last executing test programs: 4.806989679s ago: executing program 0 (id=660): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x7, 0x0, [0x8, 0x0, 0x7, 0x80, 0x10], [0x3, 0x99b1, 0x3, 0xfffffffffffffffa, 0x1dff, 0x2, 0x9, 0x7, 0x740c, 0xfffffffffffffffe, 0x7, 0x1, 0x5, 0xab4, 0x1, 0x6, 0x6384, 0x5, 0x100000000, 0x0, 0xfffffffffffffe47, 0x4, 0x5, 0xa9, 0x7ff, 0xb55, 0xfffffffffffeffff, 0x3, 0x5, 0x464, 0x101, 0x3, 0x187, 0x9, 0x6, 0x7, 0x829, 0xfffffffffffffffb, 0x0, 0x9, 0xffff, 0x3ff, 0x7fffffffffffffff, 0x4, 0x7, 0x9, 0x1, 0x5, 0x0, 0x8, 0x6, 0x7ff, 0x4, 0x81, 0x7, 0x7fffffff, 0x5, 0x8001, 0x6, 0x0, 0x100000000, 0x8, 0x1, 0xc3, 0xff, 0x2, 0x1000, 0xf, 0x6, 0x95ae, 0x4, 0x4, 0xdc, 0x10000, 0x4, 0x474, 0x200, 0x1, 0xeada, 0x8000000000000001, 0x8, 0x6, 0x3, 0xfffffffffffffffd, 0xb, 0xd2, 0x5, 0xffffffffffff7e10, 0x2, 0x6, 0x7, 0x8, 0x4, 0xd8, 0x4, 0x2, 0xce, 0x65b, 0x5, 0x7, 0x0, 0x118de579, 0x3, 0x5, 0x80000000, 0x7fffffff, 0x6, 0x20154af7, 0x100, 0xa, 0x0, 0x4a, 0x9, 0xffce, 0xca0, 0x4af6, 0x81, 0x5, 0x3, 0x486, 0x3]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000440)={r0, 0x0, 0xa, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f00000008c0)) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000900)=@v={0x93, 0xa, 0xa0, 0x1b, @MIDI_NOTEON=@special, 0x81, 0xa}) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x0, &(0x7f0000000a80)={[{@default_permissions}], [{@pcr={'pcr', 0x3d, 0x30}}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, r3}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_hash}]}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000001040)={0x9, &(0x7f0000000b00)=[{@none}, {@fixed}, {}, {@none}, {}, {@fixed}, {@none}, {@none}, {}]}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1c) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000010c0), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000001200)={&(0x7f0000001080), 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001240)={0x3, 0x1, 0x7fffa800, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001280), 0x800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f00000012c0)=0x1) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001300), 0x428201, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r6, 0x80304d65, &(0x7f0000001340)) connect$802154_dgram(r5, &(0x7f0000001380), 0x14) connect$802154_dgram(r2, &(0x7f00000013c0)={0x24, @none={0x0, 0x1}}, 0x14) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r7, 0x9000aecf, &(0x7f0000ffd000/0x3000)=nil) sendmmsg(r5, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001400)="5acad2098c7303e694f0704a87a55b56bf17b6c8c571d4c5594a01c4672d3f94927ad239ac9358cdd4c101c99b26339941f917a0fcb7f33af601e1edfa46a83b6459a4849bc95990d9af", 0x4a}, {&(0x7f0000001480)="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", 0xfc}, {&(0x7f0000001580)="2e8745dd7003e46318b2b8e2cf694f80bdfbabc11bd96d81670270c2cdde21895c54c71bafc77b52a9ced733fecf7ab6cb06069b651e3640654b7f05af4eff680283f2dda8500e9b39ded18403e5162cd7514975112eaa301aa8d8bf6a84ce735bd325f6f5929a9b126aa92601b1b4e538305b12974662c3e19ee116a71c543f41a763143cfad62040c2edd8a300215bd450a8e660b3714a1d16cd2985d52bf8dfc5d92964a8d2435fc13057a672d8f4acd38f42bd01374366d0cd713cfc7f0d16cc09b14716b31ea5b7c81ea126eb502b4c61cfa590ffe70cd31ca676064c3d569608e31aa6443bfe13e2c8b20b344c8617ee833e", 0xf5}, {&(0x7f0000001680)="a496282c71059a0ad37acfe50b87f245142f615a05a0b222430ad2a0a7430d70d71c984dd33fb4d62618526bd8d1a233f33bc8ca0ccea388b69be95995810128e5029cacf4009815dcfea048957dbe33f858867607903bfaafaabf57374cd4aa64936eaa3484d913b64925fd7c07dc56b563b08d0b845368a59dff1221358431e947ebbeeaae2b92175670d091761fe1a6e56df7993916915b5222e1fea8b0a78ce8c25851777f58fec03cd99e78641fae1e4671c16e127e3a", 0xb9}, {&(0x7f0000001740)="445fe1", 0x3}, {&(0x7f0000001780)="a446b7683ffc3e9313a206f0cc65f31e234c0244571a23eb293ea0d57602ef25bb33dd2858e1a273dc6638ed0cf5c7970802c03004fb474c7c58b16e4316a5e828f9eb119d551563481e8d37214cc859c33775733a19f8cf58294a2990a35806747bb94b195bc40be3d422c5099f41a56d8065062474503d33ef8ada1659932d3228c60877a408d6746ab5c28cc68a539a56334ff065b447226b6083d0592865ee", 0xa1}, {&(0x7f0000001840)="856a82f5882f5a1bb0ed5c1d763e138304970f610a40d7ea89435826267e6c2c0dafbc6db9afda9d882e00c07ae98d6565f7991df2d6efc7b7852c26eb1c4699a119144e30cb320d43ea855d6cc53d68a456a948364d0748a97ec886ddb1f58fe16d5260b21a96defbf39d10c7a5f86b4d772c9aa6abe869b3ad04d535ca69578498c186ff653977f5b6c4dcfd5e34ff842d324b5a3d1aa938290b95c18ed8eb28e3c02075e10183b1a2d7d540ce", 0xae}, {&(0x7f0000001900)="4929a5a605", 0x5}], 0x8, &(0x7f00000019c0)=[{0xf8, 0x114, 0x6, "02819f3ffd47365a202516a2a59c44a825db896521ac16735d4be486b2437a0b58214d96ce16156c75f5e533fb55fdbbf75ab225047c305cb37f0b5cce5ac4e0832d2ef352c8e48989c0f44c61d1c97555952f73678b880af46a497ec75a2baf61cde211791d7c7f21f1334c10b5c44ba6c64e30dbc56d309c6c6eea257a41f539658754aefbafddb29df2ac829351c3d4a5671807b7a87df408a14a177b5aa0cf46b255e39e5fe27814e83549f7870b5273d3501a10e43b88ceb15423fe65ce9d6a3721084a5a9271cdce047fe9dfebe468fe0eea1f829e87344fd5b35783ee6e24f8b67ec9"}], 0xf8}}, {{&(0x7f0000001ac0)=@isdn={0x22, 0x2, 0x5, 0xa2, 0x3}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001b40)="ec2b6fa640e3cd458b0fa33c0f412274b5ff365b1554033efa873eb8848c1377711774ae7b600c148bad8ac787b0d2bcd9e5bcfd946ee1f6d0516a610316e7ea4750448a1feaf57e96e7529438ac775784f520ebfd057a4065bd96d45829b8f57d07cd2d7774d04fa23cab69e35157bd28d3b0a9b149b83bc4b4bd9abf107c11bda150c1caf3a0bedb8b2f8818a5c60b24072315cc5e4ca132ec16464c04ff82c8f414c6f4321c254fae8abcaa0f1d9cde27f78608f6811443f8b4f4c4014d71d84810a5b5725b17b91a9783c07359ffd98d77807d8d1468a698fd2e1baf9a0c52d4a4e00b4c72b77a0a01cb24bc2c4160fd916d2403", 0xf6}, {&(0x7f0000001c40)="58bcc351ffba983cd653280b2114638522ebdd83e83116a9992f44db0b4c25ca23d02a3c757a996a6bc41359738902c228b98a12c2a6bdaf9a23096f0938f73c6e6eab3c69b2566d7bbc913d63daa4fb1a7a10080936ad65cf6ddb55201ee9ffe7cd5415d7ec749fba50411113a71fdcaa65bbb0e28ed9a2937a2b795bfb82921d47038a30e726d33d3f269f967cb390c270b5f57235808deefd0341d64f6f199f6bb2b5469818d30991acd5c0aaad73fc616bdc7b77670e51ff09313db1e4807a5eec898d2197ba5ba619773b4391ca07445aba123228364679ad1224", 0xdd}, {&(0x7f0000001d40)="fb10d1e848c808fa886b2a1d703a96fcf75cd2d383c7a1c4fb5299e8ac968933d4aad011d6110fe0bfdf0a820d39450a64630e362550d4a92111dbf6bc753862eaf08848bb0a3961032ca012aa0fcc0eaa0eb4933b8365b8ed0a4b47a8493d59461628af0a78258796e27510f20522629f0d54cff6aa950d85bf37ae359b84633ff7b658b5ff23d8d475adbe2366a9f8a3", 0x91}, {&(0x7f0000001e00)="374ca174d51666961452a2a71b62ea48c359fff01642f68b856f86301de4cfb45decc00b8f3ad494808c4d04fb2474cbdc5d7cd0d2781dee3655e6576b33a45f2d9e1c0ef4f48eb24f00106a09d0ba949470f56edb7e767e018d53202be3413de14a496a6b0457622f76084687a2036a3724efca870744a0b3e3370cc0832876af53ec101d9d388969116d82123da9d6d3059096d8", 0x95}, {&(0x7f0000001ec0)="04d1e538bd9155df2f73f036d746e70103217c3ebe5927108396281dbac6c74e52d42e52fa6db1fca2bae3c7d984a92e2613b5650cd82a642e47d5395dcd1598b95fc3475a113ae5db4bd822190406790c05e37a1f625f538a8fe66c60aeca59c39920a74f1d7a9f89cca9bc071951b80a4830cdc9ce605210d1b70d38e870da1f1615ca60a574acee81089a1420b100c37dacf59fc9213966b45a3cc72178386e2588677f0b2c7d0189c34b3dadce3e0c2055cd24c0487b4ba23dd75f3506a15a6fdcbacfc4819c236e1389e906f7d279842071682e6e7224071e87aa91a4eedfe306cbb63d9776a0b7b1ddc88a491af022fcd67873396f0fc827f5a1ca73f834178469e47d19244d3a14e196e2f3847de8516096aa1ae200c62e4bddf1bd224595ec848219143a42accd6e9667d9ebaad3652962cb56fac5aab46b3303a11a69bd0fadc2deabad2bd00cd18cf6b5c12e439298f22a2311f7ea2c9801248614b2510f48de2d9884a45e39087e3ca487cefbfb0b98d86536a9c32dade8a82cfcc8d757dadc7e619bd6758aa417833018235c705be089557f2414089f7c8930a406e6df4b03f39918e3fbc1e0fbffd0add4f388c75f3564e27d246298c1eb6bf1a4b618f8f202567fc8ed1613eec5cb1af4fc16f71dba0c44f6235f29cbdf927d4200b43d5538e2cc5fe513aec27f26257b2de802ef2b0874d31d888356e6787f70d679680a1cd3660d2cd61bea2f7cc2f844828e3a9f12ae9543a9f05f0c60f412d0097d43d8e7fb2d4a3199503553ed994ddb732786844b5e32765476da088ccee2e026ad8b42054eb1bad2096b8c0b2bd64021eb6bb47fb3bb66e492d3c2ba93147c5029470a5285e72103dee92589362f8fcea1053e1c1bcc7cf3cf458af75bfd4df6794ad507f08c8b073192d753107e3c64b307e28fe3acafe7712c1cea78e7a3ca6c1b6f30cbfd3722a383033caae961fead624723a7ca68228ec5589347f49ad8e5dad5edae27e169b213a4763ad584e2c6525566517ffb4ffc5e9feb3109c7779d9266fbc6febd73497cdf56faeef5530777714980b922dad03ab7954a0495670d1ca90afe9669c6302524859fc5a49e2852981f084b033650f0d1d632d5ff5152bb3c351ca8cc93f757dfd979324172abb14b0c034cd1db2af52332d09f1892b1befc25020f0f3fdfbff5f8aecbb9589ae7fa51cd75a65b9c7c64c122b040249f049002b9c89cfcc686583fa2e57413fb442a0a18b333fef59c0b6b1e22b412e8b64080c8e93b125ba83135cbc127b0c2cf449ab2a5f8be0ad3ac40101f2bff425eb40e5fef7d3cde27ee4b2e0b8096f58f2d661bf79638462997b68eb931402c46e7eb82e0d2e65e334c278e430033b04a107eb1dbd4ca12de106c4d91b0606028ed2bdcdb2412d32d76c347a164a801f2118b10cf9d39fd7a21e63dda3af946a08f5544419a1edaa0e88c88d3ccf49d71fe262e602e2bb19c16c93bb8be96a07ed2610c1f5ef2fc1c0ac5d348cd1c0c5f0032587bd2977289d422da2d7097aa8e7daaf216fa935b501a9f60b8a208bdb933d0428b936625573f66cf2833c3756d4e087ea490918b193f5d05a43e7bc4b2b3254663b8fc09277a6a10ac62b8ebe24058554a4c83334889a4b8fa95db986c019eb23f3eb2ed63340018abe7d53b04d5924b6d77022a97ded8175041176af7de68cac6d4100fa1e1825faa5caaddffe1b34e3cfb75216cb2cde51d88d3456a6203b7fed4a12be92aa824dc39797d8652000b3ce3065ce93220eb8af5636743b7d0d78bc3953fef17efabeb6cd1c37023dd8947f141bc00b6cbcf9fd8e85c8dc3371fad6328e333342f8023acb1ce725fac4e10cae03f5512509ebf9b84e9f5e523e0076e5b509b083cce9ac06bae725bc73116ee1c1452dfcf10d081770e1cd7fd6414f1cbcd13e565a3f520af2466c33166ac51c48b49dcdf2c73c65b160e8c565382dbe1815cef713204f6913601e7cfce12f6af54e901f39c521e0e6936ef43a426257778577b5944d18c479a949104aec27e1d72e35ce3cbd10482bc3656a308f2c8137f8e5901895875e11cfbfa973067c39b9667e08468d4be57ee080afa66813bf0112dd7d1ef9930708a85eb2aecf311304a5c1ff5694c8dfb48c22004a603fbeeda092a4340178938c21c5217bf54c7a1bd2e3a46fa2c816260f1d73ed51f80376a54b6448501df052e43794618f293c25b305bc27280565dfbdff0118823daddbf4fc25fe14e20fcacd620c1fe041a4188c75f4fdd3342c15ec0fd6c96cf50ec9635381ca94bc9c8179e711c3ffe32cb6bb59f6e396fe9bd21238df29295d70260a2131898ea0a67dae86f9976b274d7fe8c22c2ba002102f13734404ba1a96938290bdb210ceac99ce7e1e1599fba80c793f6db12e6d94a00cd65d4904129a474b1492b0bfe9579ef0a3ed4489884542cbeeb5ea6c7d33a93cf2040fbe863cdc211d1f131ca8daa3a2e606045b3056f399ad290cb8575c8dd8c249e6a2ba5fe937e5c37a15121c9001e546c721d062586b8e24294812ef430a0841cde9464d7429eb09af056d65f6242a4257bd194a2a31d219c620ed5247091473044ec94beac85d8809fabf9d4e34ee0fc4d6b2937c7f170aee9d7b1883f64a7f84dc19a5a31a0b60b3b4a040632819d87b487100dec4d0108bb82332556dbd591c9a32616ff9fe51f92e520b83081cfdc025d75165872f2b1d7336ef35cbf0c50a1e50ec47306c8f15d7a6bcf754dfe66573abdbdbc18f81caca384f8e673e545f64a6a8893adf89ad03296feb1c3ffcb80e105b5ee5191759fd15aab887c619257237a06b01c301e639d580a3c7b9fef53f297b8b6c3046e434fd9f7e0297105866a2a7dc6b4f4166158cc0f5d6f90d261e84817e1f0622809a5d3deff57c15d5f3b3185b4dfba6b9a09624aef2a38b483a12ffb3e2323196fafaec4676c3d0aa7b6c1a5cf7bee1036927f5faa5bbc3424561cde1bcb7b42cc2da742960453860048590341f135b0c5730f73a4917c674d156358886be6b137bdac65f709c073a634bf7b61a39287099a876269cf22ed835c6681475a6257a0e9421c97219258ffdc3a35661bd1d400f82f1bca7d800b55bb27968cd355a6249f3cca8f73b99435a72654f3f535a267756b9c97579025442916d63d321c3109baf0b7213eb6916158e4665701692a5faa383494f715d745cbfa7892d3dfeb1f849f4a4170bbea90fc5bd0e1c19e267b2d1975dec20bcba441ebf210bd9007fd3ba2ccddc24420148a8cbdc92a1b6d269f1fc3e83e2c09f5e38f5e44a03d60336d44f619106b339de76ff10c101454e3fc59e8f3c8cd82beac25fb40a10bba96ab5b5cebcffa265fc954b05d78031c93edf6a761eb70c5a3066edfbc2334c932f4673f1428ae5afbb1eca6f63906d7080d1d0ea89b2f3b443ad66398823ff595dfbff7f3b10067da181b120720da02039abd256a781ddfc329140127d6c9bbabb2806f807275cecdf015583643de91f029a56e4b2dfa6d1c46b412a2f5fdf0249b9bc2786ce959c86b3f16762352ae172a722039f11ab8efd76f3cd84ab3415dce9d95f4a048b7bd53906d7e5bc43c668a5415973fd613254eba17e8d9de4ac9ff26ffe9c30801150fc97fa00957613a943a5390dc8ec5021a407b0f5ba0bb3e804ba73f4ad0832d6fe9407a75bea1fd8b778071b9ffbe25359f25b4117f57a4bdf33a1165cd53ede929ecb035b86c1262bbb8cc7ca25b0fa8e136a0bfa00dc166cbf6fe2348d000d58b23be778fced3943f576a4cdd32fc2aad2bc91a527586b6d2857be6a6d6f206e0a6de87937588153e6a53b0e524bdf6f636de8262a72faadd5429bdfe1d281d2c55f35c878f2fbb262401fcd9c3e330489ec41df4154e9d8e9c780ba0a0a2dbc115b5347c078bacfd05919a5a6db52fed8770d97af3985a460a41cb491a95290cd557aa1eb4398de9681275ab9d72e4ea1c40d402e8dca255e48851d40cba4ba3ad0c1e7c45c0359bbd577ae84c2a2ce607b2bc3b611b2a4b5b92466eef1de680977c7885ff6577b5df9f5522154e27e87c135a60dd259dd6b9f12da390bb810581e75337fa85bd33d2fc1c307294d9db3aa9403cb6a8b42f987b109db6e69c65ab61bc2cc6ade02ab4342a2d3eb48f33d0c3fcd8c23c178a5967d6807a1a6b1cb93cde6e3672df9ec54d4869648317012048e9412921e3722a394dd645ee11a753aee29ff59526523e3f9a82a22397fde9792725b98396fb3a4db057d574cfd63fd8caf4fc236bab3738a747e5db793f5a98f52a12e64ba3f1b692013485d042f4a74bdb7e8d557fb1825eaa0d43a92a33ac2165ca66bafd69da8843788d883c205f1f65f2118111a01183bff0526e5e45a20a0fa0e05cf8132a40d3b1b86a425c2a056b528b8e4b844cadff5dc68c2359e12fbae3ce030ca980e70ddf69de9566d8d796c7687ab36ef9c740c8df7598ee5bc59d01faabbc1d96041e46825e597b4401a2764ae207bf7509d59fd12617740701776b47f88869fe05ad5aae9ecfad45829dd64eb497fc126795a5afb991d0cabb3512f36519b02a1b9c574dad04b1560156538cdc9c3ea6dba8e6edd04848134ef0605c611d5061886a8377afbabc6008f6f84ec2ed66872be2540022fba0592a3f7ab3f5f1261dde7e39ebbb201ee12b6ab22725b6f7a19cb6bf2b7b0721770af20b286aaaa96f817bd32a70ff1e9034b095868ddeff66b34b26a9d527003e5435b490a01e89acb22362cc1384147a1e129b4cde628aae84ad89e1a5f2b335a4f803acd2988c5096c79487d3627a0300e3f471b76b1f1f2c8580c353fbd63adac0726abe5e3bbfcdd4fa148222a50cd70b5e37956814977f51497368650c387f62bda1963e9906e3f9f38651be94ed8c01dde3fdd828bf201bfc82961ae208a660c373246e8929b6f85027b53b782302b6bacf273815cc5b8e313129e7aef292b8ff08bb74174f44928f83537ba9043f159d418615517b8fc61e12aa7f7db838ca330fd91c553d07a5fcc01cdb377ec761b15951bb3e6f87420151ecdc680822558b959950f04478e1a5d1d2cfb50317ff87317aa9e944f1239f6b28597845b5ed342b82c82cafbe89c0f67f14ffca325058203bd75631f497ffdb0c6e1c09a431f9e6f0cf181cb0b8325a239a99fe112386592c831bebfba30a3eb2060f9c69cb4aae6e2145a862a4120800745af59fcdd1f47b5e6fbf7fbe266972c7c5b01b77ecbb2fa993546a300ab3b5c58f11a3d2ee4cec1b8b470541bf80a9aa9fc3a870cfe0efa7580fccff84da17fcf3ba9e6dc93d27926751697fd7c6c0a3963ec104b0668c44ce1aeaa2118f8aa52caf940902e20f7ae92125e363b59ac883aa7cab5c96caf0145729e975bce258c5ff560e18e7a7d52ebcd2ad55b651eca5f3b4d954177201e65a0bde90ae559e326a5f76e16832d8f7cced5fce75191be304f4785be84ecb0b71af749a4e25e4ba803cae3bf719e84f57911289e2f2206d2a0aac034e1162f534af2d82bafb2a4f487456591e9de771b4d36fe3ae614412a3f01c4bf103d6f29c67cece7a3dd096434cfe51d78d6d88f9f4894ee83000b2af2a545d7212050b22e3e18a3aed8741e4c2b6c4ca1db9581702f412afa668fb340aa67fc0e5796b210e9ac893e224aea0a79ce1874c0fc684944cc3d8d6ee37ce7a11d8879b63523425649359e866b06d49203b45cfa1db4d6c33157af497ddac1252ab9820a981cd1a196ab5732eb50fac5a8e", 0x1000}, {&(0x7f0000002ec0)="af3473256b0bd7c4606c5f1a823c5531fee4b523d40bf1ca10a8a96ea97c4f88ce42e93d0fb9960390c5225e7e9cdc4a283b5e7ce221f1c220221992b9e1fda0479a38ce8744cea39df24a6fbe14136f2556fd8ed3a5be299e358bbb06550a50d17c77b07e6f976432729d00ecf36f8d2cea957841b67e174829a3784dc69aec1be4bf0639f6d4b6164c30812ad39fba1d4682b57fcefd2fcbe400837499496836ffb9e2bc96a80991e515bb9db59a35d608cf354e354a3f670c5790ffac43006566c518d97a99f1c0176bf24b4fa991b82829a755c34c30e3d79c4c0653e50b22d1f24bcd0621ae16cce536db6bef62f546", 0xf2}], 0x6, &(0x7f0000003040)=[{0x20, 0x10e, 0xaa78, "da99136013f25e807b3a7e01c7027c"}], 0x20}}, {{&(0x7f0000003080)=@hci={0x1f, 0x1, 0x4}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003100)="ae8709d2ac59d536c01da3b9e4facc9a5ec2b225ce25408e17c66b4d1fc2327ce9746d9dce762884d211f87083ad8b699d94a3f401635665ea412bf80352442491641d520fe0d37857f0aadd5b085fd30dc9cf91e87f681ecb665a1a4964ed5ad2611c3da1ff609c91a55ecb595a555fda8e3652fa6c7943bcef11ae590b9872ee6a59d59004d185fb3f9de52c3c9db8c1f75205", 0x94}, {&(0x7f00000031c0)="3b9d0beaa978b3e4b07a5ce35828a2820283369dcc359393174b30350d16bccad9bd328bacb1778f86c3fedf0e2bfabe1858f12d05b27d86ba8d6392d983aa00f8254879f83a90268d333ab7b326ffc083111fcdff21d76e7c370fb39afa6103878ec74b97c9f7d0d672409af911b2b0f40c21f1a7ccf7e6d2fa5ff553f2e79fa4d79b6b0fedf974c1313c6ec4787abd6138999486678978a5ab9f8419f75cd0967781466b96efb9632efd00030e84a0ac97e826e01bd85d36efa20cc6c1b85c22012533931b6ac2f5d79e8ef1f0671c4468f4a1b8972b85df1d", 0xda}, {&(0x7f00000032c0)="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", 0x1000}, {&(0x7f00000042c0)="a30fccd51bb7a626feab62ddca7cbc644b3e93ddd42c47249996e521329cdd2d2c3ca9c1eeee1f6aadc3fdd1335c101788cbcb6269be4428c9e20dba063d926b900d2279e8de8e961ced32a49565c5974e86d7a4dc8c2c622444486a76cd187cc2eca18c483fb746a1b4b4c05e8f2a362a86af99ac2719ab9ed76271f95ab950fd87a199675d962692fe9c3a970663b9e55b6d62026727ff3a7d281ff53d75670fb89b21ada818366c8d67ec7b744fef9c156ae9eeea348a0a1447869e5b17a846d604012a18927960f739d5e9b8166d8cf6c28c4cae0e99c89712aad326033e7d582e0ecfca0371d2bdd5584e9a921c2a5078", 0xf3}], 0x4, &(0x7f0000004400)=[{0x80, 0x117, 0x2, "a6b0bf81725d76e8307c9ae6e82b3a05caa7f35d0e3eb8312408c2efb758c4097227707e40f742e567fa3d0a93938be6e621fc72f0a24386b6cb81a4a440051afd1426606b3c19e0382892400fba4fbf649fb7d14c44c7d57f23bba5a2f08256c79fa636ecc3c24b9627e875b678"}, {0x18, 0x109, 0x8, "603984"}, {0x1010, 0x10b, 0x10000, "ab83be4fbc354be4b54281d731f22a33f191cc4fcdfe0ebf866f91b4e76022b36baa49800636bb965efb89ad3e8286012990b750be6da22bfeb0b6fccd3dfb24021262f58ba060dfcb325d9cce67f5a1591582258adad8021fd3afcc5dcaa5d40cfc80a54b80f038e16feb2ad30d885bf4e7cde89ed408e96d286c17da25d325652f6da22e2af1e5f879121e38f5f07a6e3fc1fb33b4c3f331b1e6ef185cbb14ceb0c532e640e23fbe226ac06fa72ceaff7f7fd3f3b78a2d2b049681e19ca9f2f723794e15722f90b8f8abc0fb13a7aa134ce3f0abaef2ce3175d289f26bc680e10186225f54ce945b7d7a6233e85be27b481a1194a5cfa9357167dc02a70920dfd4939595a75b36488f1ae2e0df41b1426689fbe227c559072f2b6065c80f186595263114654c94962a4c1de14a8466fcd620169882f9a738ea43c96484233ab6e9ee477af49828da985ddd1578dbd286730cbdaedc9ee7816499bb33f4f9f43d93ad898943c0347081d516f35c0422fc2bf2bd1ab290a9d3021d9442097a16c2e06341388e711e545617574b642fe76deccec8b9d671c8eaf9a42ab0b256e7b343287912a140bab5befd95feb22552277884eb3525bd3b6eccf235c4e179eabf57cd19650fe1dba51261534e2c93a312a2d29bd98418df503a6a0837e4442445f9350f2bb0789ac28e8311412390ce43d1b9dfe669c7f504d9be72a4194f562085dbae9c7a8cf1a6a8610a1f885ed5a28478d49bafa5705ca9fa57fbc11869448376444ba28c6410d97b70283a4733d40a3816b46a2cec3bcc160fdf2de0ac4e718d99b9060ea82126cd8025c167269bef6e7e1ae572c4dafe341455e5ad875544c3c8f2f9c1532a033ccbae5d27ea850ae37a88980246a30136bd7716106fcd45acf8f4d549efa55daf5b16c80ba3a67a3021afdab970cf0a52e594468831facfe15a691ab63cfa48967391a653affd3669b254eaa35f8d658a5b5fa386314fa71ecf6c265d9fab59f7c6424c3c6dd28c406bee6ef94e0412293b792152f9d3804400c6ca6a10596258a3fe275eb26306f569c3efa3a94ba97e9c6dfc385e7f08039f1fc9a886186f9a2d19d1034fd59f58cf6627a8b8f63c2943a6c97b56f81bd28e46ca405e68086af66aa36b2bb6287421f23e71bdd9e2626edceebb29345a2c976b82fe8769b52f4af73b0f5bf46983213e88af441a8803d0282fe247fb2f850326751cba53f5e115f39697efeede40a5f0b853c8825664a193bd758d80ac3bf7e0d42d9971ef1f1707fb7c0c46ee5c447bed7d82dae82613e03a03c18d94c1ab16470394092ce8675e70190fa5078d8f36070137a19403c9678b9a9043aac0f3f6141f13e1637b7eb764c6835c42653882fcd031a1c9ee3ad0bc62ff4d35cd79f9608d4da51c69759fa909bfe5a249fed73793540afd8d0955540e12f58c80070a04a95967493f7c4e934f5fd703f339c5dd0416530ba45e0e93bcc2a6a3b9bedf47024eca579077703a6d8ef8cab6ab135faa9198d311a1dbaec7b025eb379fd16ad8344c5df3a3926cbcfefaee391301337803612728d463479130e1d018209cca7956ec7c932358860484cb740321b2cce579644e4cdcd60cffdb7264228b487c1d63a1fec68cdcdaf14a98b9c3f0620cc0686587ffff44e7a7cb7ed388154a8a969fa9a8694bd547619fb1fb13dc91880cde933d403d4d0bf86e5468d08089f75a2c3bdd60b1268f76209a2625488bf95bc3151720f294c7d494c9083a590ecbec758e51240503db6008797e567c53b3d15c58f701febc28da048fc6fcb2188d748e9da0711fafa8040c495f3ed4f2ad6436bef2a49f20d5c49f06f5d25f60237cb0704ad1e7aa4b018e4ee70ea82dd8960760f4930999c233400e3dcb7d767d7003f3f07610c83a612bb61a55fb8e751424ddcafa61a0caca3c07fe8e58dcaab99172fc5541a6679667d039a07e4744826f9215bf39edd4ddfca09e024aebf22a4e81ce45b77f4137b603e68514c9b93af746036ca27a970326a4c5512f7261942a1e95d2f73b54429c3501f5c79efacfb027ac78917ab88e5cce37ff3951ad435fd3745234d3e4fae64c950ec038dcbfdd829f7ef36f9c1df7cdd61e051db992ccb3342e27ee10d31a82254db6478c4dc75eb5650440079dee9d3b296dc35748da88405f5f6ed538800b1c5632b91ac51523a069d9aa4a3948b6095235e912c1459a3a705c03e65821e16c2e545c31541e795f84a1a30d4a4ec31c600808ba263b23ca6933b3a28119e2573ba2b50ad27a0181f9cb65d74c57b737225fff38ce7c6e1d4749f4f029a23ffa385335e0c00c9c165a63d562293d0a89f880c64a924dc7238d30745a62d5c7574915a99583c221926f206647f25ca23b86567fa2ee86553aa7fe0e3695fe14ddd85263eb64f652466a363ecc84236d4d2191921851bc2cbbd0d1187f3c59d0d258b1053726a7ae20502941d3bf6d4a6e20573d554061dc482b5ace61e6b6b091c68012de21f854b234730e96dc52ed0b3b9841dd2bf76fc7013b4ca1a64fe9b017bbf5cf35db18c97eac6b66438de8db9cdf29144600f383529068206ad36edb52de2e44d5d65dba2d0423d77a212a1cc53c2049a6e36f9d64887d0415c4cd1a98b4bcda167e3224c8255c8da610e0de09533029986f1b72a0a97469e496b6f60b140d636f8c6e13bc671eb98f3098125a9876b19031576efd05afd6f17824193226595c51f3415b2d26f2a89a711292d4c093199977b298a2385ac772a977f73614cc93c7cc504f9b48c8d9729cfda236b4fc1c7cd6f2a788109dd434545d0ecb69d61488e4d2ecf5bda5f67bdcf7d31c44a42f86a876f4d8d06a7989c353cf83ea11774c866548eba5f2d2878b7b02c039e2a608408e26a96fc750331153e2d2da93118e53a4e7597cf3dafe7586e8ea6968392f08506bfe5190664c9022f79cd4bce9f2c99f7276c22d861838aa8de06f98c111880b8be11b15f7f1fd4777d20dc86e100598d5a2a48f1bf2b200f7875c0b04b49fbf918437fb950db22d3611c36df53fbb10854b4af3adb19aa0092bf426cea809c6df6fbf4d76da709cc667b6c9cbd00990dc10a112f925b49485213be07f9874bdaa8fe0c973c17dc84d3589cb66939af8ac640710a71f2ae09956354c9a0f35e997999038f27bb29735f66b95bd2919ec4d0b5d73c7123ede568e91b3696250075f1c691708cb423341e9c5da28f2a83ae5153e175cd62bfed926028dfffda1c10c47fadc87d09b6854542324469d5a86f85ce83c4c74a15e757364f2e4cdbb0e74b972fb3033cf47df9af0a08fe1de28a1943f254fd396ff434eda2afc4ace12cbcd4423143cc9c9700df24dbab9653a3ffff0b2f249de08820f14ebf4657fcd9910ef46356adc6317b27d2c41e0cc683e3eef9d3e22f68eca163ad7b4f6323e6315b46b5e812076f2e85a39fca406c3f3e49296c898048c620287ff70af40a7f5648da528bef2ce2d39dd15f7fecb9986d0ec6e7084a15cd2a166b363d6af0c9955d871f43dd520ebae6398bb267e49a5feb74ac72214c4f1ce6d1d26ef8088ea52ba33643f3657107ce7ee055ca3ab34860f11b279ded508027dde73a0a540dd1e70068a064d2234eef29654cb4ef15c5410d34f24cd3e9e095140a11c90020e09fabc70a1d1af2adf4a797ac89fa803315e68760c2ba263233e20273757d30072feb8af122766822d5f517783af17fd71bf16aa9fb8cb8aaaef9956fa488ce4afc740e5039dc1da5ca32579470967271603c944aaf1c44e811bb75c4931386690ce56eacf44ed2b9fd224ca7e96a4b525433a84962bad5762811b4a84b091a40ffa8a88c5df7c5f6fcbf6107647154a9af4a997dbbee9568945e2c996be5d1dbdcc817c22b2d86d950f5cf21fe63457e34985238fdddf4be0d53241c5ed5db8654c2e2437beda2ca89838ee307f5d988b65b45919d4bc794b5d6786791a4e3b144f83d22f422c0a91cde3720d9851a4e52f1725b4e6e779693b8da58ab5e68aed8c024f02bc03340a9f0f69ba09dd0d6c7dc1cfaf80283dbc92b3dbcacffec56c496734b9406c8b28fe6712cf723de83f895b8edb11018d85ba5e4f1944bc5ef74d47e746080d20adce3637b18040e9cceb14b5876213353e4f87f235557e20991133fd13f2d05f3e22aa983b72d2cca6b51e2981ce883c05c9cf6e98906172fa4957774d5f9cbb49b03bd5b0bff09194c2ecd367cd628c735abf5b8f43e12539e02a13733ed59bd3b686c396fffc9b0d5b0ba472b17ceea86dc452255e494a0c4fa7064305d0c8a519d1d74788e1424bfc14c629c320ddb3a809e82ed875c126318d724be801f6576055665113a11f2782bf07748b14ce704431b9211a32a77d562455fbd5d195dd02f7b324d35ae44237542563c7aed1a128c5feea42f430c8a0e100050790a425ab980f7f760484d47dfbe0138e496f08077107b70f4f5c58461461dcfe45ef801b0f2a9e0aa1116ecb9d6bb584a71671ee6f53c7b38f4ae3895cb587368df27fb7c95092dd59b07f02884028b555f49e5e49e2ef0e7344cb5f653151e851b59b5740521eaf8dd23111f3f73018e946abe307351d3da39f58d5a8ef7128a8be2f99d40765f76af8290324d504388c56b78a12d0f4ce668c696445dae960dc1bc1cc3842e8ca136f8d47d33d32f15c3249c1645687d92df03cd684d9a6a52290a8aab97f3043230fb6cfc86830353e8b3b392aec24ae315feba8fee1ba4cf8aaddcd37509f567215f00279b332da21b16b0f44bca1818cc031705c8be43df35769da16f67e48da7f967cf9fbd5c281dc028c31122acdb119d357502b233f99da3cec7a7fa008b4348b706bc948c377ae2b0dc199df84958e9e711a9f28b8b8b2b581582a5da5c0fcc7a5580b35af7449853293942091a2c6f9e736418195417ef2057118542df6b3ce26ed40425275d670faa75a97da0e852078f83aff3d389715e21ab8b65e27708a6c8b2f52845de70eb68c095de41704095c0038c7d598cb7961234e43c79b0d42878ec7a8719ce2e4903bd1d24a3c0eb8e5be209dceada6e384961515776bc1b328a9eba7083196ea680648c211695cefe0e23ca706d11242c2fdc1eb21493fbaf64c7192363aa018a21f5caee9a07e659709bdb903a3c7cb3ce68c4482c4d8bc4537854f051aa70072c244cef30a01b023ee44e4d6b8d83d57f28325cbedd89c935fc4b6380d0a1f6da59c99d2b0318bafc5669e195954b122c1e56d3a68d8c6f2977e66d68959da7b7f436d51d5889ca9a65e13c65499f41d41120a24157744f5c849cfca044a86640c2827a4894ff9e388ca3e8742f6f27f24456538ec7d51bee4aebea753aa868535e26b46a80af9e6221265df76dc9fd7071ee7b6949706919d28ee1cca3629c244135cb60c666ca7b8dfaffa26373925e35980601d6d1facddee388615598aeabab452b917c3975b171b1450c7602fbf6f6b3f2d09926014b5e775345d889d5592f19052aeb3a300d135d26f52fb6d50e40826c2582dc538d43baf1636ec882f936e66717300ae411fdd2a7195c351b9f1f288f102c0d0798c1e7a2362f41267431732562ad9819b741911afe2ebd757be45f20be8a0340462f841bfcbc464f6df6367f9fa9a48227e7bbb5a2df233f171fd8b48d06b0596a47b2094a25626262f6ce0bc3de9ce9420eb8969a5413600e3ad31dcd814bf65acd08db5366e03b31804c9fac78aee6c5e0c667659082bdeaf92872c426fb051f257c1da"}], 0x10a8}}], 0x3, 0x4000000) connect$pppl2tp(r2, &(0x7f0000005580)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x4, 0x0, 0x2, 0x4}}, 0x2e) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f00000055c0)) r8 = syz_open_dev$vcsn(&(0x7f0000005680), 0xffffffffffff7fff, 0x22c02) splice(r6, &(0x7f0000005640)=0xfffffffffffffffa, r8, &(0x7f00000056c0)=0x2, 0x9, 0xa) ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f00000057c0)={0x48, 0x8, r5, 0x0, 0x100000000, 0x82, &(0x7f0000005700)="24e52bd2b7df80a8cd80d6012d65f6353ff09549818ff3db8851d96cdfae19aa5537cd95da7c2e59d7239673c5afdc9c7c7fe10e63c484cc4aeae70ae891c598853e32d28e7c86eac5e3efd03484aa221ce35db5df1856b0051d16731e195044764bc502c0844687a2e9c37a212148c3023cc9a263be15242582741bc2165626e5b2", 0x1}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000005840)={0x0, 0x3, [{r2, 0x0, 0x8000, 0x2000}, {r5, 0x0, 0x2000, 0x4000}, {r2, 0x0, 0xfffff000}]}) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000005900), r5) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000005a00)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)={0x64, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x173}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ea40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0x400, 0x401]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRET={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 4.714223002s ago: executing program 0 (id=663): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd3b43000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x100, 0x800001, 0x1000000}, @flat=@weak_binder={0x77622a85, 0x1101, 0x800001}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f00000000c0), 0x7f, 0x200) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000008c0)={&(0x7f0000000840)=[{0x20, 0x1, 0x4, &(0x7f0000000180)="f69cb391"}, {0x8, 0x10, 0xe0, &(0x7f0000000340)="f921659493041515b47c066aeef937a0d429ae1fd2946914d734b072f80a58821bd9019ea50317ed526efadac409c71148a5f0af15518d35955954740111a66d63c6cf9781cae8923f10d7f0ec36196a1b175b5e3d0c8620216c2d85a197fcb454ea26dcc6625b0ccd717e367da988ae08dc22ac8e603298baa2b275d8aae3d5ceb333045fe6434698bf99edd2abe9bd7331ea48572ef465c9b5afa824db3e24d1ee06b184d1154367579e3653a0ab57f8a2bb0b0ce27c7e09712abe1a18df968a56d09ede3a958740fe5ec1c5accef808af7b2ce32dcb534f9b01db771e8534"}, {0xa, 0x400, 0xf2, &(0x7f0000000440)="e4ab8f308f8970c2b0e5e00ca884739891e9479cd60d135a1fef525b0970455bffb1fb99845dacc54cfcc30697814435fe9ea4960438e46def7758f281c67fe134c0a7d7e23d9e5961613ec19c523e66281145e45ab881521052417a3e40cdcc2f946aa224335aa57dbb3096a7159ff9ada22637b7cbdb7bddc1d7ea99bc29bf72f1532dbe2ca21de5a63def867b721e0469bf0a49b1292978ffbe27359c9f019be3e242a32ab79ff6e403a269c089ac944e76a080966197d7a028d31462f41b2da53a8b3c77fa33a18bc8e31bb1b3dd2c374d0ee78c5c0233bc431d9a6677a1169888eead1d2f7671b4523ef909ee99127c"}, {0x7, 0x200, 0xe5, &(0x7f0000000540)="b20231f8c2df3b82d0625b7388fb9c5bd7e75b0b8c18283920ec1ebeab4af976b1d09a03a9bb5306900eb10a76a4fb3e5dd77bb464bb555862ee9f707f4613a5446d880678af3eaa70cf2d79deaf086d25a421623f7e8365a24ffd14cf763cdc76cf7dacbd80378fc557b34879458760adc551f9ff3629487059fac29a84a04d40ced651450a4b35ef5211724ae2a414acdb4cf2f1d2c1448f6f54a017b48f428466a95a6e209a3f5ebed254332846430d6462b379c46e1349df07bcf38fa0d9f4c8abaad5dd8d1c81b944cdad74ab5fa86f18cb16519fd307011209ff60c53962e5095afa"}, {0x8, 0x5000, 0x8d, &(0x7f0000000240)="4d9460750f314d3f11a4f2ac0d4467ba8934b5764d2c44d724d3100983f037a947b050c637baf9a9dc9b47b3d08a161799faa4b72a5d497dc662d80d3b266aa188f6e98ed10d0fcc3c51c9366686f7e048e820abb289a04bf76498da9f3d32641372dd99a5af0417b322fb51d03451f1c8ee4515873009bc53ead56d60171983ca9391aeb4a90e51ea8ae3605f"}, {0x10, 0x8001, 0x67, &(0x7f00000006c0)="ab04f3116286496d8223d42f701aa5f1ad153d6af2f66b95ac8db526a1ed4fb1ff4c9373f51273a1ce04d7ad1f139005109e63092f9a8797efe361a1b909fa43912e666a9e6bd299c3458a42f3bcb9ad3f02907ad3e33dcca413a3acc57237f47bfda3559646e5"}, {0x7ee, 0x0, 0xff, &(0x7f0000000740)="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"}, {0x3ff, 0x2000, 0x6, &(0x7f0000000640)="6357d98e1a32"}], 0x8}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES8=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4046080}, 0x8c884) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') mprotect(&(0x7f00001ea000/0x2000)=nil, 0x2000, 0x100000e) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080007401000000d0500020007000000080006400000000108000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.681753932s ago: executing program 0 (id=665): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001980)={&(0x7f0000001dc0)=[{0xb, 0x2011, 0x39, &(0x7f0000001ec0)="26dcbf04c4a9056dda4892b53a3017ce36b2661005b7c80fb27083fab08cf3d6bdd427ebf0f82612418d0b25bf8a60eaea78b90dec4b25dbbd"}], 0x1}) 4.310539864s ago: executing program 3 (id=668): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x101, 0x5, 0x2, 0x800, 0xfffffffb, "f759e100edc710000000d9fc6300", '\x00', "0300", "fdff1310", ["8b59b4d766cbd6e4af000700", "c2fef583a8cfb4dc7786a013", "000000ff0000000000000020", "0006488000000000001000"]}) 4.253828378s ago: executing program 3 (id=669): syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x141182) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file1\x00', &(0x7f0000000040)='bfs\x00', 0x20a00b, 0x0) 3.298311812s ago: executing program 3 (id=673): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) ioctl$IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, &(0x7f0000000000)={0x100000000, 0x9, 0x200}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 2.826335497s ago: executing program 3 (id=680): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000001000000"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40}}], 0x1, 0x11) 2.816517776s ago: executing program 0 (id=681): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000000000}) 2.81481555s ago: executing program 3 (id=682): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"94e9aa2e2d4bfdbb784e474a691b5107", 0x0, 0x0, {0x3, 0x800}, {0x4, 0x1}, 0x5, [0x9, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x200, 0x6, 0x5, 0x6, 0x800, 0x8e, 0xfff, 0x0, 0x1ff, 0xe2, 0x4]}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010040030000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (fail_nth: 13) 2.405760432s ago: executing program 0 (id=683): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000002c0)}) 2.334227302s ago: executing program 3 (id=684): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.12814405s ago: executing program 0 (id=689): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001980)={&(0x7f0000001dc0)=[{0xb, 0x2011, 0x3d, &(0x7f0000001ec0)="26dcbf04c4a9056dda4892b53a3017ce36b2661005b7c80fb27083fab08cf3d6bdd427ebf0f82612418d0b25bf8a60eaea78b90dec4b25dbbd5ed0383c"}], 0x1}) 782.226542ms ago: executing program 1 (id=692): execve(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000a000000"], 0x30}}, 0x10) 782.018613ms ago: executing program 1 (id=693): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x7, 0x54485746}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) 781.810258ms ago: executing program 1 (id=694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x805, 0x0) mknod(0x0, 0x836fac3ed7542db, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x65, r6}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r6, 0x2f, 0x7, 0xc, 0xffffff81, 0x26, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x40, 0x1, 0x3}}) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet(0x23, 0x2, 0x1) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000180)={0x23, 0x40, 0x8, 0x8}, 0x10) accept$packet(r1, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004f00)=0x14) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 732.034389ms ago: executing program 1 (id=695): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x101, 0x5, 0x2, 0x800, 0xfffffffb, "f759e100edc710000000d9fc6300", '\x00', "0300", "fdff1310", ["8b59b4d766cbd6e4af000700", "c2fef583a8cfb4dc7786a013", "000000ff0000000000000020", "0006488000000000001000"]}) 712.358241ms ago: executing program 1 (id=696): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) (fail_nth: 13) 514.083089ms ago: executing program 1 (id=697): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000002c0)=[{0x1900, 0xa000, 0x0, 0x0}], 0x1}) 340.754088ms ago: executing program 2 (id=699): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) readv(r0, &(0x7f0000003380)=[{&(0x7f0000000000)=""/86, 0x56}, {0x0}, {0x0}], 0x3) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x3, 0x0, 0x7, 0x6}, 0x9, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002140)={{0x0, 0x4, 0x100, 0x8e40, '\x00', 0x4}, 0x0, 0x40, 0x63f3, r1, 0x2, 0xfffffffd, 'syz0\x00', &(0x7f0000000080)=['\x00', '+{-,{--\\Z+\x00'], 0xc}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e63, [0x0, 0x40000002], [], 0x0, [0x1, 0x3]}}}, 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0xf1cb79cedf7f070d) 283.35273ms ago: executing program 2 (id=700): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40}}], 0x1, 0x11) 280.924294ms ago: executing program 2 (id=701): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRESOCT=r0, @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="41040101040403"], 0x7) 170.698969ms ago: executing program 2 (id=702): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10040084}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000840)='net/dev_snmp6\x00') lseek(r5, 0x5, 0x0) getdents(r7, 0x0, 0x51) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x9cb2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x256}, 0x1c) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07000000000000000000020000001400018006002a000200000008000300ac1414aa"], 0x28}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x13, r9, 0x7dfff000) 109.906881ms ago: executing program 2 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/230) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x45040}, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x6, 0x7, &(0x7f0000000180)=0x10000}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}}, 0x0) 0s ago: executing program 2 (id=704): r0 = socket(0x10, 0x400000000080803, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x0, 0x0, 0x33524742}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x47, 0xfffffffe, 0x5, 0x1, 0x4, 0x0, 0xf}}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000100)={r5, &(0x7f0000000040), 0x0}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000200)={r5}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r6, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) kernel console output (not intermixed with test programs): 000246 R12: 0000000000000001 [ 140.995672][ T7311] R13: 00007f1974fb6038 R14: 00007f1974fb5fa0 R15: 00007ffc6b0c2a58 [ 140.995682][ T7311] [ 141.045420][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 141.156173][ T5945] dvb-usb: bulk message failed: -22 (3/0) [ 141.158596][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 141.163423][ T5945] dw2102: command 0x0e transfer failed. [ 141.168195][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.169800][ T5926] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.184088][ T5945] dvb-usb: bulk message failed: -22 (3/0) [ 141.188459][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.202237][ T5945] dw2102: command 0x0e transfer failed. [ 141.202984][ T5926] usb 2-1: Product: syz [ 141.226171][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 141.249710][ T7315] mmap: syz.2.531 (7315) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.263363][ T5945] dw2102: command 0x51 transfer failed. [ 141.270089][ T5926] usb 2-1: Manufacturer: syz [ 141.271716][ T5945] dvb-usb: bulk message failed: -22 (5/0) [ 141.276151][ T5926] usb 2-1: SerialNumber: syz [ 141.277611][ T5926] usb 2-1: config 0 descriptor?? [ 141.295070][ T5945] dw2102: i2c probe for address 0x68 failed. [ 141.301244][ T5926] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.303118][ T5945] dvb-usb: bulk message failed: -22 (5/0) [ 141.323475][ T5926] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 141.339555][ T5945] dw2102: i2c probe for address 0x69 failed. [ 141.367436][ T7317] /dev/rnullb0: Can't open blockdev [ 141.382725][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 141.572713][ T5945] dvb-usb: bulk message failed: -22 (5/0) [ 141.578510][ T5945] dw2102: i2c probe for address 0x6a failed. [ 141.584486][ T5945] dw2102: probing for demodulator failed. Is the external power switched on? [ 141.593591][ T5945] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 141.645496][ T5945] rc_core: IR keymap rc-tt-1500 not found [ 141.651275][ T5945] Registered IR keymap rc-empty [ 141.659838][ T5945] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 141.669911][ T5945] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input20 [ 141.680983][ T5945] dvb-usb: schedule remote query interval to 250 msecs. [ 141.687984][ T5945] dw2102: su3000_power_ctrl: 0, initialized 1 [ 141.694047][ T5945] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 141.707403][ T5945] usb 3-1: USB disconnect, device number 27 [ 141.737337][ T5945] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 141.767008][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 141.775406][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 141.784275][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 141.796463][ T10] usb 4-1: config 220 has no interface number 2 [ 141.802772][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 141.816662][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 141.823541][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 141.830434][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 141.838889][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 141.848017][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.856052][ T10] usb 4-1: Product: syz [ 141.860215][ T10] usb 4-1: Manufacturer: syz [ 141.864799][ T10] usb 4-1: SerialNumber: syz [ 141.904777][ T5926] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 141.911921][ T5926] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 142.055459][ T5945] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 142.130685][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 142.137170][ T10] usb 4-1: No valid video chain found. [ 142.142670][ T10] usb 4-1: selecting invalid altsetting 0 [ 142.152626][ T10] usb 4-1: selecting invalid altsetting 0 [ 142.158437][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 142.172377][ T10] usb 4-1: USB disconnect, device number 30 [ 142.185453][ T5945] usb 3-1: device descriptor read/64, error -71 [ 142.425475][ T5945] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 142.521890][ T5926] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 142.529602][ T5926] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 142.555518][ T5945] usb 3-1: device descriptor read/64, error -71 [ 142.657179][ T7326] FAULT_INJECTION: forcing a failure. [ 142.657179][ T7326] name failslab, interval 1, probability 0, space 0, times 0 [ 142.670220][ T5945] usb usb3-port1: attempt power cycle [ 142.678132][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.3.533 Not tainted syzkaller #0 PREEMPT(full) [ 142.678156][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.678167][ T7326] Call Trace: [ 142.678174][ T7326] [ 142.678181][ T7326] dump_stack_lvl+0x189/0x250 [ 142.678208][ T7326] ? __pfx____ratelimit+0x10/0x10 [ 142.678228][ T7326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.678249][ T7326] ? __pfx__printk+0x10/0x10 [ 142.678269][ T7326] ? netlink_unicast+0x82f/0x9e0 [ 142.678287][ T7326] ? ___sys_sendmsg+0x21f/0x2a0 [ 142.678308][ T7326] ? do_syscall_64+0xfa/0xfa0 [ 142.678328][ T7326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.678348][ T7326] should_fail_ex+0x414/0x560 [ 142.678372][ T7326] should_failslab+0xa8/0x100 [ 142.678388][ T7326] kmem_cache_alloc_noprof+0x73/0x390 [ 142.678410][ T7326] ? skb_clone+0x212/0x3a0 [ 142.678426][ T7326] skb_clone+0x212/0x3a0 [ 142.678442][ T7326] __netlink_deliver_tap+0x404/0x850 [ 142.678467][ T7326] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.678487][ T7326] netlink_deliver_tap+0x19c/0x1b0 [ 142.678507][ T7326] netlink_sendskb+0x68/0x140 [ 142.678525][ T7326] netlink_unicast+0x397/0x9e0 [ 142.678542][ T7326] ? __asan_memcpy+0x40/0x70 [ 142.678564][ T7326] ? __pfx_netlink_unicast+0x10/0x10 [ 142.678586][ T7326] netlink_rcv_skb+0x28c/0x470 [ 142.678605][ T7326] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 142.678625][ T7326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.678651][ T7326] netlink_unicast+0x82f/0x9e0 [ 142.678671][ T7326] ? __pfx_netlink_unicast+0x10/0x10 [ 142.678688][ T7326] ? netlink_sendmsg+0x642/0xb30 [ 142.678706][ T7326] ? skb_put+0x11b/0x210 [ 142.678727][ T7326] netlink_sendmsg+0x805/0xb30 [ 142.678750][ T7326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.678770][ T7326] ? aa_sock_msg_perm+0xf1/0x1d0 [ 142.678791][ T7326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.678810][ T7326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.678829][ T7326] __sock_sendmsg+0x21c/0x270 [ 142.678848][ T7326] ____sys_sendmsg+0x505/0x830 [ 142.678871][ T7326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.678896][ T7326] ? import_iovec+0x74/0xa0 [ 142.678915][ T7326] ___sys_sendmsg+0x21f/0x2a0 [ 142.678937][ T7326] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.678971][ T7326] ? __fget_files+0x2a/0x420 [ 142.678989][ T7326] ? __fget_files+0x3a0/0x420 [ 142.679011][ T7326] __x64_sys_sendmsg+0x19b/0x260 [ 142.679040][ T7326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.679065][ T7326] ? __pfx_ksys_write+0x10/0x10 [ 142.679083][ T7326] ? rcu_is_watching+0x15/0xb0 [ 142.679102][ T7326] do_syscall_64+0xfa/0xfa0 [ 142.679122][ T7326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.679138][ T7326] ? clear_bhb_loop+0x60/0xb0 [ 142.679156][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.679172][ T7326] RIP: 0033:0x7f1974d8ebe9 [ 142.679186][ T7326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.679201][ T7326] RSP: 002b:00007f1975b63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.679220][ T7326] RAX: ffffffffffffffda RBX: 00007f1974fb5fa0 RCX: 00007f1974d8ebe9 [ 142.679233][ T7326] RDX: 0000000020004010 RSI: 0000200000000280 RDI: 0000000000000003 [ 142.679244][ T7326] RBP: 00007f1975b63090 R08: 0000000000000000 R09: 0000000000000000 [ 142.679255][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.679265][ T7326] R13: 00007f1974fb6038 R14: 00007f1974fb5fa0 R15: 00007ffc6b0c2a58 [ 142.679282][ T7326] [ 143.027835][ T24] usb 1-1: USB disconnect, device number 38 [ 143.035036][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 143.051188][ T24] em28xx 1-1:0.0: Freeing device [ 143.315437][ T5945] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 143.336017][ T5945] usb 3-1: device descriptor read/8, error -71 [ 143.434641][ T5926] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 143.441675][ T5926] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 143.449126][ T5926] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 143.459471][ T5926] usb 2-1: USB disconnect, device number 40 [ 143.485514][ T5875] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 143.505736][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 143.585690][ T5945] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 143.605939][ T5945] usb 3-1: device descriptor read/8, error -71 [ 143.636666][ T5875] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 143.645111][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.656618][ T5875] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 143.666639][ T5875] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 143.674643][ T5875] usb 4-1: Manufacturer: syz [ 143.680800][ T5875] usb 4-1: config 0 descriptor?? [ 143.685419][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 143.693221][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.704229][ T24] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 143.712734][ T24] usb 1-1: config 4 has no interface number 0 [ 143.715677][ T5945] usb usb3-port1: unable to enumerate USB device [ 143.720961][ T24] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 143.734313][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.735605][ T5875] rc_core: IR keymap rc-hauppauge not found [ 143.742359][ T24] usb 1-1: Product: syz [ 143.742380][ T24] usb 1-1: Manufacturer: syz [ 143.742392][ T24] usb 1-1: SerialNumber: syz [ 143.765236][ T5875] Registered IR keymap rc-empty [ 143.770739][ T5875] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 143.781807][ T5875] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 143.952217][ T24] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 143.962506][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 143.982085][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 143.993771][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.003612][ T24] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 144.011161][ T24] usb 1-1: media controller created [ 144.016463][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 144.022195][ T24] dw2102: i2c transfer failed. [ 144.027165][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 144.032906][ T24] dw2102: i2c transfer failed. [ 144.038377][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 144.044136][ T24] dw2102: i2c transfer failed. [ 144.049108][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 144.055035][ T24] dw2102: i2c transfer failed. [ 144.059908][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 144.065696][ T24] dw2102: i2c transfer failed. [ 144.071022][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 144.076815][ T24] dw2102: i2c transfer failed. [ 144.081629][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 144.092590][ C0] igorplugusb 4-1:0.0: receive overflow invalid: 151 [ 144.096256][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.113005][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 144.118883][ T24] dw2102: command 0x0e transfer failed. [ 144.124480][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 144.130318][ T24] dw2102: command 0x0e transfer failed. [ 144.235705][ T5875] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 144.332845][ T10] usb 4-1: USB disconnect, device number 31 [ 144.391225][ T5875] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.407406][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.418506][ T5875] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.430660][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.446049][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 144.450805][ T5875] usb 2-1: SerialNumber: syz [ 144.453728][ T24] dw2102: command 0x0e transfer failed. [ 144.472546][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 144.485561][ T24] dw2102: command 0x0e transfer failed. [ 144.491176][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 144.505393][ T24] dw2102: command 0x51 transfer failed. [ 144.510978][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 144.517452][ T24] dw2102: i2c probe for address 0x68 failed. [ 144.525443][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 144.531271][ T24] dw2102: i2c probe for address 0x69 failed. [ 144.537991][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 144.543787][ T24] dw2102: i2c probe for address 0x6a failed. [ 144.553375][ T24] dw2102: probing for demodulator failed. Is the external power switched on? [ 144.562285][ T24] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 144.635472][ T24] rc_core: IR keymap rc-tt-1500 not found [ 144.642538][ T24] Registered IR keymap rc-empty [ 144.650847][ T24] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 144.662642][ T24] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input22 [ 144.668431][ T5875] usb 2-1: 0:2 : does not exist [ 144.678379][ T24] dvb-usb: schedule remote query interval to 250 msecs. [ 144.679044][ T5875] usb 2-1: unit 5 not found! [ 144.686493][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 144.696899][ T24] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 144.708071][ T5875] usb 2-1: USB disconnect, device number 41 [ 144.720275][ T24] usb 1-1: USB disconnect, device number 39 [ 144.766679][ T24] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 144.897033][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 145.056829][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.067114][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.076891][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.086169][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.086433][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 145.094918][ T10] usb 3-1: SerialNumber: syz [ 145.107879][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 145.116890][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 145.257994][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 145.264909][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 145.279430][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.292528][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 145.302089][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.310143][ T24] usb 1-1: Product: syz [ 145.314453][ T24] usb 1-1: Manufacturer: syz [ 145.319188][ T24] usb 1-1: SerialNumber: syz [ 145.324311][ T10] usb 3-1: 0:2 : does not exist [ 145.330639][ T24] usb 1-1: config 0 descriptor?? [ 145.338756][ T10] usb 3-1: USB disconnect, device number 32 [ 145.347404][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 145.357397][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 145.358696][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.456007][ T5875] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 145.495495][ T5975] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 145.605457][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 145.611950][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 145.623582][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.636801][ T5875] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 145.645990][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.653998][ T5875] usb 4-1: Product: syz [ 145.658298][ T5875] usb 4-1: Manufacturer: syz [ 145.662895][ T5875] usb 4-1: SerialNumber: syz [ 145.668874][ T5875] usb 4-1: config 0 descriptor?? [ 145.675677][ T5975] usb 2-1: Using ep0 maxpacket: 8 [ 145.676117][ T5875] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 145.684082][ T5975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 145.690016][ T5875] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 145.708712][ T5975] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 145.718445][ T5975] usb 2-1: config 4 has no interface number 0 [ 145.726908][ T5975] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 145.736264][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.744302][ T5975] usb 2-1: Product: syz [ 145.748874][ T5975] usb 2-1: Manufacturer: syz [ 145.753524][ T5975] usb 2-1: SerialNumber: syz [ 145.961034][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 145.970511][ T24] em28xx 1-1:0.0: Config register raw data: 0x00 [ 145.979120][ T5975] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 145.987721][ T5975] dw2102: su3000_power_ctrl: 1, initialized 0 [ 145.996334][ T5975] dvb-usb: bulk message failed: -22 (2/0) [ 146.006537][ T5975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.020495][ T5975] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 146.028333][ T5975] usb 2-1: media controller created [ 146.033548][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 146.039420][ T5975] dw2102: i2c transfer failed. [ 146.044198][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 146.050528][ T5975] dw2102: i2c transfer failed. [ 146.055323][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 146.061534][ T5975] dw2102: i2c transfer failed. [ 146.066344][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 146.072062][ T5975] dw2102: i2c transfer failed. [ 146.076883][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 146.082626][ T5975] dw2102: i2c transfer failed. [ 146.087413][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 146.093212][ T5975] dw2102: i2c transfer failed. [ 146.098001][ T5975] dvb-usb: MAC address: 02:02:02:02:02:02 [ 146.109789][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.122459][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 146.128325][ T5975] dw2102: command 0x0e transfer failed. [ 146.133864][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 146.139626][ T5975] dw2102: command 0x0e transfer failed. [ 146.280433][ T5875] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 146.287147][ T5875] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 146.446165][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 146.451937][ T5975] dw2102: command 0x0e transfer failed. [ 146.458560][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 146.464296][ T5975] dw2102: command 0x0e transfer failed. [ 146.469991][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 146.475915][ T5975] dw2102: command 0x51 transfer failed. [ 146.481622][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 146.487451][ T5975] dw2102: i2c probe for address 0x68 failed. [ 146.493447][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 146.499942][ T5975] dw2102: i2c probe for address 0x69 failed. [ 146.510961][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 146.521768][ T5975] dw2102: i2c probe for address 0x6a failed. [ 146.528542][ T5975] dw2102: probing for demodulator failed. Is the external power switched on? [ 146.537613][ T5975] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 146.581327][ T7389] FAULT_INJECTION: forcing a failure. [ 146.581327][ T7389] name failslab, interval 1, probability 0, space 0, times 0 [ 146.594313][ T7389] CPU: 0 UID: 0 PID: 7389 Comm: syz.1.556 Not tainted syzkaller #0 PREEMPT(full) [ 146.594337][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.594346][ T7389] Call Trace: [ 146.594353][ T7389] [ 146.594360][ T7389] dump_stack_lvl+0x189/0x250 [ 146.594386][ T7389] ? __pfx____ratelimit+0x10/0x10 [ 146.594406][ T7389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.594430][ T7389] ? __pfx__printk+0x10/0x10 [ 146.594451][ T7389] ? genl_family_rcv_msg_doit+0x267/0x300 [ 146.594469][ T7389] ? __pfx___might_resched+0x10/0x10 [ 146.594486][ T7389] ? lock_acquire+0x5f/0x360 [ 146.594501][ T7389] should_fail_ex+0x414/0x560 [ 146.594523][ T7389] should_failslab+0xa8/0x100 [ 146.594539][ T7389] kmem_cache_alloc_node_noprof+0x76/0x390 [ 146.594561][ T7389] ? __alloc_skb+0x112/0x2d0 [ 146.594581][ T7389] __alloc_skb+0x112/0x2d0 [ 146.594602][ T7389] netlink_ack+0x146/0xa50 [ 146.594629][ T7389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 146.594647][ T7389] ? __asan_memcpy+0x40/0x70 [ 146.594665][ T7389] ? __pfx_ref_tracker_free+0x10/0x10 [ 146.594688][ T7389] netlink_rcv_skb+0x28c/0x470 [ 146.594707][ T7389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 146.594722][ T7389] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.594745][ T7389] ? lock_release+0x4b/0x3e0 [ 146.594761][ T7389] ? down_read+0x1ad/0x2e0 [ 146.594776][ T7389] genl_rcv+0x28/0x40 [ 146.594790][ T7389] netlink_unicast+0x82f/0x9e0 [ 146.594809][ T7389] ? __pfx_netlink_unicast+0x10/0x10 [ 146.594827][ T7389] ? netlink_sendmsg+0x642/0xb30 [ 146.594846][ T7389] ? skb_put+0x11b/0x210 [ 146.594866][ T7389] netlink_sendmsg+0x805/0xb30 [ 146.594888][ T7389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.594914][ T7389] ? aa_sock_msg_perm+0xf1/0x1d0 [ 146.594933][ T7389] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.594952][ T7389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.594970][ T7389] __sock_sendmsg+0x21c/0x270 [ 146.594989][ T7389] ____sys_sendmsg+0x505/0x830 [ 146.595012][ T7389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.595036][ T7389] ? import_iovec+0x74/0xa0 [ 146.595055][ T7389] ___sys_sendmsg+0x21f/0x2a0 [ 146.595083][ T7389] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.595116][ T7389] ? __fget_files+0x2a/0x420 [ 146.595134][ T7389] ? __fget_files+0x3a0/0x420 [ 146.595155][ T7389] __x64_sys_sendmsg+0x19b/0x260 [ 146.595177][ T7389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.595202][ T7389] ? __pfx_ksys_write+0x10/0x10 [ 146.595218][ T7389] ? rcu_is_watching+0x15/0xb0 [ 146.595237][ T7389] do_syscall_64+0xfa/0xfa0 [ 146.595256][ T7389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.595270][ T7389] ? clear_bhb_loop+0x60/0xb0 [ 146.595287][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.595307][ T7389] RIP: 0033:0x7f55c978ebe9 [ 146.595322][ T7389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.595337][ T7389] RSP: 002b:00007f55ca651038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.595353][ T7389] RAX: ffffffffffffffda RBX: 00007f55c99b5fa0 RCX: 00007f55c978ebe9 [ 146.595365][ T7389] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000005 [ 146.595375][ T7389] RBP: 00007f55ca651090 R08: 0000000000000000 R09: 0000000000000000 [ 146.595386][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.595396][ T7389] R13: 00007f55c99b6038 R14: 00007f55c99b5fa0 R15: 00007fffe650e008 [ 146.595415][ T7389] [ 146.927911][ T5975] rc_core: IR keymap rc-tt-1500 not found [ 146.933662][ T5975] Registered IR keymap rc-empty [ 146.941319][ T5975] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 146.951518][ T5975] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input23 [ 146.962260][ T5975] dvb-usb: schedule remote query interval to 250 msecs. [ 146.969866][ T5975] dw2102: su3000_power_ctrl: 0, initialized 1 [ 146.976362][ T5975] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 146.988493][ T5975] usb 2-1: USB disconnect, device number 42 [ 147.043125][ T5975] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 147.132872][ T5875] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 147.236186][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 147.694610][ T10] usb 1-1: USB disconnect, device number 40 [ 147.759251][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 147.812026][ T10] em28xx 1-1:0.0: Freeing device [ 147.948013][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 147.969150][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 147.977796][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 147.985609][ T5864] Bluetooth: hci5: command 0x1003 tx timeout [ 147.989823][ T5873] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.000821][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'. [ 148.001943][ T5875] usb 4-1: USB disconnect, device number 32 [ 148.172977][ T7408] nbd: must specify a size in bytes for the device [ 148.295459][ T5975] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 148.295499][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 148.457035][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.468733][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.480607][ T5975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.481103][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.500473][ T5975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.500962][ T5875] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 148.518178][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.526364][ T10] usb 1-1: SerialNumber: syz [ 148.533396][ T5975] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.546173][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.554193][ T5975] usb 2-1: SerialNumber: syz [ 148.675520][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 148.682155][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.690736][ T5875] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 148.698985][ T5875] usb 3-1: config 4 has no interface number 0 [ 148.710317][ T5875] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 148.719579][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.727857][ T5875] usb 3-1: Product: syz [ 148.732049][ T5875] usb 3-1: Manufacturer: syz [ 148.736934][ T5875] usb 3-1: SerialNumber: syz [ 148.747412][ T10] usb 1-1: 0:2 : does not exist [ 148.763097][ T10] usb 1-1: USB disconnect, device number 41 [ 148.778043][ T5975] usb 2-1: 0:2 : does not exist [ 148.782995][ T5975] usb 2-1: unit 5 not found! [ 148.790710][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.815138][ T5975] usb 2-1: USB disconnect, device number 43 [ 148.842474][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.962596][ T5875] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 148.970094][ T5875] dw2102: su3000_power_ctrl: 1, initialized 0 [ 148.976580][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 148.984224][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.994179][ T5875] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 149.002116][ T5875] usb 3-1: media controller created [ 149.007682][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 149.013980][ T5875] dw2102: i2c transfer failed. [ 149.018828][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 149.024551][ T5875] dw2102: i2c transfer failed. [ 149.029528][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 149.035251][ T5875] dw2102: i2c transfer failed. [ 149.040317][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 149.046280][ T5875] dw2102: i2c transfer failed. [ 149.051051][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 149.056789][ T5875] dw2102: i2c transfer failed. [ 149.061556][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 149.067403][ T5875] dw2102: i2c transfer failed. [ 149.072163][ T5875] dvb-usb: MAC address: 02:02:02:02:02:02 [ 149.083691][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.098514][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 149.104258][ T5875] dw2102: command 0x0e transfer failed. [ 149.110146][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 149.115938][ T5875] dw2102: command 0x0e transfer failed. [ 149.374063][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 149.427137][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 149.427160][ T5875] dw2102: command 0x0e transfer failed. [ 149.427169][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 149.427180][ T5875] dw2102: command 0x0e transfer failed. [ 149.427189][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 149.457377][ T7435] FAULT_INJECTION: forcing a failure. [ 149.457377][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 149.457408][ T7435] CPU: 1 UID: 0 PID: 7435 Comm: syz.1.574 Not tainted syzkaller #0 PREEMPT(full) [ 149.457427][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.457438][ T7435] Call Trace: [ 149.457444][ T7435] [ 149.457451][ T7435] dump_stack_lvl+0x189/0x250 [ 149.457477][ T7435] ? __pfx____ratelimit+0x10/0x10 [ 149.457497][ T7435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.457518][ T7435] ? __pfx__printk+0x10/0x10 [ 149.457541][ T7435] ? __pfx___might_resched+0x10/0x10 [ 149.457559][ T7435] ? lock_acquire+0x5f/0x360 [ 149.457572][ T7435] should_fail_ex+0x414/0x560 [ 149.457594][ T7435] should_failslab+0xa8/0x100 [ 149.457609][ T7435] __kmalloc_noprof+0xcb/0x4b0 [ 149.457629][ T7435] ? nf_tables_newrule+0x150b/0x28a0 [ 149.457650][ T7435] ? nla_strcmp+0x106/0x140 [ 149.457667][ T7435] nf_tables_newrule+0x150b/0x28a0 [ 149.457693][ T7435] ? __pfx_nf_tables_newrule+0x10/0x10 [ 149.457713][ T7435] ? nfnl_pernet+0x23/0x240 [ 149.457729][ T7435] ? rcu_is_watching+0x15/0xb0 [ 149.457746][ T7435] ? nfnl_pernet+0x23/0x240 [ 149.457765][ T7435] ? __nla_parse+0x40/0x60 [ 149.457781][ T7435] nfnetlink_rcv+0x112f/0x2520 [ 149.457807][ T7435] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 149.457829][ T7435] ? ref_tracker_free+0x63a/0x7d0 [ 149.457860][ T7435] ? __netlink_deliver_tap+0x807/0x850 [ 149.457880][ T7435] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.457900][ T7435] ? lock_release+0x4b/0x3e0 [ 149.457917][ T7435] netlink_unicast+0x82f/0x9e0 [ 149.457937][ T7435] ? __pfx_netlink_unicast+0x10/0x10 [ 149.457954][ T7435] ? netlink_sendmsg+0x642/0xb30 [ 149.457972][ T7435] ? skb_put+0x11b/0x210 [ 149.457994][ T7435] netlink_sendmsg+0x805/0xb30 [ 149.458015][ T7435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.458035][ T7435] ? aa_sock_msg_perm+0xf1/0x1d0 [ 149.458055][ T7435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.458072][ T7435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.458091][ T7435] __sock_sendmsg+0x21c/0x270 [ 149.458108][ T7435] ____sys_sendmsg+0x505/0x830 [ 149.458130][ T7435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.458154][ T7435] ? import_iovec+0x74/0xa0 [ 149.458173][ T7435] ___sys_sendmsg+0x21f/0x2a0 [ 149.458194][ T7435] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.458227][ T7435] ? __fget_files+0x2a/0x420 [ 149.458243][ T7435] ? __fget_files+0x3a0/0x420 [ 149.458264][ T7435] __x64_sys_sendmsg+0x19b/0x260 [ 149.458285][ T7435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.458309][ T7435] ? __pfx_ksys_write+0x10/0x10 [ 149.458326][ T7435] ? rcu_is_watching+0x15/0xb0 [ 149.458343][ T7435] do_syscall_64+0xfa/0xfa0 [ 149.458371][ T7435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.458386][ T7435] ? clear_bhb_loop+0x60/0xb0 [ 149.458402][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.458417][ T7435] RIP: 0033:0x7f55c978ebe9 [ 149.458432][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.458446][ T7435] RSP: 002b:00007f55ca651038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.458463][ T7435] RAX: ffffffffffffffda RBX: 00007f55c99b5fa0 RCX: 00007f55c978ebe9 [ 149.458475][ T7435] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 149.458486][ T7435] RBP: 00007f55ca651090 R08: 0000000000000000 R09: 0000000000000000 [ 149.458496][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.458505][ T7435] R13: 00007f55c99b6038 R14: 00007f55c99b5fa0 R15: 00007fffe650e008 [ 149.458523][ T7435] [ 149.813568][ T5875] dw2102: command 0x51 transfer failed. [ 149.813588][ T5875] dvb-usb: bulk message failed: -22 (5/0) [ 149.813600][ T5875] dw2102: i2c probe for address 0x68 failed. [ 149.813610][ T5875] dvb-usb: bulk message failed: -22 (5/0) [ 149.813621][ T5875] dw2102: i2c probe for address 0x69 failed. [ 149.813629][ T5875] dvb-usb: bulk message failed: -22 (5/0) [ 149.813639][ T5875] dw2102: i2c probe for address 0x6a failed. [ 149.813647][ T5875] dw2102: probing for demodulator failed. Is the external power switched on? [ 149.813653][ T5875] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 149.935455][ T5875] rc_core: IR keymap rc-tt-1500 not found [ 149.941326][ T5875] Registered IR keymap rc-empty [ 149.951752][ T5875] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 149.979086][ T5875] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input24 [ 150.004452][ T5875] dvb-usb: schedule remote query interval to 250 msecs. [ 150.013525][ T5875] dw2102: su3000_power_ctrl: 0, initialized 1 [ 150.021450][ T5875] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 150.066473][ T5875] usb 3-1: USB disconnect, device number 33 [ 150.113989][ T5875] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 150.204233][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.580'. [ 150.235874][ T5945] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 150.408341][ T5945] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 150.418462][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.435974][ T5945] usb 1-1: Product: syz [ 150.440166][ T5945] usb 1-1: Manufacturer: syz [ 150.444765][ T5945] usb 1-1: SerialNumber: syz [ 150.456133][ T5945] usb 1-1: config 0 descriptor?? [ 150.466692][ T5945] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 150.585528][ T5927] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 150.735477][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 150.742261][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.754005][ T5927] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 150.762931][ T5927] usb 3-1: config 4 has no interface number 0 [ 150.774579][ T5927] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 150.785271][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.793679][ T5927] usb 3-1: Product: syz [ 150.798352][ T5927] usb 3-1: Manufacturer: syz [ 150.803032][ T5927] usb 3-1: SerialNumber: syz [ 150.865631][ T5945] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 150.874733][ T5945] sq905c 1-1:0.0: Reading version command failed [ 150.881607][ T5945] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 150.893233][ T5945] usb 1-1: USB disconnect, device number 42 [ 151.020747][ T5927] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 151.028136][ T5927] dw2102: su3000_power_ctrl: 1, initialized 0 [ 151.034921][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 151.042480][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 151.052135][ T5927] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 151.059793][ T5927] usb 3-1: media controller created [ 151.065017][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 151.071315][ T5927] dw2102: i2c transfer failed. [ 151.076130][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 151.081844][ T5927] dw2102: i2c transfer failed. [ 151.086773][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 151.092496][ T5927] dw2102: i2c transfer failed. [ 151.097338][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 151.103050][ T5927] dw2102: i2c transfer failed. [ 151.108031][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 151.113756][ T5927] dw2102: i2c transfer failed. [ 151.118674][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 151.124650][ T5927] dw2102: i2c transfer failed. [ 151.129482][ T5927] dvb-usb: MAC address: 02:02:02:02:02:02 [ 151.141884][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.154848][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 151.155501][ T5975] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 151.161709][ T5927] dw2102: command 0x0e transfer failed. [ 151.173820][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 151.179592][ T5927] dw2102: command 0x0e transfer failed. [ 151.315452][ T5975] usb 2-1: Using ep0 maxpacket: 16 [ 151.321847][ T5975] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 151.330813][ T5975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.341466][ T5975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.352165][ T5975] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.361276][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.369470][ T5975] usb 2-1: Product: syz [ 151.373657][ T5975] usb 2-1: Manufacturer: syz [ 151.378512][ T5975] usb 2-1: SerialNumber: syz [ 151.403923][ T7478] FAULT_INJECTION: forcing a failure. [ 151.403923][ T7478] name failslab, interval 1, probability 0, space 0, times 0 [ 151.416628][ T7478] CPU: 1 UID: 0 PID: 7478 Comm: syz.0.586 Not tainted syzkaller #0 PREEMPT(full) [ 151.416660][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.416666][ T7478] Call Trace: [ 151.416671][ T7478] [ 151.416675][ T7478] dump_stack_lvl+0x189/0x250 [ 151.416694][ T7478] ? __pfx____ratelimit+0x10/0x10 [ 151.416707][ T7478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.416720][ T7478] ? __pfx__printk+0x10/0x10 [ 151.416741][ T7478] ? __pfx___might_resched+0x10/0x10 [ 151.416751][ T7478] ? lock_acquire+0x5f/0x360 [ 151.416761][ T7478] should_fail_ex+0x414/0x560 [ 151.416775][ T7478] should_failslab+0xa8/0x100 [ 151.416785][ T7478] __kmalloc_cache_node_noprof+0x73/0x3a0 [ 151.416799][ T7478] ? __alloc_workqueue+0x6a4/0x1b70 [ 151.416820][ T7478] __alloc_workqueue+0x6a4/0x1b70 [ 151.416832][ T7478] ? kfree+0x4d/0x440 [ 151.416845][ T7478] alloc_workqueue_noprof+0xd4/0x210 [ 151.416859][ T7478] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 151.416874][ T7478] hci_register_dev+0x208/0x890 [ 151.416885][ T7478] ? __raw_spin_lock_init+0x45/0x100 [ 151.416898][ T7478] hci_uart_tty_ioctl+0x828/0xa00 [ 151.416910][ T7478] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 151.416920][ T7478] tty_ioctl+0x9c6/0xde0 [ 151.416929][ T7478] ? __pfx_tty_ioctl+0x10/0x10 [ 151.416937][ T7478] __se_sys_ioctl+0xf9/0x170 [ 151.416952][ T7478] do_syscall_64+0xfa/0xfa0 [ 151.416968][ T7478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.416977][ T7478] ? clear_bhb_loop+0x60/0xb0 [ 151.416988][ T7478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.416997][ T7478] RIP: 0033:0x7f0ecdb8ebe9 [ 151.417006][ T7478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.417014][ T7478] RSP: 002b:00007f0ecea98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.417025][ T7478] RAX: ffffffffffffffda RBX: 00007f0ecddb5fa0 RCX: 00007f0ecdb8ebe9 [ 151.417032][ T7478] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 151.417038][ T7478] RBP: 00007f0ecea98090 R08: 0000000000000000 R09: 0000000000000000 [ 151.417044][ T7478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.417049][ T7478] R13: 00007f0ecddb6038 R14: 00007f0ecddb5fa0 R15: 00007ffd825db998 [ 151.417059][ T7478] [ 151.417093][ T7478] Bluetooth: Can't register HCI device [ 151.507235][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 151.604702][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 151.624036][ T5927] dw2102: command 0x0e transfer failed. [ 151.662207][ T7482] /dev/rnullb0: Can't open blockdev [ 151.680127][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 151.685914][ T5927] dw2102: command 0x0e transfer failed. [ 151.691521][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 151.698316][ T5927] dw2102: command 0x51 transfer failed. [ 151.703887][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 151.709745][ T5927] dw2102: i2c probe for address 0x68 failed. [ 151.718380][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 151.724223][ T5927] dw2102: i2c probe for address 0x69 failed. [ 151.731684][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 151.742372][ T5927] dw2102: i2c probe for address 0x6a failed. [ 151.751673][ T5927] dw2102: probing for demodulator failed. Is the external power switched on? [ 151.755621][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 151.762027][ T5927] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 151.802966][ T5975] usb 2-1: 0:2 : does not exist [ 151.875742][ T5927] rc_core: IR keymap rc-tt-1500 not found [ 151.887885][ T5927] Registered IR keymap rc-empty [ 151.893573][ T5927] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 151.906602][ T5927] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input25 [ 151.934297][ T5927] dvb-usb: schedule remote query interval to 250 msecs. [ 151.956478][ T5927] dw2102: su3000_power_ctrl: 0, initialized 1 [ 151.962603][ T5927] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 151.984302][ T5927] usb 3-1: USB disconnect, device number 34 [ 152.055604][ T5927] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 152.083038][ T7501] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 152.089512][ T7501] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 152.096232][ T7501] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 152.102691][ T7501] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 152.109433][ T7501] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 152.115883][ T7501] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 152.122756][ T7501] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 152.129168][ T7501] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 152.135744][ T7501] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 152.136758][ T7504] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 152.142131][ T7501] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 152.158710][ T7504] netlink: 'syz.0.596': attribute type 2 has an invalid length. [ 152.214442][ T7508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.315485][ T5926] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 152.375828][ T7512] /dev/rnullb0: Can't open blockdev [ 152.465419][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 152.472242][ T5926] usb 4-1: unable to get BOS descriptor or descriptor too short [ 152.481022][ T5926] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 152.489390][ T5926] usb 4-1: config 4 has no interface number 0 [ 152.497153][ T5926] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 152.506268][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.514277][ T5926] usb 4-1: Product: syz [ 152.518550][ T5926] usb 4-1: Manufacturer: syz [ 152.523158][ T5926] usb 4-1: SerialNumber: syz [ 152.608649][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.618651][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.736758][ T5926] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 152.749371][ T5926] dw2102: su3000_power_ctrl: 1, initialized 0 [ 152.755303][ T7521] bridge0: port 3(syz_tun) entered blocking state [ 152.757285][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 152.762332][ T7521] bridge0: port 3(syz_tun) entered disabled state [ 152.769538][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.778461][ T7521] syz_tun: entered allmulticast mode [ 152.785026][ T5926] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 152.791113][ T7521] syz_tun: entered promiscuous mode [ 152.800647][ T5926] usb 4-1: media controller created [ 152.803000][ T7521] bridge0: port 3(syz_tun) entered blocking state [ 152.807734][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 152.814104][ T7521] bridge0: port 3(syz_tun) entered forwarding state [ 152.821126][ T5926] dw2102: i2c transfer failed. [ 152.829364][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 152.831380][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 152.848579][ T5926] dw2102: i2c transfer failed. [ 152.853552][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 152.859419][ T5926] dw2102: i2c transfer failed. [ 152.864268][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 152.870948][ T5926] dw2102: i2c transfer failed. [ 152.876458][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 152.889881][ T5926] dw2102: i2c transfer failed. [ 152.894772][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 152.900646][ T5926] dw2102: i2c transfer failed. [ 152.907750][ T5926] dvb-usb: MAC address: 02:02:02:02:02:02 [ 152.925748][ T7524] trusted_key: encrypted_key: insufficient parameters specified [ 152.927636][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.950438][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 152.950457][ T5926] dw2102: command 0x0e transfer failed. [ 152.950465][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 152.950477][ T5926] dw2102: command 0x0e transfer failed. [ 153.255441][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 153.261312][ T5926] dw2102: command 0x0e transfer failed. [ 153.269276][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 153.275112][ T5926] dw2102: command 0x0e transfer failed. [ 153.280788][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 153.288303][ T5926] dw2102: command 0x51 transfer failed. [ 153.293981][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 153.300004][ T5926] dw2102: i2c probe for address 0x68 failed. [ 153.306062][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 153.311794][ T5926] dw2102: i2c probe for address 0x69 failed. [ 153.317818][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 153.323550][ T5926] dw2102: i2c probe for address 0x6a failed. [ 153.329627][ T5926] dw2102: probing for demodulator failed. Is the external power switched on? [ 153.339270][ T5926] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 153.396750][ T5926] rc_core: IR keymap rc-tt-1500 not found [ 153.402594][ T5926] Registered IR keymap rc-empty [ 153.408199][ T5926] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 153.418077][ T5926] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input26 [ 153.428660][ T5926] dvb-usb: schedule remote query interval to 250 msecs. [ 153.435669][ T5926] dw2102: su3000_power_ctrl: 0, initialized 1 [ 153.441849][ T5926] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 153.453719][ T5926] usb 4-1: USB disconnect, device number 33 [ 153.486035][ T5926] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 153.815485][ T5926] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 153.866431][ T5975] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 153.888755][ T5975] usb 2-1: USB disconnect, device number 44 [ 153.909024][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.985466][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 153.999089][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 154.021639][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.037141][ T5926] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 154.053573][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.062059][ T5926] usb 4-1: Product: syz [ 154.067583][ T5926] usb 4-1: Manufacturer: syz [ 154.072245][ T5926] usb 4-1: SerialNumber: syz [ 154.080194][ T5926] usb 4-1: config 0 descriptor?? [ 154.089724][ T5926] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 154.099831][ T5926] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 154.171216][ T7552] FAULT_INJECTION: forcing a failure. [ 154.171216][ T7552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.184846][ T7552] CPU: 1 UID: 0 PID: 7552 Comm: syz.1.615 Not tainted syzkaller #0 PREEMPT(full) [ 154.184881][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.184891][ T7552] Call Trace: [ 154.184897][ T7552] [ 154.184903][ T7552] dump_stack_lvl+0x189/0x250 [ 154.184928][ T7552] ? __pfx____ratelimit+0x10/0x10 [ 154.184947][ T7552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.184966][ T7552] ? __pfx__printk+0x10/0x10 [ 154.184985][ T7552] ? __might_fault+0xb0/0x130 [ 154.185009][ T7552] ? rcu_is_watching+0x15/0xb0 [ 154.185027][ T7552] should_fail_ex+0x414/0x560 [ 154.185043][ T7552] _copy_from_iter+0x1de/0x1790 [ 154.185052][ T7552] ? __might_fault+0xb0/0x130 [ 154.185064][ T7552] ? __might_fault+0xcc/0x130 [ 154.185077][ T7552] ? _copy_from_iter+0x24f/0x1790 [ 154.185087][ T7552] ? __pfx__copy_from_iter+0x10/0x10 [ 154.185095][ T7552] ? sock_alloc_send_pskb+0x875/0x990 [ 154.185105][ T7552] ? __pfx__copy_from_iter+0x10/0x10 [ 154.185116][ T7552] ? page_copy_sane+0x16a/0x280 [ 154.185127][ T7552] copy_page_from_iter+0xdd/0x170 [ 154.185137][ T7552] skb_copy_datagram_from_iter+0x306/0x720 [ 154.185149][ T7552] tun_get_user+0x1691/0x3e20 [ 154.185162][ T7552] ? rcu_is_watching+0x15/0xb0 [ 154.185171][ T7552] ? lock_release+0x4b/0x3e0 [ 154.185182][ T7552] ? aa_file_perm+0x44d/0x1550 [ 154.185195][ T7552] ? __pfx_tun_get_user+0x10/0x10 [ 154.185206][ T7552] ? _parse_integer_limit+0x1ae/0x1f0 [ 154.185220][ T7552] ? kstrtoull+0x12f/0x1d0 [ 154.185234][ T7552] ? ref_tracker_alloc+0x318/0x460 [ 154.185247][ T7552] ? get_pid_task+0x20/0x1f0 [ 154.185259][ T7552] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 154.185272][ T7552] ? tun_get+0x1c/0x2f0 [ 154.185282][ T7552] ? tun_get+0x1c/0x2f0 [ 154.185292][ T7552] ? rcu_is_watching+0x15/0xb0 [ 154.185301][ T7552] ? tun_get+0x1c/0x2f0 [ 154.185311][ T7552] ? lock_release+0x4b/0x3e0 [ 154.185319][ T7552] ? common_file_perm+0x1b5/0x230 [ 154.185330][ T7552] ? tun_get+0x1c/0x2f0 [ 154.185341][ T7552] tun_chr_write_iter+0x113/0x200 [ 154.185357][ T7552] vfs_write+0x5c9/0xb30 [ 154.185373][ T7552] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 154.185390][ T7552] ? __pfx_vfs_write+0x10/0x10 [ 154.185407][ T7552] ? __fget_files+0x2a/0x420 [ 154.185427][ T7552] ksys_write+0x145/0x250 [ 154.185443][ T7552] ? __pfx_ksys_write+0x10/0x10 [ 154.185459][ T7552] ? rcu_is_watching+0x15/0xb0 [ 154.185475][ T7552] do_syscall_64+0xfa/0xfa0 [ 154.185494][ T7552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.185508][ T7552] ? clear_bhb_loop+0x60/0xb0 [ 154.185518][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.185526][ T7552] RIP: 0033:0x7f55c978ebe9 [ 154.185536][ T7552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.185544][ T7552] RSP: 002b:00007f55ca651038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.185555][ T7552] RAX: ffffffffffffffda RBX: 00007f55c99b5fa0 RCX: 00007f55c978ebe9 [ 154.185562][ T7552] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 154.185568][ T7552] RBP: 00007f55ca651090 R08: 0000000000000000 R09: 0000000000000000 [ 154.185574][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.185580][ T7552] R13: 00007f55c99b6038 R14: 00007f55c99b5fa0 R15: 00007fffe650e008 [ 154.185590][ T7552] [ 154.646418][ T5975] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 154.835409][ T5975] usb 3-1: Using ep0 maxpacket: 8 [ 154.841886][ T5975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.851402][ T5975] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 154.859526][ T5975] usb 3-1: config 4 has no interface number 0 [ 154.865868][ T5975] usb 3-1: config 4 interface 30 has no altsetting 0 [ 154.872680][ T5926] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 154.879261][ T5926] em28xx 4-1:0.0: Config register raw data: 0x00 [ 154.887714][ T5975] usb 3-1: string descriptor 0 read error: -22 [ 154.893932][ T5975] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 154.904565][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.916952][ T5975] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 154.924740][ T5975] dw2102: su3000_power_ctrl: 1, initialized 0 [ 154.930875][ T5975] dvb-usb: bulk message failed: -22 (2/0) [ 154.937819][ T5975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.947520][ T5975] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 154.954994][ T5975] usb 3-1: media controller created [ 154.960532][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 154.965524][ T5927] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 154.966312][ T5975] dw2102: i2c transfer failed. [ 154.978599][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 154.984322][ T5975] dw2102: i2c transfer failed. [ 154.989126][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 154.994849][ T5975] dw2102: i2c transfer failed. [ 154.999641][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 155.005390][ T5975] dw2102: i2c transfer failed. [ 155.010156][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 155.016002][ T5975] dw2102: i2c transfer failed. [ 155.020772][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 155.026892][ T5975] dw2102: i2c transfer failed. [ 155.031666][ T5975] dvb-usb: MAC address: 02:02:02:02:02:02 [ 155.043060][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.057754][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 155.063522][ T5975] dw2102: command 0x0e transfer failed. [ 155.069197][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 155.074942][ T5975] dw2102: command 0x0e transfer failed. [ 155.125474][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 155.132593][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.141132][ T5927] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 155.149293][ T5927] usb 2-1: config 4 has no interface number 0 [ 155.157058][ T5927] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 155.166171][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.174162][ T5927] usb 2-1: Product: syz [ 155.179398][ T5927] usb 2-1: Manufacturer: syz [ 155.184001][ T5927] usb 2-1: SerialNumber: syz [ 155.385413][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 155.391221][ T5975] dw2102: command 0x0e transfer failed. [ 155.397586][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 155.403595][ T5975] dw2102: command 0x0e transfer failed. [ 155.406464][ T5927] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 155.409455][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 155.420697][ T5927] dw2102: su3000_power_ctrl: 1, initialized 0 [ 155.422130][ T5975] dw2102: command 0x51 transfer failed. [ 155.428400][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 155.434916][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 155.446011][ T5975] dw2102: i2c probe for address 0x68 failed. [ 155.446508][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.451989][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 155.452006][ T5975] dw2102: i2c probe for address 0x69 failed. [ 155.452014][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 155.452025][ T5975] dw2102: i2c probe for address 0x6a failed. [ 155.452058][ T7548] dvb-usb: bulk message failed: -22 (4/0) [ 155.463900][ T5927] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 155.467085][ T5975] dw2102: probing for demodulator failed. Is the external power switched on? [ 155.467098][ T5975] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 155.508196][ T7548] dw2102: i2c transfer failed. [ 155.515220][ T5927] usb 2-1: media controller created [ 155.525086][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 155.534424][ T5927] dw2102: i2c transfer failed. [ 155.540156][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 155.545969][ T5927] dw2102: i2c transfer failed. [ 155.550742][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 155.556517][ T5927] dw2102: i2c transfer failed. [ 155.557515][ T5975] rc_core: IR keymap rc-tt-1500 not found [ 155.561281][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 155.561295][ T5927] dw2102: i2c transfer failed. [ 155.561304][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 155.561314][ T5927] dw2102: i2c transfer failed. [ 155.561323][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 155.569254][ T5975] Registered IR keymap rc-empty [ 155.572843][ T5927] dw2102: i2c transfer failed. [ 155.572853][ T5927] dvb-usb: MAC address: 02:02:02:02:02:02 [ 155.583068][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.584480][ T5975] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 155.594577][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 155.613803][ T5975] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input27 [ 155.617974][ T5927] dw2102: command 0x0e transfer failed. [ 155.649100][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 155.654898][ T5927] dw2102: command 0x0e transfer failed. [ 155.658204][ T5975] dvb-usb: schedule remote query interval to 250 msecs. [ 155.667571][ T5975] dw2102: su3000_power_ctrl: 0, initialized 1 [ 155.673643][ T5975] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 155.685524][ T5975] usb 3-1: USB disconnect, device number 35 [ 155.703638][ T5975] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 155.789614][ T7566] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 155.863362][ T7571] FAULT_INJECTION: forcing a failure. [ 155.863362][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 155.876803][ T7571] CPU: 1 UID: 0 PID: 7571 Comm: syz.0.621 Not tainted syzkaller #0 PREEMPT(full) [ 155.876827][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.876838][ T7571] Call Trace: [ 155.876844][ T7571] [ 155.876851][ T7571] dump_stack_lvl+0x189/0x250 [ 155.876878][ T7571] ? __pfx____ratelimit+0x10/0x10 [ 155.876898][ T7571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.876918][ T7571] ? __pfx__printk+0x10/0x10 [ 155.876937][ T7571] ? genl_rcv+0x28/0x40 [ 155.876951][ T7571] ? ____sys_sendmsg+0x505/0x830 [ 155.876971][ T7571] ? __x64_sys_sendmsg+0x19b/0x260 [ 155.876990][ T7571] ? do_syscall_64+0xfa/0xfa0 [ 155.877009][ T7571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.877028][ T7571] should_fail_ex+0x414/0x560 [ 155.877050][ T7571] should_failslab+0xa8/0x100 [ 155.877067][ T7571] kmem_cache_alloc_noprof+0x73/0x390 [ 155.877088][ T7571] ? skb_clone+0x212/0x3a0 [ 155.877104][ T7571] skb_clone+0x212/0x3a0 [ 155.877120][ T7571] __netlink_deliver_tap+0x404/0x850 [ 155.877144][ T7571] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.877164][ T7571] netlink_deliver_tap+0x19c/0x1b0 [ 155.877182][ T7571] netlink_sendskb+0x68/0x140 [ 155.877201][ T7571] netlink_unicast+0x397/0x9e0 [ 155.877216][ T7571] ? __asan_memcpy+0x40/0x70 [ 155.877238][ T7571] ? __pfx_netlink_unicast+0x10/0x10 [ 155.877258][ T7571] netlink_rcv_skb+0x28c/0x470 [ 155.877277][ T7571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.877292][ T7571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.877315][ T7571] ? lock_release+0x4b/0x3e0 [ 155.877329][ T7571] ? down_read+0x1ad/0x2e0 [ 155.877343][ T7571] genl_rcv+0x28/0x40 [ 155.877358][ T7571] netlink_unicast+0x82f/0x9e0 [ 155.877376][ T7571] ? __pfx_netlink_unicast+0x10/0x10 [ 155.877392][ T7571] ? netlink_sendmsg+0x642/0xb30 [ 155.877408][ T7571] ? skb_put+0x11b/0x210 [ 155.877426][ T7571] netlink_sendmsg+0x805/0xb30 [ 155.877444][ T7571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.877460][ T7571] ? aa_sock_msg_perm+0xf1/0x1d0 [ 155.877477][ T7571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.877491][ T7571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.877507][ T7571] __sock_sendmsg+0x21c/0x270 [ 155.877521][ T7571] ____sys_sendmsg+0x505/0x830 [ 155.877539][ T7571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.877559][ T7571] ? import_iovec+0x74/0xa0 [ 155.877574][ T7571] ___sys_sendmsg+0x21f/0x2a0 [ 155.877592][ T7571] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.877618][ T7571] ? __fget_files+0x2a/0x420 [ 155.877633][ T7571] ? __fget_files+0x3a0/0x420 [ 155.877649][ T7571] __x64_sys_sendmsg+0x19b/0x260 [ 155.877674][ T7571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.877693][ T7571] ? __pfx_ksys_write+0x10/0x10 [ 155.877707][ T7571] ? rcu_is_watching+0x15/0xb0 [ 155.877722][ T7571] do_syscall_64+0xfa/0xfa0 [ 155.877738][ T7571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.877750][ T7571] ? clear_bhb_loop+0x60/0xb0 [ 155.877763][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.877775][ T7571] RIP: 0033:0x7f0ecdb8ebe9 [ 155.877788][ T7571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.877799][ T7571] RSP: 002b:00007f0ecea98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.877814][ T7571] RAX: ffffffffffffffda RBX: 00007f0ecddb5fa0 RCX: 00007f0ecdb8ebe9 [ 155.877824][ T7571] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000005 [ 155.877832][ T7571] RBP: 00007f0ecea98090 R08: 0000000000000000 R09: 0000000000000000 [ 155.877841][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.877848][ T7571] R13: 00007f0ecddb6038 R14: 00007f0ecddb5fa0 R15: 00007ffd825db998 [ 155.877862][ T7571] [ 156.245605][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 156.251872][ T5927] dw2102: command 0x0e transfer failed. [ 156.258209][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 156.264867][ T5927] dw2102: command 0x0e transfer failed. [ 156.270703][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 156.286023][ T5927] dw2102: command 0x51 transfer failed. [ 156.291654][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 156.294315][ T5975] usb 4-1: USB disconnect, device number 34 [ 156.303980][ T5927] dw2102: i2c probe for address 0x68 failed. [ 156.303997][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 156.304010][ T5927] dw2102: i2c probe for address 0x69 failed. [ 156.304019][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 156.304031][ T5927] dw2102: i2c probe for address 0x6a failed. [ 156.304039][ T5927] dw2102: probing for demodulator failed. Is the external power switched on? [ 156.304048][ T5927] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 156.381789][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 156.392957][ T7575] tmpfs: Bad value for 'gid' [ 156.396313][ T5927] rc_core: IR keymap rc-tt-1500 not found [ 156.404351][ T7575] tmpfs: Bad value for 'gid' [ 156.413041][ T5927] Registered IR keymap rc-empty [ 156.437264][ T5927] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 156.479952][ T5927] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input28 [ 156.507669][ T7583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.535041][ T5927] dvb-usb: schedule remote query interval to 250 msecs. [ 156.543235][ T5927] dw2102: su3000_power_ctrl: 0, initialized 1 [ 156.550207][ T5927] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 156.563771][ T5927] usb 2-1: USB disconnect, device number 45 [ 156.795997][ T5975] em28xx 4-1:0.0: Disconnecting em28xx [ 156.805839][ T5975] em28xx 4-1:0.0: Freeing device [ 156.820840][ T5927] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 157.231549][ T7609] nfs: Unknown parameter 'defcontext' [ 157.237231][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 157.255512][ T5927] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 157.310748][ T7613] vxcan0: tx address claim with different name [ 157.318653][ T7613] vxcan0: tx address claim with different name [ 157.324892][ T7613] vxcan0: tx address claim with different name [ 157.331509][ T7613] vxcan0: tx address claim with different name [ 157.338024][ T7613] vxcan0: tx address claim with different name [ 157.344257][ T7613] vxcan0: tx address claim with different name [ 157.350764][ T7613] vxcan0: tx address claim with different name [ 157.357242][ T7613] vxcan0: tx address claim with different name [ 157.363438][ T7613] vxcan0: tx address claim with different name [ 157.370213][ T7613] vxcan0: tx address claim with different name [ 157.376548][ T7613] vxcan0: tx address claim with different name [ 157.383344][ T7613] vxcan0: tx address claim with different name [ 157.389719][ T7613] vxcan0: tx address claim with different name [ 157.396087][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 157.396202][ T7613] vxcan0: tx address claim with different name [ 157.402669][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 157.408321][ T7613] vxcan0: tx address claim with different name [ 157.415859][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 157.421731][ T7613] vxcan0: tx address claim with different name [ 157.427707][ T10] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 157.432547][ T7613] vxcan0: tx address claim with different name [ 157.440841][ T10] usb 1-1: config 4 has no interface number 0 [ 157.447849][ T7613] vxcan0: tx address claim with different name [ 157.453278][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.459183][ T7613] vxcan0: tx address claim with different name [ 157.468378][ T10] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 157.473004][ T7613] vxcan0: tx address claim with different name [ 157.482904][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.496974][ T5927] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 157.497989][ T7613] vxcan0: tx address claim with different name [ 157.505047][ T5927] usb 3-1: config 4 has no interface number 0 [ 157.505075][ T5927] usb 3-1: config 4 interface 30 has no altsetting 0 [ 157.505166][ T10] usb 1-1: Product: syz [ 157.511872][ T7613] vxcan0: tx address claim with different name [ 157.517805][ T10] usb 1-1: Manufacturer: syz [ 157.525324][ T7613] vxcan0: tx address claim with different name [ 157.528783][ T10] usb 1-1: SerialNumber: syz [ 157.534970][ T7613] vxcan0: tx address claim with different name [ 157.540423][ T5927] usb 3-1: string descriptor 0 read error: -22 [ 157.546599][ T7613] vxcan0: tx address claim with different name [ 157.550172][ T5927] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 157.556397][ T7613] vxcan0: tx address claim with different name [ 157.562330][ T5875] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 157.569870][ T7613] vxcan0: tx address claim with different name [ 157.577792][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.584928][ T7613] vxcan0: tx address claim with different name [ 157.616327][ T7613] vxcan0: tx address claim with different name [ 157.616748][ T5927] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 157.622570][ T7613] vxcan0: tx address claim with different name [ 157.631429][ T5927] dw2102: su3000_power_ctrl: 1, initialized 0 [ 157.637074][ T7613] vxcan0: tx address claim with different name [ 157.642070][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 157.648271][ T7613] vxcan0: tx address claim with different name [ 157.648318][ T7613] vxcan0: tx address claim with different name [ 157.648360][ T7613] vxcan0: tx address claim with different name [ 157.664258][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.667682][ T7613] vxcan0: tx address claim with different name [ 157.673618][ T5927] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 157.682139][ T7613] vxcan0: tx address claim with different name [ 157.682189][ T7613] vxcan0: tx address claim with different name [ 157.689570][ T5927] usb 3-1: media controller created [ 157.698113][ T7613] vxcan0: tx address claim with different name [ 157.702644][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 157.708770][ T7613] vxcan0: tx address claim with different name [ 157.708818][ T7613] vxcan0: tx address claim with different name [ 157.708863][ T7613] vxcan0: tx address claim with different name [ 157.708907][ T7613] vxcan0: tx address claim with different name [ 157.714704][ T5927] dw2102: i2c transfer failed. [ 157.724246][ T7613] vxcan0: tx address claim with different name [ 157.726322][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 157.732273][ T7613] vxcan0: tx address claim with different name [ 157.738638][ T5927] dw2102: i2c transfer failed. [ 157.762028][ T7613] vxcan0: tx address claim with different name [ 157.768281][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 157.775310][ T7613] vxcan0: tx address claim with different name [ 157.779634][ T5927] dw2102: i2c transfer failed. [ 157.785468][ T7613] vxcan0: tx address claim with different name [ 157.792454][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 157.799094][ T7613] vxcan0: tx address claim with different name [ 157.802117][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.808363][ T7613] vxcan0: tx address claim with different name [ 157.823033][ T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 157.835162][ T7613] vxcan0: tx address claim with different name [ 157.840649][ T5927] dw2102: i2c transfer failed. [ 157.845090][ T7613] vxcan0: tx address claim with different name [ 157.852340][ T5875] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.856736][ T7613] vxcan0: tx address claim with different name [ 157.861860][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 157.877378][ T7613] vxcan0: tx address claim with different name [ 157.883520][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.891542][ T7613] vxcan0: tx address claim with different name [ 157.898601][ T7606] dvb-usb: bulk message failed: -22 (4/0) [ 157.904513][ T7613] vxcan0: tx address claim with different name [ 157.910230][ T7606] dw2102: i2c transfer failed. [ 157.917571][ T7613] vxcan0: tx address claim with different name [ 157.921573][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 157.927214][ T7613] vxcan0: tx address claim with different name [ 157.933592][ T5875] usb 2-1: config 0 descriptor?? [ 157.942874][ T7613] vxcan0: tx address claim with different name [ 157.948862][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 157.957458][ T7613] vxcan0: tx address claim with different name [ 157.957676][ T5927] dw2102: i2c transfer failed. [ 157.963815][ T7613] vxcan0: tx address claim with different name [ 157.969035][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.976509][ T7613] vxcan0: tx address claim with different name [ 157.984262][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 157.997029][ T5927] dw2102: i2c transfer failed. [ 158.002155][ T10] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 158.002457][ T7613] vxcan0: tx address claim with different name [ 158.011917][ T5927] dvb-usb: MAC address: 02:02:02:02:02:02 [ 158.020664][ T7613] vxcan0: tx address claim with different name [ 158.022055][ T10] usb 1-1: media controller created [ 158.028577][ T7613] vxcan0: tx address claim with different name [ 158.040922][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 158.040936][ T7613] vxcan0: tx address claim with different name [ 158.050919][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.061416][ T10] dw2102: i2c transfer failed. [ 158.066320][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 158.072057][ T10] dw2102: i2c transfer failed. [ 158.077293][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 158.089061][ T10] dw2102: i2c transfer failed. [ 158.094046][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 158.100573][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 158.106383][ T5927] dw2102: command 0x0e transfer failed. [ 158.111934][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 158.117719][ T10] dw2102: i2c transfer failed. [ 158.122504][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 158.128278][ T5927] dw2102: command 0x0e transfer failed. [ 158.133854][ T10] dw2102: i2c transfer failed. [ 158.138776][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 158.144505][ T10] dw2102: i2c transfer failed. [ 158.149308][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 158.162712][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.175463][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 158.181236][ T10] dw2102: command 0x0e transfer failed. [ 158.186855][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 158.192599][ T10] dw2102: command 0x0e transfer failed. [ 158.221385][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.230329][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.238992][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.247902][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.256525][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.265124][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.275424][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.283971][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.292545][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.301705][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.318886][ T5875] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 158.334309][ T5875] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input29 [ 158.372690][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'. [ 158.373677][ T7619] FAULT_INJECTION: forcing a failure. [ 158.373677][ T7619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.399778][ T7619] CPU: 0 UID: 0 PID: 7619 Comm: syz.0.637 Not tainted syzkaller #0 PREEMPT(full) [ 158.399802][ T7619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.399813][ T7619] Call Trace: [ 158.399819][ T7619] [ 158.399826][ T7619] dump_stack_lvl+0x189/0x250 [ 158.399852][ T7619] ? __pfx____ratelimit+0x10/0x10 [ 158.399872][ T7619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.399893][ T7619] ? __pfx__printk+0x10/0x10 [ 158.399913][ T7619] ? __might_fault+0xb0/0x130 [ 158.399938][ T7619] ? rcu_is_watching+0x15/0xb0 [ 158.399957][ T7619] should_fail_ex+0x414/0x560 [ 158.399980][ T7619] _copy_from_iter+0x1de/0x1790 [ 158.399996][ T7619] ? __might_fault+0xb0/0x130 [ 158.400016][ T7619] ? __might_fault+0xcc/0x130 [ 158.400038][ T7619] ? _copy_from_iter+0x24f/0x1790 [ 158.400055][ T7619] ? __pfx__copy_from_iter+0x10/0x10 [ 158.400070][ T7619] ? sock_alloc_send_pskb+0x875/0x990 [ 158.400090][ T7619] ? __pfx__copy_from_iter+0x10/0x10 [ 158.400106][ T7619] ? page_copy_sane+0x16a/0x280 [ 158.400123][ T7619] copy_page_from_iter+0xdd/0x170 [ 158.400141][ T7619] skb_copy_datagram_from_iter+0x306/0x720 [ 158.400163][ T7619] tun_get_user+0x1691/0x3e20 [ 158.400185][ T7619] ? rcu_is_watching+0x15/0xb0 [ 158.400202][ T7619] ? lock_release+0x4b/0x3e0 [ 158.400220][ T7619] ? aa_file_perm+0x44d/0x1550 [ 158.400242][ T7619] ? __pfx_tun_get_user+0x10/0x10 [ 158.400260][ T7619] ? _parse_integer_limit+0x1ae/0x1f0 [ 158.400284][ T7619] ? kstrtoull+0x12f/0x1d0 [ 158.400307][ T7619] ? ref_tracker_alloc+0x318/0x460 [ 158.400327][ T7619] ? get_pid_task+0x20/0x1f0 [ 158.400347][ T7619] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 158.400369][ T7619] ? tun_get+0x1c/0x2f0 [ 158.400387][ T7619] ? tun_get+0x1c/0x2f0 [ 158.400404][ T7619] ? rcu_is_watching+0x15/0xb0 [ 158.400420][ T7619] ? tun_get+0x1c/0x2f0 [ 158.400437][ T7619] ? lock_release+0x4b/0x3e0 [ 158.400450][ T7619] ? common_file_perm+0x1b5/0x230 [ 158.400470][ T7619] ? tun_get+0x1c/0x2f0 [ 158.400489][ T7619] tun_chr_write_iter+0x113/0x200 [ 158.400509][ T7619] vfs_write+0x5c9/0xb30 [ 158.400527][ T7619] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 158.400546][ T7619] ? __pfx_vfs_write+0x10/0x10 [ 158.400565][ T7619] ? __fget_files+0x2a/0x420 [ 158.400586][ T7619] ksys_write+0x145/0x250 [ 158.400603][ T7619] ? __pfx_ksys_write+0x10/0x10 [ 158.400620][ T7619] ? rcu_is_watching+0x15/0xb0 [ 158.400638][ T7619] do_syscall_64+0xfa/0xfa0 [ 158.400658][ T7619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.400674][ T7619] ? clear_bhb_loop+0x60/0xb0 [ 158.400698][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.400714][ T7619] RIP: 0033:0x7f0ecdb8ebe9 [ 158.400729][ T7619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.400744][ T7619] RSP: 002b:00007f0ecea98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.400762][ T7619] RAX: ffffffffffffffda RBX: 00007f0ecddb5fa0 RCX: 00007f0ecdb8ebe9 [ 158.400775][ T7619] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 158.400786][ T7619] RBP: 00007f0ecea98090 R08: 0000000000000000 R09: 0000000000000000 [ 158.400797][ T7619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.400808][ T7619] R13: 00007f0ecddb6038 R14: 00007f0ecddb5fa0 R15: 00007ffd825db998 [ 158.400827][ T7619] [ 158.731736][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 158.737618][ T10] dw2102: command 0x0e transfer failed. [ 158.743203][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 158.749079][ T10] dw2102: command 0x0e transfer failed. [ 158.754643][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 158.760526][ T10] dw2102: command 0x51 transfer failed. [ 158.766104][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 158.771863][ T10] dw2102: i2c probe for address 0x68 failed. [ 158.777894][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 158.783624][ T10] dw2102: i2c probe for address 0x69 failed. [ 158.789659][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 158.796762][ T10] dw2102: i2c probe for address 0x6a failed. [ 158.803020][ T10] dw2102: probing for demodulator failed. Is the external power switched on? [ 158.812102][ T10] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 158.821936][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 158.827774][ T5927] dw2102: command 0x0e transfer failed. [ 158.833943][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 158.839887][ T5927] dw2102: command 0x0e transfer failed. [ 158.845505][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 158.851233][ T5927] dw2102: command 0x51 transfer failed. [ 158.856818][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 158.862535][ T5927] dw2102: i2c probe for address 0x68 failed. [ 158.868552][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 158.874271][ T5927] dw2102: i2c probe for address 0x69 failed. [ 158.880296][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 158.886057][ T5927] dw2102: i2c probe for address 0x6a failed. [ 158.892034][ T5927] dw2102: probing for demodulator failed. Is the external power switched on? [ 158.900862][ T5927] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 158.929755][ T7626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'. [ 158.942664][ T5875] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 158.958197][ T5875] usb 2-1: USB disconnect, device number 46 [ 158.968955][ T5927] rc_core: IR keymap rc-tt-1500 not found [ 158.974701][ T5927] Registered IR keymap rc-empty [ 158.980204][ T5927] rc rc1: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1 [ 158.990503][ T5927] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1/input31 [ 159.000806][ T10] rc_core: IR keymap rc-tt-1500 not found [ 159.006613][ T10] Registered IR keymap rc-empty [ 159.011810][ T5927] dvb-usb: schedule remote query interval to 250 msecs. [ 159.019676][ T5927] dw2102: su3000_power_ctrl: 0, initialized 1 [ 159.026474][ T5927] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 159.038549][ T30] audit: type=1326 audit(1756154713.068:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.2.639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f116c98ebe9 code=0x0 [ 159.060663][ T10] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 159.072618][ T5927] usb 3-1: USB disconnect, device number 36 [ 159.081778][ T10] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input30 [ 159.103489][ T7635] fido_id[7635]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 159.150166][ T10] dvb-usb: schedule remote query interval to 250 msecs. [ 159.200961][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 159.213602][ T10] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 159.226926][ T5927] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 159.247920][ T10] usb 1-1: USB disconnect, device number 43 [ 159.292889][ T10] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 159.445497][ T5875] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 159.595951][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 159.602545][ T5875] usb 2-1: config 0 has no interfaces? [ 159.608441][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 159.618528][ T5875] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 159.628242][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.637307][ T5875] usb 2-1: Product: syz [ 159.641599][ T5875] usb 2-1: Manufacturer: syz [ 159.647713][ T5875] usb 2-1: SerialNumber: syz [ 159.653832][ T5875] usb 2-1: config 0 descriptor?? [ 159.658728][ T7653] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 159.667161][ T7653] netlink: 244 bytes leftover after parsing attributes in process `syz.3.647'. [ 159.715434][ T5975] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 159.775493][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 159.782226][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.791066][ T10] usb 1-1: config 3 has an invalid descriptor of length 136, skipping remainder of the config [ 159.801512][ T10] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 159.812674][ T10] usb 1-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=71.88 [ 159.822140][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.830416][ T10] usb 1-1: Product: syz [ 159.834583][ T10] usb 1-1: Manufacturer: syz [ 159.840005][ T10] usb 1-1: SerialNumber: syz [ 159.865766][ T5975] usb 3-1: Using ep0 maxpacket: 8 [ 159.874654][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.885581][ T5975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.887928][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.896027][ T5975] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 159.910376][ T5975] usb 3-1: config 4 has no interface number 0 [ 159.918836][ T5975] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 159.929737][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.937787][ T5975] usb 3-1: Product: syz [ 159.942652][ T5975] usb 3-1: Manufacturer: syz [ 159.945472][ T5875] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 159.948321][ T5975] usb 3-1: SerialNumber: syz [ 160.072716][ T10] usb 1-1: USB disconnect, device number 44 [ 160.090226][ T43] usb 2-1: USB disconnect, device number 47 [ 160.105416][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 160.112269][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 160.121802][ T5875] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 160.131253][ T5875] usb 4-1: config 4 has no interface number 0 [ 160.139812][ T5875] usb 4-1: config 4 interface 30 has no altsetting 0 [ 160.151460][ T5875] usb 4-1: string descriptor 0 read error: -22 [ 160.158646][ T5875] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 160.170450][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.175216][ T5975] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 160.187719][ T5975] dw2102: su3000_power_ctrl: 1, initialized 0 [ 160.194138][ T5975] dvb-usb: bulk message failed: -22 (2/0) [ 160.194527][ T5875] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 160.207135][ T5975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.209180][ T5875] dw2102: su3000_power_ctrl: 1, initialized 0 [ 160.218169][ T5975] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 160.223141][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 160.230767][ T5975] usb 3-1: media controller created [ 160.239032][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.245039][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 160.259589][ T5975] dw2102: i2c transfer failed. [ 160.259589][ T5875] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 160.259622][ T5875] usb 4-1: media controller created [ 160.264405][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 160.273901][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 160.279807][ T5975] dw2102: i2c transfer failed. [ 160.285015][ T5875] dw2102: i2c transfer failed. [ 160.299192][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 160.304850][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 160.304912][ T5875] dw2102: i2c transfer failed. [ 160.304924][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 160.316259][ T5975] dw2102: i2c transfer failed. [ 160.322135][ T5875] dw2102: i2c transfer failed. [ 160.333179][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 160.339179][ T5875] dw2102: i2c transfer failed. [ 160.342022][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 160.344250][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 160.351763][ T5975] dw2102: i2c transfer failed. [ 160.358902][ T5875] dw2102: i2c transfer failed. [ 160.366310][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 160.372039][ T5875] dw2102: i2c transfer failed. [ 160.377271][ T5875] dvb-usb: MAC address: 02:02:02:02:02:02 [ 160.377796][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 160.393390][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.403077][ T5975] dw2102: i2c transfer failed. [ 160.416522][ T7658] dvb-usb: bulk message failed: -22 (4/0) [ 160.422529][ T7658] dw2102: i2c transfer failed. [ 160.427754][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 160.433492][ T5875] dw2102: command 0x0e transfer failed. [ 160.437609][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 160.443332][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 160.445206][ T5975] dw2102: i2c transfer failed. [ 160.456401][ T5875] dw2102: command 0x0e transfer failed. [ 160.463817][ T5975] dvb-usb: MAC address: 02:02:02:02:02:02 [ 160.481712][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.501268][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 160.507199][ T5975] dw2102: command 0x0e transfer failed. [ 160.512857][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 160.518686][ T5975] dw2102: command 0x0e transfer failed. [ 160.775536][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 160.781331][ T5875] dw2102: command 0x0e transfer failed. [ 160.787102][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 160.792832][ T5875] dw2102: command 0x0e transfer failed. [ 160.798543][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 160.804263][ T5875] dw2102: command 0x51 transfer failed. [ 160.809834][ T5875] dvb-usb: bulk message failed: -22 (5/0) [ 160.815621][ T5875] dw2102: i2c probe for address 0x68 failed. [ 160.821597][ T5875] dvb-usb: bulk message failed: -22 (5/0) [ 160.827368][ T5875] dw2102: i2c probe for address 0x69 failed. [ 160.833385][ T5875] dvb-usb: bulk message failed: -22 (5/0) [ 160.839139][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 160.839155][ T5975] dw2102: command 0x0e transfer failed. [ 160.839235][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 160.839245][ T5975] dw2102: command 0x0e transfer failed. [ 160.839251][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 160.845191][ T5875] dw2102: i2c probe for address 0x6a failed. [ 160.862003][ T5975] dw2102: command 0x51 transfer failed. [ 160.862017][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 160.862031][ T5975] dw2102: i2c probe for address 0x68 failed. [ 160.862040][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 160.862052][ T5975] dw2102: i2c probe for address 0x69 failed. [ 160.862061][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 160.862072][ T5975] dw2102: i2c probe for address 0x6a failed. [ 160.862080][ T5975] dw2102: probing for demodulator failed. Is the external power switched on? [ 160.862090][ T5975] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 160.885498][ T43] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 160.888830][ T5875] dw2102: probing for demodulator failed. Is the external power switched on? [ 160.925407][ T5975] rc_core: IR keymap rc-tt-1500 not found [ 160.931781][ T5875] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 160.940816][ T5975] Registered IR keymap rc-empty [ 160.976267][ T5975] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 160.993748][ T5975] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input33 [ 160.999294][ T5875] rc_core: IR keymap rc-tt-1500 not found [ 161.013003][ T5875] Registered IR keymap rc-empty [ 161.013881][ T5975] dvb-usb: schedule remote query interval to 250 msecs. [ 161.019973][ T5875] rc rc1: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1 [ 161.032047][ T5975] dw2102: su3000_power_ctrl: 0, initialized 1 [ 161.038060][ T5875] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1/input34 [ 161.052219][ T5875] dvb-usb: schedule remote query interval to 250 msecs. [ 161.057349][ T5975] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 161.060686][ T5875] dw2102: su3000_power_ctrl: 0, initialized 1 [ 161.067877][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 161.079968][ T43] usb 1-1: config 130 has an invalid descriptor of length 0, skipping remainder of the config [ 161.081557][ T43] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 161.101822][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.114496][ T5875] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 161.127086][ T5975] usb 3-1: USB disconnect, device number 37 [ 161.132591][ T5875] usb 4-1: USB disconnect, device number 35 [ 161.138964][ T43] usb 1-1: Product: syz [ 161.138982][ T43] usb 1-1: Manufacturer: syz [ 161.138994][ T43] usb 1-1: SerialNumber: syz [ 161.181254][ T43] ch9200 1-1:130.0: probe with driver ch9200 failed with error -22 [ 161.220469][ T5875] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 161.221456][ T5975] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 161.516105][ T5875] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 161.555479][ T5975] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 161.668209][ T5875] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 161.676411][ T5875] usb 4-1: config 0 has no interface number 0 [ 161.685486][ T5875] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 161.694566][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.702644][ T5875] usb 4-1: Product: syz [ 161.706908][ T5875] usb 4-1: Manufacturer: syz [ 161.711489][ T5875] usb 4-1: SerialNumber: syz [ 161.715486][ T5975] usb 3-1: Using ep0 maxpacket: 8 [ 161.717512][ T5875] usb 4-1: config 0 descriptor?? [ 161.728869][ T5975] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 161.738845][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.747068][ T5975] usb 3-1: Product: syz [ 161.751240][ T5975] usb 3-1: Manufacturer: syz [ 161.755998][ T5975] usb 3-1: SerialNumber: syz [ 161.762234][ T5975] usb 3-1: config 0 descriptor?? [ 161.769909][ T5975] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 161.779724][ T5975] dvb-usb: bulk message failed: -22 (2/0) [ 161.787870][ T5975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.797533][ T5975] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 161.806719][ T5975] usb 3-1: media controller created [ 161.820360][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.977985][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 162.002046][ T5975] DVB: Unable to find symbol mt352_attach() [ 162.009016][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 162.014867][ T5975] zl10353_read_register: readreg error (reg=127, ret==-121) [ 162.022528][ T5975] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 162.077410][ T5975] rc_core: IR keymap rc-dvico-mce not found [ 162.083387][ T5975] Registered IR keymap rc-empty [ 162.088962][ T5975] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 162.100855][ T5975] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input35 [ 162.114819][ T5975] dvb-usb: schedule remote query interval to 100 msecs. [ 162.121860][ T5975] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 162.225474][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 162.335463][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 162.446043][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 162.555446][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 162.675544][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 162.785476][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 162.896244][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 163.005432][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 163.115490][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 163.225435][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 163.345984][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 163.455442][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 163.565469][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 163.623079][ T7681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.636482][ T5975] usb 3-1: USB disconnect, device number 38 [ 163.659990][ T5875] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 163.670597][ T5875] usb 4-1: No valid video chain found. [ 163.692707][ T5975] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 163.694492][ T5875] usb 4-1: USB disconnect, device number 36 [ 163.728170][ T43] usb 1-1: USB disconnect, device number 45 [ 163.792021][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 164.065491][ T5927] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 164.176925][ T7715] FAULT_INJECTION: forcing a failure. [ 164.176925][ T7715] name failslab, interval 1, probability 0, space 0, times 0 [ 164.189852][ T43] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 164.198947][ T7715] CPU: 1 UID: 0 PID: 7715 Comm: syz.2.666 Not tainted syzkaller #0 PREEMPT(full) [ 164.198970][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.198981][ T7715] Call Trace: [ 164.198987][ T7715] [ 164.198994][ T7715] dump_stack_lvl+0x189/0x250 [ 164.199021][ T7715] ? __pfx____ratelimit+0x10/0x10 [ 164.199041][ T7715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.199062][ T7715] ? __pfx__printk+0x10/0x10 [ 164.199084][ T7715] ? fs_reclaim_acquire+0x7d/0x100 [ 164.199100][ T7715] ? rcu_is_watching+0x15/0xb0 [ 164.199118][ T7715] ? __pfx___might_resched+0x10/0x10 [ 164.199134][ T7715] ? lock_acquire+0x5f/0x360 [ 164.199150][ T7715] should_fail_ex+0x414/0x560 [ 164.199172][ T7715] should_failslab+0xa8/0x100 [ 164.199188][ T7715] __kmalloc_noprof+0xcb/0x4b0 [ 164.199208][ T7715] ? apply_wqattrs_prepare+0xf6/0xe00 [ 164.199228][ T7715] apply_wqattrs_prepare+0xf6/0xe00 [ 164.199246][ T7715] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 164.199266][ T7715] ? pcpu_memcg_post_alloc_hook+0xb8/0x520 [ 164.199284][ T7715] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 164.199303][ T7715] apply_workqueue_attrs_locked+0x65/0x240 [ 164.199326][ T7715] __alloc_workqueue+0x10c5/0x1b70 [ 164.199347][ T7715] ? kfree+0x4d/0x440 [ 164.199370][ T7715] alloc_workqueue_noprof+0xd4/0x210 [ 164.199392][ T7715] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 164.199419][ T7715] hci_register_dev+0x208/0x890 [ 164.199437][ T7715] ? __raw_spin_lock_init+0x45/0x100 [ 164.199458][ T7715] hci_uart_tty_ioctl+0x828/0xa00 [ 164.199479][ T7715] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 164.199496][ T7715] tty_ioctl+0x9c6/0xde0 [ 164.199512][ T7715] ? __pfx_tty_ioctl+0x10/0x10 [ 164.199527][ T7715] __se_sys_ioctl+0xf9/0x170 [ 164.199550][ T7715] do_syscall_64+0xfa/0xfa0 [ 164.199570][ T7715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.199585][ T7715] ? clear_bhb_loop+0x60/0xb0 [ 164.199602][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.199618][ T7715] RIP: 0033:0x7f116c98ebe9 [ 164.199633][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.199647][ T7715] RSP: 002b:00007f116d848038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.199665][ T7715] RAX: ffffffffffffffda RBX: 00007f116cbb5fa0 RCX: 00007f116c98ebe9 [ 164.199678][ T7715] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 164.199688][ T7715] RBP: 00007f116d848090 R08: 0000000000000000 R09: 0000000000000000 [ 164.199698][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.199708][ T7715] R13: 00007f116cbb6038 R14: 00007f116cbb5fa0 R15: 00007ffceb1ff6d8 [ 164.199727][ T7715] [ 164.199867][ T7715] Bluetooth: Can't register HCI device [ 164.227731][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 164.375473][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 164.391988][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.429025][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 164.441070][ T5927] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 164.447194][ T43] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 164.451001][ T5927] usb 2-1: config 4 has no interface number 0 [ 164.461153][ T43] usb 1-1: config 4 has no interface number 0 [ 164.467964][ T5927] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 164.469345][ T43] usb 1-1: config 4 interface 30 has no altsetting 0 [ 164.474796][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.483325][ T43] usb 1-1: string descriptor 0 read error: -22 [ 164.484482][ T5927] usb 2-1: Product: syz [ 164.492257][ T43] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 164.500727][ T5927] usb 2-1: Manufacturer: syz [ 164.508255][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.517115][ T5927] usb 2-1: SerialNumber: syz [ 164.531250][ T43] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 164.596301][ T43] dw2102: su3000_power_ctrl: 1, initialized 0 [ 164.602371][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 164.609474][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.619460][ T43] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 164.627034][ T43] usb 1-1: media controller created [ 164.632453][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 164.638229][ T43] dw2102: i2c transfer failed. [ 164.642998][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 164.648783][ T43] dw2102: i2c transfer failed. [ 164.654020][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 164.659802][ T43] dw2102: i2c transfer failed. [ 164.664572][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 164.670351][ T43] dw2102: i2c transfer failed. [ 164.675120][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 164.681032][ T43] dw2102: i2c transfer failed. [ 164.686659][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 164.692417][ T43] dw2102: i2c transfer failed. [ 164.697212][ T43] dvb-usb: MAC address: 02:02:02:02:02:02 [ 164.711572][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.727039][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 164.732851][ T43] dw2102: command 0x0e transfer failed. [ 164.738568][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 164.744330][ T43] dw2102: command 0x0e transfer failed. [ 164.781185][ T5927] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 164.789050][ T5927] dw2102: su3000_power_ctrl: 1, initialized 0 [ 164.795125][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 164.802702][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.812535][ T5927] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 164.820280][ T5927] usb 2-1: media controller created [ 164.825564][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 164.831294][ T5927] dw2102: i2c transfer failed. [ 164.836239][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 164.842152][ T5927] dw2102: i2c transfer failed. [ 164.846992][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 164.852717][ T5927] dw2102: i2c transfer failed. [ 164.858413][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 164.864143][ T5927] dw2102: i2c transfer failed. [ 164.868989][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 164.874706][ T5927] dw2102: i2c transfer failed. [ 164.879511][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 164.885220][ T5927] dw2102: i2c transfer failed. [ 164.890013][ T5927] dvb-usb: MAC address: 02:02:02:02:02:02 [ 164.901751][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.916564][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 164.922314][ T5927] dw2102: command 0x0e transfer failed. [ 164.927926][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 164.933652][ T5927] dw2102: command 0x0e transfer failed. [ 165.055417][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 165.061532][ T43] dw2102: command 0x0e transfer failed. [ 165.067160][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 165.072880][ T43] dw2102: command 0x0e transfer failed. [ 165.078446][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 165.084162][ T43] dw2102: command 0x51 transfer failed. [ 165.089751][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 165.095488][ T43] dw2102: i2c probe for address 0x68 failed. [ 165.101454][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 165.107226][ T43] dw2102: i2c probe for address 0x69 failed. [ 165.113201][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 165.118982][ T43] dw2102: i2c probe for address 0x6a failed. [ 165.124986][ T43] dw2102: probing for demodulator failed. Is the external power switched on? [ 165.125001][ T7713] dvb-usb: bulk message failed: -22 (4/0) [ 165.133807][ T43] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 165.162350][ T7725] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 165.176771][ T7713] dw2102: i2c transfer failed. [ 165.215693][ T43] rc_core: IR keymap rc-tt-1500 not found [ 165.222606][ T43] Registered IR keymap rc-empty [ 165.232042][ T43] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 165.244726][ T43] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input36 [ 165.256791][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 165.262548][ T5927] dw2102: command 0x0e transfer failed. [ 165.277439][ T43] dvb-usb: schedule remote query interval to 250 msecs. [ 165.280875][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 165.292562][ T43] dw2102: su3000_power_ctrl: 0, initialized 1 [ 165.317866][ T5927] dw2102: command 0x0e transfer failed. [ 165.320913][ T43] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 165.332016][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 165.339793][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 165.352263][ T43] usb 1-1: USB disconnect, device number 46 [ 165.359221][ T5927] dw2102: command 0x51 transfer failed. [ 165.374900][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 165.384045][ T7741] tipc: Started in network mode [ 165.389142][ T5927] dw2102: i2c probe for address 0x68 failed. [ 165.395301][ T7741] tipc: Node identity 4, cluster identity 4711 [ 165.402839][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 165.409619][ T7741] tipc: Node number set to 4 [ 165.416570][ T5927] dw2102: i2c probe for address 0x69 failed. [ 165.433765][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 165.436125][ T43] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 165.440230][ T5927] dw2102: i2c probe for address 0x6a failed. [ 165.454943][ T5927] dw2102: probing for demodulator failed. Is the external power switched on? [ 165.468132][ T5927] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 165.529922][ T5927] rc_core: IR keymap rc-tt-1500 not found [ 165.539107][ T5927] Registered IR keymap rc-empty [ 165.546966][ T5927] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 165.588248][ T5927] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input37 [ 165.607601][ T5927] dvb-usb: schedule remote query interval to 250 msecs. [ 165.615696][ T5927] dw2102: su3000_power_ctrl: 0, initialized 1 [ 165.621787][ T5927] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 165.630246][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 165.643539][ T5927] usb 2-1: USB disconnect, device number 48 [ 165.656125][ T5852] udevd[5852]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 165.688690][ T5927] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 165.749944][ T7760] FAULT_INJECTION: forcing a failure. [ 165.749944][ T7760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.765695][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.3.682 Not tainted syzkaller #0 PREEMPT(full) [ 165.765723][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.765734][ T7760] Call Trace: [ 165.765740][ T7760] [ 165.765747][ T7760] dump_stack_lvl+0x189/0x250 [ 165.765773][ T7760] ? __pfx____ratelimit+0x10/0x10 [ 165.765791][ T7760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.765810][ T7760] ? __pfx__printk+0x10/0x10 [ 165.765827][ T7760] ? __might_fault+0xb0/0x130 [ 165.765851][ T7760] ? rcu_is_watching+0x15/0xb0 [ 165.765869][ T7760] should_fail_ex+0x414/0x560 [ 165.765891][ T7760] _copy_from_iter+0x1de/0x1790 [ 165.765906][ T7760] ? __might_fault+0xb0/0x130 [ 165.765926][ T7760] ? __might_fault+0xcc/0x130 [ 165.765958][ T7760] ? _copy_from_iter+0x24f/0x1790 [ 165.765975][ T7760] ? __pfx__copy_from_iter+0x10/0x10 [ 165.765989][ T7760] ? sock_alloc_send_pskb+0x875/0x990 [ 165.766006][ T7760] ? __pfx__copy_from_iter+0x10/0x10 [ 165.766022][ T7760] ? page_copy_sane+0x16a/0x280 [ 165.766037][ T7760] copy_page_from_iter+0xdd/0x170 [ 165.766053][ T7760] skb_copy_datagram_from_iter+0x306/0x720 [ 165.766076][ T7760] tun_get_user+0x1691/0x3e20 [ 165.766096][ T7760] ? rcu_is_watching+0x15/0xb0 [ 165.766111][ T7760] ? lock_release+0x4b/0x3e0 [ 165.766128][ T7760] ? aa_file_perm+0x44d/0x1550 [ 165.766148][ T7760] ? __pfx_tun_get_user+0x10/0x10 [ 165.766164][ T7760] ? _parse_integer_limit+0x1ae/0x1f0 [ 165.766187][ T7760] ? kstrtoull+0x12f/0x1d0 [ 165.766210][ T7760] ? ref_tracker_alloc+0x318/0x460 [ 165.766230][ T7760] ? get_pid_task+0x20/0x1f0 [ 165.766251][ T7760] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 165.766272][ T7760] ? tun_get+0x1c/0x2f0 [ 165.766290][ T7760] ? tun_get+0x1c/0x2f0 [ 165.766307][ T7760] ? rcu_is_watching+0x15/0xb0 [ 165.766323][ T7760] ? tun_get+0x1c/0x2f0 [ 165.766340][ T7760] ? lock_release+0x4b/0x3e0 [ 165.766354][ T7760] ? common_file_perm+0x1b5/0x230 [ 165.766374][ T7760] ? tun_get+0x1c/0x2f0 [ 165.766393][ T7760] tun_chr_write_iter+0x113/0x200 [ 165.766413][ T7760] vfs_write+0x5c9/0xb30 [ 165.766430][ T7760] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 165.766450][ T7760] ? __pfx_vfs_write+0x10/0x10 [ 165.766469][ T7760] ? __fget_files+0x2a/0x420 [ 165.766491][ T7760] ksys_write+0x145/0x250 [ 165.766507][ T7760] ? __pfx_ksys_write+0x10/0x10 [ 165.766525][ T7760] ? rcu_is_watching+0x15/0xb0 [ 165.766543][ T7760] do_syscall_64+0xfa/0xfa0 [ 165.766564][ T7760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.766580][ T7760] ? clear_bhb_loop+0x60/0xb0 [ 165.766597][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.766613][ T7760] RIP: 0033:0x7f1974d8ebe9 [ 165.766629][ T7760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.766643][ T7760] RSP: 002b:00007f1975b63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.766663][ T7760] RAX: ffffffffffffffda RBX: 00007f1974fb5fa0 RCX: 00007f1974d8ebe9 [ 165.766676][ T7760] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 165.766687][ T7760] RBP: 00007f1975b63090 R08: 0000000000000000 R09: 0000000000000000 [ 165.766697][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.766707][ T7760] R13: 00007f1974fb6038 R14: 00007f1974fb5fa0 R15: 00007ffc6b0c2a58 [ 165.766731][ T7760] [ 166.100639][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 166.106811][ T10] usb 3-1: too many configurations: 10, using maximum allowed: 8 [ 166.122323][ T10] usb 3-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b [ 166.131446][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.139700][ T10] usb 3-1: Product: syz [ 166.143873][ T10] usb 3-1: Manufacturer: syz [ 166.148783][ T10] usb 3-1: SerialNumber: syz [ 166.154990][ T10] usb 3-1: config 0 descriptor?? [ 166.364510][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'. [ 166.374309][ T5926] usb 3-1: USB disconnect, device number 39 [ 166.405632][ T5975] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 166.415539][ T43] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 166.555453][ T5975] usb 1-1: Using ep0 maxpacket: 8 [ 166.562054][ T5975] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.569800][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 166.576860][ T5975] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 166.585789][ T5975] usb 1-1: config 4 has no interface number 0 [ 166.592169][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 166.604329][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.617665][ T5975] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 166.627127][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.635303][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 166.644419][ T5975] usb 1-1: Product: syz [ 166.648705][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.656758][ T5975] usb 1-1: Manufacturer: syz [ 166.661358][ T5975] usb 1-1: SerialNumber: syz [ 166.666142][ T43] usb 4-1: Product: syz [ 166.670305][ T43] usb 4-1: Manufacturer: syz [ 166.674895][ T43] usb 4-1: SerialNumber: syz [ 166.683334][ T43] usb 4-1: config 0 descriptor?? [ 166.689973][ T43] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 166.699553][ T43] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 166.887035][ T5975] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 166.899863][ T5975] dw2102: su3000_power_ctrl: 1, initialized 0 [ 166.919562][ T5975] dvb-usb: bulk message failed: -22 (2/0) [ 166.928396][ T5975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.938995][ T5975] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 166.946703][ T5975] usb 1-1: media controller created [ 166.951908][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 166.957660][ T5975] dw2102: i2c transfer failed. [ 166.962472][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 166.968226][ T5975] dw2102: i2c transfer failed. [ 166.973009][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 166.978881][ T5975] dw2102: i2c transfer failed. [ 166.983659][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 166.989411][ T5975] dw2102: i2c transfer failed. [ 166.994183][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 166.999939][ T5975] dw2102: i2c transfer failed. [ 167.005203][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 167.011181][ T5975] dw2102: i2c transfer failed. [ 167.016065][ T5975] dvb-usb: MAC address: 02:02:02:02:02:02 [ 167.029044][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.041708][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 167.047540][ T5975] dw2102: command 0x0e transfer failed. [ 167.053094][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 167.058873][ T5975] dw2102: command 0x0e transfer failed. [ 167.156275][ T5927] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 167.299156][ T43] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 167.305465][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 167.307463][ T43] em28xx 4-1:0.0: Config register raw data: 0x00 [ 167.314564][ T5927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.326192][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.334216][ T5927] usb 3-1: Product: syz [ 167.338494][ T5927] usb 3-1: Manufacturer: syz [ 167.343113][ T5927] usb 3-1: SerialNumber: syz [ 167.365970][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 167.371759][ T5975] dw2102: command 0x0e transfer failed. [ 167.377739][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 167.383473][ T5975] dw2102: command 0x0e transfer failed. [ 167.389255][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 167.395074][ T5975] dw2102: command 0x51 transfer failed. [ 167.401019][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 167.406922][ T5975] dw2102: i2c probe for address 0x68 failed. [ 167.413219][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 167.420263][ T5975] dw2102: i2c probe for address 0x69 failed. [ 167.426547][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 167.432327][ T5975] dw2102: i2c probe for address 0x6a failed. [ 167.440039][ T5975] dw2102: probing for demodulator failed. Is the external power switched on? [ 167.449634][ T5975] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 167.505447][ T5975] rc_core: IR keymap rc-tt-1500 not found [ 167.511223][ T5975] Registered IR keymap rc-empty [ 167.518330][ T5975] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 167.528305][ T5975] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input38 [ 167.539283][ T5975] dvb-usb: schedule remote query interval to 250 msecs. [ 167.546297][ T5975] dw2102: su3000_power_ctrl: 0, initialized 1 [ 167.552371][ T5975] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 167.564962][ T5975] usb 1-1: USB disconnect, device number 47 [ 167.603405][ T5927] cdc_ncm 3-1:1.0: bind() failure [ 167.614587][ T5927] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 167.620808][ T5975] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 167.624972][ T5927] cdc_ncm 3-1:1.1: bind() failure [ 167.660125][ T5927] usb 3-1: USB disconnect, device number 40 [ 167.701244][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 167.839428][ T7793] FAULT_INJECTION: forcing a failure. [ 167.839428][ T7793] name failslab, interval 1, probability 0, space 0, times 0 [ 167.852114][ T7793] CPU: 0 UID: 0 PID: 7793 Comm: syz.1.696 Not tainted syzkaller #0 PREEMPT(full) [ 167.852138][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.852147][ T7793] Call Trace: [ 167.852153][ T7793] [ 167.852157][ T7793] dump_stack_lvl+0x189/0x250 [ 167.852177][ T7793] ? __pfx____ratelimit+0x10/0x10 [ 167.852190][ T7793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.852203][ T7793] ? __pfx__printk+0x10/0x10 [ 167.852216][ T7793] ? fs_reclaim_acquire+0x7d/0x100 [ 167.852226][ T7793] ? rcu_is_watching+0x15/0xb0 [ 167.852237][ T7793] ? __pfx___might_resched+0x10/0x10 [ 167.852247][ T7793] ? lock_acquire+0x5f/0x360 [ 167.852256][ T7793] should_fail_ex+0x414/0x560 [ 167.852270][ T7793] should_failslab+0xa8/0x100 [ 167.852280][ T7793] __kmalloc_cache_noprof+0x70/0x3a0 [ 167.852294][ T7793] ? apply_wqattrs_prepare+0x12d/0xe00 [ 167.852305][ T7793] apply_wqattrs_prepare+0x12d/0xe00 [ 167.852315][ T7793] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 167.852328][ T7793] ? pcpu_memcg_post_alloc_hook+0xb8/0x520 [ 167.852339][ T7793] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 167.852349][ T7793] apply_workqueue_attrs_locked+0x65/0x240 [ 167.852363][ T7793] __alloc_workqueue+0x10c5/0x1b70 [ 167.852376][ T7793] ? kfree+0x4d/0x440 [ 167.852389][ T7793] alloc_workqueue_noprof+0xd4/0x210 [ 167.852403][ T7793] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 167.852430][ T7793] hci_register_dev+0x208/0x890 [ 167.852441][ T7793] ? __raw_spin_lock_init+0x45/0x100 [ 167.852455][ T7793] hci_uart_tty_ioctl+0x828/0xa00 [ 167.852467][ T7793] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 167.852478][ T7793] tty_ioctl+0x9c6/0xde0 [ 167.852487][ T7793] ? __pfx_tty_ioctl+0x10/0x10 [ 167.852495][ T7793] __se_sys_ioctl+0xf9/0x170 [ 167.852510][ T7793] do_syscall_64+0xfa/0xfa0 [ 167.852522][ T7793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.852531][ T7793] ? clear_bhb_loop+0x60/0xb0 [ 167.852541][ T7793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.852550][ T7793] RIP: 0033:0x7f55c978ebe9 [ 167.852560][ T7793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.852568][ T7793] RSP: 002b:00007f55ca651038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.852579][ T7793] RAX: ffffffffffffffda RBX: 00007f55c99b5fa0 RCX: 00007f55c978ebe9 [ 167.852586][ T7793] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 167.852592][ T7793] RBP: 00007f55ca651090 R08: 0000000000000000 R09: 0000000000000000 [ 167.852598][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.852604][ T7793] R13: 00007f55c99b6038 R14: 00007f55c99b5fa0 R15: 00007fffe650e008 [ 167.852614][ T7793] [ 167.852720][ T7793] Bluetooth: Can't register HCI device [ 167.955478][ T5975] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 168.225452][ T5927] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 168.292875][ T5975] usb 1-1: Using ep0 maxpacket: 8 [ 168.300372][ T5975] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.309683][ T5975] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 168.317948][ T5975] usb 1-1: config 4 has no interface number 0 [ 168.324407][ T5975] usb 1-1: config 4 interface 30 has no altsetting 0 [ 168.333524][ T5975] usb 1-1: string descriptor 0 read error: -22 [ 168.340587][ T5975] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 168.349752][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.362918][ T5975] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 168.370671][ T5975] dw2102: su3000_power_ctrl: 1, initialized 0 [ 168.377193][ T5975] dvb-usb: bulk message failed: -22 (2/0) [ 168.384489][ T5975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.385502][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 168.401384][ T5975] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 168.409051][ T5975] usb 1-1: media controller created [ 168.414267][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 168.420539][ T5975] dw2102: i2c transfer failed. [ 168.427770][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.435620][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 168.444098][ T5975] dw2102: i2c transfer failed. [ 168.446359][ T5927] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 168.448991][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 168.460206][ T5927] usb 2-1: config 4 has no interface number 0 [ 168.469097][ T5975] dw2102: i2c transfer failed. [ 168.473770][ T5927] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 168.473893][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 168.489144][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.489168][ T5927] usb 2-1: Product: syz [ 168.489181][ T5927] usb 2-1: Manufacturer: syz [ 168.489194][ T5927] usb 2-1: SerialNumber: syz [ 168.511577][ T5975] dw2102: i2c transfer failed. [ 168.516400][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 168.522130][ T5975] dw2102: i2c transfer failed. [ 168.529815][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 168.535855][ T5975] dw2102: i2c transfer failed. [ 168.541575][ T5975] dvb-usb: MAC address: 02:02:02:02:02:02 [ 168.560587][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.584024][ T7776] dvb-usb: bulk message failed: -22 (4/0) [ 168.594178][ T7776] dw2102: i2c transfer failed. [ 168.599387][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 168.605183][ T5975] dw2102: command 0x0e transfer failed. [ 168.610923][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 168.617370][ T5975] dw2102: command 0x0e transfer failed. [ 168.815472][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 168.926251][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 168.932023][ T5975] dw2102: command 0x0e transfer failed. [ 168.937785][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 168.943545][ T5975] dw2102: command 0x0e transfer failed. [ 168.950705][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 168.956562][ T5975] dw2102: command 0x51 transfer failed. [ 168.962224][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 168.968084][ T5975] dw2102: i2c probe for address 0x68 failed. [ 168.974069][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 168.979959][ T5975] dw2102: i2c probe for address 0x69 failed. [ 168.986045][ T5975] dvb-usb: bulk message failed: -22 (5/0) [ 168.991782][ T5975] dw2102: i2c probe for address 0x6a failed. [ 168.997956][ T5975] dw2102: probing for demodulator failed. Is the external power switched on? [ 169.007143][ T7796] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 169.019044][ T7796] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 169.027450][ T7796] CPU: 1 UID: 0 PID: 7796 Comm: syz.1.697 Not tainted syzkaller #0 PREEMPT(full) [ 169.036633][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.046680][ T7796] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 169.052666][ T7796] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 0d 60 32 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 169.072272][ T7796] RSP: 0018:ffffc9000533fa88 EFLAGS: 00010202 [ 169.078362][ T7796] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 169.086326][ T7796] RDX: ffffffff87f21855 RSI: ffffffff8f4ecdb0 RDI: 0000000000001900 [ 169.094288][ T7796] RBP: 0000000000000000 R08: ffff8880263a0000 R09: 0000000000000002 [ 169.102250][ T7796] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 169.110211][ T7796] R13: 1ffff1100edf11cc R14: 0000000000000001 R15: ffff888076f88e68 [ 169.118175][ T7796] FS: 00007f55ca6516c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 169.127091][ T7796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.133661][ T7796] CR2: 00007f1972bf2ff0 CR3: 000000007df82000 CR4: 00000000003526f0 [ 169.141623][ T7796] Call Trace: [ 169.144888][ T7796] [ 169.147810][ T7796] ? i2cdev_ioctl+0x64b/0x7f0 [ 169.152481][ T7796] __i2c_transfer+0x871/0x2170 [ 169.157238][ T7796] ? __pfx___i2c_transfer+0x10/0x10 [ 169.162430][ T7796] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 169.167791][ T7796] ? i2c_transfer+0x120/0x3a0 [ 169.172473][ T7796] i2c_transfer+0x25b/0x3a0 [ 169.176971][ T7796] ? lock_release+0x4b/0x3e0 [ 169.181568][ T7796] ? __pfx_i2c_transfer+0x10/0x10 [ 169.186582][ T7796] ? __might_fault+0xcc/0x130 [ 169.191249][ T7796] ? _copy_from_user+0x94/0xb0 [ 169.196094][ T7796] i2cdev_ioctl_rdwr+0x460/0x740 [ 169.201024][ T7796] i2cdev_ioctl+0x64b/0x7f0 [ 169.205531][ T7796] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 169.210543][ T7796] ? __fget_files+0x3a0/0x420 [ 169.215209][ T7796] ? __fget_files+0x2a/0x420 [ 169.219785][ T7796] ? bpf_lsm_file_ioctl+0x9/0x20 [ 169.224709][ T7796] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 169.229719][ T7796] __se_sys_ioctl+0xf9/0x170 [ 169.234303][ T7796] do_syscall_64+0xfa/0xfa0 [ 169.238805][ T7796] ? rcu_is_watching+0x15/0xb0 [ 169.243569][ T7796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.249622][ T7796] ? clear_bhb_loop+0x60/0xb0 [ 169.254288][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.260171][ T7796] RIP: 0033:0x7f55c978ebe9 [ 169.264597][ T7796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.284214][ T7796] RSP: 002b:00007f55ca651038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.292623][ T7796] RAX: ffffffffffffffda RBX: 00007f55c99b5fa0 RCX: 00007f55c978ebe9 [ 169.300586][ T7796] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 169.308543][ T7796] RBP: 00007f55c9811e19 R08: 0000000000000000 R09: 0000000000000000 [ 169.316501][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.324465][ T7796] R13: 00007f55c99b6038 R14: 00007f55c99b5fa0 R15: 00007fffe650e008 [ 169.332437][ T7796] [ 169.335442][ T7796] Modules linked in: [ 169.339842][ T7796] ---[ end trace 0000000000000000 ]--- [ 169.348645][ T5975] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 169.357616][ T7796] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 169.364290][ T24] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.366217][ T7796] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 0d 60 32 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 169.375989][ T24] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.408326][ T7796] RSP: 0018:ffffc9000533fa88 EFLAGS: 00010202 [ 169.418434][ T7796] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 169.429650][ T24] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 169.435961][ T7796] RDX: ffffffff87f21855 RSI: ffffffff8f4ecdb0 RDI: 0000000000001900 [ 169.442159][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 169.457734][ T5945] usb 4-1: USB disconnect, device number 37 [ 169.458895][ T5975] rc_core: IR keymap rc-tt-1500 not found [ 169.464819][ T5945] em28xx 4-1:0.0: Disconnecting em28xx [ 169.476829][ T5975] Registered IR keymap rc-empty [ 169.482098][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.487712][ T5945] em28xx 4-1:0.0: Freeing device [ 169.490613][ T7796] RBP: 0000000000000000 R08: ffff8880263a0000 R09: 0000000000000002 [ 169.504879][ T7796] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 169.512989][ T7796] R13: 1ffff1100edf11cc R14: 0000000000000001 R15: ffff888076f88e68 [ 169.513196][ T5975] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 169.524885][ T7796] FS: 00007f55ca6516c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 169.531410][ T7818] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 169.547859][ T5975] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input39 [ 169.558376][ T7796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.566081][ T7796] CR2: 000055557582f5c8 CR3: 000000007df82000 CR4: 00000000003526f0 [ 169.567931][ T5975] dvb-usb: schedule remote query interval to 250 msecs. [ 169.578058][ T7796] Kernel panic - not syncing: Fatal exception [ 169.581316][ T7796] Kernel Offset: disabled