 (id=267): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r0) 2.694494995s ago: executing program 3 (id=276): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 2.539809636s ago: executing program 0 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setresuid(0xffffffffffffffff, 0x0, 0xee01) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2.472350323s ago: executing program 2 (id=279): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.45156794s ago: executing program 0 (id=280): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.690487006s ago: executing program 1 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 1.549388443s ago: executing program 1 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008c0}, 0x50) 1.472744263s ago: executing program 1 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000008010040"]) 1.355072205s ago: executing program 1 (id=284): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 1.227755767s ago: executing program 2 (id=285): ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000080)="020000000000000025cef255ab7dc2e623a8db8b62c89068eb0d0cbd7dd05750e61881450d7345e140d5fdc0f4b1") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x0) 1.152237545s ago: executing program 2 (id=286): openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="24003300d0980700ffffffffffff080211000001505050505050020004000ec108"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x44050) 1.088301318s ago: executing program 2 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic={0x0, 0x0, 0xfffffffe, 0x7fffffff, 0x0, [{}, {0xff, 0x0, 0x10}, {}, {}, {0x0, 0xdc}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0xf, 0x0, '\x00', 0xff}, {0x0, 0x89, 0x0, '\x00', 0xff}, {0x0, 0x0, 0x40}, {0x70, 0x0, 0x1}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x4}, {0x9}, {}, {0x0, 0x1}, {}, {0x20}, {0x3}, {0x4, 0x4}]}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x7, 0xc}) 942.047411ms ago: executing program 2 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 744.770733ms ago: executing program 2 (id=289): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 308.002007ms ago: executing program 0 (id=290): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 175.045326ms ago: executing program 0 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdc01, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x200}, @NL80211_ATTR_SSID={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) 71.718598ms ago: executing program 0 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 0s ago: executing program 0 (id=293): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.249' (ED25519) to the list of known hosts. [ 81.786178][ T5822] cgroup: Unknown subsys name 'net' [ 81.956636][ T5822] cgroup: Unknown subsys name 'cpuset' [ 81.965862][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.643545][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.807395][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.815182][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.825599][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.833956][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.836382][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.841915][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.855826][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.864497][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.865438][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.876115][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.882423][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.886222][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.900822][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.902070][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.908106][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.915493][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.930734][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.933049][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.949072][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.957364][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.560248][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.605707][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.627729][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.663345][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.870247][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.877674][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.885945][ T5831] bridge_slave_0: entered allmulticast mode [ 88.894890][ T5831] bridge_slave_0: entered promiscuous mode [ 88.908801][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.917146][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.924619][ T5835] bridge_slave_0: entered allmulticast mode [ 88.932827][ T5835] bridge_slave_0: entered promiscuous mode [ 88.960711][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.968128][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.975803][ T5831] bridge_slave_1: entered allmulticast mode [ 88.983487][ T5831] bridge_slave_1: entered promiscuous mode [ 88.997939][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.005169][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.012836][ T5835] bridge_slave_1: entered allmulticast mode [ 89.021127][ T5835] bridge_slave_1: entered promiscuous mode [ 89.093719][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.100886][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.108901][ T5833] bridge_slave_0: entered allmulticast mode [ 89.116673][ T5833] bridge_slave_0: entered promiscuous mode [ 89.143510][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.170338][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.184185][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.193418][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.200508][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.207878][ T5833] bridge_slave_1: entered allmulticast mode [ 89.216943][ T5833] bridge_slave_1: entered promiscuous mode [ 89.226094][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.250504][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.257924][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.265513][ T5832] bridge_slave_0: entered allmulticast mode [ 89.274800][ T5832] bridge_slave_0: entered promiscuous mode [ 89.322857][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.330103][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.338065][ T5832] bridge_slave_1: entered allmulticast mode [ 89.345751][ T5832] bridge_slave_1: entered promiscuous mode [ 89.381999][ T5835] team0: Port device team_slave_0 added [ 89.404054][ T5831] team0: Port device team_slave_0 added [ 89.413917][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.427521][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.452673][ T5835] team0: Port device team_slave_1 added [ 89.465939][ T5831] team0: Port device team_slave_1 added [ 89.486847][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.540673][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.580012][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.587137][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.613730][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.627574][ T5833] team0: Port device team_slave_0 added [ 89.661818][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.668869][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.695963][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.707680][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.715954][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.742441][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.755343][ T5833] team0: Port device team_slave_1 added [ 89.771029][ T5832] team0: Port device team_slave_0 added [ 89.778020][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.785447][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.811637][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.859377][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.866487][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.892778][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.906860][ T5832] team0: Port device team_slave_1 added [ 89.952957][ T5849] Bluetooth: hci1: command tx timeout [ 89.963730][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.970727][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.997068][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.017686][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.024802][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.034149][ T5849] Bluetooth: hci0: command tx timeout [ 90.050918][ T5838] Bluetooth: hci2: command tx timeout [ 90.051245][ T5156] Bluetooth: hci3: command tx timeout [ 90.060559][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.080608][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.087682][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.113929][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.179926][ T5831] hsr_slave_0: entered promiscuous mode [ 90.186514][ T5831] hsr_slave_1: entered promiscuous mode [ 90.226641][ T5833] hsr_slave_0: entered promiscuous mode [ 90.233311][ T5833] hsr_slave_1: entered promiscuous mode [ 90.239393][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.247160][ T5833] Cannot create hsr debugfs directory [ 90.277284][ T5835] hsr_slave_0: entered promiscuous mode [ 90.284333][ T5835] hsr_slave_1: entered promiscuous mode [ 90.290444][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.298556][ T5835] Cannot create hsr debugfs directory [ 90.392597][ T5832] hsr_slave_0: entered promiscuous mode [ 90.398985][ T5832] hsr_slave_1: entered promiscuous mode [ 90.405696][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.413328][ T5832] Cannot create hsr debugfs directory [ 90.861232][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.876612][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.897027][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.916291][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.963417][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.985657][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.999627][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.021548][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.088591][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.106291][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.128995][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.149141][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.277274][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.289337][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.300130][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.320784][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.400761][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.426658][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.459825][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.494840][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.509769][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.517135][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.545845][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.553032][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.563266][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.570437][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.584933][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.608094][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.615279][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.694065][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.730883][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.738039][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.820322][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.827559][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.867490][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.888907][ T926] cfg80211: failed to load regulatory.db [ 91.966648][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.996842][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.004030][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.034516][ T5156] Bluetooth: hci1: command tx timeout [ 92.045322][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.052542][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.113916][ T5156] Bluetooth: hci3: command tx timeout [ 92.119756][ T5156] Bluetooth: hci2: command tx timeout [ 92.120924][ T5849] Bluetooth: hci0: command tx timeout [ 92.304936][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.335694][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.445526][ T5833] veth0_vlan: entered promiscuous mode [ 92.462054][ T5831] veth0_vlan: entered promiscuous mode [ 92.487949][ T5833] veth1_vlan: entered promiscuous mode [ 92.500855][ T5831] veth1_vlan: entered promiscuous mode [ 92.590766][ T5833] veth0_macvtap: entered promiscuous mode [ 92.621142][ T5831] veth0_macvtap: entered promiscuous mode [ 92.646554][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.659446][ T5831] veth1_macvtap: entered promiscuous mode [ 92.668455][ T5833] veth1_macvtap: entered promiscuous mode [ 92.710883][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.737513][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.758678][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.788811][ T3027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.801448][ T3027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.816206][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.830157][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.847119][ T3027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.856203][ T3027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.867618][ T3027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.890160][ T3027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.899739][ T3027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.911370][ T3027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.931348][ T5835] veth0_vlan: entered promiscuous mode [ 92.976217][ T5835] veth1_vlan: entered promiscuous mode [ 93.087018][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.102202][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.149498][ T5832] veth0_vlan: entered promiscuous mode [ 93.165441][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.174481][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.197055][ T5835] veth0_macvtap: entered promiscuous mode [ 93.247614][ T5835] veth1_macvtap: entered promiscuous mode [ 93.268412][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.271757][ T5832] veth1_vlan: entered promiscuous mode [ 93.280242][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.316225][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.337556][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.365600][ T5832] veth0_macvtap: entered promiscuous mode [ 93.398485][ T5832] veth1_macvtap: entered promiscuous mode [ 93.412032][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.440452][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.460344][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.460344][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.492662][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.513769][ T2940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.529696][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.553849][ T2940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.566073][ T2940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.684297][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.728300][ T2984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.762139][ T2984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.798170][ T2984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.808210][ T2984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.837107][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.861965][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.941357][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.951245][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.953921][ T5888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.973181][ T981] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.008510][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.036183][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.117631][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.128122][ T5849] Bluetooth: hci1: command tx timeout [ 94.142277][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 94.151040][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.153680][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.178532][ T981] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 94.188558][ T981] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.193365][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.199656][ T5849] Bluetooth: hci0: command tx timeout [ 94.209959][ T5838] Bluetooth: hci2: command tx timeout [ 94.213978][ T5849] Bluetooth: hci3: command tx timeout [ 94.231424][ T981] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.242486][ T981] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.253955][ T981] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.268172][ T981] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.282164][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.304987][ T5888] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.327444][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.339599][ T5888] usb 2-1: SerialNumber: syz [ 94.395120][ T5933] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.549867][ T981] usb 4-1: GET_CAPABILITIES returned 0 [ 94.558327][ T981] usbtmc 4-1:16.0: can't read capabilities [ 94.591325][ T5888] usb 2-1: 0:2 : does not exist [ 94.686058][ T5888] usb 2-1: USB disconnect, device number 2 [ 94.728903][ T5940] netlink: 'syz.2.6': attribute type 4 has an invalid length. [ 94.789977][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.833137][ T5927] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0 [ 95.039546][ T981] usb 4-1: USB disconnect, device number 2 [ 95.533248][ T5902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.558886][ T5964] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 95.633681][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.692313][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 95.699734][ T5902] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 95.721977][ T5902] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 95.731858][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.743029][ T5902] usb 1-1: Product: syz [ 95.752493][ T5902] usb 1-1: Manufacturer: syz [ 95.757156][ T5902] usb 1-1: SerialNumber: syz [ 95.765603][ T5902] usb 1-1: config 0 descriptor?? [ 95.778005][ T5902] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 95.794065][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 95.805372][ T5926] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 95.815087][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.824244][ T5926] usb 3-1: Product: syz [ 95.828692][ T5926] usb 3-1: Manufacturer: syz [ 95.834702][ T5926] usb 3-1: SerialNumber: syz [ 95.843928][ T5926] usb 3-1: config 0 descriptor?? [ 95.862274][ T981] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.863771][ T5926] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 96.021438][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.040024][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.051199][ T981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.067150][ T981] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.076374][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.089135][ T981] usb 4-1: config 0 descriptor?? [ 96.193203][ T5849] Bluetooth: hci1: command tx timeout [ 96.272364][ T5849] Bluetooth: hci2: command tx timeout [ 96.272453][ T5156] Bluetooth: hci0: command tx timeout [ 96.283556][ T5849] Bluetooth: hci3: command tx timeout [ 96.542775][ T981] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 96.591059][ T5902] gspca_zc3xx: reg_w_i err -71 [ 96.799693][ T5954] usb 4-1: USB disconnect, device number 3 [ 96.893715][ T5926] gspca_sonixj: reg_w1 err -71 [ 96.942526][ T5926] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 96.955983][ T5926] usb 3-1: USB disconnect, device number 2 [ 97.032291][ T981] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.187029][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.198228][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.208341][ T5902] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 97.214997][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.228165][ T5902] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 97.238117][ T981] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.249756][ T5902] usb 1-1: USB disconnect, device number 2 [ 97.256017][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.270069][ T981] usb 2-1: config 0 descriptor?? [ 97.498198][ T5991] input: syz1 as /devices/virtual/input/input5 [ 97.701361][ T981] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 97.734878][ T981] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 97.812285][ T5902] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 97.984253][ T5902] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.002306][ T5888] usb 2-1: USB disconnect, device number 3 [ 98.003925][ T5902] usb 3-1: config 0 has no interface number 0 [ 98.030429][ T5902] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 98.056893][ T5902] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 98.078613][ T5902] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.089758][ T6004] netlink: 312 bytes leftover after parsing attributes in process `syz.3.33'. [ 98.099206][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.127075][ T5902] usb 3-1: config 0 descriptor?? [ 98.134647][ T5993] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.153565][ T5902] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 98.192647][ T981] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.372334][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 98.378953][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.390234][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.400975][ T981] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 98.402667][ T5926] usb 3-1: USB disconnect, device number 3 [ 98.410118][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 98.415379][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.448575][ T981] usb 1-1: config 0 descriptor?? [ 98.513700][ T5888] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.679108][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 98.691199][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.701002][ T5888] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 98.710391][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.719403][ T5888] usb 4-1: Product: syz [ 98.724121][ T5888] usb 4-1: Manufacturer: syz [ 98.728747][ T5888] usb 4-1: SerialNumber: syz [ 98.736847][ T5888] usb 4-1: config 0 descriptor?? [ 98.907135][ T981] hid (null): usage index exceeded [ 99.104773][ T981] usb 1-1: string descriptor 0 read error: -71 [ 99.146348][ T981] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 99.159370][ T5888] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 99.163346][ T981] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -32 [ 99.188637][ T981] usb 1-1: USB disconnect, device number 3 [ 99.429922][ T6026] input: syz1 as /devices/virtual/input/input8 [ 99.795720][ T6035] netlink: 'syz.1.47': attribute type 11 has an invalid length. [ 99.819282][ T5888] usb 4-1: USB disconnect, device number 4 [ 99.832303][ T6035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.47'. [ 100.316490][ T6050] netlink: 48 bytes leftover after parsing attributes in process `syz.0.54'. [ 100.442266][ T30] audit: type=1800 audit(1750934043.506:2): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.55" name="dmabuf" dev="dmabuf" ino=3 res=0 errno=0 [ 100.638958][ T5926] IPVS: starting estimator thread 0... [ 100.766927][ T6062] IPVS: using max 28 ests per chain, 67200 per kthread [ 101.192320][ T981] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.221537][ T6084] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.359364][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 101.390593][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.425439][ T981] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 101.455640][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.499690][ T981] usb 2-1: config 0 descriptor?? [ 101.942799][ T981] creative-sb0540 0003:041E:3100.0004: unknown main item tag 0x0 [ 101.951745][ T981] creative-sb0540 0003:041E:3100.0004: item fetching failed at offset 3/5 [ 101.976363][ T981] creative-sb0540 0003:041E:3100.0004: parse failed [ 101.992748][ T981] creative-sb0540 0003:041E:3100.0004: probe with driver creative-sb0540 failed with error -22 [ 102.138341][ T981] usb 2-1: USB disconnect, device number 4 [ 102.256866][ T6103] Bluetooth: MGMT ver 1.23 [ 103.032363][ T981] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.103234][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.196887][ T981] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.247993][ T981] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.271069][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 103.279148][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 103.289021][ T10] usb 2-1: config 0 has no interface number 0 [ 103.304647][ T981] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.334757][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 103.352249][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.370522][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.379680][ T981] usb 1-1: SerialNumber: syz [ 103.408836][ T10] usb 2-1: Product: syz [ 103.424728][ T10] usb 2-1: Manufacturer: syz [ 103.442589][ T10] usb 2-1: SerialNumber: syz [ 103.465299][ T10] usb 2-1: config 0 descriptor?? [ 103.487819][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 103.675621][ T981] usb 1-1: 0:2 : does not exist [ 103.738432][ T981] usb 1-1: USB disconnect, device number 4 [ 103.746009][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 103.799594][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 103.870863][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.112375][ T5888] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.131722][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 104.140257][ T981] usb 2-1: USB disconnect, device number 5 [ 104.159639][ T981] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 104.192808][ T981] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 104.222022][ T981] quatech2 2-1:0.51: device disconnected [ 104.232258][ T5926] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.278220][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 104.289702][ T5888] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 104.306166][ T5888] usb 3-1: config 0 has no interface number 0 [ 104.329075][ T5888] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 104.338537][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.356046][ T5888] usb 3-1: Product: syz [ 104.366225][ T5888] usb 3-1: Manufacturer: syz [ 104.370901][ T5888] usb 3-1: SerialNumber: syz [ 104.379411][ T5888] usb 3-1: config 0 descriptor?? [ 104.395942][ T5888] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 104.405573][ T5926] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 104.421166][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.432688][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.449111][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.462034][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.471854][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.483549][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.491814][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.501590][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.522360][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.531520][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.541379][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.553809][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.568105][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.577665][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.593713][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.605089][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.615231][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.638415][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.650227][ T5888] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 104.662959][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.676932][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.694879][ T5888] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 104.704585][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.721804][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.747628][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.793570][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.814994][ T5926] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 104.832434][ T5926] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 104.878902][ T5926] usb 4-1: Product: syz [ 104.885964][ T5926] usb 4-1: Manufacturer: syz [ 104.892879][ T5926] usb 4-1: SerialNumber: syz [ 104.903200][ T5926] usb 4-1: config 0 descriptor?? [ 104.917166][ T5926] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 105.085646][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 105.098397][ T5926] usb 3-1: USB disconnect, device number 4 [ 105.133481][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 105.181450][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 105.211031][ T5926] quatech2 3-1:0.51: device disconnected [ 105.812271][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.967733][ T10] usb 2-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 105.984304][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.014381][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.029469][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.039213][ T6157] program syz.2.104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.043504][ T10] usb 2-1: SerialNumber: syz [ 106.284340][ T10] usb 2-1: 0:2 : does not exist [ 106.360696][ T10] usb 2-1: USB disconnect, device number 6 [ 106.505702][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.872347][ T981] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.952435][ T5888] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 106.995719][ T10] usb 4-1: USB disconnect, device number 5 [ 107.018590][ T10] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 107.052713][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 107.066009][ T981] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 107.089547][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.105165][ T981] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.122748][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.131148][ T5888] usb 3-1: config 0 has no interfaces? [ 107.148844][ T981] usb 1-1: Product: syz [ 107.149916][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.173640][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.173756][ T981] usb 1-1: Manufacturer: syz [ 107.190034][ T981] usb 1-1: SerialNumber: syz [ 107.202081][ T5888] usb 3-1: config 0 descriptor?? [ 107.211273][ T981] usb 1-1: config 0 descriptor?? [ 107.228995][ T981] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 107.249648][ T981] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 107.445917][ T5888] usb 3-1: USB disconnect, device number 5 [ 107.862288][ T981] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 107.877929][ T981] em28xx 1-1:0.0: Config register raw data: 0x41 [ 108.120277][ T981] usb 1-1: USB disconnect, device number 5 [ 108.131534][ T981] em28xx 1-1:0.0: Disconnecting em28xx [ 108.167673][ T981] em28xx 1-1:0.0: Freeing device [ 108.842296][ T5888] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 108.872375][ T981] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 109.004284][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.032633][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 109.045376][ T981] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 109.052717][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 109.072404][ T981] usb 2-1: config 0 has no interface number 0 [ 109.084102][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 109.086948][ T981] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 109.135587][ T981] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 109.148245][ T981] usb 2-1: config 0 interface 230 has no altsetting 0 [ 109.152320][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 109.162345][ T981] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 109.182393][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.193364][ T5888] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 109.201515][ T981] usb 2-1: Product: syz [ 109.201545][ T5888] usb 3-1: Manufacturer: syz [ 109.211005][ T981] usb 2-1: Manufacturer: syz [ 109.221131][ T981] usb 2-1: SerialNumber: syz [ 109.261419][ T981] usb 2-1: config 0 descriptor?? [ 109.267295][ T5888] usb 3-1: config 0 descriptor?? [ 109.288110][ T6212] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.313658][ T6212] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.334556][ T981] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 109.355015][ T981] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 109.573166][ T5888] rc_core: IR keymap rc-hauppauge not found [ 109.579126][ T5888] Registered IR keymap rc-empty [ 109.585422][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.614775][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.636799][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.653349][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 109.680224][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 109.720368][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.742579][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.774752][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.794030][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 109.802841][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.812129][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.826661][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.832423][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.836867][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.856349][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.874951][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.887813][ T10] usb 1-1: config 0 descriptor?? [ 109.902038][ T10] hub 1-1:0.0: USB hub found [ 109.912519][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.942415][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.972494][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.993569][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.014801][ T5888] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 110.023969][ T5888] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 110.041767][ T5888] usb 3-1: USB disconnect, device number 6 [ 110.107594][ T10] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 110.182419][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.313961][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 110.319994][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 110.344033][ T10] usb 1-1: USB disconnect, device number 6 [ 110.362718][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 110.370228][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.380892][ T24] usb 4-1: config 0 has no interfaces? [ 110.387686][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 110.399430][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.411004][ T24] usb 4-1: config 0 descriptor?? [ 110.569683][ T6246] sg_write: data in/out 989/10 bytes for SCSI command 0x3a-- guessing data in; [ 110.569683][ T6246] program syz.2.129 not setting count and/or reply_len properly [ 110.648910][ T10] usb 4-1: USB disconnect, device number 6 [ 110.807100][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 111.209029][ T30] audit: type=1326 audit(1750934054.286:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.3.137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf5e98e929 code=0x0 [ 111.262294][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.414112][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.426721][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.437677][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.447510][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.460570][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.469710][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.480184][ T24] usb 3-1: config 0 descriptor?? [ 111.576220][ T981] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 111.780771][ T981] usb 2-1: USB disconnect, device number 7 [ 111.900453][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 111.908097][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 111.916306][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 111.924098][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 111.933058][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 111.940625][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 111.949909][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 111.959532][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 111.970381][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 111.997493][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.031719][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 112.200564][ T24] usb 3-1: USB disconnect, device number 7 [ 112.272583][ T981] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.432313][ T981] usb 1-1: Using ep0 maxpacket: 32 [ 112.448028][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.461017][ T981] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 112.481055][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.498563][ T981] usb 1-1: config 0 descriptor?? [ 112.722363][ T5888] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.906302][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 112.916863][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.937366][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.949862][ T5888] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 112.957883][ T981] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 112.975031][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.013351][ T5888] usb 4-1: config 0 descriptor?? [ 113.359619][ T981] usb 1-1: USB disconnect, device number 7 [ 113.385466][ T6295] syzkaller1: entered promiscuous mode [ 113.391269][ T6295] syzkaller1: entered allmulticast mode [ 113.472416][ T5156] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 113.484040][ T5888] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 113.674327][ T5888] corsair 0003:1B1C:1B02.0007: Read invalid backlight brightness: f7. [ 113.712349][ T5895] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.862678][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 113.871308][ T5895] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 113.908079][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.920364][ T5881] usb 4-1: USB disconnect, device number 7 [ 113.952772][ T5895] usb 3-1: config 0 has no interface number 0 [ 113.976772][ T5895] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 114.003816][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.011870][ T5895] usb 3-1: Product: syz [ 114.031462][ T5895] usb 3-1: Manufacturer: syz [ 114.036680][ T5895] usb 3-1: SerialNumber: syz [ 114.046342][ T5895] usb 3-1: config 0 descriptor?? [ 114.212276][ T5888] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.285060][ T5895] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 114.293967][ T5895] usb 3-1: No valid video chain found. [ 114.318213][ T5895] usb 3-1: USB disconnect, device number 8 [ 114.364802][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.376916][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.395827][ T5888] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 114.406788][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.417189][ T5888] usb 2-1: config 0 descriptor?? [ 114.572328][ T5881] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.722351][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 114.730891][ T5881] usb 1-1: config index 0 descriptor too short (expected 59154, got 18) [ 114.739540][ T5881] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 114.742390][ T981] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.747759][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 114.767022][ T5881] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 114.776333][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.784863][ T5881] usb 1-1: Product: syz [ 114.789069][ T5881] usb 1-1: Manufacturer: syz [ 114.793748][ T5881] usb 1-1: SerialNumber: syz [ 114.803118][ T5881] usb 1-1: config 0 descriptor?? [ 114.811739][ T5881] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 114.922428][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 114.931417][ T981] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 114.939799][ T981] usb 4-1: config 0 has no interface number 0 [ 114.951550][ T981] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 114.961718][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.970017][ T981] usb 4-1: Product: syz [ 114.977847][ T981] usb 4-1: Manufacturer: syz [ 114.982622][ T981] usb 4-1: SerialNumber: syz [ 114.993151][ T981] usb 4-1: config 0 descriptor?? [ 115.008702][ T981] smsc95xx v2.0.0 [ 115.254079][ T5888] uclogic 0003:5543:0781.0008: reserved main item tag 0xd [ 115.276423][ T5888] uclogic 0003:5543:0781.0008: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 115.420096][ T981] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 115.436884][ T981] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 115.460629][ T5888] usb 2-1: USB disconnect, device number 8 [ 115.648763][ T5881] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 115.682879][ T5881] usb 1-1: USB disconnect, device number 8 [ 115.856028][ T981] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 115.870570][ T981] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 115.889482][ T981] usb 4-1: USB disconnect, device number 8 [ 116.326380][ T6336] syzkaller1: entered promiscuous mode [ 116.332951][ T6336] syzkaller1: entered allmulticast mode [ 116.639015][ T6342] syzkaller1: entered promiscuous mode [ 116.639041][ T6342] syzkaller1: entered allmulticast mode [ 117.085065][ T6362] syzkaller1: entered promiscuous mode [ 117.116279][ T6362] syzkaller1: entered allmulticast mode [ 117.190435][ T6364] syzkaller1: entered promiscuous mode [ 117.196616][ T981] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 117.206833][ T6364] syzkaller1: entered allmulticast mode [ 117.231489][ T6366] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 117.365044][ T981] usb 3-1: Using ep0 maxpacket: 16 [ 117.383809][ T981] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 117.402351][ T981] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.416780][ T981] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.430268][ T981] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 117.434000][ T6370] block nbd3: not configured, cannot reconfigure [ 117.459824][ T981] usb 3-1: config 7 interface 0 has no altsetting 0 [ 117.466932][ T981] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 117.491474][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.654372][ T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 117.824821][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.835163][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.846979][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.856155][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.864372][ T10] usb 2-1: Product: syz [ 117.870088][ T10] usb 2-1: Manufacturer: syz [ 117.877703][ T10] usb 2-1: SerialNumber: syz [ 117.961972][ T981] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0009/input/input11 [ 118.051966][ T981] kye 0003:0458:5010.0009: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 118.110018][ T10] usb 2-1: 0:2 : does not exist [ 118.145080][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 118.198452][ T10] usb 2-1: USB disconnect, device number 9 [ 118.258681][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.004920][ C0] kye 0003:0458:5010.0009: usb_submit_urb(ctrl) failed: -1 [ 119.632467][ T6372] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 119.632534][ T5156] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.810798][ T981] usb 3-1: USB disconnect, device number 9 [ 119.850702][ T30] audit: type=1326 audit(1750934062.916:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc38e929 code=0x7ffc0000 [ 119.877604][ T30] audit: type=1326 audit(1750934062.926:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc38e929 code=0x7ffc0000 [ 119.906942][ T30] audit: type=1326 audit(1750934062.926:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcfc38e929 code=0x7ffc0000 [ 120.460310][ T6372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.471954][ T6372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.481164][ T6372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.487478][ T6372] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.495977][ T6372] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.504724][ T6372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.510774][ T6372] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.518896][ T6372] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.530758][ T6372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.538572][ T6372] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.546393][ T6372] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.585183][ T30] audit: type=1326 audit(1750934063.646:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc38e929 code=0x7ffc0000 [ 120.657316][ T30] audit: type=1326 audit(1750934063.646:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc38e929 code=0x7ffc0000 [ 120.755399][ T6393] program syz.3.195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.042276][ T5926] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 121.214622][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 121.229796][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 121.256625][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 121.275691][ T5926] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 121.291721][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.300473][ T5926] usb 3-1: Product: syz [ 121.300934][ T6407] syzkaller1: entered promiscuous mode [ 121.309001][ T5926] usb 3-1: Manufacturer: syz [ 121.328942][ T5926] usb 3-1: SerialNumber: syz [ 121.330441][ T6407] syzkaller1: entered allmulticast mode [ 121.341488][ T5926] usb 3-1: config 0 descriptor?? [ 121.358166][ T6394] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.372359][ T6394] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.389251][ T5926] usb 3-1: ucan: probing device on interface #0 [ 121.713296][ T5156] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.819894][ T6417] syzkaller1: entered promiscuous mode [ 121.825576][ T6417] syzkaller1: entered allmulticast mode [ 122.016570][ T5926] ucan 3-1:0.0 can0: registered device [ 122.201121][ T5926] ucan 3-1:0.0 can0: firmware string: $c4ÁÆ [ 122.362340][ T5888] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.425238][ T10] usb 3-1: USB disconnect, device number 10 [ 122.512453][ T5156] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.514315][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.523645][ T5156] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.547757][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.557646][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.578603][ T5888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.587819][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.605211][ T5156] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.615588][ T5888] usb 4-1: config 0 descriptor?? [ 123.068051][ T5888] hid_parser_main: 10 callbacks suppressed [ 123.068074][ T5888] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 123.104682][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 123.114807][ T5888] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 123.127571][ T5888] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 123.137872][ T5888] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 123.149095][ T5888] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 123.156684][ T5888] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 123.194865][ T5888] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 123.278586][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 123.314403][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.339569][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.362293][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.412646][ T24] usb 1-1: config 0 descriptor?? [ 123.567716][ T6460] netlink: 'syz.1.214': attribute type 29 has an invalid length. [ 123.604878][ T6460] netlink: 'syz.1.214': attribute type 29 has an invalid length. [ 123.634416][ T6460] netlink: 'syz.1.214': attribute type 29 has an invalid length. [ 123.648284][ T24] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 123.669180][ T6460] netlink: 'syz.1.214': attribute type 29 has an invalid length. [ 123.792313][ T5156] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.839944][ T6466] syzkaller1: entered promiscuous mode [ 123.865819][ T6466] syzkaller1: entered allmulticast mode [ 124.363315][ T5926] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.500222][ T5888] usb 1-1: USB disconnect, device number 9 [ 124.528812][ T5926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.548391][ T5926] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 124.561372][ T5926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.570744][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.579148][ T5926] usb 3-1: Product: syz [ 124.583885][ T5926] usb 3-1: Manufacturer: syz [ 124.588488][ T5926] usb 3-1: SerialNumber: syz [ 124.600983][ T5926] cdc_mbim 3-1:1.0: skipping garbage [ 124.602402][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.612324][ T5156] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.672341][ T5156] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.762327][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.804473][ T6474] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 124.912509][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 124.919914][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 124.931279][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.942820][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.953003][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.967256][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.976406][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.060290][ T6485] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 125.204899][ T5895] usb 4-1: USB disconnect, device number 9 [ 125.221966][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 125.269872][ T10] usbtmc 2-1:16.0: can't read capabilities [ 125.306100][ T6490] syzkaller1: entered promiscuous mode [ 125.332426][ T6490] syzkaller1: entered allmulticast mode [ 125.353572][ T6493] binder: 6492:6493 ioctl c0306201 2000000003c0 returned -22 [ 125.428505][ T6474] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 125.439718][ T5926] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 125.458992][ T5926] cdc_mbim 3-1:1.0: cdc-wdm1: USB WDM device [ 125.467807][ T5895] usb 2-1: USB disconnect, device number 10 [ 125.489344][ T5926] wwan wwan0: port wwan0mbim0 attached [ 125.545737][ T5926] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 2a:0b:02:40:9e:82 [ 125.673574][ T5926] usb 3-1: USB disconnect, device number 11 [ 125.680883][ T5926] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 125.753631][ T5926] wwan wwan0: port wwan0mbim0 disconnected [ 126.241371][ T6516] ======================================================= [ 126.241371][ T6516] WARNING: The mand mount option has been deprecated and [ 126.241371][ T6516] and is ignored by this kernel. Remove the mand [ 126.241371][ T6516] option from the mount to silence this warning. [ 126.241371][ T6516] ======================================================= [ 126.674991][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.675004][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.753325][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.832243][ T5895] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 126.994448][ T5895] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.025766][ T5895] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.052597][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.059275][ T5895] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 127.108350][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.137405][ T5895] usb 1-1: config 0 descriptor?? [ 127.243041][ T6552] syzkaller1: entered promiscuous mode [ 127.258924][ T6552] syzkaller1: entered allmulticast mode [ 127.339405][ T6555] syzkaller1: entered promiscuous mode [ 127.345567][ T6555] syzkaller1: entered allmulticast mode [ 127.454080][ T5926] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 127.622432][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 127.625606][ T5895] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.000B/input/input12 [ 127.659341][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.682611][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.702911][ T5926] usb 2-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 127.712105][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.732750][ T5926] usb 2-1: config 0 descriptor?? [ 127.750579][ T5895] sony 0003:054C:03D5.000B: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 127.812785][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 127.813954][ T5895] usb 1-1: USB disconnect, device number 10 [ 127.927686][ T6565] fido_id[6565]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 127.982288][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 128.010435][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 128.028791][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.038194][ T24] usb 4-1: Product: syz [ 128.046188][ T24] usb 4-1: Manufacturer: syz [ 128.050986][ T24] usb 4-1: SerialNumber: syz [ 128.059433][ T24] usb 4-1: config 0 descriptor?? [ 128.073804][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 128.180611][ T5926] logitech-hidpp-device 0003:046D:0A87.000C: unbalanced collection at end of report description [ 128.199887][ T5926] logitech-hidpp-device 0003:046D:0A87.000C: hidpp_probe:parse failed [ 128.227174][ T5926] logitech-hidpp-device 0003:046D:0A87.000C: probe with driver logitech-hidpp-device failed with error -22 [ 128.402555][ T5926] usb 2-1: USB disconnect, device number 11 [ 128.492816][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'. [ 128.738847][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 128.833807][ T5156] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.841158][ T6581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.105098][ T24] gspca_sonixj: reg_w1 err -71 [ 129.202393][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 129.220761][ T24] usb 4-1: USB disconnect, device number 10 [ 129.283691][ T5926] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 129.452343][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 129.463500][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.480826][ T5926] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 129.490265][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.509907][ T5926] usb 3-1: config 0 descriptor?? [ 129.590298][ T6594] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.956478][ T5926] mcp2221 0003:04D8:00DD.000D: item fetching failed at offset 3/5 [ 129.967292][ T5926] mcp2221 0003:04D8:00DD.000D: can't parse reports [ 129.977015][ T5926] mcp2221 0003:04D8:00DD.000D: probe with driver mcp2221 failed with error -22 [ 130.039272][ T6600] syzkaller1: entered promiscuous mode [ 130.065660][ T6600] syzkaller1: entered allmulticast mode [ 130.143439][ T5926] usb 3-1: USB disconnect, device number 12 [ 130.312461][ T5881] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 130.482429][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 130.495049][ T5881] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 130.509029][ T5881] usb 2-1: config 0 has no interface number 0 [ 130.517575][ T5881] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 130.528004][ T5881] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 130.557953][ T5881] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 130.572232][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.587115][ T5881] usb 2-1: Product: syz [ 130.597309][ T5881] usb 2-1: Manufacturer: syz [ 130.602076][ T5881] usb 2-1: SerialNumber: syz [ 130.613059][ T5881] usb 2-1: config 0 descriptor?? [ 130.619097][ T6610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 130.627207][ T6610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 130.821305][ T6626] loop8: detected capacity change from 0 to 7 [ 130.842392][ T6626] Dev loop8: unable to read RDB block 7 [ 130.845753][ T6610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 130.865428][ T6626] loop8: unable to read partition table [ 130.867054][ T6610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 130.891691][ T6626] loop8: partition table beyond EOD, truncated [ 130.914640][ T6626] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.384164][ T6639] program syz.0.275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.511301][ T5881] asix 2-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0xa9 [ 131.732322][ T5895] usb 2-1: USB disconnect, device number 12 [ 131.802473][ T5881] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 131.852241][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 131.952244][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 131.959407][ T5881] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 131.968638][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.978799][ T5881] usb 3-1: config 0 descriptor?? [ 131.995860][ T5881] as10x_usb: device has been detected [ 132.002708][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 132.009364][ T5881] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 132.019037][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 132.039710][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.052883][ T5881] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 132.067799][ T24] usb 1-1: config 0 descriptor?? [ 132.085547][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 132.102676][ T5881] as10x_usb: error during firmware upload part1 [ 132.109499][ T5881] Registered device nBox DVB-T Dongle [ 132.210929][ T5895] usb 3-1: USB disconnect, device number 13 [ 132.264136][ T5895] Unregistered device nBox DVB-T Dongle [ 132.266060][ T5895] as10x_usb: device has been disconnected [ 132.902233][ T5895] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 133.074722][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.089463][ T24] gspca_sunplus: reg_w_riv err -71 [ 133.090998][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.101956][ T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 133.107854][ T5895] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 133.125881][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.129948][ T24] usb 1-1: USB disconnect, device number 11 [ 133.144495][ T5895] usb 2-1: config 0 descriptor?? [ 133.482430][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.573178][ T5895] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 133.580567][ T5895] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 133.591054][ T5895] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000E/input/input13 [ 133.620157][ T5895] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 133.803571][ T24] usb 2-1: USB disconnect, device number 13 [ 134.011221][ T6676] ------------[ cut here ]------------ [ 134.017226][ T6676] WARNING: ./include/net/mac80211.h:7769 at _ieee80211_sta_cur_vht_bw+0x524/0x6e0, CPU#0: syz.0.293/6676 [ 134.028961][ T6676] Modules linked in: [ 134.033642][ T6676] CPU: 0 UID: 0 PID: 6676 Comm: syz.0.293 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 134.045675][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.057698][ T6676] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 134.065462][ T6676] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 70 f9 d5 f6 b8 04 00 00 00 eb 31 e8 64 f9 d5 f6 eb 28 e8 5d f9 d5 f6 90 <0f> 0b 90 eb 1d e8 52 f9 d5 f6 b8 02 00 00 00 eb 13 e8 46 f9 d5 f6 [ 134.085213][ T6676] RSP: 0018:ffffc90003356f48 EFLAGS: 00010283 [ 134.091370][ T6676] RAX: ffffffff8aea1323 RBX: ffff8880294b4000 RCX: 0000000000080000 [ 134.099430][ T6676] RDX: ffffc9000ba81000 RSI: 000000000000034b RDI: 000000000000034c [ 134.107570][ T6676] RBP: 0000000000000000 R08: ffff88802edfda00 R09: 0000000000000007 [ 134.115723][ T6676] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 134.123857][ T6676] R13: 0000000000000007 R14: ffff8880294b4180 R15: 1ffff11005296830 [ 134.131863][ T6676] FS: 00007f26675836c0(0000) GS:ffff8881259e6000(0000) knlGS:0000000000000000 [ 134.140888][ T6676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.147543][ T6676] CR2: 00007f26667743e0 CR3: 0000000032ac2000 CR4: 00000000003526f0 [ 134.156373][ T6676] Call Trace: [ 134.159668][ T6676] [ 134.163757][ T6676] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 134.169795][ T6676] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 134.176356][ T6676] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 134.182004][ T6676] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 134.187715][ T6676] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 134.193453][ T6676] ? ieee80211_get_link_sband+0x335/0x3e0 [ 134.199219][ T6676] sta_link_apply_parameters+0xb75/0xf60 [ 134.204972][ T6676] sta_apply_parameters+0x944/0x15b0 [ 134.210316][ T6676] ieee80211_add_station+0x424/0x6a0 [ 134.215757][ T6676] rdev_add_station+0x108/0x290 [ 134.220667][ T6676] nl80211_new_station+0x1755/0x1b70 [ 134.226090][ T6676] ? __pfx_nl80211_new_station+0x10/0x10 [ 134.231760][ T6676] ? netdev_run_todo+0xe1d/0xea0 [ 134.236837][ T6676] ? nl80211_pre_doit+0x4f1/0x930 [ 134.241932][ T6676] genl_family_rcv_msg_doit+0x212/0x300 [ 134.247611][ T6676] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 134.254985][ T6676] ? bpf_lsm_capable+0x9/0x20 [ 134.259715][ T6676] ? security_capable+0x7e/0x2e0 [ 134.265795][ T6676] genl_rcv_msg+0x60e/0x790 [ 134.270378][ T6676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.275520][ T6676] ? ref_tracker_free+0x63a/0x7d0 [ 134.280592][ T6676] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 134.286078][ T6676] ? __pfx_nl80211_new_station+0x10/0x10 [ 134.291759][ T6676] ? __pfx_nl80211_post_doit+0x10/0x10 [ 134.297355][ T6676] ? __pfx_ref_tracker_free+0x10/0x10 [ 134.302845][ T6676] netlink_rcv_skb+0x205/0x470 [ 134.307661][ T6676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.312784][ T6676] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.318138][ T6676] ? down_read+0x1ad/0x2e0 [ 134.322687][ T6676] genl_rcv+0x28/0x40 [ 134.326715][ T6676] netlink_unicast+0x758/0x8d0 [ 134.331500][ T6676] netlink_sendmsg+0x805/0xb30 [ 134.336390][ T6676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.341714][ T6676] ? aa_sock_msg_perm+0xf1/0x1d0 [ 134.346722][ T6676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.352055][ T6676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.358343][ T6676] __sock_sendmsg+0x219/0x270 [ 134.363896][ T6676] ____sys_sendmsg+0x505/0x830 [ 134.368710][ T6676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.374090][ T6676] ? import_iovec+0x74/0xa0 [ 134.378629][ T6676] ___sys_sendmsg+0x21f/0x2a0 [ 134.383423][ T6676] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.388712][ T6676] ? __fget_files+0x2a/0x420 [ 134.393387][ T6676] ? __fget_files+0x3a0/0x420 [ 134.398121][ T6676] __x64_sys_sendmsg+0x19b/0x260 [ 134.403164][ T6676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.408689][ T6676] ? do_syscall_64+0xbe/0x3b0 [ 134.413447][ T6676] do_syscall_64+0xfa/0x3b0 [ 134.417987][ T6676] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.423320][ T6676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.429498][ T6676] ? clear_bhb_loop+0x60/0xb0 [ 134.434521][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.440448][ T6676] RIP: 0033:0x7f266678e929 [ 134.444961][ T6676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.465810][ T6676] RSP: 002b:00007f2667583038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.475408][ T6676] RAX: ffffffffffffffda RBX: 00007f26669b5fa0 RCX: 00007f266678e929 [ 134.483505][ T6676] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 134.491522][ T6676] RBP: 00007f2666810b39 R08: 0000000000000000 R09: 0000000000000000 [ 134.500120][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.508206][ T6676] R13: 0000000000000000 R14: 00007f26669b5fa0 R15: 00007fffc7289a68 [ 134.516325][ T6676] [ 134.519383][ T6676] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.526691][ T6676] CPU: 0 UID: 0 PID: 6676 Comm: syz.0.293 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 134.538072][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.548154][ T6676] Call Trace: [ 134.551462][ T6676] [ 134.554395][ T6676] dump_stack_lvl+0x99/0x250 [ 134.559005][ T6676] ? __asan_memcpy+0x40/0x70 [ 134.563628][ T6676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.568833][ T6676] ? __pfx__printk+0x10/0x10 [ 134.573452][ T6676] panic+0x2db/0x790 [ 134.577379][ T6676] ? __pfx_panic+0x10/0x10 [ 134.581822][ T6676] __warn+0x334/0x4c0 [ 134.585812][ T6676] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 134.591638][ T6676] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 134.597465][ T6676] report_bug+0x2be/0x4f0 [ 134.601803][ T6676] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 134.607651][ T6676] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 134.613474][ T6676] ? _ieee80211_sta_cur_vht_bw+0x526/0x6e0 [ 134.619301][ T6676] handle_bug+0x84/0x160 [ 134.623557][ T6676] exc_invalid_op+0x1a/0x50 [ 134.628078][ T6676] asm_exc_invalid_op+0x1a/0x20 [ 134.632934][ T6676] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 134.639364][ T6676] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 70 f9 d5 f6 b8 04 00 00 00 eb 31 e8 64 f9 d5 f6 eb 28 e8 5d f9 d5 f6 90 <0f> 0b 90 eb 1d e8 52 f9 d5 f6 b8 02 00 00 00 eb 13 e8 46 f9 d5 f6 [ 134.658984][ T6676] RSP: 0018:ffffc90003356f48 EFLAGS: 00010283 [ 134.665064][ T6676] RAX: ffffffff8aea1323 RBX: ffff8880294b4000 RCX: 0000000000080000 [ 134.673048][ T6676] RDX: ffffc9000ba81000 RSI: 000000000000034b RDI: 000000000000034c [ 134.681032][ T6676] RBP: 0000000000000000 R08: ffff88802edfda00 R09: 0000000000000007 [ 134.689015][ T6676] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 134.696992][ T6676] R13: 0000000000000007 R14: ffff8880294b4180 R15: 1ffff11005296830 [ 134.704982][ T6676] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 134.710815][ T6676] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 134.716637][ T6676] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 134.722643][ T6676] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 134.729157][ T6676] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 134.734809][ T6676] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 134.740461][ T6676] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 134.746121][ T6676] ? ieee80211_get_link_sband+0x335/0x3e0 [ 134.751860][ T6676] sta_link_apply_parameters+0xb75/0xf60 [ 134.757527][ T6676] sta_apply_parameters+0x944/0x15b0 [ 134.762841][ T6676] ieee80211_add_station+0x424/0x6a0 [ 134.768141][ T6676] rdev_add_station+0x108/0x290 [ 134.773004][ T6676] nl80211_new_station+0x1755/0x1b70 [ 134.778315][ T6676] ? __pfx_nl80211_new_station+0x10/0x10 [ 134.783953][ T6676] ? netdev_run_todo+0xe1d/0xea0 [ 134.788938][ T6676] ? nl80211_pre_doit+0x4f1/0x930 [ 134.793984][ T6676] genl_family_rcv_msg_doit+0x212/0x300 [ 134.799573][ T6676] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 134.805687][ T6676] ? bpf_lsm_capable+0x9/0x20 [ 134.810395][ T6676] ? security_capable+0x7e/0x2e0 [ 134.815380][ T6676] genl_rcv_msg+0x60e/0x790 [ 134.819938][ T6676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.824981][ T6676] ? ref_tracker_free+0x63a/0x7d0 [ 134.830020][ T6676] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 134.835411][ T6676] ? __pfx_nl80211_new_station+0x10/0x10 [ 134.841052][ T6676] ? __pfx_nl80211_post_doit+0x10/0x10 [ 134.846530][ T6676] ? __pfx_ref_tracker_free+0x10/0x10 [ 134.851935][ T6676] netlink_rcv_skb+0x205/0x470 [ 134.856714][ T6676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.861770][ T6676] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.867141][ T6676] ? down_read+0x1ad/0x2e0 [ 134.871577][ T6676] genl_rcv+0x28/0x40 [ 134.875577][ T6676] netlink_unicast+0x758/0x8d0 [ 134.880364][ T6676] netlink_sendmsg+0x805/0xb30 [ 134.885147][ T6676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.890453][ T6676] ? aa_sock_msg_perm+0xf1/0x1d0 [ 134.895405][ T6676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.900708][ T6676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.906005][ T6676] __sock_sendmsg+0x219/0x270 [ 134.910697][ T6676] ____sys_sendmsg+0x505/0x830 [ 134.915492][ T6676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.920801][ T6676] ? import_iovec+0x74/0xa0 [ 134.925317][ T6676] ___sys_sendmsg+0x21f/0x2a0 [ 134.930017][ T6676] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.935267][ T6676] ? __fget_files+0x2a/0x420 [ 134.939873][ T6676] ? __fget_files+0x3a0/0x420 [ 134.944571][ T6676] __x64_sys_sendmsg+0x19b/0x260 [ 134.949528][ T6676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.955109][ T6676] ? do_syscall_64+0xbe/0x3b0 [ 134.959805][ T6676] do_syscall_64+0xfa/0x3b0 [ 134.964338][ T6676] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.969550][ T6676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.975631][ T6676] ? clear_bhb_loop+0x60/0xb0 [ 134.980333][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.986235][ T6676] RIP: 0033:0x7f266678e929 [ 134.990672][ T6676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.010304][ T6676] RSP: 002b:00007f2667583038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.018734][ T6676] RAX: ffffffffffffffda RBX: 00007f26669b5fa0 RCX: 00007f266678e929 [ 135.026718][ T6676] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 135.034707][ T6676] RBP: 00007f2666810b39 R08: 0000000000000000 R09: 0000000000000000 [ 135.042692][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.050676][ T6676] R13: 0000000000000000 R14: 00007f26669b5fa0 R15: 00007fffc7289a68 [ 135.058682][ T6676] [ 135.062018][ T6676] Kernel Offset: disabled [ 135.066351][ T6676] Rebooting in 86400 seconds..