last executing test programs: 3.484759359s ago: executing program 2 (id=541): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0xf0ff, 0x10}]) 3.358656657s ago: executing program 3 (id=543): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x9d5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x5, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xf2, 0x5, 0x3}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0xcc, 0x2c, 0x3, 0x8}, 0xd9, &(0x7f0000000280)={0x5, 0xf, 0xd9, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x9, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "791b8a3cbfc2682ea51852500ba82e12"}, @generic={0xb6, 0x10, 0x3, "3623d9350bbb5639e2af5f36480377a5e6af5dad65ed13973b92439c115b526b855de509005c96c46cf3d4e9cb36ad7040f5b8ce5340267074e22bee2e076b306c8791727879e8d2d6711a3eb880a34d834ca92a0418c05fc7a7c60e96fa10c119a9c6e7aa7500edc5288dbbb828e99bedab356df251ea8a5ce60592e006e31bf9127ea2ee1fd8b377bed6a42ac7c703476eabc7fee192816b080740fa8973bd32d5c37e125c48ec429e742f71936f2e8fcb17"}, @ptm_cap={0x3}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x18, 0x5, {0x5, 0xd, "a18265"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x208000, 0x0) 3.307986453s ago: executing program 2 (id=544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000060000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) 3.295528224s ago: executing program 2 (id=545): execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="04040a00000000009f0379250900cc4c6d00ad68f71a19d3a805000c607b0a2fa754ecb5669ae95300b246c8a132f0c54626d1ad4588a38f6b1a099ead5d7688c74f4d0151cc21fe50a85d43335ee7718b6600cb"], 0xd) syz_open_dev$loop(0x0, 0x5, 0x408000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x230000, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)=ANY=[@ANYBLOB="71756f74612c75337271756f74615fe96e6f64655f686172646c696d69743d372c00"]) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x3) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x7, 0x8}, {0x3, 0x8, 0x401, 0xf}}}}, 0x15) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0\x00') lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="342404985236349daf48bc30a0ea1185ec406e36c53aaf740b60942d0f336ae70d7e9e1a64f8bfceaf4ce04029fabf2bf72adff9cbf79c93ff01bf01fbd757939f0a46b8918eb02ac928cd78fa11712b8f6fc763c3ef6850055ee1d4504c1f58130d32359cef0c7e5598b3470c86cacc7a6422cfa8ab91bdec2f9197872632fa54e5717a9b22c4b8", 0x88}], 0x1, 0x0, 0x0, 0x4}, 0x448c4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc4e, 0x4}) 3.235279171s ago: executing program 2 (id=546): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000ff, 0x0, 0x67c7}]}) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0xfffffffffffffffd) sendto$inet6(r0, 0x0, 0x0, 0x20000090, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) 3.076633063s ago: executing program 2 (id=547): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x900, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.17304834s ago: executing program 2 (id=550): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x20, 0xa}, 0x0, 0x0}) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000003c0)={0x2, &(0x7f0000000340)=[{0xffff6a58, 0xae, &(0x7f0000000200)="b254e560742ad943fc89136fd927da114e60cdf0f7218e26b18346247284ecf05c54f8b4b02b621c7c1fdce46ac4e9cec9cf474e6244a3739d09310a0a83814bd8b96456c5421ecf6d8ec3a82d77a10ec010eb17a2a055944400b2f00110674ed8b8bf8e4d33ffac1d4dfeabd5aa2e2dd74bb3ec47281b6f50bc5e73c73a836a3e5c4fbc65fbb4acf4bd9f9dca7de9c42e3bbe57c3965a6ad32fea4d0e017a0a30fa1c746382ea275c4764c02968", 0x1}, {0x8000, 0x19, &(0x7f0000000300)="b784e58eb6eb8dc6a86325b5ebb73bbe338e890b9744056f0f", 0x0, 0x1}]}) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0xfffffffe, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x4a804}, 0x94) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000a80)={0x20, 0xf, 0x4, "6c68ca8d"}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x3, 0x7f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0xc5, 0xf, 0xf0, 0x40, 0x471, 0x206c, 0xc511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x3, 0x9, 0xc0, 0x2, [{{0x9, 0x4, 0xc, 0xa3, 0x1, 0x68, 0xe2, 0xd0, 0x55, [@generic={0x35, 0x24, "f744be149848da7e17955caad1d1bd7d035085812c50ce016b65b206b13249587c7463726a29b8ba5a1a3eacc817394947b242"}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x6f, 0x7, "", "6a8991"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4a, 0x3, 0x9, 0x1, "b0", "eab7"}]}], [{{0x9, 0x5, 0x4, 0x1, 0x400, 0x1, 0x70, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xb}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x3, 0x0, 0x8}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x0, 0x10}]}, 0x1, [{0x15, &(0x7f0000000180)=@string={0x15, 0x3, "2c1ca85594faa4e52f14e94bdeefe2e5728559"}}]}) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400a840000008421f0f04449c207af84fc3076627c5a27b64fc3ab958c66b7c05d63f06d7b8a9279c58a3c67fb449112baafb3ee2f112a36ee33034779eb8a4cdc5d8acb3022ac67bc1a139dceb1adb7fd7f7a7bfa7b08300ebf270c41e1d371ad74aa8af98f2ac965dc5c0d4387c08b9e1a4ce5243eb54c9d9db56e635b1852149d264cd924865c87a7"], &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000ac0)={0x0, 0xf, 0x92, {0x5, 0xf, 0x92, 0x1, [@generic={0x8d, 0x10, 0xa, "2622f4a3ca8834228b051f6be265e2247ff0f0d17fdd22cc11be45754a4bac1d65adc793c4744980f66347a703eeed22fa03af95235d8b8e667fc6b7a8f733ff559b5105ee2c3315d4f15ee86e5eb4d83c5846fdacf9cf1c5ad9b185c326558d25514ac9490a46ec15e24c9186227985ba76867873ea2ff73c1d5f2522778db5c20edfa626cfd806bbc3"}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc0, 0x2, 0x2, 0x7, "3135a1c1", "959e68b0"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x0, 0x1, 0x2, 0x84, 0x7b, 0x1db6}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x40, 0xf, 0x38, "dd228dda32b1bab5a16c0431e4c599352d8f10ee489e6851494d8e3f7aafa5b9c355cad0334513c02948de11e42c85ef0a23ad2b262f7151"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xaa}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x80, 0x8, [0xfff]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x200}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000400)={0x40, 0xb, 0x2, "ff00"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000780)={0x40, 0x13, 0x6, @random="fcd4de86b305"}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "9dc2"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000003c0)={0x40, 0x1c, 0x1, 0xd5}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x55}}) 1.669350585s ago: executing program 3 (id=555): quotactl$Q_SYNC(0xffffffff80000100, 0x8000000, 0x0, 0x0) 1.636704206s ago: executing program 3 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0x6000, 0xffff1000, 0x2}}, "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", "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"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314152}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000040) 1.496807495s ago: executing program 3 (id=557): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 780.787901ms ago: executing program 1 (id=560): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xfff0}, 0x0) 771.617339ms ago: executing program 1 (id=561): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x70) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8001) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f00000006c0)={[0x224, 0x4, 0xbefc, 0xffff, 0x8, 0xe9, 0x3, 0x2, 0x6, 0x0, 0x8, 0x2, 0x4, 0x9, 0x6, 0x2, 0xea, 0x3, 0x2, 0x3, 0x4, 0x3, 0x3c, 0xffffffff, 0x5, 0xed, 0x8, 0xf, 0x1, 0x562, 0x4, 0x7, 0x283, 0x5, 0x800, 0x3, 0xfffffff4, 0x9, 0x200, 0x8, 0x8, 0x102, 0x1, 0x6, 0x2, 0x9f7a, 0xfff, 0x191c5b23, 0x7, 0x6, 0x5, 0x7, 0x9, 0x8d7, 0x8, 0x1, 0x1, 0x2, 0x7, 0x1, 0x101, 0x9, 0x2, 0x4, 0xfffffffd, 0x8, 0xffff, 0x6, 0x0, 0x9, 0x7fffffff, 0xfffffff8, 0x319269b4, 0x1, 0x7, 0x10001, 0x5710, 0x8, 0xe, 0x6, 0x9, 0x6, 0x27, 0x7fff, 0x3, 0x9, 0x3, 0x99a, 0x92, 0xe6, 0x3, 0x8, 0x8, 0x2, 0x0, 0x100, 0x4, 0x0, 0x3, 0x81, 0x5, 0x8, 0x2, 0xfffffffb, 0x0, 0x7, 0x300000, 0x2, 0x4, 0x6, 0x9, 0x9, 0xab, 0x4e56, 0xf, 0x0, 0x7d4, 0xa, 0x6, 0x7fffffff, 0x6a, 0x7, 0xc, 0x0, 0x5, 0x1, 0x1, 0x1, 0x9, 0xc0000, 0x0, 0x3, 0xfffffffe, 0x3, 0xce00, 0x0, 0xa9, 0x4, 0x76, 0xb01, 0x7fff, 0x1, 0x7, 0x37, 0x7fffffff, 0x7, 0x2, 0x4, 0xb, 0x44, 0x0, 0xf08b, 0x59, 0xe, 0x3, 0xa356, 0x40, 0x0, 0x9, 0x1, 0x6, 0x1ff, 0xe, 0xff, 0x5, 0x800, 0x5, 0x36, 0xead, 0x10b400, 0xaf1, 0x401, 0x3, 0xfffffff8, 0x6, 0x2, 0x4, 0x5, 0x7b66, 0xa, 0x4, 0x7, 0x2, 0x10, 0x6, 0x22, 0x0, 0x4c7ce34a, 0x21, 0x5, 0x7, 0x3, 0x40, 0x7, 0xd, 0xa7d6, 0x6, 0x8, 0x200, 0xe, 0x7, 0x7fff, 0x4000000, 0x7, 0x6, 0xffff, 0x8, 0x40, 0x2, 0x6, 0x0, 0x7e3, 0x5, 0x3, 0x9, 0x5, 0x4, 0x3, 0x162d0, 0x3, 0x5, 0x9, 0x3, 0x66, 0x0, 0x3ad, 0x7fffffff, 0x2, 0x7, 0x10000, 0x9, 0xb, 0x3, 0x7ff, 0x8, 0xfc6, 0x4f, 0xa2, 0x4, 0x0, 0x0, 0x7, 0x169, 0x400, 0x4, 0x80000000, 0x81, 0x9, 0x5, 0x4, 0x2283, 0x3, 0xd6, 0x8000000, 0x5, 0xfffeffff, 0x2, 0x1, 0x7, 0x3, 0x4, 0xbf, 0x529, 0x400, 0xdf, 0x9, 0x3, 0x20ec, 0x12e, 0xa5a9, 0x6, 0x7, 0x1, 0x7, 0x1, 0x2, 0x0, 0x2, 0x8, 0x0, 0x9, 0x3, 0x2, 0x6, 0xe, 0x10001, 0xc9, 0x9, 0xe, 0x7, 0x0, 0x8, 0x3c34000, 0xcaf, 0x2, 0x80000000, 0xffffffff, 0x2, 0x6, 0x3, 0xa, 0x4, 0x8, 0x1, 0x0, 0x352, 0x666, 0x6, 0x2, 0x9, 0x401, 0x8, 0xf5, 0x6000000, 0x401, 0xfffffffb, 0x62, 0x7, 0x80, 0x8, 0x6, 0xb1, 0x200, 0x81, 0x1, 0x0, 0xff, 0x66a40000, 0x2, 0xd0, 0x178, 0x4ed, 0x3, 0xe1, 0x50, 0x81, 0x553, 0x6, 0x8, 0x2, 0x9, 0x4, 0xffffffb1, 0x6, 0x7f, 0xb6, 0x7f, 0xf, 0x7fffffff, 0x70c82be1, 0x6, 0x401, 0x4, 0x5, 0x0, 0x29f, 0x7, 0x5, 0xe6f, 0x3, 0xfffff5d7, 0x8, 0xd4, 0x9a, 0x1, 0x7, 0x1, 0x3, 0x204, 0x1, 0x3, 0x5, 0x6, 0x8000, 0x8, 0xc968, 0x1, 0x4c7, 0x0, 0x7, 0xfffffff1, 0x4, 0x8, 0x81, 0x8a, 0x22fa9b08, 0x200, 0xfffffff8, 0x1, 0x8, 0x7f, 0x2d, 0x1, 0x81, 0x5, 0x8c4e, 0x5, 0x4, 0x6, 0x7, 0x6, 0x75ea, 0x8, 0x8, 0x0, 0x9, 0x7, 0x9, 0x6, 0x7f, 0x9, 0x2, 0x9, 0x7, 0x5, 0x800, 0x6, 0xffff, 0x6, 0x0, 0xfffffffd, 0xc1, 0x3, 0x20, 0x80000001, 0x9, 0xd, 0x6, 0xc, 0x8, 0x4a, 0x4, 0x2, 0x6, 0x3, 0x80000000, 0x0, 0x7fff, 0x71da, 0x0, 0x10, 0x2051, 0x4, 0x8, 0x5, 0x1, 0x3, 0x4, 0x3, 0x3, 0x5, 0x8, 0x100, 0x1, 0x7, 0x800, 0x80, 0x1ff, 0xeb2, 0x2, 0x7fff, 0x0, 0x3, 0x9, 0xc5b1, 0x9, 0x7, 0x3, 0xff3f, 0x1ff, 0x2, 0x8, 0x1, 0x7, 0x5, 0x8, 0x58d, 0x71, 0x7, 0x2, 0x3, 0x62, 0x0, 0x60d2, 0x8, 0x0, 0x2, 0xabc6, 0x1, 0x6, 0x2, 0x0, 0x7, 0xfffffffe, 0x41ff, 0x1, 0xc, 0x7c5, 0x48, 0x7ff, 0x7fff, 0x0, 0x8, 0x100, 0x7fffffff, 0x9, 0xa, 0x5, 0x7, 0x6, 0x9, 0x2, 0xb7ec, 0x0, 0x8001, 0x9, 0x5, 0x8, 0x6, 0x1, 0x9, 0x4, 0x6, 0xf3, 0x7, 0x3, 0x9, 0x4f1, 0x59, 0x7, 0x4, 0x1ff, 0x0, 0x1000, 0x9, 0x2, 0x1, 0x4f46, 0x69, 0xfffff68f, 0x2, 0x0, 0x400, 0x9, 0x9, 0x0, 0xa14, 0x0, 0x4, 0x7, 0x6, 0x5, 0x4, 0xfffffff7, 0x9, 0xbd, 0x8, 0x73, 0x30000000, 0x80, 0xfffffffd, 0x7, 0xc, 0x3, 0x8, 0x800, 0x6, 0x2, 0x101, 0x0, 0x7, 0x0, 0x9000, 0x4, 0x0, 0x9, 0x1, 0x5, 0x4, 0x80000000, 0x40, 0x8, 0x1, 0x7fff, 0x36ed, 0xd1a1, 0x4, 0x0, 0x3, 0x650c80fa, 0x9, 0x0, 0x3, 0x6e4d, 0x6, 0x80000000, 0x4, 0x100, 0x1, 0x8, 0x6, 0x101, 0x2, 0x10, 0x101, 0xe, 0xfffffffc, 0x9, 0x1, 0x4, 0x4ad, 0x9, 0x0, 0x7, 0x8, 0x101, 0x6, 0x3, 0xffff, 0x3, 0x7ff, 0x2, 0x1, 0x6, 0x800, 0x45b, 0x190, 0x1, 0x10001, 0x400, 0x7f, 0x85d1, 0xc, 0xfff, 0x153, 0x6, 0x0, 0x9000000, 0x6, 0x1, 0x0, 0x8, 0x400, 0x8, 0x4, 0x5, 0xa041, 0x5, 0x20000000, 0x1, 0x0, 0x6bd, 0x7, 0x800, 0x6, 0x8, 0x400, 0x81000000, 0x4, 0xb, 0x5, 0x7, 0xb, 0x3, 0xdf8, 0x5, 0x8, 0x200, 0xb, 0x800, 0x62fca6b8, 0x32, 0x3000, 0x401, 0x9, 0x1, 0xffff, 0x0, 0x5a, 0x9, 0x81, 0x5, 0x10001, 0x6, 0x9, 0x101, 0x9, 0xb, 0x3ff, 0x31, 0xce8a, 0xfffffffb, 0x200, 0x8, 0x80000000, 0x4, 0x11f9, 0x4, 0x5, 0x9, 0x3ff, 0x1, 0x3, 0x920d, 0x1, 0x583, 0x6, 0x1, 0x8, 0x3, 0xffff, 0xfffffffe, 0x0, 0x0, 0x4c611a3c, 0x0, 0x0, 0x409da820, 0x400, 0xc, 0x0, 0x4, 0x1, 0xe3f, 0xfff, 0x5, 0xb, 0x1000, 0x2, 0x100, 0x7, 0x6, 0x0, 0x0, 0x9, 0xff, 0x8, 0x3, 0xd, 0x9, 0x8, 0x9, 0x4, 0x9, 0x3, 0x4, 0x3, 0x7, 0x8001, 0x3ff, 0x5, 0x3c, 0x3, 0x8, 0x100, 0x5, 0x2, 0x4, 0x1, 0x0, 0x8, 0x8, 0xffffff6c, 0xd2fd, 0xf, 0x8001, 0x200, 0x7f, 0x7, 0x1, 0x1, 0xfffffe00, 0xfffffe00, 0x95d3, 0x3c, 0x7, 0x3, 0x7, 0x3, 0x1, 0x8, 0x0, 0x6, 0x1457, 0x84a3, 0xfff, 0xda36, 0xfffffffb, 0x2, 0xf79, 0x0, 0x4, 0x755, 0x4, 0xe, 0x3, 0x6, 0x0, 0x96b6, 0x7, 0xedaf, 0x8b, 0x4, 0x800, 0x2, 0x9, 0x4, 0x1, 0x8, 0x3ff, 0x0, 0x401, 0x1, 0x1, 0x7, 0xff, 0x401, 0x3, 0xffff76bf, 0x18d, 0x4, 0x0, 0xe, 0xb, 0x10001, 0x1, 0x944b, 0x80000001, 0x5, 0x8, 0x400000, 0xff, 0x1, 0x3, 0x80, 0x0, 0x9, 0x400, 0x101, 0xc, 0x4, 0x1, 0x1ff, 0x4, 0x2, 0x40, 0x4, 0x1ff, 0x800, 0x0, 0x80000000, 0x6, 0x2, 0x33, 0x5, 0x1, 0x7, 0x5103fc93, 0xfffffff2, 0x7fffffff, 0x80000001, 0x4, 0x1000, 0x5, 0x8, 0x9, 0x4, 0x10000, 0xfffffff8, 0x0, 0x81, 0x6, 0x3ff, 0x6ecc, 0x7fff, 0x6, 0x7, 0x7, 0x9, 0x4, 0x3, 0x7, 0xd8670, 0x3, 0xffffffff, 0x26, 0x3, 0x101, 0x80000000, 0x3, 0x7, 0x8, 0x4, 0xb81, 0xb, 0x5, 0x5, 0x5, 0x5, 0x401, 0x7fff, 0x0, 0x86, 0x6, 0x2, 0x8, 0xb1e8, 0x846, 0x1, 0x77, 0x10, 0x2, 0x9, 0x8, 0x4, 0x2c, 0x6, 0x1, 0xa8, 0xf, 0xa, 0xf5d, 0xc47b, 0x5, 0xffffffff, 0x1e, 0xae, 0x8, 0x0, 0x8, 0xb4ef, 0x6, 0x3, 0x3, 0x3, 0x800, 0x90, 0x1, 0x9, 0x2, 0xffffff28, 0xfffff2c8, 0x2, 0x3, 0x3, 0x1ecc, 0x1, 0x40, 0x60, 0x1000, 0x7, 0x1400000, 0x3, 0x7ff, 0x4, 0xfffffffa, 0x8, 0x8, 0x1, 0x5, 0x3, 0xf085, 0x3, 0x9, 0x80000000, 0x10001, 0x0, 0x6, 0x7ff, 0x8, 0x3cf, 0x7, 0x19220447, 0xffff661d, 0x56c0, 0x0, 0x8c, 0x1, 0x7, 0xfffffd6d, 0x6, 0x8, 0x9, 0x9, 0x401, 0xd, 0x9302, 0x25e5, 0xfffffffe, 0x4, 0x1, 0x0, 0xa2, 0xfffffffd, 0x10001, 0x9, 0x9, 0x9, 0x2, 0x2, 0x6, 0x200, 0xfffff001, 0x8, 0x38d0, 0x7, 0xff, 0x0, 0x82, 0x4, 0xfffffff7, 0xa, 0x8001, 0x8, 0x8, 0x101, 0x4, 0x6, 0x146, 0x9, 0x5, 0xfffffffd, 0x6, 0x10000]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_usb_connect(0x6, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYRESOCT=r4, @ANYRES32=r0, @ANYBLOB="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"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r1, 0x0, 0x0, 0x0) (async) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x70) (async) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8001) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f00000006c0)={[0x224, 0x4, 0xbefc, 0xffff, 0x8, 0xe9, 0x3, 0x2, 0x6, 0x0, 0x8, 0x2, 0x4, 0x9, 0x6, 0x2, 0xea, 0x3, 0x2, 0x3, 0x4, 0x3, 0x3c, 0xffffffff, 0x5, 0xed, 0x8, 0xf, 0x1, 0x562, 0x4, 0x7, 0x283, 0x5, 0x800, 0x3, 0xfffffff4, 0x9, 0x200, 0x8, 0x8, 0x102, 0x1, 0x6, 0x2, 0x9f7a, 0xfff, 0x191c5b23, 0x7, 0x6, 0x5, 0x7, 0x9, 0x8d7, 0x8, 0x1, 0x1, 0x2, 0x7, 0x1, 0x101, 0x9, 0x2, 0x4, 0xfffffffd, 0x8, 0xffff, 0x6, 0x0, 0x9, 0x7fffffff, 0xfffffff8, 0x319269b4, 0x1, 0x7, 0x10001, 0x5710, 0x8, 0xe, 0x6, 0x9, 0x6, 0x27, 0x7fff, 0x3, 0x9, 0x3, 0x99a, 0x92, 0xe6, 0x3, 0x8, 0x8, 0x2, 0x0, 0x100, 0x4, 0x0, 0x3, 0x81, 0x5, 0x8, 0x2, 0xfffffffb, 0x0, 0x7, 0x300000, 0x2, 0x4, 0x6, 0x9, 0x9, 0xab, 0x4e56, 0xf, 0x0, 0x7d4, 0xa, 0x6, 0x7fffffff, 0x6a, 0x7, 0xc, 0x0, 0x5, 0x1, 0x1, 0x1, 0x9, 0xc0000, 0x0, 0x3, 0xfffffffe, 0x3, 0xce00, 0x0, 0xa9, 0x4, 0x76, 0xb01, 0x7fff, 0x1, 0x7, 0x37, 0x7fffffff, 0x7, 0x2, 0x4, 0xb, 0x44, 0x0, 0xf08b, 0x59, 0xe, 0x3, 0xa356, 0x40, 0x0, 0x9, 0x1, 0x6, 0x1ff, 0xe, 0xff, 0x5, 0x800, 0x5, 0x36, 0xead, 0x10b400, 0xaf1, 0x401, 0x3, 0xfffffff8, 0x6, 0x2, 0x4, 0x5, 0x7b66, 0xa, 0x4, 0x7, 0x2, 0x10, 0x6, 0x22, 0x0, 0x4c7ce34a, 0x21, 0x5, 0x7, 0x3, 0x40, 0x7, 0xd, 0xa7d6, 0x6, 0x8, 0x200, 0xe, 0x7, 0x7fff, 0x4000000, 0x7, 0x6, 0xffff, 0x8, 0x40, 0x2, 0x6, 0x0, 0x7e3, 0x5, 0x3, 0x9, 0x5, 0x4, 0x3, 0x162d0, 0x3, 0x5, 0x9, 0x3, 0x66, 0x0, 0x3ad, 0x7fffffff, 0x2, 0x7, 0x10000, 0x9, 0xb, 0x3, 0x7ff, 0x8, 0xfc6, 0x4f, 0xa2, 0x4, 0x0, 0x0, 0x7, 0x169, 0x400, 0x4, 0x80000000, 0x81, 0x9, 0x5, 0x4, 0x2283, 0x3, 0xd6, 0x8000000, 0x5, 0xfffeffff, 0x2, 0x1, 0x7, 0x3, 0x4, 0xbf, 0x529, 0x400, 0xdf, 0x9, 0x3, 0x20ec, 0x12e, 0xa5a9, 0x6, 0x7, 0x1, 0x7, 0x1, 0x2, 0x0, 0x2, 0x8, 0x0, 0x9, 0x3, 0x2, 0x6, 0xe, 0x10001, 0xc9, 0x9, 0xe, 0x7, 0x0, 0x8, 0x3c34000, 0xcaf, 0x2, 0x80000000, 0xffffffff, 0x2, 0x6, 0x3, 0xa, 0x4, 0x8, 0x1, 0x0, 0x352, 0x666, 0x6, 0x2, 0x9, 0x401, 0x8, 0xf5, 0x6000000, 0x401, 0xfffffffb, 0x62, 0x7, 0x80, 0x8, 0x6, 0xb1, 0x200, 0x81, 0x1, 0x0, 0xff, 0x66a40000, 0x2, 0xd0, 0x178, 0x4ed, 0x3, 0xe1, 0x50, 0x81, 0x553, 0x6, 0x8, 0x2, 0x9, 0x4, 0xffffffb1, 0x6, 0x7f, 0xb6, 0x7f, 0xf, 0x7fffffff, 0x70c82be1, 0x6, 0x401, 0x4, 0x5, 0x0, 0x29f, 0x7, 0x5, 0xe6f, 0x3, 0xfffff5d7, 0x8, 0xd4, 0x9a, 0x1, 0x7, 0x1, 0x3, 0x204, 0x1, 0x3, 0x5, 0x6, 0x8000, 0x8, 0xc968, 0x1, 0x4c7, 0x0, 0x7, 0xfffffff1, 0x4, 0x8, 0x81, 0x8a, 0x22fa9b08, 0x200, 0xfffffff8, 0x1, 0x8, 0x7f, 0x2d, 0x1, 0x81, 0x5, 0x8c4e, 0x5, 0x4, 0x6, 0x7, 0x6, 0x75ea, 0x8, 0x8, 0x0, 0x9, 0x7, 0x9, 0x6, 0x7f, 0x9, 0x2, 0x9, 0x7, 0x5, 0x800, 0x6, 0xffff, 0x6, 0x0, 0xfffffffd, 0xc1, 0x3, 0x20, 0x80000001, 0x9, 0xd, 0x6, 0xc, 0x8, 0x4a, 0x4, 0x2, 0x6, 0x3, 0x80000000, 0x0, 0x7fff, 0x71da, 0x0, 0x10, 0x2051, 0x4, 0x8, 0x5, 0x1, 0x3, 0x4, 0x3, 0x3, 0x5, 0x8, 0x100, 0x1, 0x7, 0x800, 0x80, 0x1ff, 0xeb2, 0x2, 0x7fff, 0x0, 0x3, 0x9, 0xc5b1, 0x9, 0x7, 0x3, 0xff3f, 0x1ff, 0x2, 0x8, 0x1, 0x7, 0x5, 0x8, 0x58d, 0x71, 0x7, 0x2, 0x3, 0x62, 0x0, 0x60d2, 0x8, 0x0, 0x2, 0xabc6, 0x1, 0x6, 0x2, 0x0, 0x7, 0xfffffffe, 0x41ff, 0x1, 0xc, 0x7c5, 0x48, 0x7ff, 0x7fff, 0x0, 0x8, 0x100, 0x7fffffff, 0x9, 0xa, 0x5, 0x7, 0x6, 0x9, 0x2, 0xb7ec, 0x0, 0x8001, 0x9, 0x5, 0x8, 0x6, 0x1, 0x9, 0x4, 0x6, 0xf3, 0x7, 0x3, 0x9, 0x4f1, 0x59, 0x7, 0x4, 0x1ff, 0x0, 0x1000, 0x9, 0x2, 0x1, 0x4f46, 0x69, 0xfffff68f, 0x2, 0x0, 0x400, 0x9, 0x9, 0x0, 0xa14, 0x0, 0x4, 0x7, 0x6, 0x5, 0x4, 0xfffffff7, 0x9, 0xbd, 0x8, 0x73, 0x30000000, 0x80, 0xfffffffd, 0x7, 0xc, 0x3, 0x8, 0x800, 0x6, 0x2, 0x101, 0x0, 0x7, 0x0, 0x9000, 0x4, 0x0, 0x9, 0x1, 0x5, 0x4, 0x80000000, 0x40, 0x8, 0x1, 0x7fff, 0x36ed, 0xd1a1, 0x4, 0x0, 0x3, 0x650c80fa, 0x9, 0x0, 0x3, 0x6e4d, 0x6, 0x80000000, 0x4, 0x100, 0x1, 0x8, 0x6, 0x101, 0x2, 0x10, 0x101, 0xe, 0xfffffffc, 0x9, 0x1, 0x4, 0x4ad, 0x9, 0x0, 0x7, 0x8, 0x101, 0x6, 0x3, 0xffff, 0x3, 0x7ff, 0x2, 0x1, 0x6, 0x800, 0x45b, 0x190, 0x1, 0x10001, 0x400, 0x7f, 0x85d1, 0xc, 0xfff, 0x153, 0x6, 0x0, 0x9000000, 0x6, 0x1, 0x0, 0x8, 0x400, 0x8, 0x4, 0x5, 0xa041, 0x5, 0x20000000, 0x1, 0x0, 0x6bd, 0x7, 0x800, 0x6, 0x8, 0x400, 0x81000000, 0x4, 0xb, 0x5, 0x7, 0xb, 0x3, 0xdf8, 0x5, 0x8, 0x200, 0xb, 0x800, 0x62fca6b8, 0x32, 0x3000, 0x401, 0x9, 0x1, 0xffff, 0x0, 0x5a, 0x9, 0x81, 0x5, 0x10001, 0x6, 0x9, 0x101, 0x9, 0xb, 0x3ff, 0x31, 0xce8a, 0xfffffffb, 0x200, 0x8, 0x80000000, 0x4, 0x11f9, 0x4, 0x5, 0x9, 0x3ff, 0x1, 0x3, 0x920d, 0x1, 0x583, 0x6, 0x1, 0x8, 0x3, 0xffff, 0xfffffffe, 0x0, 0x0, 0x4c611a3c, 0x0, 0x0, 0x409da820, 0x400, 0xc, 0x0, 0x4, 0x1, 0xe3f, 0xfff, 0x5, 0xb, 0x1000, 0x2, 0x100, 0x7, 0x6, 0x0, 0x0, 0x9, 0xff, 0x8, 0x3, 0xd, 0x9, 0x8, 0x9, 0x4, 0x9, 0x3, 0x4, 0x3, 0x7, 0x8001, 0x3ff, 0x5, 0x3c, 0x3, 0x8, 0x100, 0x5, 0x2, 0x4, 0x1, 0x0, 0x8, 0x8, 0xffffff6c, 0xd2fd, 0xf, 0x8001, 0x200, 0x7f, 0x7, 0x1, 0x1, 0xfffffe00, 0xfffffe00, 0x95d3, 0x3c, 0x7, 0x3, 0x7, 0x3, 0x1, 0x8, 0x0, 0x6, 0x1457, 0x84a3, 0xfff, 0xda36, 0xfffffffb, 0x2, 0xf79, 0x0, 0x4, 0x755, 0x4, 0xe, 0x3, 0x6, 0x0, 0x96b6, 0x7, 0xedaf, 0x8b, 0x4, 0x800, 0x2, 0x9, 0x4, 0x1, 0x8, 0x3ff, 0x0, 0x401, 0x1, 0x1, 0x7, 0xff, 0x401, 0x3, 0xffff76bf, 0x18d, 0x4, 0x0, 0xe, 0xb, 0x10001, 0x1, 0x944b, 0x80000001, 0x5, 0x8, 0x400000, 0xff, 0x1, 0x3, 0x80, 0x0, 0x9, 0x400, 0x101, 0xc, 0x4, 0x1, 0x1ff, 0x4, 0x2, 0x40, 0x4, 0x1ff, 0x800, 0x0, 0x80000000, 0x6, 0x2, 0x33, 0x5, 0x1, 0x7, 0x5103fc93, 0xfffffff2, 0x7fffffff, 0x80000001, 0x4, 0x1000, 0x5, 0x8, 0x9, 0x4, 0x10000, 0xfffffff8, 0x0, 0x81, 0x6, 0x3ff, 0x6ecc, 0x7fff, 0x6, 0x7, 0x7, 0x9, 0x4, 0x3, 0x7, 0xd8670, 0x3, 0xffffffff, 0x26, 0x3, 0x101, 0x80000000, 0x3, 0x7, 0x8, 0x4, 0xb81, 0xb, 0x5, 0x5, 0x5, 0x5, 0x401, 0x7fff, 0x0, 0x86, 0x6, 0x2, 0x8, 0xb1e8, 0x846, 0x1, 0x77, 0x10, 0x2, 0x9, 0x8, 0x4, 0x2c, 0x6, 0x1, 0xa8, 0xf, 0xa, 0xf5d, 0xc47b, 0x5, 0xffffffff, 0x1e, 0xae, 0x8, 0x0, 0x8, 0xb4ef, 0x6, 0x3, 0x3, 0x3, 0x800, 0x90, 0x1, 0x9, 0x2, 0xffffff28, 0xfffff2c8, 0x2, 0x3, 0x3, 0x1ecc, 0x1, 0x40, 0x60, 0x1000, 0x7, 0x1400000, 0x3, 0x7ff, 0x4, 0xfffffffa, 0x8, 0x8, 0x1, 0x5, 0x3, 0xf085, 0x3, 0x9, 0x80000000, 0x10001, 0x0, 0x6, 0x7ff, 0x8, 0x3cf, 0x7, 0x19220447, 0xffff661d, 0x56c0, 0x0, 0x8c, 0x1, 0x7, 0xfffffd6d, 0x6, 0x8, 0x9, 0x9, 0x401, 0xd, 0x9302, 0x25e5, 0xfffffffe, 0x4, 0x1, 0x0, 0xa2, 0xfffffffd, 0x10001, 0x9, 0x9, 0x9, 0x2, 0x2, 0x6, 0x200, 0xfffff001, 0x8, 0x38d0, 0x7, 0xff, 0x0, 0x82, 0x4, 0xfffffff7, 0xa, 0x8001, 0x8, 0x8, 0x101, 0x4, 0x6, 0x146, 0x9, 0x5, 0xfffffffd, 0x6, 0x10000]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) syz_usb_connect(0x6, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYRESOCT=r4, @ANYRES32=r0, @ANYBLOB="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"], 0x0) (async) 655.320996ms ago: executing program 0 (id=562): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'fl512\x00', [0x6, 0x7, 0x4, 0x4000002, 0x2088d7, 0x8d, 0x1007, 0x0, 0x1002, 0xffffffff, 0x200, 0xffd, 0x10000009, 0x80001, 0x5, 0x1, 0x8, 0x3, 0x9, 0x91, 0x10c, 0x2, 0x7, 0xa, 0x7, 0x9, 0x75, 0xc, 0xff, 0x400002, 0x1]}) 512.641768ms ago: executing program 0 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="e80000001000010000fffffffffffffff500000a"], 0xe8}}, 0x0) 511.879484ms ago: executing program 1 (id=564): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000080)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0xd3, 0x140043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=0xffffffffffffffff) 463.147856ms ago: executing program 0 (id=565): clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x9, 0x6, 0xc, 0x0, 0xfffffffffffffff9, 0x4, 0x200000001000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x3d9, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 450.740262ms ago: executing program 1 (id=566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x48, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x88, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0xc, 0x1ff}}]}], @param_prob={0x4, 0x0, 0x0, 0x804e, {0x1, 0x6, "55cab8", 0x5, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback={0xffffff07}}}}}}}, 0x7e) 340.590183ms ago: executing program 0 (id=567): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d00eec0e940fd322ed3d4f526341462e89a340a781fceb4d740d4e1dd651463317480d5fc86", 0x4a}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/161, 0xa1}], 0x1}, 0x3}], 0x1, 0x10020, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 303.06985ms ago: executing program 0 (id=568): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x4, 0x4) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@mcast1, 0x2a}) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000400, 0x2, 0x3, 0x9}, 0x20) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 291.664508ms ago: executing program 1 (id=569): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000120033060000000000000080ff01a6ffffff000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d232000000fc02000000000000000000230000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000050000000000000004000000020000000000000006000000020000000a00049819000000000000000c0015005c073500010000"], 0xfc}}, 0x0) 156.652418ms ago: executing program 1 (id=570): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x89, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040001) (async, rerun: 32) syz_open_dev$vim2m(0x0, 0x7f, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0xed25c7f7ffe2b2eb, 0x1, 0x17, {0x17, 0x3, "37fbbc86a2ea7fe21fd7460b29829ebb94863a3664"}}, &(0x7f00000000c0)={0x0, 0x3, 0x95, @string={0x95, 0x3, "6f9d3e50b879b237080a02079b0526b6b0e59b96d3db015378f19013ed3915b07de2b209b2db1b1ec30f6d60377300b9d981087ddf2d4500a04d88f759750ceff7ef3805df1cec77009260e722be3e931ae78d059157616f49e30424d24fa396e817662ae906c57c6196dda5438fa224b89775683ed2190cc8c8fb08a9c0de232ce5d904f4977bb4b1d8a0aa30fadafe8fe398"}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x20, 0xf, 0x4, "eba30adb"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xd5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x0, 0xc2, {0xc0, "15fb5ce3b631232c8bfdd05a955db5bd2755390b352f2de5de831d3dd9134e0372da7704c8031cfd4c8e6e32d4c6167c3f0919091c54e1e647fc6d7f2a245a1f2844afff3008218c724d89c3c2f34d49a2da6531b1f97ec806e64d605a57a4039788173240730d1cd0561cb981ad11210be1a75a46285bd2533a4c0571526a578af935f4c93c6c54322e20cedca6c2b0713fba74c63046665eecd0df11a3f1b94b7e2cd818d59636c5c5d5047225ba569448947a95ad8cf2be1c715c9530d831"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x7}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 156.390191ms ago: executing program 0 (id=571): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0x7, 0x22000) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x3, 0x0, 0x98, &(0x7f0000000600)={0x0, 0x0, 0x4}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x8) fchdir(r4) (async) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x80) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 82.106452ms ago: executing program 3 (id=572): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002ac0)=ANY=[@ANYBLOB="8c050000130001002bbd7000fb0e0025080054"], 0x58c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x7c84, 0x26, 0x3, 0x4, 0xbf9]}}) ioctl$KVM_RUN(r2, 0xae80, 0x4100000000000000) 0s ago: executing program 3 (id=573): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x44, r2, 0xb97534d5fe9704cf, 0x4, 0x200, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3ff}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x602}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "4ac0"}]}, 0x44}, 0x1, 0x6000, 0x0, 0x80c1}, 0x0) kernel console output (not intermixed with test programs): iscuous mode [ 74.813756][ T5822] veth1_macvtap: entered promiscuous mode [ 74.885006][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.897051][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.916407][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.931843][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.951671][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.972618][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.980272][ T3500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.990460][ T3500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.006721][ T3500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.015585][ T3500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.032674][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.057214][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.066295][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.088733][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.169637][ T5828] veth0_vlan: entered promiscuous mode [ 75.186463][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.195162][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.209510][ T5828] veth1_vlan: entered promiscuous mode [ 75.260855][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.268698][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.307769][ T5825] veth0_vlan: entered promiscuous mode [ 75.347885][ T5828] veth0_macvtap: entered promiscuous mode [ 75.349540][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.368896][ T5828] veth1_macvtap: entered promiscuous mode [ 75.385842][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.386419][ T5825] veth1_vlan: entered promiscuous mode [ 75.401393][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.446843][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.459847][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.472157][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.489215][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.536227][ T3500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.553696][ T3500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.585483][ T5825] veth0_macvtap: entered promiscuous mode [ 75.602710][ T3500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.637676][ T3500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.683906][ T5825] veth1_macvtap: entered promiscuous mode [ 75.787120][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.798017][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.806259][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.822741][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.831197][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.851797][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.860687][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.869532][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.889488][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.913791][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.922482][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.991172][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 76.001828][ T24] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 76.022908][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 76.034702][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.047842][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.056100][ T24] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 76.073616][ T24] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 76.109414][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 76.123869][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.132198][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.133766][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 76.149515][ T24] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 76.158878][ T24] usb 1-1: Product: syz [ 76.172563][ T24] usb 1-1: Manufacturer: syz [ 76.177280][ T24] usb 1-1: SerialNumber: syz [ 76.191976][ T24] usb 1-1: config 0 descriptor?? [ 76.207804][ T24] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 76.225802][ T24] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 76.372696][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.516075][ T5909] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 76.517331][ T5823] usb 1-1: USB disconnect, device number 2 [ 76.523296][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 76.546785][ T5823] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 76.690733][ T5925] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 76.723696][ T5827] Bluetooth: hci2: command tx timeout [ 76.733694][ T5831] Bluetooth: hci0: command tx timeout [ 76.800714][ T5831] Bluetooth: hci3: command tx timeout [ 76.806174][ T5827] Bluetooth: hci1: command tx timeout [ 76.843769][ T5925] usb 4-1: not running at top speed; connect to a high speed hub [ 76.852703][ T5925] usb 4-1: config 1 has an invalid interface number: 78 but max is 0 [ 76.860966][ T5925] usb 4-1: config 1 has no interface number 0 [ 76.867082][ T5925] usb 4-1: config 1 interface 78 has no altsetting 0 [ 76.877777][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 76.885890][ T5925] usb 4-1: New USB device found, idVendor=11ba, idProduct=9dce, bcdDevice=ec.57 [ 76.890715][ T5891] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.895849][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.964888][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078db2000: rx timeout, send abort [ 77.002615][ T5932] netlink: 'syz.1.8': attribute type 3 has an invalid length. [ 77.060806][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 77.071695][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short [ 77.080420][ T5891] usb 3-1: config 132 has too many interfaces: 60, using maximum allowed: 32 [ 77.089744][ T5891] usb 3-1: config 132 has an invalid descriptor of length 248, skipping remainder of the config [ 77.102108][ T5891] usb 3-1: config 132 has 0 interfaces, different from the descriptor's value: 60 [ 77.113334][ T5891] usb 3-1: New USB device found, idVendor=12d1, idProduct=9851, bcdDevice=79.24 [ 77.122737][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.130814][ T5891] usb 3-1: Product: syz [ 77.135107][ T5891] usb 3-1: Manufacturer: syz [ 77.137217][ T9] usb 4-1: USB disconnect, device number 2 [ 77.141606][ T5891] usb 3-1: SerialNumber: syz [ 77.290668][ T5916] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.398206][ T5891] usb 3-1: USB disconnect, device number 2 [ 77.451872][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 77.459316][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.468919][ T5916] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 77.477220][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078db2000: abort rx timeout. Force session deactivation [ 77.488431][ T5916] usb 2-1: config 9 has no interface number 0 [ 77.496456][ T5916] usb 2-1: config 9 interface 129 has no altsetting 0 [ 77.507862][ T5916] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 77.518059][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.526959][ T5916] usb 2-1: Product: syz [ 77.531370][ T5916] usb 2-1: Manufacturer: syz [ 77.536170][ T5916] usb 2-1: SerialNumber: syz [ 77.779842][ T5916] usb 2-1: bad CDC descriptors [ 77.792450][ T5916] usb 2-1: USB disconnect, device number 2 [ 78.140995][ T5891] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.303022][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 78.321767][ T5891] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.00 [ 78.329223][ T5958] netlink: 'syz.1.18': attribute type 15 has an invalid length. [ 78.340518][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.351220][ T5916] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.365349][ T5891] usb 4-1: config 0 descriptor?? [ 78.520641][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 78.528771][ T5916] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 78.537012][ T5916] usb 1-1: config 0 has no interface number 0 [ 78.543363][ T5916] usb 1-1: config 0 interface 184 has no altsetting 0 [ 78.552432][ T5916] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 78.562634][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.570904][ T5916] usb 1-1: Product: syz [ 78.575680][ T5916] usb 1-1: Manufacturer: syz [ 78.580291][ T5916] usb 1-1: SerialNumber: syz [ 78.588100][ T5916] usb 1-1: config 0 descriptor?? [ 78.592609][ T5946] kvm: vcpu 0: requested 288 ns lapic timer period limited to 200000 ns [ 78.597230][ T5916] smsc75xx v1.0.0 [ 78.606925][ T5946] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 78.627605][ T24] usb 4-1: USB disconnect, device number 3 [ 78.660596][ T5891] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.811209][ T5827] Bluetooth: hci0: command tx timeout [ 78.811221][ T5831] Bluetooth: hci2: command tx timeout [ 78.831085][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 78.837794][ T5891] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 78.847572][ T5891] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 78.858684][ T5891] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 78.869884][ T5891] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 78.884206][ T5827] Bluetooth: hci1: command tx timeout [ 78.884964][ T5831] Bluetooth: hci3: command tx timeout [ 78.896187][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 78.913179][ T5891] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 78.922718][ T5891] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 78.933537][ T5891] usb 3-1: Product: syz [ 78.937726][ T5891] usb 3-1: Manufacturer: syz [ 78.953250][ T5891] usb 3-1: SerialNumber: syz [ 78.971586][ T5891] usb 3-1: config 0 descriptor?? [ 78.979223][ T5891] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 78.992290][ T5891] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 79.229361][ T5975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22'. [ 79.274108][ T5960] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 79.275027][ T5935] usb 3-1: USB disconnect, device number 3 [ 79.282419][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 79.337031][ T5978] FAULT_INJECTION: forcing a failure. [ 79.337031][ T5978] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.353835][ T5935] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 79.367000][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.1.24 Not tainted syzkaller #0 PREEMPT(full) [ 79.367024][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.367040][ T5978] Call Trace: [ 79.367052][ T5978] [ 79.367060][ T5978] dump_stack_lvl+0x189/0x250 [ 79.367085][ T5978] ? __pfx____ratelimit+0x10/0x10 [ 79.367109][ T5978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.367129][ T5978] ? __pfx__printk+0x10/0x10 [ 79.367149][ T5978] ? __might_fault+0xb0/0x130 [ 79.367179][ T5978] should_fail_ex+0x414/0x560 [ 79.367207][ T5978] _copy_from_user+0x2d/0xb0 [ 79.367228][ T5978] ___sys_sendmsg+0x158/0x2a0 [ 79.367254][ T5978] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.367311][ T5978] ? __fget_files+0x2a/0x420 [ 79.367326][ T5978] ? __fget_files+0x3a0/0x420 [ 79.367354][ T5978] __x64_sys_sendmsg+0x19b/0x260 [ 79.367380][ T5978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 79.367409][ T5978] ? __pfx_ksys_write+0x10/0x10 [ 79.367436][ T5978] ? do_syscall_64+0xbe/0xfa0 [ 79.367461][ T5978] do_syscall_64+0xfa/0xfa0 [ 79.367484][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.367501][ T5978] ? clear_bhb_loop+0x60/0xb0 [ 79.367521][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.367535][ T5978] RIP: 0033:0x7f30ab98f6c9 [ 79.367554][ T5978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.367566][ T5978] RSP: 002b:00007f30ac8e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.367584][ T5978] RAX: ffffffffffffffda RBX: 00007f30abbe5fa0 RCX: 00007f30ab98f6c9 [ 79.367596][ T5978] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 79.367606][ T5978] RBP: 00007f30ac8e8090 R08: 0000000000000000 R09: 0000000000000000 [ 79.367616][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.367625][ T5978] R13: 00007f30abbe6038 R14: 00007f30abbe5fa0 R15: 00007fff24e59688 [ 79.367653][ T5978] [ 79.748532][ T5987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.26'. [ 79.792631][ T5916] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 79.831118][ T5891] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.982128][ T5891] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 79.991086][ T5891] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 80.005544][ T5891] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 80.006981][ T5916] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 80.020215][ T5891] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 80.041735][ T5916] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 80.052612][ T5935] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.054586][ T5891] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 80.063101][ T5916] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 80.073819][ T5891] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 80.086050][ T5916] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 80.095760][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.104359][ T5916] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 80.131643][ T5916] usb 1-1: USB disconnect, device number 3 [ 80.200766][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 80.219218][ T5935] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.229196][ T5935] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 80.248042][ T5935] usb 2-1: config 9 has no interface number 0 [ 80.266418][ T5935] usb 2-1: config 9 interface 129 has no altsetting 0 [ 80.278293][ T5935] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 80.288098][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.296648][ T5935] usb 2-1: Product: syz [ 80.305187][ T5935] usb 2-1: Manufacturer: syz [ 80.309883][ T5935] usb 2-1: SerialNumber: syz [ 80.326719][ T5891] ath6kl: Failed to submit usb control message: -71 [ 80.335504][ T5891] ath6kl: unable to send the bmi data to the device: -71 [ 80.343015][ T5891] ath6kl: Unable to send get target info: -71 [ 80.355346][ T5891] ath6kl: Failed to init ath6kl core: -71 [ 80.371854][ T5891] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 80.391847][ T5891] usb 4-1: USB disconnect, device number 4 [ 80.547175][ T5935] usb 2-1: bad CDC descriptors [ 80.557022][ T5935] usb 2-1: USB disconnect, device number 3 [ 81.200221][ T6015] netlink: 236 bytes leftover after parsing attributes in process `syz.3.34'. [ 81.560603][ T5935] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 81.641026][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.700635][ T5891] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 81.730660][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 81.737507][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.749516][ T5935] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 81.758609][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.769514][ T5935] usb 4-1: config 0 descriptor?? [ 81.820743][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 81.828529][ T43] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 81.839000][ T43] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 81.860691][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 81.880579][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 81.885834][ T43] usb 2-1: config 1 has no interface number 0 [ 81.892631][ T43] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.920717][ T43] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 81.934082][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.950684][ T43] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 81.970574][ T5891] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 81.978764][ T5891] usb 3-1: config 9 has no interface number 0 [ 81.984943][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.990754][ T6020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.001304][ T5891] usb 3-1: config 9 interface 129 has no altsetting 0 [ 82.006444][ T6020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.019950][ T5891] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 82.027917][ T6020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.032436][ T43] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 82.043690][ T6020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.051565][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.070951][ T5891] usb 3-1: Product: syz [ 82.075185][ T5891] usb 3-1: Manufacturer: syz [ 82.079825][ T5891] usb 3-1: SerialNumber: syz [ 82.098415][ T5935] usbhid 4-1:0.0: can't add hid device: -71 [ 82.121632][ T5935] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 82.165499][ T5935] usb 4-1: USB disconnect, device number 5 [ 82.226794][ T43] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 82.394549][ T5891] usb 3-1: bad CDC descriptors [ 82.404933][ T5891] usb 3-1: USB disconnect, device number 4 [ 82.442535][ T6024] xfs: Unknown parameter 'norecoveryQPčŐ' [ 82.449557][ T5925] usb 2-1: USB disconnect, device number 4 [ 82.458942][ T5925] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 82.620718][ T5935] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 82.776453][ T5935] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 82.785701][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.793752][ T5935] usb 4-1: Product: syz [ 82.798014][ T5935] usb 4-1: Manufacturer: syz [ 82.802645][ T5935] usb 4-1: SerialNumber: syz [ 82.809197][ T5935] usb 4-1: config 0 descriptor?? [ 83.017876][ T5935] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 84.210620][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.370545][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 84.377308][ T24] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 84.386046][ T24] usb 1-1: config 0 has no interface number 0 [ 84.392516][ T24] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 84.412784][ T24] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 84.423897][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.432171][ T24] usb 1-1: Product: syz [ 84.436480][ T24] usb 1-1: Manufacturer: syz [ 84.441731][ T24] usb 1-1: SerialNumber: syz [ 84.448765][ T24] usb 1-1: config 0 descriptor?? [ 84.458017][ T6042] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.464773][ T24] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 84.465210][ T6042] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 84.487598][ T6042] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.493735][ T6042] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 84.506083][ T6042] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.513020][ T6042] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 84.525993][ T6042] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.532540][ T6042] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 84.708709][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 85.010698][ T5877] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.063689][ T5935] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 85.075695][ T5935] usb 4-1: USB disconnect, device number 6 [ 85.170613][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 85.177924][ T5877] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.186814][ T5877] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 85.195146][ T5877] usb 2-1: config 9 has no interface number 0 [ 85.202406][ T5877] usb 2-1: config 9 interface 129 has no altsetting 0 [ 85.211649][ T5877] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 85.220973][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.230794][ T5877] usb 2-1: Product: syz [ 85.234999][ T5877] usb 2-1: Manufacturer: syz [ 85.239655][ T5877] usb 2-1: SerialNumber: syz [ 85.267639][ T24] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 85.468281][ T24] usb 1-1: USB disconnect, device number 4 [ 85.526700][ T5877] usb 2-1: bad CDC descriptors [ 85.541938][ T5877] usb 2-1: USB disconnect, device number 5 [ 85.930593][ T5935] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 86.081407][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 86.112554][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.140524][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.165755][ T5935] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 86.176319][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.201666][ T5935] usb 4-1: config 0 descriptor?? [ 86.328461][ T6080] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.428540][ T6081] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 86.625673][ T6066] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 86.636237][ T6066] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 86.650921][ T6066] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 86.657405][ T6066] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 86.690126][ T6066] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 86.712887][ T6066] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 86.714043][ T5935] hid (null): unknown global tag 0xe [ 86.745842][ T5935] razer 0003:1532:011B.0001: unknown global tag 0xe [ 86.756388][ T5935] razer 0003:1532:011B.0001: item 0 0 1 14 parsing failed [ 86.781333][ T5935] razer 0003:1532:011B.0001: probe with driver razer failed with error -22 [ 86.889689][ T1886] cfg80211: failed to load regulatory.db [ 86.932695][ T5877] usb 4-1: USB disconnect, device number 7 [ 87.063109][ T6094] pimreg3: entered allmulticast mode [ 87.171935][ T6096] syz.2.67 uses obsolete (PF_INET,SOCK_PACKET) [ 87.319613][ T6100] use of bytesused == 0 is deprecated and will be removed in the future, [ 87.331954][ T6100] use the actual size instead. [ 87.445365][ T6106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.469914][ T5935] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.630597][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 87.637498][ T5935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.649121][ T5935] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 87.659006][ T5935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.668804][ T5935] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 87.682842][ T5935] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 87.709653][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 87.717812][ T5935] usb 1-1: SerialNumber: syz [ 87.732478][ T6098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.745898][ T5935] usb 1-1: bad CDC descriptors [ 87.752138][ T5935] usb-storage 1-1:1.0: USB Mass Storage device detected [ 87.774761][ T5935] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 87.799876][ T5935] scsi host1: usb-storage 1-1:1.0 [ 87.830672][ T5916] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 87.980642][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 87.991937][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.003875][ T5916] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.014336][ T5916] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 88.023491][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.033903][ T5916] usb 4-1: config 0 descriptor?? [ 88.299952][ T6136] binder: 6097:6136 ioctl c0306201 200000000500 returned -14 [ 88.610551][ T1886] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.710951][ T5935] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 88.780608][ T1886] usb 3-1: Using ep0 maxpacket: 16 [ 88.787289][ T1886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.798235][ T1886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.813763][ T1886] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 88.823014][ T1886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.833758][ T1886] usb 3-1: config 0 descriptor?? [ 88.862428][ T5935] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 88.871024][ T5935] usb 2-1: config 2 has no interface number 0 [ 88.877121][ T5935] usb 2-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 88.891567][ T5935] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 88.901924][ T5935] usb 2-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.911889][ T5935] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 88.924731][ T5935] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 88.933851][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.941991][ T5935] usb 2-1: Product: syz [ 88.946168][ T5935] usb 2-1: Manufacturer: syz [ 88.951264][ T5935] usb 2-1: SerialNumber: syz [ 88.959587][ T6145] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 89.031579][ T6121] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 89.172416][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.181404][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.196081][ T5935] usb 2-1: probing VID:PID(0424:012C) [ 89.204955][ T5935] usb 2-1: vub300 testing BULK IN EndPoint(0) 8E [ 89.211386][ T5935] usb 2-1: vub300 testing BULK IN EndPoint(1) 82 [ 89.217750][ T5935] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 89.226927][ T5935] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 89.238544][ T5935] usb 2-1: USB disconnect, device number 6 [ 89.247395][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 89.260283][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 89.274668][ T1886] apple 0003:05AC:024B.0002: unknown global tag 0xe [ 89.281866][ T1886] apple 0003:05AC:024B.0002: item 0 1 1 14 parsing failed [ 89.289428][ T1886] apple 0003:05AC:024B.0002: parse failed [ 89.295978][ T1886] apple 0003:05AC:024B.0002: probe with driver apple failed with error -22 [ 89.478248][ T6139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.487001][ T6139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.497031][ T5925] usb 3-1: USB disconnect, device number 5 [ 89.787810][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 89.920627][ T6121] usb 1-1: device descriptor read/64, error -71 [ 90.107789][ T6155] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.141175][ T6155] mmap: syz.2.89 (6155) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.161900][ T6121] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 90.180075][ T6121] usb 1-1: device reset changed ep0 maxpacket size! [ 90.202798][ T5916] usb 1-1: USB disconnect, device number 5 [ 90.460876][ T5916] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 90.591636][ T5925] usb 4-1: USB disconnect, device number 8 [ 90.614481][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 90.624618][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.653801][ T5916] usb 1-1: config 9 has an invalid interface number: 129 but max is 0 [ 90.663488][ T5916] usb 1-1: config 9 has no interface number 0 [ 90.669582][ T5916] usb 1-1: config 9 interface 129 has no altsetting 0 [ 90.680277][ T5916] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 90.690137][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.698175][ T5916] usb 1-1: Product: syz [ 90.702652][ T5916] usb 1-1: Manufacturer: syz [ 90.707250][ T5916] usb 1-1: SerialNumber: syz [ 90.750671][ T5935] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.790634][ T5936] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 90.910600][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 90.918422][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.928522][ T5935] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 90.937264][ T5935] usb 3-1: config 9 has no interface number 0 [ 90.944363][ T5935] usb 3-1: config 9 interface 129 has no altsetting 0 [ 90.958811][ T5916] usb 1-1: bad CDC descriptors [ 90.964877][ T5935] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 90.974312][ T5925] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 90.986215][ T5916] usb 1-1: USB disconnect, device number 6 [ 90.992279][ T5936] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 91.001537][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.009541][ T5935] usb 3-1: Product: syz [ 91.016347][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.026513][ T5935] usb 3-1: Manufacturer: syz [ 91.031327][ T5936] usb 2-1: Product: syz [ 91.035491][ T5936] usb 2-1: Manufacturer: syz [ 91.040069][ T5936] usb 2-1: SerialNumber: syz [ 91.044767][ T5935] usb 3-1: SerialNumber: syz [ 91.057324][ T5936] usb 2-1: config 0 descriptor?? [ 91.183307][ T5925] usb 4-1: not running at top speed; connect to a high speed hub [ 91.192280][ T5925] usb 4-1: config index 0 descriptor too short (expected 2322, got 18) [ 91.201396][ T5925] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 91.209508][ T5925] usb 4-1: config 95 has no interface number 0 [ 91.215729][ T5925] usb 4-1: config 95 interface 1 has no altsetting 0 [ 91.225188][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 91.231573][ T5925] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 91.241104][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.285707][ T5936] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 91.385542][ T5935] usb 3-1: bad CDC descriptors [ 91.401874][ T5935] usb 3-1: USB disconnect, device number 6 [ 91.661654][ T24] usb 4-1: USB disconnect, device number 9 [ 91.669083][ T6188] netlink: 212 bytes leftover after parsing attributes in process `syz.2.100'. [ 91.912172][ T5935] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 92.091391][ T5935] usb 1-1: Invalid ep0 maxpacket: 9 [ 92.150586][ T5925] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 92.220586][ T5935] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 92.300610][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 92.307635][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.317876][ T5925] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.328935][ T5925] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 92.338098][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.358493][ T5925] usb 3-1: config 0 descriptor?? [ 92.377516][ T5935] usb 1-1: Invalid ep0 maxpacket: 9 [ 92.391698][ T5935] usb usb1-port1: attempt power cycle [ 92.508140][ T6210] netlink: 200 bytes leftover after parsing attributes in process `syz.3.110'. [ 92.645257][ T6213] sp0: Synchronizing with TNC [ 92.751244][ T5935] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 92.782121][ T5935] usb 1-1: Invalid ep0 maxpacket: 9 [ 92.910522][ T5936] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 92.920865][ T5935] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 92.945139][ T5936] usb 2-1: USB disconnect, device number 7 [ 92.948608][ T6225] netlink: 236 bytes leftover after parsing attributes in process `syz.3.115'. [ 92.952034][ T5935] usb 1-1: Invalid ep0 maxpacket: 9 [ 92.971940][ T5935] usb usb1-port1: unable to enumerate USB device [ 93.660585][ T5877] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 93.710752][ T6248] Bluetooth: MGMT ver 1.23 [ 93.815271][ T5877] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 93.825293][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.835623][ T5877] usb 4-1: Product: syz [ 93.839966][ T5877] usb 4-1: Manufacturer: syz [ 93.846190][ T5877] usb 4-1: SerialNumber: syz [ 93.859764][ T5877] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 93.881995][ T1886] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.366040][ T6256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.377165][ T6256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.430572][ T5936] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 94.590613][ T5936] usb 1-1: Invalid ep0 maxpacket: 9 [ 94.720629][ T5936] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 94.938226][ T5925] usb 3-1: USB disconnect, device number 7 [ 94.948907][ T6261] sg_write: process 119 (syz.1.129) changed security contexts after opening file descriptor, this is not allowed. [ 94.978240][ T1886] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 95.014982][ T1886] ath9k_htc: Failed to initialize the device [ 95.074488][ T1886] usb 4-1: ath9k_htc: USB layer deinitialized [ 95.384247][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 95.516566][ T6236] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.119' sets config #590854 [ 95.743772][ T5936] usb 4-1: USB disconnect, device number 10 [ 95.937053][ T6260] syz.1.129 (6260): drop_caches: 2 [ 96.153988][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 96.441017][ T1886] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 96.600579][ T1886] usb 3-1: Using ep0 maxpacket: 16 [ 96.607819][ T1886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.617055][ T1886] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 96.625357][ T1886] usb 3-1: config 9 has no interface number 0 [ 96.631544][ T1886] usb 3-1: config 9 interface 129 has no altsetting 0 [ 96.640308][ T1886] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 96.649410][ T1886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.657703][ T1886] usb 3-1: Product: syz [ 96.662057][ T1886] usb 3-1: Manufacturer: syz [ 96.666765][ T1886] usb 3-1: SerialNumber: syz [ 96.710661][ T5925] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 96.780830][ T5936] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 96.860597][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 96.867272][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.878213][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.888061][ T5925] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 96.897216][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.919599][ T5925] usb 4-1: config 0 descriptor?? [ 96.940650][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 96.956811][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 97.008419][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.042496][ T5936] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 97.070596][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.079284][ T5936] usb 2-1: Product: syz [ 97.083895][ T5936] usb 2-1: Manufacturer: syz [ 97.088525][ T5936] usb 2-1: SerialNumber: syz [ 97.101869][ T5936] usb 2-1: config 0 descriptor?? [ 97.128416][ T5936] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.140000][ T5936] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 97.152079][ T5925] savu 0003:1E7D:2D5A.0003: unknown global tag 0xd [ 97.158612][ T5925] savu 0003:1E7D:2D5A.0003: item 0 4 1 13 parsing failed [ 97.168010][ T5925] savu 0003:1E7D:2D5A.0003: parse failed [ 97.176666][ T5925] savu 0003:1E7D:2D5A.0003: probe with driver savu failed with error -22 [ 97.326204][ T1886] usb 3-1: bad CDC descriptors [ 97.348610][ T5925] usb 4-1: USB disconnect, device number 11 [ 97.350746][ T1886] usb 3-1: USB disconnect, device number 8 [ 97.728455][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.746300][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.756527][ T5936] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 97.781817][ T5936] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 97.801072][ T1886] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 97.960574][ T1886] usb 1-1: Using ep0 maxpacket: 32 [ 97.972887][ T1886] usb 1-1: config 9 has an invalid descriptor of length 255, skipping remainder of the config [ 97.984226][ T1886] usb 1-1: config 9 has no interfaces? [ 97.992837][ T1886] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 98.000644][ T5936] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 98.011640][ T5936] em28xx 2-1:0.0: No AC97 audio processor [ 98.011658][ T1886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.043951][ T1886] usb 1-1: Product: syz [ 98.048299][ T1886] usb 1-1: Manufacturer: syz [ 98.053497][ T1886] usb 1-1: SerialNumber: syz [ 98.284194][ T1886] usb 1-1: USB disconnect, device number 13 [ 98.406354][ T6335] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 98.566419][ T6344] ======================================================= [ 98.566419][ T6344] WARNING: The mand mount option has been deprecated and [ 98.566419][ T6344] and is ignored by this kernel. Remove the mand [ 98.566419][ T6344] option from the mount to silence this warning. [ 98.566419][ T6344] ======================================================= [ 98.786877][ T6357] pimreg: entered allmulticast mode [ 98.802442][ T6357] pimreg: left allmulticast mode [ 98.984044][ T6364] netlink: 188 bytes leftover after parsing attributes in process `syz.0.168'. [ 99.432941][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 99.507160][ T6387] netlink: 36 bytes leftover after parsing attributes in process `syz.3.176'. [ 99.563857][ T6389] comedi comedi2: fl512: I/O port conflict (0x6,16) [ 99.576961][ T1886] usb 2-1: USB disconnect, device number 8 [ 99.586737][ T1886] em28xx 2-1:0.0: Disconnecting em28xx [ 99.597727][ T1886] em28xx 2-1:0.0: Freeing device [ 99.688339][ T6396] netlink: 212 bytes leftover after parsing attributes in process `syz.3.179'. [ 99.702351][ T5936] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 99.870796][ T5936] usb 3-1: Using ep0 maxpacket: 32 [ 99.882223][ T5936] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 99.890410][ T5936] usb 3-1: config 0 has no interface number 0 [ 99.900073][ T5936] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.913189][ T5936] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 99.930264][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.938626][ T5936] usb 3-1: Product: syz [ 99.944996][ T5936] usb 3-1: Manufacturer: syz [ 99.949667][ T5936] usb 3-1: SerialNumber: syz [ 99.971870][ T5936] usb 3-1: config 0 descriptor?? [ 99.985608][ T5936] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 100.009871][ T5936] em28xx 3-1:0.132: Video interface 132 found: [ 100.161083][ T5925] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 100.166314][ T6413] sp0: Synchronizing with TNC [ 100.292182][ T6417] capability: warning: `syz.0.188' uses 32-bit capabilities (legacy support in use) [ 100.352027][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.363575][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.373385][ T5925] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.383639][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.398004][ T6385] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 100.409034][ T6385] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 100.419694][ T5925] usb 2-1: config 0 descriptor?? [ 100.424943][ T5935] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 100.438313][ T6385] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 100.448271][ T6385] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 100.450236][ T6420] syzkaller1: entered promiscuous mode [ 100.458885][ T6385] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 100.464501][ T6420] syzkaller1: entered allmulticast mode [ 100.473620][ T6385] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 100.492911][ T5936] em28xx 3-1:0.132: chip ID is em2884 [ 100.493227][ T6385] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 100.508586][ T6385] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 100.518185][ T6385] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 100.590610][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 100.597458][ T5935] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.607586][ T5935] usb 4-1: config 10 has an invalid interface number: 12 but max is 0 [ 100.615809][ T5935] usb 4-1: config 10 has no interface number 0 [ 100.622140][ T5935] usb 4-1: config 10 interface 12 has no altsetting 0 [ 100.631181][ T5935] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=59.5c [ 100.640422][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.648851][ T5935] usb 4-1: Product: syz [ 100.654956][ T5935] usb 4-1: Manufacturer: syz [ 100.660102][ T5925] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 100.668625][ T5935] usb 4-1: SerialNumber: syz [ 100.683012][ T5925] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input7 [ 100.779849][ T5925] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 100.880170][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.900455][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.922536][ T5935] kl5kusb105 4-1:10.12: KL5KUSB105D / PalmConnect converter detected [ 100.946970][ T5936] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 100.970246][ T5935] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 100.984406][ T5936] em28xx 3-1:0.132: board has no eeprom [ 100.996954][ T5935] usb 4-1: USB disconnect, device number 12 [ 101.031995][ T5935] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 101.043470][ T5935] kl5kusb105 4-1:10.12: device disconnected [ 101.061034][ T5936] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 101.070721][ T5936] em28xx 3-1:0.132: analog set to bulk mode. [ 101.076752][ T5916] em28xx 3-1:0.132: Registering V4L2 extension [ 101.093111][ T5936] usb 3-1: USB disconnect, device number 9 [ 101.100276][ T5936] em28xx 3-1:0.132: Disconnecting em28xx [ 101.166676][ T5916] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 101.177123][ T5916] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 101.184411][ T5916] em28xx 3-1:0.132: No AC97 audio processor [ 101.193278][ T5916] usb 3-1: Decoder not found [ 101.197883][ T5916] em28xx 3-1:0.132: failed to create media graph [ 101.205837][ T5916] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 101.214917][ T5916] em28xx 3-1:0.132: Remote control support is not available for this card. [ 101.223627][ T5936] em28xx 3-1:0.132: Closing input extension [ 101.234211][ T5936] em28xx 3-1:0.132: Freeing device [ 101.250577][ T5891] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 101.400565][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 101.407287][ T5891] usb 1-1: config 255 has an invalid interface number: 94 but max is 1 [ 101.416995][ T5891] usb 1-1: config 255 has an invalid interface number: 8 but max is 1 [ 101.425441][ T5891] usb 1-1: config 255 has no interface number 0 [ 101.431755][ T5891] usb 1-1: config 255 has no interface number 1 [ 101.438057][ T5891] usb 1-1: config 255 interface 8 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 101.451010][ T5891] usb 1-1: config 255 interface 94 has no altsetting 0 [ 101.460789][ T5891] usb 1-1: config 255 interface 8 has no altsetting 0 [ 101.479452][ T5891] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=82.25 [ 101.489497][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.498515][ T5891] usb 1-1: Product: syz [ 101.504140][ T5891] usb 1-1: Manufacturer: syz [ 101.508893][ T5891] usb 1-1: SerialNumber: syz [ 101.533715][ T5891] usb 1-1: Interface #94 referenced by multiple IADs [ 101.559796][ T6433] netlink: 236 bytes leftover after parsing attributes in process `syz.3.191'. [ 101.668077][ T6437] loop2: detected capacity change from 0 to 7 [ 101.679440][ T6437] Dev loop2: unable to read RDB block 7 [ 101.686877][ T6437] loop2: unable to read partition table [ 101.693346][ T6437] loop2: partition table beyond EOD, truncated [ 101.699687][ T6437] loop_reread_partitions: partition scan of loop2 (ţ被xü—źŃŕ– ) failed (rc=-5) [ 101.712286][ T6437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 101.791317][ T5891] usb 1-1: USB disconnect, device number 14 [ 101.965072][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 101.974084][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 101.983716][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 102.235467][ T30] audit: type=1326 audit(1762763384.621:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4058f6c9 code=0x7ffc0000 [ 102.261426][ T30] audit: type=1326 audit(1762763384.621:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4058f6c9 code=0x7ffc0000 [ 102.287938][ T30] audit: type=1326 audit(1762763384.621:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fda4058f6c9 code=0x7ffc0000 [ 102.290903][ T5935] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 102.315400][ T30] audit: type=1326 audit(1762763384.621:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4058f6c9 code=0x7ffc0000 [ 102.385991][ T30] audit: type=1326 audit(1762763384.621:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4058f6c9 code=0x7ffc0000 [ 102.458310][ T30] audit: type=1326 audit(1762763384.621:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda4058df10 code=0x7ffc0000 [ 102.489229][ T30] audit: type=1326 audit(1762763384.621:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fda40590ef7 code=0x7ffc0000 [ 102.511513][ T794] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 102.519230][ T5935] usb 4-1: device descriptor read/64, error -71 [ 102.526791][ T30] audit: type=1326 audit(1762763384.621:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda4058f6c9 code=0x7ffc0000 [ 102.555249][ T30] audit: type=1326 audit(1762763384.621:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fda40590ef7 code=0x7ffc0000 [ 102.590580][ T5916] usb 2-1: USB disconnect, device number 9 [ 102.607181][ T30] audit: type=1326 audit(1762763384.621:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fda4058e32a code=0x7ffc0000 [ 102.674375][ T794] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.684158][ T794] usb 3-1: not running at top speed; connect to a high speed hub [ 102.695072][ T794] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.716507][ T794] usb 3-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=af.16 [ 102.727488][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.735976][ T794] usb 3-1: Product: syz [ 102.742789][ T794] usb 3-1: Manufacturer: syz [ 102.749810][ T794] usb 3-1: SerialNumber: syz [ 102.780746][ T5935] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 102.910556][ T5925] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 102.930592][ T5935] usb 4-1: device descriptor read/64, error -71 [ 102.980225][ T794] pwc: Visionite VCS-UC300 USB webcam detected. [ 102.988886][ T794] pwc: Failed to set LED on/off time (-71) [ 102.995483][ T794] pwc: send_video_command error -71 [ 103.000837][ T794] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 103.008357][ T794] Philips webcam 3-1:1.0: probe with driver Philips webcam failed with error -71 [ 103.021912][ T794] usb 3-1: USB disconnect, device number 10 [ 103.041279][ T5935] usb usb4-port1: attempt power cycle [ 103.060567][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 103.067634][ T5925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.077072][ T5925] usb 1-1: config 9 has an invalid interface number: 129 but max is 0 [ 103.085283][ T5925] usb 1-1: config 9 has no interface number 0 [ 103.091475][ T5925] usb 1-1: config 9 interface 129 has no altsetting 0 [ 103.102677][ T5925] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 103.112625][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.120897][ T5925] usb 1-1: Product: syz [ 103.125415][ T5925] usb 1-1: Manufacturer: syz [ 103.130003][ T5925] usb 1-1: SerialNumber: syz [ 103.190676][ T5916] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 103.362406][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.377750][ T5916] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 103.387208][ T5935] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 103.394858][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.403138][ T5916] usb 2-1: Product: syz [ 103.407519][ T5916] usb 2-1: Manufacturer: syz [ 103.412174][ T5916] usb 2-1: SerialNumber: syz [ 103.420204][ T5916] usb 2-1: config 0 descriptor?? [ 103.425753][ T5935] usb 4-1: device descriptor read/8, error -71 [ 103.436317][ T5916] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 103.443370][ T5916] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 103.518838][ T5925] usb 1-1: bad CDC descriptors [ 103.569216][ T5925] usb 1-1: USB disconnect, device number 15 [ 103.666291][ T5916] usb 2-1: USB disconnect, device number 10 [ 103.677140][ T5935] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 103.711338][ T5935] usb 4-1: device descriptor read/8, error -71 [ 103.733242][ T6484] random: crng reseeded on system resumption [ 103.755908][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 103.769817][ T6484] fuse: Unknown parameter '_ön8 #LtžÍsäśVeXlňbĐ©ńžGŕţ&?5ĎE' [ 103.841024][ T5935] usb usb4-port1: unable to enumerate USB device [ 104.780639][ T5891] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 104.930648][ T5936] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 104.954712][ T5891] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 104.964058][ T5891] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 104.972356][ T5891] usb 1-1: Product: syz [ 104.976617][ T5891] usb 1-1: Manufacturer: syz [ 104.981246][ T5891] usb 1-1: SerialNumber: syz [ 104.989333][ T5891] usb 1-1: config 0 descriptor?? [ 105.000969][ T5891] ch341 1-1:0.0: ch341-uart converter detected [ 105.081960][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 105.101705][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.120243][ T5936] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 105.140606][ T5936] usb 2-1: config 9 has no interface number 0 [ 105.146773][ T5936] usb 2-1: config 9 interface 129 has no altsetting 0 [ 105.157240][ T5936] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 105.174387][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.184455][ T5936] usb 2-1: Product: syz [ 105.188733][ T5936] usb 2-1: Manufacturer: syz [ 105.197776][ T5936] usb 2-1: SerialNumber: syz [ 105.608547][ T5891] usb 1-1: failed to send control message: -71 [ 105.627429][ T5891] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 105.655101][ T5891] usb 1-1: USB disconnect, device number 16 [ 105.674784][ T5891] ch341 1-1:0.0: device disconnected [ 105.730276][ T6501] syz.2.215 (6501) used greatest stack depth: 18360 bytes left [ 106.196184][ T5936] usb 2-1: bad CDC descriptors [ 106.235963][ T5936] usb 2-1: USB disconnect, device number 11 [ 106.552242][ T6523] mmap: syz.1.225 (6523): VmData 37404672 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 106.586317][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 106.795376][ T6534] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 106.808199][ T6533] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 107.306121][ T6557] pimreg: entered allmulticast mode [ 107.347892][ T6557] pimreg: left allmulticast mode [ 107.579856][ T5936] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 107.751504][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 107.764087][ T5936] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 107.780626][ T5936] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.798699][ T5936] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.826147][ T5936] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.836278][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.845519][ T5936] usb 2-1: Product: ŕ   [ 107.849869][ T5936] usb 2-1: Manufacturer: äłă©•ęµćżŚć‹Ťâ¸¸ăż±čł‘㤵⡲죄£ě—᪶䫢గëŽę°·ć’¸ä­îž±í®ă™âŽ¸č­˛äŹšä€˛çž¨ě˛ ă¨ˇ×«č·Źę„łâ®—ꢔ湙䓞⇒ᑆኙ碥â†í“˘î®źá±é»Ść˛żčŞ«éş‹í‹ě¸â†˘ęŻ“䤲é™ëĄ•ë˘¸ĺ¨Šá˘”꒎㤭频椴ęşďŠ—ä›ęşťä—Ľď¬źé’鹍傝蛷뉍伫八ᢼ䍫膔縮㗢맅ę…⛅ᑻ [ 107.877123][ T5936] usb 2-1: SerialNumber: ᱺᶮү劭솴ﻷ༢ᝏౡ헍廍訊䦍ྦྷ嵽憜㳫⅏ᅻ㪅ໟ貛➇⅟č’ꢅ렎켰᪙ [ 107.892611][ T5916] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 108.066086][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.083891][ T5916] usb 1-1: not running at top speed; connect to a high speed hub [ 108.103250][ T5916] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 108.112305][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.126008][ T5916] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 108.135735][ T5916] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 108.146839][ T5916] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 108.161077][ T5916] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.170717][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.178755][ T5916] usb 1-1: Product: syz [ 108.182984][ T5916] usb 1-1: Manufacturer: syz [ 108.187624][ T5916] usb 1-1: SerialNumber: syz [ 108.309916][ T6596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.249'. [ 108.329205][ T5936] usb 2-1: 0:2 : does not exist [ 108.377949][ T5936] usb 2-1: USB disconnect, device number 12 [ 108.426121][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.451649][ T5916] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 108.487100][ T5916] usb 1-1: USB disconnect, device number 17 [ 108.519106][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.620594][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 108.770623][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 108.777331][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 108.790171][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.807464][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.816615][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.824757][ T24] usb 4-1: Product: syz [ 108.828917][ T24] usb 4-1: Manufacturer: syz [ 108.833599][ T24] usb 4-1: SerialNumber: syz [ 108.840093][ T24] usb 4-1: config 0 descriptor?? [ 108.849846][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.859239][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 109.033562][ T6603] comedi comedi2: fl512: I/O port conflict (0x6,16) [ 109.186001][ T6610] netlink: 212 bytes leftover after parsing attributes in process `syz.1.255'. [ 109.351855][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 109.360974][ T5936] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 109.448066][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 109.457064][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 109.465385][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 109.472752][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 109.511515][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 109.521387][ T5936] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.529484][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.539792][ T5936] usb 1-1: config 0 has no interface number 0 [ 109.546861][ T5936] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.560207][ T5936] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 109.569387][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.586096][ T5936] usb 1-1: config 0 descriptor?? [ 109.607322][ T5936] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 109.874135][ T6620] sp0: Synchronizing with TNC [ 110.170335][ T5936] usb 4-1: USB disconnect, device number 17 [ 110.178226][ T5936] em28xx 4-1:0.0: Disconnecting em28xx [ 110.186078][ T5936] em28xx 4-1:0.0: Freeing device [ 110.216599][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 110.227635][ T6628] netlink: 31 bytes leftover after parsing attributes in process `syz.3.261'. [ 110.237289][ T6628] netlink: 'syz.3.261': attribute type 3 has an invalid length. [ 110.245944][ T6628] netlink: 'syz.3.261': attribute type 2 has an invalid length. [ 110.253977][ T6628] netlink: 31 bytes leftover after parsing attributes in process `syz.3.261'. [ 110.287293][ T6628] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 110.535500][ T6636] tmpfs: Bad value for 'mpol' [ 110.561456][ T6636] loop0: detected capacity change from 0 to 8 [ 110.574961][ T6636] Dev loop0: unable to read RDB block 8 [ 110.593132][ T6636] loop0: unable to read partition table [ 110.603632][ T6636] loop0: partition table beyond EOD, truncated [ 110.616683][ T6636] loop_reread_partitions: partition scan of loop0 (ţ被xü—źŃŕ– ) failed (rc=-5) [ 110.720693][ T5916] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 110.803169][ T6645] netlink: 160 bytes leftover after parsing attributes in process `syz.1.268'. [ 110.851648][ T5916] usb 4-1: device descriptor read/64, error -71 [ 110.981913][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 110.995649][ T6657] netlink: 236 bytes leftover after parsing attributes in process `syz.1.272'. [ 111.047080][ T6659] FAULT_INJECTION: forcing a failure. [ 111.047080][ T6659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.061386][ T6659] CPU: 1 UID: 0 PID: 6659 Comm: syz.1.273 Not tainted syzkaller #0 PREEMPT(full) [ 111.061409][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.061419][ T6659] Call Trace: [ 111.061426][ T6659] [ 111.061433][ T6659] dump_stack_lvl+0x189/0x250 [ 111.061457][ T6659] ? __pfx____ratelimit+0x10/0x10 [ 111.061479][ T6659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.061498][ T6659] ? __pfx__printk+0x10/0x10 [ 111.061518][ T6659] ? __might_fault+0xb0/0x130 [ 111.061545][ T6659] should_fail_ex+0x414/0x560 [ 111.061572][ T6659] _copy_from_iter+0x1de/0x1790 [ 111.061594][ T6659] ? rcu_is_watching+0x15/0xb0 [ 111.061620][ T6659] ? __pfx__copy_from_iter+0x10/0x10 [ 111.061639][ T6659] ? __build_skb_around+0x262/0x3f0 [ 111.061664][ T6659] ? netlink_sendmsg+0x642/0xb30 [ 111.061684][ T6659] ? skb_put+0x11b/0x210 [ 111.061709][ T6659] netlink_sendmsg+0x6b2/0xb30 [ 111.061738][ T6659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.061793][ T6659] ? aa_sock_msg_perm+0xf1/0x1d0 [ 111.061815][ T6659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.061836][ T6659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.061859][ T6659] __sock_sendmsg+0x21c/0x270 [ 111.061882][ T6659] ____sys_sendmsg+0x505/0x830 [ 111.061920][ T6659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.061952][ T6659] ? import_iovec+0x74/0xa0 [ 111.061973][ T6659] ___sys_sendmsg+0x21f/0x2a0 [ 111.061998][ T6659] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.062055][ T6659] ? __fget_files+0x2a/0x420 [ 111.062073][ T6659] ? __fget_files+0x3a0/0x420 [ 111.062101][ T6659] __x64_sys_sendmsg+0x19b/0x260 [ 111.062126][ T6659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.062158][ T6659] ? __pfx_ksys_write+0x10/0x10 [ 111.062177][ T6659] ? do_syscall_64+0xbe/0xfa0 [ 111.062202][ T6659] do_syscall_64+0xfa/0xfa0 [ 111.062225][ T6659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.062241][ T6659] ? clear_bhb_loop+0x60/0xb0 [ 111.062262][ T6659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.062277][ T6659] RIP: 0033:0x7f30ab98f6c9 [ 111.062293][ T6659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.062306][ T6659] RSP: 002b:00007f30ac8e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.062324][ T6659] RAX: ffffffffffffffda RBX: 00007f30abbe5fa0 RCX: 00007f30ab98f6c9 [ 111.062336][ T6659] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 111.062346][ T6659] RBP: 00007f30ac8e8090 R08: 0000000000000000 R09: 0000000000000000 [ 111.062357][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.062366][ T6659] R13: 00007f30abbe6038 R14: 00007f30abbe5fa0 R15: 00007fff24e59688 [ 111.062395][ T6659] [ 111.090613][ T5916] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 111.150580][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 111.321757][ T5916] usb 4-1: device descriptor read/64, error -71 [ 111.348644][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.00 [ 111.370749][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.398573][ T24] usb 3-1: config 0 descriptor?? [ 111.465986][ T5916] usb usb4-port1: attempt power cycle [ 111.731290][ T6679] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 111.761798][ T6680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.278'. [ 111.774027][ T5936] usb 3-1: USB disconnect, device number 11 [ 111.815900][ T5916] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 111.861959][ T5916] usb 4-1: device descriptor read/8, error -71 [ 112.101764][ T5916] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 112.121581][ T5916] usb 4-1: device descriptor read/8, error -71 [ 112.159050][ T24] usb 1-1: USB disconnect, device number 18 [ 112.219841][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 112.242636][ T5916] usb usb4-port1: unable to enumerate USB device [ 112.741298][ T5916] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 112.892295][ T5916] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 112.901698][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.911884][ T5916] usb 1-1: config 0 descriptor?? [ 112.920095][ T5916] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 113.299314][ T6722] IPVS: ip_vs_add_dest(): server weight less than zero [ 113.306941][ T1886] IPVS: starting estimator thread 0... [ 113.325629][ T5916] gspca_sn9c2028: read1 error -71 [ 113.341322][ T5916] gspca_sn9c2028: read1 error -71 [ 113.350232][ T5916] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 113.363083][ T5916] usb 1-1: USB disconnect, device number 19 [ 113.401096][ T6723] IPVS: using max 33 ests per chain, 79200 per kthread [ 113.691608][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 113.785474][ T6739] dvmrp5: entered allmulticast mode [ 113.860667][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 113.877752][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.894488][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.913974][ T24] usb 3-1: config 0 has no interface number 0 [ 113.920299][ T24] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.934767][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 113.944891][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.975795][ T24] usb 3-1: config 0 descriptor?? [ 113.988992][ T24] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 114.050563][ T5916] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 114.210594][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 114.222446][ T5916] usb 4-1: config 249 has an invalid interface number: 212 but max is 0 [ 114.235953][ T5916] usb 4-1: config 249 has no interface number 0 [ 114.250544][ T5916] usb 4-1: config 249 interface 212 altsetting 32 endpoint 0xB has invalid maxpacket 19266, setting to 64 [ 114.264937][ T5916] usb 4-1: config 249 interface 212 has no altsetting 0 [ 114.273251][ T6747] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 114.275193][ T5916] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=96.8f [ 114.292305][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.303711][ T5916] usb 4-1: Product: syz [ 114.307912][ T5916] usb 4-1: Manufacturer: syz [ 114.315709][ T5916] usb 4-1: SerialNumber: syz [ 114.533656][ T6739] dvmrp5: left allmulticast mode [ 114.563599][ T6751] 9pnet_fd: Insufficient options for proto=fd [ 114.586932][ T6755] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20003 [ 114.629112][ T5916] usb 4-1: USB disconnect, device number 22 [ 115.053190][ T6771] pimreg: entered allmulticast mode [ 115.059920][ T6771] pimreg: left allmulticast mode [ 115.390244][ T6783] overlayfs: failed lookup in lower (newroot/112, name='bus', err=-40): overlapping layers [ 115.403369][ T6783] overlayfs: failed lookup in lower (newroot/112, name='file1', err=-40): overlapping layers [ 115.791897][ T6796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.960054][ T6804] netlink: 160 bytes leftover after parsing attributes in process `syz.0.331'. [ 116.044286][ T6808] netlink: 36 bytes leftover after parsing attributes in process `syz.0.332'. [ 116.341015][ T1886] usb 3-1: USB disconnect, device number 12 [ 116.437622][ T6825] comedi comedi2: fl512: I/O port conflict (0x6,16) [ 116.558984][ T6830] netlink: 212 bytes leftover after parsing attributes in process `syz.0.342'. [ 116.940660][ T5916] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 117.048991][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 117.121463][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 117.320749][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 117.394976][ T5916] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.403131][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.420538][ T5916] usb 1-1: config 0 has no interface number 0 [ 117.427210][ T5916] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.470566][ T5916] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 117.479702][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.492413][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 117.513317][ T5916] usb 1-1: config 0 descriptor?? [ 117.525421][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.538032][ T5916] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 117.541834][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.576561][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.602984][ T24] usb 2-1: Product: syz [ 117.611558][ T24] usb 2-1: Manufacturer: syz [ 117.616186][ T24] usb 2-1: SerialNumber: syz [ 117.645161][ T6857] sp0: Synchronizing with TNC [ 117.667665][ T24] usb 2-1: config 0 descriptor?? [ 117.698997][ T24] usb 2-1: selecting invalid altsetting 0 [ 117.900090][ T5877] usb 2-1: USB disconnect, device number 13 [ 118.161428][ T5916] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 118.320716][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 118.333823][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.345172][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.355579][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.368871][ T5916] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.378347][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.391504][ T5916] usb 3-1: config 0 descriptor?? [ 118.471516][ T5925] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 118.613486][ T5925] usb 4-1: device descriptor read/64, error -71 [ 118.806732][ T5916] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 118.821669][ T5916] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 118.832900][ T5916] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 118.845035][ T5916] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 118.852640][ T5916] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 118.860074][ T5916] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 118.867444][ T5925] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 118.875832][ T5916] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 118.893591][ T5916] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 118.901916][ T5916] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 118.909182][ T5916] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 118.929051][ T5916] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input8 [ 119.010631][ T5925] usb 4-1: device descriptor read/64, error -71 [ 119.034672][ T5916] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 119.122223][ T5925] usb usb4-port1: attempt power cycle [ 119.270568][ T5916] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 119.420562][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 119.427122][ T5916] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 119.436028][ T5916] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 119.444771][ T5916] usb 2-1: config 0 has no interface number 0 [ 119.451007][ T5916] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.462707][ T5925] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 119.470368][ T5916] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 119.481839][ T5916] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.494133][ T5916] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 119.503370][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 119.511499][ T5916] usb 2-1: Product: syz [ 119.515798][ T5925] usb 4-1: device descriptor read/8, error -71 [ 119.524452][ T5916] usb 2-1: config 0 descriptor?? [ 119.530110][ T6884] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 119.721951][ T5936] usb 1-1: USB disconnect, device number 20 [ 119.780705][ T5925] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 119.811371][ T5925] usb 4-1: device descriptor read/8, error -71 [ 119.897071][ T6891] netlink: 236 bytes leftover after parsing attributes in process `syz.0.368'. [ 119.922216][ T5925] usb usb4-port1: unable to enumerate USB device [ 119.962529][ T6893] capability: warning: `syz.0.369' uses deprecated v2 capabilities in a way that may be insecure [ 120.010973][ T5916] usb 2-1: USB disconnect, device number 14 [ 120.033388][ T6895] FAULT_INJECTION: forcing a failure. [ 120.033388][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 120.052457][ T6895] CPU: 1 UID: 0 PID: 6895 Comm: syz.0.370 Not tainted syzkaller #0 PREEMPT(full) [ 120.052481][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.052490][ T6895] Call Trace: [ 120.052497][ T6895] [ 120.052503][ T6895] dump_stack_lvl+0x189/0x250 [ 120.052529][ T6895] ? __pfx____ratelimit+0x10/0x10 [ 120.052551][ T6895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.052567][ T6895] ? __pfx__printk+0x10/0x10 [ 120.052580][ T6895] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 120.052610][ T6895] should_fail_ex+0x414/0x560 [ 120.052632][ T6895] should_failslab+0xa8/0x100 [ 120.052652][ T6895] kmem_cache_alloc_noprof+0x88/0x700 [ 120.052668][ T6895] ? skb_clone+0x212/0x3a0 [ 120.052682][ T6895] skb_clone+0x212/0x3a0 [ 120.052697][ T6895] __netlink_deliver_tap+0x424/0x8b0 [ 120.052724][ T6895] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.052742][ T6895] netlink_deliver_tap+0x19c/0x1b0 [ 120.052760][ T6895] netlink_unicast+0x7fa/0x9e0 [ 120.052782][ T6895] ? __pfx_netlink_unicast+0x10/0x10 [ 120.052798][ T6895] ? netlink_sendmsg+0x642/0xb30 [ 120.052814][ T6895] ? skb_put+0x11b/0x210 [ 120.052833][ T6895] netlink_sendmsg+0x805/0xb30 [ 120.052856][ T6895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.052876][ T6895] ? aa_sock_msg_perm+0xf1/0x1d0 [ 120.052893][ T6895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.052909][ T6895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.052938][ T6895] __sock_sendmsg+0x21c/0x270 [ 120.052955][ T6895] ____sys_sendmsg+0x505/0x830 [ 120.052977][ T6895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.053001][ T6895] ? import_iovec+0x74/0xa0 [ 120.053019][ T6895] ___sys_sendmsg+0x21f/0x2a0 [ 120.053038][ T6895] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.053081][ T6895] ? __fget_files+0x2a/0x420 [ 120.053094][ T6895] ? __fget_files+0x3a0/0x420 [ 120.053116][ T6895] __x64_sys_sendmsg+0x19b/0x260 [ 120.053135][ T6895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.053160][ T6895] ? __pfx_ksys_write+0x10/0x10 [ 120.053176][ T6895] ? do_syscall_64+0xbe/0xfa0 [ 120.053196][ T6895] do_syscall_64+0xfa/0xfa0 [ 120.053214][ T6895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.053226][ T6895] ? clear_bhb_loop+0x60/0xb0 [ 120.053242][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.053254][ T6895] RIP: 0033:0x7f013758f6c9 [ 120.053266][ T6895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.053276][ T6895] RSP: 002b:00007f01383db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.053290][ T6895] RAX: ffffffffffffffda RBX: 00007f01377e5fa0 RCX: 00007f013758f6c9 [ 120.053299][ T6895] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 120.053307][ T6895] RBP: 00007f01383db090 R08: 0000000000000000 R09: 0000000000000000 [ 120.053314][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.053322][ T6895] R13: 00007f01377e6038 R14: 00007f01377e5fa0 R15: 00007ffc7b7bf208 [ 120.053344][ T6895] [ 120.053736][ T6895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.370'. [ 120.190619][ T5936] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 120.904186][ T5877] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 120.941152][ T24] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 121.060598][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 121.067571][ T5877] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.077218][ T5877] usb 2-1: config 0 has no interface number 0 [ 121.083507][ T5877] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.096526][ T5877] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 121.105757][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.115609][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.128608][ T5877] usb 2-1: config 0 descriptor?? [ 121.133944][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.146649][ T5877] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 121.157808][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.166924][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.176376][ T24] usb 1-1: Product: syz [ 121.180603][ T24] usb 1-1: Manufacturer: syz [ 121.185195][ T24] usb 1-1: SerialNumber: syz [ 121.261696][ T5936] usb 3-1: device descriptor read/64, error -71 [ 121.379796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 121.389611][ T6916] netlink: 'syz.3.380': attribute type 29 has an invalid length. [ 121.397380][ T6916] netlink: 'syz.3.380': attribute type 3 has an invalid length. [ 121.405049][ T6916] netlink: 76 bytes leftover after parsing attributes in process `syz.3.380'. [ 121.478466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.590711][ T5936] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 121.630548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 121.646158][ T5936] usb 3-1: device reset changed ep0 maxpacket size! [ 121.661728][ T5925] usb 3-1: USB disconnect, device number 13 [ 121.674992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 121.675588][ T24] usb 1-1: 0:2 : does not exist [ 121.760617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.785651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.802347][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 121.888046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.977557][ T24] usb 1-1: USB disconnect, device number 21 [ 122.015896][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.090835][ T5925] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 122.254598][ T5925] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 122.267483][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.284453][ T5925] usb 3-1: Product: syz [ 122.290597][ T5925] usb 3-1: Manufacturer: syz [ 122.301553][ T5925] usb 3-1: SerialNumber: syz [ 122.711548][ T5936] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 122.725394][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 122.739686][ T5925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 122.751869][ T5925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 122.890553][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 122.897425][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.908456][ T5936] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 122.918421][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.928858][ T5936] usb 1-1: config 0 descriptor?? [ 123.345351][ T5936] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 123.710785][ T5936] usb 2-1: USB disconnect, device number 15 [ 123.735292][ T6955] Zero length message leads to an empty skb [ 123.748609][ T5916] usb 1-1: USB disconnect, device number 22 [ 124.250763][ T5936] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 124.430814][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 124.438028][ T5936] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.00 [ 124.449273][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.470733][ T5936] usb 2-1: config 0 descriptor?? [ 124.622363][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 124.681605][ T6959] netlink: 256 bytes leftover after parsing attributes in process `syz.1.395'. [ 124.693389][ T6959] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 124.723827][ T5891] usb 2-1: USB disconnect, device number 16 [ 124.827397][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 124.837755][ T5925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 124.853161][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.867662][ T5925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 124.875897][ T24] usb 4-1: config 0 has no interface number 0 [ 124.898573][ T5925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 124.899732][ T24] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.924578][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 124.934543][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.945022][ T5925] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 124.953940][ T24] usb 4-1: config 0 descriptor?? [ 124.983250][ T24] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 125.014717][ T5925] usb 3-1: USB disconnect, device number 14 [ 125.064757][ T6994] warning: `syz.0.409' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.286172][ T7002] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 125.311324][ T24] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 125.486254][ T24] usb 1-1: config 9 has an invalid interface number: 252 but max is 0 [ 125.499536][ T24] usb 1-1: config 9 has no interface number 0 [ 125.510856][ T24] usb 1-1: config 9 interface 252 has no altsetting 0 [ 125.529119][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=dd.7c [ 125.548518][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.557068][ T24] usb 1-1: Product: syz [ 125.563165][ T24] usb 1-1: Manufacturer: syz [ 125.567870][ T24] usb 1-1: SerialNumber: syz [ 125.813989][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.252/input/input10 [ 125.861822][ T24] usb 1-1: USB disconnect, device number 23 [ 126.330979][ T7031] netlink: 'syz.1.421': attribute type 5 has an invalid length. [ 126.338735][ T7031] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.421'. [ 126.555691][ T7036] pimreg: entered allmulticast mode [ 126.690087][ T7036] pimreg: left allmulticast mode [ 126.882615][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 126.937190][ T7047] fuseblk: Bad value for 'user_id' [ 126.942944][ T7047] fuseblk: Bad value for 'user_id' [ 127.039623][ T24] usb 1-1: device descriptor read/64, error -71 [ 127.290556][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 127.309305][ T7062] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 127.337249][ T7062] CIFS mount error: No usable UNC path provided in device string! [ 127.337249][ T7062] [ 127.347607][ T7062] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 127.408534][ T5936] usb 4-1: USB disconnect, device number 27 [ 127.431490][ T24] usb 1-1: device descriptor read/64, error -71 [ 127.540873][ T24] usb usb1-port1: attempt power cycle [ 127.810611][ T5936] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 127.880576][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 127.902657][ T24] usb 1-1: device descriptor read/8, error -71 [ 127.957538][ T7072] netlink: 36 bytes leftover after parsing attributes in process `syz.1.439'. [ 127.970596][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 127.993841][ T5936] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.013198][ T5936] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 128.039257][ T5936] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.059816][ T5936] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.079000][ T5936] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.090674][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.098599][ T7077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.098801][ T5936] usb 4-1: Product: syz [ 128.112214][ T5936] usb 4-1: Manufacturer: syz [ 128.113479][ T7077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.116927][ T5936] usb 4-1: SerialNumber: syz [ 128.142990][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 128.174885][ T24] usb 1-1: device descriptor read/8, error -71 [ 128.291044][ T24] usb usb1-port1: unable to enumerate USB device [ 128.320821][ T5877] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 128.354419][ T5936] usb 4-1: 0:2 : does not exist [ 128.392958][ T5936] usb 4-1: USB disconnect, device number 28 [ 128.413580][ T7084] netlink: 'syz.2.443': attribute type 15 has an invalid length. [ 128.422165][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 128.425940][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.432488][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 128.458522][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 128.482543][ T5877] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.493605][ T5877] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 128.504567][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.514085][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 128.526483][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 128.539801][ T5877] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.551526][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.559642][ T5877] usb 2-1: Product: syz [ 128.569661][ T5877] usb 2-1: Manufacturer: syz [ 128.585513][ T5877] cdc_wdm 2-1:1.0: skipping garbage [ 128.591167][ T5877] cdc_wdm 2-1:1.0: skipping garbage [ 128.602608][ T5877] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 128.608645][ T5877] cdc_wdm 2-1:1.0: Unknown control protocol [ 128.785873][ T5936] usb 2-1: USB disconnect, device number 17 [ 128.920590][ T794] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 128.941434][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.080568][ T794] usb 3-1: Using ep0 maxpacket: 16 [ 129.087692][ T794] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.095745][ T794] usb 3-1: config 0 has no interface number 0 [ 129.101876][ T794] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.114802][ T794] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 129.124148][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.134658][ T794] usb 3-1: config 0 descriptor?? [ 129.143123][ T794] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 129.532809][ T7100] comedi comedi2: fl512: I/O port conflict (0x6,16) [ 129.640096][ T7106] netlink: 212 bytes leftover after parsing attributes in process `syz.3.454'. [ 129.927956][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 130.311561][ T1886] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 130.375022][ T44] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.469926][ T44] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.480723][ T1886] usb 4-1: Using ep0 maxpacket: 8 [ 130.501061][ T1886] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 130.510130][ T1886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.540541][ T1886] usb 4-1: Product: syz [ 130.544743][ T1886] usb 4-1: Manufacturer: syz [ 130.549344][ T1886] usb 4-1: SerialNumber: syz [ 130.563526][ T1886] usb 4-1: config 0 descriptor?? [ 130.587548][ T5925] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 130.599225][ T44] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.662927][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.674889][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.688018][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.689756][ T44] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.703001][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.715629][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.733230][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.741969][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.750317][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.760274][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.768913][ T5925] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 130.776715][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.778328][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.804031][ T5925] usb 1-1: Product: syz [ 130.805361][ T1886] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.808250][ T5925] usb 1-1: Manufacturer: syz [ 130.824551][ T5925] usb 1-1: SerialNumber: syz [ 130.924823][ T44] bridge_slave_1: left allmulticast mode [ 130.935434][ T44] bridge_slave_1: left promiscuous mode [ 130.943738][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.964330][ T44] bridge_slave_0: left allmulticast mode [ 130.970022][ T44] bridge_slave_0: left promiscuous mode [ 130.977480][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.395920][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.410313][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.425977][ T44] bond0 (unregistering): Released all slaves [ 131.458980][ T1886] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 131.508182][ T1886] usb 4-1: USB disconnect, device number 29 [ 131.522988][ T5925] rtl8150 1-1:1.0: couldn't reset the device [ 131.535799][ T5925] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 131.591509][ T5925] usb 1-1: USB disconnect, device number 28 [ 131.720252][ T794] usb 3-1: USB disconnect, device number 15 [ 131.909558][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 131.939077][ T44] hsr_slave_0: left promiscuous mode [ 131.947106][ T44] hsr_slave_1: left promiscuous mode [ 131.954046][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.962317][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.987381][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.998223][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.068033][ T44] veth1_macvtap: left promiscuous mode [ 132.080154][ T44] veth0_macvtap: left promiscuous mode [ 132.090433][ T44] veth1_vlan: left promiscuous mode [ 132.096574][ T44] veth0_vlan: left promiscuous mode [ 132.655011][ T44] team0 (unregistering): Port device team_slave_1 removed [ 132.691337][ T44] team0 (unregistering): Port device team_slave_0 removed [ 132.801680][ T5827] Bluetooth: hci3: command tx timeout [ 132.975743][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.982164][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.220884][ T7126] chnl_net:caif_netlink_parms(): no params data found [ 133.306427][ T7183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.472'. [ 133.420594][ T1886] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 133.541216][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.548582][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.582739][ T7126] bridge_slave_0: entered allmulticast mode [ 133.592192][ T1886] usb 3-1: Using ep0 maxpacket: 8 [ 133.609290][ T7126] bridge_slave_0: entered promiscuous mode [ 133.628626][ T1886] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 133.650250][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.658224][ T1886] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.670860][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.680841][ T1886] usb 3-1: Product: syz [ 133.685028][ T1886] usb 3-1: Manufacturer: syz [ 133.700193][ T7126] bridge_slave_1: entered allmulticast mode [ 133.706554][ T1886] usb 3-1: SerialNumber: syz [ 133.711325][ T5891] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 133.721672][ T7126] bridge_slave_1: entered promiscuous mode [ 133.742804][ T1886] usb 3-1: config 0 descriptor?? [ 133.843989][ T7126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.846078][ T44] IPVS: stop unused estimator thread 0... [ 133.871349][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 133.881827][ T5891] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.894065][ T7126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.900084][ T5891] usb 4-1: config 0 has no interface number 0 [ 133.930825][ T5891] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.974597][ T5891] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 133.980285][ T7126] team0: Port device team_slave_0 added [ 133.984354][ T7176] kvm: apic: phys broadcast and lowest prio [ 133.994045][ T7126] team0: Port device team_slave_1 added [ 134.000647][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.037418][ T5891] usb 4-1: config 0 descriptor?? [ 134.091041][ T5891] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 134.114735][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.130648][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.174719][ T7126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.196944][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.204594][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.231301][ T7126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.262239][ T1886] usb 3-1: USB disconnect, device number 16 [ 134.298682][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.413345][ T7126] hsr_slave_0: entered promiscuous mode [ 134.420183][ T7126] hsr_slave_1: entered promiscuous mode [ 134.430710][ T7126] debugfs: 'hsr0' already exists in 'hsr' [ 134.432492][ T794] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 134.436533][ T7126] Cannot create hsr debugfs directory [ 134.590558][ T794] usb 1-1: Using ep0 maxpacket: 16 [ 134.609464][ T794] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 134.617961][ T794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.640629][ T794] usb 1-1: config 0 has no interface number 0 [ 134.651515][ T794] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 134.670793][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.688862][ T794] usb 1-1: Product: syz [ 134.700532][ T794] usb 1-1: Manufacturer: syz [ 134.705306][ T794] usb 1-1: SerialNumber: syz [ 134.724664][ T794] usb 1-1: config 0 descriptor?? [ 134.749831][ T794] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 134.770660][ T794] uvcvideo 1-1:0.105: No valid video chain found. [ 134.780993][ T7225] netlink: 236 bytes leftover after parsing attributes in process `syz.2.478'. [ 134.859749][ T7227] FAULT_INJECTION: forcing a failure. [ 134.859749][ T7227] name failslab, interval 1, probability 0, space 0, times 0 [ 134.872758][ T7227] CPU: 0 UID: 0 PID: 7227 Comm: syz.2.479 Not tainted syzkaller #0 PREEMPT(full) [ 134.872781][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.872791][ T7227] Call Trace: [ 134.872796][ T7227] [ 134.872803][ T7227] dump_stack_lvl+0x189/0x250 [ 134.872830][ T7227] ? __pfx____ratelimit+0x10/0x10 [ 134.872851][ T7227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.872868][ T7227] ? __pfx__printk+0x10/0x10 [ 134.872891][ T7227] ? __pfx___might_resched+0x10/0x10 [ 134.872913][ T7227] should_fail_ex+0x414/0x560 [ 134.872939][ T7227] should_failslab+0xa8/0x100 [ 134.872960][ T7227] kmem_cache_alloc_noprof+0x88/0x700 [ 134.872976][ T7227] ? apparmor_capable+0x137/0x1b0 [ 134.872997][ T7227] ? skb_clone+0x212/0x3a0 [ 134.873016][ T7227] skb_clone+0x212/0x3a0 [ 134.873029][ T7227] ? nfnetlink_rcv+0x4ba/0x2590 [ 134.873052][ T7227] nfnetlink_rcv+0x4ec/0x2590 [ 134.873073][ T7227] ? __kernel_text_address+0xd/0x40 [ 134.873096][ T7227] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.873119][ T7227] ? arch_stack_walk+0xfc/0x150 [ 134.873149][ T7227] ? stack_trace_save+0x9c/0xe0 [ 134.873168][ T7227] ? __pfx_stack_trace_save+0x10/0x10 [ 134.873189][ T7227] ? trim_netdev_trace+0x320/0x440 [ 134.873206][ T7227] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 134.873238][ T7227] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 134.873255][ T7227] ? ref_tracker_free+0x63a/0x7d0 [ 134.873271][ T7227] ? netlink_unicast+0x7fa/0x9e0 [ 134.873288][ T7227] ? netlink_sendmsg+0x805/0xb30 [ 134.873306][ T7227] ? __sock_sendmsg+0x21c/0x270 [ 134.873321][ T7227] ? ____sys_sendmsg+0x505/0x830 [ 134.873340][ T7227] ? ___sys_sendmsg+0x21f/0x2a0 [ 134.873375][ T7227] ? __x64_sys_sendmsg+0x19b/0x260 [ 134.873394][ T7227] ? do_syscall_64+0xfa/0xfa0 [ 134.873415][ T7227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.873439][ T7227] ? __skb_clone+0x483/0x7a0 [ 134.873466][ T7227] ? skb_clone+0x246/0x3a0 [ 134.873485][ T7227] ? __netlink_deliver_tap+0x866/0x8b0 [ 134.873506][ T7227] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.873545][ T7227] netlink_unicast+0x82f/0x9e0 [ 134.873574][ T7227] ? __pfx_netlink_unicast+0x10/0x10 [ 134.873596][ T7227] ? netlink_sendmsg+0x642/0xb30 [ 134.873616][ T7227] ? skb_put+0x11b/0x210 [ 134.873641][ T7227] netlink_sendmsg+0x805/0xb30 [ 134.873678][ T7227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.873704][ T7227] ? aa_sock_msg_perm+0xf1/0x1d0 [ 134.873725][ T7227] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.873746][ T7227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.873769][ T7227] __sock_sendmsg+0x21c/0x270 [ 134.873790][ T7227] ____sys_sendmsg+0x505/0x830 [ 134.873817][ T7227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.873846][ T7227] ? import_iovec+0x74/0xa0 [ 134.873864][ T7227] ___sys_sendmsg+0x21f/0x2a0 [ 134.873883][ T7227] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.873941][ T7227] ? __fget_files+0x2a/0x420 [ 134.873958][ T7227] ? __fget_files+0x3a0/0x420 [ 134.873985][ T7227] __x64_sys_sendmsg+0x19b/0x260 [ 134.874009][ T7227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.874041][ T7227] ? __pfx_ksys_write+0x10/0x10 [ 134.874060][ T7227] ? do_syscall_64+0xbe/0xfa0 [ 134.874086][ T7227] do_syscall_64+0xfa/0xfa0 [ 134.874109][ T7227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.874125][ T7227] ? clear_bhb_loop+0x60/0xb0 [ 134.874146][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.874162][ T7227] RIP: 0033:0x7fda4058f6c9 [ 134.874177][ T7227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.874190][ T7227] RSP: 002b:00007fda41419038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.874207][ T7227] RAX: ffffffffffffffda RBX: 00007fda407e5fa0 RCX: 00007fda4058f6c9 [ 134.874219][ T7227] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 134.874229][ T7227] RBP: 00007fda41419090 R08: 0000000000000000 R09: 0000000000000000 [ 134.874240][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.874249][ T7227] R13: 00007fda407e6038 R14: 00007fda407e5fa0 R15: 00007ffc99c52558 [ 134.874279][ T7227] [ 134.890550][ T5827] Bluetooth: hci3: command tx timeout [ 134.939510][ T794] usb 1-1: USB disconnect, device number 29 [ 135.728427][ T7126] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.758488][ T7126] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.789716][ T7126] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.842798][ T7126] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.052461][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.087564][ T7126] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.118620][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.125988][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.134919][ T5936] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 136.163453][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.170689][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.296382][ T7126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.310681][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 136.338006][ T5936] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.355782][ T5936] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.369630][ T5936] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.377366][ T5936] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 136.389991][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.420165][ T5936] usb 1-1: config 0 descriptor?? [ 136.490196][ T794] usb 4-1: USB disconnect, device number 30 [ 136.757411][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.887032][ T7126] veth0_vlan: entered promiscuous mode [ 136.895534][ T5936] cougar 0003:060B:500A.0007: unexpected long global item [ 136.915434][ T5936] cougar 0003:060B:500A.0007: parse failed [ 136.927529][ T7126] veth1_vlan: entered promiscuous mode [ 136.933682][ T5936] cougar 0003:060B:500A.0007: probe with driver cougar failed with error -22 [ 136.960959][ T5827] Bluetooth: hci3: command tx timeout [ 137.018103][ T7126] veth0_macvtap: entered promiscuous mode [ 137.031300][ T5916] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 137.074506][ T7126] veth1_macvtap: entered promiscuous mode [ 137.089246][ T5936] usb 1-1: USB disconnect, device number 30 [ 137.150067][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.172048][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.190274][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.218176][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.229619][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.248985][ T5916] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.260503][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.269997][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.278252][ T794] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 137.286175][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.321266][ T5916] usb 3-1: config 0 descriptor?? [ 137.398066][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.418473][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.433931][ T794] usb 4-1: device descriptor read/64, error -71 [ 137.474969][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.483332][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.609704][ T7314] sp0: Synchronizing with TNC [ 137.704228][ T794] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 137.746779][ T5916] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 137.777258][ T5916] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input11 [ 137.873574][ T794] usb 4-1: device descriptor read/64, error -71 [ 137.944327][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.956349][ T5916] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 137.974201][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.996496][ T794] usb usb4-port1: attempt power cycle [ 138.276407][ T7335] tmpfs: Unknown parameter 'grpqdlimŠt' [ 138.339953][ T1886] usb 3-1: USB disconnect, device number 17 [ 138.374507][ T794] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 138.403438][ T794] usb 4-1: device descriptor read/8, error -71 [ 138.560998][ T5936] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 138.630581][ T5916] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 138.650746][ T794] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 138.696453][ T794] usb 4-1: device descriptor read/8, error -71 [ 138.740791][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 138.747641][ T5936] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.755760][ T5936] usb 2-1: config 0 has no interface number 0 [ 138.763374][ T5916] usb 1-1: device descriptor read/64, error -71 [ 138.769740][ T5936] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.779624][ T5936] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 138.789037][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.798945][ T5936] usb 2-1: config 0 descriptor?? [ 138.808826][ T5936] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 138.816472][ T794] usb usb4-port1: unable to enumerate USB device [ 138.939564][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 139.001316][ T5916] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 139.040788][ T5827] Bluetooth: hci3: command tx timeout [ 139.087650][ T7362] binder: 7361:7362 unknown command 0 [ 139.096002][ T7362] binder: 7361:7362 ioctl c0306201 200000000080 returned -22 [ 139.107647][ T7362] binder: 7361:7362 ioctl c0306201 2000000003c0 returned -14 [ 139.134922][ T7362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.502'. [ 139.151520][ T7362] sp0: Synchronizing with TNC [ 139.170640][ T5916] usb 1-1: device descriptor read/64, error -71 [ 139.281845][ T5916] usb usb1-port1: attempt power cycle [ 139.491997][ T7370] process 'syz.2.505' launched '/dev/fd/5' with NULL argv: empty string added [ 139.620639][ T5916] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 139.642140][ T5916] usb 1-1: device descriptor read/8, error -71 [ 139.880596][ T5916] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 139.901121][ T5916] usb 1-1: device descriptor read/8, error -71 [ 140.013415][ T5916] usb usb1-port1: unable to enumerate USB device [ 140.565707][ T7385] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 140.911142][ T5916] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 141.070670][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 141.077481][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.089077][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.102393][ T5916] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 141.111797][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.119778][ T5916] usb 3-1: Product: syz [ 141.124184][ T5916] usb 3-1: Manufacturer: syz [ 141.128786][ T5916] usb 3-1: SerialNumber: syz [ 141.135423][ T5916] usb 3-1: config 0 descriptor?? [ 141.290929][ T5916] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 141.351934][ T43] usb 2-1: USB disconnect, device number 18 [ 141.386534][ T7405] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 141.447565][ T7408] netlink: 'syz.1.522': attribute type 4 has an invalid length. [ 141.450637][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 141.473520][ T5916] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.00 [ 141.488807][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.512369][ T5916] usb 4-1: config 0 descriptor?? [ 141.744756][ T7401] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 141.769161][ T5916] usb 4-1: USB disconnect, device number 35 [ 142.260703][ T43] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 142.420549][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 142.432057][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.440125][ T43] usb 1-1: config 0 has no interface number 0 [ 142.449722][ T43] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.461274][ T43] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 142.482442][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.503864][ T43] usb 1-1: config 0 descriptor?? [ 142.516049][ T43] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 142.630598][ T5936] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 142.794017][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.805845][ T5936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.819241][ T5936] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 142.830259][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.841915][ T5936] usb 4-1: config 0 descriptor?? [ 143.216210][ T7435] pimreg: entered allmulticast mode [ 143.229761][ T7434] pimreg: left allmulticast mode [ 143.260762][ T5936] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 143.267687][ T5936] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 143.281102][ T5936] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 143.288175][ T5936] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 143.298374][ T5936] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 143.305733][ T5936] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 143.313919][ T5936] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 143.321229][ T5936] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 143.328270][ T5936] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 143.343615][ T5936] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 143.363870][ T5936] ortek 0003:1223:3F07.0009: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.3-1/input0 [ 143.461525][ T5936] usb 4-1: USB disconnect, device number 36 [ 143.632085][ T5877] usb 3-1: USB disconnect, device number 18 [ 143.790578][ T5936] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 143.940641][ T5936] usb 2-1: device descriptor read/64, error -71 [ 144.116503][ T7463] tmpfs: Unknown parameter 'u3rquota_énode_hardlimit' [ 144.180671][ T5936] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 144.198139][ T7465] program syz.2.546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.300642][ T5877] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 144.320694][ T5936] usb 2-1: device descriptor read/64, error -71 [ 144.431032][ T5936] usb usb2-port1: attempt power cycle [ 144.450748][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 144.458390][ T5877] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 144.469737][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 144.481847][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 144.495049][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 144.504269][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.514066][ T5877] usb 4-1: config 0 descriptor?? [ 144.770604][ T5936] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 144.802009][ T5936] usb 2-1: device descriptor read/8, error -71 [ 144.929485][ T7459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.938457][ T7459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.952963][ T5877] logitech 0003:046D:C295.000A: item fetching failed at offset 4/5 [ 144.962503][ T5877] logitech 0003:046D:C295.000A: parse failed [ 144.968647][ T5877] logitech 0003:046D:C295.000A: probe with driver logitech failed with error -22 [ 145.035047][ T5916] usb 1-1: USB disconnect, device number 35 [ 145.042684][ T5936] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 145.082845][ T5936] usb 2-1: device descriptor read/8, error -71 [ 145.143631][ T7471] netlink: 36 bytes leftover after parsing attributes in process `syz.0.549'. [ 145.162567][ T7459] /dev/sg0: Can't lookup blockdev [ 145.174478][ T5877] usb 4-1: USB disconnect, device number 37 [ 145.203291][ T5936] usb usb2-port1: unable to enumerate USB device [ 145.482733][ T5891] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 145.558471][ T7483] netlink: 666 bytes leftover after parsing attributes in process `syz.0.554'. [ 145.640619][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 145.647666][ T5891] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 145.655894][ T5891] usb 3-1: config 0 has no interface number 0 [ 145.664226][ T5891] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 145.673467][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.681936][ T5891] usb 3-1: Product: syz [ 145.686159][ T5891] usb 3-1: Manufacturer: syz [ 145.691081][ T5891] usb 3-1: SerialNumber: syz [ 145.699412][ T5891] usb 3-1: config 0 descriptor?? [ 145.711658][ T5891] smsc95xx v2.0.0 [ 146.105457][ T5916] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 146.120677][ T5891] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 146.133428][ T5891] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 146.176523][ T7494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.270583][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 146.277741][ T5916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.286014][ T5916] usb 4-1: config 0 has no interface number 0 [ 146.292389][ T5916] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.303330][ T5916] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.313741][ T5916] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 146.323383][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.334155][ T5916] usb 4-1: config 0 descriptor?? [ 146.347006][ T7473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.357062][ T7473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.367637][ T7473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.376689][ T7473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.418101][ T5891] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 146.429588][ T5891] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 146.760256][ T5916] usbhid 4-1:0.1: can't add hid device: -71 [ 146.775207][ T5916] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 146.778436][ T7503] comedi comedi2: fl512: I/O port conflict (0x6,16) [ 146.812085][ T5916] usb 4-1: USB disconnect, device number 38 [ 146.865569][ T7506] netlink: 212 bytes leftover after parsing attributes in process `syz.0.563'. [ 147.131789][ T7517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.141654][ T7517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.148384][ T7519] netlink: 236 bytes leftover after parsing attributes in process `syz.1.569'. [ 147.404133][ T7527] ------------[ cut here ]------------ [ 147.409917][ T7527] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 147.422719][ T7527] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2690 at mac80211_hwsim_sta_rc_update+0x6f5/0x860, CPU#0: syz.3.573/7527 [ 147.437559][ T7527] Modules linked in: [ 147.442600][ T7527] CPU: 0 UID: 0 PID: 7527 Comm: syz.3.573 Not tainted syzkaller #0 PREEMPT(full) [ 147.452605][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.463290][ T7527] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 147.470048][ T7527] Code: b1 20 00 00 48 c7 c7 80 51 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 90 bd ab fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 9d 5d e9 fa 90 0f 0b 90 e9 fe fe ff [ 147.480667][ T5891] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 147.490378][ T7527] RSP: 0018:ffffc900039eee40 EFLAGS: 00010282 [ 147.504227][ T7527] RAX: c1de572b1f818300 RBX: 0000000000000014 RCX: 0000000000080000 [ 147.512249][ T7527] RDX: ffffc9000c61a000 RSI: 0000000000007b9c RDI: 0000000000007b9d [ 147.520267][ T7527] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 147.528298][ T7527] R10: dffffc0000000000 R11: fffffbfff1c3a744 R12: 0000000000000000 [ 147.537161][ T7527] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 147.545689][ T7527] FS: 00007f2baa6a86c0(0000) GS:ffff888125a83000(0000) knlGS:0000000000000000 [ 147.554909][ T7527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.561632][ T7527] CR2: 0000200000001080 CR3: 000000007651a000 CR4: 00000000003526f0 [ 147.569973][ T7527] Call Trace: [ 147.573332][ T7527] [ 147.576370][ T7527] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 147.582451][ T7527] mac80211_hwsim_sta_add+0xa3/0x310 [ 147.587772][ T7527] drv_sta_state+0x8c1/0x1840 [ 147.592959][ T7527] sta_info_insert_rcu+0x1a30/0x2840 [ 147.598287][ T7527] ? sta_info_insert_rcu+0x349/0x2840 [ 147.604098][ T7527] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 147.609767][ T7527] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 147.616424][ T7527] ? ieee80211_add_station+0x4f1/0x6a0 [ 147.622045][ T7527] sta_info_insert+0x16/0xc0 [ 147.626649][ T7527] rdev_add_station+0x108/0x290 [ 147.631568][ T7527] nl80211_new_station+0x1755/0x1b70 [ 147.636968][ T7527] ? __pfx_nl80211_new_station+0x10/0x10 [ 147.643040][ T7527] ? netlink_rcv_skb+0x208/0x470 [ 147.648055][ T7527] ? nl80211_pre_doit+0x4d5/0x8e0 [ 147.653546][ T7527] genl_family_rcv_msg_doit+0x215/0x300 [ 147.659143][ T7527] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 147.660560][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 147.665423][ T7527] ? bpf_lsm_capable+0x9/0x20 [ 147.675170][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.675230][ T7527] ? security_capable+0x7e/0x2e0 [ 147.675266][ T7527] genl_rcv_msg+0x60e/0x790 [ 147.690613][ T5891] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 147.691589][ T7527] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.697317][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.706164][ T7527] ? ref_tracker_free+0x63a/0x7d0 [ 147.724224][ T7527] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 147.729618][ T7527] ? __pfx_nl80211_new_station+0x10/0x10 [ 147.735787][ T7527] ? __pfx_nl80211_post_doit+0x10/0x10 [ 147.739275][ T5891] usb 2-1: config 0 descriptor?? [ 147.741790][ T7527] ? ____sys_sendmsg+0x505/0x830 [ 147.751905][ T7527] ? ___sys_sendmsg+0x21f/0x2a0 [ 147.757319][ T7527] ? __x64_sys_sendmsg+0x19b/0x260 [ 147.763059][ T7527] ? do_syscall_64+0xfa/0xfa0 [ 147.768168][ T7527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.774575][ T7527] netlink_rcv_skb+0x208/0x470 [ 147.779362][ T7527] ? __lock_acquire+0xab9/0xd20 [ 147.784390][ T7527] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.789465][ T7527] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.795343][ T7527] ? down_read+0x1ad/0x2e0 [ 147.799940][ T7527] genl_rcv+0x28/0x40 [ 147.804540][ T7527] netlink_unicast+0x82f/0x9e0 [ 147.809438][ T7527] ? __pfx_netlink_unicast+0x10/0x10 [ 147.814848][ T7527] ? netlink_sendmsg+0x642/0xb30 [ 147.819813][ T7527] ? skb_put+0x11b/0x210 [ 147.824234][ T7527] netlink_sendmsg+0x805/0xb30 [ 147.829122][ T7527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.834497][ T7527] ? aa_sock_msg_perm+0xf1/0x1d0 [ 147.839463][ T7527] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.845219][ T7527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.851014][ T7527] __sock_sendmsg+0x21c/0x270 [ 147.855731][ T7527] ____sys_sendmsg+0x505/0x830 [ 147.860595][ T7527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.865922][ T7527] ? import_iovec+0x74/0xa0 [ 147.870496][ T7527] ___sys_sendmsg+0x21f/0x2a0 [ 147.875199][ T7527] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.880539][ T7527] ? __fget_files+0x2a/0x420 [ 147.885155][ T7527] ? __fget_files+0x3a0/0x420 [ 147.889867][ T7527] __x64_sys_sendmsg+0x19b/0x260 [ 147.895063][ T7527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.901495][ T7527] ? do_syscall_64+0xbe/0xfa0 [ 147.906307][ T7527] do_syscall_64+0xfa/0xfa0 [ 147.911247][ T7527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.917336][ T7527] ? clear_bhb_loop+0x60/0xb0 [ 147.922266][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.928276][ T7527] RIP: 0033:0x7f2ba978f6c9 [ 147.932760][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.953092][ T7527] RSP: 002b:00007f2baa6a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.962030][ T7527] RAX: ffffffffffffffda RBX: 00007f2ba99e5fa0 RCX: 00007f2ba978f6c9 [ 147.970050][ T7527] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 147.978105][ T7527] RBP: 00007f2ba9811f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.986232][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.994272][ T7527] R13: 00007f2ba99e6038 R14: 00007f2ba99e5fa0 R15: 00007ffc42a59a28 [ 148.002881][ T7527] [ 148.006287][ T7527] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.014010][ T7527] CPU: 0 UID: 0 PID: 7527 Comm: syz.3.573 Not tainted syzkaller #0 PREEMPT(full) [ 148.023567][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.034779][ T7527] Call Trace: [ 148.038091][ T7527] [ 148.041057][ T7527] dump_stack_lvl+0x99/0x250 [ 148.045846][ T7527] ? __asan_memcpy+0x40/0x70 [ 148.050463][ T7527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.055683][ T7527] ? __pfx__printk+0x10/0x10 [ 148.060303][ T7527] vpanic+0x237/0x6d0 [ 148.064296][ T7527] ? __pfx_vpanic+0x10/0x10 [ 148.068804][ T7527] ? is_bpf_text_address+0x292/0x2b0 [ 148.074112][ T7527] ? is_bpf_text_address+0x26/0x2b0 [ 148.079495][ T7527] panic+0xb9/0xc0 [ 148.083235][ T7527] ? __pfx_panic+0x10/0x10 [ 148.087690][ T7527] __warn+0x334/0x4c0 [ 148.091675][ T7527] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 148.097771][ T7527] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 148.103946][ T7527] report_bug+0x2be/0x4f0 [ 148.108300][ T7527] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 148.114383][ T7527] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 148.120456][ T7527] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 148.126525][ T7527] handle_bug+0x84/0x160 [ 148.130768][ T7527] exc_invalid_op+0x1a/0x50 [ 148.135265][ T7527] asm_exc_invalid_op+0x1a/0x20 [ 148.140106][ T7527] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 148.146782][ T7527] Code: b1 20 00 00 48 c7 c7 80 51 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 90 bd ab fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 9d 5d e9 fa 90 0f 0b 90 e9 fe fe ff [ 148.166474][ T7527] RSP: 0018:ffffc900039eee40 EFLAGS: 00010282 [ 148.172559][ T7527] RAX: c1de572b1f818300 RBX: 0000000000000014 RCX: 0000000000080000 [ 148.180636][ T7527] RDX: ffffc9000c61a000 RSI: 0000000000007b9c RDI: 0000000000007b9d [ 148.188937][ T7527] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 148.198299][ T7527] R10: dffffc0000000000 R11: fffffbfff1c3a744 R12: 0000000000000000 [ 148.206532][ T7527] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 148.214693][ T7527] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 148.220777][ T7527] mac80211_hwsim_sta_add+0xa3/0x310 [ 148.226221][ T7527] drv_sta_state+0x8c1/0x1840 [ 148.231323][ T7527] sta_info_insert_rcu+0x1a30/0x2840 [ 148.236716][ T7527] ? sta_info_insert_rcu+0x349/0x2840 [ 148.242120][ T7527] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 148.247848][ T7527] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 148.254279][ T7527] ? ieee80211_add_station+0x4f1/0x6a0 [ 148.259753][ T7527] sta_info_insert+0x16/0xc0 [ 148.264344][ T7527] rdev_add_station+0x108/0x290 [ 148.269216][ T7527] nl80211_new_station+0x1755/0x1b70 [ 148.275030][ T7527] ? __pfx_nl80211_new_station+0x10/0x10 [ 148.280661][ T7527] ? netlink_rcv_skb+0x208/0x470 [ 148.285704][ T7527] ? nl80211_pre_doit+0x4d5/0x8e0 [ 148.290726][ T7527] genl_family_rcv_msg_doit+0x215/0x300 [ 148.296272][ T7527] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 148.302433][ T7527] ? bpf_lsm_capable+0x9/0x20 [ 148.307277][ T7527] ? security_capable+0x7e/0x2e0 [ 148.312231][ T7527] genl_rcv_msg+0x60e/0x790 [ 148.316735][ T7527] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.321759][ T7527] ? ref_tracker_free+0x63a/0x7d0 [ 148.326775][ T7527] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 148.332137][ T7527] ? __pfx_nl80211_new_station+0x10/0x10 [ 148.337777][ T7527] ? __pfx_nl80211_post_doit+0x10/0x10 [ 148.343328][ T7527] ? ____sys_sendmsg+0x505/0x830 [ 148.348874][ T7527] ? ___sys_sendmsg+0x21f/0x2a0 [ 148.353805][ T7527] ? __x64_sys_sendmsg+0x19b/0x260 [ 148.359101][ T7527] ? do_syscall_64+0xfa/0xfa0 [ 148.363951][ T7527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.370107][ T7527] netlink_rcv_skb+0x208/0x470 [ 148.375044][ T7527] ? __lock_acquire+0xab9/0xd20 [ 148.379898][ T7527] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.385025][ T7527] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.390444][ T7527] ? down_read+0x1ad/0x2e0 [ 148.394876][ T7527] genl_rcv+0x28/0x40 [ 148.398877][ T7527] netlink_unicast+0x82f/0x9e0 [ 148.403645][ T7527] ? __pfx_netlink_unicast+0x10/0x10 [ 148.409021][ T7527] ? netlink_sendmsg+0x642/0xb30 [ 148.414081][ T7527] ? skb_put+0x11b/0x210 [ 148.418339][ T7527] netlink_sendmsg+0x805/0xb30 [ 148.423113][ T7527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.428583][ T7527] ? aa_sock_msg_perm+0xf1/0x1d0 [ 148.433711][ T7527] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.439107][ T7527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.444423][ T7527] __sock_sendmsg+0x21c/0x270 [ 148.449284][ T7527] ____sys_sendmsg+0x505/0x830 [ 148.454152][ T7527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.459545][ T7527] ? import_iovec+0x74/0xa0 [ 148.464141][ T7527] ___sys_sendmsg+0x21f/0x2a0 [ 148.468836][ T7527] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.474240][ T7527] ? __fget_files+0x2a/0x420 [ 148.478915][ T7527] ? __fget_files+0x3a0/0x420 [ 148.483590][ T7527] __x64_sys_sendmsg+0x19b/0x260 [ 148.488540][ T7527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.494011][ T7527] ? do_syscall_64+0xbe/0xfa0 [ 148.498695][ T7527] do_syscall_64+0xfa/0xfa0 [ 148.503198][ T7527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.509263][ T7527] ? clear_bhb_loop+0x60/0xb0 [ 148.513937][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.519831][ T7527] RIP: 0033:0x7f2ba978f6c9 [ 148.524512][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.544726][ T7527] RSP: 002b:00007f2baa6a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.553485][ T7527] RAX: ffffffffffffffda RBX: 00007f2ba99e5fa0 RCX: 00007f2ba978f6c9 [ 148.561551][ T7527] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 148.569612][ T7527] RBP: 00007f2ba9811f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.577879][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.585856][ T7527] R13: 00007f2ba99e6038 R14: 00007f2ba99e5fa0 R15: 00007ffc42a59a28 [ 148.593942][ T7527] [ 148.597252][ T7527] Kernel Offset: disabled [ 148.601594][ T7527] Rebooting in 86400 seconds..