last executing test programs: 10.573396145s ago: executing program 3 (id=869): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00', @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x20, 0xa, 0x8, "14022d60f1930bad"}, 0x0, 0x0, 0x0, 0x0}) 10.334265514s ago: executing program 2 (id=872): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x28, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"}], 0x40, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908", 0x4f}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.526314576s ago: executing program 2 (id=880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6ae", 0x3c}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52ee", 0x25}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.656777258s ago: executing program 0 (id=882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x44}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 3.841239006s ago: executing program 3 (id=883): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 3.741071272s ago: executing program 3 (id=884): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080011"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d130f0100000000000d000a0006471a010000190581"], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.022586528s ago: executing program 0 (id=887): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4", 0x8c}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de796", 0x2f}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.939818518s ago: executing program 2 (id=888): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x28, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"}], 0x40, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908", 0x4f}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.016867999s ago: executing program 1 (id=894): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)=ANY=[], 0x9) 1.838122458s ago: executing program 0 (id=895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x44}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 1.770511109s ago: executing program 1 (id=896): socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.756276322s ago: executing program 2 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)={0x6c, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x45b36657}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 1.652006835s ago: executing program 2 (id=898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 1.606933137s ago: executing program 0 (id=899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x24, r1, 0x921, 0x2, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7f}]}, 0x24}}, 0x0) 1.60600312s ago: executing program 1 (id=900): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000200), &(0x7f0000000400)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000000)={0x8000003, 0x202, "679c51ecbc83d1e22e845e3edee602000010000000020000007000"}) 1.304283135s ago: executing program 0 (id=901): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 1.293752371s ago: executing program 3 (id=902): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 1.112459712s ago: executing program 0 (id=903): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000002980)={0x34, &(0x7f0000002780)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.111794701s ago: executing program 3 (id=904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r4, 0x800, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0xc0c5) 770.279091ms ago: executing program 2 (id=905): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 600.124313ms ago: executing program 1 (id=906): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a00", @ANYRES8=r1, @ANYBLOB="a9681a9653d9d42b346bb6903e08ff571f527bc5e79f605dea797d4edf5c5da8b03011ce033225e16d4545bcdaa053d995a5aabbb969d0617cdb31bf06509ea44b529a3550d92f5eab86fbc7648c09725b33475ca953bf1baf6b3e23cb0d7c9603", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) 476.427739ms ago: executing program 1 (id=907): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mq_open(&(0x7f00000000c0)=',\xa0&^\x1f<\x00802\xc2=\xfb\xa6~R\xe8\x11\x1a\xbbuTgA\xbd\xf0\xbe\xf3\xf4\x98\x1f\xbaH\xa9s#\x1b1\xd6\x1f\xc4(\xfa\xe0\x97\x1ek\xaa\xac\xc7\xbaH@\xf28\xf9\xda\x06.', 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 278.348262ms ago: executing program 1 (id=908): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x2f4}], 0x1}}], 0x1, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 3 (id=909): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 83.234131][ T5597] cgroup: Unknown subsys name 'net' [ 83.473596][ T5597] cgroup: Unknown subsys name 'cpuset' [ 83.528772][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.479011][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.101968][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.120928][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.144599][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.160100][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.179877][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.180310][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.181223][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.183072][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.186137][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.192556][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.213646][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.232667][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.236705][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.244192][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.274083][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.278375][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.309429][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.315696][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.316381][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.370018][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.359717][ T5625] Bluetooth: hci0: command tx timeout [ 91.438261][ T4925] Bluetooth: hci3: command tx timeout [ 91.438448][ T5625] Bluetooth: hci2: command tx timeout [ 91.449687][ T5625] Bluetooth: hci1: command tx timeout [ 91.492125][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.492374][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.492573][ T5611] bridge_slave_0: entered allmulticast mode [ 91.496217][ T5611] bridge_slave_0: entered promiscuous mode [ 91.580331][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.580554][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.580967][ T5611] bridge_slave_1: entered allmulticast mode [ 91.584242][ T5611] bridge_slave_1: entered promiscuous mode [ 91.692032][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.692263][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.692446][ T5609] bridge_slave_0: entered allmulticast mode [ 91.694822][ T5609] bridge_slave_0: entered promiscuous mode [ 91.696945][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.697277][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.697556][ T5612] bridge_slave_0: entered allmulticast mode [ 91.716079][ T5612] bridge_slave_0: entered promiscuous mode [ 91.744070][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.745866][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.746186][ T5610] bridge_slave_0: entered allmulticast mode [ 91.768793][ T5610] bridge_slave_0: entered promiscuous mode [ 91.804085][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.804334][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.804514][ T5609] bridge_slave_1: entered allmulticast mode [ 91.806901][ T5609] bridge_slave_1: entered promiscuous mode [ 91.810136][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.812956][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.813677][ T5612] bridge_slave_1: entered allmulticast mode [ 91.824655][ T5612] bridge_slave_1: entered promiscuous mode [ 91.829309][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.836436][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.837195][ T5610] bridge_slave_1: entered allmulticast mode [ 91.847704][ T5610] bridge_slave_1: entered promiscuous mode [ 91.894283][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.941543][ T9] cfg80211: failed to load regulatory.db [ 91.974048][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.123274][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.146747][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.162538][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.194397][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.208225][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.212470][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.216304][ T5611] team0: Port device team_slave_0 added [ 92.289327][ T5611] team0: Port device team_slave_1 added [ 92.376610][ T5609] team0: Port device team_slave_0 added [ 92.384845][ T5612] team0: Port device team_slave_0 added [ 92.394797][ T5610] team0: Port device team_slave_0 added [ 92.425137][ T5609] team0: Port device team_slave_1 added [ 92.430905][ T5612] team0: Port device team_slave_1 added [ 92.444087][ T5610] team0: Port device team_slave_1 added [ 92.445992][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.446002][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.446027][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.557449][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.557462][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.557485][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.665382][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.665395][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.665414][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.667968][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.667980][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.667999][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.688697][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.688733][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.688798][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.746750][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.746800][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.746876][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.765449][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.765491][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.765561][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.776689][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.776732][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.776812][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.993760][ T5611] hsr_slave_0: entered promiscuous mode [ 92.995451][ T5611] hsr_slave_1: entered promiscuous mode [ 93.371583][ T5609] hsr_slave_0: entered promiscuous mode [ 93.373099][ T5609] hsr_slave_1: entered promiscuous mode [ 93.374747][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 93.374832][ T5609] Cannot create hsr debugfs directory [ 93.398050][ T5612] hsr_slave_0: entered promiscuous mode [ 93.404256][ T5612] hsr_slave_1: entered promiscuous mode [ 93.408806][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 93.408870][ T5612] Cannot create hsr debugfs directory [ 93.431257][ T5610] hsr_slave_0: entered promiscuous mode [ 93.432764][ T5610] hsr_slave_1: entered promiscuous mode [ 93.434061][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 93.434089][ T5610] Cannot create hsr debugfs directory [ 93.438590][ T5625] Bluetooth: hci0: command tx timeout [ 93.518375][ T5622] Bluetooth: hci3: command tx timeout [ 93.518375][ T4925] Bluetooth: hci2: command tx timeout [ 93.518475][ T5625] Bluetooth: hci1: command tx timeout [ 94.298732][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.350615][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.355118][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.382878][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.393137][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.435555][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.460202][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.496292][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.636298][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.663809][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.681022][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.712852][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.714987][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.755114][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.786068][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.814306][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.964642][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.004943][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.011328][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.052853][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.057768][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.112543][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.154984][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.184309][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.329599][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.375369][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.391709][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.424584][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.444127][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.474052][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.493944][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.518462][ T5622] Bluetooth: hci0: command tx timeout [ 95.523485][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.599683][ T5622] Bluetooth: hci1: command tx timeout [ 95.599717][ T5622] Bluetooth: hci2: command tx timeout [ 95.599805][ T5625] Bluetooth: hci3: command tx timeout [ 95.652308][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.767303][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.826719][ T1555] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.829665][ T1555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.887057][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.932953][ T1555] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.933112][ T1555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.049589][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.095653][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.095838][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.133608][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.164112][ T1462] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.164226][ T1462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.311318][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.317913][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.394658][ T1462] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.406838][ T1462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.463713][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.463901][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.528262][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.611242][ T797] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.611450][ T797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.664803][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.664983][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.495088][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.599941][ T5625] Bluetooth: hci0: command tx timeout [ 97.681779][ T5625] Bluetooth: hci1: command tx timeout [ 97.681813][ T5625] Bluetooth: hci3: command tx timeout [ 97.681837][ T5625] Bluetooth: hci2: command tx timeout [ 97.945648][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.035329][ T5611] veth0_vlan: entered promiscuous mode [ 98.123658][ T5611] veth1_vlan: entered promiscuous mode [ 98.151239][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.342107][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.361674][ T5611] veth0_macvtap: entered promiscuous mode [ 98.371336][ T5612] veth0_vlan: entered promiscuous mode [ 98.406957][ T5611] veth1_macvtap: entered promiscuous mode [ 98.479608][ T5612] veth1_vlan: entered promiscuous mode [ 98.517542][ T5609] veth0_vlan: entered promiscuous mode [ 98.569436][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.596133][ T5609] veth1_vlan: entered promiscuous mode [ 98.607785][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.683914][ T1462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.715805][ T1462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.737643][ T1462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.767161][ T1462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.778738][ T5610] veth0_vlan: entered promiscuous mode [ 98.862287][ T5612] veth0_macvtap: entered promiscuous mode [ 98.927323][ T5612] veth1_macvtap: entered promiscuous mode [ 98.943884][ T5610] veth1_vlan: entered promiscuous mode [ 99.104847][ T5609] veth0_macvtap: entered promiscuous mode [ 99.156122][ T5609] veth1_macvtap: entered promiscuous mode [ 99.176059][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.232690][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.306100][ T797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.311100][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.311171][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.355193][ T797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.380286][ T797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.383993][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.405272][ T797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.427828][ T5610] veth0_macvtap: entered promiscuous mode [ 99.466826][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.528927][ T5610] veth1_macvtap: entered promiscuous mode [ 99.543587][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.543608][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.629404][ T797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.662537][ T797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.691266][ T797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.746251][ T797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.983829][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.145633][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.209840][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.209860][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.299873][ T1555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.414344][ T1555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.415750][ T1555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.415793][ T1555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.596678][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.596697][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.733944][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.733963][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.911036][ T5763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 101.010696][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.010716][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.069142][ T5622] block nbd0: Receive control failed (result -1) [ 101.841317][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.841353][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.356994][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.357016][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.542053][ T5797] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.104405][ T5857] Zero length message leads to an empty skb [ 106.995774][ T5881] netlink: 'syz.1.49': attribute type 29 has an invalid length. [ 106.997763][ T5881] netlink: 'syz.1.49': attribute type 29 has an invalid length. [ 107.003971][ T5881] netlink: 'syz.1.49': attribute type 29 has an invalid length. [ 107.188525][ T5617] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.188649][ T5720] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.398207][ T5617] usb 4-1: Using ep0 maxpacket: 32 [ 107.398933][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 107.403376][ T5617] usb 4-1: no configurations [ 107.403413][ T5617] usb 4-1: can't read configurations, error -22 [ 107.459950][ T5720] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.459972][ T5720] usb 1-1: config 179 has no interface number 0 [ 107.460199][ T5720] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 107.460220][ T5720] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 107.460318][ T5720] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.460348][ T5720] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 107.460786][ T5720] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.460841][ T5720] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.460858][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.638207][ T5617] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.690468][ T5872] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.798910][ T5617] usb 4-1: Using ep0 maxpacket: 32 [ 107.806110][ T5617] usb 4-1: no configurations [ 107.806131][ T5617] usb 4-1: can't read configurations, error -22 [ 107.824720][ T5617] usb usb4-port1: attempt power cycle [ 108.218397][ T5617] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.239583][ T5617] usb 4-1: Using ep0 maxpacket: 32 [ 108.240578][ T5617] usb 4-1: no configurations [ 108.240594][ T5617] usb 4-1: can't read configurations, error -22 [ 108.398269][ T5617] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.421873][ T5617] usb 4-1: Using ep0 maxpacket: 32 [ 108.422732][ T5617] usb 4-1: no configurations [ 108.422749][ T5617] usb 4-1: can't read configurations, error -22 [ 108.442782][ T5617] usb usb4-port1: unable to enumerate USB device [ 108.681787][ T5720] usb 1-1: USB disconnect, device number 2 [ 108.681873][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 108.682049][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 109.840899][ T5719] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.988621][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 109.991492][ T5719] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 109.991519][ T5719] usb 2-1: config 179 has no interface number 0 [ 109.991571][ T5719] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 109.991613][ T5719] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 109.991641][ T5719] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.991664][ T5719] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 109.991689][ T5719] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 109.991731][ T5719] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 109.991754][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.165209][ T5923] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.655980][ T4938] usb 2-1: USB disconnect, device number 2 [ 110.657427][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 110.657496][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 112.016167][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 112.228250][ T4938] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.379184][ T4938] usb 2-1: Using ep0 maxpacket: 8 [ 112.384068][ T4938] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.384096][ T4938] usb 2-1: config 179 has no interface number 0 [ 112.384153][ T4938] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 112.384182][ T4938] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 112.384217][ T4938] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.384237][ T4938] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 112.384256][ T4938] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 112.384286][ T4938] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 112.384302][ T4938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.510523][ T5972] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.969533][ T5719] usb 2-1: USB disconnect, device number 3 [ 112.969591][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 112.969653][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 113.136656][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 114.140270][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 114.629341][ T5719] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.781893][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 114.786676][ T5719] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 114.786708][ T5719] usb 2-1: config 179 has no interface number 0 [ 114.786757][ T5719] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 114.786787][ T5719] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 114.786876][ T5719] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 114.786905][ T5719] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 114.786934][ T5719] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 114.786979][ T5719] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 114.787012][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.956869][ T6030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.406166][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 115.406237][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 115.413819][ T5719] usb 2-1: USB disconnect, device number 4 [ 116.226253][ T6071] netlink: 'syz.1.129': attribute type 29 has an invalid length. [ 116.244600][ T6071] netlink: 'syz.1.129': attribute type 29 has an invalid length. [ 116.561788][ T6082] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 117.029654][ T5617] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.167170][ T6096] netlink: 'syz.3.141': attribute type 29 has an invalid length. [ 117.176829][ T6096] netlink: 'syz.3.141': attribute type 29 has an invalid length. [ 117.179500][ T5617] usb 2-1: Using ep0 maxpacket: 8 [ 117.194704][ T5617] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 117.194733][ T5617] usb 2-1: config 179 has no interface number 0 [ 117.194791][ T5617] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 117.194820][ T5617] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 117.194850][ T5617] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.194878][ T5617] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 117.194907][ T5617] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 117.194952][ T5617] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 117.194977][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.324575][ T6086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.835304][ T5719] usb 2-1: USB disconnect, device number 5 [ 117.835317][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 117.835378][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 118.262355][ T6118] netlink: 'syz.2.150': attribute type 29 has an invalid length. [ 118.263688][ T6118] netlink: 'syz.2.150': attribute type 29 has an invalid length. [ 119.442423][ T5617] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.608630][ T5617] usb 4-1: Using ep0 maxpacket: 8 [ 119.612171][ T5617] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.612202][ T5617] usb 4-1: config 179 has no interface number 0 [ 119.612260][ T5617] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 119.612304][ T5617] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 119.612336][ T5617] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.612364][ T5617] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 119.612394][ T5617] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.612449][ T5617] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.612475][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.731259][ T6148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.161423][ T5719] usb 4-1: USB disconnect, device number 6 [ 120.161423][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 120.161570][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.355578][ T6290] netlink: 60 bytes leftover after parsing attributes in process `syz.3.222'. [ 132.854321][ T6312] warning: `syz.2.229' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.881550][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881686][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.436201][ T6329] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!hS+4k>WR{`] [ 133.463873][ T6326] syz.2.235 (6326) used greatest stack depth: 17688 bytes left [ 133.983000][ T6344] netlink: 'syz.2.243': attribute type 29 has an invalid length. [ 133.984292][ T6344] netlink: 'syz.2.243': attribute type 29 has an invalid length. [ 133.986871][ T6344] netlink: 'syz.2.243': attribute type 29 has an invalid length. [ 134.991480][ T6380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.260'. [ 134.991507][ T6380] nbd: must specify a device to reconfigure [ 135.332778][ T6392] netlink: 'syz.1.265': attribute type 21 has an invalid length. [ 135.721942][ T6406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.271'. [ 135.721966][ T6406] nbd: must specify a device to reconfigure [ 136.490971][ T6430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.282'. [ 136.491168][ T6430] nbd: must specify a device to reconfigure [ 136.880790][ T92] wlan1: Trigger new scan to find an IBSS to join [ 137.260692][ T6446] netlink: 'syz.2.288': attribute type 5 has an invalid length. [ 137.418496][ T6450] netlink: 'syz.2.289': attribute type 29 has an invalid length. [ 137.474961][ T6450] netlink: 'syz.2.289': attribute type 29 has an invalid length. [ 137.519965][ T6452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'. [ 137.890272][ T6466] netlink: 6060 bytes leftover after parsing attributes in process `syz.0.297'. [ 138.013208][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'. [ 138.093610][ T6474] netlink: 'syz.0.302': attribute type 29 has an invalid length. [ 138.096371][ T6474] netlink: 'syz.0.302': attribute type 29 has an invalid length. [ 138.312961][ T6483] netlink: 'syz.3.305': attribute type 29 has an invalid length. [ 138.338640][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 138.502203][ T6492] netlink: 766 bytes leftover after parsing attributes in process `syz.3.308'. [ 138.664515][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.310'. [ 138.945039][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 139.918962][ T72] wlan1: Trigger new scan to find an IBSS to join [ 140.313138][ T6544] __nla_validate_parse: 1 callbacks suppressed [ 140.313158][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 140.313187][ T6544] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 140.313187][ T6544] Please contact the netfilter-devel mailing list or update your nftables rules. [ 140.376200][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'. [ 140.880740][ T1555] wlan1: Creating new IBSS network, BSSID 72:37:69:09:a9:65 [ 140.976501][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'. [ 142.937759][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 144.588234][ T5617] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.791103][ T5617] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 144.791149][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.791168][ T5617] usb 1-1: Product: syz [ 144.791181][ T5617] usb 1-1: Manufacturer: syz [ 144.791195][ T5617] usb 1-1: SerialNumber: syz [ 144.891453][ T5617] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 145.070097][ T4938] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.486243][ T5720] usb 1-1: USB disconnect, device number 3 [ 146.321063][ T4938] usb 1-1: Service connection timeout for: 256 [ 146.321096][ T4938] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 146.432475][ T4938] ath9k_htc: Failed to initialize the device [ 146.434112][ T5720] usb 1-1: ath9k_htc: USB layer deinitialized [ 148.302828][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 148.630840][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 150.415217][ T6811] validate_nla: 3 callbacks suppressed [ 150.415237][ T6811] netlink: 'syz.0.449': attribute type 1 has an invalid length. [ 153.664866][ T6871] debugfs: '1^!hS+4k>WR{`]y}N\]' already exists in 'ieee80211' [ 153.990800][ T37] audit: type=1326 audit(1782151882.319:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.3.472" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f725dfdce59 code=0x0 [ 154.581854][ T6894] sysfs: cannot create duplicate filename '/class/ieee80211/1^!hS+4k>WR{`]y}N\]' [ 154.581899][ T6894] CPU: 0 UID: 0 PID: 6894 Comm: syz.0.481 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.581925][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.581953][ T6894] Call Trace: [ 154.581967][ T6894] [ 154.581977][ T6894] dump_stack_lvl+0xe8/0x150 [ 154.582011][ T6894] sysfs_warn_dup+0x8e/0xa0 [ 154.582048][ T6894] sysfs_do_create_link_sd+0xc0/0x110 [ 154.582088][ T6894] device_add_class_symlinks+0x1d2/0x240 [ 154.582121][ T6894] device_add+0x475/0xb90 [ 154.582152][ T6894] wiphy_register+0x1fb1/0x2fe0 [ 154.582195][ T6894] ? __pfx_wiphy_register+0x10/0x10 [ 154.582223][ T6894] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 154.582266][ T6894] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 154.582299][ T6894] ieee80211_register_hw+0x3c56/0x4910 [ 154.582340][ T6894] ? ieee80211_register_hw+0x1991/0x4910 [ 154.582400][ T6894] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 154.582433][ T6894] ? __asan_memset+0x22/0x50 [ 154.582467][ T6894] ? __hrtimer_setup+0x1c2/0x260 [ 154.582489][ T6894] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 154.582520][ T6894] mac80211_hwsim_new_radio+0x32c0/0x5750 [ 154.582562][ T6894] ? mac80211_hwsim_new_radio+0xee/0x5750 [ 154.582610][ T6894] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 154.582642][ T6894] ? __asan_memcpy+0x40/0x70 [ 154.582681][ T6894] hwsim_new_radio_nl+0xd96/0xfa0 [ 154.582724][ T6894] genl_family_rcv_msg_doit+0x22a/0x330 [ 154.582771][ T6894] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 154.582823][ T6894] ? bpf_lsm_capable+0x9/0x20 [ 154.582853][ T6894] ? security_capable+0x7e/0x2c0 [ 154.582897][ T6894] genl_rcv_msg+0x61c/0x7a0 [ 154.582940][ T6894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.582993][ T6894] ? ref_tracker_free+0x673/0x820 [ 154.583026][ T6894] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 154.583050][ T6894] ? ____sys_sendmsg+0x55c/0x870 [ 154.583075][ T6894] ? ___sys_sendmsg+0x2a5/0x360 [ 154.583099][ T6894] ? __x64_sys_sendmsg+0x1b7/0x290 [ 154.583124][ T6894] ? do_syscall_64+0x174/0x580 [ 154.583150][ T6894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.583182][ T6894] netlink_rcv_skb+0x232/0x4b0 [ 154.583210][ T6894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.583245][ T6894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.583289][ T6894] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.583316][ T6894] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.583346][ T6894] genl_rcv+0x28/0x40 [ 154.583377][ T6894] netlink_unicast+0x780/0x920 [ 154.583413][ T6894] netlink_sendmsg+0x813/0xb40 [ 154.583450][ T6894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.583480][ T6894] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 154.583510][ T6894] ? futex_unqueue+0x22/0x240 [ 154.583540][ T6894] ? aa_sock_msg_perm+0x122/0x200 [ 154.583562][ T6894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.583588][ T6894] sock_sendmsg_nosec+0x13a/0x180 [ 154.583625][ T6894] ____sys_sendmsg+0x55c/0x870 [ 154.583658][ T6894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.583694][ T6894] ? import_iovec+0x73/0xa0 [ 154.583723][ T6894] ___sys_sendmsg+0x2a5/0x360 [ 154.583748][ T6894] ? __lock_acquire+0x6b5/0x2d10 [ 154.583798][ T6894] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.583832][ T6894] ? futex_wait+0x2a2/0x390 [ 154.583890][ T6894] ? __fget_files+0x2a/0x420 [ 154.583913][ T6894] ? __fget_files+0x3a6/0x420 [ 154.583956][ T6894] __x64_sys_sendmsg+0x1b7/0x290 [ 154.583990][ T6894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.584041][ T6894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.584067][ T6894] do_syscall_64+0x174/0x580 [ 154.584095][ T6894] ? trace_irq_disable+0x3b/0x140 [ 154.584124][ T6894] ? clear_bhb_loop+0x40/0x90 [ 154.584153][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.584175][ T6894] RIP: 0033:0x7f9d7659ce59 [ 154.584205][ T6894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.584224][ T6894] RSP: 002b:00007f9d747f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.584255][ T6894] RAX: ffffffffffffffda RBX: 00007f9d76815fa0 RCX: 00007f9d7659ce59 [ 154.584272][ T6894] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 154.584286][ T6894] RBP: 00007f9d76632e6f R08: 0000000000000000 R09: 0000000000000000 [ 154.584300][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.584314][ T6894] R13: 00007f9d76816038 R14: 00007f9d76815fa0 R15: 00007fff75849788 [ 154.584350][ T6894] [ 155.710350][ T6915] capability: warning: `syz.1.490' uses deprecated v2 capabilities in a way that may be insecure [ 155.710972][ T6915] netlink: 4816 bytes leftover after parsing attributes in process `syz.1.490'. [ 155.740470][ T5720] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.908240][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 155.911757][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.911805][ T5720] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.911831][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.941461][ T5720] usb 1-1: config 0 descriptor?? [ 156.201069][ T5720] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 156.686303][ T4938] usb 1-1: USB disconnect, device number 4 [ 161.228243][ T4938] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 161.383357][ T4938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.383427][ T4938] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 161.383456][ T4938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 161.383484][ T4938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 161.383508][ T4938] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 161.448431][ T4938] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 161.448463][ T4938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 161.448485][ T4938] usb 3-1: Product: syz [ 161.448499][ T4938] usb 3-1: Manufacturer: syz [ 161.448575][ T4938] usb 3-1: SerialNumber: syz [ 161.494761][ T4938] usb 3-1: config 0 descriptor?? [ 161.747520][ T4938] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 161.747549][ T4938] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 161.952642][ T4938] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 161.952670][ T4938] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 161.952692][ T4938] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 162.154429][ T4938] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 162.974399][ T4938] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 162.995739][ T4938] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 163.054514][ T4938] usb 3-1: USB disconnect, device number 2 [ 165.015773][ T7082] netlink: 64 bytes leftover after parsing attributes in process `syz.1.557'. [ 166.483294][ T7120] netlink: 64 bytes leftover after parsing attributes in process `syz.0.569'. [ 167.171342][ T7139] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.577'. [ 167.613315][ T7150] debugfs: '1^!hS+4k>WR{`]y}N\]' already exists in 'ieee80211' [ 167.914289][ T7156] netlink: 64 bytes leftover after parsing attributes in process `syz.2.585'. [ 168.581955][ T7178] sysfs: cannot create duplicate filename '/class/ieee80211/1^!hS+4k>WR{`]y}N\]' [ 168.581978][ T7178] CPU: 0 UID: 0 PID: 7178 Comm: syz.3.595 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.582006][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 168.582020][ T7178] Call Trace: [ 168.582029][ T7178] [ 168.582038][ T7178] dump_stack_lvl+0xe8/0x150 [ 168.582073][ T7178] sysfs_warn_dup+0x8e/0xa0 [ 168.582111][ T7178] sysfs_do_create_link_sd+0xc0/0x110 [ 168.582150][ T7178] device_add_class_symlinks+0x1d2/0x240 [ 168.582183][ T7178] device_add+0x475/0xb90 [ 168.582215][ T7178] wiphy_register+0x1fb1/0x2fe0 [ 168.582268][ T7178] ? __pfx_wiphy_register+0x10/0x10 [ 168.582298][ T7178] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 168.582344][ T7178] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 168.582376][ T7178] ieee80211_register_hw+0x3c56/0x4910 [ 168.582419][ T7178] ? ieee80211_register_hw+0x1991/0x4910 [ 168.582478][ T7178] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 168.582512][ T7178] ? __asan_memset+0x22/0x50 [ 168.582546][ T7178] ? __hrtimer_setup+0x1c2/0x260 [ 168.582569][ T7178] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 168.582602][ T7178] mac80211_hwsim_new_radio+0x32c0/0x5750 [ 168.582646][ T7178] ? mac80211_hwsim_new_radio+0xee/0x5750 [ 168.582706][ T7178] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 168.582736][ T7178] ? __asan_memcpy+0x40/0x70 [ 168.582775][ T7178] hwsim_new_radio_nl+0xd96/0xfa0 [ 168.582817][ T7178] genl_family_rcv_msg_doit+0x22a/0x330 [ 168.582863][ T7178] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 168.582914][ T7178] ? bpf_lsm_capable+0x9/0x20 [ 168.582943][ T7178] ? security_capable+0x7e/0x2c0 [ 168.582987][ T7178] genl_rcv_msg+0x61c/0x7a0 [ 168.583031][ T7178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.583064][ T7178] ? ref_tracker_free+0x673/0x820 [ 168.583098][ T7178] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 168.583123][ T7178] ? ____sys_sendmsg+0x55c/0x870 [ 168.583149][ T7178] ? ___sys_sendmsg+0x2a5/0x360 [ 168.583174][ T7178] ? __x64_sys_sendmsg+0x1b7/0x290 [ 168.583200][ T7178] ? do_syscall_64+0x174/0x580 [ 168.583227][ T7178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.583272][ T7178] netlink_rcv_skb+0x232/0x4b0 [ 168.583303][ T7178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.583339][ T7178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.583383][ T7178] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.583412][ T7178] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.583445][ T7178] genl_rcv+0x28/0x40 [ 168.583477][ T7178] netlink_unicast+0x780/0x920 [ 168.583515][ T7178] netlink_sendmsg+0x813/0xb40 [ 168.583555][ T7178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.583587][ T7178] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 168.583618][ T7178] ? futex_unqueue+0x22/0x240 [ 168.583649][ T7178] ? aa_sock_msg_perm+0x122/0x200 [ 168.583674][ T7178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.583702][ T7178] sock_sendmsg_nosec+0x13a/0x180 [ 168.583741][ T7178] ____sys_sendmsg+0x55c/0x870 [ 168.583772][ T7178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.583803][ T7178] ? import_iovec+0x73/0xa0 [ 168.583829][ T7178] ___sys_sendmsg+0x2a5/0x360 [ 168.583851][ T7178] ? __lock_acquire+0x6b5/0x2d10 [ 168.583878][ T7178] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.583904][ T7178] ? futex_wait+0x2a2/0x390 [ 168.583949][ T7178] ? __fget_files+0x2a/0x420 [ 168.583966][ T7178] ? __fget_files+0x3a6/0x420 [ 168.583993][ T7178] __x64_sys_sendmsg+0x1b7/0x290 [ 168.584018][ T7178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.584056][ T7178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.584076][ T7178] do_syscall_64+0x174/0x580 [ 168.584098][ T7178] ? trace_irq_disable+0x3b/0x140 [ 168.584120][ T7178] ? clear_bhb_loop+0x40/0x90 [ 168.584142][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.584160][ T7178] RIP: 0033:0x7f725dfdce59 [ 168.584177][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.584192][ T7178] RSP: 002b:00007f725c22e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.584212][ T7178] RAX: ffffffffffffffda RBX: 00007f725e255fa0 RCX: 00007f725dfdce59 [ 168.584225][ T7178] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 168.584247][ T7178] RBP: 00007f725e072e6f R08: 0000000000000000 R09: 0000000000000000 [ 168.584258][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.584268][ T7178] R13: 00007f725e256038 R14: 00007f725e255fa0 R15: 00007fff03656458 [ 168.584297][ T7178] [ 169.718202][ T32] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 169.868280][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 169.873457][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.873508][ T32] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.873533][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.940260][ T32] usb 4-1: config 0 descriptor?? [ 170.166872][ T32] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 170.651686][ T5719] usb 4-1: USB disconnect, device number 7 [ 170.977625][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 171.738206][ T5617] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 171.931939][ T5617] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.932000][ T5617] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 171.932026][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 171.932052][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 171.932073][ T5617] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 171.936948][ T5617] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 171.936986][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 171.937010][ T5617] usb 1-1: Product: syz [ 171.937026][ T5617] usb 1-1: Manufacturer: syz [ 171.937042][ T5617] usb 1-1: SerialNumber: syz [ 172.049445][ T5617] usb 1-1: config 0 descriptor?? [ 172.087041][ T5622] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 172.087786][ T5622] Bluetooth: hci0: Injecting HCI hardware error event [ 172.102258][ T5625] Bluetooth: hci0: hardware error 0x00 [ 172.363874][ T5617] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 172.363901][ T5617] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 172.570304][ T5617] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 172.570330][ T5617] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 172.570352][ T5617] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 172.772381][ T5617] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 173.377480][ T5617] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 173.377815][ T5617] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 173.406216][ T5617] usb 1-1: USB disconnect, device number 5 [ 174.480315][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 175.559672][ T7306] sctp: [Deprecated]: syz.1.647 (pid 7306) Use of int in max_burst socket option deprecated. [ 175.559672][ T7306] Use struct sctp_assoc_value instead [ 176.173332][ T7326] sysfs: cannot create duplicate filename '/class/ieee80211/1^!hS+4k>WR{`]y}N\]' [ 176.173360][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.1.655 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.173388][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.173403][ T7326] Call Trace: [ 176.173411][ T7326] [ 176.173421][ T7326] dump_stack_lvl+0xe8/0x150 [ 176.173457][ T7326] sysfs_warn_dup+0x8e/0xa0 [ 176.173499][ T7326] sysfs_do_create_link_sd+0xc0/0x110 [ 176.173540][ T7326] device_add_class_symlinks+0x1d2/0x240 [ 176.173574][ T7326] device_add+0x475/0xb90 [ 176.173607][ T7326] wiphy_register+0x1fb1/0x2fe0 [ 176.173651][ T7326] ? __pfx_wiphy_register+0x10/0x10 [ 176.173691][ T7326] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 176.173740][ T7326] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 176.173774][ T7326] ieee80211_register_hw+0x3c56/0x4910 [ 176.173817][ T7326] ? ieee80211_register_hw+0x1991/0x4910 [ 176.173877][ T7326] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 176.173911][ T7326] ? __asan_memset+0x22/0x50 [ 176.173946][ T7326] ? __hrtimer_setup+0x1c2/0x260 [ 176.173970][ T7326] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 176.174004][ T7326] mac80211_hwsim_new_radio+0x32c0/0x5750 [ 176.174048][ T7326] ? mac80211_hwsim_new_radio+0xee/0x5750 [ 176.174096][ T7326] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 176.174130][ T7326] ? __asan_memcpy+0x40/0x70 [ 176.174171][ T7326] hwsim_new_radio_nl+0xd96/0xfa0 [ 176.174215][ T7326] genl_family_rcv_msg_doit+0x22a/0x330 [ 176.174262][ T7326] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 176.174314][ T7326] ? bpf_lsm_capable+0x9/0x20 [ 176.174344][ T7326] ? security_capable+0x7e/0x2c0 [ 176.174389][ T7326] genl_rcv_msg+0x61c/0x7a0 [ 176.174434][ T7326] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.174468][ T7326] ? ref_tracker_free+0x673/0x820 [ 176.174502][ T7326] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 176.174529][ T7326] ? ____sys_sendmsg+0x55c/0x870 [ 176.174556][ T7326] ? ___sys_sendmsg+0x2a5/0x360 [ 176.174583][ T7326] ? __x64_sys_sendmsg+0x1b7/0x290 [ 176.174610][ T7326] ? do_syscall_64+0x174/0x580 [ 176.174640][ T7326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.174683][ T7326] netlink_rcv_skb+0x232/0x4b0 [ 176.174715][ T7326] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.174755][ T7326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.174800][ T7326] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.174828][ T7326] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.174863][ T7326] genl_rcv+0x28/0x40 [ 176.174896][ T7326] netlink_unicast+0x780/0x920 [ 176.174934][ T7326] netlink_sendmsg+0x813/0xb40 [ 176.174976][ T7326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.175009][ T7326] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 176.175041][ T7326] ? futex_unqueue+0x22/0x240 [ 176.175072][ T7326] ? aa_sock_msg_perm+0x122/0x200 [ 176.175098][ T7326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.175128][ T7326] sock_sendmsg_nosec+0x13a/0x180 [ 176.175169][ T7326] ____sys_sendmsg+0x55c/0x870 [ 176.175205][ T7326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.175246][ T7326] ? import_iovec+0x73/0xa0 [ 176.175276][ T7326] ___sys_sendmsg+0x2a5/0x360 [ 176.175303][ T7326] ? __lock_acquire+0x6b5/0x2d10 [ 176.175339][ T7326] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.175374][ T7326] ? futex_wait+0x2a2/0x390 [ 176.175488][ T7326] ? __fget_files+0x2a/0x420 [ 176.175530][ T7326] ? __fget_files+0x3a6/0x420 [ 176.175573][ T7326] __x64_sys_sendmsg+0x1b7/0x290 [ 176.175628][ T7326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.175724][ T7326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.175764][ T7326] do_syscall_64+0x174/0x580 [ 176.175794][ T7326] ? trace_irq_disable+0x3b/0x140 [ 176.175824][ T7326] ? clear_bhb_loop+0x40/0x90 [ 176.175853][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.175877][ T7326] RIP: 0033:0x7fd1d348ce59 [ 176.175898][ T7326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.175918][ T7326] RSP: 002b:00007fd1d16de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.175943][ T7326] RAX: ffffffffffffffda RBX: 00007fd1d3705fa0 RCX: 00007fd1d348ce59 [ 176.175961][ T7326] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 176.175975][ T7326] RBP: 00007fd1d3522e6f R08: 0000000000000000 R09: 0000000000000000 [ 176.175990][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.176004][ T7326] R13: 00007fd1d3706038 R14: 00007fd1d3705fa0 R15: 00007ffef17486c8 [ 176.176042][ T7326] [ 176.259336][ T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 176.448398][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 176.521695][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.521833][ T32] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 176.521895][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.706791][ T32] usb 4-1: config 0 descriptor?? [ 176.951568][ T32] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 178.199865][ T7363] sysfs: cannot create duplicate filename '/class/ieee80211/1^!hS+4k>WR{`]y}N\]' [ 178.199894][ T7363] CPU: 1 UID: 0 PID: 7363 Comm: syz.1.665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.199924][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.199938][ T7363] Call Trace: [ 178.199947][ T7363] [ 178.199957][ T7363] dump_stack_lvl+0xe8/0x150 [ 178.199993][ T7363] sysfs_warn_dup+0x8e/0xa0 [ 178.200032][ T7363] sysfs_do_create_link_sd+0xc0/0x110 [ 178.200072][ T7363] device_add_class_symlinks+0x1d2/0x240 [ 178.200104][ T7363] device_add+0x475/0xb90 [ 178.200136][ T7363] wiphy_register+0x1fb1/0x2fe0 [ 178.200179][ T7363] ? __pfx_wiphy_register+0x10/0x10 [ 178.200205][ T7363] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 178.200237][ T7363] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 178.200263][ T7363] ieee80211_register_hw+0x3c56/0x4910 [ 178.200300][ T7363] ? ieee80211_register_hw+0x1991/0x4910 [ 178.200349][ T7363] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 178.200378][ T7363] ? __asan_memset+0x22/0x50 [ 178.200410][ T7363] ? __hrtimer_setup+0x1c2/0x260 [ 178.200430][ T7363] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 178.200470][ T7363] mac80211_hwsim_new_radio+0x32c0/0x5750 [ 178.200518][ T7363] ? mac80211_hwsim_new_radio+0xee/0x5750 [ 178.200557][ T7363] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 178.200584][ T7363] ? __asan_memcpy+0x40/0x70 [ 178.200617][ T7363] hwsim_new_radio_nl+0xd96/0xfa0 [ 178.200650][ T7363] genl_family_rcv_msg_doit+0x22a/0x330 [ 178.200689][ T7363] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 178.200733][ T7363] ? bpf_lsm_capable+0x9/0x20 [ 178.200760][ T7363] ? security_capable+0x7e/0x2c0 [ 178.200802][ T7363] genl_rcv_msg+0x61c/0x7a0 [ 178.200842][ T7363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.200874][ T7363] ? ref_tracker_free+0x673/0x820 [ 178.200906][ T7363] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 178.200930][ T7363] ? ____sys_sendmsg+0x55c/0x870 [ 178.200955][ T7363] ? ___sys_sendmsg+0x2a5/0x360 [ 178.200990][ T7363] netlink_rcv_skb+0x232/0x4b0 [ 178.201019][ T7363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.201055][ T7363] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.201105][ T7363] genl_rcv+0x28/0x40 [ 178.201135][ T7363] netlink_unicast+0x780/0x920 [ 178.201170][ T7363] netlink_sendmsg+0x813/0xb40 [ 178.201207][ T7363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.201238][ T7363] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 178.201268][ T7363] ? futex_unqueue+0x22/0x240 [ 178.201297][ T7363] ? aa_sock_msg_perm+0x122/0x200 [ 178.201320][ T7363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.201347][ T7363] sock_sendmsg_nosec+0x13a/0x180 [ 178.201382][ T7363] ____sys_sendmsg+0x55c/0x870 [ 178.201416][ T7363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.201452][ T7363] ? import_iovec+0x73/0xa0 [ 178.201476][ T7363] ___sys_sendmsg+0x2a5/0x360 [ 178.201504][ T7363] ? __lock_acquire+0x6b5/0x2d10 [ 178.201530][ T7363] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.201554][ T7363] ? futex_wait+0x2a2/0x390 [ 178.201595][ T7363] ? __fget_files+0x2a/0x420 [ 178.201612][ T7363] ? __fget_files+0x3a6/0x420 [ 178.201638][ T7363] __x64_sys_sendmsg+0x1b7/0x290 [ 178.201661][ T7363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.201697][ T7363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.201715][ T7363] do_syscall_64+0x174/0x580 [ 178.201737][ T7363] ? trace_irq_disable+0x3b/0x140 [ 178.201757][ T7363] ? clear_bhb_loop+0x40/0x90 [ 178.201778][ T7363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.201795][ T7363] RIP: 0033:0x7fd1d348ce59 [ 178.201811][ T7363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.201826][ T7363] RSP: 002b:00007fd1d16de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.201847][ T7363] RAX: ffffffffffffffda RBX: 00007fd1d3705fa0 RCX: 00007fd1d348ce59 [ 178.201860][ T7363] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 178.201870][ T7363] RBP: 00007fd1d3522e6f R08: 0000000000000000 R09: 0000000000000000 [ 178.201880][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.201889][ T7363] R13: 00007fd1d3706038 R14: 00007fd1d3705fa0 R15: 00007ffef17486c8 [ 178.201915][ T7363] [ 179.211075][ T32] usb 4-1: USB disconnect, device number 8 [ 179.764934][ T5625] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 179.765247][ T5625] Bluetooth: hci2: Injecting HCI hardware error event [ 179.767325][ T5622] Bluetooth: hci2: hardware error 0x00 [ 179.985904][ T5768] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 180.108206][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.138171][ T5768] usb 4-1: Using ep0 maxpacket: 8 [ 180.143857][ T5768] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.145137][ T5768] usb 4-1: config 0 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1023 [ 180.145166][ T5768] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.147615][ T5768] usb 4-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=65.39 [ 180.147643][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.147663][ T5768] usb 4-1: Product: syz [ 180.147678][ T5768] usb 4-1: Manufacturer: syz [ 180.147698][ T5768] usb 4-1: SerialNumber: syz [ 180.200014][ T5617] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.226554][ T5768] usb 4-1: config 0 descriptor?? [ 180.234041][ T7406] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.272164][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 180.272195][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.272216][ T10] usb 2-1: Product: syz [ 180.272231][ T10] usb 2-1: Manufacturer: syz [ 180.272247][ T10] usb 2-1: SerialNumber: syz [ 180.343307][ T10] usb 2-1: config 0 descriptor?? [ 180.359716][ T5617] usb 1-1: Using ep0 maxpacket: 8 [ 180.379982][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.380093][ T5617] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.380120][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.431769][ T5617] usb 1-1: config 0 descriptor?? [ 180.485507][ T5768] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 180.486232][ T5768] usb 4-1: selecting invalid altsetting 0 [ 180.511888][ T5768] usb 4-1: USB disconnect, device number 9 [ 180.518426][ T2397] pvrusb2: Failed to submit write-control URB status=-19 [ 180.519248][ T2397] pvrusb2: Device being rendered inoperable [ 180.542257][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 180.542269][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 180.722334][ T7419] netlink: 'syz.2.685': attribute type 29 has an invalid length. [ 180.792238][ T5617] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 180.833931][ T10] usb 2-1: Firmware: major: 49, minor: 56, hardware type: UNKNOWN (52) [ 181.050026][ T10] usb 2-1: no permanent extended address found, random address set [ 181.053557][ T10] usb 2-1: atusb_probe: initialization failed, error = -524 [ 181.057291][ T10] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 181.270348][ T5617] usb 2-1: USB disconnect, device number 6 [ 182.000420][ T5622] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 182.516859][ T7443] netlink: 'syz.3.694': attribute type 29 has an invalid length. [ 183.008257][ T5768] usb 1-1: USB disconnect, device number 6 [ 183.373221][ T7466] netlink: 'syz.2.703': attribute type 29 has an invalid length. [ 183.519503][ T5768] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.673276][ T5768] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 183.673373][ T5768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.673397][ T5768] usb 1-1: Product: syz [ 183.673412][ T5768] usb 1-1: Manufacturer: syz [ 183.673426][ T5768] usb 1-1: SerialNumber: syz [ 183.709985][ T5768] usb 1-1: config 0 descriptor?? [ 184.162593][ T5768] usb 1-1: Firmware: major: 49, minor: 56, hardware type: UNKNOWN (52) [ 184.364455][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 184.365524][ T5768] usb 1-1: failed to fetch extended address, random address set [ 184.365553][ T5768] usb 1-1: atusb_probe: initialization failed, error = -524 [ 184.365816][ T5768] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 184.416135][ T5768] usb 1-1: USB disconnect, device number 7 [ 185.356309][ T7488] netlink: 'syz.1.712': attribute type 29 has an invalid length. [ 185.357664][ T7488] netlink: 'syz.1.712': attribute type 29 has an invalid length. [ 185.529081][ T4938] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 185.542166][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 185.678291][ T4938] usb 3-1: Using ep0 maxpacket: 8 [ 185.686647][ T4938] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 185.686671][ T4938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 185.686686][ T4938] usb 3-1: Product: syz [ 185.686697][ T4938] usb 3-1: Manufacturer: syz [ 185.686707][ T4938] usb 3-1: SerialNumber: syz [ 185.730612][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.730667][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 185.730695][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 185.730723][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 185.730746][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 185.735648][ T4938] usb 3-1: config 0 descriptor?? [ 185.738288][ T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 185.738397][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 185.738473][ T10] usb 4-1: Product: syz [ 185.738507][ T10] usb 4-1: Manufacturer: syz [ 185.738549][ T10] usb 4-1: SerialNumber: syz [ 185.857197][ T10] usb 4-1: config 0 descriptor?? [ 185.857417][ T4938] gspca_main: sq905-2.14.0 probing 2770:9120 [ 185.972087][ T7502] netlink: 'syz.0.718': attribute type 29 has an invalid length. [ 185.973585][ T7502] netlink: 'syz.0.718': attribute type 29 has an invalid length. [ 186.083797][ T10] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 186.083817][ T10] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 186.284596][ T10] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 186.284614][ T10] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 186.284629][ T10] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 186.485502][ T10] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 186.561241][ T4938] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 186.561355][ T4938] sq905 3-1:0.0: probe with driver sq905 failed with error -32 [ 186.612302][ T4938] usb 3-1: USB disconnect, device number 3 [ 186.803341][ T7510] sysfs: cannot create duplicate filename '/class/ieee80211/1^!hS+4k>WR{`]y}N\]' [ 186.803375][ T7510] CPU: 0 UID: 0 PID: 7510 Comm: syz.1.721 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.803398][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.803408][ T7510] Call Trace: [ 186.803415][ T7510] [ 186.803421][ T7510] dump_stack_lvl+0xe8/0x150 [ 186.803448][ T7510] sysfs_warn_dup+0x8e/0xa0 [ 186.803475][ T7510] sysfs_do_create_link_sd+0xc0/0x110 [ 186.803503][ T7510] device_add_class_symlinks+0x1d2/0x240 [ 186.803526][ T7510] device_add+0x475/0xb90 [ 186.803547][ T7510] wiphy_register+0x1fb1/0x2fe0 [ 186.803577][ T7510] ? __pfx_wiphy_register+0x10/0x10 [ 186.803596][ T7510] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 186.803624][ T7510] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 186.803646][ T7510] ieee80211_register_hw+0x3c56/0x4910 [ 186.803675][ T7510] ? ieee80211_register_hw+0x1991/0x4910 [ 186.803715][ T7510] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 186.803738][ T7510] ? __asan_memset+0x22/0x50 [ 186.803761][ T7510] ? __hrtimer_setup+0x1c2/0x260 [ 186.803776][ T7510] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 186.803798][ T7510] mac80211_hwsim_new_radio+0x32c0/0x5750 [ 186.803827][ T7510] ? mac80211_hwsim_new_radio+0xee/0x5750 [ 186.803879][ T7510] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 186.803902][ T7510] ? __asan_memcpy+0x40/0x70 [ 186.803930][ T7510] hwsim_new_radio_nl+0xd96/0xfa0 [ 186.803978][ T7510] genl_family_rcv_msg_doit+0x22a/0x330 [ 186.804026][ T7510] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 186.804083][ T7510] ? bpf_lsm_capable+0x9/0x20 [ 186.804105][ T7510] ? security_capable+0x7e/0x2c0 [ 186.804136][ T7510] genl_rcv_msg+0x61c/0x7a0 [ 186.804167][ T7510] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.804190][ T7510] ? ref_tracker_free+0x673/0x820 [ 186.804214][ T7510] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 186.804232][ T7510] ? ____sys_sendmsg+0x55c/0x870 [ 186.804251][ T7510] ? ___sys_sendmsg+0x2a5/0x360 [ 186.804278][ T7510] netlink_rcv_skb+0x232/0x4b0 [ 186.804299][ T7510] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.804325][ T7510] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.804368][ T7510] genl_rcv+0x28/0x40 [ 186.804392][ T7510] netlink_unicast+0x780/0x920 [ 186.804438][ T7510] netlink_sendmsg+0x813/0xb40 [ 186.804481][ T7510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.804517][ T7510] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 186.804545][ T7510] ? futex_unqueue+0x22/0x240 [ 186.804568][ T7510] ? aa_sock_msg_perm+0x122/0x200 [ 186.804585][ T7510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.804606][ T7510] sock_sendmsg_nosec+0x13a/0x180 [ 186.804634][ T7510] ____sys_sendmsg+0x55c/0x870 [ 186.804659][ T7510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.804687][ T7510] ? import_iovec+0x73/0xa0 [ 186.804707][ T7510] ___sys_sendmsg+0x2a5/0x360 [ 186.804726][ T7510] ? __lock_acquire+0x6b5/0x2d10 [ 186.804751][ T7510] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.804775][ T7510] ? futex_wait+0x2a2/0x390 [ 186.804816][ T7510] ? __fget_files+0x2a/0x420 [ 186.804831][ T7510] ? __fget_files+0x3a6/0x420 [ 186.804857][ T7510] __x64_sys_sendmsg+0x1b7/0x290 [ 186.804881][ T7510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.804916][ T7510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.804934][ T7510] do_syscall_64+0x174/0x580 [ 186.804955][ T7510] ? trace_irq_disable+0x3b/0x140 [ 186.804975][ T7510] ? clear_bhb_loop+0x40/0x90 [ 186.804995][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.805011][ T7510] RIP: 0033:0x7fd1d348ce59 [ 186.805027][ T7510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.805040][ T7510] RSP: 002b:00007fd1d16de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.805057][ T7510] RAX: ffffffffffffffda RBX: 00007fd1d3705fa0 RCX: 00007fd1d348ce59 [ 186.805069][ T7510] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 186.805079][ T7510] RBP: 00007fd1d3522e6f R08: 0000000000000000 R09: 0000000000000000 [ 186.805089][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.805098][ T7510] R13: 00007fd1d3706038 R14: 00007fd1d3705fa0 R15: 00007ffef17486c8 [ 186.805124][ T7510] [ 187.264314][ T10] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 187.264553][ T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 187.346485][ T10] usb 4-1: USB disconnect, device number 10 [ 187.346755][ T7512] netlink: 'syz.2.722': attribute type 29 has an invalid length. [ 187.368491][ T7512] netlink: 'syz.2.722': attribute type 29 has an invalid length. [ 187.808316][ T32] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.844127][ T7522] netlink: 'syz.1.727': attribute type 29 has an invalid length. [ 187.845689][ T7522] netlink: 'syz.1.727': attribute type 29 has an invalid length. [ 187.988340][ T32] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 187.988385][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.988406][ T32] usb 3-1: Product: syz [ 187.988421][ T32] usb 3-1: Manufacturer: syz [ 187.988436][ T32] usb 3-1: SerialNumber: syz [ 187.995623][ T32] usb 3-1: config 0 descriptor?? [ 188.153413][ T7534] netlink: 'syz.3.731': attribute type 29 has an invalid length. [ 188.155742][ T7534] netlink: 'syz.3.731': attribute type 29 has an invalid length. [ 188.264543][ T7538] sysfs: cannot create duplicate filename '/class/ieee80211/1^!hS+4k>WR{`]y}N\]' [ 188.264569][ T7538] CPU: 0 UID: 0 PID: 7538 Comm: syz.3.733 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 188.264595][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.264608][ T7538] Call Trace: [ 188.264617][ T7538] [ 188.264627][ T7538] dump_stack_lvl+0xe8/0x150 [ 188.264663][ T7538] sysfs_warn_dup+0x8e/0xa0 [ 188.264703][ T7538] sysfs_do_create_link_sd+0xc0/0x110 [ 188.264754][ T7538] device_add_class_symlinks+0x1d2/0x240 [ 188.264786][ T7538] device_add+0x475/0xb90 [ 188.264830][ T7538] wiphy_register+0x1fb1/0x2fe0 [ 188.264874][ T7538] ? __pfx_wiphy_register+0x10/0x10 [ 188.264902][ T7538] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 188.264943][ T7538] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 188.264974][ T7538] ieee80211_register_hw+0x3c56/0x4910 [ 188.265016][ T7538] ? ieee80211_register_hw+0x1991/0x4910 [ 188.265074][ T7538] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 188.265106][ T7538] ? __asan_memset+0x22/0x50 [ 188.265138][ T7538] ? __hrtimer_setup+0x1c2/0x260 [ 188.265161][ T7538] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 188.265195][ T7538] mac80211_hwsim_new_radio+0x32c0/0x5750 [ 188.265237][ T7538] ? mac80211_hwsim_new_radio+0xee/0x5750 [ 188.265282][ T7538] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 188.265312][ T7538] ? __asan_memcpy+0x40/0x70 [ 188.265371][ T7538] hwsim_new_radio_nl+0xd96/0xfa0 [ 188.265415][ T7538] genl_family_rcv_msg_doit+0x22a/0x330 [ 188.265463][ T7538] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 188.265516][ T7538] ? bpf_lsm_capable+0x9/0x20 [ 188.265547][ T7538] ? security_capable+0x7e/0x2c0 [ 188.265592][ T7538] genl_rcv_msg+0x61c/0x7a0 [ 188.265635][ T7538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.265670][ T7538] ? ref_tracker_free+0x673/0x820 [ 188.265706][ T7538] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 188.265741][ T7538] ? ____sys_sendmsg+0x55c/0x870 [ 188.265769][ T7538] ? ___sys_sendmsg+0x2a5/0x360 [ 188.265794][ T7538] ? __x64_sys_sendmsg+0x1b7/0x290 [ 188.265822][ T7538] ? do_syscall_64+0x174/0x580 [ 188.265852][ T7538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.265889][ T7538] netlink_rcv_skb+0x232/0x4b0 [ 188.265932][ T7538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.265969][ T7538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.266013][ T7538] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.266043][ T7538] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.266075][ T7538] genl_rcv+0x28/0x40 [ 188.266109][ T7538] netlink_unicast+0x780/0x920 [ 188.266146][ T7538] netlink_sendmsg+0x813/0xb40 [ 188.266188][ T7538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.266220][ T7538] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 188.266252][ T7538] ? futex_unqueue+0x22/0x240 [ 188.266283][ T7538] ? aa_sock_msg_perm+0x122/0x200 [ 188.266308][ T7538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.266338][ T7538] sock_sendmsg_nosec+0x13a/0x180 [ 188.266377][ T7538] ____sys_sendmsg+0x55c/0x870 [ 188.266412][ T7538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.266450][ T7538] ? import_iovec+0x73/0xa0 [ 188.266480][ T7538] ___sys_sendmsg+0x2a5/0x360 [ 188.266509][ T7538] ? __lock_acquire+0x6b5/0x2d10 [ 188.266544][ T7538] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.266576][ T7538] ? futex_wait+0x2a2/0x390 [ 188.266634][ T7538] ? __fget_files+0x2a/0x420 [ 188.266658][ T7538] ? __fget_files+0x3a6/0x420 [ 188.266694][ T7538] __x64_sys_sendmsg+0x1b7/0x290 [ 188.266737][ T7538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.266785][ T7538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.266812][ T7538] do_syscall_64+0x174/0x580 [ 188.266842][ T7538] ? trace_irq_disable+0x3b/0x140 [ 188.266870][ T7538] ? clear_bhb_loop+0x40/0x90 [ 188.266898][ T7538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.266921][ T7538] RIP: 0033:0x7f725dfdce59 [ 188.266942][ T7538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.266962][ T7538] RSP: 002b:00007f725c22e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.266986][ T7538] RAX: ffffffffffffffda RBX: 00007f725e255fa0 RCX: 00007f725dfdce59 [ 188.267003][ T7538] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 188.267018][ T7538] RBP: 00007f725e072e6f R08: 0000000000000000 R09: 0000000000000000 [ 188.267031][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.267044][ T7538] R13: 00007f725e256038 R14: 00007f725e255fa0 R15: 00007fff03656458 [ 188.267081][ T7538] [ 188.588242][ T32] usb 3-1: Firmware: major: 49, minor: 56, hardware type: UNKNOWN (52) [ 188.775355][ T32] usb 3-1: failed to fetch extended address, random address set [ 188.775387][ T32] usb 3-1: atusb_probe: initialization failed, error = -524 [ 188.775641][ T32] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 188.823058][ T32] usb 3-1: USB disconnect, device number 4 [ 188.989439][ T7548] netlink: 'syz.3.737': attribute type 29 has an invalid length. [ 188.990473][ T7548] netlink: 'syz.3.737': attribute type 29 has an invalid length. [ 189.358221][ T32] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 189.513235][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.513292][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 189.513322][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 189.513351][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 189.513375][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 189.523272][ T32] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 189.523356][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 189.523416][ T32] usb 1-1: Product: syz [ 189.523458][ T32] usb 1-1: Manufacturer: syz [ 189.523493][ T32] usb 1-1: SerialNumber: syz [ 189.586023][ T32] usb 1-1: config 0 descriptor?? [ 189.855536][ T32] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 189.855564][ T32] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 190.054118][ T32] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 190.054144][ T32] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 190.054165][ T32] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 190.258306][ T32] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 190.864775][ T32] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 190.865097][ T32] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 190.924229][ T32] usb 1-1: USB disconnect, device number 8 [ 191.066346][ T7603] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.763'. [ 191.344936][ T7617] validate_nla: 8 callbacks suppressed [ 191.344958][ T7617] netlink: 'syz.1.767': attribute type 29 has an invalid length. [ 191.347922][ T7617] netlink: 'syz.1.767': attribute type 29 has an invalid length. [ 191.373294][ T7617] netlink: 'syz.1.767': attribute type 29 has an invalid length. [ 191.908196][ T5623] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.948849][ T5623] usb 1-1: Using ep0 maxpacket: 8 [ 192.981152][ T5623] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 192.981185][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 192.981206][ T5623] usb 1-1: Product: syz [ 192.981222][ T5623] usb 1-1: Manufacturer: syz [ 192.981237][ T5623] usb 1-1: SerialNumber: syz [ 193.085372][ T5623] usb 1-1: config 0 descriptor?? [ 193.146264][ T5623] gspca_main: sq905-2.14.0 probing 2770:9120 [ 193.192608][ T7655] netlink: 'syz.2.779': attribute type 29 has an invalid length. [ 193.199988][ T7655] netlink: 'syz.2.779': attribute type 29 has an invalid length. [ 193.203724][ T7655] netlink: 'syz.2.779': attribute type 29 has an invalid length. [ 193.728322][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 193.922508][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 193.926838][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.926890][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.926916][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.927099][ T5623] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 193.927181][ T5623] sq905 1-1:0.0: probe with driver sq905 failed with error -32 [ 194.029979][ T10] usb 3-1: config 0 descriptor?? [ 194.048263][ T5623] usb 1-1: USB disconnect, device number 9 [ 194.285795][ T10] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 194.316200][ T7683] netlink: 'syz.1.790': attribute type 29 has an invalid length. [ 194.317985][ T7683] netlink: 'syz.1.790': attribute type 29 has an invalid length. [ 194.335964][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.336074][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.351426][ T7683] netlink: 'syz.1.790': attribute type 29 has an invalid length. [ 194.674137][ T5623] usb 3-1: USB disconnect, device number 5 [ 195.080022][ T7704] netlink: 'syz.1.799': attribute type 29 has an invalid length. [ 195.688424][ T5767] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 195.777852][ T7728] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 195.853268][ T5767] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.853565][ T5767] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 195.853595][ T5767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 195.853623][ T5767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 195.853646][ T5767] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.857487][ T5767] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 195.857758][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 195.857783][ T5767] usb 2-1: Product: syz [ 195.857799][ T5767] usb 2-1: Manufacturer: syz [ 195.857815][ T5767] usb 2-1: SerialNumber: syz [ 196.004616][ T5767] usb 2-1: config 0 descriptor?? [ 196.218265][ T5767] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 196.218285][ T5767] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 196.318377][ T5719] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 196.430003][ T5767] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 196.430022][ T5767] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 196.430037][ T5767] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 196.522636][ T5719] usb 4-1: Using ep0 maxpacket: 8 [ 196.535877][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.536041][ T5719] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.536067][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.601878][ T5719] usb 4-1: config 0 descriptor?? [ 196.631774][ T5767] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 196.927177][ T5719] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 197.237270][ T5767] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 197.237555][ T5767] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 197.300912][ T5719] usb 4-1: USB disconnect, device number 11 [ 197.379423][ T5767] usb 2-1: USB disconnect, device number 7 [ 197.891026][ T7748] validate_nla: 5 callbacks suppressed [ 197.891047][ T7748] netlink: 'syz.3.817': attribute type 29 has an invalid length. [ 200.583733][ T7764] ======================================================= [ 200.583733][ T7764] WARNING: The mand mount option has been deprecated and [ 200.583733][ T7764] and is ignored by this kernel. Remove the mand [ 200.583733][ T7764] option from the mount to silence this warning. [ 200.583733][ T7764] ======================================================= [ 201.788237][ T5719] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 201.902224][ T72] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.948207][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 201.952796][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.952845][ T5719] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.952874][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.005640][ T5719] usb 2-1: config 0 descriptor?? [ 202.246426][ T5719] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 202.709783][ T5719] usb 2-1: USB disconnect, device number 8 [ 209.558187][ T5617] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 209.711504][ T5617] usb 1-1: config 0 has no interfaces? [ 209.711542][ T5617] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 209.711567][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.750104][ T5767] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.750203][ T5617] usb 1-1: config 0 descriptor?? [ 209.948221][ T5767] usb 2-1: Using ep0 maxpacket: 8 [ 209.951168][ T5767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.951218][ T5767] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 209.951243][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.013792][ T5767] usb 2-1: config 0 descriptor?? [ 210.245450][ T5767] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 210.373583][ T5767] usb 1-1: USB disconnect, device number 10 [ 210.537848][ T7814] netlink: 'syz.2.838': attribute type 29 has an invalid length. [ 210.548817][ T7814] netlink: 'syz.2.838': attribute type 29 has an invalid length. [ 210.550494][ T7814] netlink: 'syz.2.838': attribute type 29 has an invalid length. [ 210.687470][ T5767] usb 2-1: USB disconnect, device number 9 [ 211.538369][ T5623] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 211.704556][ T5623] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 211.704587][ T5623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.704614][ T5623] usb 2-1: Product: syz [ 211.704625][ T5623] usb 2-1: Manufacturer: syz [ 211.704635][ T5623] usb 2-1: SerialNumber: syz [ 211.748371][ T5623] usb 2-1: config 0 descriptor?? [ 211.758378][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 211.760947][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 212.208346][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 212.249222][ T5623] usb 2-1: Firmware version (0.0) predates our first public release. [ 212.249251][ T5623] usb 2-1: Please update to version 0.2 or newer [ 212.250125][ T5623] usb 2-1: Firmware: build -` [ 212.388243][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 212.391867][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 212.391910][ T10] usb 4-1: config 0 has no interface number 0 [ 212.391974][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.392004][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 212.444190][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 212.444224][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.444246][ T10] usb 4-1: Product: syz [ 212.444262][ T10] usb 4-1: Manufacturer: syz [ 212.444279][ T10] usb 4-1: SerialNumber: syz [ 212.587651][ T10] usb 4-1: config 0 descriptor?? [ 212.722682][ T5623] usb 2-1: USB disconnect, device number 10 [ 212.888312][ T5767] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 213.022876][ T7868] netlink: 'syz.2.860': attribute type 29 has an invalid length. [ 213.048375][ T5767] usb 1-1: Using ep0 maxpacket: 8 [ 213.063440][ T5767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.063490][ T5767] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.063514][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.119650][ T5767] usb 1-1: config 0 descriptor?? [ 213.216410][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 213.252647][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input5 [ 213.276588][ T7869] netlink: 'syz.2.860': attribute type 29 has an invalid length. [ 213.483838][ T5767] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 213.760604][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 213.778182][ T10] usb 4-1: USB disconnect, device number 12 [ 213.890676][ T5767] usb 1-1: USB disconnect, device number 11 [ 214.093258][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 214.452683][ T7895] netlink: 'syz.0.870': attribute type 29 has an invalid length. [ 214.453782][ T7895] netlink: 'syz.0.870': attribute type 29 has an invalid length. [ 214.598131][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 214.777795][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 214.777829][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.777852][ T10] usb 4-1: Product: syz [ 214.777868][ T10] usb 4-1: Manufacturer: syz [ 214.777884][ T10] usb 4-1: SerialNumber: syz [ 214.826691][ T10] usb 4-1: config 0 descriptor?? [ 216.006522][ T10] usb 4-1: Firmware: major: 20, minor: 2, hardware type: UNKNOWN (45) [ 216.208235][ T10] usb 4-1: failed to fetch extended address, random address set [ 216.208264][ T10] usb 4-1: atusb_probe: initialization failed, error = -524 [ 216.208469][ T10] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 216.251530][ T10] usb 4-1: USB disconnect, device number 13 [ 216.581187][ T7918] netlink: 'syz.0.879': attribute type 29 has an invalid length. [ 216.586969][ T7918] netlink: 'syz.0.879': attribute type 29 has an invalid length. [ 220.434175][ T7925] tipc: Started in network mode [ 220.434281][ T7925] tipc: Node identity , cluster identity 4711 [ 220.438071][ T7925] tipc: Failed to obtain node identity [ 220.438396][ T7925] tipc: Enabling of bearer rejected, failed to enable media [ 221.161418][ T7935] openvswitch: netlink: Actions may not be safe on all matching packets [ 221.418209][ T5768] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 221.646298][ T5768] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.646325][ T5768] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 221.646376][ T5768] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 221.646420][ T5768] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 221.646445][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.711608][ T7935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.731474][ T5768] hub 4-1:1.0: bad descriptor, ignoring hub [ 221.731513][ T5768] hub 4-1:1.0: probe with driver hub failed with error -5 [ 221.732562][ T5768] cdc_wdm 4-1:1.0: skipping garbage [ 221.732579][ T5768] cdc_wdm 4-1:1.0: skipping garbage [ 221.732593][ T5768] cdc_wdm 4-1:1.0: skipping garbage [ 221.771322][ T5768] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 221.771358][ T5768] cdc_wdm 4-1:1.0: Unknown control protocol [ 222.252322][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 222.252468][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 222.252756][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 222.252779][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 222.253010][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 222.253032][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 222.253275][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 222.253307][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 222.253553][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 222.253573][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 222.253811][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 222.253832][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 222.254067][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 222.254087][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 222.254323][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 222.254342][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 222.254576][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 222.254597][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 222.254820][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 222.254833][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 222.941837][ T4938] usb 4-1: USB disconnect, device number 14 [ 224.168199][ T4938] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 224.378174][ T4938] usb 1-1: Using ep0 maxpacket: 8 [ 224.386281][ T4938] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 224.386313][ T4938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 224.386335][ T4938] usb 1-1: Product: syz [ 224.386350][ T4938] usb 1-1: Manufacturer: syz [ 224.386365][ T4938] usb 1-1: SerialNumber: syz [ 224.428660][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 224.449063][ T4938] usb 1-1: config 0 descriptor?? [ 224.474723][ T4938] gspca_main: sq905-2.14.0 probing 2770:9120 [ 224.622419][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.622473][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 224.622706][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 224.622727][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 224.622743][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 224.625825][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 224.625846][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 224.625903][ T10] usb 3-1: Product: syz [ 224.625914][ T10] usb 3-1: Manufacturer: syz [ 224.625925][ T10] usb 3-1: SerialNumber: syz [ 224.796619][ T10] usb 3-1: config 0 descriptor?? [ 224.914018][ T7994] CIFS: VFS: UNC: missing share name [ 224.916351][ T7994] CIFS: VFS: Malformed UNC in devname [ 224.981405][ T4938] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 224.981518][ T4938] sq905 1-1:0.0: probe with driver sq905 failed with error -32 [ 225.019351][ T10] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 225.019370][ T10] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 225.220936][ T10] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 225.220956][ T10] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 225.221168][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 225.293719][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 225.294128][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 225.294431][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 225.395198][ T10] usb 3-1: USB disconnect, device number 6 [ 225.438897][ T7992] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 225.438927][ T7992] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 225.438945][ T7992] CPU: 0 UID: 0 PID: 7992 Comm: syz.1.908 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 225.438965][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.438975][ T7992] RIP: 0010:__schedule+0x4030/0x5550 [ 225.438999][ T7992] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 225.439013][ T7992] RSP: 0018:ffffc9000c527020 EFLAGS: 00010003 [ 225.439029][ T7992] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 225.439040][ T7992] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 225.439051][ T7992] RBP: ffffc9000c527218 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 225.439064][ T7992] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b863c658 [ 225.439077][ T7992] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 225.439089][ T7992] FS: 0000555593ec3500(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 225.439104][ T7992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.439115][ T7992] CR2: 00007ffbdf6acfe0 CR3: 000000002b9f6000 CR4: 00000000003526f0 [ 225.439130][ T7992] Call Trace: [ 225.439137][ T7992] [ 225.439153][ T7992] ? irqentry_exit+0x218/0x8c0 [ 225.439176][ T7992] ? __pfx___schedule+0x10/0x10 [ 225.439201][ T7992] preempt_schedule_irq+0x4d/0xa0 [ 225.439221][ T7992] irqentry_exit+0x14f/0x8c0 [ 225.439241][ T7992] ? trace_irq_disable+0x3b/0x140 [ 225.439264][ T7992] asm_sysvec_call_function_single+0x1a/0x20 [ 225.439287][ T7992] RIP: 0010:lock_release+0x2d7/0x3c0 [ 225.439309][ T7992] Code: 2c 1a 11 00 00 00 00 eb b5 e8 f5 8b 9c 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 a5 e6 19 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ca 53 a0 09 cc 48 8d 3d a2 34 31 [ 225.439323][ T7992] RSP: 0018:ffffc9000c527348 EFLAGS: 00000286 [ 225.439337][ T7992] RAX: a341a4117ed4f200 RBX: 0000000000000202 RCX: 0000000000000046 [ 225.439348][ T7992] RDX: 0000000000000004 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 225.439360][ T7992] RBP: ffff888030308ca8 R08: ffffffff8234db2e R09: ffffffff8e3cb2a0 [ 225.439373][ T7992] R10: dffffc0000000000 R11: fffff940002a18b7 R12: 0000000000000004 [ 225.439384][ T7992] R13: 0000000000000004 R14: ffffffff8e3cb2a0 R15: ffff888030308000 [ 225.439399][ T7992] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 225.439428][ T7992] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 225.439451][ T7992] lruvec_stat_mod_folio+0x2f0/0x3e0 [ 225.439475][ T7992] folio_add_file_rmap_ptes+0x43a/0x6c0 [ 225.439499][ T7992] insert_page_into_pte_locked+0x694/0x820 [ 225.439524][ T7992] insert_page+0x24e/0x3b0 [ 225.439547][ T7992] ? __pfx_insert_page+0x10/0x10 [ 225.439570][ T7992] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 225.439589][ T7992] ? vmalloc_to_page+0x41c/0x6b0 [ 225.439615][ T7992] kcov_mmap+0xcb/0x140 [ 225.439635][ T7992] mmap_region+0x199c/0x2220 [ 225.439665][ T7992] ? __pfx_mmap_region+0x10/0x10 [ 225.439689][ T7992] ? rcu_is_watching+0x15/0xb0 [ 225.439723][ T7992] ? finish_task_switch+0x41c/0xbd0 [ 225.439763][ T7992] ? __schedule+0x1741/0x5550 [ 225.439785][ T7992] ? lockdep_hardirqs_on+0x7a/0x110 [ 225.439805][ T7992] ? irqentry_exit+0x218/0x8c0 [ 225.439831][ T7992] ? __get_unmapped_area+0x3a5/0x410 [ 225.439859][ T7992] ? __get_unmapped_area+0x3a7/0x410 [ 225.439885][ T7992] ? shmem_mapping+0xd/0x50 [ 225.439916][ T7992] ? memfd_check_seals_mmap+0xcb/0x210 [ 225.439935][ T7992] do_mmap+0xc2f/0x10c0 [ 225.439962][ T7992] ? lockdep_hardirqs_on+0x7a/0x110 [ 225.439983][ T7992] ? __pfx_do_mmap+0x10/0x10 [ 225.440007][ T7992] ? rwbase_write_lock+0x568/0x730 [ 225.440046][ T7992] vm_mmap_pgoff+0x2cc/0x4f0 [ 225.440072][ T7992] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 225.440097][ T7992] ? __fget_files+0x2a/0x420 [ 225.440113][ T7992] ? __fget_files+0x3a6/0x420 [ 225.440128][ T7992] ? __fget_files+0x2a/0x420 [ 225.440145][ T7992] ksys_mmap_pgoff+0x4e8/0x720 [ 225.440171][ T7992] ? __x64_sys_mmap+0x7f/0x140 [ 225.440191][ T7992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.440208][ T7992] do_syscall_64+0x174/0x580 [ 225.440230][ T7992] ? clear_bhb_loop+0x40/0x90 [ 225.440248][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.440264][ T7992] RIP: 0033:0x7fd1d348cbc2 [ 225.440278][ T7992] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 225.440291][ T7992] RSP: 002b:00007ffef1748778 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 225.440307][ T7992] RAX: ffffffffffffffda RBX: 00007fd1d127b000 RCX: 00007fd1d348cbc2 [ 225.440319][ T7992] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fd1d127b000 [ 225.440329][ T7992] RBP: 0000000000000011 R08: 00000000000000db R09: 0000000000000000 [ 225.440339][ T7992] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 225.440349][ T7992] R13: 0000000000000004 R14: 0000000000000000 R15: 00007fd1d3705fa0 [ 225.440365][ T7992] [ 225.440371][ T7992] Modules linked in: [ 225.440387][ T7992] ---[ end trace 0000000000000000 ]--- [ 225.440402][ T7992] RIP: 0010:__schedule+0x4030/0x5550 [ 225.440422][ T7992] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 225.440436][ T7992] RSP: 0018:ffffc9000c527020 EFLAGS: 00010003 [ 225.440449][ T7992] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 225.440460][ T7992] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 225.440470][ T7992] RBP: ffffc9000c527218 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 225.440482][ T7992] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b863c658 [ 225.440495][ T7992] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 225.440506][ T7992] FS: 0000555593ec3500(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 225.440520][ T7992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.440531][ T7992] CR2: 00007ffbdf6acfe0 CR3: 000000002b9f6000 CR4: 00000000003526f0 [ 225.440548][ T7992] Kernel panic - not syncing: Fatal exception [ 226.577609][ T7992] Shutting down cpus with NMI [ 226.578257][ T7992] Kernel Offset: disabled