last executing test programs: 7.171986563s ago: executing program 1 (id=2128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000005c0)=0xd) ioctl$sock_SIOCADDDLCI(r6, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x7) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4f0000a2", @ANYRES16=r2, @ANYBLOB="20002abd7000fedbdf256b00000008000300", @ANYRES32=r5, @ANYBLOB="0a001a0008021100000100000a000600ffffffffffff00000a00060008021100000000000a001a000802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 7.061720733s ago: executing program 1 (id=2129): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40010) shutdown(0xffffffffffffffff, 0x1) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x2, 0x20000002, 0x3) r2 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x8, &(0x7f00000000c0)={0x22, "d69a00000000001c028f7e453b653a1478005a31589cff42e82e58b2b3b9de670d"}}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001400)="e8", 0x1, 0x48080, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000500)={0x4, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xd, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0xfffffff2, 0x81, 0x2}, {0xc0000001, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1282690100020000002000000000000000fb1da92042bbf2080003008461000000000000780076057f8c6accc5e6b96ef8c6090400000903"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$midi(0x4, 0x6c, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x61, 0x10, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x5, [@midi_out_jack={0xd, 0x24, 0x3, 0x2, 0xfd, 0x3, [{0xff, 0xc}, {0x80, 0x80}, {0x6, 0x72}], 0xb}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf9, 0x10}, @midi_out_jack={0x9, 0x24, 0x3, 0x0, 0x8, 0x1, [{0x0, 0x9}], 0x3}, @midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x4, 0x4, [{0x90, 0x9}, {0x6, 0x8}, {0x8, 0xb}, {0x7, 0x8}], 0xdd}], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xb6, 0x2, 0x81, {0x14, 0x25, 0x1, 0x10, "111bb7b1b189ea2248310070d00d91bd"}}}]}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x6, 0x45, 0x1, 0x78, 0xfc}, 0xed, &(0x7f0000000340)={0x5, 0xf, 0xed, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xf2, "c6747a605ec6ff07109df9bfd10abcf1"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0xa, 0x7ff}, @generic={0xa4, 0x10, 0x3, "06c347819f4d294b2255a61edc8aae440f29fbb5116b3e6d3675775a14095b5b7eb2a0b3943d85f74c1297d0d143b40672a164e17907e608c321b09ee7b987f1b8125c46968818939c1a7befe4253310a94c758e03a3c0f8f07e206039bde0712b48fe4d7515d04d0c1ac34981090637c9dffd55c88aea35ef82791a55632cb25f17cfec51823331d60d04543bb2489673d222265354e8f78600b22c5e74795ed6"}, @generic={0x15, 0x10, 0xb, "20ab4ae5b37c82ed7ac935700b58c38e43cc"}, @generic={0x14, 0x10, 0xa, "3c1bc6c6f4451b82e3e7ca8b4e03d31f56"}]}, 0x5, [{0xeb, &(0x7f0000000440)=@string={0xeb, 0x3, "494aff228fb20ef2c4da022396b8b03f2b8d7df6be14d39cfa061594aba07c31a7670279e6974be64767469c8d10ad3b493c83e76fbf1264ae45dc0bc60440690144d1c8b9f2925f4cd24d693f1690b02616c0b194822c59caed53b3e88c695545ffae7ae5beffc420a44f1fdd3263ff12036c26fa647fcbb9e3a449863aa1c2745347c344d930ed4a638354d0527329d2788a12d35914420bc64d0c4bcb41d6fa0bdfde5b65dfb83c584ffcdca4a97ecca3801ac8ce63be7ba87dffe1086911e42fa9c0669d2f769509181fce4bc6f5af61c493884c136b4034e94bc9561e8254a1c6e2fdee43a499"}}, {0xd8, &(0x7f0000000540)=@string={0xd8, 0x3, "08fea7c0284f13ccbbfc2005cd804fb3d77d7af8448a9973601f8ad107a40741b80927ba1a0db34d3dcc5502991437155379919fcd737588bacb288616df3aa3e80afb65c072185dba6dfbad1d91cf88082b42223a0842b7174413995e738a6123dd82113b431a80670cc0ab984c7150b4896ff8207da2c5330c207b8cc65c70f22435873ca08c06a09a5f5c685d32dd26354183e3a5310027c74c5931ce94a99048e150ddf60853032ca35ccfc1c207c7ea83e781e66e510bb4f59f04d30398ddd9a6cc4f93e4cd064399b5603604a0c6591cb45c08"}}, {0xf2, &(0x7f0000000640)=@string={0xf2, 0x3, "113096937e22e501c855ddd110e9a40598add918becae655e81fa505b49411b8b64ab999d570e2cbd5aacc19c6ce41fa6108f847a5c68118fc23540272e48ae9718801b125c1dcd1b5ab8c200c468246de26f09b8d426b35862e936c89d5cf640c4c8b47e535fec376524af66303840198916ea3c9e7b43208749b122bc716a91674e38515a38b0e29ecc556468a379a2eb67de261886d278133cbf529722be6c2cf2e04218fe017edefdf9176622d1336103867d8a19a8b37012238d7ece802a6f9f66de0197072c56b53644465d50c2964f8d2d513928db31897e99ab350fef1c60fd852b7ee01439915689aaad5a1"}}, {0x6a, &(0x7f0000000240)=@string={0x6a, 0x3, "ed23d955463552e49226e8e8d43d6868a0d85d89da576c8b4d9aa4a85bb7d135419638488c99b602fd340889ed7e2b8be79d5fe0faf2fe19f6a0d806c39585dbab6beeabb40532f97e0b994a5ee59df12493259916ec2266315f3366716a091b37a50b7b76112950"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x809}}]}) syz_usb_ep_write(r5, 0x2b, 0x85, &(0x7f0000000080)="44b30dfbdd8cf5f7dd8b40bdce2d761c50f08a0f493c18754ab7bd727fb98bb6d8744c148b3b7f6d3c9ea9d51294449734aaf16f2c6e5a26b3019ad7a3cc4d1f211ddd3be7f4a3ea110b9ca3376d9cdd6afa5e03a85044ca07da530a322199a11081933f3c8b6eb0233de47f48fae94b859a4150802f72f2381a056110a913218966e0f18d") 5.498991554s ago: executing program 0 (id=2140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="dbe104", 0x3, 0x20008894, 0x0, 0x0) 5.304181622s ago: executing program 0 (id=2141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="dbe104", 0x3, 0x20008894, 0x0, 0x0) 4.860360679s ago: executing program 0 (id=2142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="cc1fd85b04a2c61ac0b40887bd5513dce5eb6f3d74c3da689187e189076051235b7657ed33613cedc48c9e4578b8ee432fb73caf87f251bab814d369bcbeef55fefb97bc", 0x44}], 0x1, &(0x7f00000005c0)=[@ip_retopts={{0x124, 0x0, 0x7, {[@rr={0x7, 0xf, 0x3c, [@remote, @multicast2, @multicast2]}, @cipso={0x86, 0x14, 0x0, [{0x5, 0x3, "bc"}, {0x5, 0xb, "a7f1efd042883a991e"}]}, @ssrr={0x89, 0x1f, 0x24, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @remote, @local, @rand_addr=0x64010101, @multicast1]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @lsrr={0x83, 0x1f, 0xa4, [@rand_addr=0x64010100, @broadcast, @multicast1, @local, @multicast2, @loopback, @multicast1]}, @cipso={0x86, 0x5b, 0x3, [{0x2, 0x11, "df1586d7f7518f73addd474553c587"}, {0x6, 0x6, "daa152ef"}, {0x1, 0x8, "047abb3c799c"}, {0x2, 0xa, "dd68428b28c58f21"}, {0x7, 0x6, "1529cb1e"}, {0x6, 0x11, "25b0ec3cb9992c070a6efb32f0579a"}, {0x6, 0x8, "646bf63de93c"}, {0x0, 0xd, "58d820b322ab9440185fb0"}]}, @timestamp_addr={0x44, 0x44, 0xd9, 0x1, 0x7, [{@loopback, 0x3de8}, {@loopback, 0x4e}, {@rand_addr=0x64010101, 0x1}, {@multicast2, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xe5ba}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x10001}, {@private=0xa010100, 0x2}, {@local, 0x6}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfebf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_retopts={{0x148, 0x0, 0x7, {[@rr={0x7, 0x23, 0x8, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @rand_addr=0x64010101, @broadcast]}, @timestamp={0x44, 0x28, 0x4f, 0x0, 0x0, [0x2, 0x3bd0, 0xffffffff, 0x3, 0x3, 0x1, 0xd5b, 0x9f, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc1, 0x3, 0x8, [{@multicast2, 0x10}, {@remote, 0x5}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x5}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@multicast1, 0x4}]}, @timestamp={0x44, 0x10, 0xd1, 0x0, 0x6, [0xffff, 0x10, 0x3ef91e91]}, @cipso={0x86, 0x4b, 0x2, [{0x6, 0xb, "095c81604c308f8678"}, {0x5, 0x3, "12"}, {0x0, 0x5, "69e96d"}, {0x5, 0xb, "a24227801783fa1316"}, {0x2, 0x4, "edc7"}, {0x1, 0x12, "72e40102a3419b9fe44a83c7e49c1162"}, {0x5, 0x11, "a4f971ac46dec8c84effa4f42762f0"}]}, @rr={0x7, 0x27, 0x46, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @private=0xa010102]}, @timestamp_addr={0x44, 0x1c, 0x1c, 0x1, 0x7, [{@multicast1, 0x1}, {@loopback, 0xa707}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x13, 0x97, [@rand_addr=0x64010102, @private=0xa010102, @empty, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x817}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x88, 0x9, "85ae1456801cf8"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x38}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0x30, 0x1, 0x2, [{@broadcast, 0x9}, {@broadcast, 0x3}, {@loopback, 0x8}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x80000000}, {@rand_addr=0x64010102, 0xff}, {@empty}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x22, 0xffffffffffffffff, [{0x0, 0x7, "82743ddf56"}, {0x6, 0xd, "dfeec8ba8fa2cbf13df811"}, {0x7, 0x8, "43267301daf3"}]}, @cipso={0x86, 0x6}]}}}], 0x3a8}, 0x8014) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) (async) shutdown(r0, 0x1) (async) r1 = socket(0x1000000000000010, 0x80802, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201f702000000201e0037328360561c03010902600003010300080904000000010100000a240109000a00020102090401000001028a000904010101110200000905010910000705010725010455370209040200000102000009040201010102000009059309ef0708f91207250104c50000"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) (async) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5500000018007fd500fe01b2a4a280930a46000000a843089100fe801100080008000c00085540002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x20000004) 3.999490545s ago: executing program 1 (id=2147): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10, 0x800) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x30a, 0x2, 0x10, 0x0, 0x5, @remote}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb76, 0x6}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x280}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x48d4}, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x14c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10, 0x1e}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf8, 0xac, "eeb336e4b8759bce54421bc2602afebcf4cdde6928d3871f184fd4d27ed57d811ed33919bb7381a35e67f7fd1b06ef4bc2465d3c9ef0ae3b3c11354019de22942f335e635f138948e9d4e2ffa60b4be0424700239e63b0786d693a1ba7e13bccc8e44dc79a59ef675c7ef5e812bac817a82b9098b8ace8bfa12043f31a53f768fe1f7b9a7718d12ddcd93e30446719220582d1ae8a2537aec022debd283e2b088e35e435f9fabd79cf8a76c52e5156ec9cb4efb58a4eab2fa92018eac246711267f8b5ad4d094e149a8925f309af3b3cdef7a24f3c51a6f1b16a9501ade466183aabf339568a726551e374a3488385dbdc6dc601"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x100, 0x0, 0x5, 0x7]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x546}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000500) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x458300, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000580)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r6, 0xc02064a5, &(0x7f0000000680)={r7, 0x1, &(0x7f00000005c0)=[0x2], &(0x7f0000000600)=[0x5, 0x3ca, 0x0, 0xd85b, 0x100], &(0x7f0000000640)=[0xf77, 0x2]}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000f80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x88900002}, 0xc, &(0x7f0000000f40)={&(0x7f0000000700)={0x80c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x66, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x7}, {0x7, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x7}, {0x2, 0x4}, {0x2, 0x2}, {0x0, 0x1}, {0x2, 0x7}, {0x5}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x1}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x2, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x3, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x6, 0x8}, {0x5, 0x7}, {0x6, 0x1}, {0x6, 0x2}, {0x6}, {0x7, 0x9}, {0x1, 0x3}, {0x5, 0x5}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x5, 0x9}, {0x3, 0x7}, {0x5, 0x9}, {0x5, 0x7}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x6}, {0x0, 0x5}, {0x6, 0xa}, {0x3, 0xa}, {0x0, 0x1}, {0x5, 0x3}, {0x5, 0xa}, {0x4, 0x2}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x5}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x6}, {0x3, 0x7}, {0x2, 0x2}, {0x3, 0x6}, {0x1, 0x5}, {0x7, 0x2}, {0x7, 0x5}, {0x7, 0x2}, {0x6, 0xa}, {0x5, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x5, 0x9}, {0x5}, {0x0, 0x2}, {0x7, 0x8}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0x1}, {0x2, 0xa}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x4}, {0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x4}, {0x3, 0x7}, {0x5, 0x7}, {0x4, 0x8}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x8}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x9}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x1}, {0x1, 0x4}, {0x7, 0x5}, {0x5}, {0x2}, {0x4, 0x3}, {}, {0x6, 0x2}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x1}, {0x5, 0x4}, {0x3, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x6, 0x2}, {0x1, 0x8}, {0x5, 0x3}, {0x6, 0x4}, {0x6, 0xa}, {}, {0x5, 0x4}, {0x7, 0x3}, {0x2, 0x1}, {0x7, 0x9}, {0x3, 0x9}, {0x1, 0x5}, {0x3, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x1}, {0x4, 0x1}, {0x3, 0xa}, {0x4, 0x1}, {0x2, 0x2}, {0x3, 0x9}, {0x5, 0x7}, {0x2, 0x9}, {0x4, 0xa}, {0x7, 0x7}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x8}, {0x3, 0x1}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x6c8b, 0x3, 0x7, 0x3ff, 0x401, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1b53, 0x6, 0x4, 0x1, 0xa, 0x401, 0x7, 0x2]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfff8, 0x1, 0x0, 0x2, 0x80, 0x7, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x12, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x3, 0x24, 0x2, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x0, 0x80, 0x6, 0xfff0, 0x7, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x324, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x40, 0xcc53, 0x5, 0x1, 0x800, 0xd6]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x0, 0x30, 0x18, 0x2, 0x60, 0x2, 0x1, 0x1, 0x60, 0x6c, 0x12, 0x5a, 0x4c, 0x5, 0x24, 0x70, 0xb, 0x4, 0x16, 0x48, 0xb, 0x60, 0xb, 0xb, 0x2]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x0, 0x6, 0x2, 0x1b, 0x24, 0x4, 0x4, 0x48, 0x60, 0xc, 0x36, 0x1, 0x11, 0xb, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x5, 0x36, 0x16, 0x60, 0x4, 0x48, 0x6, 0x4, 0x6, 0x1b, 0x6, 0x18, 0x12, 0x36, 0x24, 0x60, 0x30, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf, 0x3, 0x4, 0x7, 0x40, 0x9a, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5d, 0x9, 0x16, 0x24, 0x1b, 0x1, 0x2, 0x48, 0x18, 0x6c, 0x1b, 0x6c, 0x30, 0x30, 0x12, 0x1b, 0xb, 0x6, 0x5, 0x1, 0x5, 0x48, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x527, 0x4, 0xff, 0x7, 0xd5, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x8, 0xe, 0x7f, 0xa, 0x2, 0x25b]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0xc, 0x9, 0x16, 0x18, 0x30, 0xc, 0x12, 0x9, 0xcb3b507c9c41ee99, 0x2, 0x16, 0x3, 0x71, 0x3, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x93, 0x1, 0xff, 0x3, 0x2, 0x4, 0x6, 0xa9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xfdb4, 0x93, 0x1fd4, 0xffff, 0x5, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x4, 0x32, 0x53f, 0x7, 0x0, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x5, 0xb, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa5, 0x8, 0x6, 0x6, 0x5, 0x1, 0xc, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9000, 0x1d5c, 0x68, 0x5, 0x8000, 0x0, 0x49]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8c53, 0x7, 0x9, 0x9, 0x2, 0x8001, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x25, 0x0, 0x8, 0x9, 0x5, 0x5, 0x4]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x2}, {}, {0x1, 0x3}, {0x5, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x1}, {0x3, 0x9}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x3, 0xa}, {0x6, 0x4}, {0x5, 0x8}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x2}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x3}, {0x2, 0x7}, {0x3, 0x1}, {0x2}, {0x5, 0xa}, {0x2, 0x9}, {0x7, 0x2}, {0x7, 0x2}, {0x5, 0x5}, {0x7, 0x3}, {0x1, 0x7}, {0x2, 0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x148, 0x5, 0x7, 0x9, 0x9, 0x3, 0x1, 0x2]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7}, {0x1, 0x3}, {0x5, 0x5}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x7, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x1, 0x9, 0x4, 0x3, 0x7, 0x9, 0x3]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8001, 0x13, 0x7, 0x6, 0x1, 0xa062, 0x81]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0xa}, {0x3, 0x5}, {0x1, 0xa}, {0x1, 0x6}, {0x6, 0x7}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x5}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x4}, {0x6, 0x8}, {}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x3}, {0x3, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x8}, {0x7}, {0x2, 0x1}, {0x6, 0x1}, {0x6, 0x3}, {0x5, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x2}, {0x2, 0x5}, {0x3, 0x9}, {0x2, 0x3}, {0x0, 0x2}, {0x3}, {0x1, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x6702, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x0, 0x1000, 0xf, 0xc657, 0x9, 0x7]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x800, 0x2, 0x8000, 0x5, 0x71]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x63, 0x1b, 0xb, 0x48, 0x4, 0x9, 0x12, 0x5, 0x1b, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x3}, {0x2, 0xa}, {0x7, 0x2}, {0x7, 0x8}, {0x7, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x358, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x18, 0x12, 0x6c, 0xb, 0x5, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x2, 0x15, 0x4a5, 0xfff8, 0xe490, 0xc6]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x6}, {0x5, 0x3}, {0x0, 0x8}, {0x5}, {0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x7, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x7, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x1b}, {0x1, 0x6}, {0x6, 0x3}, {0x4, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x6}, {0x1, 0x3}, {0x4, 0x5}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x7, 0x7}, {0x3, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x7}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x6}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0x2}, {0x7, 0x5}, {0x4, 0x3}, {0x5, 0x5}, {0x4, 0x7}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0xa}, {0x1, 0x4}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff74, 0x5, 0x40, 0x7f, 0x9, 0x9, 0x7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x0, 0x1b, 0xb, 0x9, 0x59, 0x6c, 0x6c, 0x12, 0x60, 0x6c, 0x5, 0x3, 0xb, 0x30, 0x4e, 0x2]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x8}, {0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x6}, {0x7}, {0x3, 0x8}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x6}, {}, {0x3, 0x4}, {0x7, 0x9}, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0x3}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0xa}, {}, {0x7, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0x6}, {0x6, 0x2}, {0x2, 0x3}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x2, 0x8}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0x6}, {0x6}, {0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1}, {0x7, 0x8}, {0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x7, 0x5}, {0x3, 0x4}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x4}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x3}, {0x0, 0x7}, {0x5}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x5, 0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x3, 0x6}, {0x2, 0x8}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x1}, {0x4, 0x8}, {0x1, 0x3}, {0x7, 0x8}, {0x6, 0x7}, {0x5, 0x9}, {0x2, 0x8}, {0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x4, 0x3}, {0x5, 0x1}, {0x2, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x0, 0x6}, {0x0, 0x8}, {0x6}, {0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x8, 0x54bb, 0xc6, 0x1, 0x40, 0xfff7, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x16f, 0x5, 0x4, 0x7, 0x3ff, 0x0, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x67b1, 0x1, 0x1, 0x939, 0xfff, 0x200, 0x7]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x48, 0x1, 0x60, 0x6c, 0x9, 0x16, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x1, 0x1, 0x4, 0x1b, 0x18, 0x30, 0x4, 0x16, 0x18, 0x2, 0x6a, 0x48, 0x6, 0xb, 0x30, 0x24, 0x4, 0x16, 0xc, 0xb, 0x12, 0x1b, 0x3, 0x1b, 0x30, 0x24]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x3}, {0x1, 0xa}, {0x1}, {0x3, 0x3}, {0x5, 0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x9, 0x5, 0x0, 0xde1f, 0x70, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0xa}, {0x7, 0x7}, {0x7}, {0x6, 0x2}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x7}, {0x7}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x5, 0x1}, {0x2}, {0x0, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff5, 0x101, 0x101, 0x7, 0x2, 0x5, 0xd5, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4d1, 0x0, 0xb, 0xa1f0, 0x7, 0x3, 0x400, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0xf819, 0xffff, 0x5, 0x3, 0xa, 0x81a]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb166, 0xe8, 0x1, 0x2b3b, 0x0, 0x1, 0x4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x200, 0x9, 0x0, 0x3, 0x1d77, 0xa138]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x779, 0x7, 0x4, 0x3, 0x1, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x3c6, 0x2, 0xd, 0x1, 0x2, 0x3]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0xa}, {0x5, 0x9}, {0x2, 0x5}, {0x2, 0x7}, {0x4, 0x8}, {0x5, 0x5}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x7, 0x5}, {0x7, 0x9}, {0x6, 0x5}, {0x7, 0x8}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x6}, {0x5, 0x4}, {0x6, 0x6}, {0x6}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {}, {0x5, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x6, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x5}, {0x1}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x9}, {0x6, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x9}, {}, {0x7, 0x7}, {0x3, 0xa}, {0x5, 0x9}, {0x2, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x0, 0xa}, {0x5, 0xa}, {0x6, 0x4}, {0x1, 0x8}, {0x7, 0x6}, {0x7, 0x2}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0xfffe, 0x3, 0x3, 0x200, 0x2, 0xff]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x8}, {0x6}, {0x0, 0xa}, {0x1, 0x8}, {0x1}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x4}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x3dde, 0xb, 0x1, 0x53, 0x5, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb83a, 0x200, 0x7f, 0x8, 0x5, 0xffff, 0x4, 0x100]}}]}]}]}, 0x80c}}, 0x40080) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r1) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000001040)={0xcc, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd93}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4895}, 0xc000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), r6) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001400)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x154, r9, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x95, 0x3, "d514ebd15ff283e3fa0776664c460ee92f1718d7aa312c57f65ee4242a6ce81b24e58c41af98ce88190d5815630b5aaa94984fc0f9cd649c0613da319dd00dee16efa334ada5b66e9e8917170708e08528bcbf3e2c2db43bc7751284c6caa3a34b1fd0c526749444b3c0db67eef62caf209ab95a6a0011f8550e742b9e49264be609c9a47c726d25318718e518e1b83360"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9aa}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x732}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000001}, 0x24044050) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000001440)) (async) r10 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read$alg(r10, &(0x7f0000001480)=""/105, 0x69) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001540), r5) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0xa8, r11, 0x4535c44dd6ac0bb7, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4865}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x579, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x21}, 0x4000) (async) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x48, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x5a}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4c000) (async) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) (async) r13 = eventfd2(0x8af853b, 0x80001) ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000001800)={0xffffffffffffffff, 0x56, 0x1, r13}) r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001840), 0x2000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r14, 0x11b, 0x5, &(0x7f0000001880)=0x80, 0x4) (async) ioctl$VIDIOC_EXPBUF(r14, 0xc0405610, &(0x7f00000018c0)={0x7, 0xbb04, 0x6, 0x80000}) (async) ioctl$SIOCX25GDTEFACILITIES(r14, 0x89ea, &(0x7f0000001900)) 3.896294887s ago: executing program 1 (id=2148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088804, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote, 0x7}, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000002c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x40000097, 0x2}}], 0x20}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000040)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x12, 0xc9}}}, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) r11 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x24020000) mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x2251024, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000002d80)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926"], 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0xfffffffffffff850, 0xeeee8000, 0x8, 0xffffffffffffffff, 0x3}) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) preadv(r13, &(0x7f0000003180)=[{&(0x7f0000001f80)=""/10, 0xa}], 0x1, 0x4, 0x4) 3.847758026s ago: executing program 3 (id=2150): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x96, 0x47, 0x3f, 0x20, 0x10c4, 0x8244, 0x7275, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x28, 0x6, "", [{{0x9, 0x4, 0x31, 0xe, 0x0, 0x3, 0x0, 0x0, 0x1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002840)={0x24, 0x0, &(0x7f0000002740)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000002ac0)={0x14, 0x0, &(0x7f0000002a40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.60004891s ago: executing program 0 (id=2153): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0xffffff77, 0x1, 0x0, 0x2, 0xcc7, 0x6, 0x7, 0x654, 0x101, 0x2, 0x1, 0x6, 0x4, 0x6, 0xaaca8d0b, 0x3, 0x1a449, 0x6, 0x2, 0x89, 0xd, 0xf23, 0x6, 0xb, 0x8, 0x3, 0x8, 0x804, 0x10000, 0xfffffff8]}) (fail_nth: 6) 3.322966824s ago: executing program 0 (id=2154): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x40, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xe1, 0xcd, 0x31, 0x40, 0x46d, 0x8c6, 0xc2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x2, 0x69, 0x30, 0x2, "", [{{0x9, 0x4, 0xb8, 0x9, 0x0, 0x1, 0x1, 0xd0, 0x9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x616, 0x401, 0x6, 0xff}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}]}]}}]}}]}}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0'}, 0xb) openat2(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r4, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000038c0)=ANY=[@ANYBLOB="200000001e00010a00000000000028bb8ec531a3b6f47e629eda4a7ea9000000"], 0x20}}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x210c000, 0x800, 0x0, 0x3}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x2a}]}) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r8, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e23, 0xa32d, @mcast1, 0x1}, 0x1c, 0x0}, 0x4004090) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000080)=@arm64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.068385846s ago: executing program 1 (id=2155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x100000000, 0x1000045, 0x10000, 0x9, 0xf, 0xfffffffffffffffd, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 6) 1.628579234s ago: executing program 0 (id=2159): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000000000)=[{0x1e, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921fe2c0b9370e56e21421bd29fcb0c911af3"}, {0x9, 0x1801, 0x0, 0x0}], 0x2}) 1.486406744s ago: executing program 2 (id=2161): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2d5868310102030109022400010000000009040000020347d000090509e700008000040905", @ANYBLOB="b7"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_on}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0xfffffffffffffffd, 0x180, 0x2, 0x14, 0xf0, 0x0, 0x7fffffffffffe, 0x5, 0x9, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xbdb], 0xfec00000, 0x1c4213}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000001e0003400004000024000280140001cf81a10cda8008000100e0000001080000000000000000000000000000000000000000000000000000009e3d19c0c71b6275503f72417b9a04aeac12cda0b7ef756b69a0249325895a36220fe9e3350922b507d092d17bb28e81b7edbf06f0b9cd05aec87102484a90b5f50f0cb294ce92d58950f0b7e10b81e885e51ece452351"], 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000000101040000000080000000020000062c0002801401018008000100e000000108000200e00000010c00028005000100000000000600034000040000d7bef8708b79"], 0x40}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r6, 0x0, 0x0, 0x2000, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0, 0x25000}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/84, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x10000, 0xfe, &(0x7f0000000400)=""/254}]}) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x4008af04, &(0x7f0000000040)) 1.258079102s ago: executing program 3 (id=2162): socket$kcm(0x29, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r0 = socket(0x2b, 0x0, 0x3a) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0006}]}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa8, 0x67}}}}, [@NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x10, {0x1, 0x8, 0x56af, 0x9}}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x139e, 0x0, 0x1, 0x0, {0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x5, 0x89}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.152260415s ago: executing program 3 (id=2163): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="ff", 0x1}], 0x1}, 0x815) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0x84) 1.145936077s ago: executing program 1 (id=2164): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000003c0)={0x40, 0x8, 0x1, 'P'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 783.320522ms ago: executing program 3 (id=2165): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0xfffd, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'veth0_to_batadv\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) (async) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8100, &(0x7f0000001dc0)={0x88, 0x77, 0x80000}, 0x20) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8100, &(0x7f0000001dc0)={0x88, 0x77, 0x80000}, 0x20) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) (async) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x30, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf2503594cff6ca92bee2a430000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000001fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) 655.961222ms ago: executing program 3 (id=2166): r0 = syz_usb_connect(0x1, 0x7, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xb1, 0xbf, 0x6d, 0x20, 0x12d1, 0x345, 0x14a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x10, 0x6, "", [{{0x9, 0x4, 0x33, 0x8, 0x0, 0xff, 0x1, 0x39, 0x1, [@generic={0x0, 0x23, "a69c2aa0cb546e0a19adf00c258e83482e6badc98d58c9b0b2d59d53ee4b59bfc303f421d11d0eb6a94670ae5cc14fccc08b424513fade3e0e1c63ca8c8fb645789657edca6c34aca661ac12016995be3b542fd3212bb88fcd8a592c1ca40ca2f6692ffb61e61352d9f8e099b4656913832decf05aea6ff37ad39a3192a4ca08d8466ee749ad945aa07de023527e5f4461ec8b0c37857746a42fa1aa735dba96c703853fc673d4a206e537744e38871f92ddd4cdd8ecdde4ee891a93707f878bc0490f7a968e69b089aa8508f13b26bda475f783f287067c63da376e39de96c0f33defd545a8bf9bdc1496"}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002840)={0x24, 0x0, &(0x7f0000002740)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002e000305"], 0x30}], 0x1, 0x0, 0x0, 0xc050}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000002ac0)={0x14, 0x0, &(0x7f0000002a40)={0x0, 0x3, 0x3, @string={0x2}}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x8802, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRES64=r1, @ANYRESOCT=r0]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r5, &(0x7f0000000280)=[{&(0x7f0000000480)="e1", 0x1}], 0x1, 0x7fffffffffffffff, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r4, 0x4008586f, &(0x7f0000000100)={0x13e21e00, 0x9}) syz_usb_control_io(r0, 0x0, 0x0) fcntl$dupfd(r2, 0x406, r4) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000140)={0x0, 0x31, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 553.573895ms ago: executing program 2 (id=2167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'comedi_test\x00', [0xd, 0x1, 0x6, 0x7, 0xc0000000, 0x5, 0x2, 0x7fff, 0x7fffffff, 0x9b3, 0x10, 0x8, 0x9, 0x5, 0x191f, 0x6, 0x3, 0x2748, 0x8001, 0xd7e0, 0x8, 0x1, 0x0, 0x0, 0x6, 0x2, 0x7, 0x0, 0x5, 0x7, 0xffffffff]}) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x3}, 0x10002) 475.496343ms ago: executing program 2 (id=2168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003a8000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1) 252.049385ms ago: executing program 2 (id=2169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4844}, 0x4) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002", @ANYRESHEX=r1], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000280)={0xb0, &(0x7f0000000340)={0x0, 0x0, 0x4, "00000000b2adaebe0b000212f254dcfa9c9545832380ff2e6dea44bb116148c3bf403d0cef7f9ba91bfd756675e8ea89913f15e9892538e0b9a748fcf8b2e12396923d0a2c09103989239fb1c6bccd8dc3ae5e0d72f5f89d200359a53eadd253f3101276495b2c66cf801d28f4e22078a6189d7750d1c7723364b160b41409d2bb122186f00a9674c04f84f65c741ea218c1f65fc615622a5344f1ae2c684070043830bcd78ca9c9ad21"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x8080) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = gettid() capset(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000200)={0x2008, 0x6b, 0x1000005, 0x4f6, 0x50c, 0x8900}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfffffffffffffd22, 0x2004050, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback, 0xffffffdf}, 0xff9b) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000680)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001140)=""/5, 0x5}}, 0x120) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000007c0)={0x0, 0x13, 0x5, "b17cc04c68"}, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4844}, 0x4) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002", @ANYRESHEX=r1], 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000280)={0xb0, &(0x7f0000000340)={0x0, 0x0, 0x4, "00000000b2adaebe0b000212f254dcfa9c9545832380ff2e6dea44bb116148c3bf403d0cef7f9ba91bfd756675e8ea89913f15e9892538e0b9a748fcf8b2e12396923d0a2c09103989239fb1c6bccd8dc3ae5e0d72f5f89d200359a53eadd253f3101276495b2c66cf801d28f4e22078a6189d7750d1c7723364b160b41409d2bb122186f00a9674c04f84f65c741ea218c1f65fc615622a5344f1ae2c684070043830bcd78ca9c9ad21"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x8080) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) gettid() (async) capset(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000200)={0x2008, 0x6b, 0x1000005, 0x4f6, 0x50c, 0x8900}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) (async) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfffffffffffffd22, 0x2004050, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback, 0xffffffdf}, 0xff9b) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$UHID_CREATE(r6, &(0x7f0000000680)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001140)=""/5, 0x5}}, 0x120) (async) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000007c0)={0x0, 0x13, 0x5, "b17cc04c68"}, 0x0, 0x0}) (async) 150.016444ms ago: executing program 2 (id=2170): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="9d", 0x1}], 0x1}}], 0x1, 0x4000001) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4004811}, 0x11) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x0, 0x0) recvfrom$inet_nvme(r2, &(0x7f0000000280)=""/197, 0xc5, 0x2001, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2) 48.111015ms ago: executing program 3 (id=2171): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x96, 0x47, 0x3f, 0x20, 0x10c4, 0x8244, 0x7275, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x28, 0x6, "", [{{0x9, 0x4, 0x31, 0xe, 0x0, 0x3, 0x0, 0x0, 0x1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002840)={0x24, 0x0, &(0x7f0000002740)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000002ac0)={0x14, 0x0, &(0x7f0000002a40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=2172): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) capset(0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000140)={0x1c, &(0x7f00000000c0)={0x40, 0xd, 0x4, "f8c0cdc2"}, 0x0, 0x0}) mkdirat(r0, &(0x7f00000001c0)='./file3\x00', 0xa0) write(r0, &(0x7f0000000100)="88d9fb72baa7f52c2d285e015977f5ab2a9c87392f0ca30aaef3b8c15bc92c3a9bda1e815b0b835311ae7dfd2a3533b0339814577017830d396a578877f3f122397716f502ca91753d0e7a1f3f0d", 0x4e) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='f2fs\x00', 0x0, &(0x7f0000000380)='acl') r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = gettid() capget(&(0x7f0000000340)={0x20071026, r3}, &(0x7f0000000380)={0xa6eb, 0x7, 0xffffffc6, 0x4, 0x3f2, 0xa}) r4 = syz_open_procfs(r3, &(0x7f0000000240)='net/icmp6\x00') syz_usb_disconnect(r2) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r4, 0x4010e501, &(0x7f0000000280)={r0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f0000000000)=0x532) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000406307812040000102030109026e0003017f6006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904010101010230000905010960002503050a2525010400000500000c0402"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 04660][T11299] should_fail_ex+0x412/0x560 [ 454.704676][T11299] should_failslab+0xa8/0x100 [ 454.704691][T11299] ? skb_clone+0x212/0x3a0 [ 454.704706][T11299] kmem_cache_alloc_noprof+0x87/0x650 [ 454.704727][T11299] skb_clone+0x212/0x3a0 [ 454.704743][T11299] __netlink_deliver_tap+0x424/0x8b0 [ 454.704762][T11299] ? netlink_deliver_tap+0x2e/0x1b0 [ 454.704774][T11299] netlink_deliver_tap+0x19c/0x1b0 [ 454.704787][T11299] netlink_unicast+0x7e3/0x9b0 [ 454.704801][T11299] ? __pfx_netlink_unicast+0x10/0x10 [ 454.704812][T11299] ? netlink_sendmsg+0x650/0xb40 [ 454.704823][T11299] ? skb_put+0x11b/0x210 [ 454.704837][T11299] netlink_sendmsg+0x813/0xb40 [ 454.704853][T11299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.704867][T11299] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 454.704883][T11299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.704894][T11299] sock_sendmsg_nosec+0x112/0x150 [ 454.704905][T11299] ____sys_sendmsg+0x589/0x8c0 [ 454.704919][T11299] ? __might_fault+0xaf/0x130 [ 454.704938][T11299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.704956][T11299] ? import_iovec+0x73/0xa0 [ 454.704982][T11299] ___sys_sendmsg+0x2a5/0x360 [ 454.705005][T11299] ? __lock_acquire+0x6b5/0x2cf0 [ 454.705035][T11299] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.705066][T11299] ? __fget_files+0x2a/0x420 [ 454.705080][T11299] ? __fget_files+0x3a0/0x420 [ 454.705099][T11299] __x64_sys_sendmsg+0x1bd/0x2a0 [ 454.705115][T11299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.705134][T11299] ? __pfx_ksys_write+0x10/0x10 [ 454.705150][T11299] do_syscall_64+0x14d/0xf80 [ 454.705163][T11299] ? trace_irq_disable+0x3b/0x140 [ 454.705176][T11299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.705192][T11299] ? clear_bhb_loop+0x40/0x90 [ 454.705206][T11299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.705216][T11299] RIP: 0033:0x7f78cf79c799 [ 454.705227][T11299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.705236][T11299] RSP: 002b:00007f78d0721028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.705248][T11299] RAX: ffffffffffffffda RBX: 00007f78cfa15fa0 RCX: 00007f78cf79c799 [ 454.705255][T11299] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000009 [ 454.705262][T11299] RBP: 00007f78d0721090 R08: 0000000000000000 R09: 0000000000000000 [ 454.705269][T11299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.705275][T11299] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 454.705290][T11299] [ 455.002875][ T24] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 455.011109][ T24] usb 2-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 455.022548][ T24] usb 2-1: config 0 has no interface number 0 [ 455.023982][ T5885] usb 4-1: USB disconnect, device number 19 [ 455.028713][ T24] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.061557][ T24] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 455.070914][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.077201][T11301] comedi comedi2: Minor 48 is invalid! [ 455.081507][ T24] usb 2-1: config 0 descriptor?? [ 455.157089][T11305] fuse: Unknown parameter 'ff0x0000000000000005' [ 455.295650][ T24] usb 2-1: string descriptor 0 read error: -71 [ 455.312327][ T24] usb 2-1: USB disconnect, device number 22 [ 455.392113][ T5892] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 455.552136][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 455.558671][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.569082][ T5892] usb 1-1: config 0 has no interfaces? [ 455.575111][ T5892] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 455.584397][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.594543][ T5892] usb 1-1: config 0 descriptor?? [ 455.810618][ T5885] usb 1-1: USB disconnect, device number 41 [ 456.131165][T11316] FAULT_INJECTION: forcing a failure. [ 456.131165][T11316] name failslab, interval 1, probability 0, space 0, times 0 [ 456.143920][T11316] CPU: 0 UID: 0 PID: 11316 Comm: syz.3.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.143939][T11316] Tainted: [L]=SOFTLOCKUP [ 456.143943][T11316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.143950][T11316] Call Trace: [ 456.143956][T11316] [ 456.143961][T11316] dump_stack_lvl+0xe8/0x150 [ 456.143982][T11316] should_fail_ex+0x412/0x560 [ 456.143999][T11316] should_failslab+0xa8/0x100 [ 456.144013][T11316] __kmalloc_noprof+0xe8/0x760 [ 456.144024][T11316] ? comedi_alloc_devpriv+0x1f/0x60 [ 456.144051][T11316] comedi_alloc_devpriv+0x1f/0x60 [ 456.144067][T11316] pcl812_attach+0x55/0x2380 [ 456.144080][T11316] ? __might_fault+0xaf/0x130 [ 456.144103][T11316] comedi_device_attach+0x51f/0x720 [ 456.144118][T11316] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 456.144140][T11316] ? kasan_quarantine_put+0xbb/0x1f0 [ 456.144157][T11316] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 456.144180][T11316] ? do_vfs_ioctl+0x1166/0x1530 [ 456.144193][T11316] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 456.144213][T11316] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 456.144254][T11316] ? __fget_files+0x2a/0x420 [ 456.144281][T11316] ? __fget_files+0x2a/0x420 [ 456.144297][T11316] ? __fget_files+0x3a0/0x420 [ 456.144311][T11316] ? __fget_files+0x2a/0x420 [ 456.144327][T11316] ? bpf_lsm_file_ioctl+0x9/0x20 [ 456.144339][T11316] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 456.144353][T11316] __se_sys_ioctl+0xfc/0x170 [ 456.144366][T11316] do_syscall_64+0x14d/0xf80 [ 456.144379][T11316] ? trace_irq_disable+0x3b/0x140 [ 456.144391][T11316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.144401][T11316] ? clear_bhb_loop+0x40/0x90 [ 456.144414][T11316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.144425][T11316] RIP: 0033:0x7f50a339c799 [ 456.144436][T11316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.144446][T11316] RSP: 002b:00007f50a4209028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.144457][T11316] RAX: ffffffffffffffda RBX: 00007f50a3615fa0 RCX: 00007f50a339c799 [ 456.144465][T11316] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 456.144472][T11316] RBP: 00007f50a4209090 R08: 0000000000000000 R09: 0000000000000000 [ 456.144481][T11316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.144489][T11316] R13: 00007f50a3616038 R14: 00007f50a3615fa0 R15: 00007fff255b75d8 [ 456.144505][T11316] [ 456.352124][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 456.434168][T11323] comedi comedi2: Minor 3 could not be opened [ 456.544679][T11328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1984'. [ 456.574122][ T24] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 456.590999][ T24] usb 2-1: config 1 has no interface number 0 [ 456.604924][ T24] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 456.621506][T11331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.631426][T11331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.634301][ T24] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 456.656651][ T24] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 456.676306][ T24] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 456.688306][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.701261][ T24] usb 2-1: Product: syz [ 456.707427][ T24] usb 2-1: Manufacturer: syz [ 456.713918][ T24] usb 2-1: SerialNumber: syz [ 456.724288][T11314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 456.742205][T11314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 456.752428][ T24] usb 2-1: Expected 3 endpoints, found: 1 [ 456.957482][ T5924] usb 2-1: USB disconnect, device number 23 [ 457.042225][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 457.132175][ T5892] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 457.200152][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 457.208311][ T24] usb 1-1: config 139 has an invalid interface number: 49 but max is 0 [ 457.218241][ T24] usb 1-1: config 139 has no interface number 0 [ 457.224743][ T24] usb 1-1: config 139 interface 49 has no altsetting 0 [ 457.234398][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 457.243463][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.251445][ T24] usb 1-1: Product: syz [ 457.255706][ T24] usb 1-1: Manufacturer: syz [ 457.260320][ T24] usb 1-1: SerialNumber: syz [ 457.283766][ T5892] usb 4-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 457.297594][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 457.307007][ T5892] usb 4-1: config 1 has no interface number 0 [ 457.314711][ T5892] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.330476][ T5892] usb 4-1: New USB device found, idVendor=2625, idProduct=a4e1, bcdDevice= 0.40 [ 457.344551][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.353692][ T5892] usb 4-1: Product: syz [ 457.358045][ T5892] usb 4-1: Manufacturer: syz [ 457.362777][ T5892] usb 4-1: SerialNumber: syz [ 457.375848][ T5892] cdc_ncm 4-1:1.1: NCM or ECM functional descriptors missing [ 457.383648][ T5892] cdc_ncm 4-1:1.1: bind() failure [ 457.582481][ T5924] usb 4-1: USB disconnect, device number 20 [ 457.697846][T11353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1994'. [ 457.724534][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 457.732053][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 457.739445][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 457.751116][ T24] radio-usb-si4713 1-1:139.49: Si4713 development board discovered: (10C4:8244) [ 457.775634][ T24] radio-usb-si4713 1-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 457.787886][ T24] usbhid 1-1:139.49: couldn't find an input interrupt endpoint [ 457.798971][ T24] usb 1-1: USB disconnect, device number 42 [ 458.472560][ T5924] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 458.484104][T11370] FAULT_INJECTION: forcing a failure. [ 458.484104][T11370] name failslab, interval 1, probability 0, space 0, times 0 [ 458.552767][T11370] CPU: 0 UID: 0 PID: 11370 Comm: syz.0.2000 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.552799][T11370] Tainted: [L]=SOFTLOCKUP [ 458.552806][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.552817][T11370] Call Trace: [ 458.552824][T11370] [ 458.552832][T11370] dump_stack_lvl+0xe8/0x150 [ 458.552871][T11370] should_fail_ex+0x412/0x560 [ 458.552902][T11370] should_failslab+0xa8/0x100 [ 458.552924][T11370] __kmalloc_noprof+0xe8/0x760 [ 458.552944][T11370] ? tomoyo_encode+0x28b/0x550 [ 458.552967][T11370] tomoyo_encode+0x28b/0x550 [ 458.552990][T11370] tomoyo_realpath_from_path+0x58d/0x5d0 [ 458.553022][T11370] tomoyo_path_perm+0x283/0x560 [ 458.553047][T11370] ? tomoyo_path_perm+0x251/0x560 [ 458.553072][T11370] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 458.553130][T11370] ? hook_sb_umount+0x1e5/0x3b0 [ 458.553157][T11370] ? __pfx_hook_sb_umount+0x10/0x10 [ 458.553185][T11370] tomoyo_sb_umount+0xa4/0xf0 [ 458.553207][T11370] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 458.553232][T11370] ? bpf_lsm_capable+0x9/0x20 [ 458.553253][T11370] ? security_capable+0x7e/0x2c0 [ 458.553282][T11370] security_sb_umount+0xb3/0x260 [ 458.553311][T11370] path_umount+0x36d/0xb40 [ 458.553345][T11370] __x64_sys_umount+0x12a/0x170 [ 458.553367][T11370] ? __pfx___x64_sys_umount+0x10/0x10 [ 458.553397][T11370] do_syscall_64+0x14d/0xf80 [ 458.553420][T11370] ? trace_irq_disable+0x3b/0x140 [ 458.553441][T11370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.553460][T11370] ? clear_bhb_loop+0x40/0x90 [ 458.553483][T11370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.553502][T11370] RIP: 0033:0x7f78cf79c799 [ 458.553520][T11370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.553536][T11370] RSP: 002b:00007f78d0721028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 458.553557][T11370] RAX: ffffffffffffffda RBX: 00007f78cfa15fa0 RCX: 00007f78cf79c799 [ 458.553571][T11370] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 458.553584][T11370] RBP: 00007f78d0721090 R08: 0000000000000000 R09: 0000000000000000 [ 458.553596][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.553609][T11370] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 458.553639][T11370] [ 458.558735][T11370] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.645137][ T5924] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 458.809851][ T5924] usb 4-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 458.820305][ T5924] usb 4-1: config 0 has no interface number 0 [ 458.827434][ T5924] usb 4-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.846282][ T5924] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 458.858024][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.882145][ T5924] usb 4-1: config 0 descriptor?? [ 458.997950][T11377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.018665][T11377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.108827][ T5924] usb 4-1: string descriptor 0 read error: -71 [ 459.128154][ T5924] usb 4-1: USB disconnect, device number 21 [ 459.182111][ T5923] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 459.282122][ T5892] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 459.333462][ T5923] usb 1-1: config 251 has an invalid interface number: 62 but max is 0 [ 459.341766][ T5923] usb 1-1: config 251 has no interface number 0 [ 459.348073][ T5923] usb 1-1: config 251 interface 62 has no altsetting 0 [ 459.356828][ T5923] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=3a.39 [ 459.365943][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.373982][ T5923] usb 1-1: Product: syz [ 459.378140][ T5923] usb 1-1: Manufacturer: syz [ 459.382825][ T5923] usb 1-1: SerialNumber: syz [ 459.432141][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 459.439108][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.450364][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.460208][ T5892] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 459.469461][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.481223][ T5892] usb 2-1: config 0 descriptor?? [ 459.611730][ T5923] usb 1-1: USB disconnect, device number 43 [ 459.661423][T11384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.671952][T11384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.898635][ T5892] ntrig 0003:1B96:0008.001E: item fetching failed at offset 6/7 [ 459.912844][ T5892] ntrig 0003:1B96:0008.001E: parse failed [ 459.920426][ T5892] ntrig 0003:1B96:0008.001E: probe with driver ntrig failed with error -22 [ 460.114180][T11380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.133724][T11380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.195910][ T5924] usb 2-1: USB disconnect, device number 24 [ 461.084007][T11416] FAULT_INJECTION: forcing a failure. [ 461.084007][T11416] name failslab, interval 1, probability 0, space 0, times 0 [ 461.096771][T11416] CPU: 1 UID: 0 PID: 11416 Comm: syz.0.2015 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.096790][T11416] Tainted: [L]=SOFTLOCKUP [ 461.096794][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.096801][T11416] Call Trace: [ 461.096806][T11416] [ 461.096811][T11416] dump_stack_lvl+0xe8/0x150 [ 461.096832][T11416] should_fail_ex+0x412/0x560 [ 461.096848][T11416] should_failslab+0xa8/0x100 [ 461.096862][T11416] __kmalloc_cache_noprof+0x88/0x660 [ 461.096873][T11416] ? binder_transaction+0x6ee/0x7070 [ 461.096887][T11416] ? do_raw_spin_unlock+0xf5/0x210 [ 461.096903][T11416] binder_transaction+0x6ee/0x7070 [ 461.096916][T11416] ? arch_stack_walk+0xfb/0x150 [ 461.096933][T11416] ? __lock_acquire+0x6b5/0x2cf0 [ 461.096950][T11416] ? ima_match_policy+0x112/0x21e0 [ 461.096966][T11416] ? ima_match_policy+0x2146/0x21e0 [ 461.096982][T11416] ? __pfx_binder_transaction+0x10/0x10 [ 461.097003][T11416] ? __lock_acquire+0x6b5/0x2cf0 [ 461.097023][T11416] ? __lock_acquire+0x6b5/0x2cf0 [ 461.097046][T11416] ? __lock_acquire+0x6b5/0x2cf0 [ 461.097064][T11416] ? __might_fault+0xaf/0x130 [ 461.097080][T11416] ? __might_fault+0xaf/0x130 [ 461.097105][T11416] binder_ioctl_write_read+0xb45/0xa590 [ 461.097127][T11416] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.097148][T11416] ? stack_trace_save+0xa9/0x100 [ 461.097161][T11416] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 461.097172][T11416] ? kasan_save_free_info+0x46/0x50 [ 461.097188][T11416] ? stack_depot_save_flags+0x33/0x810 [ 461.097206][T11416] ? __lock_acquire+0x6b5/0x2cf0 [ 461.097232][T11416] ? __pfx_binder_debug+0x10/0x10 [ 461.097243][T11416] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.097263][T11416] ? _raw_spin_unlock+0x28/0x50 [ 461.097274][T11416] ? binder_get_thread+0x177/0x6d0 [ 461.097287][T11416] binder_ioctl+0x423/0x1b10 [ 461.097300][T11416] ? tomoyo_path_number_perm+0x219/0x630 [ 461.097315][T11416] ? tomoyo_path_number_perm+0x219/0x630 [ 461.097331][T11416] ? do_vfs_ioctl+0x1166/0x1530 [ 461.097342][T11416] ? __pfx_binder_ioctl+0x10/0x10 [ 461.097355][T11416] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 461.097371][T11416] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 461.097394][T11416] ? __fget_files+0x2a/0x420 [ 461.097410][T11416] ? __fget_files+0x2a/0x420 [ 461.097423][T11416] ? __fget_files+0x3a0/0x420 [ 461.097437][T11416] ? __fget_files+0x2a/0x420 [ 461.097452][T11416] ? bpf_lsm_file_ioctl+0x9/0x20 [ 461.097464][T11416] ? __pfx_binder_ioctl+0x10/0x10 [ 461.097476][T11416] __se_sys_ioctl+0xfc/0x170 [ 461.097488][T11416] do_syscall_64+0x14d/0xf80 [ 461.097501][T11416] ? trace_irq_disable+0x3b/0x140 [ 461.097514][T11416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.097524][T11416] ? clear_bhb_loop+0x40/0x90 [ 461.097539][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.097557][T11416] RIP: 0033:0x7f78cf79c799 [ 461.097576][T11416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.097590][T11416] RSP: 002b:00007f78d0721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.097612][T11416] RAX: ffffffffffffffda RBX: 00007f78cfa15fa0 RCX: 00007f78cf79c799 [ 461.097621][T11416] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 461.097628][T11416] RBP: 00007f78d0721090 R08: 0000000000000000 R09: 0000000000000000 [ 461.097635][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.097641][T11416] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 461.097657][T11416] [ 461.312350][ T5892] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 461.392119][ T5924] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 461.555198][ T5892] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 461.563444][ T5892] usb 2-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 461.574247][ T5892] usb 2-1: config 0 has no interface number 0 [ 461.580381][ T5892] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.593561][ T5892] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 461.602643][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.612250][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 461.612576][ T5892] usb 2-1: config 0 descriptor?? [ 461.621047][ T5924] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 461.632239][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.640302][ T5924] usb 4-1: Product: syz [ 461.645002][ T5924] usb 4-1: Manufacturer: syz [ 461.649626][ T5924] usb 4-1: SerialNumber: syz [ 461.682949][T10170] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 461.839784][ T24] usb 2-1: USB disconnect, device number 25 [ 461.852415][T10170] usb 1-1: Using ep0 maxpacket: 16 [ 461.861232][T10170] usb 1-1: config index 0 descriptor too short (expected 57892, got 36) [ 461.863391][ T5924] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 461.870390][T10170] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 461.882848][ T5924] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 461.890843][T10170] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 461.902577][ T5924] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 461.911751][T10170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.916519][ T5924] usb 4-1: media controller created [ 461.931524][T10170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.941764][T10170] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.943500][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.955260][T10170] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 461.973202][T10170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.984069][T10170] usb 1-1: config 0 descriptor?? [ 462.183360][ T5924] zl10353_read_register: readreg error (reg=127, ret==-110) [ 462.228889][ T5924] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 462.245732][ T5924] usb 4-1: USB disconnect, device number 22 [ 462.453622][T10170] waterforce 0003:1044:7A4D.001F: unknown main item tag 0x0 [ 462.462135][T10170] waterforce 0003:1044:7A4D.001F: unknown main item tag 0x0 [ 462.469479][T10170] waterforce 0003:1044:7A4D.001F: unknown main item tag 0x0 [ 462.476920][T10170] waterforce 0003:1044:7A4D.001F: unknown main item tag 0x0 [ 462.484478][T10170] waterforce 0003:1044:7A4D.001F: unknown main item tag 0x0 [ 462.491814][T10170] waterforce 0003:1044:7A4D.001F: unknown main item tag 0x0 [ 462.499220][T10170] waterforce 0003:1044:7A4D.001F: unknown main item tag 0x0 [ 462.506745][T10170] waterforce 0003:1044:7A4D.001F: unknown main item tag 0x0 [ 462.514136][T10170] waterforce 0003:1044:7A4D.001F: unknown main item tag 0x0 [ 462.521463][T10170] waterforce 0003:1044:7A4D.001F: unknown main item tag 0x0 [ 462.530902][T10170] waterforce 0003:1044:7A4D.001F: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 462.602433][T10170] waterforce 0003:1044:7A4D.001F: fw version request failed with -38 [ 462.642127][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 462.690559][T11425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.701286][T11425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.710046][T10170] usb 1-1: USB disconnect, device number 44 [ 462.716920][T11425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.728992][T11425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.800029][ T24] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 462.809237][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 462.820691][ T24] usb 2-1: Product: syz [ 462.824968][ T24] usb 2-1: Manufacturer: syz [ 462.829731][ T24] usb 2-1: SerialNumber: syz [ 462.837365][ T24] usb 2-1: config 0 descriptor?? [ 462.853421][ T24] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 462.861758][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 462.871414][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 462.881730][ T24] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 462.893312][ T24] usb 2-1: media controller created [ 462.905267][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.946050][T11425] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 463.048564][T11422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.057339][T11422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.066800][T11422] cxusb: i2c rd: len=1792 is too big! [ 463.066800][T11422] [ 463.075913][ T24] cxusb: set interface failed [ 463.080996][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 463.105110][ T24] DVB: Unable to find symbol mt352_attach() [ 463.111144][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 463.118739][ T24] zl10353_read_register: readreg error (reg=127, ret==-121) [ 463.126214][ T5885] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 463.126229][ T24] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 463.184155][ T24] rc_core: IR keymap rc-dvico-mce not found [ 463.190083][ T24] Registered IR keymap rc-empty [ 463.195973][ T24] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 463.206851][ T24] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input61 [ 463.218424][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 463.225437][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 463.236819][ T24] usb 2-1: USB disconnect, device number 26 [ 463.292435][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 463.300596][ T5885] usb 4-1: config 139 has an invalid interface number: 49 but max is 0 [ 463.311735][ T5885] usb 4-1: config 139 has no interface number 0 [ 463.312889][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 463.318504][ T5885] usb 4-1: config 139 interface 49 has no altsetting 0 [ 463.348733][ T5885] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 463.360158][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.369328][ T5885] usb 4-1: Product: syz [ 463.373861][ T5885] usb 4-1: Manufacturer: syz [ 463.378577][ T5885] usb 4-1: SerialNumber: syz [ 463.613526][ T5924] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 463.782076][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 463.793023][ T5924] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 463.811915][ T5924] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.833859][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.853954][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.875262][ T5924] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.904426][ T5924] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 463.923608][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.017288][ T5885] radio-usb-si4713 4-1:139.49: Si4713 development board discovered: (10C4:8244) [ 464.068786][ T5885] radio-usb-si4713 4-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 464.117097][ T5885] usbhid 4-1:139.49: couldn't find an input interrupt endpoint [ 464.150013][ T5885] usb 4-1: USB disconnect, device number 23 [ 464.152400][ T5924] usb 1-1: usb_control_msg returned -32 [ 464.175661][ T5924] usbtmc 1-1:16.0: can't read capabilities [ 464.362329][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 464.375874][T11433] FAULT_INJECTION: forcing a failure. [ 464.375874][T11433] name failslab, interval 1, probability 0, space 0, times 0 [ 464.428936][ T5885] usb 1-1: USB disconnect, device number 45 [ 464.450142][T11433] CPU: 0 UID: 0 PID: 11433 Comm: syz.0.2021 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.450176][T11433] Tainted: [L]=SOFTLOCKUP [ 464.450184][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.450197][T11433] Call Trace: [ 464.450205][T11433] [ 464.450214][T11433] dump_stack_lvl+0xe8/0x150 [ 464.450250][T11433] should_fail_ex+0x412/0x560 [ 464.450281][T11433] should_failslab+0xa8/0x100 [ 464.450308][T11433] __kmalloc_noprof+0xe8/0x760 [ 464.450328][T11433] ? __kasan_kmalloc+0x93/0xb0 [ 464.450350][T11433] ? usb_alloc_urb+0x46/0x150 [ 464.450372][T11433] ? __kmalloc_cache_noprof+0x31c/0x660 [ 464.450396][T11433] usb_alloc_urb+0x46/0x150 [ 464.450420][T11433] usb_control_msg+0x118/0x3e0 [ 464.450444][T11433] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 464.450474][T11433] usbtmc_ioctl_clear+0x15e/0x9b0 [ 464.450504][T11433] ? __pfx___mutex_lock+0x10/0x10 [ 464.450536][T11433] ? __pfx_usbtmc_ioctl_clear+0x10/0x10 [ 464.450567][T11433] ? __fget_files+0x2a/0x420 [ 464.450597][T11433] ? __fget_files+0x3a0/0x420 [ 464.450628][T11433] usbtmc_ioctl+0x50c/0x720 [ 464.450655][T11433] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 464.450682][T11433] __se_sys_ioctl+0xfc/0x170 [ 464.450707][T11433] do_syscall_64+0x14d/0xf80 [ 464.450730][T11433] ? trace_irq_disable+0x3b/0x140 [ 464.450760][T11433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.450781][T11433] ? clear_bhb_loop+0x40/0x90 [ 464.450803][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.450821][T11433] RIP: 0033:0x7f78cf79c799 [ 464.450839][T11433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.450853][T11433] RSP: 002b:00007f78d0721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.450872][T11433] RAX: ffffffffffffffda RBX: 00007f78cfa15fa0 RCX: 00007f78cf79c799 [ 464.450885][T11433] RDX: 0000000000000000 RSI: 0000000000005b02 RDI: 0000000000000004 [ 464.450896][T11433] RBP: 00007f78d0721090 R08: 0000000000000000 R09: 0000000000000000 [ 464.450908][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.450919][T11433] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 464.450951][T11433] [ 464.502225][T11433] usbtmc 3-1:16.0: usb_control_msg returned -12 [ 464.755908][T11456] FAULT_INJECTION: forcing a failure. [ 464.755908][T11456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.784412][ T24] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 464.793934][ T24] usb 2-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 464.815951][ T24] usb 2-1: config 0 has no interface number 0 [ 464.822722][T11456] CPU: 1 UID: 0 PID: 11456 Comm: syz.3.2026 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.822752][T11456] Tainted: [L]=SOFTLOCKUP [ 464.822759][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.822771][T11456] Call Trace: [ 464.822779][T11456] [ 464.822786][T11456] dump_stack_lvl+0xe8/0x150 [ 464.822820][T11456] should_fail_ex+0x412/0x560 [ 464.822848][T11456] _copy_from_user+0x2d/0xb0 [ 464.822874][T11456] ___sys_sendmsg+0x1c6/0x360 [ 464.822899][T11456] ? __lock_acquire+0x6b5/0x2cf0 [ 464.822930][T11456] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.822985][T11456] ? __fget_files+0x2a/0x420 [ 464.823010][T11456] ? __fget_files+0x3a0/0x420 [ 464.823044][T11456] __x64_sys_sendmsg+0x1bd/0x2a0 [ 464.823071][T11456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.823104][T11456] ? __pfx_ksys_write+0x10/0x10 [ 464.823134][T11456] do_syscall_64+0x14d/0xf80 [ 464.823156][T11456] ? trace_irq_disable+0x3b/0x140 [ 464.823177][T11456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.823196][T11456] ? clear_bhb_loop+0x40/0x90 [ 464.823228][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.823247][T11456] RIP: 0033:0x7f50a339c799 [ 464.823264][T11456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.823280][T11456] RSP: 002b:00007f50a4209028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.823301][T11456] RAX: ffffffffffffffda RBX: 00007f50a3615fa0 RCX: 00007f50a339c799 [ 464.823315][T11456] RDX: 0000000000000080 RSI: 0000200000004240 RDI: 0000000000000004 [ 464.823327][T11456] RBP: 00007f50a4209090 R08: 0000000000000000 R09: 0000000000000000 [ 464.823338][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.823350][T11456] R13: 00007f50a3616038 R14: 00007f50a3615fa0 R15: 00007fff255b75d8 [ 464.823375][T11456] [ 464.823550][ T24] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.025463][ T24] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 465.040051][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.052088][ T24] usb 2-1: config 0 descriptor?? [ 465.278791][ T24] usb 2-1: USB disconnect, device number 27 [ 465.379403][T11472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.418133][T11474] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 465.626104][T11480] ALSA: mixer_oss: invalid OSS volume '' [ 465.892552][ T5924] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 466.055962][ T5924] usb 4-1: config 1 has an invalid interface number: 253 but max is 1 [ 466.070865][ T5924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.105928][ T5924] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 466.137627][ T5924] usb 4-1: config 1 has no interface number 2 [ 466.153393][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.167213][T11493] FAULT_INJECTION: forcing a failure. [ 466.167213][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.189968][ T5924] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 466.207996][T11493] CPU: 1 UID: 0 PID: 11493 Comm: syz.1.2040 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.208033][T11493] Tainted: [L]=SOFTLOCKUP [ 466.208040][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.208052][T11493] Call Trace: [ 466.208060][T11493] [ 466.208068][T11493] dump_stack_lvl+0xe8/0x150 [ 466.208102][T11493] should_fail_ex+0x412/0x560 [ 466.208130][T11493] _copy_from_iter+0x1d3/0x1670 [ 466.208157][T11493] ? rcu_is_watching+0x15/0xb0 [ 466.208182][T11493] ? __pfx__copy_from_iter+0x10/0x10 [ 466.208212][T11493] ? netlink_sendmsg+0x650/0xb40 [ 466.208233][T11493] ? skb_put+0x11b/0x210 [ 466.208259][T11493] netlink_sendmsg+0x6c0/0xb40 [ 466.208289][T11493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.208310][T11493] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 466.208337][T11493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.208355][T11493] sock_sendmsg_nosec+0x112/0x150 [ 466.208375][T11493] ____sys_sendmsg+0x589/0x8c0 [ 466.208400][T11493] ? __might_fault+0xaf/0x130 [ 466.208433][T11493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.208465][T11493] ? import_iovec+0x73/0xa0 [ 466.208493][T11493] ___sys_sendmsg+0x2a5/0x360 [ 466.208516][T11493] ? __lock_acquire+0x6b5/0x2cf0 [ 466.208548][T11493] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.208603][T11493] ? __fget_files+0x2a/0x420 [ 466.208628][T11493] ? __fget_files+0x3a0/0x420 [ 466.208663][T11493] __x64_sys_sendmsg+0x1bd/0x2a0 [ 466.208691][T11493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.208725][T11493] ? __pfx_ksys_write+0x10/0x10 [ 466.208755][T11493] do_syscall_64+0x14d/0xf80 [ 466.208777][T11493] ? trace_irq_disable+0x3b/0x140 [ 466.208799][T11493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.208818][T11493] ? clear_bhb_loop+0x40/0x90 [ 466.208842][T11493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.208861][T11493] RIP: 0033:0x7f706c99c799 [ 466.208879][T11493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.208896][T11493] RSP: 002b:00007f706d862028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.208916][T11493] RAX: ffffffffffffffda RBX: 00007f706cc15fa0 RCX: 00007f706c99c799 [ 466.208930][T11493] RDX: 0000000000000080 RSI: 0000200000004240 RDI: 0000000000000004 [ 466.208942][T11493] RBP: 00007f706d862090 R08: 0000000000000000 R09: 0000000000000000 [ 466.208954][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.208966][T11493] R13: 00007f706cc16038 R14: 00007f706cc15fa0 R15: 00007ffc8a7b3768 [ 466.208995][T11493] [ 466.232181][ T5885] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 466.237479][ T5924] usb 4-1: config 1 interface 1 has no altsetting 0 [ 466.373163][ T5885] usb 1-1: device descriptor read/64, error -71 [ 466.381282][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.495326][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.503565][ T5924] usb 4-1: Product: syz [ 466.508174][ T5924] usb 4-1: Manufacturer: syz [ 466.513035][ T5924] usb 4-1: SerialNumber: syz [ 466.526932][ T5924] cdc_ncm 4-1:1.253: CDC Union missing and no IAD found [ 466.534292][ T5924] cdc_ncm 4-1:1.253: bind() failure [ 466.575914][T11499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.585203][T11499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.632162][ T5885] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 466.652127][T10170] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 466.723539][ T5924] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 466.735714][ T5924] usb 4-1: USB disconnect, device number 24 [ 466.763004][ T5885] usb 1-1: device descriptor read/64, error -71 [ 466.802099][T10170] usb 2-1: Using ep0 maxpacket: 8 [ 466.809090][T10170] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 466.817380][T10170] usb 2-1: config 0 has no interface number 1 [ 466.823566][T10170] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 466.834692][T10170] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 466.846403][T10170] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 466.858747][T10170] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 466.869257][T10170] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.882678][T10170] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 466.894314][ T5885] usb usb1-port1: attempt power cycle [ 466.900813][T10170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 466.910601][T10170] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 466.922555][T10170] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 466.931656][T10170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.939795][T10170] usb 2-1: Product: syz [ 466.944220][T10170] usb 2-1: Manufacturer: syz [ 466.948997][T10170] usb 2-1: SerialNumber: syz [ 466.955741][T10170] usb 2-1: config 0 descriptor?? [ 466.963183][T11496] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 466.973050][T10170] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 466.983183][T10170] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 467.023997][T10170] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 467.130222][T11502] overlayfs: failed to resolve './bus': -2 [ 467.138466][T11502] sctp: [Deprecated]: syz.2.2043 (pid 11502) Use of int in maxseg socket option. [ 467.138466][T11502] Use struct sctp_assoc_value instead [ 467.180957][T11495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.193038][T11495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.205610][ T5892] usb 2-1: USB disconnect, device number 28 [ 467.232171][ T5885] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 467.258186][T11504] FAULT_INJECTION: forcing a failure. [ 467.258186][T11504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.280144][T11504] CPU: 0 UID: 0 PID: 11504 Comm: syz.2.2044 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.280172][T11504] Tainted: [L]=SOFTLOCKUP [ 467.280179][T11504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.280188][T11504] Call Trace: [ 467.280196][T11504] [ 467.280203][T11504] dump_stack_lvl+0xe8/0x150 [ 467.280237][T11504] should_fail_ex+0x412/0x560 [ 467.280268][T11504] _copy_from_user+0x2d/0xb0 [ 467.280292][T11504] fuse_do_ioctl+0x860/0x1fc0 [ 467.280325][T11504] ? tomoyo_path_number_perm+0x219/0x630 [ 467.280349][T11504] ? __pfx_fuse_do_ioctl+0x10/0x10 [ 467.280370][T11504] ? do_vfs_ioctl+0x1166/0x1530 [ 467.280391][T11504] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 467.280420][T11504] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 467.280466][T11504] ? __fget_files+0x3a0/0x420 [ 467.280489][T11504] ? fuse_allow_current_process+0x1f0/0x3c0 [ 467.280512][T11504] ? fuse_file_ioctl+0xe6/0x140 [ 467.280536][T11504] ? __pfx_fuse_file_ioctl+0x10/0x10 [ 467.280560][T11504] __se_sys_ioctl+0xfc/0x170 [ 467.280579][T11504] do_syscall_64+0x14d/0xf80 [ 467.280598][T11504] ? trace_irq_disable+0x3b/0x140 [ 467.280620][T11504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.280640][T11504] ? clear_bhb_loop+0x40/0x90 [ 467.280663][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.280681][T11504] RIP: 0033:0x7fee30d9c799 [ 467.280700][T11504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.280716][T11504] RSP: 002b:00007fee2efee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.280736][T11504] RAX: ffffffffffffffda RBX: 00007fee31015fa0 RCX: 00007fee30d9c799 [ 467.280751][T11504] RDX: 0000200000000140 RSI: 00000000c0046686 RDI: 0000000000000005 [ 467.280763][T11504] RBP: 00007fee2efee090 R08: 0000000000000000 R09: 0000000000000000 [ 467.280775][T11504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.280787][T11504] R13: 00007fee31016038 R14: 00007fee31015fa0 R15: 00007ffe0a5a4b88 [ 467.280816][T11504] [ 467.280955][ T5885] usb 1-1: device descriptor read/8, error -71 [ 467.722148][ T5924] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 467.732165][ T5885] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 467.752784][ T5885] usb 1-1: device descriptor read/8, error -71 [ 467.872478][ T5885] usb usb1-port1: unable to enumerate USB device [ 467.875675][ T5924] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 467.888010][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.896157][ T5924] usb 4-1: Product: syz [ 467.900407][ T5924] usb 4-1: Manufacturer: syz [ 467.905053][ T5924] usb 4-1: SerialNumber: syz [ 467.911453][ T5924] usb 4-1: config 0 descriptor?? [ 467.918644][ T5924] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 467.927121][ T5924] usb 4-1: Detected FT232HP [ 468.012135][ T5892] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 468.119328][ T5924] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 468.128726][ T5924] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 468.141322][ T5924] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 468.152540][ T5924] usb 4-1: USB disconnect, device number 25 [ 468.162565][ T5924] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 468.166830][ T5892] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 468.172589][ T5924] ftdi_sio 4-1:0.0: device disconnected [ 468.183807][ T5892] usb 2-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 468.196384][ T5892] usb 2-1: config 0 has no interface number 0 [ 468.202992][ T5892] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.216466][ T5892] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 468.228347][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.239366][ T5892] usb 2-1: config 0 descriptor?? [ 468.450865][ T5924] usb 2-1: USB disconnect, device number 29 [ 468.659368][T11512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.472408][ T5892] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 469.643703][ T5892] usb 1-1: config 201 has an invalid interface number: 249 but max is 0 [ 469.662062][ T5892] usb 1-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 469.682243][ T5892] usb 1-1: config 201 has no interface number 0 [ 469.698759][ T5892] usb 1-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 469.720979][ T5892] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 469.743600][ T5892] usb 1-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 469.772285][ T5892] usb 1-1: config 201 interface 249 has no altsetting 0 [ 469.794247][ T5892] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 469.813078][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.821345][ T5892] usb 1-1: Product: syz [ 469.825597][ T5892] usb 1-1: Manufacturer: syz [ 469.830213][ T5892] usb 1-1: SerialNumber: syz [ 470.061591][T11522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.106295][T11522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.136613][ T5892] ath6kl: Failed to submit usb control message: -71 [ 470.146112][ T5892] ath6kl: unable to send the bmi data to the device: -71 [ 470.162048][ T5892] ath6kl: Unable to send get target info: -71 [ 470.173451][ T5892] ath6kl: Failed to init ath6kl core: -71 [ 470.198901][ T5892] ath6kl_usb 1-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 470.222392][ T5892] usb 1-1: USB disconnect, device number 50 [ 470.260290][T11527] FAULT_INJECTION: forcing a failure. [ 470.260290][T11527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.274009][T11527] CPU: 0 UID: 0 PID: 11527 Comm: syz.1.2053 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.274038][T11527] Tainted: [L]=SOFTLOCKUP [ 470.274046][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 470.274058][T11527] Call Trace: [ 470.274066][T11527] [ 470.274074][T11527] dump_stack_lvl+0xe8/0x150 [ 470.274107][T11527] should_fail_ex+0x412/0x560 [ 470.274135][T11527] strncpy_from_user+0x36/0x2b0 [ 470.274162][T11527] do_getname+0x77/0x250 [ 470.274189][T11527] __se_sys_renameat2+0x43/0x2c0 [ 470.274217][T11527] do_syscall_64+0x14d/0xf80 [ 470.274240][T11527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.274259][T11527] ? clear_bhb_loop+0x40/0x90 [ 470.274282][T11527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.274301][T11527] RIP: 0033:0x7f706c99c799 [ 470.274327][T11527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.274343][T11527] RSP: 002b:00007f706d862028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 470.274363][T11527] RAX: ffffffffffffffda RBX: 00007f706cc15fa0 RCX: 00007f706c99c799 [ 470.274378][T11527] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 470.274392][T11527] RBP: 00007f706d862090 R08: 0000000000000001 R09: 0000000000000000 [ 470.274405][T11527] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.274417][T11527] R13: 00007f706cc16038 R14: 00007f706cc15fa0 R15: 00007ffc8a7b3768 [ 470.274447][T11527] [ 470.536407][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2054'. [ 470.680529][T11533] FAULT_INJECTION: forcing a failure. [ 470.680529][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 470.694666][T11533] CPU: 1 UID: 0 PID: 11533 Comm: syz.2.2055 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.694700][T11533] Tainted: [L]=SOFTLOCKUP [ 470.694707][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 470.694719][T11533] Call Trace: [ 470.694728][T11533] [ 470.694736][T11533] dump_stack_lvl+0xe8/0x150 [ 470.694770][T11533] should_fail_ex+0x412/0x560 [ 470.694799][T11533] should_failslab+0xa8/0x100 [ 470.694823][T11533] __kmalloc_noprof+0xe8/0x760 [ 470.694844][T11533] ? tomoyo_encode+0x28b/0x550 [ 470.694865][T11533] tomoyo_encode+0x28b/0x550 [ 470.694889][T11533] tomoyo_realpath_from_path+0x58d/0x5d0 [ 470.694911][T11533] ? tomoyo_domain+0xd7/0x130 [ 470.694935][T11533] ? tomoyo_path_number_perm+0x219/0x630 [ 470.694961][T11533] tomoyo_path_number_perm+0x246/0x630 [ 470.694989][T11533] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 470.695013][T11533] ? __lock_acquire+0x6b5/0x2cf0 [ 470.695054][T11533] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 470.695093][T11533] ? __fget_files+0x2a/0x420 [ 470.695118][T11533] ? __fget_files+0x2a/0x420 [ 470.695140][T11533] ? __fget_files+0x3a0/0x420 [ 470.695161][T11533] ? __fget_files+0x2a/0x420 [ 470.695189][T11533] security_file_ioctl+0xc3/0x2a0 [ 470.695219][T11533] __se_sys_ioctl+0x47/0x170 [ 470.695238][T11533] do_syscall_64+0x14d/0xf80 [ 470.695256][T11533] ? trace_irq_disable+0x3b/0x140 [ 470.695273][T11533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.695289][T11533] ? clear_bhb_loop+0x40/0x90 [ 470.695308][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.695323][T11533] RIP: 0033:0x7fee30d9c799 [ 470.695341][T11533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.695356][T11533] RSP: 002b:00007fee2efee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.695376][T11533] RAX: ffffffffffffffda RBX: 00007fee31015fa0 RCX: 00007fee30d9c799 [ 470.695389][T11533] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 470.695400][T11533] RBP: 00007fee2efee090 R08: 0000000000000000 R09: 0000000000000000 [ 470.695412][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.695422][T11533] R13: 00007fee31016038 R14: 00007fee31015fa0 R15: 00007ffe0a5a4b88 [ 470.695449][T11533] [ 470.852322][T11533] ERROR: Out of memory at tomoyo_realpath_from_path. [ 471.353151][ T47] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 471.404763][ T5892] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 471.414423][T11553] FAULT_INJECTION: forcing a failure. [ 471.414423][T11553] name failslab, interval 1, probability 0, space 0, times 0 [ 471.429892][T11553] CPU: 1 UID: 0 PID: 11553 Comm: syz.2.2062 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.429917][T11553] Tainted: [L]=SOFTLOCKUP [ 471.429923][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.429933][T11553] Call Trace: [ 471.429939][T11553] [ 471.429947][T11553] dump_stack_lvl+0xe8/0x150 [ 471.429973][T11553] should_fail_ex+0x412/0x560 [ 471.429995][T11553] should_failslab+0xa8/0x100 [ 471.430014][T11553] __kmalloc_noprof+0xe8/0x760 [ 471.430030][T11553] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 471.430057][T11553] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 471.430084][T11553] genl_family_rcv_msg_doit+0xd9/0x330 [ 471.430105][T11553] ? __asan_memcpy+0x40/0x70 [ 471.430139][T11553] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 471.430166][T11553] ? apparmor_capable+0x126/0x170 [ 471.430185][T11553] ? bpf_lsm_capable+0x9/0x20 [ 471.430202][T11553] ? security_capable+0x7e/0x2c0 [ 471.430228][T11553] genl_rcv_msg+0x61c/0x7a0 [ 471.430253][T11553] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.430273][T11553] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 471.430293][T11553] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 471.430312][T11553] ? do_syscall_64+0x14d/0xf80 [ 471.430338][T11553] netlink_rcv_skb+0x232/0x4b0 [ 471.430355][T11553] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.430377][T11553] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.430392][T11553] ? genl_rcv+0x19/0x40 [ 471.430423][T11553] ? down_read+0x270/0x2e0 [ 471.430442][T11553] ? genl_rcv+0xd/0x40 [ 471.430463][T11553] genl_rcv+0x28/0x40 [ 471.430481][T11553] netlink_unicast+0x80f/0x9b0 [ 471.430503][T11553] ? __pfx_netlink_unicast+0x10/0x10 [ 471.430519][T11553] ? netlink_sendmsg+0x650/0xb40 [ 471.430535][T11553] ? skb_put+0x11b/0x210 [ 471.430556][T11553] netlink_sendmsg+0x813/0xb40 [ 471.430580][T11553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.430599][T11553] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 471.430622][T11553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.430639][T11553] sock_sendmsg_nosec+0x112/0x150 [ 471.430657][T11553] ____sys_sendmsg+0x589/0x8c0 [ 471.430676][T11553] ? __might_fault+0xaf/0x130 [ 471.430702][T11553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.430729][T11553] ? import_iovec+0x73/0xa0 [ 471.430751][T11553] ___sys_sendmsg+0x2a5/0x360 [ 471.430770][T11553] ? __lock_acquire+0x6b5/0x2cf0 [ 471.430796][T11553] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.430842][T11553] ? __fget_files+0x2a/0x420 [ 471.430861][T11553] ? __fget_files+0x3a0/0x420 [ 471.430888][T11553] __x64_sys_sendmsg+0x1bd/0x2a0 [ 471.430911][T11553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.430937][T11553] ? __pfx_ksys_write+0x10/0x10 [ 471.430962][T11553] do_syscall_64+0x14d/0xf80 [ 471.430979][T11553] ? trace_irq_disable+0x3b/0x140 [ 471.430999][T11553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.431015][T11553] ? clear_bhb_loop+0x40/0x90 [ 471.431034][T11553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.431049][T11553] RIP: 0033:0x7fee30d9c799 [ 471.431064][T11553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.431078][T11553] RSP: 002b:00007fee2efee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.431096][T11553] RAX: ffffffffffffffda RBX: 00007fee31015fa0 RCX: 00007fee30d9c799 [ 471.431110][T11553] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000009 [ 471.431125][T11553] RBP: 00007fee2efee090 R08: 0000000000000000 R09: 0000000000000000 [ 471.431135][T11553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.431144][T11553] R13: 00007fee31016038 R14: 00007fee31015fa0 R15: 00007ffe0a5a4b88 [ 471.431168][T11553] [ 471.812439][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 471.820003][ T47] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 471.828115][ T47] usb 2-1: config 0 has no interface number 0 [ 471.836441][ T47] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 471.845706][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.853800][ T47] usb 2-1: Product: syz [ 471.858109][ T47] usb 2-1: Manufacturer: syz [ 471.862725][ T47] usb 2-1: SerialNumber: syz [ 471.879562][ T47] usb 2-1: config 0 descriptor?? [ 471.912929][ T47] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 471.920429][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 471.923202][ T47] usb 2-1: selecting invalid altsetting 1 [ 471.933321][ T47] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 471.940601][ T5892] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 471.949505][T11555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.958266][ T5892] usb 1-1: config 0 has no interface number 0 [ 471.962406][ T47] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 471.966977][T11555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.974953][ T47] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 471.990602][ T47] usb 2-1: media controller created [ 471.999233][ T5892] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 472.006764][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.009623][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.029278][ T5892] usb 1-1: Product: syz [ 472.033808][ T5892] usb 1-1: Manufacturer: syz [ 472.038586][ T5892] usb 1-1: SerialNumber: syz [ 472.048921][ T5892] usb 1-1: config 0 descriptor?? [ 472.061064][ T5892] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 472.070026][ T5892] usb 1-1: selecting invalid altsetting 1 [ 472.076049][ T5892] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 472.086303][ T5892] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 472.098195][ T5892] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 472.106763][ T5892] usb 1-1: media controller created [ 472.124400][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.258652][T11542] FAULT_INJECTION: forcing a failure. [ 472.258652][T11542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.271891][T11542] CPU: 0 UID: 0 PID: 11542 Comm: syz.0.2058 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.271920][T11542] Tainted: [L]=SOFTLOCKUP [ 472.271928][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.271940][T11542] Call Trace: [ 472.271950][T11542] [ 472.271959][T11542] dump_stack_lvl+0xe8/0x150 [ 472.271993][T11542] should_fail_ex+0x412/0x560 [ 472.272020][T11542] _copy_from_user+0x2d/0xb0 [ 472.272047][T11542] i2cdev_ioctl+0x303/0x880 [ 472.272066][T11542] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 472.272088][T11542] ? __fget_files+0x3a0/0x420 [ 472.272113][T11542] ? __fget_files+0x2a/0x420 [ 472.272141][T11542] ? bpf_lsm_file_ioctl+0x9/0x20 [ 472.272157][T11542] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 472.272167][T11542] __se_sys_ioctl+0xfc/0x170 [ 472.272180][T11542] do_syscall_64+0x14d/0xf80 [ 472.272193][T11542] ? trace_irq_disable+0x3b/0x140 [ 472.272206][T11542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.272223][T11542] ? clear_bhb_loop+0x40/0x90 [ 472.272246][T11542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.272266][T11542] RIP: 0033:0x7f78cf79c799 [ 472.272284][T11542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.272300][T11542] RSP: 002b:00007f78d0721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.272315][T11542] RAX: ffffffffffffffda RBX: 00007f78cfa15fa0 RCX: 00007f78cf79c799 [ 472.272323][T11542] RDX: 0000200000000400 RSI: 0000000000000707 RDI: 0000000000000004 [ 472.272330][T11542] RBP: 00007f78d0721090 R08: 0000000000000000 R09: 0000000000000000 [ 472.272336][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.272342][T11542] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 472.272357][T11542] [ 472.456648][ T5892] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 472.464704][ T5892] zl10353_read_register: readreg error (reg=127, ret==-71) [ 472.472444][ T5892] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 472.516453][ T5892] usb 1-1: USB disconnect, device number 51 [ 472.922359][T11572] overlayfs: missing 'lowerdir' [ 473.014307][T11576] FAULT_INJECTION: forcing a failure. [ 473.014307][T11576] name failslab, interval 1, probability 0, space 0, times 0 [ 473.030249][T11576] CPU: 0 UID: 0 PID: 11576 Comm: syz.2.2070 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.030281][T11576] Tainted: [L]=SOFTLOCKUP [ 473.030289][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.030301][T11576] Call Trace: [ 473.030309][T11576] [ 473.030317][T11576] dump_stack_lvl+0xe8/0x150 [ 473.030352][T11576] should_fail_ex+0x412/0x560 [ 473.030381][T11576] should_failslab+0xa8/0x100 [ 473.030405][T11576] __kmalloc_cache_noprof+0x88/0x660 [ 473.030426][T11576] ? __request_region+0x5f/0x1a0 [ 473.030454][T11576] __request_region+0x5f/0x1a0 [ 473.030480][T11576] comedi_request_region+0x6d/0x180 [ 473.030504][T11576] pcl812_attach+0x8f/0x2380 [ 473.030525][T11576] ? __might_fault+0xaf/0x130 [ 473.030567][T11576] comedi_device_attach+0x51f/0x720 [ 473.030595][T11576] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 473.030637][T11576] ? kasan_quarantine_put+0xbb/0x1f0 [ 473.030665][T11576] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 473.030707][T11576] ? do_vfs_ioctl+0x1166/0x1530 [ 473.030730][T11576] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 473.030763][T11576] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 473.030806][T11576] ? __fget_files+0x2a/0x420 [ 473.030832][T11576] ? __fget_files+0x2a/0x420 [ 473.030852][T11576] ? __fget_files+0x3a0/0x420 [ 473.030878][T11576] ? __fget_files+0x2a/0x420 [ 473.030901][T11576] ? bpf_lsm_file_ioctl+0x9/0x20 [ 473.030917][T11576] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 473.030937][T11576] __se_sys_ioctl+0xfc/0x170 [ 473.030962][T11576] do_syscall_64+0x14d/0xf80 [ 473.030980][T11576] ? trace_irq_disable+0x3b/0x140 [ 473.030998][T11576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.031017][T11576] ? clear_bhb_loop+0x40/0x90 [ 473.031036][T11576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.031051][T11576] RIP: 0033:0x7fee30d9c799 [ 473.031066][T11576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.031080][T11576] RSP: 002b:00007fee2efee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.031097][T11576] RAX: ffffffffffffffda RBX: 00007fee31015fa0 RCX: 00007fee30d9c799 [ 473.031109][T11576] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 473.031119][T11576] RBP: 00007fee2efee090 R08: 0000000000000000 R09: 0000000000000000 [ 473.031129][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.031139][T11576] R13: 00007fee31016038 R14: 00007fee31015fa0 R15: 00007ffe0a5a4b88 [ 473.031168][T11576] [ 473.031210][T11576] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 473.092870][ T47] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 473.169366][T11580] FAULT_INJECTION: forcing a failure. [ 473.169366][T11580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.189945][ T29] audit: type=1326 audit(1774213423.528:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.2073" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee30d9c799 code=0x0 [ 473.194938][T11580] CPU: 0 UID: 0 PID: 11580 Comm: syz.0.2072 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.194964][T11580] Tainted: [L]=SOFTLOCKUP [ 473.194971][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.194982][T11580] Call Trace: [ 473.194991][T11580] [ 473.194999][T11580] dump_stack_lvl+0xe8/0x150 [ 473.195032][T11580] should_fail_ex+0x412/0x560 [ 473.195059][T11580] _copy_to_user+0x31/0xb0 [ 473.195087][T11580] simple_read_from_buffer+0xe1/0x170 [ 473.195116][T11580] proc_fail_nth_read+0x1bb/0x230 [ 473.195144][T11580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.195173][T11580] ? rw_verify_area+0x2a6/0x4d0 [ 473.195190][T11580] ? tun_chr_write_iter+0x197/0x210 [ 473.195209][T11580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.195235][T11580] vfs_read+0x20c/0xa70 [ 473.195252][T11580] ? fdget_pos+0x246/0x320 [ 473.195281][T11580] ? __pfx___mutex_lock+0x10/0x10 [ 473.195304][T11580] ? __pfx_vfs_read+0x10/0x10 [ 473.195324][T11580] ? __fget_files+0x2a/0x420 [ 473.195351][T11580] ? __fget_files+0x3a0/0x420 [ 473.195375][T11580] ? __fget_files+0x2a/0x420 [ 473.195407][T11580] ksys_read+0x150/0x270 [ 473.195427][T11580] ? __pfx_ksys_read+0x10/0x10 [ 473.195455][T11580] do_syscall_64+0x14d/0xf80 [ 473.195476][T11580] ? trace_irq_disable+0x3b/0x140 [ 473.195498][T11580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.195516][T11580] ? clear_bhb_loop+0x40/0x90 [ 473.195539][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.195557][T11580] RIP: 0033:0x7f78cf75cfce [ 473.195575][T11580] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 473.195590][T11580] RSP: 002b:00007f78d0720fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.195610][T11580] RAX: ffffffffffffffda RBX: 00007f78d07216c0 RCX: 00007f78cf75cfce [ 473.195624][T11580] RDX: 000000000000000f RSI: 00007f78d07210a0 RDI: 0000000000000005 [ 473.195636][T11580] RBP: 00007f78d0721090 R08: 0000000000000000 R09: 0000000000000000 [ 473.195648][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.195658][T11580] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 473.195687][T11580] [ 473.559235][ T47] zl10353_read_register: readreg error (reg=127, ret==-110) [ 473.567303][T11538] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 473.616135][ T47] usb 2-1: USB disconnect, device number 30 [ 473.622211][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 473.712842][ T29] audit: type=1326 audit(1774213424.058:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.2073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee30d9c799 code=0x0 [ 473.782491][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 473.788941][ T24] usb 4-1: config 139 has an invalid interface number: 49 but max is 0 [ 473.797393][ T24] usb 4-1: config 139 has no interface number 0 [ 473.803767][ T24] usb 4-1: config 139 interface 49 has no altsetting 0 [ 473.814297][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 473.823464][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.831458][ T24] usb 4-1: Product: syz [ 473.835730][ T24] usb 4-1: Manufacturer: syz [ 473.840343][ T24] usb 4-1: SerialNumber: syz [ 474.002096][ T5885] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 474.173487][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 474.209562][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.220194][T11590] tipc: Enabling of bearer rejected, failed to enable media [ 474.249950][ T5885] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 474.264359][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.264890][ T24] radio-usb-si4713 4-1:139.49: Si4713 development board discovered: (10C4:8244) [ 474.272900][ T5885] usb 1-1: Product: syz [ 474.286304][ T5885] usb 1-1: Manufacturer: syz [ 474.290939][ T5885] usb 1-1: SerialNumber: syz [ 474.300616][ T5885] usb 1-1: config 0 descriptor?? [ 474.328617][ T5885] usb 1-1: selecting invalid altsetting 1 [ 474.334810][ T5885] usb 1-1: Can not set alternate setting to 1, error: -22 [ 474.343315][ T5885] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -22 [ 474.537855][ T47] usb 1-1: USB disconnect, device number 52 [ 474.617524][T11604] Invalid argument reading file caps for ./file0 [ 474.676003][ T24] radio-usb-si4713 4-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 474.686486][ T24] usbhid 4-1:139.49: couldn't find an input interrupt endpoint [ 474.690043][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2080'. [ 474.703222][ T24] usb 4-1: USB disconnect, device number 26 [ 474.841370][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.850147][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.297747][T11622] FAULT_INJECTION: forcing a failure. [ 475.297747][T11622] name failslab, interval 1, probability 0, space 0, times 0 [ 475.310509][T11622] CPU: 1 UID: 0 PID: 11622 Comm: syz.3.2086 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.310528][T11622] Tainted: [L]=SOFTLOCKUP [ 475.310532][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.310539][T11622] Call Trace: [ 475.310545][T11622] [ 475.310550][T11622] dump_stack_lvl+0xe8/0x150 [ 475.310572][T11622] should_fail_ex+0x412/0x560 [ 475.310589][T11622] should_failslab+0xa8/0x100 [ 475.310602][T11622] __kmalloc_noprof+0xe8/0x760 [ 475.310613][T11622] ? kobject_get_path+0xc5/0x2f0 [ 475.310627][T11622] ? __kasan_kmalloc+0x93/0xb0 [ 475.310639][T11622] kobject_get_path+0xc5/0x2f0 [ 475.310653][T11622] ? kobject_uevent_env+0x28c/0x9e0 [ 475.310670][T11622] kobject_uevent_env+0x2a1/0x9e0 [ 475.310690][T11622] device_del+0x750/0x8f0 [ 475.310705][T11622] ? __pfx_device_del+0x10/0x10 [ 475.310716][T11622] ? do_raw_spin_unlock+0xf5/0x210 [ 475.310732][T11622] device_unregister+0x21/0xf0 [ 475.310743][T11622] bdi_unregister+0x440/0x530 [ 475.310758][T11622] ? __pfx_bdi_unregister+0x10/0x10 [ 475.310772][T11622] ? up_write+0x1ab/0x410 [ 475.310792][T11622] generic_shutdown_super+0x235/0x2d0 [ 475.310811][T11622] kill_anon_super+0x3b/0x70 [ 475.310821][T11622] fuse_kill_sb_anon+0x1f7/0x270 [ 475.310836][T11622] deactivate_locked_super+0xbc/0x130 [ 475.310853][T11622] cleanup_mnt+0x437/0x4d0 [ 475.310863][T11622] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.310876][T11622] task_work_run+0x1d9/0x270 [ 475.310891][T11622] ? __pfx_task_work_run+0x10/0x10 [ 475.310909][T11622] exit_to_user_mode_loop+0xed/0x480 [ 475.310924][T11622] ? rcu_is_watching+0x15/0xb0 [ 475.310937][T11622] do_syscall_64+0x32d/0xf80 [ 475.310949][T11622] ? trace_irq_disable+0x3b/0x140 [ 475.310962][T11622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.310972][T11622] ? clear_bhb_loop+0x40/0x90 [ 475.310985][T11622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.310996][T11622] RIP: 0033:0x7f50a339c799 [ 475.311007][T11622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.311016][T11622] RSP: 002b:00007f50a4209028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 475.311029][T11622] RAX: 0000000000000000 RBX: 00007f50a3615fa0 RCX: 00007f50a339c799 [ 475.311036][T11622] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 475.311042][T11622] RBP: 00007f50a4209090 R08: 0000000000000000 R09: 0000000000000000 [ 475.311049][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.311055][T11622] R13: 00007f50a3616038 R14: 00007f50a3615fa0 R15: 00007fff255b75d8 [ 475.311070][T11622] [ 475.570308][ T5885] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 475.693290][T11626] tmpfs: Bad value for 'nr_inodes' [ 475.752482][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 475.759272][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 475.771872][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 475.784578][ T5885] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 475.794656][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.803290][ T5885] usb 1-1: Product: syz [ 475.807476][ T5885] usb 1-1: Manufacturer: syz [ 475.815318][ T5885] usb 1-1: SerialNumber: syz [ 475.823190][ T5885] usb 1-1: config 0 descriptor?? [ 475.833992][ T5885] hub 1-1:0.0: bad descriptor, ignoring hub [ 475.840385][ T5885] hub 1-1:0.0: probe with driver hub failed with error -5 [ 475.850399][ T5885] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.914767][ T5885] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 475.970591][ T7415] udevd[7415]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.162491][ T5885] usb 1-1: USB disconnect, device number 53 [ 476.362102][ T24] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 476.494860][T11635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2092'. [ 476.516167][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.527090][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.539910][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.545894][T11637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.557791][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.559409][T11637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.575995][ T24] usb 4-1: Product: syz [ 476.581400][ T24] usb 4-1: Manufacturer: syz [ 476.588340][ T24] usb 4-1: SerialNumber: syz [ 476.610560][ T24] usb 4-1: 0:2 : does not exist [ 476.807868][T11631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.820827][T11631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.846099][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 476.909270][ T24] usb 4-1: USB disconnect, device number 27 [ 476.947242][ T6953] udevd[6953]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.113286][T11646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.124382][T11646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.152927][ T5885] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 477.211550][T11648] tmpfs: Bad value for 'mpol' [ 477.228139][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.239320][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.325989][ T5885] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 477.346450][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.367983][ T5885] usb 1-1: Product: syz [ 477.374620][ T5885] usb 1-1: Manufacturer: syz [ 477.383016][ T5885] usb 1-1: SerialNumber: syz [ 477.396560][ T5885] usb 1-1: config 0 descriptor?? [ 477.527146][T11660] FAULT_INJECTION: forcing a failure. [ 477.527146][T11660] name failslab, interval 1, probability 0, space 0, times 0 [ 477.544263][T11660] CPU: 0 UID: 0 PID: 11660 Comm: syz.1.2100 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.544292][T11660] Tainted: [L]=SOFTLOCKUP [ 477.544299][T11660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.544309][T11660] Call Trace: [ 477.544316][T11660] [ 477.544324][T11660] dump_stack_lvl+0xe8/0x150 [ 477.544354][T11660] should_fail_ex+0x412/0x560 [ 477.544382][T11660] should_failslab+0xa8/0x100 [ 477.544404][T11660] __kmalloc_cache_noprof+0x88/0x660 [ 477.544425][T11660] ? binder_transaction+0x2355/0x7070 [ 477.544447][T11660] ? do_raw_spin_unlock+0xf5/0x210 [ 477.544474][T11660] binder_transaction+0x2355/0x7070 [ 477.544495][T11660] ? arch_stack_walk+0xfb/0x150 [ 477.544519][T11660] ? __lock_acquire+0x6b5/0x2cf0 [ 477.544536][T11660] ? ima_match_policy+0x112/0x21e0 [ 477.544557][T11660] ? __pfx_binder_transaction+0x10/0x10 [ 477.544578][T11660] ? __lock_acquire+0x6b5/0x2cf0 [ 477.544598][T11660] ? __lock_acquire+0x6b5/0x2cf0 [ 477.544614][T11660] ? __lock_acquire+0x6b5/0x2cf0 [ 477.544632][T11660] ? __might_fault+0xaf/0x130 [ 477.544648][T11660] ? __might_fault+0xaf/0x130 [ 477.544673][T11660] binder_ioctl_write_read+0xb45/0xa590 [ 477.544695][T11660] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.544715][T11660] ? stack_trace_save+0xa9/0x100 [ 477.544728][T11660] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 477.544739][T11660] ? kasan_save_free_info+0x46/0x50 [ 477.544755][T11660] ? stack_depot_save_flags+0x33/0x810 [ 477.544773][T11660] ? __lock_acquire+0x6b5/0x2cf0 [ 477.544799][T11660] ? __pfx_binder_debug+0x10/0x10 [ 477.544810][T11660] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.544830][T11660] ? _raw_spin_unlock+0x28/0x50 [ 477.544840][T11660] ? binder_get_thread+0x177/0x6d0 [ 477.544854][T11660] binder_ioctl+0x423/0x1b10 [ 477.544866][T11660] ? tomoyo_path_number_perm+0x219/0x630 [ 477.544881][T11660] ? tomoyo_path_number_perm+0x219/0x630 [ 477.544897][T11660] ? do_vfs_ioctl+0x1166/0x1530 [ 477.544908][T11660] ? __pfx_binder_ioctl+0x10/0x10 [ 477.544924][T11660] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 477.544954][T11660] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 477.544993][T11660] ? __fget_files+0x2a/0x420 [ 477.545021][T11660] ? __fget_files+0x2a/0x420 [ 477.545041][T11660] ? __fget_files+0x3a0/0x420 [ 477.545055][T11660] ? __fget_files+0x2a/0x420 [ 477.545071][T11660] ? bpf_lsm_file_ioctl+0x9/0x20 [ 477.545083][T11660] ? __pfx_binder_ioctl+0x10/0x10 [ 477.545095][T11660] __se_sys_ioctl+0xfc/0x170 [ 477.545107][T11660] do_syscall_64+0x14d/0xf80 [ 477.545120][T11660] ? trace_irq_disable+0x3b/0x140 [ 477.545133][T11660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.545143][T11660] ? clear_bhb_loop+0x40/0x90 [ 477.545156][T11660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.545167][T11660] RIP: 0033:0x7f706c99c799 [ 477.545178][T11660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.545187][T11660] RSP: 002b:00007f706d862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.545200][T11660] RAX: ffffffffffffffda RBX: 00007f706cc15fa0 RCX: 00007f706c99c799 [ 477.545208][T11660] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 477.545215][T11660] RBP: 00007f706d862090 R08: 0000000000000000 R09: 0000000000000000 [ 477.545221][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.545227][T11660] R13: 00007f706cc16038 R14: 00007f706cc15fa0 R15: 00007ffc8a7b3768 [ 477.545242][T11660] [ 478.014317][T11668] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 478.110062][T11644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.119088][T11644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.147703][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 478.154936][ T5885] usb 1-1: Firmware version (0.0) predates our first public release. [ 478.163282][ T5885] usb 1-1: Please update to version 0.2 or newer [ 478.204380][ T5885] usb 1-1: USB disconnect, device number 54 [ 478.372150][ T5892] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 478.522065][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 478.528798][ T5892] usb 2-1: config 139 has an invalid interface number: 49 but max is 0 [ 478.537395][ T5892] usb 2-1: config 139 has no interface number 0 [ 478.543915][ T5892] usb 2-1: config 139 interface 49 has no altsetting 0 [ 478.552904][ T5892] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 478.562146][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.570246][ T5892] usb 2-1: Product: syz [ 478.574473][ T5892] usb 2-1: Manufacturer: syz [ 478.579085][ T5892] usb 2-1: SerialNumber: syz [ 479.000712][ T5892] radio-usb-si4713 2-1:139.49: Si4713 development board discovered: (10C4:8244) [ 479.112161][ T5885] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 479.192075][T10170] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 479.267790][ T5885] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 479.276993][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 479.285233][ T5885] usb 4-1: Product: syz [ 479.289449][ T5885] usb 4-1: Manufacturer: syz [ 479.294158][ T5885] usb 4-1: SerialNumber: syz [ 479.300984][ T5885] usb 4-1: config 0 descriptor?? [ 479.308732][ T5885] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 479.316335][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 479.324768][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 479.334753][ T5885] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 479.342976][T10170] usb 1-1: Using ep0 maxpacket: 32 [ 479.348182][ T5885] usb 4-1: media controller created [ 479.356848][T10170] usb 1-1: config 139 has an invalid interface number: 49 but max is 0 [ 479.371898][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.380300][T10170] usb 1-1: config 139 has no interface number 0 [ 479.387949][T10170] usb 1-1: config 139 interface 49 has no altsetting 0 [ 479.404206][T10170] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 479.413359][T10170] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.422993][T10170] usb 1-1: Product: syz [ 479.427367][T10170] usb 1-1: Manufacturer: syz [ 479.432322][T10170] usb 1-1: SerialNumber: syz [ 479.448906][ T5892] radio-usb-si4713 2-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 479.462323][ T5892] usbhid 2-1:139.49: couldn't find an input interrupt endpoint [ 479.473352][ T5892] usb 2-1: USB disconnect, device number 31 [ 479.651324][T11685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.660760][T11685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.671896][ T5885] cxusb: set interface failed [ 479.678832][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 479.711671][ T5885] DVB: Unable to find symbol mt352_attach() [ 479.717692][ T5885] dvb-usb: bulk message failed: -22 (5/0) [ 479.726437][ T5885] zl10353_read_register: readreg error (reg=127, ret==-121) [ 479.733995][ T5885] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 479.803518][ T5885] rc_core: IR keymap rc-dvico-mce not found [ 479.809492][ T5885] Registered IR keymap rc-empty [ 479.816025][ T5885] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 479.827090][ T5885] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input63 [ 479.839039][ T5885] dvb-usb: schedule remote query interval to 100 msecs. [ 479.846125][ T5885] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 479.858099][ T5885] usb 4-1: USB disconnect, device number 28 [ 479.883222][T10170] radio-usb-si4713 1-1:139.49: Si4713 development board discovered: (10C4:8244) [ 479.926809][ T5885] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 480.255592][ T5892] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 480.283814][T10170] radio-usb-si4713 1-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 480.302431][T10170] usbhid 1-1:139.49: couldn't find an input interrupt endpoint [ 480.324473][T10170] usb 1-1: USB disconnect, device number 55 [ 480.329121][T11698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.424848][T11705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.442764][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 480.456458][ T5892] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 480.467136][T11707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.467543][T11707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.483438][ T5892] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 480.500940][ T5892] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.512807][ T5892] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 480.528749][ T5892] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 480.539472][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.548964][ T5892] usb 2-1: Product: syz [ 480.553927][ T5892] usb 2-1: Manufacturer: syz [ 480.558740][ T5892] usb 2-1: SerialNumber: syz [ 480.575220][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 480.585853][ T5892] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input64 [ 480.772838][ T47] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 480.792272][ T5892] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 480.800710][ T5892] (id 0x00) [ 480.866322][ T5892] rc_core: IR keymap rc-imon-pad not found [ 480.879603][ T5892] Registered IR keymap rc-empty [ 480.884646][ T5892] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 480.895304][ T5892] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 480.924795][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 480.934441][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.953068][ T47] pwc: Logitech/Cisco VT Camera webcam detected. [ 480.995013][ T5892] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 481.008081][ T5892] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input65 [ 481.028364][ T5892] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:32> initialized [ 481.029994][T11727] FAULT_INJECTION: forcing a failure. [ 481.029994][T11727] name failslab, interval 1, probability 0, space 0, times 0 [ 481.050833][T11727] CPU: 1 UID: 0 PID: 11727 Comm: syz.0.2121 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.050862][T11727] Tainted: [L]=SOFTLOCKUP [ 481.050869][T11727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.050882][T11727] Call Trace: [ 481.050890][T11727] [ 481.050898][T11727] dump_stack_lvl+0xe8/0x150 [ 481.050931][T11727] should_fail_ex+0x412/0x560 [ 481.050957][T11727] ? __d_alloc+0x37/0x6f0 [ 481.050985][T11727] should_failslab+0xa8/0x100 [ 481.051008][T11727] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 481.051047][T11727] __d_alloc+0x37/0x6f0 [ 481.051080][T11727] d_alloc_parallel+0xe6/0x1610 [ 481.051099][T11727] ? __lock_acquire+0x6b5/0x2cf0 [ 481.051140][T11727] ? __lock_acquire+0x6b5/0x2cf0 [ 481.051170][T11727] ? __pfx_d_alloc_parallel+0x10/0x10 [ 481.051195][T11727] ? __raw_spin_lock_init+0x45/0x100 [ 481.051220][T11727] ? __init_waitqueue_head+0xa9/0x150 [ 481.051249][T11727] __lookup_slow+0x137/0x410 [ 481.051277][T11727] ? __pfx___lookup_slow+0x10/0x10 [ 481.051314][T11727] ? down_read+0x270/0x2e0 [ 481.051340][T11727] lookup_slow+0x53/0x70 [ 481.051367][T11727] ovl_lookup_single+0x32f/0xea0 [ 481.051404][T11727] ? __pfx_ovl_lookup_single+0x10/0x10 [ 481.051429][T11727] ? css_rstat_updated+0x23a/0x530 [ 481.051459][T11727] ? __pfx_css_rstat_updated+0x10/0x10 [ 481.051489][T11727] ovl_lookup_layer+0x377/0x450 [ 481.051527][T11727] ovl_lookup+0x5f2/0x1c80 [ 481.051549][T11727] ? percpu_ref_get_many+0x19/0x140 [ 481.051605][T11727] ? __pfx_ovl_lookup+0x10/0x10 [ 481.051638][T11727] ? do_raw_spin_unlock+0xf5/0x210 [ 481.051672][T11727] ? d_alloc+0x144/0x190 [ 481.051700][T11727] lookup_one_qstr_excl+0x12d/0x360 [ 481.051734][T11727] __start_renaming+0x1db/0x410 [ 481.051772][T11727] filename_renameat2+0x38c/0x9c0 [ 481.051795][T11727] ? __might_fault+0xaf/0x130 [ 481.051822][T11727] ? __might_fault+0xaf/0x130 [ 481.051856][T11727] ? __pfx_filename_renameat2+0x10/0x10 [ 481.051897][T11727] ? do_getname+0x151/0x250 [ 481.051924][T11727] __se_sys_renameat2+0x5a/0x2c0 [ 481.051951][T11727] do_syscall_64+0x14d/0xf80 [ 481.051973][T11727] ? trace_irq_disable+0x3b/0x140 [ 481.051993][T11727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.052011][T11727] ? clear_bhb_loop+0x40/0x90 [ 481.052029][T11727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.052043][T11727] RIP: 0033:0x7f78cf79c799 [ 481.052058][T11727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.052071][T11727] RSP: 002b:00007f78d0721028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 481.052085][T11727] RAX: ffffffffffffffda RBX: 00007f78cfa15fa0 RCX: 00007f78cf79c799 [ 481.052096][T11727] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 481.052105][T11727] RBP: 00007f78d0721090 R08: 0000000000000002 R09: 0000000000000000 [ 481.052114][T11727] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 481.052123][T11727] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 481.052150][T11727] [ 481.382242][ T47] pwc: Failed to set LED on/off time (-71) [ 481.390969][ T47] pwc: send_video_command error -71 [ 481.396380][ T47] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 481.404150][ T47] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 481.417987][ T47] usb 4-1: USB disconnect, device number 29 [ 481.588108][T11731] could not allocate digest TFM handle rmd256 [ 481.792172][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 481.942913][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 481.949810][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 481.961104][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.974344][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 481.984177][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.994335][ T24] usb 1-1: config 0 descriptor?? [ 482.182076][ T5885] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 482.243440][ T47] usb 2-1: USB disconnect, device number 32 [ 482.334675][ T5885] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 482.344618][ T5885] usb 4-1: config 0 has no interface number 0 [ 482.354840][ T5885] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 482.364021][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.377478][ T5885] usb 4-1: Product: syz [ 482.381943][ T5885] usb 4-1: Manufacturer: syz [ 482.387761][ T5885] usb 4-1: SerialNumber: syz [ 482.395286][ T5885] usb 4-1: config 0 descriptor?? [ 482.419559][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.443238][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.454474][T11754] i2c i2c-0: Invalid block write size 34 [ 482.476841][ T24] hid_parser_main: 28 callbacks suppressed [ 482.476863][ T24] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0 [ 482.490425][ T24] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0 [ 482.497468][ T24] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0 [ 482.505303][ T24] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0 [ 482.512164][ T24] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0 [ 482.519003][ T24] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0 [ 482.525943][ T24] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0 [ 482.532782][ T24] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0 [ 482.539554][ T24] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0 [ 482.546383][ T24] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0 [ 482.553192][ T24] ryos 0003:1E7D:3138.0020: collection stack underflow [ 482.560042][ T24] ryos 0003:1E7D:3138.0020: item 0 0 0 12 parsing failed [ 482.568043][ T24] ryos 0003:1E7D:3138.0020: parse failed [ 482.573851][ T24] ryos 0003:1E7D:3138.0020: probe with driver ryos failed with error -22 [ 482.620302][ T5892] usb 4-1: USB disconnect, device number 30 [ 482.677794][ T24] usb 1-1: USB disconnect, device number 56 [ 482.702109][ T5885] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 482.832077][ T5885] usb 2-1: device descriptor read/64, error -71 [ 483.082134][ T5885] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 483.222310][ T5885] usb 2-1: device descriptor read/64, error -71 [ 483.342343][ T5885] usb usb2-port1: attempt power cycle [ 483.513560][T11775] usb usb8: usbfs: process 11775 (syz.3.2135) did not claim interface 0 before use [ 483.691189][T11782] FAULT_INJECTION: forcing a failure. [ 483.691189][T11782] name failslab, interval 1, probability 0, space 0, times 0 [ 483.704413][ T5885] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 483.713943][T11782] CPU: 0 UID: 0 PID: 11782 Comm: syz.0.2138 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.713973][T11782] Tainted: [L]=SOFTLOCKUP [ 483.713979][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.713989][T11782] Call Trace: [ 483.713996][T11782] [ 483.714003][T11782] dump_stack_lvl+0xe8/0x150 [ 483.714031][T11782] should_fail_ex+0x412/0x560 [ 483.714053][T11782] ? __d_alloc+0x37/0x6f0 [ 483.714076][T11782] should_failslab+0xa8/0x100 [ 483.714095][T11782] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 483.714126][T11782] __d_alloc+0x37/0x6f0 [ 483.714153][T11782] d_alloc+0x4b/0x190 [ 483.714173][T11782] ? lookup_one_qstr_excl+0xc4/0x360 [ 483.714197][T11782] lookup_one_qstr_excl+0xd8/0x360 [ 483.714219][T11782] ? lock_two_directories+0x1cc/0x220 [ 483.714244][T11782] __start_renaming+0x186/0x410 [ 483.714274][T11782] filename_renameat2+0x38c/0x9c0 [ 483.714291][T11782] ? __might_fault+0xaf/0x130 [ 483.714314][T11782] ? __might_fault+0xaf/0x130 [ 483.714341][T11782] ? __pfx_filename_renameat2+0x10/0x10 [ 483.714373][T11782] ? do_getname+0x151/0x250 [ 483.714394][T11782] __se_sys_renameat2+0x5a/0x2c0 [ 483.714416][T11782] do_syscall_64+0x14d/0xf80 [ 483.714434][T11782] ? trace_irq_disable+0x3b/0x140 [ 483.714451][T11782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.714467][T11782] ? clear_bhb_loop+0x40/0x90 [ 483.714486][T11782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.714502][T11782] RIP: 0033:0x7f78cf79c799 [ 483.714520][T11782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.714534][T11782] RSP: 002b:00007f78d0721028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 483.714551][T11782] RAX: ffffffffffffffda RBX: 00007f78cfa15fa0 RCX: 00007f78cf79c799 [ 483.714562][T11782] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 483.714574][T11782] RBP: 00007f78d0721090 R08: 0000000000000001 R09: 0000000000000000 [ 483.714584][T11782] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.714594][T11782] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 483.714620][T11782] [ 483.746069][ T5885] usb 2-1: device descriptor read/8, error -71 [ 483.762201][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 483.982142][ T5885] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 484.012850][ T5885] usb 2-1: device descriptor read/8, error -71 [ 484.105323][ T24] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 484.116710][ T24] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.130504][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 484.132499][ T5885] usb usb2-port1: unable to enumerate USB device [ 484.140037][ T24] usb 4-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 484.160432][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.173421][ T24] usb 4-1: config 0 descriptor?? [ 484.179126][T11775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.204347][T11790] FAULT_INJECTION: forcing a failure. [ 484.204347][T11790] name failslab, interval 1, probability 0, space 0, times 0 [ 484.217496][T11790] CPU: 0 UID: 0 PID: 11790 Comm: syz.0.2141 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.217515][T11790] Tainted: [L]=SOFTLOCKUP [ 484.217522][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 484.217534][T11790] Call Trace: [ 484.217542][T11790] [ 484.217550][T11790] dump_stack_lvl+0xe8/0x150 [ 484.217583][T11790] should_fail_ex+0x412/0x560 [ 484.217611][T11790] should_failslab+0xa8/0x100 [ 484.217626][T11790] __kmalloc_cache_noprof+0x88/0x660 [ 484.217638][T11790] ? vhost_task_create+0x123/0x380 [ 484.217654][T11790] vhost_task_create+0x123/0x380 [ 484.217666][T11790] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 484.217685][T11790] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 484.217708][T11790] ? __pfx_vhost_task_create+0x10/0x10 [ 484.217739][T11790] ? __pfx_vhost_task_fn+0x10/0x10 [ 484.217765][T11790] ? __lock_acquire+0x6b5/0x2cf0 [ 484.217782][T11790] ? kasan_save_track+0x4f/0x80 [ 484.217791][T11790] ? kasan_save_track+0x3e/0x80 [ 484.217799][T11790] ? kasan_save_free_info+0x46/0x50 [ 484.217812][T11790] ? __kasan_slab_free+0x5c/0x80 [ 484.217821][T11790] ? kfree+0x1c5/0x640 [ 484.217849][T11790] kvm_mmu_post_init_vm+0x147/0x2d0 [ 484.217875][T11790] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 484.217915][T11790] ? __mutex_trylock_common+0x158/0x260 [ 484.217928][T11790] ? look_up_lock_class+0x57/0x110 [ 484.217941][T11790] ? register_lock_class+0x31/0x2e0 [ 484.217956][T11790] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 484.217971][T11790] ? __lock_acquire+0x6b5/0x2cf0 [ 484.217999][T11790] ? __mutex_lock+0x320/0x1420 [ 484.218029][T11790] ? kasan_quarantine_put+0xbb/0x1f0 [ 484.218067][T11790] ? do_raw_write_lock+0x11d/0x260 [ 484.218088][T11790] kvm_vcpu_ioctl+0xa62/0xfd0 [ 484.218103][T11790] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 484.218114][T11790] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 484.218149][T11790] ? __fget_files+0x2a/0x420 [ 484.218178][T11790] ? __fget_files+0x2a/0x420 [ 484.218202][T11790] ? __fget_files+0x3a0/0x420 [ 484.218221][T11790] ? __fget_files+0x2a/0x420 [ 484.218237][T11790] ? bpf_lsm_file_ioctl+0x9/0x20 [ 484.218248][T11790] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 484.218260][T11790] __se_sys_ioctl+0xfc/0x170 [ 484.218272][T11790] do_syscall_64+0x14d/0xf80 [ 484.218292][T11790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.218312][T11790] ? clear_bhb_loop+0x40/0x90 [ 484.218335][T11790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.218354][T11790] RIP: 0033:0x7f78cf79c799 [ 484.218370][T11790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.218379][T11790] RSP: 002b:00007f78d0721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.218391][T11790] RAX: ffffffffffffffda RBX: 00007f78cfa15fa0 RCX: 00007f78cf79c799 [ 484.218399][T11790] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 484.218406][T11790] RBP: 00007f78d0721090 R08: 0000000000000000 R09: 0000000000000000 [ 484.218415][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.218421][T11790] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 484.218453][T11790] [ 484.582864][T11794] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2142'. [ 484.755423][ T24] asus 0003:0B05:1807.0021: unexpected long global item [ 484.763754][ T24] asus 0003:0B05:1807.0021: Asus hid parse failed: -22 [ 484.771302][ T24] asus 0003:0B05:1807.0021: probe with driver asus failed with error -22 [ 484.823336][ T5924] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 484.958144][T10170] usb 4-1: USB disconnect, device number 31 [ 484.973409][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 484.990779][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short [ 485.011012][ T5924] usb 1-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 485.025923][ T5924] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x83 has invalid maxpacket 2031, setting to 1024 [ 485.039205][ T5924] usb 1-1: New USB device found, idVendor=001e, idProduct=3237, bcdDevice=60.83 [ 485.048745][ T5924] usb 1-1: New USB device strings: Mfr=86, Product=28, SerialNumber=3 [ 485.069333][ T5924] usb 1-1: Product: syz [ 485.073633][ T5924] usb 1-1: Manufacturer: syz [ 485.078240][ T5924] usb 1-1: SerialNumber: syz [ 485.294732][ T5924] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 485.356853][ T5924] usb 1-1: USB disconnect, device number 57 [ 485.786443][T11822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2151'. [ 485.877292][T11825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.883816][T11827] FAULT_INJECTION: forcing a failure. [ 485.883816][T11827] name failslab, interval 1, probability 0, space 0, times 0 [ 485.897936][T11825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.900197][T11827] CPU: 0 UID: 0 PID: 11827 Comm: syz.0.2153 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.900226][T11827] Tainted: [L]=SOFTLOCKUP [ 485.900232][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.900244][T11827] Call Trace: [ 485.900251][T11827] [ 485.900259][T11827] dump_stack_lvl+0xe8/0x150 [ 485.900291][T11827] should_fail_ex+0x412/0x560 [ 485.900320][T11827] should_failslab+0xa8/0x100 [ 485.900342][T11827] __kmalloc_cache_noprof+0x88/0x660 [ 485.900362][T11827] ? comedi_8254_io_alloc+0xb0/0x290 [ 485.900392][T11827] comedi_8254_io_alloc+0xb0/0x290 [ 485.900414][T11827] ? __pfx_i8254_io8_cb+0x10/0x10 [ 485.900435][T11827] ? comedi_request_region+0x7b/0x180 [ 485.900455][T11827] pcl812_attach+0x121/0x2380 [ 485.900475][T11827] ? __might_fault+0xaf/0x130 [ 485.900516][T11827] comedi_device_attach+0x51f/0x720 [ 485.900542][T11827] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 485.900581][T11827] ? kasan_quarantine_put+0xbb/0x1f0 [ 485.900608][T11827] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 485.900654][T11827] ? do_vfs_ioctl+0x1166/0x1530 [ 485.900677][T11827] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 485.900709][T11827] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 485.900751][T11827] ? __fget_files+0x2a/0x420 [ 485.900774][T11827] ? __fget_files+0x2a/0x420 [ 485.900800][T11827] ? __fget_files+0x3a0/0x420 [ 485.900823][T11827] ? __fget_files+0x2a/0x420 [ 485.900851][T11827] ? bpf_lsm_file_ioctl+0x9/0x20 [ 485.900870][T11827] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 485.900894][T11827] __se_sys_ioctl+0xfc/0x170 [ 485.900916][T11827] do_syscall_64+0x14d/0xf80 [ 485.900937][T11827] ? trace_irq_disable+0x3b/0x140 [ 485.900959][T11827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.900977][T11827] ? clear_bhb_loop+0x40/0x90 [ 485.901000][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.901018][T11827] RIP: 0033:0x7f78cf79c799 [ 485.901036][T11827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.901051][T11827] RSP: 002b:00007f78d0721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.901070][T11827] RAX: ffffffffffffffda RBX: 00007f78cfa15fa0 RCX: 00007f78cf79c799 [ 485.901085][T11827] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 485.901098][T11827] RBP: 00007f78d0721090 R08: 0000000000000000 R09: 0000000000000000 [ 485.901110][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.901122][T11827] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 485.901151][T11827] [ 486.170185][ T5924] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 486.282090][ T5885] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 486.322154][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 486.328971][ T5924] usb 4-1: config 139 has an invalid interface number: 49 but max is 0 [ 486.337556][ T5924] usb 4-1: config 139 has no interface number 0 [ 486.343908][ T5924] usb 4-1: config 139 interface 49 has no altsetting 0 [ 486.353559][ T5924] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 486.363775][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.382142][ T5924] usb 4-1: Product: syz [ 486.391899][ T5924] usb 4-1: Manufacturer: syz [ 486.396983][ T5924] usb 4-1: SerialNumber: syz [ 486.447768][ T5885] usb 1-1: config 2 has an invalid interface number: 184 but max is 0 [ 486.464544][ T5885] usb 1-1: config 2 has no interface number 0 [ 486.470762][ T5885] usb 1-1: config 2 interface 184 has no altsetting 0 [ 486.481797][ T5885] usb 1-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= c.2f [ 486.497357][T11831] FAULT_INJECTION: forcing a failure. [ 486.497357][T11831] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.511253][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.519642][T11831] CPU: 0 UID: 0 PID: 11831 Comm: syz.1.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.519671][T11831] Tainted: [L]=SOFTLOCKUP [ 486.519678][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.519689][T11831] Call Trace: [ 486.519697][T11831] [ 486.519705][T11831] dump_stack_lvl+0xe8/0x150 [ 486.519739][T11831] should_fail_ex+0x412/0x560 [ 486.519768][T11831] prepare_alloc_pages+0x22a/0x650 [ 486.519797][T11831] __alloc_frozen_pages_noprof+0x119/0x3d0 [ 486.519822][T11831] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 486.519848][T11831] ? __pfx_policy_nodemask+0x10/0x10 [ 486.519868][T11831] ? kasan_save_track+0x4f/0x80 [ 486.519884][T11831] ? kasan_save_track+0x3e/0x80 [ 486.519900][T11831] ? __kasan_kmalloc+0x93/0xb0 [ 486.519916][T11831] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 486.519933][T11831] ? __get_vm_area_node+0x13f/0x300 [ 486.519960][T11831] ? __vmalloc_node_noprof+0xc2/0x100 [ 486.519985][T11831] ? dup_task_struct+0x298/0x840 [ 486.520012][T11831] ? copy_process+0x89b/0x4430 [ 486.520037][T11831] ? vhost_task_create+0x1f9/0x380 [ 486.520059][T11831] ? kvm_mmu_post_init_vm+0x147/0x2d0 [ 486.520079][T11831] ? kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 486.520107][T11831] alloc_pages_mpol+0x235/0x490 [ 486.520133][T11831] alloc_pages_noprof+0xac/0x2a0 [ 486.520157][T11831] get_free_pages_noprof+0xf/0x80 [ 486.520179][T11831] __kasan_populate_vmalloc+0x38/0x1d0 [ 486.520206][T11831] ? do_raw_spin_unlock+0xf5/0x210 [ 486.520234][T11831] alloc_vmap_area+0xd47/0x1480 [ 486.520275][T11831] ? __pfx_alloc_vmap_area+0x10/0x10 [ 486.520299][T11831] ? __kasan_kmalloc+0x93/0xb0 [ 486.520321][T11831] ? __get_vm_area_node+0x13f/0x300 [ 486.520346][T11831] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 486.520365][T11831] ? copy_process+0x89b/0x4430 [ 486.520392][T11831] __get_vm_area_node+0x1f8/0x300 [ 486.520426][T11831] __vmalloc_node_range_noprof+0x36a/0x1750 [ 486.520455][T11831] ? copy_process+0x89b/0x4430 [ 486.520500][T11831] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 486.520536][T11831] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 486.520567][T11831] ? rcu_is_watching+0x15/0xb0 [ 486.520594][T11831] ? memcpy_and_pad+0x48/0x80 [ 486.520617][T11831] __vmalloc_node_noprof+0xc2/0x100 [ 486.520645][T11831] ? copy_process+0x89b/0x4430 [ 486.520670][T11831] ? copy_process+0x89b/0x4430 [ 486.520700][T11831] dup_task_struct+0x298/0x840 [ 486.520731][T11831] copy_process+0x89b/0x4430 [ 486.520789][T11831] ? __pfx_copy_process+0x10/0x10 [ 486.520823][T11831] ? mutex_init_lockdep+0xdf/0x110 [ 486.520846][T11831] vhost_task_create+0x1f9/0x380 [ 486.520869][T11831] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 486.520890][T11831] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 486.520912][T11831] ? __pfx_vhost_task_create+0x10/0x10 [ 486.520942][T11831] ? __pfx_vhost_task_fn+0x10/0x10 [ 486.520969][T11831] ? __lock_acquire+0x6b5/0x2cf0 [ 486.520999][T11831] ? kasan_save_track+0x4f/0x80 [ 486.521015][T11831] ? kasan_save_track+0x3e/0x80 [ 486.521031][T11831] ? kasan_save_free_info+0x46/0x50 [ 486.521053][T11831] ? __kasan_slab_free+0x5c/0x80 [ 486.521070][T11831] ? kfree+0x1c5/0x640 [ 486.521097][T11831] kvm_mmu_post_init_vm+0x147/0x2d0 [ 486.521124][T11831] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 486.521156][T11831] ? __mutex_trylock_common+0x158/0x260 [ 486.521177][T11831] ? look_up_lock_class+0x57/0x110 [ 486.521201][T11831] ? register_lock_class+0x31/0x2e0 [ 486.521226][T11831] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 486.521253][T11831] ? __lock_acquire+0x6b5/0x2cf0 [ 486.521282][T11831] ? __mutex_lock+0x320/0x1420 [ 486.521308][T11831] ? kasan_quarantine_put+0xbb/0x1f0 [ 486.521345][T11831] ? do_raw_write_lock+0x11d/0x260 [ 486.521381][T11831] kvm_vcpu_ioctl+0xa62/0xfd0 [ 486.521409][T11831] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 486.521428][T11831] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 486.521470][T11831] ? __fget_files+0x2a/0x420 [ 486.521499][T11831] ? __fget_files+0x2a/0x420 [ 486.521522][T11831] ? __fget_files+0x3a0/0x420 [ 486.521546][T11831] ? __fget_files+0x2a/0x420 [ 486.521574][T11831] ? bpf_lsm_file_ioctl+0x9/0x20 [ 486.521600][T11831] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 486.521622][T11831] __se_sys_ioctl+0xfc/0x170 [ 486.521645][T11831] do_syscall_64+0x14d/0xf80 [ 486.521667][T11831] ? trace_irq_disable+0x3b/0x140 [ 486.521689][T11831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.521708][T11831] ? clear_bhb_loop+0x40/0x90 [ 486.521731][T11831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.521750][T11831] RIP: 0033:0x7f706c99c799 [ 486.521769][T11831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.521785][T11831] RSP: 002b:00007f706d862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.521805][T11831] RAX: ffffffffffffffda RBX: 00007f706cc15fa0 RCX: 00007f706c99c799 [ 486.521820][T11831] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 486.521832][T11831] RBP: 00007f706d862090 R08: 0000000000000000 R09: 0000000000000000 [ 486.521844][T11831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.521855][T11831] R13: 00007f706cc16038 R14: 00007f706cc15fa0 R15: 00007ffc8a7b3768 [ 486.521886][T11831] [ 486.582531][T11831] syz.1.2155: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 486.585408][ T5885] usb 1-1: Product: syz [ 486.590152][T11831] ,cpuset= [ 486.594993][ T5885] usb 1-1: Manufacturer: syz [ 486.595015][ T5885] usb 1-1: SerialNumber: syz [ 486.815595][T11833] comedi comedi2: Minor 3 could not be opened [ 486.820540][T11831] / [ 487.080267][ T5924] radio-usb-si4713 4-1:139.49: Si4713 development board discovered: (10C4:8244) [ 487.142055][T11831] ,mems_allowed=0-1 [ 487.147575][T11831] CPU: 1 UID: 0 PID: 11831 Comm: syz.1.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.147603][T11831] Tainted: [L]=SOFTLOCKUP [ 487.147610][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.147621][T11831] Call Trace: [ 487.147629][T11831] [ 487.147638][T11831] dump_stack_lvl+0xe8/0x150 [ 487.147672][T11831] warn_alloc+0x249/0x340 [ 487.147695][T11831] ? kasan_quarantine_put+0xbb/0x1f0 [ 487.147727][T11831] ? __pfx_warn_alloc+0x10/0x10 [ 487.147749][T11831] ? __get_vm_area_node+0x211/0x300 [ 487.147775][T11831] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 487.147797][T11831] ? copy_process+0x89b/0x4430 [ 487.147826][T11831] ? __get_vm_area_node+0x211/0x300 [ 487.147860][T11831] __vmalloc_node_range_noprof+0x38f/0x1750 [ 487.147909][T11831] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 487.147945][T11831] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 487.147976][T11831] ? rcu_is_watching+0x15/0xb0 [ 487.147997][T11831] ? memcpy_and_pad+0x48/0x80 [ 487.148028][T11831] __vmalloc_node_noprof+0xc2/0x100 [ 487.148056][T11831] ? copy_process+0x89b/0x4430 [ 487.148082][T11831] ? copy_process+0x89b/0x4430 [ 487.148112][T11831] dup_task_struct+0x298/0x840 [ 487.148145][T11831] copy_process+0x89b/0x4430 [ 487.148202][T11831] ? __pfx_copy_process+0x10/0x10 [ 487.148237][T11831] ? mutex_init_lockdep+0xdf/0x110 [ 487.148261][T11831] vhost_task_create+0x1f9/0x380 [ 487.148285][T11831] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 487.148306][T11831] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 487.148329][T11831] ? __pfx_vhost_task_create+0x10/0x10 [ 487.148359][T11831] ? __pfx_vhost_task_fn+0x10/0x10 [ 487.148386][T11831] ? __lock_acquire+0x6b5/0x2cf0 [ 487.148416][T11831] ? kasan_save_track+0x4f/0x80 [ 487.148432][T11831] ? kasan_save_track+0x3e/0x80 [ 487.148447][T11831] ? kasan_save_free_info+0x46/0x50 [ 487.148470][T11831] ? __kasan_slab_free+0x5c/0x80 [ 487.148487][T11831] ? kfree+0x1c5/0x640 [ 487.148515][T11831] kvm_mmu_post_init_vm+0x147/0x2d0 [ 487.148541][T11831] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 487.148573][T11831] ? __mutex_trylock_common+0x158/0x260 [ 487.148594][T11831] ? look_up_lock_class+0x57/0x110 [ 487.148617][T11831] ? register_lock_class+0x31/0x2e0 [ 487.148642][T11831] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 487.148668][T11831] ? __lock_acquire+0x6b5/0x2cf0 [ 487.148697][T11831] ? __mutex_lock+0x320/0x1420 [ 487.148727][T11831] ? kasan_quarantine_put+0xbb/0x1f0 [ 487.148766][T11831] ? do_raw_write_lock+0x11d/0x260 [ 487.148805][T11831] kvm_vcpu_ioctl+0xa62/0xfd0 [ 487.148833][T11831] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 487.148852][T11831] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 487.148895][T11831] ? __fget_files+0x2a/0x420 [ 487.148923][T11831] ? __fget_files+0x2a/0x420 [ 487.148947][T11831] ? __fget_files+0x3a0/0x420 [ 487.148970][T11831] ? __fget_files+0x2a/0x420 [ 487.148998][T11831] ? bpf_lsm_file_ioctl+0x9/0x20 [ 487.149025][T11831] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 487.149046][T11831] __se_sys_ioctl+0xfc/0x170 [ 487.149070][T11831] do_syscall_64+0x14d/0xf80 [ 487.149091][T11831] ? trace_irq_disable+0x3b/0x140 [ 487.149113][T11831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.149133][T11831] ? clear_bhb_loop+0x40/0x90 [ 487.149157][T11831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.149176][T11831] RIP: 0033:0x7f706c99c799 [ 487.149195][T11831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.149211][T11831] RSP: 002b:00007f706d862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.149232][T11831] RAX: ffffffffffffffda RBX: 00007f706cc15fa0 RCX: 00007f706c99c799 [ 487.149247][T11831] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 487.149258][T11831] RBP: 00007f706d862090 R08: 0000000000000000 R09: 0000000000000000 [ 487.149271][T11831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.149283][T11831] R13: 00007f706cc16038 R14: 00007f706cc15fa0 R15: 00007ffc8a7b3768 [ 487.149314][T11831] [ 487.149355][T11831] Mem-Info: [ 487.554063][T11831] active_anon:58856 inactive_anon:0 isolated_anon:0 [ 487.554063][T11831] active_file:17836 inactive_file:40578 isolated_file:0 [ 487.554063][T11831] unevictable:769 dirty:274 writeback:0 [ 487.554063][T11831] slab_reclaimable:11061 slab_unreclaimable:93634 [ 487.554063][T11831] mapped:26029 shmem:53641 pagetables:1456 [ 487.554063][T11831] sec_pagetables:0 bounce:0 [ 487.554063][T11831] kernel_misc_reclaimable:0 [ 487.554063][T11831] free:1275252 free_pcp:5511 free_cma:0 [ 487.600840][T11831] Node 0 active_anon:235324kB inactive_anon:0kB active_file:71344kB inactive_file:162112kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:104016kB dirty:1096kB writeback:0kB shmem:213028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12064kB pagetables:5676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 487.634638][ T5924] radio-usb-si4713 4-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 487.655317][ T5924] usbhid 4-1:139.49: couldn't find an input interrupt endpoint [ 487.660198][ T5885] usb 1-1: unknown interface protocol 0xd0, assuming v1 [ 487.668619][ T5924] usb 4-1: USB disconnect, device number 32 [ 487.688351][ T5885] usb 1-1: cannot find UAC_HEADER [ 487.698522][T11831] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 487.784649][ T5885] snd-usb-audio 1-1:2.184: probe with driver snd-usb-audio failed with error -22 [ 487.793119][T11831] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.819525][ T5885] usb 1-1: USB disconnect, device number 58 [ 487.843272][T11831] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 487.849106][T11831] Node 0 DMA32 free:1145452kB boost:0kB min:34096kB low:42620kB high:51144kB reserved_highatomic:0KB free_highatomic:0KB active_anon:235256kB inactive_anon:0kB active_file:71344kB inactive_file:162112kB unevictable:1536kB writepending:1072kB zspages:0kB present:3129332kB managed:2540352kB mlocked:0kB bounce:0kB free_pcp:24224kB local_pcp:16696kB free_cma:0kB [ 487.910162][ T6953] udevd[6953]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.922859][T11831] lowmem_reserve[]: 0 0 1 1 1 [ 487.942121][T11831] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1700kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 487.971935][T11831] lowmem_reserve[]: 0 0 0 0 0 [ 487.978701][T11831] Node 1 Normal free:3939672kB boost:0kB min:55780kB low:69724kB high:83668kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.011394][T11831] lowmem_reserve[]: 0 0 0 0 0 [ 488.017382][T11831] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 488.025839][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.030495][T11831] Node 0 DMA32: 2243*4kB (UM) 1956*8kB (UME) 1149*16kB (UE) 216*32kB (U) 17*64kB (UME) 52*128kB (U) 29*256kB (UME) 36*512kB (UM) 3*1024kB (UME) 3*2048kB (ME) 257*4096kB (UM) = 1145404kB [ 488.040990][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.065366][T11831] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 488.077214][T11831] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 6*16kB (UM) 6*32kB (UM) 6*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 959*4096kB (UM) = 3939672kB [ 488.094629][T11831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 488.104500][T11831] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 488.114139][T11831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 488.124865][T11831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 488.128580][T11847] overlayfs: missing 'lowerdir' [ 488.136202][T11831] 112065 total pagecache pages [ 488.147484][T11831] 0 pages in swap cache [ 488.150898][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'. [ 488.151667][T11831] Free swap = 124996kB [ 488.160954][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'. [ 488.165349][T11831] Total swap = 124996kB [ 488.178954][T11831] 2097051 pages RAM [ 488.183006][T11831] 0 pages HighMem/MovableOnly [ 488.185834][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2161'. [ 488.187694][T11831] 429923 pages reserved [ 488.201280][T11831] 0 pages cma reserved [ 488.212280][T11847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2161'. [ 488.322082][ T5885] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 488.506364][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 488.523623][ T5885] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 488.531654][ T5885] usb 1-1: config 0 has no interface number 0 [ 488.539833][ T5885] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 488.552591][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.562252][ T5885] usb 1-1: Product: syz [ 488.567971][ T5885] usb 1-1: Manufacturer: syz [ 488.582044][ T5885] usb 1-1: SerialNumber: syz [ 488.588583][ T5885] usb 1-1: config 0 descriptor?? [ 488.592081][ T5924] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 488.604807][ T5885] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 488.616531][ T5885] usb 1-1: selecting invalid altsetting 1 [ 488.622350][ T5885] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 488.634441][ T5885] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 488.645131][ T5885] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 488.653729][ T5885] usb 1-1: media controller created [ 488.671616][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.735286][T11859] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2165'. [ 488.753720][ T5924] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 488.770681][ T5924] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 488.791925][ T5924] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.803621][T11865] 9p: Bad value for 'wfdno' [ 488.822070][ T5924] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 488.831165][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.848531][ T5924] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 489.215707][T11871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.234264][T11871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.256511][T11871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.272604][T11871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.374423][T11876] hpfs: hpfs_map_sector(): read error [ 489.457642][T11879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.470349][T11879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.484093][T11879] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 489.492934][T11879] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 489.501416][T11879] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 489.512787][T11879] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 489.733715][ T5885] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 489.745012][T11879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.757496][ T5892] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 489.765283][ T5885] zl10353_read_register: readreg error (reg=127, ret==-110) [ 489.775973][T11879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.779784][T11883] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -32 [ 489.800910][T11879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.809775][T11845] ------------[ cut here ]------------ [ 489.815394][T11845] usb 1-1: BOGUS control dir, pipe 80003b80 doesn't match bRequestType c0 [ 489.824041][T11845] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.0.2159/11845 [ 489.834447][T11845] Modules linked in: [ 489.840122][T11845] CPU: 0 UID: 0 PID: 11845 Comm: syz.0.2159 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.851147][T11845] Tainted: [L]=SOFTLOCKUP [ 489.855567][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.865694][T11845] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 489.871388][T11845] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 489.891079][T11845] RSP: 0018:ffffc9000473f888 EFLAGS: 00010246 [ 489.897228][T11845] RAX: 0000000000000000 RBX: ffff88807c88df00 RCX: 0000000080003b80 [ 489.905289][T11845] RDX: ffff888021698300 RSI: ffffffff8c82abc0 RDI: ffffffff9041a030 [ 489.913465][T11845] RBP: 1ffff11004bf3868 R08: 00000000000000c0 R09: 0000000000000000 [ 489.921480][T11845] R10: ffffc9000473f980 R11: fffff520008e7f3c R12: ffff8880325fa100 [ 489.929551][T11845] R13: ffff888025f9c340 R14: 0000000080003b80 R15: ffff888021698300 [ 489.932790][T11879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.937561][T11845] FS: 00007f78d07216c0(0000) GS:ffff888124ff3000(0000) knlGS:0000000000000000 [ 489.954366][T11845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.960987][T11845] CR2: 00007f706d820d58 CR3: 0000000059ade000 CR4: 00000000003526f0 [ 489.969016][T11845] Call Trace: [ 489.972347][T11845] [ 489.975298][T11845] ? __init_swait_queue_head+0xa9/0x150 [ 489.980868][T11845] usb_start_wait_urb+0x13f/0x5b0 [ 489.985960][T11845] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 489.991562][T11845] usb_control_msg+0x234/0x3e0 [ 489.996392][T11845] ce6230_ctrl_msg+0x2b1/0x660 [ 490.001195][T11845] ce6230_i2c_master_xfer+0x4d9/0x6e0 [ 490.006652][T11845] ? __pfx_ce6230_i2c_master_xfer+0x10/0x10 [ 490.012607][T11845] __i2c_transfer+0x79a/0x1f70 [ 490.017401][T11845] ? i2c_transfer+0xc8/0x2d0 [ 490.022073][T11845] i2c_transfer+0x1cc/0x2d0 [ 490.026599][T11845] i2cdev_ioctl_rdwr+0x460/0x740 [ 490.031568][T11845] i2cdev_ioctl+0x6a5/0x880 [ 490.036138][T11845] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 490.041215][T11845] ? __fget_files+0x3a0/0x420 [ 490.046001][T11845] ? __fget_files+0x2a/0x420 [ 490.050872][T11845] ? bpf_lsm_file_ioctl+0x9/0x20 [ 490.055892][T11845] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 490.060930][T11845] __se_sys_ioctl+0xfc/0x170 [ 490.065597][T11845] do_syscall_64+0x14d/0xf80 [ 490.070200][T11845] ? trace_irq_disable+0x3b/0x140 [ 490.075317][T11845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.081403][T11845] ? clear_bhb_loop+0x40/0x90 [ 490.086171][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.092117][T11845] RIP: 0033:0x7f78cf79c799 [ 490.096557][T11845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.116558][T11845] RSP: 002b:00007f78d0721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.125043][T11845] RAX: ffffffffffffffda RBX: 00007f78cfa15fa0 RCX: 00007f78cf79c799 [ 490.133178][T11845] RDX: 0000200000000400 RSI: 0000000000000707 RDI: 0000000000000004 [ 490.141196][T11845] RBP: 00007f78cf832c99 R08: 0000000000000000 R09: 0000000000000000 [ 490.149231][T11845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.157279][T11845] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 490.165316][T11845] [ 490.168365][T11845] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 490.175658][T11845] CPU: 0 UID: 0 PID: 11845 Comm: syz.0.2159 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.186601][T11845] Tainted: [L]=SOFTLOCKUP [ 490.190932][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.200998][T11845] Call Trace: [ 490.204293][T11845] [ 490.207232][T11845] vpanic+0x56c/0xa60 [ 490.211230][T11845] ? __pfx__printk+0x10/0x10 [ 490.215834][T11845] ? __pfx_vpanic+0x10/0x10 [ 490.220347][T11845] ? is_bpf_text_address+0x292/0x2b0 [ 490.225652][T11845] ? is_bpf_text_address+0x26/0x2b0 [ 490.230879][T11845] panic+0xc5/0xd0 [ 490.234616][T11845] ? __pfx_panic+0x10/0x10 [ 490.239061][T11845] __warn+0x315/0x4c0 [ 490.243052][T11845] ? usb_submit_urb+0x1053/0x18b0 [ 490.248092][T11845] ? usb_submit_urb+0x1053/0x18b0 [ 490.253142][T11845] __report_bug+0x29a/0x540 [ 490.257658][T11845] ? usb_submit_urb+0x1053/0x18b0 [ 490.262682][T11845] ? __pfx___report_bug+0x10/0x10 [ 490.267706][T11845] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 490.273504][T11845] ? stack_depot_save_flags+0x3f3/0x810 [ 490.279048][T11845] report_bug_entry+0x19a/0x290 [ 490.283895][T11845] ? usb_submit_urb+0x1115/0x18b0 [ 490.288910][T11845] ? usb_submit_urb+0x111a/0x18b0 [ 490.293931][T11845] handle_bug+0xce/0x200 [ 490.298173][T11845] exc_invalid_op+0x1a/0x50 [ 490.302672][T11845] asm_exc_invalid_op+0x1a/0x20 [ 490.307513][T11845] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 490.313137][T11845] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 490.332733][T11845] RSP: 0018:ffffc9000473f888 EFLAGS: 00010246 [ 490.338796][T11845] RAX: 0000000000000000 RBX: ffff88807c88df00 RCX: 0000000080003b80 [ 490.346756][T11845] RDX: ffff888021698300 RSI: ffffffff8c82abc0 RDI: ffffffff9041a030 [ 490.354720][T11845] RBP: 1ffff11004bf3868 R08: 00000000000000c0 R09: 0000000000000000 [ 490.362680][T11845] R10: ffffc9000473f980 R11: fffff520008e7f3c R12: ffff8880325fa100 [ 490.370639][T11845] R13: ffff888025f9c340 R14: 0000000080003b80 R15: ffff888021698300 [ 490.378613][T11845] ? usb_submit_urb+0x10a4/0x18b0 [ 490.383640][T11845] ? __init_swait_queue_head+0xa9/0x150 [ 490.389182][T11845] usb_start_wait_urb+0x13f/0x5b0 [ 490.394205][T11845] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 490.399757][T11845] usb_control_msg+0x234/0x3e0 [ 490.404517][T11845] ce6230_ctrl_msg+0x2b1/0x660 [ 490.409285][T11845] ce6230_i2c_master_xfer+0x4d9/0x6e0 [ 490.414658][T11845] ? __pfx_ce6230_i2c_master_xfer+0x10/0x10 [ 490.420561][T11845] __i2c_transfer+0x79a/0x1f70 [ 490.425323][T11845] ? i2c_transfer+0xc8/0x2d0 [ 490.429904][T11845] i2c_transfer+0x1cc/0x2d0 [ 490.434397][T11845] i2cdev_ioctl_rdwr+0x460/0x740 [ 490.439332][T11845] i2cdev_ioctl+0x6a5/0x880 [ 490.443824][T11845] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 490.448849][T11845] ? __fget_files+0x3a0/0x420 [ 490.453523][T11845] ? __fget_files+0x2a/0x420 [ 490.458114][T11845] ? bpf_lsm_file_ioctl+0x9/0x20 [ 490.463043][T11845] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 490.468059][T11845] __se_sys_ioctl+0xfc/0x170 [ 490.472646][T11845] do_syscall_64+0x14d/0xf80 [ 490.477229][T11845] ? trace_irq_disable+0x3b/0x140 [ 490.482244][T11845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.488301][T11845] ? clear_bhb_loop+0x40/0x90 [ 490.492971][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.498851][T11845] RIP: 0033:0x7f78cf79c799 [ 490.503259][T11845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.522853][T11845] RSP: 002b:00007f78d0721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.531257][T11845] RAX: ffffffffffffffda RBX: 00007f78cfa15fa0 RCX: 00007f78cf79c799 [ 490.539219][T11845] RDX: 0000200000000400 RSI: 0000000000000707 RDI: 0000000000000004 [ 490.547184][T11845] RBP: 00007f78cf832c99 R08: 0000000000000000 R09: 0000000000000000 [ 490.555147][T11845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.563110][T11845] R13: 00007f78cfa16038 R14: 00007f78cfa15fa0 R15: 00007ffcf7070b58 [ 490.571101][T11845] [ 490.574624][T11845] Kernel Offset: disabled [ 490.578953][T11845] Rebooting in 86400 seconds..