last executing test programs: 6.023079883s ago: executing program 1 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r0, 0x18}, 0x38) 5.684513082s ago: executing program 1 (id=362): syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x4, 0x120, 0x4}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x3, 0x6}]}}, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4.815700694s ago: executing program 2 (id=365): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 4.420343109s ago: executing program 0 (id=366): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8, 0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xfffffe84, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x4001f00}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 4.035362929s ago: executing program 0 (id=368): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002080)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x20004800) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) 3.953419962s ago: executing program 3 (id=369): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003200010325bd8b00ffdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r2, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_setscheduler(0x0, 0x1, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x7, 0x5) r3 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) close(r4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3.775231524s ago: executing program 0 (id=370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020010000900010073797a30000000000900020073797a30000000006c000000160a01040000000000000000020000040900020073797a30000000000900010073797a300000000040000380080001400000000008000240510599282c000380140001"], 0xc0}}, 0x0) 3.494610734s ago: executing program 0 (id=371): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0xdd48, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, {0xa, 0x4e22, 0x6462, @empty, 0x5e}, 0x0, {[0x3, 0x9, 0x3a, 0x2, 0x0, 0xb, 0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 3.447307047s ago: executing program 3 (id=372): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.325561301s ago: executing program 0 (id=373): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000840)={"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"}) r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x12}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000000)=ANY=[]) 3.175506222s ago: executing program 3 (id=374): r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000000300)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x44004) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) sysfs$2(0x2, 0xfffffffffffffff7, &(0x7f0000000240)=""/64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='msdos\x00', 0x18f3, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0xc00) lseek(r6, 0xe3, 0x1) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x3, 0x8}, {0xffff, 0xff, 0x6, 0xffffffff}]}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$sock_SIOCADDRT(r1, 0x890b, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x4, 0x202000) close(r8) 2.933648016s ago: executing program 1 (id=375): syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x9, 0x4, 0x0, 0x3c, 0x50, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xb, 0x7, [@dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x3, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24040084) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x80000006, @loopback, 0xefce}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000001080)={0x0, [{0x3, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xfffffffe, 0x0}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x0, 0x571, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x6, 0x0, 0x1c82, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x6, 0x0}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_int(r8, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) close_range(0xffffffffffffffff, r7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x49c09, 0x4dac1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x40}}, 0x0) 2.264478085s ago: executing program 2 (id=376): syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) migrate_pages(r1, 0x8, &(0x7f0000000180)=0x2, &(0x7f0000000b00)=0x1e) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r3) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x14, r5, 0xf81, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi5\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000000104010800000000000000000a00000808000440000000060500010004000000080005400000800008000540000000030500010001"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x1ff, @empty}, r2}}, 0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000), 0xe) listen(r9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000340)=0x4) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) 2.14880118s ago: executing program 1 (id=377): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 1.979613717s ago: executing program 4 (id=378): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000804) 1.967222975s ago: executing program 2 (id=379): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 1.830930341s ago: executing program 2 (id=380): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.826296367s ago: executing program 4 (id=381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000106}]}) 1.688757756s ago: executing program 1 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000040)=""/133, 0x85}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000001840)=""/4100, 0x1004}], 0x5}, 0x100) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRESHEX=r2, @ANYRES16=r1], 0x50) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r3, 0x80106f53, &(0x7f00000001c0)={0x1e, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000000)="651dcb8823"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000001340)="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", &(0x7f0000000080)=""/41, 0x4}, 0x1c) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000012c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x3, 0x7, 0xe, @empty, @empty, 0x700, 0x700, 0x59, 0x9}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x24, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_settime(0x3, &(0x7f0000000200)={0x0, 0x3938700}) getsockopt$netlink(r8, 0x10e, 0xb, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 1.584190077s ago: executing program 2 (id=383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x100005}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}]}, 0x2c}}, 0x20004800) 1.513841674s ago: executing program 4 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x70bd26, 0x4000, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x38}}, 0x80) 1.51248538s ago: executing program 2 (id=385): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 1.383726959s ago: executing program 4 (id=386): capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 914.517508ms ago: executing program 3 (id=387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) close(r0) 373.69535ms ago: executing program 3 (id=388): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 322.349075ms ago: executing program 4 (id=389): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x679}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 312.641424ms ago: executing program 3 (id=390): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) 250.429626ms ago: executing program 1 (id=391): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0x7]}}) 138.217862ms ago: executing program 0 (id=392): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) 0s ago: executing program 4 (id=393): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 3-1: config 0 interface 0 has no altsetting 0 [ 104.345916][ T5698] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 104.369733][ T30] audit: type=1400 audit(1778371581.075:287): avc: denied { connect } for pid=6308 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.373987][ T5698] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 104.411421][ T5698] usb 3-1: Product: syz [ 104.419499][ T5698] usb 3-1: Manufacturer: syz [ 104.423547][ T30] audit: type=1400 audit(1778371581.135:288): avc: denied { open } for pid=6310 comm="syz.1.173" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 104.424776][ T5698] usb 3-1: SerialNumber: syz [ 104.455930][ T5739] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.483094][ T30] audit: type=1400 audit(1778371581.175:289): avc: denied { ioctl } for pid=6310 comm="syz.1.173" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 104.490123][ T5698] usb 3-1: config 0 descriptor?? [ 104.575522][ T5698] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 104.644179][ T5739] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.658923][ T5739] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.670018][ T5739] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.683910][ T30] audit: type=1400 audit(1778371581.395:290): avc: denied { write } for pid=6316 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.711091][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.726620][ T6296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.732820][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 104.757426][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 104.773567][ T5739] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.902078][ T5818] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.917240][ T30] audit: type=1400 audit(1778371581.615:291): avc: denied { create } for pid=6322 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.948041][ T30] audit: type=1400 audit(1778371581.615:292): avc: denied { setopt } for pid=6322 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.974361][ T5711] usb 3-1: USB disconnect, device number 8 [ 104.992509][ T6324] netlink: 120 bytes leftover after parsing attributes in process `syz.4.179'. [ 105.006772][ T6324] netlink: 'syz.4.179': attribute type 1 has an invalid length. [ 105.029292][ T6324] netlink: 64 bytes leftover after parsing attributes in process `syz.4.179'. [ 105.107716][ T5711] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 105.270161][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.457607][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.589255][ T5818] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 105.616004][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.628315][ T5739] usb 4-1: USB disconnect, device number 4 [ 105.666527][ T5818] usb 2-1: config 0 descriptor?? [ 105.728600][ T30] audit: type=1400 audit(1778371582.435:293): avc: denied { append } for pid=6330 comm="syz.2.180" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.312074][ T5718] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 106.317679][ T5818] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 106.335862][ T5818] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 106.358882][ T5818] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 106.423271][ T5818] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 106.551617][ T5818] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 106.810548][ T5818] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 106.930137][ T5818] usb 2-1: USB disconnect, device number 3 [ 107.063121][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 107.075632][ T5718] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 107.100740][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.109768][ T5718] usb 3-1: Product: syz [ 107.114413][ T5718] usb 3-1: Manufacturer: syz [ 107.119103][ T5718] usb 3-1: SerialNumber: syz [ 107.131237][ T5718] usb 3-1: config 0 descriptor?? [ 107.154510][ T5718] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 107.163215][ T5718] dvb-usb: bulk message failed: -22 (4/0) [ 107.171739][ T5718] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 107.186542][ T5718] dvb-usb: bulk message failed: -22 (5/0) [ 107.194893][ T5718] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 107.236101][ T5718] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.249865][ T5718] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 107.263079][ T5718] usb 3-1: media controller created [ 107.263672][ T6349] netlink: 100 bytes leftover after parsing attributes in process `syz.3.188'. [ 107.321843][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.390745][ T6338] dvb-usb: bulk message failed: -22 (7/0) [ 107.399999][ T5718] usb 3-1: selecting invalid altsetting 3 [ 107.421323][ T5718] ttusb2: set interface to alts=3 failed [ 107.430115][ T6338] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 107.465464][ T6338] ttusb2: i2c transfer failed. [ 107.568082][ T5718] DVB: Unable to find symbol tda10086_attach() [ 108.119773][ T5718] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 108.290924][ T6367] netlink: 120 bytes leftover after parsing attributes in process `syz.3.194'. [ 108.476353][ T6367] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 108.548401][ T5718] dvb-usb: bulk message failed: -22 (4/0) [ 108.554275][ T5718] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 108.564748][ T5718] dvb-usb: bulk message failed: -22 (5/0) [ 108.570529][ T5718] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 108.580757][ T5718] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 108.603062][ T5739] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 108.679282][ T6367] netlink: 64 bytes leftover after parsing attributes in process `syz.3.194'. [ 108.785469][ T5739] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.808626][ T5739] usb 1-1: config 0 has no interface number 0 [ 108.844228][ T5739] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 108.887167][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.925319][ T5739] usb 1-1: Product: syz [ 108.943669][ T5739] usb 1-1: Manufacturer: syz [ 108.967853][ T5739] usb 1-1: SerialNumber: syz [ 108.994238][ T5739] usb 1-1: config 0 descriptor?? [ 109.040970][ T5739] usb 1-1: selecting invalid altsetting 1 [ 109.078332][ T5739] dvb_ttusb_budget: ttusb_init_controller: error [ 109.090985][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 109.091004][ T30] audit: type=1400 audit(1778371585.795:303): avc: denied { append } for pid=6384 comm="syz.4.201" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.144414][ T5739] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 109.284852][ T5718] usb 3-1: USB disconnect, device number 9 [ 109.436571][ T6389] dlm: no locking on control device [ 109.513599][ T5739] DVB: Unable to find symbol stv0299_attach() [ 109.724172][ T5718] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 109.850086][ T5739] DVB: Unable to find symbol tda8083_attach() [ 109.896447][ T5739] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 109.914810][ T30] audit: type=1400 audit(1778371586.615:304): avc: denied { connect } for pid=6398 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.959411][ T5739] usb 1-1: USB disconnect, device number 5 [ 109.998388][ T30] audit: type=1400 audit(1778371586.645:305): avc: denied { setopt } for pid=6398 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.082301][ T804] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.262016][ T804] usb 2-1: device descriptor read/64, error -71 [ 110.422281][ T5725] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.430399][ T6416] pim6reg: entered allmulticast mode [ 110.514090][ T804] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.590589][ T6425] netlink: 120 bytes leftover after parsing attributes in process `syz.2.210'. [ 110.603649][ T5725] usb 5-1: Using ep0 maxpacket: 8 [ 110.627107][ T5725] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 110.651634][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.663796][ T804] usb 2-1: device descriptor read/64, error -71 [ 110.672170][ T6425] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 110.672342][ T5725] usb 5-1: Product: syz [ 110.700408][ T5725] usb 5-1: Manufacturer: syz [ 110.709151][ T5725] usb 5-1: SerialNumber: syz [ 110.729185][ T6425] netlink: 64 bytes leftover after parsing attributes in process `syz.2.210'. [ 110.739082][ T5725] usb 5-1: config 0 descriptor?? [ 110.752531][ T5725] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 110.781842][ T5725] pctv452e: pctv452e_power_ctrl: 1 [ 110.781842][ T5725] [ 110.782365][ T804] usb usb2-port1: attempt power cycle [ 110.797273][ T5725] usb 5-1: selecting invalid altsetting 3 [ 110.809011][ T5725] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 110.809011][ T5725] [ 110.836969][ T5725] dvb-usb: bulk message failed: -22 (5/0) [ 110.892065][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.923687][ T5725] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 110.945356][ T5725] usb 5-1: media controller created [ 110.958750][ T5725] dvb-usb: bulk message failed: -22 (8/0) [ 110.975878][ T30] audit: type=1400 audit(1778371587.675:306): avc: denied { append } for pid=6408 comm="syz.4.208" name="i2c-1" dev="devtmpfs" ino=2875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.006641][ T5725] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 111.022357][ T5725] dvb-usb: MAC address reading failed. [ 111.038609][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.173362][ T804] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.236892][ T804] usb 2-1: device descriptor read/8, error -71 [ 111.252886][ T5725] DVB: Unable to find symbol stb0899_attach() [ 111.279700][ T5725] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 111.494063][ T804] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 111.502060][ T5725] rc_core: IR keymap rc-tt-1500 not found [ 111.508032][ T5725] Registered IR keymap rc-empty [ 111.515742][ T5725] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 111.528377][ T5725] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 111.549606][ T5725] dvb-usb: schedule remote query interval to 100 msecs. [ 111.556790][ T5725] pctv452e: pctv452e_power_ctrl: 0 [ 111.556790][ T5725] [ 111.557702][ T6454] netlink: 120 bytes leftover after parsing attributes in process `syz.2.214'. [ 111.564394][ T5725] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 111.602255][ T5725] usb 5-1: USB disconnect, device number 9 [ 111.607059][ T804] usb 2-1: device descriptor read/8, error -71 [ 111.705364][ T6454] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 111.743506][ T804] usb usb2-port1: unable to enumerate USB device [ 111.760550][ T6454] netlink: 64 bytes leftover after parsing attributes in process `syz.2.214'. [ 111.785217][ T30] audit: type=1400 audit(1778371588.485:307): avc: denied { write } for pid=6461 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.156976][ T30] audit: type=1400 audit(1778371588.865:308): avc: denied { create } for pid=6471 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.234189][ T30] audit: type=1400 audit(1778371588.875:309): avc: denied { write } for pid=6471 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.259536][ T5725] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 112.314923][ T30] audit: type=1400 audit(1778371588.935:310): avc: denied { read } for pid=6471 comm="syz.3.218" lport=8199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.384082][ T6489] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 113.445141][ T6489] CPU: 0 UID: 0 PID: 6489 Comm: syz.3.219 Not tainted syzkaller #0 PREEMPT(full) [ 113.445178][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.445197][ T6489] Call Trace: [ 113.445207][ T6489] [ 113.445217][ T6489] dump_stack_lvl+0x100/0x190 [ 113.445258][ T6489] sysfs_warn_dup.cold+0x1c/0x28 [ 113.445297][ T6489] sysfs_do_create_link_sd+0x113/0x140 [ 113.445330][ T6489] sysfs_create_link+0x61/0xc0 [ 113.445358][ T6489] device_add+0x675/0x1950 [ 113.445388][ T6489] ? __pfx_device_add+0x10/0x10 [ 113.445412][ T6489] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.445444][ T6489] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 113.445490][ T6489] wiphy_register+0x1edd/0x2d90 [ 113.445518][ T6489] ? __rtnl_unlock+0xb9/0xf0 [ 113.445556][ T6489] ? __pfx_wiphy_register+0x10/0x10 [ 113.445585][ T6489] ? __asan_memset+0x23/0x50 [ 113.445622][ T6489] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 113.445676][ T6489] ieee80211_register_hw+0x3055/0x4570 [ 113.445729][ T6489] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 113.445763][ T6489] ? __pfx___debug_object_init+0x10/0x10 [ 113.445806][ T6489] ? find_held_lock+0x2b/0x80 [ 113.445832][ T6489] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.445866][ T6489] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 113.445897][ T6489] ? __hrtimer_setup+0x208/0x330 [ 113.445932][ T6489] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 113.445984][ T6489] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 113.446022][ T6489] ? __asan_memcpy+0x3c/0x60 [ 113.446059][ T6489] hwsim_new_radio_nl+0xc5f/0x1370 [ 113.446095][ T6489] ? rcu_is_watching+0x12/0xc0 [ 113.446130][ T6489] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 113.446173][ T6489] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 113.446207][ T6489] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 113.446245][ T6489] genl_family_rcv_msg_doit+0x214/0x300 [ 113.446279][ T6489] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 113.446319][ T6489] ? bpf_lsm_capable+0x9/0x10 [ 113.446343][ T6489] ? security_capable+0x80/0x260 [ 113.446367][ T6489] ? ns_capable+0xd2/0xf0 [ 113.446398][ T6489] genl_rcv_msg+0x560/0x800 [ 113.446433][ T6489] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.446465][ T6489] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 113.446511][ T6489] netlink_rcv_skb+0x159/0x420 [ 113.446541][ T6489] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.446573][ T6489] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.446614][ T6489] ? netlink_deliver_tap+0x1ae/0xcc0 [ 113.446648][ T6489] genl_rcv+0x28/0x40 [ 113.446682][ T6489] netlink_unicast+0x585/0x850 [ 113.446716][ T6489] ? __pfx_netlink_unicast+0x10/0x10 [ 113.446755][ T6489] netlink_sendmsg+0x8b0/0xda0 [ 113.446788][ T6489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.446814][ T6489] ? pti_set_user_pgtbl+0x30/0x50 [ 113.446867][ T6489] ____sys_sendmsg+0x9e1/0xb70 [ 113.446897][ T6489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.446929][ T6489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.446961][ T6489] ? __pfx_futex_wake_mark+0x10/0x10 [ 113.446991][ T6489] ___sys_sendmsg+0x190/0x1e0 [ 113.447021][ T6489] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.447083][ T6489] __sys_sendmsg+0x170/0x220 [ 113.447104][ T6489] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.447126][ T6489] ? __x64_sys_futex+0x34f/0x4d0 [ 113.447175][ T6489] ? rcu_is_watching+0x12/0xc0 [ 113.447217][ T6489] do_syscall_64+0x10b/0xf80 [ 113.447247][ T6489] ? clear_bhb_loop+0x40/0x90 [ 113.447277][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.447301][ T6489] RIP: 0033:0x7fce7719cdd9 [ 113.447323][ T6489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.447345][ T6489] RSP: 002b:00007fce77fde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.447369][ T6489] RAX: ffffffffffffffda RBX: 00007fce77416270 RCX: 00007fce7719cdd9 [ 113.447385][ T6489] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 113.447400][ T6489] RBP: 00007fce77232d69 R08: 0000000000000000 R09: 0000000000000000 [ 113.447414][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.447429][ T6489] R13: 00007fce77416308 R14: 00007fce77416270 R15: 00007fff98940248 [ 113.447463][ T6489] [ 113.867853][ T6493] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 113.873786][ T30] audit: type=1400 audit(1778371590.575:311): avc: denied { write } for pid=6496 comm="syz.4.222" path="socket:[11078]" dev="sockfs" ino=11078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.882918][ T6493] CPU: 0 UID: 0 PID: 6493 Comm: syz.3.219 Not tainted syzkaller #0 PREEMPT(full) [ 113.882951][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.882965][ T6493] Call Trace: [ 113.882973][ T6493] [ 113.882981][ T6493] dump_stack_lvl+0x100/0x190 [ 113.883015][ T6493] sysfs_warn_dup.cold+0x1c/0x28 [ 113.883048][ T6493] sysfs_do_create_link_sd+0x113/0x140 [ 113.883084][ T6493] sysfs_create_link+0x61/0xc0 [ 113.883111][ T6493] device_add+0x675/0x1950 [ 113.883141][ T6493] ? __pfx_device_add+0x10/0x10 [ 113.883165][ T6493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.883194][ T6493] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 113.883237][ T6493] wiphy_register+0x1edd/0x2d90 [ 113.883269][ T6493] ? __rtnl_unlock+0xb9/0xf0 [ 113.883303][ T6493] ? __pfx_wiphy_register+0x10/0x10 [ 113.883331][ T6493] ? __asan_memset+0x23/0x50 [ 113.883365][ T6493] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 113.883419][ T6493] ieee80211_register_hw+0x3055/0x4570 [ 113.883471][ T6493] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 113.883505][ T6493] ? __pfx___debug_object_init+0x10/0x10 [ 113.883542][ T6493] ? find_held_lock+0x2b/0x80 [ 113.883566][ T6493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.883593][ T6493] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 113.883620][ T6493] ? __hrtimer_setup+0x208/0x330 [ 113.883654][ T6493] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 113.883708][ T6493] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 113.883745][ T6493] ? __asan_memcpy+0x3c/0x60 [ 113.883785][ T6493] hwsim_new_radio_nl+0xc5f/0x1370 [ 113.883822][ T6493] ? rcu_is_watching+0x12/0xc0 [ 113.883862][ T6493] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 113.883907][ T6493] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 113.883941][ T6493] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 113.883981][ T6493] genl_family_rcv_msg_doit+0x214/0x300 [ 113.884017][ T6493] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 113.884059][ T6493] ? bpf_lsm_capable+0x9/0x10 [ 113.884082][ T6493] ? security_capable+0x80/0x260 [ 113.884108][ T6493] ? ns_capable+0xd2/0xf0 [ 113.884141][ T6493] genl_rcv_msg+0x560/0x800 [ 113.884176][ T6493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.884209][ T6493] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 113.884258][ T6493] netlink_rcv_skb+0x159/0x420 [ 113.884289][ T6493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.884324][ T6493] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.884366][ T6493] ? netlink_deliver_tap+0x1ae/0xcc0 [ 113.884397][ T6493] genl_rcv+0x28/0x40 [ 113.884426][ T6493] netlink_unicast+0x585/0x850 [ 113.884458][ T6493] ? __pfx_netlink_unicast+0x10/0x10 [ 113.884495][ T6493] netlink_sendmsg+0x8b0/0xda0 [ 113.884530][ T6493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.884556][ T6493] ? pti_set_user_pgtbl+0x30/0x50 [ 113.884601][ T6493] ____sys_sendmsg+0x9e1/0xb70 [ 113.884631][ T6493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.884662][ T6493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.884699][ T6493] ? __pfx_futex_wake_mark+0x10/0x10 [ 113.884727][ T6493] ___sys_sendmsg+0x190/0x1e0 [ 113.884758][ T6493] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.884835][ T6493] __sys_sendmsg+0x170/0x220 [ 113.884860][ T6493] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.884882][ T6493] ? __x64_sys_futex+0x34f/0x4d0 [ 113.884927][ T6493] ? rcu_is_watching+0x12/0xc0 [ 113.884965][ T6493] do_syscall_64+0x10b/0xf80 [ 113.884994][ T6493] ? clear_bhb_loop+0x40/0x90 [ 113.885021][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.885044][ T6493] RIP: 0033:0x7fce7719cdd9 [ 113.885063][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.885085][ T6493] RSP: 002b:00007fce77fbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.885107][ T6493] RAX: ffffffffffffffda RBX: 00007fce77416360 RCX: 00007fce7719cdd9 [ 113.885123][ T6493] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000a [ 113.885137][ T6493] RBP: 00007fce77232d69 R08: 0000000000000000 R09: 0000000000000000 [ 113.885151][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.885164][ T6493] R13: 00007fce774163f8 R14: 00007fce77416360 R15: 00007fff98940248 [ 113.885196][ T6493] [ 114.526080][ T30] audit: type=1400 audit(1778371590.825:312): avc: denied { map } for pid=6494 comm="syz.1.221" path="socket:[10202]" dev="sockfs" ino=10202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.634201][ T30] audit: type=1400 audit(1778371590.825:313): avc: denied { read } for pid=6494 comm="syz.1.221" path="socket:[10202]" dev="sockfs" ino=10202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.661512][ T6507] tipc: Started in network mode [ 114.695110][ T6507] tipc: Node identity , cluster identity 4711 [ 114.717716][ T30] audit: type=1400 audit(1778371591.425:314): avc: denied { setopt } for pid=6510 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.725806][ T6507] tipc: Failed to set node id, please configure manually [ 114.750966][ T6512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.228'. [ 114.795847][ T6507] tipc: Enabling of bearer rejected, failed to enable media [ 114.801915][ T30] audit: type=1400 audit(1778371591.505:315): avc: denied { create } for pid=6513 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.889337][ T6519] dlm: no locking on control device [ 114.923260][ T30] audit: type=1400 audit(1778371591.555:316): avc: denied { getopt } for pid=6508 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.986782][ T30] audit: type=1400 audit(1778371591.565:317): avc: denied { bind } for pid=6513 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.081231][ T30] audit: type=1400 audit(1778371591.575:318): avc: denied { connect } for pid=6513 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.312000][ T5725] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.722014][ T5725] usb 4-1: device descriptor read/64, error -71 [ 115.960740][ T6536] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 116.034928][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 116.034950][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.034959][ T6536] Call Trace: [ 116.034963][ T6536] [ 116.034969][ T6536] dump_stack_lvl+0x100/0x190 [ 116.034993][ T6536] sysfs_warn_dup.cold+0x1c/0x28 [ 116.035015][ T6536] sysfs_do_create_link_sd+0x113/0x140 [ 116.035032][ T6536] sysfs_create_link+0x61/0xc0 [ 116.035059][ T6536] device_add+0x675/0x1950 [ 116.035088][ T6536] ? __pfx_device_add+0x10/0x10 [ 116.035109][ T6536] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.035136][ T6536] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 116.035159][ T6536] wiphy_register+0x1edd/0x2d90 [ 116.035174][ T6536] ? __rtnl_unlock+0xb9/0xf0 [ 116.035193][ T6536] ? __pfx_wiphy_register+0x10/0x10 [ 116.035208][ T6536] ? __asan_memset+0x23/0x50 [ 116.035225][ T6536] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 116.035251][ T6536] ieee80211_register_hw+0x3055/0x4570 [ 116.035279][ T6536] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 116.035296][ T6536] ? __pfx___debug_object_init+0x10/0x10 [ 116.035317][ T6536] ? find_held_lock+0x2b/0x80 [ 116.035330][ T6536] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.035346][ T6536] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 116.035361][ T6536] ? __hrtimer_setup+0x208/0x330 [ 116.035381][ T6536] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 116.035413][ T6536] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 116.035436][ T6536] ? __asan_memcpy+0x3c/0x60 [ 116.035457][ T6536] hwsim_new_radio_nl+0xc5f/0x1370 [ 116.035476][ T6536] ? rcu_is_watching+0x12/0xc0 [ 116.035495][ T6536] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.035519][ T6536] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 116.035539][ T6536] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 116.035561][ T6536] genl_family_rcv_msg_doit+0x214/0x300 [ 116.035581][ T6536] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 116.035607][ T6536] ? bpf_lsm_capable+0x9/0x10 [ 116.035620][ T6536] ? security_capable+0x80/0x260 [ 116.035635][ T6536] ? ns_capable+0xd2/0xf0 [ 116.035653][ T6536] genl_rcv_msg+0x560/0x800 [ 116.035673][ T6536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.035690][ T6536] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.035710][ T6536] ? irqentry_exit+0x24d/0x7e0 [ 116.035726][ T6536] ? lockdep_hardirqs_on+0x78/0x100 [ 116.035745][ T6536] netlink_rcv_skb+0x159/0x420 [ 116.035761][ T6536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.035778][ T6536] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.035800][ T6536] ? rcu_is_watching+0x12/0xc0 [ 116.035821][ T6536] genl_rcv+0x28/0x40 [ 116.035843][ T6536] netlink_unicast+0x585/0x850 [ 116.035863][ T6536] ? __pfx_netlink_unicast+0x10/0x10 [ 116.035886][ T6536] netlink_sendmsg+0x8b0/0xda0 [ 116.035911][ T6536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.035930][ T6536] ? pti_set_user_pgtbl+0x30/0x50 [ 116.035964][ T6536] ____sys_sendmsg+0x9e1/0xb70 [ 116.035981][ T6536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.036003][ T6536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.036035][ T6536] ___sys_sendmsg+0x190/0x1e0 [ 116.036059][ T6536] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.036096][ T6536] __sys_sendmsg+0x170/0x220 [ 116.036111][ T6536] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.036131][ T6536] ? rcu_is_watching+0x12/0xc0 [ 116.036152][ T6536] do_syscall_64+0x10b/0xf80 [ 116.036170][ T6536] ? clear_bhb_loop+0x40/0x90 [ 116.036186][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.036198][ T6536] RIP: 0033:0x7fb7dfd9cdd9 [ 116.036211][ T6536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.036223][ T6536] RSP: 002b:00007fb7e0c20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.036236][ T6536] RAX: ffffffffffffffda RBX: 00007fb7e0016270 RCX: 00007fb7dfd9cdd9 [ 116.036245][ T6536] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 116.036252][ T6536] RBP: 00007fb7dfe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 116.036260][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.036268][ T6536] R13: 00007fb7e0016308 R14: 00007fb7e0016270 R15: 00007ffd1711c418 [ 116.036285][ T6536] [ 116.552434][ T5725] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.619664][ T6538] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 116.645731][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 116.645769][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.645795][ T6538] Call Trace: [ 116.645804][ T6538] [ 116.645813][ T6538] dump_stack_lvl+0x100/0x190 [ 116.645854][ T6538] sysfs_warn_dup.cold+0x1c/0x28 [ 116.645892][ T6538] sysfs_do_create_link_sd+0x113/0x140 [ 116.645924][ T6538] sysfs_create_link+0x61/0xc0 [ 116.645954][ T6538] device_add+0x675/0x1950 [ 116.645985][ T6538] ? __pfx_device_add+0x10/0x10 [ 116.646010][ T6538] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.646042][ T6538] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 116.646086][ T6538] wiphy_register+0x1edd/0x2d90 [ 116.646113][ T6538] ? __rtnl_unlock+0xb9/0xf0 [ 116.646150][ T6538] ? __pfx_wiphy_register+0x10/0x10 [ 116.646179][ T6538] ? __asan_memset+0x23/0x50 [ 116.646222][ T6538] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 116.646273][ T6538] ieee80211_register_hw+0x3055/0x4570 [ 116.646325][ T6538] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 116.646359][ T6538] ? __pfx___debug_object_init+0x10/0x10 [ 116.646397][ T6538] ? find_held_lock+0x2b/0x80 [ 116.646422][ T6538] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.646451][ T6538] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 116.646479][ T6538] ? __hrtimer_setup+0x208/0x330 [ 116.646516][ T6538] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 116.646573][ T6538] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 116.646614][ T6538] ? __asan_memcpy+0x3c/0x60 [ 116.646650][ T6538] hwsim_new_radio_nl+0xc5f/0x1370 [ 116.646687][ T6538] ? rcu_is_watching+0x12/0xc0 [ 116.646724][ T6538] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.646770][ T6538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 116.646826][ T6538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 116.646872][ T6538] genl_family_rcv_msg_doit+0x214/0x300 [ 116.646903][ T6538] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 116.646950][ T6538] ? bpf_lsm_capable+0x9/0x10 [ 116.646985][ T6538] ? security_capable+0x80/0x260 [ 116.647015][ T6538] ? ns_capable+0xd2/0xf0 [ 116.647053][ T6538] genl_rcv_msg+0x560/0x800 [ 116.647090][ T6538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.647124][ T6538] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.647172][ T6538] netlink_rcv_skb+0x159/0x420 [ 116.647202][ T6538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.647237][ T6538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.647281][ T6538] ? netlink_deliver_tap+0x1ae/0xcc0 [ 116.647315][ T6538] genl_rcv+0x28/0x40 [ 116.647345][ T6538] netlink_unicast+0x585/0x850 [ 116.647380][ T6538] ? __pfx_netlink_unicast+0x10/0x10 [ 116.647420][ T6538] netlink_sendmsg+0x8b0/0xda0 [ 116.647455][ T6538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.647484][ T6538] ? pti_set_user_pgtbl+0x30/0x50 [ 116.647529][ T6538] ____sys_sendmsg+0x9e1/0xb70 [ 116.647557][ T6538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.647590][ T6538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.647626][ T6538] ? __pfx_futex_wake_mark+0x10/0x10 [ 116.647656][ T6538] ___sys_sendmsg+0x190/0x1e0 [ 116.647690][ T6538] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.647761][ T6538] __sys_sendmsg+0x170/0x220 [ 116.647792][ T6538] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.647816][ T6538] ? __x64_sys_futex+0x34f/0x4d0 [ 116.647863][ T6538] ? rcu_is_watching+0x12/0xc0 [ 116.647901][ T6538] do_syscall_64+0x10b/0xf80 [ 116.647931][ T6538] ? clear_bhb_loop+0x40/0x90 [ 116.647961][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.647985][ T6538] RIP: 0033:0x7fb7dfd9cdd9 [ 116.648004][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.648026][ T6538] RSP: 002b:00007fb7e0bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.648047][ T6538] RAX: ffffffffffffffda RBX: 00007fb7e0016360 RCX: 00007fb7dfd9cdd9 [ 116.648063][ T6538] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000a [ 116.648077][ T6538] RBP: 00007fb7dfe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 116.648091][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.648104][ T6538] R13: 00007fb7e00163f8 R14: 00007fb7e0016360 R15: 00007ffd1711c418 [ 116.648137][ T6538] [ 117.172075][ T5725] usb 4-1: device descriptor read/64, error -71 [ 117.283121][ T5725] usb usb4-port1: attempt power cycle [ 117.309179][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.243'. [ 117.572079][ T804] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 117.663127][ T5725] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.692637][ T5725] usb 4-1: device descriptor read/8, error -71 [ 117.722431][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 117.736077][ T804] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.750908][ T804] usb 3-1: config 0 has no interface number 0 [ 117.774423][ T804] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 117.789029][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.817627][ T804] usb 3-1: Product: syz [ 117.837795][ T804] usb 3-1: Manufacturer: syz [ 117.855839][ T804] usb 3-1: SerialNumber: syz [ 117.910122][ T804] usb 3-1: config 0 descriptor?? [ 117.942273][ T5725] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.990062][ T804] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 118.034528][ T5725] usb 4-1: device descriptor read/8, error -71 [ 118.083187][ T804] usb 3-1: selecting invalid altsetting 1 [ 118.121433][ T804] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 118.206953][ T804] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 118.215935][ T5725] usb usb4-port1: unable to enumerate USB device [ 118.269820][ T804] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 118.278676][ T804] usb 3-1: media controller created [ 118.361013][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.415988][ T804] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 118.430081][ T804] zl10353_read_register: readreg error (reg=127, ret==-71) [ 118.444799][ T804] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 118.579979][ T6602] overlayfs: overlapping lowerdir path [ 119.352048][ T5725] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.426048][ T6632] netlink: 72 bytes leftover after parsing attributes in process `syz.2.260'. [ 119.526770][ T5725] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.587687][ T5725] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.636317][ T804] usb 3-1: USB disconnect, device number 10 [ 119.680427][ T6635] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 119.703832][ T5725] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.749056][ T6635] CPU: 1 UID: 0 PID: 6635 Comm: syz.3.258 Not tainted syzkaller #0 PREEMPT(full) [ 119.749104][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.749119][ T6635] Call Trace: [ 119.749127][ T6635] [ 119.749136][ T6635] dump_stack_lvl+0x100/0x190 [ 119.749182][ T6635] sysfs_warn_dup.cold+0x1c/0x28 [ 119.749227][ T6635] sysfs_do_create_link_sd+0x113/0x140 [ 119.749262][ T6635] sysfs_create_link+0x61/0xc0 [ 119.749293][ T6635] device_add+0x675/0x1950 [ 119.749323][ T6635] ? __pfx_device_add+0x10/0x10 [ 119.749349][ T6635] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.749379][ T6635] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 119.749423][ T6635] wiphy_register+0x1edd/0x2d90 [ 119.749450][ T6635] ? __rtnl_unlock+0xb9/0xf0 [ 119.749486][ T6635] ? __pfx_wiphy_register+0x10/0x10 [ 119.749516][ T6635] ? __asan_memset+0x23/0x50 [ 119.749551][ T6635] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 119.749599][ T6635] ieee80211_register_hw+0x3055/0x4570 [ 119.749650][ T6635] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 119.749685][ T6635] ? __pfx___debug_object_init+0x10/0x10 [ 119.749722][ T6635] ? find_held_lock+0x2b/0x80 [ 119.749747][ T6635] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.749776][ T6635] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 119.749804][ T6635] ? __hrtimer_setup+0x208/0x330 [ 119.749840][ T6635] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 119.749897][ T6635] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 119.749935][ T6635] ? __asan_memcpy+0x3c/0x60 [ 119.749972][ T6635] hwsim_new_radio_nl+0xc5f/0x1370 [ 119.750006][ T6635] ? rcu_is_watching+0x12/0xc0 [ 119.750043][ T6635] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 119.750091][ T6635] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 119.750129][ T6635] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 119.750172][ T6635] genl_family_rcv_msg_doit+0x214/0x300 [ 119.750215][ T6635] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 119.750261][ T6635] ? bpf_lsm_capable+0x9/0x10 [ 119.750286][ T6635] ? security_capable+0x80/0x260 [ 119.750312][ T6635] ? ns_capable+0xd2/0xf0 [ 119.750347][ T6635] genl_rcv_msg+0x560/0x800 [ 119.750384][ T6635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.750418][ T6635] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 119.750463][ T6635] netlink_rcv_skb+0x159/0x420 [ 119.750494][ T6635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.750528][ T6635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.750573][ T6635] ? netlink_deliver_tap+0x1ae/0xcc0 [ 119.750605][ T6635] genl_rcv+0x28/0x40 [ 119.750635][ T6635] netlink_unicast+0x585/0x850 [ 119.750670][ T6635] ? __pfx_netlink_unicast+0x10/0x10 [ 119.750709][ T6635] netlink_sendmsg+0x8b0/0xda0 [ 119.750744][ T6635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.750772][ T6635] ? pti_set_user_pgtbl+0x30/0x50 [ 119.750817][ T6635] ____sys_sendmsg+0x9e1/0xb70 [ 119.750846][ T6635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.750878][ T6635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.750914][ T6635] ? __pfx_futex_wake_mark+0x10/0x10 [ 119.750944][ T6635] ___sys_sendmsg+0x190/0x1e0 [ 119.750977][ T6635] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.751047][ T6635] __sys_sendmsg+0x170/0x220 [ 119.751070][ T6635] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.751093][ T6635] ? __x64_sys_futex+0x34f/0x4d0 [ 119.751146][ T6635] ? rcu_is_watching+0x12/0xc0 [ 119.751187][ T6635] do_syscall_64+0x10b/0xf80 [ 119.751226][ T6635] ? clear_bhb_loop+0x40/0x90 [ 119.751258][ T6635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.751282][ T6635] RIP: 0033:0x7fce7719cdd9 [ 119.751314][ T6635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.751338][ T6635] RSP: 002b:00007fce77fbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.751362][ T6635] RAX: ffffffffffffffda RBX: 00007fce77416360 RCX: 00007fce7719cdd9 [ 119.751377][ T6635] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 119.751392][ T6635] RBP: 00007fce77232d69 R08: 0000000000000000 R09: 0000000000000000 [ 119.751406][ T6635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.751419][ T6635] R13: 00007fce774163f8 R14: 00007fce77416360 R15: 00007fff98940248 [ 119.751452][ T6635] [ 120.191109][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.196581][ T30] audit: type=1400 audit(1778371596.905:319): avc: denied { append } for pid=6638 comm="syz.1.263" name="sg0" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.224332][ T6640] program syz.1.263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.592004][ T6599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 120.666473][ T5725] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.690954][ T6631] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 120.750830][ T6631] CPU: 1 UID: 0 PID: 6631 Comm: syz.3.258 Not tainted syzkaller #0 PREEMPT(full) [ 120.750867][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.750884][ T6631] Call Trace: [ 120.750892][ T6631] [ 120.750902][ T6631] dump_stack_lvl+0x100/0x190 [ 120.750941][ T6631] sysfs_warn_dup.cold+0x1c/0x28 [ 120.750987][ T6631] sysfs_do_create_link_sd+0x113/0x140 [ 120.751025][ T6631] sysfs_create_link+0x61/0xc0 [ 120.751055][ T6631] device_add+0x675/0x1950 [ 120.751085][ T6631] ? __pfx_device_add+0x10/0x10 [ 120.751110][ T6631] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.751154][ T6631] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 120.751206][ T6631] wiphy_register+0x1edd/0x2d90 [ 120.751233][ T6631] ? __rtnl_unlock+0xb9/0xf0 [ 120.751269][ T6631] ? __pfx_wiphy_register+0x10/0x10 [ 120.751297][ T6631] ? __asan_memset+0x23/0x50 [ 120.751335][ T6631] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 120.751382][ T6631] ieee80211_register_hw+0x3055/0x4570 [ 120.751433][ T6631] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 120.751467][ T6631] ? __pfx___debug_object_init+0x10/0x10 [ 120.751505][ T6631] ? find_held_lock+0x2b/0x80 [ 120.751529][ T6631] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.751557][ T6631] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 120.751586][ T6631] ? __hrtimer_setup+0x208/0x330 [ 120.751622][ T6631] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 120.751679][ T6631] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 120.751718][ T6631] ? __asan_memcpy+0x3c/0x60 [ 120.751755][ T6631] hwsim_new_radio_nl+0xc5f/0x1370 [ 120.751790][ T6631] ? rcu_is_watching+0x12/0xc0 [ 120.751826][ T6631] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 120.751870][ T6631] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 120.751900][ T6631] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 120.751934][ T6631] genl_family_rcv_msg_doit+0x214/0x300 [ 120.751963][ T6631] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 120.752004][ T6631] ? bpf_lsm_capable+0x9/0x10 [ 120.752027][ T6631] ? security_capable+0x80/0x260 [ 120.752054][ T6631] ? ns_capable+0xd2/0xf0 [ 120.752088][ T6631] genl_rcv_msg+0x560/0x800 [ 120.752133][ T6631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.752168][ T6631] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 120.752219][ T6631] netlink_rcv_skb+0x159/0x420 [ 120.752252][ T6631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.752288][ T6631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.752330][ T6631] ? netlink_deliver_tap+0x1ae/0xcc0 [ 120.752363][ T6631] genl_rcv+0x28/0x40 [ 120.752391][ T6631] netlink_unicast+0x585/0x850 [ 120.752426][ T6631] ? __pfx_netlink_unicast+0x10/0x10 [ 120.752464][ T6631] netlink_sendmsg+0x8b0/0xda0 [ 120.752499][ T6631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.752527][ T6631] ? pti_set_user_pgtbl+0x30/0x50 [ 120.752571][ T6631] ____sys_sendmsg+0x9e1/0xb70 [ 120.752599][ T6631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.752630][ T6631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.752665][ T6631] ? __pfx_futex_wake_mark+0x10/0x10 [ 120.752695][ T6631] ___sys_sendmsg+0x190/0x1e0 [ 120.752727][ T6631] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.752796][ T6631] __sys_sendmsg+0x170/0x220 [ 120.752820][ T6631] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.752841][ T6631] ? __x64_sys_futex+0x34f/0x4d0 [ 120.752888][ T6631] ? rcu_is_watching+0x12/0xc0 [ 120.752928][ T6631] do_syscall_64+0x10b/0xf80 [ 120.752958][ T6631] ? clear_bhb_loop+0x40/0x90 [ 120.752987][ T6631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.753010][ T6631] RIP: 0033:0x7fce7719cdd9 [ 120.753031][ T6631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.753053][ T6631] RSP: 002b:00007fce77fde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.753076][ T6631] RAX: ffffffffffffffda RBX: 00007fce77416270 RCX: 00007fce7719cdd9 [ 120.753092][ T6631] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000a [ 120.753108][ T6631] RBP: 00007fce77232d69 R08: 0000000000000000 R09: 0000000000000000 [ 120.753131][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.753144][ T6631] R13: 00007fce77416308 R14: 00007fce77416270 R15: 00007fff98940248 [ 120.753178][ T6631] [ 121.224948][ T30] audit: type=1400 audit(1778371597.935:320): avc: denied { ioctl } for pid=6651 comm="syz.1.265" path="socket:[12410]" dev="sockfs" ino=12410 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.833920][ T30] audit: type=1400 audit(1778371597.935:321): avc: denied { write } for pid=6651 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.047460][ T5725] usb 5-1: USB disconnect, device number 10 [ 122.082451][ T6659] netlink: 'syz.0.269': attribute type 1 has an invalid length. [ 122.262742][ T6663] warning: `syz.1.271' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.970984][ T5611] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 123.222082][ T5611] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 123.277259][ T5611] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 123.324834][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.407462][ T5611] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 124.084779][ T6697] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 124.092028][ T804] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.137246][ T6697] CPU: 1 UID: 0 PID: 6697 Comm: syz.0.280 Not tainted syzkaller #0 PREEMPT(full) [ 124.137279][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.137293][ T6697] Call Trace: [ 124.137300][ T6697] [ 124.137309][ T6697] dump_stack_lvl+0x100/0x190 [ 124.137345][ T6697] sysfs_warn_dup.cold+0x1c/0x28 [ 124.137381][ T6697] sysfs_do_create_link_sd+0x113/0x140 [ 124.137412][ T6697] sysfs_create_link+0x61/0xc0 [ 124.137439][ T6697] device_add+0x675/0x1950 [ 124.137468][ T6697] ? __pfx_device_add+0x10/0x10 [ 124.137491][ T6697] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.137522][ T6697] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 124.137564][ T6697] wiphy_register+0x1edd/0x2d90 [ 124.137589][ T6697] ? __rtnl_unlock+0xb9/0xf0 [ 124.137619][ T6697] ? __pfx_wiphy_register+0x10/0x10 [ 124.137643][ T6697] ? __asan_memset+0x23/0x50 [ 124.137672][ T6697] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 124.137712][ T6697] ieee80211_register_hw+0x3055/0x4570 [ 124.137754][ T6697] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 124.137781][ T6697] ? __pfx___debug_object_init+0x10/0x10 [ 124.137811][ T6697] ? find_held_lock+0x2b/0x80 [ 124.137831][ T6697] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.137864][ T6697] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 124.137892][ T6697] ? __hrtimer_setup+0x208/0x330 [ 124.137927][ T6697] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 124.137978][ T6697] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 124.138011][ T6697] ? __asan_memcpy+0x3c/0x60 [ 124.138040][ T6697] hwsim_new_radio_nl+0xc5f/0x1370 [ 124.138068][ T6697] ? rcu_is_watching+0x12/0xc0 [ 124.138097][ T6697] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 124.138133][ T6697] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 124.138161][ T6697] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 124.138195][ T6697] genl_family_rcv_msg_doit+0x214/0x300 [ 124.138224][ T6697] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 124.138259][ T6697] ? bpf_lsm_capable+0x9/0x10 [ 124.138279][ T6697] ? security_capable+0x80/0x260 [ 124.138301][ T6697] ? ns_capable+0xd2/0xf0 [ 124.138330][ T6697] genl_rcv_msg+0x560/0x800 [ 124.138359][ T6697] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.138386][ T6697] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 124.138425][ T6697] netlink_rcv_skb+0x159/0x420 [ 124.138449][ T6697] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.138477][ T6697] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.138513][ T6697] ? netlink_deliver_tap+0x1ae/0xcc0 [ 124.138540][ T6697] genl_rcv+0x28/0x40 [ 124.138562][ T6697] netlink_unicast+0x585/0x850 [ 124.138589][ T6697] ? __pfx_netlink_unicast+0x10/0x10 [ 124.138620][ T6697] netlink_sendmsg+0x8b0/0xda0 [ 124.138647][ T6697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.138670][ T6697] ? pti_set_user_pgtbl+0x30/0x50 [ 124.138708][ T6697] ____sys_sendmsg+0x9e1/0xb70 [ 124.138733][ T6697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.138759][ T6697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.138780][ T6697] ? preempt_schedule_thunk+0x16/0x30 [ 124.138804][ T6697] ? try_to_wake_up+0x5f6/0x1900 [ 124.138828][ T6697] ___sys_sendmsg+0x190/0x1e0 [ 124.138860][ T6697] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.138886][ T6697] ? futex_private_hash_put+0x107/0x1c0 [ 124.138944][ T6697] __sys_sendmsg+0x170/0x220 [ 124.138965][ T6697] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.138982][ T6697] ? __x64_sys_futex+0x34f/0x4d0 [ 124.139019][ T6697] ? rcu_is_watching+0x12/0xc0 [ 124.139050][ T6697] do_syscall_64+0x10b/0xf80 [ 124.139075][ T6697] ? clear_bhb_loop+0x40/0x90 [ 124.139098][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.139117][ T6697] RIP: 0033:0x7f632d79cdd9 [ 124.139139][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.139159][ T6697] RSP: 002b:00007f632e65b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.139179][ T6697] RAX: ffffffffffffffda RBX: 00007f632da16270 RCX: 00007f632d79cdd9 [ 124.139194][ T6697] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 124.139206][ T6697] RBP: 00007f632d832d69 R08: 0000000000000000 R09: 0000000000000000 [ 124.139219][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.139231][ T6697] R13: 00007f632da16308 R14: 00007f632da16270 R15: 00007ffdf360c428 [ 124.139258][ T6697] [ 124.545439][ T5611] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 124.558392][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 124.577944][ T5611] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 124.586729][ T5611] stv0680 4-1:4.0: last error: 212, command = 0x2b [ 124.639201][ T6701] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 124.649984][ T6701] CPU: 1 UID: 0 PID: 6701 Comm: syz.0.280 Not tainted syzkaller #0 PREEMPT(full) [ 124.650022][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.650037][ T6701] Call Trace: [ 124.650045][ T6701] [ 124.650059][ T6701] dump_stack_lvl+0x100/0x190 [ 124.650097][ T6701] sysfs_warn_dup.cold+0x1c/0x28 [ 124.650134][ T6701] sysfs_do_create_link_sd+0x113/0x140 [ 124.650166][ T6701] sysfs_create_link+0x61/0xc0 [ 124.650195][ T6701] device_add+0x675/0x1950 [ 124.650225][ T6701] ? __pfx_device_add+0x10/0x10 [ 124.650250][ T6701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.650283][ T6701] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 124.650326][ T6701] wiphy_register+0x1edd/0x2d90 [ 124.650352][ T6701] ? __rtnl_unlock+0xb9/0xf0 [ 124.650388][ T6701] ? __pfx_wiphy_register+0x10/0x10 [ 124.650416][ T6701] ? __asan_memset+0x23/0x50 [ 124.650448][ T6701] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 124.650496][ T6701] ieee80211_register_hw+0x3055/0x4570 [ 124.650547][ T6701] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 124.650581][ T6701] ? __pfx___debug_object_init+0x10/0x10 [ 124.650619][ T6701] ? find_held_lock+0x2b/0x80 [ 124.650644][ T6701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.650673][ T6701] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 124.650703][ T6701] ? __hrtimer_setup+0x208/0x330 [ 124.650749][ T6701] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 124.650817][ T6701] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 124.650862][ T6701] ? __asan_memcpy+0x3c/0x60 [ 124.650897][ T6701] hwsim_new_radio_nl+0xc5f/0x1370 [ 124.650933][ T6701] ? rcu_is_watching+0x12/0xc0 [ 124.650970][ T6701] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 124.651014][ T6701] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 124.651050][ T6701] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 124.651092][ T6701] genl_family_rcv_msg_doit+0x214/0x300 [ 124.651127][ T6701] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 124.651172][ T6701] ? bpf_lsm_capable+0x9/0x10 [ 124.651197][ T6701] ? security_capable+0x80/0x260 [ 124.651224][ T6701] ? ns_capable+0xd2/0xf0 [ 124.651261][ T6701] genl_rcv_msg+0x560/0x800 [ 124.651299][ T6701] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.651335][ T6701] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 124.651385][ T6701] netlink_rcv_skb+0x159/0x420 [ 124.651417][ T6701] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.651453][ T6701] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.651497][ T6701] ? netlink_deliver_tap+0x1ae/0xcc0 [ 124.651531][ T6701] genl_rcv+0x28/0x40 [ 124.651560][ T6701] netlink_unicast+0x585/0x850 [ 124.651595][ T6701] ? __pfx_netlink_unicast+0x10/0x10 [ 124.651634][ T6701] netlink_sendmsg+0x8b0/0xda0 [ 124.651669][ T6701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.651702][ T6701] ? pti_set_user_pgtbl+0x30/0x50 [ 124.651766][ T6701] ____sys_sendmsg+0x9e1/0xb70 [ 124.651801][ T6701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.651840][ T6701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.651883][ T6701] ? __pfx_futex_wake_mark+0x10/0x10 [ 124.651913][ T6701] ___sys_sendmsg+0x190/0x1e0 [ 124.651938][ T6701] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.651994][ T6701] __sys_sendmsg+0x170/0x220 [ 124.652014][ T6701] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.652036][ T6701] ? __x64_sys_futex+0x34f/0x4d0 [ 124.652084][ T6701] ? rcu_is_watching+0x12/0xc0 [ 124.652124][ T6701] do_syscall_64+0x10b/0xf80 [ 124.652156][ T6701] ? clear_bhb_loop+0x40/0x90 [ 124.652197][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.652225][ T6701] RIP: 0033:0x7f632d79cdd9 [ 124.652251][ T6701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.652282][ T6701] RSP: 002b:00007f632e63a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.652313][ T6701] RAX: ffffffffffffffda RBX: 00007f632da16360 RCX: 00007f632d79cdd9 [ 124.652332][ T6701] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000a [ 124.652346][ T6701] RBP: 00007f632d832d69 R08: 0000000000000000 R09: 0000000000000000 [ 124.652360][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.652373][ T6701] R13: 00007f632da163f8 R14: 00007f632da16360 R15: 00007ffdf360c428 [ 124.652406][ T6701] [ 125.069544][ T804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.079901][ T804] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 125.089142][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.120200][ T804] usb 3-1: config 0 descriptor?? [ 125.143388][ T5718] usb 4-1: USB disconnect, device number 9 [ 125.208829][ T6706] netlink: 120 bytes leftover after parsing attributes in process `syz.1.285'. [ 125.217863][ T6706] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 125.225606][ T6706] netlink: 64 bytes leftover after parsing attributes in process `syz.1.285'. [ 125.245468][ T6708] netlink: 120 bytes leftover after parsing attributes in process `syz.4.286'. [ 125.273412][ T6708] netlink: 'syz.4.286': attribute type 1 has an invalid length. [ 125.293616][ T6708] netlink: 64 bytes leftover after parsing attributes in process `syz.4.286'. [ 125.545093][ T804] hid (null): bogus close delimiter [ 125.596249][ T804] waterforce 0003:1044:7A4D.0003: bogus close delimiter [ 125.617175][ T804] waterforce 0003:1044:7A4D.0003: item 0 2 2 10 parsing failed [ 125.627040][ T6718] netlink: 120 bytes leftover after parsing attributes in process `syz.1.290'. [ 125.630814][ T804] waterforce 0003:1044:7A4D.0003: hid parse failed with -22 [ 125.651457][ T6718] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 125.653924][ T804] waterforce 0003:1044:7A4D.0003: probe with driver waterforce failed with error -22 [ 125.660056][ T6718] netlink: 64 bytes leftover after parsing attributes in process `syz.1.290'. [ 125.873415][ T5611] usb 3-1: USB disconnect, device number 11 [ 126.023536][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.295'. [ 126.353937][ T804] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 126.570767][ T6733] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 126.610893][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 128.005065][ T804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.016677][ T804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.027101][ T804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.040518][ T804] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 128.053083][ T6750] netlink: 120 bytes leftover after parsing attributes in process `syz.1.303'. [ 128.498580][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.512140][ T804] usb 4-1: Product: syz [ 128.520000][ T6750] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 128.528007][ T804] usb 4-1: Manufacturer: syz [ 128.533150][ T804] usb 4-1: SerialNumber: syz [ 128.545892][ T6750] netlink: 64 bytes leftover after parsing attributes in process `syz.1.303'. [ 128.867164][ T804] usb 4-1: selecting invalid altsetting 1 [ 128.902659][ T804] usb 4-1: unit 6 not found! [ 129.154874][ T804] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 129.312672][ T804] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 129.332911][ T804] usb 4-1: USB disconnect, device number 10 [ 129.466894][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.529575][ T6768] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 129.562706][ T5704] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 130.655314][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 130.917028][ T5704] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 130.928110][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 130.939582][ T5704] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 131.072109][ T5739] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 131.182061][ T5611] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 131.262146][ T5704] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 131.271430][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.291413][ T5704] usb 5-1: config 0 descriptor?? [ 131.338961][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 131.522812][ T5704] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 131.589644][ T5704] hdpvr 5-1:0.0: device init failed [ 131.627707][ T5704] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 131.922912][ T5611] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 132.076585][ T5739] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 132.089567][ T5611] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.096341][ T5611] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 132.105803][ T5739] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 132.117008][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.125947][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.138832][ T5611] usb 4-1: config 0 descriptor?? [ 132.154917][ T5739] usb 1-1: config 0 descriptor?? [ 132.177592][ T6779] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.437764][ T30] audit: type=1400 audit(1778371609.145:322): avc: denied { write } for pid=6800 comm="syz.2.323" path="socket:[12987]" dev="sockfs" ino=12987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.469615][ T5704] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 132.565642][ T5611] hid (null): unknown global tag 0xc [ 132.575143][ T5611] hid (null): report_id 3885871493 is invalid [ 132.596759][ T5611] saitek 0003:06A3:0CCD.0004: unknown main item tag 0x2 [ 132.615402][ T5739] logitech 0003:046D:C293.0005: unknown main item tag 0x3 [ 132.623283][ T5611] saitek 0003:06A3:0CCD.0004: reserved main item tag 0xd [ 132.630430][ T5611] saitek 0003:06A3:0CCD.0004: unknown global tag 0xc [ 132.633760][ T5704] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 132.637372][ T5739] logitech 0003:046D:C293.0005: unknown main item tag 0x5 [ 132.653608][ T5611] saitek 0003:06A3:0CCD.0004: item 0 0 1 12 parsing failed [ 132.659190][ T5704] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 132.661590][ T5611] saitek 0003:06A3:0CCD.0004: parse failed [ 132.677103][ T5739] logitech 0003:046D:C293.0005: item fetching failed at offset 36/40 [ 132.681461][ T5704] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.695769][ T5739] logitech 0003:046D:C293.0005: parse failed [ 132.696406][ T5704] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 132.702302][ T5611] saitek 0003:06A3:0CCD.0004: probe with driver saitek failed with error -22 [ 132.714611][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 132.720206][ T5739] logitech 0003:046D:C293.0005: probe with driver logitech failed with error -22 [ 132.731051][ T5704] usb 2-1: Product: syz [ 132.763783][ T5704] usb 2-1: Manufacturer: syz [ 132.775439][ T5704] usb 2-1: SerialNumber: syz [ 132.792616][ T5704] usb 2-1: config 0 descriptor?? [ 132.821654][ T5704] hub 2-1:0.0: bad descriptor, ignoring hub [ 132.827046][ T5739] usb 4-1: USB disconnect, device number 11 [ 132.844121][ T5704] hub 2-1:0.0: probe with driver hub failed with error -5 [ 132.876190][ T5704] usb 2-1: selecting invalid altsetting 0 [ 132.887060][ T5611] usb 1-1: USB disconnect, device number 6 [ 132.970813][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.980296][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.017393][ T30] audit: type=1400 audit(1778371609.725:323): avc: denied { setopt } for pid=6803 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.231869][ T5704] usb 5-1: USB disconnect, device number 11 [ 133.465633][ T30] audit: type=1400 audit(1778371610.165:324): avc: denied { connect } for pid=6812 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.577467][ T30] audit: type=1400 audit(1778371610.285:325): avc: denied { write } for pid=6812 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.626041][ T30] audit: type=1400 audit(1778371610.285:326): avc: denied { write } for pid=6812 comm="syz.2.328" name="netlink" dev="proc" ino=4026533092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 133.685976][ T30] audit: type=1400 audit(1778371610.295:327): avc: denied { mount } for pid=6812 comm="syz.2.328" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 133.756455][ T30] audit: type=1400 audit(1778371610.295:328): avc: denied { mounton } for pid=6812 comm="syz.2.328" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 133.780623][ T6825] __nla_validate_parse: 2 callbacks suppressed [ 133.780643][ T6825] netlink: 120 bytes leftover after parsing attributes in process `syz.4.331'. [ 133.797601][ T6825] netlink: 'syz.4.331': attribute type 1 has an invalid length. [ 133.807184][ T6825] netlink: 64 bytes leftover after parsing attributes in process `syz.4.331'. [ 133.922295][ T5718] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.944752][ T30] audit: type=1400 audit(1778371610.655:329): avc: denied { read write } for pid=5607 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.025489][ T30] audit: type=1400 audit(1778371610.655:330): avc: denied { open } for pid=5607 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.091654][ T30] audit: type=1400 audit(1778371610.655:331): avc: denied { ioctl } for pid=5607 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.091993][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 134.163220][ T5718] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.205063][ T5718] usb 1-1: config 0 has no interface number 0 [ 134.231584][ T5718] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 134.267030][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.291749][ T5718] usb 1-1: Product: syz [ 134.298590][ T5718] usb 1-1: Manufacturer: syz [ 134.303438][ T5718] usb 1-1: SerialNumber: syz [ 134.321770][ T5718] usb 1-1: config 0 descriptor?? [ 134.333491][ T5718] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 134.342853][ T5718] usb 1-1: selecting invalid altsetting 1 [ 134.349894][ T5718] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 134.381355][ T5718] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.409086][ T5718] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 134.418622][ T5718] usb 1-1: media controller created [ 134.441590][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.545735][ T6833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.862037][ T5704] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 135.012053][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 135.019626][ T5704] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 135.031029][ T5704] usb 4-1: config 0 has no interface number 0 [ 135.038572][ T5704] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 245, changing to 7 [ 135.049940][ T804] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 135.068553][ T5704] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 135.080633][ T5704] usb 4-1: config 0 interface 89 has no altsetting 0 [ 135.089139][ T5704] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 135.098294][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.106386][ T5704] usb 4-1: Product: syz [ 135.110584][ T5704] usb 4-1: Manufacturer: syz [ 135.115394][ T5704] usb 4-1: SerialNumber: syz [ 135.122901][ T5704] usb 4-1: config 0 descriptor?? [ 135.133408][ T5704] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 135.144554][ T5704] em28xx 4-1:0.89: Video interface 89 found: isoc [ 135.202020][ T5749] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 135.214006][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 135.223800][ T804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 135.233641][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 135.244259][ T804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 135.254149][ T804] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 135.263242][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.273745][ T804] usb 5-1: config 0 descriptor?? [ 135.352058][ T5749] usb 3-1: Using ep0 maxpacket: 32 [ 135.354921][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 135.359853][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.377480][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.389889][ T5749] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 135.400215][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.414457][ T5749] usb 3-1: config 0 descriptor?? [ 135.442541][ T5704] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 135.488174][ T804] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 135.495584][ T804] hdpvr 5-1:0.0: device init failed [ 135.500876][ T804] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 135.519964][ T5704] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 135.529490][ T5704] em28xx 4-1:0.89: board has no eeprom [ 135.537205][ T5718] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 135.545489][ T5718] zl10353_read_register: readreg error (reg=127, ret==-110) [ 135.565669][ T6824] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 135.598248][ T5718] usb 1-1: USB disconnect, device number 7 [ 135.612433][ T5704] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 135.624272][ T5704] em28xx 4-1:0.89: analog set to isoc mode. [ 135.633186][ T5827] em28xx 4-1:0.89: Registering V4L2 extension [ 135.649338][ T5704] usb 4-1: USB disconnect, device number 12 [ 135.674295][ T5704] em28xx 4-1:0.89: Disconnecting em28xx [ 135.699572][ T5827] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 135.706901][ T5827] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 135.715946][ T5827] em28xx 4-1:0.89: No AC97 audio processor [ 135.726547][ T5827] usb 4-1: Decoder not found [ 135.731225][ T5827] em28xx 4-1:0.89: failed to create media graph [ 135.740984][ T5827] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 135.753552][ T5827] em28xx 4-1:0.89: Registering snapshot button... [ 135.760922][ T5827] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input8 [ 135.778018][ T5827] em28xx 4-1:0.89: Remote control support is not available for this card. [ 135.787247][ T5704] em28xx 4-1:0.89: Closing input extension [ 135.794001][ T5704] em28xx 4-1:0.89: Deregistering snapshot button [ 135.811250][ T5704] em28xx 4-1:0.89: Freeing device [ 135.843211][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.869001][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.881675][ T5749] hid (null): unknown global tag 0xc [ 135.891107][ T5749] ft260 0003:0403:6030.0006: unknown global tag 0xc [ 135.899507][ T5749] ft260 0003:0403:6030.0006: item 0 1 1 12 parsing failed [ 135.907748][ T5749] ft260 0003:0403:6030.0006: failed to parse HID [ 135.916345][ T5749] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -22 [ 135.989572][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 136.046580][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.340'. [ 136.115415][ T5704] usb 3-1: USB disconnect, device number 12 [ 136.480045][ T6860] overlayfs: overlapping lowerdir path [ 136.560587][ T6868] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 136.572126][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.0.345 Not tainted syzkaller #0 PREEMPT(full) [ 136.572158][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.572172][ T6868] Call Trace: [ 136.572179][ T6868] [ 136.572188][ T6868] dump_stack_lvl+0x100/0x190 [ 136.572229][ T6868] sysfs_warn_dup.cold+0x1c/0x28 [ 136.572263][ T6868] sysfs_do_create_link_sd+0x113/0x140 [ 136.572291][ T6868] sysfs_create_link+0x61/0xc0 [ 136.572314][ T6868] device_add+0x675/0x1950 [ 136.572342][ T6868] ? __pfx_device_add+0x10/0x10 [ 136.572362][ T6868] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.572389][ T6868] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 136.572427][ T6868] wiphy_register+0x1edd/0x2d90 [ 136.572448][ T6868] ? __rtnl_unlock+0xb9/0xf0 [ 136.572482][ T6868] ? __pfx_wiphy_register+0x10/0x10 [ 136.572505][ T6868] ? __asan_memset+0x23/0x50 [ 136.572533][ T6868] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 136.572573][ T6868] ieee80211_register_hw+0x3055/0x4570 [ 136.572614][ T6868] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 136.572641][ T6868] ? __pfx___debug_object_init+0x10/0x10 [ 136.572672][ T6868] ? find_held_lock+0x2b/0x80 [ 136.572694][ T6868] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.572720][ T6868] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.572744][ T6868] ? __hrtimer_setup+0x208/0x330 [ 136.572775][ T6868] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 136.572823][ T6868] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 136.572856][ T6868] ? __asan_memcpy+0x3c/0x60 [ 136.572885][ T6868] hwsim_new_radio_nl+0xc5f/0x1370 [ 136.572913][ T6868] ? rcu_is_watching+0x12/0xc0 [ 136.572954][ T6868] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 136.573000][ T6868] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 136.573043][ T6868] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 136.573082][ T6868] genl_family_rcv_msg_doit+0x214/0x300 [ 136.573113][ T6868] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 136.573148][ T6868] ? bpf_lsm_capable+0x9/0x10 [ 136.573167][ T6868] ? security_capable+0x80/0x260 [ 136.573189][ T6868] ? ns_capable+0xd2/0xf0 [ 136.573218][ T6868] genl_rcv_msg+0x560/0x800 [ 136.573248][ T6868] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.573276][ T6868] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 136.573315][ T6868] netlink_rcv_skb+0x159/0x420 [ 136.573340][ T6868] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.573369][ T6868] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.573407][ T6868] ? netlink_deliver_tap+0x1ae/0xcc0 [ 136.573434][ T6868] genl_rcv+0x28/0x40 [ 136.573458][ T6868] netlink_unicast+0x585/0x850 [ 136.573485][ T6868] ? __pfx_netlink_unicast+0x10/0x10 [ 136.573517][ T6868] netlink_sendmsg+0x8b0/0xda0 [ 136.573547][ T6868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.573571][ T6868] ? pti_set_user_pgtbl+0x30/0x50 [ 136.573610][ T6868] ____sys_sendmsg+0x9e1/0xb70 [ 136.573633][ T6868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.573659][ T6868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.573688][ T6868] ? __pfx_futex_wake_mark+0x10/0x10 [ 136.573713][ T6868] ___sys_sendmsg+0x190/0x1e0 [ 136.573739][ T6868] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.573796][ T6868] __sys_sendmsg+0x170/0x220 [ 136.573816][ T6868] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.573834][ T6868] ? __x64_sys_futex+0x34f/0x4d0 [ 136.573872][ T6868] ? rcu_is_watching+0x12/0xc0 [ 136.573905][ T6868] do_syscall_64+0x10b/0xf80 [ 136.573931][ T6868] ? clear_bhb_loop+0x40/0x90 [ 136.573963][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.573984][ T6868] RIP: 0033:0x7f632d79cdd9 [ 136.574006][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.574026][ T6868] RSP: 002b:00007f632e65b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.574049][ T6868] RAX: ffffffffffffffda RBX: 00007f632da16270 RCX: 00007f632d79cdd9 [ 136.574065][ T6868] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 136.574077][ T6868] RBP: 00007f632d832d69 R08: 0000000000000000 R09: 0000000000000000 [ 136.574090][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.574104][ T6868] R13: 00007f632da16308 R14: 00007f632da16270 R15: 00007ffdf360c428 [ 136.574132][ T6868] [ 137.028002][ T5711] usb 2-1: USB disconnect, device number 8 [ 137.132202][ T5611] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.294601][ T5611] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.305805][ T5611] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.315972][ T5611] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.326042][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.342393][ T6860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.351997][ T5749] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 137.361350][ T5611] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.432893][ T5711] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 137.465439][ T6879] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 137.483080][ T6879] CPU: 1 UID: 0 PID: 6879 Comm: syz.0.350 Not tainted syzkaller #0 PREEMPT(full) [ 137.483131][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.483150][ T6879] Call Trace: [ 137.483160][ T6879] [ 137.483170][ T6879] dump_stack_lvl+0x100/0x190 [ 137.483218][ T6879] sysfs_warn_dup.cold+0x1c/0x28 [ 137.483260][ T6879] sysfs_do_create_link_sd+0x113/0x140 [ 137.483296][ T6879] sysfs_create_link+0x61/0xc0 [ 137.483329][ T6879] device_add+0x675/0x1950 [ 137.483364][ T6879] ? __pfx_device_add+0x10/0x10 [ 137.483390][ T6879] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.483420][ T6879] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 137.483468][ T6879] wiphy_register+0x1edd/0x2d90 [ 137.483501][ T6879] ? __rtnl_unlock+0xb9/0xf0 [ 137.483548][ T6879] ? __pfx_wiphy_register+0x10/0x10 [ 137.483582][ T6879] ? __asan_memset+0x23/0x50 [ 137.483619][ T6879] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 137.483666][ T6879] ieee80211_register_hw+0x3055/0x4570 [ 137.483714][ T6879] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 137.483753][ T6879] ? __pfx___debug_object_init+0x10/0x10 [ 137.483797][ T6879] ? find_held_lock+0x2b/0x80 [ 137.483827][ T6879] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.483856][ T6879] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 137.483888][ T6879] ? __hrtimer_setup+0x208/0x330 [ 137.483926][ T6879] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 137.483982][ T6879] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 137.484033][ T6879] ? __asan_memcpy+0x3c/0x60 [ 137.484077][ T6879] hwsim_new_radio_nl+0xc5f/0x1370 [ 137.484109][ T6879] ? rcu_is_watching+0x12/0xc0 [ 137.484143][ T6879] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 137.484184][ T6879] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 137.484215][ T6879] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 137.484253][ T6879] genl_family_rcv_msg_doit+0x214/0x300 [ 137.484293][ T6879] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 137.484339][ T6879] ? bpf_lsm_capable+0x9/0x10 [ 137.484365][ T6879] ? security_capable+0x80/0x260 [ 137.484395][ T6879] ? ns_capable+0xd2/0xf0 [ 137.484431][ T6879] genl_rcv_msg+0x560/0x800 [ 137.484470][ T6879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.484501][ T6879] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 137.484570][ T6879] netlink_rcv_skb+0x159/0x420 [ 137.484609][ T6879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.484653][ T6879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.484697][ T6879] ? netlink_deliver_tap+0x1ae/0xcc0 [ 137.484731][ T6879] genl_rcv+0x28/0x40 [ 137.484760][ T6879] netlink_unicast+0x585/0x850 [ 137.484795][ T6879] ? __pfx_netlink_unicast+0x10/0x10 [ 137.484834][ T6879] netlink_sendmsg+0x8b0/0xda0 [ 137.484870][ T6879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.484897][ T6879] ? pti_set_user_pgtbl+0x30/0x50 [ 137.484944][ T6879] ____sys_sendmsg+0x9e1/0xb70 [ 137.484974][ T6879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.485003][ T6879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.485025][ T6879] ? preempt_schedule_thunk+0x16/0x30 [ 137.485052][ T6879] ? try_to_wake_up+0x5f6/0x1900 [ 137.485083][ T6879] ___sys_sendmsg+0x190/0x1e0 [ 137.485113][ T6879] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.485143][ T6879] ? futex_private_hash_put+0x107/0x1c0 [ 137.485206][ T6879] __sys_sendmsg+0x170/0x220 [ 137.485232][ T6879] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.485254][ T6879] ? __x64_sys_futex+0x34f/0x4d0 [ 137.485297][ T6879] ? rcu_is_watching+0x12/0xc0 [ 137.485337][ T6879] do_syscall_64+0x10b/0xf80 [ 137.485370][ T6879] ? clear_bhb_loop+0x40/0x90 [ 137.485402][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.485428][ T6879] RIP: 0033:0x7f632d79cdd9 [ 137.485454][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.485482][ T6879] RSP: 002b:00007f632e65b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.485509][ T6879] RAX: ffffffffffffffda RBX: 00007f632da16270 RCX: 00007f632d79cdd9 [ 137.485538][ T6879] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 137.485554][ T6879] RBP: 00007f632d832d69 R08: 0000000000000000 R09: 0000000000000000 [ 137.485570][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.485588][ T6879] R13: 00007f632da16308 R14: 00007f632da16270 R15: 00007ffdf360c428 [ 137.485626][ T6879] [ 137.753238][ T5739] usb 4-1: USB disconnect, device number 13 [ 137.760426][ T5749] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 137.839649][ T6881] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 137.848656][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.885859][ T6881] CPU: 1 UID: 0 PID: 6881 Comm: syz.0.350 Not tainted syzkaller #0 PREEMPT(full) [ 137.885893][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.885906][ T6881] Call Trace: [ 137.885916][ T6881] [ 137.885926][ T6881] dump_stack_lvl+0x100/0x190 [ 137.885969][ T6881] sysfs_warn_dup.cold+0x1c/0x28 [ 137.886005][ T6881] sysfs_do_create_link_sd+0x113/0x140 [ 137.886040][ T6881] sysfs_create_link+0x61/0xc0 [ 137.886067][ T6881] device_add+0x675/0x1950 [ 137.886100][ T6881] ? __pfx_device_add+0x10/0x10 [ 137.886123][ T6881] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.886158][ T6881] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 137.886202][ T6881] wiphy_register+0x1edd/0x2d90 [ 137.886227][ T6881] ? __rtnl_unlock+0xb9/0xf0 [ 137.886262][ T6881] ? __pfx_wiphy_register+0x10/0x10 [ 137.886288][ T6881] ? __asan_memset+0x23/0x50 [ 137.886320][ T6881] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 137.886368][ T6881] ieee80211_register_hw+0x3055/0x4570 [ 137.886419][ T6881] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 137.886451][ T6881] ? __pfx___debug_object_init+0x10/0x10 [ 137.886488][ T6881] ? find_held_lock+0x2b/0x80 [ 137.886517][ T6881] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.886544][ T6881] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 137.886577][ T6881] ? __hrtimer_setup+0x208/0x330 [ 137.886616][ T6881] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 137.886672][ T6881] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 137.886711][ T6881] ? __asan_memcpy+0x3c/0x60 [ 137.886743][ T6881] hwsim_new_radio_nl+0xc5f/0x1370 [ 137.886777][ T6881] ? rcu_is_watching+0x12/0xc0 [ 137.886815][ T6881] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 137.886861][ T6881] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 137.886897][ T6881] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 137.886937][ T6881] genl_family_rcv_msg_doit+0x214/0x300 [ 137.886971][ T6881] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 137.887013][ T6881] ? bpf_lsm_capable+0x9/0x10 [ 137.887036][ T6881] ? security_capable+0x80/0x260 [ 137.887061][ T6881] ? ns_capable+0xd2/0xf0 [ 137.887095][ T6881] genl_rcv_msg+0x560/0x800 [ 137.887129][ T6881] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.887161][ T6881] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 137.887205][ T6881] netlink_rcv_skb+0x159/0x420 [ 137.887233][ T6881] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.887265][ T6881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.887305][ T6881] ? netlink_deliver_tap+0x1ae/0xcc0 [ 137.887345][ T6881] genl_rcv+0x28/0x40 [ 137.887372][ T6881] netlink_unicast+0x585/0x850 [ 137.887404][ T6881] ? __pfx_netlink_unicast+0x10/0x10 [ 137.887440][ T6881] netlink_sendmsg+0x8b0/0xda0 [ 137.887473][ T6881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.887502][ T6881] ? pti_set_user_pgtbl+0x30/0x50 [ 137.887553][ T6881] ____sys_sendmsg+0x9e1/0xb70 [ 137.887579][ T6881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.887604][ T6881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.887635][ T6881] ? __pfx_futex_wake_mark+0x10/0x10 [ 137.887664][ T6881] ___sys_sendmsg+0x190/0x1e0 [ 137.887694][ T6881] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.887759][ T6881] __sys_sendmsg+0x170/0x220 [ 137.887781][ T6881] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.887802][ T6881] ? __x64_sys_futex+0x34f/0x4d0 [ 137.887846][ T6881] ? rcu_is_watching+0x12/0xc0 [ 137.887883][ T6881] do_syscall_64+0x10b/0xf80 [ 137.887911][ T6881] ? clear_bhb_loop+0x40/0x90 [ 137.887937][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.887959][ T6881] RIP: 0033:0x7f632d79cdd9 [ 137.887978][ T6881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.887999][ T6881] RSP: 002b:00007f632e63a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.888019][ T6881] RAX: ffffffffffffffda RBX: 00007f632da16360 RCX: 00007f632d79cdd9 [ 137.888034][ T6881] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000a [ 137.888047][ T6881] RBP: 00007f632d832d69 R08: 0000000000000000 R09: 0000000000000000 [ 137.888060][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.888072][ T6881] R13: 00007f632da163f8 R14: 00007f632da16360 R15: 00007ffdf360c428 [ 137.888102][ T6881] [ 138.373744][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 138.379115][ T5749] usb 3-1: Product: syz [ 138.384515][ T5749] usb 3-1: Manufacturer: syz [ 138.389222][ T5749] usb 3-1: SerialNumber: syz [ 138.396116][ T5711] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 138.405265][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.416810][ T5749] usb 3-1: config 0 descriptor?? [ 138.426951][ T5711] usb 2-1: config 0 descriptor?? [ 138.469169][ T5739] usb 5-1: USB disconnect, device number 12 [ 138.480501][ T5611] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.643367][ T5611] usb 1-1: Using ep0 maxpacket: 16 [ 138.650038][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.664927][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.671772][ T5749] usb 3-1: USB disconnect, device number 13 [ 138.675653][ T5611] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 138.695967][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.704624][ T5711] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 138.730560][ T5611] usb 1-1: config 0 descriptor?? [ 138.743461][ T5711] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.773528][ T5711] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 138.787588][ T5711] usb 2-1: media controller created [ 138.839728][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.907018][ T5711] az6027: usb out operation failed. (-71) [ 138.914939][ T5711] az6027: usb out operation failed. (-71) [ 138.920704][ T5711] stb0899_attach: Driver disabled by Kconfig [ 138.928504][ T5711] az6027: no front-end attached [ 138.928504][ T5711] [ 138.936486][ T5711] az6027: usb out operation failed. (-71) [ 138.942712][ T5711] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 138.951317][ T5711] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 138.970342][ T5711] dvb-usb: schedule remote query interval to 400 msecs. [ 138.977855][ T5711] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 138.991020][ T5711] usb 2-1: USB disconnect, device number 9 [ 139.002292][ T5739] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 139.105491][ T5711] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 139.175938][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.189099][ T5739] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 139.203124][ T5611] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 139.216063][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.233608][ T5739] usb 5-1: config 0 descriptor?? [ 139.244251][ T6892] overlayfs: overlapping lowerdir path [ 139.387933][ T5611] usb 1-1: USB disconnect, device number 8 [ 139.444636][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 139.444654][ T30] audit: type=1400 audit(1778371616.155:336): avc: denied { write } for pid=6899 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.500065][ T30] audit: type=1400 audit(1778371616.155:337): avc: denied { connect } for pid=6899 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.520628][ T30] audit: type=1400 audit(1778371616.165:338): avc: denied { name_connect } for pid=6899 comm="syz.2.356" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 139.543680][ T5749] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.656326][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.705884][ T6904] use of bytesused == 0 is deprecated and will be removed in the future, [ 139.726008][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.739206][ T5749] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.766100][ T6904] use the actual size instead. [ 139.785195][ T5749] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.796441][ T5749] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.805877][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.817856][ T5739] kye 0003:0458:5010.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 139.834097][ T6889] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 139.864774][ T5749] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.872653][ T5739] kye 0003:0458:5010.0008: unknown main item tag 0x0 [ 139.885305][ T5739] kye 0003:0458:5010.0008: unknown main item tag 0x4 [ 139.908540][ T5739] kye 0003:0458:5010.0008: unknown main item tag 0x0 [ 139.936787][ T5739] kye 0003:0458:5010.0008: unknown main item tag 0x0 [ 139.968820][ T5739] kye 0003:0458:5010.0008: unknown main item tag 0x0 [ 140.013317][ T5739] kye 0003:0458:5010.0008: unknown main item tag 0x0 [ 140.038109][ T5739] kye 0003:0458:5010.0008: unknown main item tag 0x0 [ 140.055756][ T5739] kye 0003:0458:5010.0008: unknown main item tag 0x0 [ 140.063584][ T5739] kye 0003:0458:5010.0008: unknown main item tag 0x0 [ 140.070887][ T5739] kye 0003:0458:5010.0008: unknown main item tag 0x0 [ 140.085631][ T5739] kye 0003:0458:5010.0008: hidraw0: USB HID v0.07 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 140.097156][ T5739] kye 0003:0458:5010.0008: tablet-enabling feature report not found [ 140.129383][ T5739] kye 0003:0458:5010.0008: tablet enabling failed [ 140.208450][ T5739] usb 5-1: USB disconnect, device number 13 [ 140.214673][ T5749] usb 4-1: USB disconnect, device number 14 [ 140.286258][ T6916] debugfs: '1^!l1*$pOcɔr$G' already exists in 'ieee80211' [ 140.286947][ T6912] fido_id[6912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 140.446718][ T6923] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 140.457871][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.0.361 Not tainted syzkaller #0 PREEMPT(full) [ 140.457907][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.457921][ T6923] Call Trace: [ 140.457929][ T6923] [ 140.457939][ T6923] dump_stack_lvl+0x100/0x190 [ 140.457978][ T6923] sysfs_warn_dup.cold+0x1c/0x28 [ 140.458018][ T6923] sysfs_do_create_link_sd+0x113/0x140 [ 140.458053][ T6923] sysfs_create_link+0x61/0xc0 [ 140.458083][ T6923] device_add+0x675/0x1950 [ 140.458114][ T6923] ? __pfx_device_add+0x10/0x10 [ 140.458140][ T6923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.458173][ T6923] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 140.458221][ T6923] wiphy_register+0x1edd/0x2d90 [ 140.458249][ T6923] ? __rtnl_unlock+0xb9/0xf0 [ 140.458286][ T6923] ? __pfx_wiphy_register+0x10/0x10 [ 140.458315][ T6923] ? __asan_memset+0x23/0x50 [ 140.458362][ T6923] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 140.458417][ T6923] ieee80211_register_hw+0x3055/0x4570 [ 140.458470][ T6923] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 140.458507][ T6923] ? __pfx___debug_object_init+0x10/0x10 [ 140.458553][ T6923] ? find_held_lock+0x2b/0x80 [ 140.458578][ T6923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.458610][ T6923] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 140.458642][ T6923] ? __hrtimer_setup+0x208/0x330 [ 140.458677][ T6923] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 140.458737][ T6923] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 140.458772][ T6923] ? __asan_memcpy+0x3c/0x60 [ 140.458810][ T6923] hwsim_new_radio_nl+0xc5f/0x1370 [ 140.458843][ T6923] ? rcu_is_watching+0x12/0xc0 [ 140.458878][ T6923] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 140.458920][ T6923] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 140.458954][ T6923] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 140.458993][ T6923] genl_family_rcv_msg_doit+0x214/0x300 [ 140.459029][ T6923] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.459069][ T6923] ? bpf_lsm_capable+0x9/0x10 [ 140.459090][ T6923] ? security_capable+0x80/0x260 [ 140.459116][ T6923] ? ns_capable+0xd2/0xf0 [ 140.459147][ T6923] genl_rcv_msg+0x560/0x800 [ 140.459180][ T6923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.459211][ T6923] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 140.459253][ T6923] netlink_rcv_skb+0x159/0x420 [ 140.459281][ T6923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.459312][ T6923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.459364][ T6923] ? netlink_deliver_tap+0x1ae/0xcc0 [ 140.459400][ T6923] genl_rcv+0x28/0x40 [ 140.459436][ T6923] netlink_unicast+0x585/0x850 [ 140.459480][ T6923] ? __pfx_netlink_unicast+0x10/0x10 [ 140.459522][ T6923] netlink_sendmsg+0x8b0/0xda0 [ 140.459556][ T6923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.459582][ T6923] ? pti_set_user_pgtbl+0x30/0x50 [ 140.459623][ T6923] ____sys_sendmsg+0x9e1/0xb70 [ 140.459648][ T6923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.459677][ T6923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.459701][ T6923] ? preempt_schedule_thunk+0x16/0x30 [ 140.459728][ T6923] ? try_to_wake_up+0x5f6/0x1900 [ 140.459755][ T6923] ___sys_sendmsg+0x190/0x1e0 [ 140.459786][ T6923] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.459816][ T6923] ? futex_private_hash_put+0x107/0x1c0 [ 140.459888][ T6923] __sys_sendmsg+0x170/0x220 [ 140.459912][ T6923] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.459934][ T6923] ? __x64_sys_futex+0x34f/0x4d0 [ 140.459982][ T6923] ? rcu_is_watching+0x12/0xc0 [ 140.460028][ T6923] do_syscall_64+0x10b/0xf80 [ 140.460060][ T6923] ? clear_bhb_loop+0x40/0x90 [ 140.460093][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.460117][ T6923] RIP: 0033:0x7f632d79cdd9 [ 140.460141][ T6923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.460165][ T6923] RSP: 002b:00007f632e65b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.460189][ T6923] RAX: ffffffffffffffda RBX: 00007f632da16270 RCX: 00007f632d79cdd9 [ 140.460206][ T6923] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 140.460222][ T6923] RBP: 00007f632d832d69 R08: 0000000000000000 R09: 0000000000000000 [ 140.460236][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.460249][ T6923] R13: 00007f632da16308 R14: 00007f632da16270 R15: 00007ffdf360c428 [ 140.460283][ T6923] [ 140.721202][ T6925] dlm: no locking on control device [ 140.722912][ T6921] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 140.739183][ T6925] netlink: 68 bytes leftover after parsing attributes in process `syz.4.363'. [ 140.741588][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.2.359 Not tainted syzkaller #0 PREEMPT(full) [ 140.741616][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.741626][ T6921] Call Trace: [ 140.741632][ T6921] [ 140.741639][ T6921] dump_stack_lvl+0x100/0x190 [ 140.741668][ T6921] sysfs_warn_dup.cold+0x1c/0x28 [ 140.741695][ T6921] sysfs_do_create_link_sd+0x113/0x140 [ 140.741720][ T6921] sysfs_create_link+0x61/0xc0 [ 140.741741][ T6921] device_add+0x675/0x1950 [ 140.741764][ T6921] ? __pfx_device_add+0x10/0x10 [ 140.741781][ T6921] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.741804][ T6921] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 140.741838][ T6921] wiphy_register+0x1edd/0x2d90 [ 140.741858][ T6921] ? __rtnl_unlock+0xb9/0xf0 [ 140.741889][ T6921] ? __pfx_wiphy_register+0x10/0x10 [ 140.741908][ T6921] ? __asan_memset+0x23/0x50 [ 140.741934][ T6921] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 140.741970][ T6921] ieee80211_register_hw+0x3055/0x4570 [ 140.742012][ T6921] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 140.742037][ T6921] ? __pfx___debug_object_init+0x10/0x10 [ 140.742065][ T6921] ? find_held_lock+0x2b/0x80 [ 140.742083][ T6921] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.742103][ T6921] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 140.742125][ T6921] ? __hrtimer_setup+0x208/0x330 [ 140.742153][ T6921] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 140.742196][ T6921] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 140.742224][ T6921] ? __asan_memcpy+0x3c/0x60 [ 140.742258][ T6921] hwsim_new_radio_nl+0xc5f/0x1370 [ 140.742284][ T6921] ? rcu_is_watching+0x12/0xc0 [ 140.742312][ T6921] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 140.742345][ T6921] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 140.742371][ T6921] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 140.742402][ T6921] genl_family_rcv_msg_doit+0x214/0x300 [ 140.742430][ T6921] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.742463][ T6921] ? bpf_lsm_capable+0x9/0x10 [ 140.742481][ T6921] ? security_capable+0x80/0x260 [ 140.742503][ T6921] ? ns_capable+0xd2/0xf0 [ 140.742533][ T6921] genl_rcv_msg+0x560/0x800 [ 140.742562][ T6921] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.742588][ T6921] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 140.742624][ T6921] netlink_rcv_skb+0x159/0x420 [ 140.742644][ T6921] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.742668][ T6921] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.742699][ T6921] ? netlink_deliver_tap+0x1ae/0xcc0 [ 140.742724][ T6921] genl_rcv+0x28/0x40 [ 140.742746][ T6921] netlink_unicast+0x585/0x850 [ 140.742772][ T6921] ? __pfx_netlink_unicast+0x10/0x10 [ 140.742803][ T6921] netlink_sendmsg+0x8b0/0xda0 [ 140.742830][ T6921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.742853][ T6921] ? pti_set_user_pgtbl+0x30/0x50 [ 140.742893][ T6921] ____sys_sendmsg+0x9e1/0xb70 [ 140.742921][ T6921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.742949][ T6921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.742982][ T6921] ? __pfx_futex_wake_mark+0x10/0x10 [ 140.743011][ T6921] ___sys_sendmsg+0x190/0x1e0 [ 140.743041][ T6921] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.743107][ T6921] __sys_sendmsg+0x170/0x220 [ 140.743129][ T6921] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.743149][ T6921] ? __x64_sys_futex+0x34f/0x4d0 [ 140.743195][ T6921] ? rcu_is_watching+0x12/0xc0 [ 140.743233][ T6921] do_syscall_64+0x10b/0xf80 [ 140.743269][ T6921] ? clear_bhb_loop+0x40/0x90 [ 140.743297][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.743319][ T6921] RIP: 0033:0x7fef91d9cdd9 [ 140.743339][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.743359][ T6921] RSP: 002b:00007fef8f766028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.743380][ T6921] RAX: ffffffffffffffda RBX: 00007fef92016360 RCX: 00007fef91d9cdd9 [ 140.743394][ T6921] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000a [ 140.743408][ T6921] RBP: 00007fef91e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 140.743421][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.743434][ T6921] R13: 00007fef920163f8 R14: 00007fef92016360 R15: 00007fffa797b2d8 [ 140.743464][ T6921] [ 141.339925][ T6923] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 141.350600][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.0.361 Not tainted syzkaller #0 PREEMPT(full) [ 141.350636][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.350648][ T6923] Call Trace: [ 141.350655][ T6923] [ 141.350664][ T6923] dump_stack_lvl+0x100/0x190 [ 141.350698][ T6923] sysfs_warn_dup.cold+0x1c/0x28 [ 141.350728][ T6923] sysfs_do_create_link_sd+0x113/0x140 [ 141.350757][ T6923] sysfs_create_link+0x61/0xc0 [ 141.350780][ T6923] device_add+0x675/0x1950 [ 141.350807][ T6923] ? __pfx_device_add+0x10/0x10 [ 141.350827][ T6923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.350855][ T6923] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 141.350896][ T6923] wiphy_register+0x1edd/0x2d90 [ 141.350922][ T6923] ? __rtnl_unlock+0xb9/0xf0 [ 141.350953][ T6923] ? __pfx_wiphy_register+0x10/0x10 [ 141.350979][ T6923] ? __asan_memset+0x23/0x50 [ 141.351010][ T6923] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 141.351056][ T6923] ieee80211_register_hw+0x3055/0x4570 [ 141.351106][ T6923] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 141.351138][ T6923] ? __pfx___debug_object_init+0x10/0x10 [ 141.351184][ T6923] ? find_held_lock+0x2b/0x80 [ 141.351208][ T6923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.351237][ T6923] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 141.351271][ T6923] ? __hrtimer_setup+0x208/0x330 [ 141.351305][ T6923] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 141.351360][ T6923] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 141.351398][ T6923] ? __asan_memcpy+0x3c/0x60 [ 141.351430][ T6923] hwsim_new_radio_nl+0xc5f/0x1370 [ 141.351463][ T6923] ? rcu_is_watching+0x12/0xc0 [ 141.351496][ T6923] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 141.351538][ T6923] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 141.351573][ T6923] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 141.351614][ T6923] genl_family_rcv_msg_doit+0x214/0x300 [ 141.351650][ T6923] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 141.351698][ T6923] ? bpf_lsm_capable+0x9/0x10 [ 141.351723][ T6923] ? security_capable+0x80/0x260 [ 141.351750][ T6923] ? ns_capable+0xd2/0xf0 [ 141.351786][ T6923] genl_rcv_msg+0x560/0x800 [ 141.351822][ T6923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.351851][ T6923] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 141.351894][ T6923] netlink_rcv_skb+0x159/0x420 [ 141.351920][ T6923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.351951][ T6923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.351994][ T6923] ? netlink_deliver_tap+0x1ae/0xcc0 [ 141.352026][ T6923] genl_rcv+0x28/0x40 [ 141.352053][ T6923] netlink_unicast+0x585/0x850 [ 141.352087][ T6923] ? __pfx_netlink_unicast+0x10/0x10 [ 141.352124][ T6923] netlink_sendmsg+0x8b0/0xda0 [ 141.352159][ T6923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.352191][ T6923] ? pti_set_user_pgtbl+0x30/0x50 [ 141.352235][ T6923] ____sys_sendmsg+0x9e1/0xb70 [ 141.352264][ T6923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.352297][ T6923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.352329][ T6923] ? __pfx_futex_wake_mark+0x10/0x10 [ 141.352356][ T6923] ___sys_sendmsg+0x190/0x1e0 [ 141.352384][ T6923] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.352451][ T6923] __sys_sendmsg+0x170/0x220 [ 141.352475][ T6923] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.352496][ T6923] ? __x64_sys_futex+0x34f/0x4d0 [ 141.352542][ T6923] ? rcu_is_watching+0x12/0xc0 [ 141.352582][ T6923] do_syscall_64+0x10b/0xf80 [ 141.352614][ T6923] ? clear_bhb_loop+0x40/0x90 [ 141.352642][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.352666][ T6923] RIP: 0033:0x7f632d79cdd9 [ 141.352685][ T6923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.352707][ T6923] RSP: 002b:00007f632e65b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.352730][ T6923] RAX: ffffffffffffffda RBX: 00007f632da16270 RCX: 00007f632d79cdd9 [ 141.352747][ T6923] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000009 [ 141.352761][ T6923] RBP: 00007f632d832d69 R08: 0000000000000000 R09: 0000000000000000 [ 141.352776][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.352788][ T6923] R13: 00007f632da16308 R14: 00007f632da16270 R15: 00007ffdf360c428 [ 141.352820][ T6923] [ 141.412297][ T5711] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 141.550918][ T6942] netlink: 888 bytes leftover after parsing attributes in process `syz.0.366'. [ 141.783260][ T5611] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 141.790937][ T5725] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 141.818017][ T5711] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 141.833743][ T5711] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 141.854110][ T5711] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 141.893001][ T5711] usb 2-1: config 220 has no interface number 2 [ 141.910396][ T5711] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 141.928467][ T5711] usb 2-1: config 220 interface 0 has no altsetting 0 [ 141.936270][ T5725] usb 5-1: device descriptor read/64, error -71 [ 141.939015][ T5711] usb 2-1: config 220 interface 76 has no altsetting 0 [ 141.954962][ T5711] usb 2-1: config 220 interface 1 has no altsetting 0 [ 141.962385][ T5611] usb 3-1: Using ep0 maxpacket: 32 [ 141.969807][ T5711] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 141.969899][ T5611] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 141.979314][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.003551][ T30] audit: type=1400 audit(1778371618.705:339): avc: denied { nlmsg_read } for pid=6951 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.022639][ T5611] usb 3-1: config 0 has no interface number 0 [ 142.031985][ T5711] usb 2-1: Product: syz [ 142.036737][ T5711] usb 2-1: Manufacturer: syz [ 142.047136][ T5711] usb 2-1: SerialNumber: syz [ 142.068011][ T5611] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 142.089760][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.113844][ T5611] usb 3-1: Product: syz [ 142.128852][ T5611] usb 3-1: Manufacturer: syz [ 142.152499][ T5611] usb 3-1: SerialNumber: syz [ 142.192143][ T5725] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 142.267443][ T5611] usb 3-1: config 0 descriptor?? [ 142.290359][ T5711] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 142.295376][ T5611] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 142.335547][ T5711] uvcvideo 2-1:220.0: No valid video chain found. [ 142.342914][ T5711] usb 2-1: selecting invalid altsetting 0 [ 142.388104][ T5711] usb 2-1: selecting invalid altsetting 0 [ 142.403263][ T5725] usb 5-1: device descriptor read/64, error -71 [ 142.408785][ T5711] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 142.487705][ T5711] usb 2-1: USB disconnect, device number 10 [ 142.512456][ T5725] usb usb5-port1: attempt power cycle [ 142.552707][ T5611] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 142.627346][ T5611] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 142.848682][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 142.872643][ T5725] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 142.896027][ T6975] overlayfs: overlapping lowerdir path [ 142.907527][ T5725] usb 5-1: device descriptor read/8, error -71 [ 142.932117][ T5611] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.067607][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 143.076200][ T5739] usb 3-1: USB disconnect, device number 14 [ 143.082262][ T5611] usb 1-1: Using ep0 maxpacket: 16 [ 143.096327][ T5739] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 143.111261][ T6989] netlink: 120 bytes leftover after parsing attributes in process `syz.1.375'. [ 143.114079][ T5611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.132189][ T6989] netlink: 'syz.1.375': attribute type 1 has an invalid length. [ 143.157422][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.163549][ T6989] netlink: 64 bytes leftover after parsing attributes in process `syz.1.375'. [ 143.169201][ T5739] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 143.189921][ T5725] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 143.197752][ T5698] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 143.217873][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.233017][ T5725] usb 5-1: device descriptor read/8, error -71 [ 143.245940][ T5739] quatech2 3-1:0.51: device disconnected [ 143.257978][ T5611] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.295264][ T5611] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.336117][ T5611] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 143.352392][ T5725] usb usb5-port1: unable to enumerate USB device [ 143.360522][ T5611] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.392177][ T5611] usb 1-1: Manufacturer: syz [ 143.405368][ T5698] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.424052][ T5611] usb 1-1: config 0 descriptor?? [ 143.443758][ T5698] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.475207][ T5698] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.512083][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.540103][ T6972] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 143.557246][ T5698] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.842784][ T7000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.376'. [ 143.891981][ T5611] rc_core: IR keymap rc-hauppauge not found [ 143.924614][ T5611] Registered IR keymap rc-empty [ 143.952333][ T5725] usb 4-1: USB disconnect, device number 15 [ 143.959073][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.994598][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.056461][ T5611] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 144.125023][ T5611] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 144.180717][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.253577][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.292244][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.322379][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.353917][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.383231][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.432528][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.472383][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.493225][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.519525][ T7024] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 144.532911][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.540452][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.1.382 Not tainted syzkaller #0 PREEMPT(full) [ 144.540485][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.540498][ T7024] Call Trace: [ 144.540505][ T7024] [ 144.540514][ T7024] dump_stack_lvl+0x100/0x190 [ 144.540549][ T7024] sysfs_warn_dup.cold+0x1c/0x28 [ 144.540581][ T7024] sysfs_do_create_link_sd+0x113/0x140 [ 144.540617][ T7024] sysfs_create_link+0x61/0xc0 [ 144.540642][ T7024] device_add+0x675/0x1950 [ 144.540671][ T7024] ? __pfx_device_add+0x10/0x10 [ 144.540695][ T7024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.540727][ T7024] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 144.540767][ T7024] wiphy_register+0x1edd/0x2d90 [ 144.540792][ T7024] ? __rtnl_unlock+0xb9/0xf0 [ 144.540822][ T7024] ? __pfx_wiphy_register+0x10/0x10 [ 144.540861][ T7024] ? __asan_memset+0x23/0x50 [ 144.540896][ T7024] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 144.540942][ T7024] ieee80211_register_hw+0x3055/0x4570 [ 144.540991][ T7024] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 144.541021][ T7024] ? __pfx___debug_object_init+0x10/0x10 [ 144.541053][ T7024] ? find_held_lock+0x2b/0x80 [ 144.541075][ T7024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.541099][ T7024] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 144.541121][ T7024] ? __hrtimer_setup+0x208/0x330 [ 144.541159][ T7024] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 144.541213][ T7024] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 144.541253][ T7024] ? __asan_memcpy+0x3c/0x60 [ 144.541289][ T7024] hwsim_new_radio_nl+0xc5f/0x1370 [ 144.541323][ T7024] ? rcu_is_watching+0x12/0xc0 [ 144.541359][ T7024] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 144.541404][ T7024] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 144.541438][ T7024] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 144.541477][ T7024] genl_family_rcv_msg_doit+0x214/0x300 [ 144.541513][ T7024] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 144.541558][ T7024] ? bpf_lsm_capable+0x9/0x10 [ 144.541580][ T7024] ? security_capable+0x80/0x260 [ 144.541603][ T7024] ? ns_capable+0xd2/0xf0 [ 144.541642][ T7024] genl_rcv_msg+0x560/0x800 [ 144.541681][ T7024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.541711][ T7024] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 144.541754][ T7024] netlink_rcv_skb+0x159/0x420 [ 144.541787][ T7024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.541821][ T7024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.541877][ T7024] ? netlink_deliver_tap+0x1ae/0xcc0 [ 144.541903][ T7024] genl_rcv+0x28/0x40 [ 144.541928][ T7024] netlink_unicast+0x585/0x850 [ 144.541963][ T7024] ? __pfx_netlink_unicast+0x10/0x10 [ 144.542002][ T7024] netlink_sendmsg+0x8b0/0xda0 [ 144.542037][ T7024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.542064][ T7024] ? pti_set_user_pgtbl+0x30/0x50 [ 144.542109][ T7024] ____sys_sendmsg+0x9e1/0xb70 [ 144.542135][ T7024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.542170][ T7024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.542199][ T7024] ? preempt_schedule_thunk+0x16/0x30 [ 144.542229][ T7024] ? try_to_wake_up+0x5f6/0x1900 [ 144.542258][ T7024] ___sys_sendmsg+0x190/0x1e0 [ 144.542290][ T7024] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.542318][ T7024] ? futex_private_hash_put+0x107/0x1c0 [ 144.542383][ T7024] __sys_sendmsg+0x170/0x220 [ 144.542404][ T7024] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.542423][ T7024] ? __x64_sys_futex+0x34f/0x4d0 [ 144.542467][ T7024] ? rcu_is_watching+0x12/0xc0 [ 144.542502][ T7024] do_syscall_64+0x10b/0xf80 [ 144.542534][ T7024] ? clear_bhb_loop+0x40/0x90 [ 144.542561][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.542583][ T7024] RIP: 0033:0x7fb7dfd9cdd9 [ 144.542606][ T7024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.542636][ T7024] RSP: 002b:00007fb7e0c20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.542662][ T7024] RAX: ffffffffffffffda RBX: 00007fb7e0016270 RCX: 00007fb7dfd9cdd9 [ 144.542676][ T7024] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 144.542687][ T7024] RBP: 00007fb7dfe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 144.542699][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.542711][ T7024] R13: 00007fb7e0016308 R14: 00007fb7e0016270 R15: 00007ffd1711c418 [ 144.542739][ T7024] [ 144.960053][ T5611] mceusb 1-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 144.975067][ T5611] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 144.995473][ T5611] usb 1-1: USB disconnect, device number 9 [ 145.038438][ T7026] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 145.065264][ T7026] CPU: 1 UID: 0 PID: 7026 Comm: syz.1.382 Not tainted syzkaller #0 PREEMPT(full) [ 145.065302][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.065318][ T7026] Call Trace: [ 145.065326][ T7026] [ 145.065338][ T7026] dump_stack_lvl+0x100/0x190 [ 145.065377][ T7026] sysfs_warn_dup.cold+0x1c/0x28 [ 145.065416][ T7026] sysfs_do_create_link_sd+0x113/0x140 [ 145.065449][ T7026] sysfs_create_link+0x61/0xc0 [ 145.065480][ T7026] device_add+0x675/0x1950 [ 145.065512][ T7026] ? __pfx_device_add+0x10/0x10 [ 145.065538][ T7026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 145.065570][ T7026] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 145.065615][ T7026] wiphy_register+0x1edd/0x2d90 [ 145.065643][ T7026] ? __rtnl_unlock+0xb9/0xf0 [ 145.065679][ T7026] ? __pfx_wiphy_register+0x10/0x10 [ 145.065709][ T7026] ? __asan_memset+0x23/0x50 [ 145.065748][ T7026] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 145.065801][ T7026] ieee80211_register_hw+0x3055/0x4570 [ 145.065856][ T7026] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 145.065890][ T7026] ? __pfx___debug_object_init+0x10/0x10 [ 145.065930][ T7026] ? find_held_lock+0x2b/0x80 [ 145.065955][ T7026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 145.065985][ T7026] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 145.066014][ T7026] ? __hrtimer_setup+0x208/0x330 [ 145.066058][ T7026] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 145.066120][ T7026] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 145.066164][ T7026] ? __asan_memcpy+0x3c/0x60 [ 145.066201][ T7026] hwsim_new_radio_nl+0xc5f/0x1370 [ 145.066238][ T7026] ? rcu_is_watching+0x12/0xc0 [ 145.066275][ T7026] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 145.066321][ T7026] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 145.066357][ T7026] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 145.066400][ T7026] genl_family_rcv_msg_doit+0x214/0x300 [ 145.066439][ T7026] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 145.066485][ T7026] ? bpf_lsm_capable+0x9/0x10 [ 145.066509][ T7026] ? security_capable+0x80/0x260 [ 145.066536][ T7026] ? ns_capable+0xd2/0xf0 [ 145.066573][ T7026] genl_rcv_msg+0x560/0x800 [ 145.066611][ T7026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.066662][ T7026] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 145.066718][ T7026] netlink_rcv_skb+0x159/0x420 [ 145.066755][ T7026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.066793][ T7026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.066838][ T7026] ? netlink_deliver_tap+0x1ae/0xcc0 [ 145.066872][ T7026] genl_rcv+0x28/0x40 [ 145.066903][ T7026] netlink_unicast+0x585/0x850 [ 145.066945][ T7026] ? __pfx_netlink_unicast+0x10/0x10 [ 145.066986][ T7026] netlink_sendmsg+0x8b0/0xda0 [ 145.067018][ T7026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.067049][ T7026] ? pti_set_user_pgtbl+0x30/0x50 [ 145.067111][ T7026] ____sys_sendmsg+0x9e1/0xb70 [ 145.067148][ T7026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.067180][ T7026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.067217][ T7026] ? __pfx_futex_wake_mark+0x10/0x10 [ 145.067248][ T7026] ___sys_sendmsg+0x190/0x1e0 [ 145.067283][ T7026] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.067355][ T7026] __sys_sendmsg+0x170/0x220 [ 145.067380][ T7026] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.067402][ T7026] ? __x64_sys_futex+0x34f/0x4d0 [ 145.067451][ T7026] ? rcu_is_watching+0x12/0xc0 [ 145.067493][ T7026] do_syscall_64+0x10b/0xf80 [ 145.067525][ T7026] ? clear_bhb_loop+0x40/0x90 [ 145.067556][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.067580][ T7026] RIP: 0033:0x7fb7dfd9cdd9 [ 145.067603][ T7026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.067626][ T7026] RSP: 002b:00007fb7e0bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.067650][ T7026] RAX: ffffffffffffffda RBX: 00007fb7e0016360 RCX: 00007fb7dfd9cdd9 [ 145.067667][ T7026] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000a [ 145.067683][ T7026] RBP: 00007fb7dfe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 145.067700][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.067714][ T7026] R13: 00007fb7e00163f8 R14: 00007fb7e0016360 R15: 00007ffd1711c418 [ 145.067748][ T7026] [ 145.475567][ T5711] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 145.642043][ T5711] usb 3-1: Using ep0 maxpacket: 32 [ 145.653533][ T5711] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 145.677463][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.708852][ T30] audit: type=1400 audit(1778371622.405:340): avc: denied { name_connect } for pid=7035 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 145.736306][ T5711] usb 3-1: config 0 descriptor?? [ 145.767820][ T7039] loop9: detected capacity change from 0 to 8 [ 145.784410][ T30] audit: type=1400 audit(1778371622.495:341): avc: denied { listen } for pid=7035 comm="syz.3.390" lport=39807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.794957][ T5711] as10x_usb: device has been detected [ 145.810002][ T30] audit: type=1400 audit(1778371622.495:342): avc: denied { accept } for pid=7035 comm="syz.3.390" lport=39807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.816541][ T7039] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 145.853931][ T7039] loop9: partition table partially beyond EOD, truncated [ 145.864129][ T7039] loop9: p1 size 81768186 extends beyond EOD, truncated [ 145.894036][ T5711] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 145.925689][ T30] audit: type=1400 audit(1778371622.635:343): avc: denied { read } for pid=7042 comm="syz.0.392" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.970297][ T7021] ------------[ cut here ]------------ [ 145.976210][ T7021] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 145.976239][ T7021] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x94f/0x1b10, CPU#1: syz.2.385/7021 [ 145.986001][ T5711] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 145.993646][ T7021] Modules linked in: [ 146.006933][ T7021] CPU: 1 UID: 0 PID: 7021 Comm: syz.2.385 Not tainted syzkaller #0 PREEMPT(full) [ 146.016877][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.027033][ T7021] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 146.032527][ T7021] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 5d a0 4b 05 45 85 f6 75 13 48 8d 3d d1 cc 4e 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 146.052294][ T7021] RSP: 0018:ffffc9001dc57a50 EFLAGS: 00010246 [ 146.058504][ T7021] RAX: 0000000000000003 RBX: ffff888028450b30 RCX: 1ffffffff21afc1c [ 146.066589][ T7021] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90db0d60 [ 146.074666][ T7021] RBP: ffffc9001dc57bc0 R08: 0000000000000001 R09: 0000000000000000 [ 146.077813][ T5632] udevd[5632]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 146.083291][ T7021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 146.101201][ T7021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.109743][ T7021] FS: 00007fef8ffee6c0(0000) GS:ffff888124472000(0000) knlGS:0000000000000000 [ 146.112118][ T5711] as10x_usb: error during firmware upload part1 [ 146.118744][ T7021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.131589][ T7021] CR2: 0000001b3351aff8 CR3: 00000000713d7000 CR4: 00000000003526f0 [ 146.139694][ T7021] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 146.145987][ T30] audit: type=1400 audit(1778371622.825:344): avc: denied { firmware_load } for pid=5711 comm="kworker/0:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 146.147804][ T7021] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 146.180957][ T7021] Call Trace: [ 146.184337][ T7021] [ 146.187029][ T5711] Registered device nBox DVB-T Dongle [ 146.187275][ T7021] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 146.198723][ T7021] ? __mutex_lock+0x26d/0x1b10 [ 146.203883][ T7021] ? dmx_section_feed_start_filtering+0x56/0x660 [ 146.210267][ T7021] ? find_held_lock+0x2b/0x80 [ 146.215005][ T7021] ? __pfx___mutex_lock+0x10/0x10 [ 146.220061][ T7021] ? __pfx___mutex_lock+0x10/0x10 [ 146.225146][ T7021] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 146.230826][ T7021] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 146.236541][ T7021] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 146.242053][ T7021] dmx_section_feed_start_filtering+0x3a8/0x660 [ 146.248332][ T7021] dvb_dmxdev_filter_start+0x767/0xdd0 [ 146.253854][ T7021] dvb_demux_do_ioctl+0xe64/0x1200 [ 146.258989][ T7021] dvb_usercopy+0x167/0x340 [ 146.263582][ T7021] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 146.269142][ T7021] ? __pfx_dvb_usercopy+0x10/0x10 [ 146.274291][ T7021] ? selinux_file_ioctl+0x13b/0x290 [ 146.279530][ T7021] ? selinux_file_ioctl+0xb6/0x290 [ 146.285204][ T7021] dvb_demux_ioctl+0x29/0x40 [ 146.289809][ T7021] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 146.295145][ T7021] __x64_sys_ioctl+0x18e/0x210 [ 146.300160][ T7021] do_syscall_64+0x10b/0xf80 [ 146.305211][ T7021] ? clear_bhb_loop+0x40/0x90 [ 146.309936][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.315929][ T7021] RIP: 0033:0x7fef91d9cdd9 [ 146.320349][ T7021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.339992][ T7021] RSP: 002b:00007fef8ffee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.348449][ T7021] RAX: ffffffffffffffda RBX: 00007fef92015fa0 RCX: 00007fef91d9cdd9 [ 146.356587][ T7021] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 146.364617][ T7021] RBP: 00007fef91e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 146.372645][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.380629][ T7021] R13: 00007fef92016038 R14: 00007fef92015fa0 R15: 00007fffa797b2d8 [ 146.388701][ T7021] [ 146.391746][ T7021] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 146.399029][ T7021] CPU: 1 UID: 0 PID: 7021 Comm: syz.2.385 Not tainted syzkaller #0 PREEMPT(full) [ 146.408220][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.418263][ T7021] Call Trace: [ 146.421530][ T7021] [ 146.424448][ T7021] dump_stack_lvl+0x100/0x190 [ 146.429138][ T7021] vpanic+0x552/0x970 [ 146.433110][ T7021] ? __pfx_vpanic+0x10/0x10 [ 146.437601][ T7021] ? lock_release+0x245/0x310 [ 146.442285][ T7021] panic+0xd1/0xe0 [ 146.446002][ T7021] ? __pfx_panic+0x10/0x10 [ 146.450408][ T7021] check_panic_on_warn.cold+0x19/0x34 [ 146.455770][ T7021] ? __mutex_lock+0x94f/0x1b10 [ 146.460538][ T7021] __warn.cold+0x191/0x328 [ 146.464939][ T7021] __report_bug+0x296/0x3d0 [ 146.469436][ T7021] ? __mutex_lock+0x94f/0x1b10 [ 146.474195][ T7021] ? __pfx___report_bug+0x10/0x10 [ 146.479218][ T7021] ? tick_program_event+0xb0/0x140 [ 146.484328][ T7021] ? hrtimer_reprogram+0x165/0x6c0 [ 146.489452][ T7021] report_bug_entry+0xe1/0x290 [ 146.494217][ T7021] ? __mutex_lock+0x956/0x1b10 [ 146.498993][ T7021] handle_bug+0x1cd/0x2a0 [ 146.503336][ T7021] exc_invalid_op+0x17/0x50 [ 146.507846][ T7021] asm_exc_invalid_op+0x1a/0x20 [ 146.512700][ T7021] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 146.518077][ T7021] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 5d a0 4b 05 45 85 f6 75 13 48 8d 3d d1 cc 4e 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 146.537685][ T7021] RSP: 0018:ffffc9001dc57a50 EFLAGS: 00010246 [ 146.543749][ T7021] RAX: 0000000000000003 RBX: ffff888028450b30 RCX: 1ffffffff21afc1c [ 146.551715][ T7021] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90db0d60 [ 146.559686][ T7021] RBP: ffffc9001dc57bc0 R08: 0000000000000001 R09: 0000000000000000 [ 146.567643][ T7021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 146.575606][ T7021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.583575][ T7021] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 146.589213][ T7021] ? __mutex_lock+0x26d/0x1b10 [ 146.594002][ T7021] ? dmx_section_feed_start_filtering+0x56/0x660 [ 146.600323][ T7021] ? find_held_lock+0x2b/0x80 [ 146.604994][ T7021] ? __pfx___mutex_lock+0x10/0x10 [ 146.610029][ T7021] ? __pfx___mutex_lock+0x10/0x10 [ 146.615051][ T7021] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 146.620686][ T7021] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 146.626308][ T7021] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 146.631769][ T7021] dmx_section_feed_start_filtering+0x3a8/0x660 [ 146.638014][ T7021] dvb_dmxdev_filter_start+0x767/0xdd0 [ 146.643471][ T7021] dvb_demux_do_ioctl+0xe64/0x1200 [ 146.648579][ T7021] dvb_usercopy+0x167/0x340 [ 146.653085][ T7021] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 146.658618][ T7021] ? __pfx_dvb_usercopy+0x10/0x10 [ 146.663651][ T7021] ? selinux_file_ioctl+0x13b/0x290 [ 146.668845][ T7021] ? selinux_file_ioctl+0xb6/0x290 [ 146.673949][ T7021] dvb_demux_ioctl+0x29/0x40 [ 146.678538][ T7021] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 146.683822][ T7021] __x64_sys_ioctl+0x18e/0x210 [ 146.688575][ T7021] do_syscall_64+0x10b/0xf80 [ 146.693169][ T7021] ? clear_bhb_loop+0x40/0x90 [ 146.697848][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.703727][ T7021] RIP: 0033:0x7fef91d9cdd9 [ 146.708132][ T7021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.727728][ T7021] RSP: 002b:00007fef8ffee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.736133][ T7021] RAX: ffffffffffffffda RBX: 00007fef92015fa0 RCX: 00007fef91d9cdd9 [ 146.744099][ T7021] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 146.752062][ T7021] RBP: 00007fef91e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 146.760024][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.767986][ T7021] R13: 00007fef92016038 R14: 00007fef92015fa0 R15: 00007fffa797b2d8 [ 146.775951][ T7021] [ 146.779311][ T7021] Kernel Offset: disabled [ 146.783632][ T7021] Rebooting in 86400 seconds..