last executing test programs: 5.938565246s ago: executing program 1 (id=1439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) r4 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='permprofile &'], 0xff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003012000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'ipvlan1\x00', @random="32b002ca23f9"}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000039a5dbd0ccef5c930b48f6d574a0cd48ae39cc5be8370900000029b4f3f30a2dc56eafe4807a28dd6c5226992eb2d3edde6705ce00000000000000"]) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) 5.063468186s ago: executing program 1 (id=1444): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, "f3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000600)={0x14, &(0x7f0000000700)={0x20, 0x4, 0xe5, {0xe5, 0x7, "fa58ca33c1a62e9ba2d20dd4a4a31ef300d7e00120b9d1508b3df417cbd8453dd6cb8551be939a809b1db8d47d87ffef8c5b58551069550ea8a9e275e7052a88aa511cd7967f832187ad794aa455ec1272b7eb1e302383957517df028e5b4f6f8aace77c77719c77dcfb754e349ad64ebe0280e7f12c87a1d64d7d41572be727e348f0d00a570fa544d0b00ca05bd77471070a25b09b4dc47fb1642a112ca0f51d2dedc59cae2eab8808a38c6910c52496c82d13f353f4fa854aff32f81a171eb58e779ce4a1aea4e4aeefbcf0cea66e5392eb6e5113f93d2cd36603de5be43add7908"}}, &(0x7f0000000800)={0x0, 0x3, 0x45, @string={0x45, 0x3, "4e037ba114539e7e0c1bb3f0f41278bbdeb930ec48845a47743adff4d08e02c687f38cb36c183d934bf3768b8930b74a9c0a0afb08323007abae57ab66a6316e6dd529"}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x0, 0x15, 0x2f, "4f31affd42fcf41bc30d8d068e4ac65f1ae8e9214c2b75bb532780495a426bcdc455af8a264ce334ad7fff61c41499"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000940)={0x20, 0x81, 0x2, "1f23"}, &(0x7f0000000980)={0x20, 0x82, 0x1, "c1"}, &(0x7f00000009c0)={0x20, 0x83, 0x2, "ca81"}, &(0x7f0000000a00)={0x20, 0x84, 0x4, "9ed82493"}, &(0x7f0000000a40)={0x20, 0x85, 0x3, "55ed78"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)={0x20, 0x0, 0x57, {0x57, 0xe, "2d68ea30e0b7a72e2e02a9dfe24e85a9fce3f5e6cbcf51944ab22b33976d2a2ae4bae0487cf59a37b9cf48a33201ff0b5dcb6718cab1d28bb66cdb7c103af6bba81b8502d69403e8602340ab4189e45d2d916d8b2c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x82, @string={0x82, 0x3, "7bcf2527aa0e19ac668e71a639219fd4af631de5421055f9e0871a3714e87419a733271f9d9e36c00573e41f25a8d7f0cf6f247c14378634593d045c5e3f6a3f400b5599de8ad656cf5d81f91ec1556e101c006837ee348e8de8b8ae80cb6486779d1c4aece1c793dae4c7840f52233868a4ce9592456e7f6d1bd38031ae3939"}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000400)={0x0, 0x9, 0xa8, "2d83acec4aa3ce0210dba78e489b0d4776a5e3764e4e8869057074f2ba910876a868d614eca74687f686ba26cd565fda4a9909167b9ac88ba7525861ac8572a58700754abee802c62951b974f0bc1b31ee890ffd5245de686c273dfa087e2d07145e082dbdcd440732eb1ddd4bd8b9c22adec2f3fef7975b47f24117789f3bc0a4e471ac6386e1bca0f62bf51170eef7cb05214db0641fb46139dd537c1a3ae642532e78ceadd1c0"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x5e5f}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "8745add7213fdfe2ecb14cb13e49d90eed24f3886103b3c241f3cf263e71c927e4de02de93980b27fc8e471c21a94c"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.966110245s ago: executing program 2 (id=1448): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x80000001) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) 3.417658233s ago: executing program 0 (id=1452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='permprofile &'], 0xff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003012000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'ipvlan1\x00', @random="32b002ca23f9"}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000039a5dbd0ccef5c930b48f6d574a0cd48ae39cc5be8370900000029b4f3f30a2dc56eafe4807a28dd6c5226992eb2d3edde6705ce00000000000000"]) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) 2.671551203s ago: executing program 2 (id=1453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000340)={0x1e, 0x0, [{0x40000001, 0x5, 0x2, 0xffff3418, 0x10, 0xc813, 0x5}, {0x80000000, 0x8, 0x1, 0x0, 0x5, 0x2, 0x97c}, {0xb, 0x1, 0x5, 0x0, 0xb71e, 0x8000, 0x5}, {0x40000001, 0xffff8001, 0x1, 0x5, 0xfffffff7, 0x9, 0x4}, {0x80000001, 0x5, 0x7, 0x93e6, 0x6060, 0x3, 0x8}]}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r2 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x60100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0xf, 0x35315258, 0x140, 0xf0, 0x1, @discrete={0x3, 0x73a}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101, 0x0) write$FUSE_DIRENT(r4, 0x0, 0x200001d0) setresuid(0xee01, 0xee01, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000080)) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r5, 0x400, 0x2) sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000180)={0x0}}, 0x4040000) 2.590511645s ago: executing program 2 (id=1454): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, r2, 0x0) (fail_nth: 2) 2.299558938s ago: executing program 0 (id=1455): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x97, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x2) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x11}) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40) getdents64(r8, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x1, 0x101}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 2.200081679s ago: executing program 2 (id=1457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xfffffffe, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eb6d8200000000000000010000000040100"}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004040) 1.779683686s ago: executing program 0 (id=1458): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) (fail_nth: 6) 1.649549605s ago: executing program 0 (id=1459): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x1e, 0x1, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00', @ANYRESOCT=r5], 0x44}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.611660535s ago: executing program 1 (id=1460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0xffffffffffffffff, 0x18) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r3, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000) close(r3) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00 \x00', @ANYRES16=r1, @ANYBLOB="05012abd7000f8dbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004000801"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 1.467593411s ago: executing program 3 (id=1461): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) write$fb(r2, &(0x7f0000000080)="9980e66c14965ae065fe3d96c9642d2cbff17dd3b72c3be2c8de640d61cea457eda7f4edd31cd9248c268636839752d8ad5be9312c25341958e1dd4e0787faaf07fa593bb8a4c0571e76b16f984982858bf74d0e77d5f410f264da4fa2e3a8360c6926cf73872e87a8d36400b2fdd3a02ead5bc1458ee21c60494ade52", 0xfd35) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="0100"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.309703295s ago: executing program 1 (id=1462): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "04bdb394"}]}}, 0x0}, 0x0) 1.29112385s ago: executing program 2 (id=1463): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r1, 0x935, 0x7) 1.23658339s ago: executing program 0 (id=1464): alarm(0x1) alarm(0x5a4) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="c700008d0c", @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESOCT=r3, @ANYRESOCT=r0], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = eventfd(0xffffffff) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000440)={r5, 0x10000, 0x1}) write(r0, &(0x7f0000000400)="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", 0x1f000) 1.129814598s ago: executing program 0 (id=1465): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000002c0)=[{0x1900, 0xa000, 0x0, 0x0}], 0x1}) 571.458562ms ago: executing program 3 (id=1466): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x602041, 0x0) (async) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0xfffffffffffffffe, 0x440a00) ioctl$int_in(r2, 0x5452, &(0x7f0000000740)=0x3ff) ioctl$RTC_UIE_ON(r1, 0x7003) 418.127787ms ago: executing program 2 (id=1467): r0 = syz_usb_connect(0x4, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="5b27793ab5aca61ed69ca5483c19364c94f2365a0cd38c91b4d7ea9336f912e31f801621588fe80b4ded02e8204a289cfaaff8077f40052b93c31ec1f9ed93b27eb81cd08ab25ddea5073da1618b48bf0c8459afe80041f1e64f39dc6392e204734d23d0447527aa617d124b34426b5d51683b3f4b147f13d5c15b79f7f38056bd21c27113246f154eac204423bc508131f6c3e8b9e83b5b94b5d9d4c14711fe735c7f814c9914d3976daff01b3c3fac", @ANYRESDEC=0x0], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = accept4$tipc(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000000c0)={0x6, 'dvmrp0\x00', {0x6}, 0x1}) 351.412282ms ago: executing program 3 (id=1468): setgroups(0x0, 0x0) setregid(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) 350.596324ms ago: executing program 3 (id=1469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb92c"], 0xfdef) 236.807081ms ago: executing program 3 (id=1470): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000180)={0x0, "625fa4f0bfbd34d6c45994507144bf82e69024165d61e1961ac8cbd54b3cd9ae"}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3e, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xcc, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4638, @ipv4={'\x00', '\xff\xff', @empty}}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb9d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x81) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0xa, @local, 0x4}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec970000302c00fe8000000000000000000000000000aaff0200000000000000000000000000012c"], 0xfdef) r8 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='selinuxfs\x00', 0x200080, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000740), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmsg$can_raw(r10, &(0x7f0000000700)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000540)=""/159, 0x9f}], 0x3, &(0x7f0000000640)=""/169, 0xa9}, 0x0) 131.178021ms ago: executing program 3 (id=1471): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_usb_connect$uac1(0x2, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000106b1d010140000102030109028c00030156c0020904000000010100000a24010101bb0201021124060104050700090008000300020003052405060f0c24020203120250800009010b24060502020a004ef1000904010000010200000904010101010200000905010920009301050725010005480f09040200000102000009040201010102000009058209"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x3f, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 123.425203ms ago: executing program 1 (id=1472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a090400000000000000000200000a0900020073797a32000000000900010073797a30000000002400048020000180070001006374000014000280000a141000001100010000000000000000000000000a00"/120], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x7, 0x10001, 0x9, 0x7, 0x19, "c63eb2c2675ede5b9c736ac664bc07311f54c3"}) 0s ago: executing program 1 (id=1473): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x1, 0x90, {0x90, 0xb201e0357c5f32f7, "5d8bbf49b4210b4bd6eb10f97347d74474319b6718665967b37dda194a7e709190c0f9eb8a3073c8aa7d0888a13447ce9dd8da090c2e2e9d3c12357918f36dae9a9b8a21f3aec42f7feadae13312e039a51cf2a3f5596b0d74ef155989e0bcdaddd68a40135707dd12b8aa20446416028d9a9ccf70237984837baf626525563896429e0032448e8eff4d37727397"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x16, 0x2f, "30afa8e8fa82fcc5e3f231adb4243638d54974d94d341b75b56cad879999a977242ed7f56abd92ec14d93a69824a65"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xe9, 0x6, 0x6, 0x7, 0x2dd2, 0xc, 0x1, 0x9d01, 0x4, 0x1, 0x3, 0x3}}, &(0x7f0000000280)={0x20, 0x85, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xff}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}}) kernel console output (not intermixed with test programs): config 0 descriptor?? [ 237.363111][ T6056] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 237.372344][ T6056] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 237.413447][ T30] audit: type=1400 audit(1756245297.388:40): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9522 comm="syz.1.1150" [ 237.666534][ T9534] batadv_slave_0: entered promiscuous mode [ 237.675196][ T9533] batadv_slave_0: left promiscuous mode [ 237.861370][ T9550] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.990411][ T6056] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 238.050644][ T9554] /dev/rnullb0: Can't open blockdev [ 238.059610][ T9555] /dev/rnullb0: Can't open blockdev [ 238.342968][ T24] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 238.412932][ T1210] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 238.432930][ T5878] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 238.494735][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.506413][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.515476][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.524980][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.538847][ T24] usb 1-1: config 0 descriptor?? [ 238.564490][ T1210] usb 2-1: config 156 has an invalid descriptor of length 0, skipping remainder of the config [ 238.577840][ T1210] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 238.586998][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 238.592265][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.601053][ T1210] usb 2-1: Product: syz [ 238.605622][ T1210] usb 2-1: Manufacturer: syz [ 238.612259][ T6056] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 238.613426][ T1210] usb 2-1: SerialNumber: syz [ 238.622715][ T6056] em28xx 4-1:0.0: board has no eeprom [ 238.625217][ T5878] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.642008][ T5878] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.652676][ T5878] usb 3-1: config 0 interface 0 has no altsetting 0 [ 238.659670][ T5878] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 238.670022][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.682676][ T5878] usb 3-1: config 0 descriptor?? [ 238.692985][ T6056] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 238.700864][ T6056] em28xx 4-1:0.0: dvb set to bulk mode. [ 238.706872][ T5973] em28xx 4-1:0.0: Binding DVB extension [ 238.715582][ T6056] usb 4-1: USB disconnect, device number 76 [ 238.734578][ T6056] em28xx 4-1:0.0: Disconnecting em28xx [ 238.748531][ T24] usb 1-1: string descriptor 0 read error: -71 [ 238.760562][ T5973] em28xx 4-1:0.0: Registering input extension [ 238.768678][ T24] usb 1-1: USB disconnect, device number 91 [ 238.773051][ T6056] em28xx 4-1:0.0: Closing input extension [ 238.786693][ T6056] em28xx 4-1:0.0: Freeing device [ 238.871809][ T1210] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 238.878476][ T1210] dvb_usb_af9035 2-1:156.0: probe with driver dvb_usb_af9035 failed with error -22 [ 238.890739][ T1210] usb 2-1: USB disconnect, device number 73 [ 239.104735][ T5878] cougar 0003:060B:500A.0029: unexpected long global item [ 239.112322][ T5878] cougar 0003:060B:500A.0029: parse failed [ 239.120912][ T5878] cougar 0003:060B:500A.0029: probe with driver cougar failed with error -22 [ 239.392890][ T5878] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 239.449895][ T9573] /dev/rnullb0: Can't open blockdev [ 239.490938][ T9575] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 239.575954][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 239.593258][ T5878] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 239.606676][ T5878] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.624330][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.639187][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.649333][ T5878] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.662691][ T5878] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.671909][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.912035][ T5878] usb 4-1: GET_CAPABILITIES returned 0 [ 239.919118][ T5878] usbtmc 4-1:16.0: can't read capabilities [ 240.121571][ T5878] usb 4-1: USB disconnect, device number 77 [ 240.537930][ T30] audit: type=1400 audit(1756245300.508:41): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9582 comm="syz.1.1172" [ 240.886142][ T9590] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 241.211834][ T5973] usb 3-1: USB disconnect, device number 65 [ 241.223485][ T6056] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 241.272529][ T9598] FAULT_INJECTION: forcing a failure. [ 241.272529][ T9598] name failslab, interval 1, probability 0, space 0, times 0 [ 241.286530][ T9598] CPU: 0 UID: 0 PID: 9598 Comm: syz.2.1177 Not tainted syzkaller #0 PREEMPT(full) [ 241.286555][ T9598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.286567][ T9598] Call Trace: [ 241.286574][ T9598] [ 241.286581][ T9598] dump_stack_lvl+0x189/0x250 [ 241.286609][ T9598] ? __pfx____ratelimit+0x10/0x10 [ 241.286629][ T9598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.286651][ T9598] ? __pfx__printk+0x10/0x10 [ 241.286675][ T9598] ? __pfx___might_resched+0x10/0x10 [ 241.286694][ T9598] ? lock_acquire+0x5f/0x360 [ 241.286709][ T9598] should_fail_ex+0x414/0x560 [ 241.286731][ T9598] should_failslab+0xa8/0x100 [ 241.286746][ T9598] __kmalloc_cache_noprof+0x70/0x3a0 [ 241.286768][ T9598] ? vhost_task_create+0xf6/0x290 [ 241.286788][ T9598] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 241.286810][ T9598] vhost_task_create+0xf6/0x290 [ 241.286828][ T9598] ? arch_stack_walk+0xfc/0x150 [ 241.286846][ T9598] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 241.286868][ T9598] ? __pfx_vhost_task_create+0x10/0x10 [ 241.286890][ T9598] ? __pfx_vhost_task_fn+0x10/0x10 [ 241.286913][ T9598] ? kasan_save_track+0x4f/0x80 [ 241.286934][ T9598] kvm_mmu_post_init_vm+0x14c/0x300 [ 241.286952][ T9598] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 241.286973][ T9598] ? __mutex_trylock_common+0x153/0x260 [ 241.286993][ T9598] ? __pfx___mutex_trylock_common+0x10/0x10 [ 241.287013][ T9598] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 241.287029][ T9598] ? rcu_is_watching+0x15/0xb0 [ 241.287048][ T9598] ? trace_contention_end+0x39/0x120 [ 241.287066][ T9598] ? __mutex_lock+0x335/0x1350 [ 241.287091][ T9598] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 241.287111][ T9598] ? rcu_is_watching+0x15/0xb0 [ 241.287128][ T9598] ? lock_release+0x4b/0x3e0 [ 241.287143][ T9598] ? get_task_pid+0x22/0x310 [ 241.287165][ T9598] kvm_vcpu_ioctl+0x95c/0xe90 [ 241.287183][ T9598] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 241.287198][ T9598] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 241.287229][ T9598] ? __fget_files+0x3a0/0x420 [ 241.287246][ T9598] ? __fget_files+0x2a/0x420 [ 241.287264][ T9598] ? bpf_lsm_file_ioctl+0x9/0x20 [ 241.287291][ T9598] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 241.287307][ T9598] __se_sys_ioctl+0xf9/0x170 [ 241.287329][ T9598] do_syscall_64+0xfa/0xfa0 [ 241.287349][ T9598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.287366][ T9598] ? clear_bhb_loop+0x60/0xb0 [ 241.287382][ T9598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.287399][ T9598] RIP: 0033:0x7f57abf8ebe9 [ 241.287414][ T9598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.287428][ T9598] RSP: 002b:00007f57acdca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.287447][ T9598] RAX: ffffffffffffffda RBX: 00007f57ac1b5fa0 RCX: 00007f57abf8ebe9 [ 241.287458][ T9598] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 241.287469][ T9598] RBP: 00007f57acdca090 R08: 0000000000000000 R09: 0000000000000000 [ 241.287480][ T9598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.287490][ T9598] R13: 00007f57ac1b6038 R14: 00007f57ac1b5fa0 R15: 00007ffdcd7e2a78 [ 241.287508][ T9598] [ 241.662944][ T5878] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 241.684266][ T6056] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.694603][ T6056] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.704438][ T6056] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.713997][ T6056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.723578][ T6056] usb 4-1: config 0 descriptor?? [ 241.728216][ T9602] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 241.734963][ T9602] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 241.825189][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 241.843208][ T5878] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 241.852290][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.860629][ T5878] usb 1-1: Product: syz [ 241.864972][ T5878] usb 1-1: Manufacturer: syz [ 241.869589][ T5878] usb 1-1: SerialNumber: syz [ 241.872968][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 241.875693][ T5878] usb 1-1: config 0 descriptor?? [ 242.023004][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 242.029388][ T9] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 242.037823][ T9] usb 2-1: config 0 has no interface number 1 [ 242.044019][ T9] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 242.055048][ T9] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 242.067343][ T9] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 242.078712][ T9] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 242.089511][ T9] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.102890][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.114877][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.116594][ T5878] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 242.126147][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.136701][ T1210] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 242.150408][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 242.160744][ T5878] usb 1-1: USB disconnect, device number 92 [ 242.171373][ T6056] usb 4-1: string descriptor 0 read error: -71 [ 242.178715][ T6056] usb 4-1: USB disconnect, device number 78 [ 242.186624][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.196158][ T9] usb 2-1: Product: syz [ 242.200457][ T9] usb 2-1: Manufacturer: syz [ 242.205357][ T9] usb 2-1: SerialNumber: syz [ 242.210987][ T9] usb 2-1: config 0 descriptor?? [ 242.216680][ T9600] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 242.225410][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.235300][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.293147][ T1210] usb 3-1: device descriptor read/64, error -71 [ 242.430822][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.439511][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.449570][ T9600] evm: overlay not supported [ 242.455660][ T5878] usb 2-1: USB disconnect, device number 74 [ 242.542918][ T1210] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 242.673173][ T1210] usb 3-1: device descriptor read/64, error -71 [ 242.689578][ T9612] FAULT_INJECTION: forcing a failure. [ 242.689578][ T9612] name failslab, interval 1, probability 0, space 0, times 0 [ 242.702635][ T9612] CPU: 0 UID: 0 PID: 9612 Comm: syz.3.1182 Not tainted syzkaller #0 PREEMPT(full) [ 242.702658][ T9612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.702670][ T9612] Call Trace: [ 242.702677][ T9612] [ 242.702684][ T9612] dump_stack_lvl+0x189/0x250 [ 242.702711][ T9612] ? __pfx____ratelimit+0x10/0x10 [ 242.702732][ T9612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.702753][ T9612] ? __pfx__printk+0x10/0x10 [ 242.702774][ T9612] ? rcu_is_watching+0x15/0xb0 [ 242.702793][ T9612] ? __pfx___might_resched+0x10/0x10 [ 242.702814][ T9612] ? lock_acquire+0x5f/0x360 [ 242.702830][ T9612] should_fail_ex+0x414/0x560 [ 242.702853][ T9612] should_failslab+0xa8/0x100 [ 242.702870][ T9612] __kmalloc_noprof+0xcb/0x4b0 [ 242.702896][ T9612] ? do_subdinfo_ioctl+0xc2/0xb20 [ 242.702912][ T9612] do_subdinfo_ioctl+0xc2/0xb20 [ 242.702930][ T9612] comedi_unlocked_ioctl+0x3ca/0x1020 [ 242.702954][ T9612] ? rcu_is_watching+0x15/0xb0 [ 242.702972][ T9612] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 242.702993][ T9612] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 242.703011][ T9612] ? kfree+0x18e/0x440 [ 242.703060][ T9612] ? do_vfs_ioctl+0xbe8/0x1430 [ 242.703072][ T9612] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 242.703086][ T9612] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 242.703109][ T9612] ? lock_release+0x4b/0x3e0 [ 242.703122][ T9612] ? vfs_write+0x956/0xb30 [ 242.703139][ T9612] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 242.703171][ T9612] ? __fget_files+0x3a0/0x420 [ 242.703189][ T9612] ? __fget_files+0x2a/0x420 [ 242.703208][ T9612] ? bpf_lsm_file_ioctl+0x9/0x20 [ 242.703229][ T9612] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 242.703251][ T9612] __se_sys_ioctl+0xf9/0x170 [ 242.703271][ T9612] do_syscall_64+0xfa/0xfa0 [ 242.703290][ T9612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.703306][ T9612] ? clear_bhb_loop+0x60/0xb0 [ 242.703322][ T9612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.703338][ T9612] RIP: 0033:0x7f6aad78ebe9 [ 242.703353][ T9612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.703367][ T9612] RSP: 002b:00007f6aae683038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.703386][ T9612] RAX: ffffffffffffffda RBX: 00007f6aad9b5fa0 RCX: 00007f6aad78ebe9 [ 242.703399][ T9612] RDX: 0000200000000100 RSI: 0000000080486402 RDI: 0000000000000003 [ 242.703411][ T9612] RBP: 00007f6aae683090 R08: 0000000000000000 R09: 0000000000000000 [ 242.703422][ T9612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.703433][ T9612] R13: 00007f6aad9b6038 R14: 00007f6aad9b5fa0 R15: 00007ffdd8ea4468 [ 242.703451][ T9612] [ 242.783239][ T1210] usb usb3-port1: attempt power cycle [ 242.922996][ T9] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 243.124941][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 243.136993][ T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 243.153586][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 243.162757][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.171329][ T9] usb 1-1: SerialNumber: ᴋዻ [ 243.192976][ T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 243.263034][ T1210] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 243.283338][ T1210] usb 3-1: device descriptor read/8, error -71 [ 243.323013][ T24] usb 4-1: device descriptor read/64, error -71 [ 243.393057][ T6056] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 243.523232][ T1210] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 243.543444][ T1210] usb 3-1: device descriptor read/8, error -71 [ 243.544482][ T6056] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 243.558010][ T6056] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 243.562899][ T24] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 243.568693][ T6056] usb 2-1: config 220 has no interface number 2 [ 243.582214][ T6056] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 243.595482][ T6056] usb 2-1: config 220 interface 0 has no altsetting 0 [ 243.602262][ T6056] usb 2-1: config 220 interface 76 has no altsetting 0 [ 243.609151][ T6056] usb 2-1: config 220 interface 1 has no altsetting 0 [ 243.617579][ T6056] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 243.627161][ T6056] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.635293][ T6056] usb 2-1: Product: syz [ 243.639452][ T6056] usb 2-1: Manufacturer: syz [ 243.644081][ T6056] usb 2-1: SerialNumber: syz [ 243.653640][ T1210] usb usb3-port1: unable to enumerate USB device [ 243.702986][ T24] usb 4-1: device descriptor read/64, error -71 [ 243.813479][ T24] usb usb4-port1: attempt power cycle [ 243.873381][ T6056] usb 2-1: selecting invalid altsetting 0 [ 243.875139][ T9618] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1184'. [ 243.879514][ T6056] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 243.895609][ T6056] usb 2-1: No valid video chain found. [ 243.904697][ T6056] usb 2-1: selecting invalid altsetting 0 [ 243.910425][ T6056] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 243.921359][ T6056] usb 2-1: USB disconnect, device number 75 [ 244.002965][ T9] usb 1-1: reset high-speed USB device number 93 using dummy_hcd [ 244.153136][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 244.165287][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 244.173355][ T24] usb 4-1: device descriptor read/8, error -71 [ 244.174070][ T9] usb 1-1: device firmware changed [ 244.187054][ T9] usb 1-1: USB disconnect, device number 93 [ 244.323052][ T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 244.422966][ T24] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 244.455912][ T24] usb 4-1: device descriptor read/8, error -71 [ 244.484441][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 244.492854][ T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 244.505118][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 244.514357][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.522439][ T9] usb 1-1: Product: syz [ 244.526852][ T9] usb 1-1: Manufacturer: syz [ 244.531455][ T9] usb 1-1: SerialNumber: syz [ 244.564266][ T24] usb usb4-port1: unable to enumerate USB device [ 244.572244][ T30] audit: type=1400 audit(1756245304.538:42): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9623 comm="syz.1.1186" [ 244.909312][ T9629] FAULT_INJECTION: forcing a failure. [ 244.909312][ T9629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.922740][ T9629] CPU: 0 UID: 0 PID: 9629 Comm: syz.2.1187 Not tainted syzkaller #0 PREEMPT(full) [ 244.922764][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.922776][ T9629] Call Trace: [ 244.922783][ T9629] [ 244.922790][ T9629] dump_stack_lvl+0x189/0x250 [ 244.922819][ T9629] ? __pfx____ratelimit+0x10/0x10 [ 244.922839][ T9629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.922859][ T9629] ? __pfx__printk+0x10/0x10 [ 244.922883][ T9629] ? rcu_is_watching+0x15/0xb0 [ 244.922903][ T9629] should_fail_ex+0x414/0x560 [ 244.922926][ T9629] _copy_to_user+0x31/0xb0 [ 244.922946][ T9629] simple_read_from_buffer+0xe1/0x170 [ 244.922966][ T9629] proc_fail_nth_read+0x1b3/0x220 [ 244.922989][ T9629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.923028][ T9629] ? rw_verify_area+0x2a6/0x4d0 [ 244.923044][ T9629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.923064][ T9629] vfs_read+0x200/0xa30 [ 244.923079][ T9629] ? fdget_pos+0x247/0x320 [ 244.923100][ T9629] ? __pfx___mutex_lock+0x10/0x10 [ 244.923121][ T9629] ? __pfx_vfs_read+0x10/0x10 [ 244.923141][ T9629] ? __fget_files+0x3a0/0x420 [ 244.923159][ T9629] ? __fget_files+0x2a/0x420 [ 244.923180][ T9629] ksys_read+0x145/0x250 [ 244.923196][ T9629] ? __pfx_ksys_read+0x10/0x10 [ 244.923214][ T9629] ? rcu_is_watching+0x15/0xb0 [ 244.923233][ T9629] do_syscall_64+0xfa/0xfa0 [ 244.923253][ T9629] ? rcu_is_watching+0x15/0xb0 [ 244.923270][ T9629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.923287][ T9629] ? clear_bhb_loop+0x60/0xb0 [ 244.923305][ T9629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.923322][ T9629] RIP: 0033:0x7f57abf8d5fc [ 244.923338][ T9629] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 244.923354][ T9629] RSP: 002b:00007f57acdca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.923374][ T9629] RAX: ffffffffffffffda RBX: 00007f57ac1b5fa0 RCX: 00007f57abf8d5fc [ 244.923388][ T9629] RDX: 000000000000000f RSI: 00007f57acdca0a0 RDI: 0000000000000009 [ 244.923400][ T9629] RBP: 00007f57acdca090 R08: 0000000000000000 R09: 0000000000000000 [ 244.923412][ T9629] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 244.923424][ T9629] R13: 00007f57ac1b6038 R14: 00007f57ac1b5fa0 R15: 00007ffdcd7e2a78 [ 244.923444][ T9629] [ 245.242783][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 245.282208][ T9638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.290852][ T9638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.301768][ T9638] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 245.309971][ T9638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1189'. [ 245.319380][ T9639] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 245.328693][ T9639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1189'. [ 245.348612][ T9638] /dev/rnullb0: Can't open blockdev [ 245.356662][ T9641] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 245.363112][ T9641] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 245.440849][ T9647] FAULT_INJECTION: forcing a failure. [ 245.440849][ T9647] name failslab, interval 1, probability 0, space 0, times 0 [ 245.453652][ T9647] CPU: 1 UID: 0 PID: 9647 Comm: syz.2.1192 Not tainted syzkaller #0 PREEMPT(full) [ 245.453674][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.453686][ T9647] Call Trace: [ 245.453693][ T9647] [ 245.453700][ T9647] dump_stack_lvl+0x189/0x250 [ 245.453727][ T9647] ? __pfx____ratelimit+0x10/0x10 [ 245.453747][ T9647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.453760][ T9647] ? __pfx__printk+0x10/0x10 [ 245.453775][ T9647] ? __pfx___might_resched+0x10/0x10 [ 245.453785][ T9647] ? lock_acquire+0x5f/0x360 [ 245.453795][ T9647] should_fail_ex+0x414/0x560 [ 245.453812][ T9647] should_failslab+0xa8/0x100 [ 245.453828][ T9647] __kmalloc_noprof+0xcb/0x4b0 [ 245.453849][ T9647] ? drm_atomic_state_init+0x9c/0x310 [ 245.453869][ T9647] drm_atomic_state_init+0x9c/0x310 [ 245.453886][ T9647] drm_atomic_state_alloc+0xbc/0x100 [ 245.453901][ T9647] drm_mode_atomic_ioctl+0x437/0xcb0 [ 245.453915][ T9647] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 245.453931][ T9647] ? do_raw_spin_unlock+0x122/0x240 [ 245.453944][ T9647] ? _raw_spin_unlock+0x28/0x50 [ 245.453955][ T9647] ? drm_is_current_master+0x19f/0x200 [ 245.453973][ T9647] drm_ioctl_kernel+0x2cc/0x390 [ 245.453995][ T9647] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 245.454014][ T9647] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 245.454036][ T9647] ? __might_fault+0xcc/0x130 [ 245.454053][ T9647] drm_ioctl+0x67f/0xb10 [ 245.454066][ T9647] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 245.454085][ T9647] ? __pfx_drm_ioctl+0x10/0x10 [ 245.454100][ T9647] ? __fget_files+0x3a0/0x420 [ 245.454115][ T9647] ? __fget_files+0x2a/0x420 [ 245.454135][ T9647] ? bpf_lsm_file_ioctl+0x9/0x20 [ 245.454156][ T9647] ? __pfx_drm_ioctl+0x10/0x10 [ 245.454176][ T9647] __se_sys_ioctl+0xf9/0x170 [ 245.454195][ T9647] do_syscall_64+0xfa/0xfa0 [ 245.454208][ T9647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.454218][ T9647] ? clear_bhb_loop+0x60/0xb0 [ 245.454228][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.454237][ T9647] RIP: 0033:0x7f57abf8ebe9 [ 245.454246][ T9647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.454259][ T9647] RSP: 002b:00007f57acdca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.454278][ T9647] RAX: ffffffffffffffda RBX: 00007f57ac1b5fa0 RCX: 00007f57abf8ebe9 [ 245.454291][ T9647] RDX: 0000200000000500 RSI: 00000000c03864bc RDI: 0000000000000003 [ 245.454303][ T9647] RBP: 00007f57acdca090 R08: 0000000000000000 R09: 0000000000000000 [ 245.454314][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.454325][ T9647] R13: 00007f57ac1b6038 R14: 00007f57ac1b5fa0 R15: 00007ffdcd7e2a78 [ 245.454340][ T9647] [ 245.729451][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.777027][ T9651] autofs: Bad value for 'fd' [ 245.932367][ T9653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1195'. [ 246.000902][ T9664] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1199' sets config #-1 [ 246.025325][ T9662] FAULT_INJECTION: forcing a failure. [ 246.025325][ T9662] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 246.030508][ T9664] syzkaller1: entered promiscuous mode [ 246.040185][ T9662] CPU: 0 UID: 0 PID: 9662 Comm: syz.1.1200 Not tainted syzkaller #0 PREEMPT(full) [ 246.040210][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.040221][ T9662] Call Trace: [ 246.040228][ T9662] [ 246.040235][ T9662] dump_stack_lvl+0x189/0x250 [ 246.040262][ T9662] ? __pfx____ratelimit+0x10/0x10 [ 246.040282][ T9662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.040304][ T9662] ? __pfx__printk+0x10/0x10 [ 246.040325][ T9662] ? lock_acquire+0x5f/0x360 [ 246.040343][ T9662] should_fail_ex+0x414/0x560 [ 246.040366][ T9662] prepare_alloc_pages+0x213/0x610 [ 246.040387][ T9662] __alloc_frozen_pages_noprof+0x123/0x370 [ 246.040406][ T9662] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 246.040427][ T9662] ? policy_nodemask+0x27c/0x720 [ 246.040451][ T9662] alloc_pages_mpol+0x232/0x4a0 [ 246.040468][ T9662] alloc_pages_noprof+0xa9/0x190 [ 246.040483][ T9662] pte_alloc_one+0x21/0x170 [ 246.040503][ T9662] __handle_mm_fault+0x2767/0x5400 [ 246.040530][ T9662] ? __pfx___handle_mm_fault+0x10/0x10 [ 246.040551][ T9662] ? __pfx_mt_find+0x10/0x10 [ 246.040576][ T9662] ? __pfx___might_resched+0x10/0x10 [ 246.040594][ T9662] handle_mm_fault+0x40a/0x8e0 [ 246.040618][ T9662] __get_user_pages+0x1699/0x2ce0 [ 246.040651][ T9662] populate_vma_page_range+0x29f/0x3a0 [ 246.040673][ T9662] ? __pfx_populate_vma_page_range+0x10/0x10 [ 246.040699][ T9662] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 246.040719][ T9662] ? down_read+0x1ad/0x2e0 [ 246.040734][ T9662] __mm_populate+0x24c/0x380 [ 246.040755][ T9662] ? __pfx___mm_populate+0x10/0x10 [ 246.040775][ T9662] ? up_write+0x1c4/0x420 [ 246.040795][ T9662] vm_mmap_pgoff+0x387/0x4d0 [ 246.040816][ T9662] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 246.040835][ T9662] ? ksys_write+0x22a/0x250 [ 246.040852][ T9662] ? __pfx_ksys_write+0x10/0x10 [ 246.040868][ T9662] ? ksys_mmap_pgoff+0xf4/0x760 [ 246.040888][ T9662] ? __x64_sys_mmap+0x7f/0x140 [ 246.040907][ T9662] do_syscall_64+0xfa/0xfa0 [ 246.040928][ T9662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.040943][ T9662] ? clear_bhb_loop+0x60/0xb0 [ 246.040960][ T9662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.040976][ T9662] RIP: 0033:0x7fb9d558ebe9 [ 246.040991][ T9662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.041005][ T9662] RSP: 002b:00007fb9d64b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 246.041023][ T9662] RAX: ffffffffffffffda RBX: 00007fb9d57b5fa0 RCX: 00007fb9d558ebe9 [ 246.041035][ T9662] RDX: 0000000000000009 RSI: 0000000000b36000 RDI: 0000200000000000 [ 246.041046][ T9662] RBP: 00007fb9d64b7090 R08: ffffffffffffffff R09: 0000000000000000 [ 246.041058][ T9662] R10: 0000000004008031 R11: 0000000000000246 R12: 0000000000000002 [ 246.041068][ T9662] R13: 00007fb9d57b6038 R14: 00007fb9d57b5fa0 R15: 00007fffe2a4f1f8 [ 246.041087][ T9662] [ 246.172977][ T9] usb 1-1: reset high-speed USB device number 94 using dummy_hcd [ 246.179796][ T9664] syzkaller1: entered allmulticast mode [ 246.188815][ T9] usb 1-1: device reset changed ep0 maxpacket size! [ 246.362113][ T5873] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 246.373078][ T5873] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 246.381011][ T5873] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 246.381078][ T9] usb 1-1: USB disconnect, device number 94 [ 246.391373][ T30] audit: type=1326 audit(1756245306.348:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.1.1201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9d558ebe9 code=0x0 [ 246.423052][ T5991] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 246.532967][ T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 246.592942][ T5991] usb 4-1: Using ep0 maxpacket: 8 [ 246.601015][ T5991] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 246.610482][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.618665][ T5991] usb 4-1: Product: syz [ 246.622880][ T5991] usb 4-1: Manufacturer: syz [ 246.627481][ T5991] usb 4-1: SerialNumber: syz [ 246.640009][ T5991] usb 4-1: config 0 descriptor?? [ 246.702965][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 246.709750][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 246.720995][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 246.731039][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.741156][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.754565][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.763677][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.848914][ T5991] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 246.932966][ T1210] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 246.980600][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 246.986937][ T9] usbtmc 1-1:16.0: can't read capabilities [ 247.092901][ T1210] usb 3-1: Using ep0 maxpacket: 8 [ 247.099099][ T1210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.110363][ T1210] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 247.119492][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.128800][ T1210] usb 3-1: config 0 descriptor?? [ 247.136087][ T1210] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 247.185959][ T9] usb 1-1: USB disconnect, device number 95 [ 247.779358][ T9680] kvm: pic: non byte read [ 247.784439][ T9680] kvm: pic: level sensitive irq not supported [ 247.784493][ T9680] kvm: pic: non byte read [ 247.797028][ T9680] kvm: pic: level sensitive irq not supported [ 247.797084][ T9680] kvm: pic: non byte read [ 247.808062][ T9680] kvm: pic: level sensitive irq not supported [ 247.808117][ T9680] kvm: pic: non byte read [ 247.819527][ T9680] kvm: pic: level sensitive irq not supported [ 247.819588][ T9680] kvm: pic: non byte read [ 247.831344][ T9680] kvm: pic: level sensitive irq not supported [ 247.831397][ T9680] kvm: pic: non byte read [ 247.842964][ T9680] kvm: pic: level sensitive irq not supported [ 247.843019][ T9680] kvm: pic: non byte read [ 247.854190][ T9680] kvm: pic: level sensitive irq not supported [ 247.854246][ T9680] kvm: pic: non byte read [ 247.865691][ T9680] kvm: pic: level sensitive irq not supported [ 247.865746][ T9680] kvm: pic: non byte read [ 248.066291][ T30] audit: type=1400 audit(1756245308.038:44): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9683 comm="syz.0.1206" [ 248.066718][ T9691] syzkaller1: entered promiscuous mode [ 248.085281][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.098485][ T9691] syzkaller1: entered allmulticast mode [ 248.252902][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 248.414271][ T9] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.426055][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.437111][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 248.444909][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 248.456248][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 248.465321][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.475030][ T9690] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 248.549768][ T1210] usb 3-1: USB disconnect, device number 70 [ 248.685405][ T5991] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 248.695958][ T5991] dvbdev: DVB: registering new adapter (Terratec H7) [ 248.702765][ T5991] usb 4-1: media controller created [ 248.824863][ T9695] /dev/rnullb0: Can't open blockdev [ 248.888698][ T9690] tipc: Enabled bearer , priority 0 [ 248.908430][ T9690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.920293][ T9690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.938403][ T5991] usb read operation failed. (-71) [ 248.953596][ T5991] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 248.969080][ T5991] usb 4-1: USB disconnect, device number 83 [ 248.981497][ T9] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 248.999627][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input35 [ 249.047629][ T9] usb 2-1: USB disconnect, device number 76 [ 249.053649][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 249.093639][ T1210] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 249.186843][ T30] audit: type=1326 audit(1756245309.158:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.2.1213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57abf8ebe9 code=0x0 [ 249.244204][ T1210] usb 1-1: device descriptor read/64, error -71 [ 249.469143][ T9711] syzkaller1: entered promiscuous mode [ 249.474985][ T9711] syzkaller1: entered allmulticast mode [ 249.482969][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 249.503023][ T1210] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 249.637433][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 249.643257][ T1210] usb 1-1: device descriptor read/64, error -71 [ 249.646852][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.661147][ T9] usb 2-1: Product: syz [ 249.665472][ T9] usb 2-1: Manufacturer: syz [ 249.670711][ T9] usb 2-1: SerialNumber: syz [ 249.686970][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 249.703714][ T5991] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 249.765594][ T1210] usb usb1-port1: attempt power cycle [ 249.923945][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.937781][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.002919][ T5878] tipc: Node number set to 522672971 [ 250.112931][ T1210] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 250.142916][ T1210] usb 1-1: device descriptor read/8, error -71 [ 250.392918][ T1210] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 250.420702][ T9716] netlink: 'syz.3.1217': attribute type 41 has an invalid length. [ 250.429247][ T1210] usb 1-1: device descriptor read/8, error -71 [ 250.513111][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 250.543151][ T1210] usb usb1-port1: unable to enumerate USB device [ 250.662931][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 250.666013][ T30] audit: type=1400 audit(1756245310.638:46): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9717 comm="syz.2.1218" [ 250.671566][ T9721] syzkaller1: entered promiscuous mode [ 250.696591][ T9721] syzkaller1: entered allmulticast mode [ 250.854587][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.865635][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.875450][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.888435][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.898116][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.908605][ T9] usb 4-1: config 0 descriptor?? [ 250.993008][ T5991] usb 2-1: Service connection timeout for: 256 [ 251.000302][ T5991] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 251.023982][ T5991] ath9k_htc: Failed to initialize the device [ 251.031561][ T5991] usb 2-1: ath9k_htc: USB layer deinitialized [ 251.117606][ T9716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.126402][ T9716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.341511][ T9] hid_parser_main: 1 callbacks suppressed [ 251.341532][ T9] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 251.355291][ T9] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 251.362719][ T9] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 251.370314][ T9] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 251.377829][ T9] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 251.385371][ T9] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 251.396059][ T9] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 251.675859][ T43] usb 4-1: USB disconnect, device number 84 [ 252.036209][ T9729] FAULT_INJECTION: forcing a failure. [ 252.036209][ T9729] name failslab, interval 1, probability 0, space 0, times 0 [ 252.049007][ T9729] CPU: 0 UID: 0 PID: 9729 Comm: syz.0.1221 Not tainted syzkaller #0 PREEMPT(full) [ 252.049032][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.049044][ T9729] Call Trace: [ 252.049051][ T9729] [ 252.049059][ T9729] dump_stack_lvl+0x189/0x250 [ 252.049086][ T9729] ? __pfx____ratelimit+0x10/0x10 [ 252.049110][ T9729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.049132][ T9729] ? __pfx__printk+0x10/0x10 [ 252.049154][ T9729] ? __pfx___might_resched+0x10/0x10 [ 252.049173][ T9729] ? lock_acquire+0x5f/0x360 [ 252.049190][ T9729] should_fail_ex+0x414/0x560 [ 252.049213][ T9729] should_failslab+0xa8/0x100 [ 252.049229][ T9729] __kmalloc_noprof+0xcb/0x4b0 [ 252.049251][ T9729] ? tomoyo_encode+0x28b/0x550 [ 252.049273][ T9729] tomoyo_encode+0x28b/0x550 [ 252.049295][ T9729] tomoyo_realpath_from_path+0x58d/0x5d0 [ 252.049317][ T9729] ? tomoyo_domain+0xd9/0x130 [ 252.049340][ T9729] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 252.049357][ T9729] tomoyo_path_number_perm+0x1e8/0x5a0 [ 252.049374][ T9729] ? lock_release+0x4b/0x3e0 [ 252.049390][ T9729] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 252.049409][ T9729] ? rcu_is_watching+0x15/0xb0 [ 252.049428][ T9729] ? lock_release+0x4b/0x3e0 [ 252.049443][ T9729] ? vfs_write+0x956/0xb30 [ 252.049461][ T9729] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 252.049493][ T9729] ? __fget_files+0x3a0/0x420 [ 252.049512][ T9729] ? __fget_files+0x2a/0x420 [ 252.049532][ T9729] security_file_ioctl+0xcb/0x2d0 [ 252.049550][ T9729] __se_sys_ioctl+0x47/0x170 [ 252.049573][ T9729] do_syscall_64+0xfa/0xfa0 [ 252.049594][ T9729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.049617][ T9729] ? clear_bhb_loop+0x60/0xb0 [ 252.049635][ T9729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.049652][ T9729] RIP: 0033:0x7fb5a7b8ebe9 [ 252.049667][ T9729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.049682][ T9729] RSP: 002b:00007fb5a893b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.049702][ T9729] RAX: ffffffffffffffda RBX: 00007fb5a7db5fa0 RCX: 00007fb5a7b8ebe9 [ 252.049715][ T9729] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000004 [ 252.049726][ T9729] RBP: 00007fb5a893b090 R08: 0000000000000000 R09: 0000000000000000 [ 252.049737][ T9729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.049749][ T9729] R13: 00007fb5a7db6038 R14: 00007fb5a7db5fa0 R15: 00007ffe56e0cb08 [ 252.049767][ T9729] [ 252.049803][ T9729] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.313263][ T5878] usb 2-1: USB disconnect, device number 77 [ 252.408287][ T9740] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 252.652935][ T43] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 252.702906][ T5991] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 252.794152][ T6056] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 252.822889][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 252.829490][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 252.841889][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 252.851216][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.855503][ T5991] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 252.859266][ T43] usb 4-1: Product: syz [ 252.869249][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.872755][ T43] usb 4-1: Manufacturer: syz [ 252.883245][ T5991] usb 3-1: config 0 descriptor?? [ 252.891872][ T43] usb 4-1: SerialNumber: syz [ 252.899413][ T43] usb 4-1: config 0 descriptor?? [ 252.906556][ T43] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 252.916481][ T43] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 252.942925][ T6056] usb 2-1: Using ep0 maxpacket: 16 [ 252.949773][ T6056] usb 2-1: config 128 has an invalid interface number: 187 but max is 0 [ 252.958429][ T6056] usb 2-1: config 128 has no interface number 0 [ 252.966572][ T6056] usb 2-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=37.32 [ 252.975801][ T6056] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.983843][ T6056] usb 2-1: Product: syz [ 252.988033][ T6056] usb 2-1: Manufacturer: syz [ 252.992679][ T6056] usb 2-1: SerialNumber: syz [ 253.204483][ T6056] usb-storage 2-1:128.187: USB Mass Storage device detected [ 253.214962][ T6056] usb-storage 2-1:128.187: Quirks match for vid 05ac pid 120a: 10 [ 253.259824][ T6056] apple-mfi-fastcharge 2-1: USB disconnect, device number 78 [ 253.509855][ T43] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 253.952929][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 253.993819][ T6056] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 254.200434][ T43] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 254.213830][ T43] em28xx 4-1:0.0: board has no eeprom [ 254.273034][ T43] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 254.282002][ T43] em28xx 4-1:0.0: dvb set to bulk mode. [ 254.287741][ T1210] em28xx 4-1:0.0: Binding DVB extension [ 254.298346][ T43] usb 4-1: USB disconnect, device number 85 [ 254.329453][ T43] em28xx 4-1:0.0: Disconnecting em28xx [ 254.350177][ T1210] em28xx 4-1:0.0: Registering input extension [ 254.360274][ T43] em28xx 4-1:0.0: Closing input extension [ 254.374967][ T43] em28xx 4-1:0.0: Freeing device [ 254.518170][ T9778] /dev/rnullb0: Can't open blockdev [ 255.268023][ T9785] /dev/rnullb0: Can't open blockdev [ 255.505212][ T5991] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 255.515499][ T5991] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 255.527356][ T5991] asix 3-1:0.0: probe with driver asix failed with error -71 [ 255.533379][ T1210] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 255.537766][ T5991] usb 3-1: USB disconnect, device number 71 [ 255.694584][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.705781][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.718458][ T1210] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.731442][ T1210] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.740526][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.749937][ T1210] usb 1-1: config 0 descriptor?? [ 255.794662][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.836644][ T9789] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 255.843082][ T9789] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 256.164322][ T1210] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xd [ 256.185753][ T1210] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 256.289345][ T9800] syzkaller1: entered promiscuous mode [ 256.295199][ T9800] syzkaller1: entered allmulticast mode [ 256.390782][ T30] audit: type=1326 audit(1756245316.358:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.2.1245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57abf8ebe9 code=0x0 [ 256.414678][ T5878] usb 1-1: USB disconnect, device number 100 [ 256.846407][ T9809] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1247'. [ 256.855952][ T9809] netlink: 'syz.1.1247': attribute type 5 has an invalid length. [ 256.869887][ T5874] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 256.960657][ T9815] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 257.092914][ T5991] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 257.249851][ T5991] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.249888][ T9829] syzkaller1: entered promiscuous mode [ 257.268260][ T30] audit: type=1400 audit(1756245317.218:48): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9819 comm="syz.0.1252" [ 257.269378][ T5991] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 257.293498][ T9829] syzkaller1: entered allmulticast mode [ 257.311128][ T5991] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.321129][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.353494][ T5991] usb 4-1: config 0 descriptor?? [ 257.767134][ T5991] usb 4-1: string descriptor 0 read error: -71 [ 257.781257][ T9844] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 257.787830][ T9844] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 257.796598][ T5991] usb 4-1: USB disconnect, device number 86 [ 258.353177][ T5991] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 258.503233][ T5991] usb 1-1: device descriptor read/64, error -71 [ 258.743013][ T1210] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 258.752895][ T5991] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 258.893855][ T5991] usb 1-1: device descriptor read/64, error -71 [ 258.895750][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.911102][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.920981][ T1210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.934917][ T1210] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.944027][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.953327][ T1210] usb 3-1: config 0 descriptor?? [ 259.003166][ T5991] usb usb1-port1: attempt power cycle [ 259.012957][ T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 259.164924][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.176059][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.185882][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.200109][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.209229][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.219037][ T9] usb 2-1: config 0 descriptor?? [ 259.343775][ T5991] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 259.364726][ T5991] usb 1-1: device descriptor read/8, error -71 [ 259.364763][ T1210] plantronics 0003:047F:FFFF.002C: reserved main item tag 0xd [ 259.381887][ T1210] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 259.603642][ T5991] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 259.623831][ T5991] usb 1-1: device descriptor read/8, error -71 [ 259.624624][ T1210] usb 3-1: USB disconnect, device number 72 [ 259.645994][ T9] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 259.743332][ T5991] usb usb1-port1: unable to enumerate USB device [ 259.904000][ T9861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.912778][ T9861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.157726][ T9866] overlay: ./bus is not a directory [ 260.207389][ T9868] program syz.2.1270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.280404][ T9873] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 260.286841][ T9873] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 260.352943][ T5874] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 260.525045][ T30] audit: type=1400 audit(1756245320.498:49): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9875 comm="syz.2.1272" [ 260.525891][ T5991] usb 2-1: USB disconnect, device number 80 [ 260.548802][ T9879] syzkaller1: entered promiscuous mode [ 260.556078][ T9879] syzkaller1: entered allmulticast mode [ 261.243684][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 261.293142][ T1210] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 261.382904][ T9] usb 4-1: device descriptor read/64, error -71 [ 261.396172][ T9892] syzkaller1: entered promiscuous mode [ 261.401761][ T9892] syzkaller1: entered allmulticast mode [ 261.454057][ T1210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.464284][ T1210] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 261.474844][ T1210] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.484092][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.499255][ T1210] usb 2-1: config 0 descriptor?? [ 261.918735][ T1210] usb 2-1: USB disconnect, device number 81 [ 262.395209][ T9898] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 262.472984][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 262.480649][ T5991] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 262.604030][ T9907] FAULT_INJECTION: forcing a failure. [ 262.604030][ T9907] name failslab, interval 1, probability 0, space 0, times 0 [ 262.617394][ T9] usb 4-1: device descriptor read/64, error -71 [ 262.623829][ T9907] CPU: 0 UID: 0 PID: 9907 Comm: syz.1.1284 Not tainted syzkaller #0 PREEMPT(full) [ 262.623855][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.623874][ T9907] Call Trace: [ 262.623881][ T9907] [ 262.623888][ T9907] dump_stack_lvl+0x189/0x250 [ 262.623915][ T9907] ? __pfx____ratelimit+0x10/0x10 [ 262.623935][ T9907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.623956][ T9907] ? __pfx__printk+0x10/0x10 [ 262.623978][ T9907] ? __pfx___might_resched+0x10/0x10 [ 262.623995][ T9907] ? lock_acquire+0x5f/0x360 [ 262.624012][ T9907] should_fail_ex+0x414/0x560 [ 262.624035][ T9907] should_failslab+0xa8/0x100 [ 262.624052][ T9907] kmem_cache_alloc_noprof+0x73/0x390 [ 262.624074][ T9907] ? security_file_alloc+0x34/0x330 [ 262.624092][ T9907] security_file_alloc+0x34/0x330 [ 262.624108][ T9907] init_file+0x93/0x2f0 [ 262.624129][ T9907] alloc_empty_file+0x6e/0x1d0 [ 262.624149][ T9907] alloc_file_pseudo+0x13d/0x210 [ 262.624171][ T9907] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 262.624196][ T9907] anon_inode_getfile+0xc5/0x1a0 [ 262.624218][ T9907] iommufd_test+0x31a/0x5180 [ 262.624241][ T9907] ? rcu_is_watching+0x15/0xb0 [ 262.624260][ T9907] ? __pfx_iommufd_test+0x10/0x10 [ 262.624277][ T9907] ? rcu_is_watching+0x15/0xb0 [ 262.624294][ T9907] ? lock_release+0x4b/0x3e0 [ 262.624310][ T9907] ? kfree+0x18e/0x440 [ 262.624331][ T9907] ? __might_fault+0xb0/0x130 [ 262.624351][ T9907] ? rcu_is_watching+0x15/0xb0 [ 262.624367][ T9907] ? lock_acquire+0x5f/0x360 [ 262.624398][ T9907] ? rcu_is_watching+0x15/0xb0 [ 262.624415][ T9907] ? lock_release+0x4b/0x3e0 [ 262.624430][ T9907] ? __might_fault+0xb0/0x130 [ 262.624450][ T9907] ? __might_fault+0xcc/0x130 [ 262.624473][ T9907] iommufd_fops_ioctl+0x45e/0x580 [ 262.624492][ T9907] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 262.624520][ T9907] ? __fget_files+0x3a0/0x420 [ 262.624537][ T9907] ? __fget_files+0x2a/0x420 [ 262.624556][ T9907] ? bpf_lsm_file_ioctl+0x9/0x20 [ 262.624577][ T9907] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 262.624600][ T9907] __se_sys_ioctl+0xf9/0x170 [ 262.624623][ T9907] do_syscall_64+0xfa/0xfa0 [ 262.624644][ T9907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.624660][ T9907] ? clear_bhb_loop+0x60/0xb0 [ 262.624677][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.624693][ T9907] RIP: 0033:0x7fb9d558ebe9 [ 262.624709][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.624723][ T9907] RSP: 002b:00007fb9d64b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.624742][ T9907] RAX: ffffffffffffffda RBX: 00007fb9d57b5fa0 RCX: 00007fb9d558ebe9 [ 262.624755][ T9907] RDX: 0000200000000340 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 262.624767][ T9907] RBP: 00007fb9d64b7090 R08: 0000000000000000 R09: 0000000000000000 [ 262.624779][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.624790][ T9907] R13: 00007fb9d57b6038 R14: 00007fb9d57b5fa0 R15: 00007fffe2a4f1f8 [ 262.624807][ T9907] [ 262.630766][ T9909] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1285'. [ 262.653602][ T5991] usb 3-1: too many configurations: 237, using maximum allowed: 8 [ 262.676091][ T9909] /dev/rnullb0: Can't open blockdev [ 262.701634][ T5991] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 262.782405][ T30] audit: type=1400 audit(1756245322.748:50): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9910 comm="syz.1.1286" [ 262.788464][ T9] usb usb4-port1: attempt power cycle [ 262.990477][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.998869][ T5991] usb 3-1: Product: syz [ 263.003291][ T5991] usb 3-1: Manufacturer: syz [ 263.008433][ T5991] usb 3-1: SerialNumber: syz [ 263.018486][ T5991] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 263.039242][ T6056] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 263.352970][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 263.372969][ T5991] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 263.381099][ T9] usb 4-1: device descriptor read/8, error -71 [ 263.445090][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.454714][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.513245][ T5973] usb 3-1: USB disconnect, device number 73 [ 263.526552][ T9922] (syz.1.1290,9922,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 263.537414][ T9922] (syz.1.1290,9922,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 263.548372][ T5991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.558818][ T5991] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 263.568120][ T5991] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.578186][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.587599][ T5991] usb 1-1: config 0 descriptor?? [ 263.633229][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 263.663844][ T9] usb 4-1: device descriptor read/8, error -71 [ 263.783848][ T9] usb usb4-port1: unable to enumerate USB device [ 264.008912][ T5991] usb 1-1: USB disconnect, device number 105 [ 264.052293][ T9932] /dev/rnullb0: Can't open blockdev [ 264.097566][ T9937] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.104069][ T9937] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 264.112883][ T6056] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 264.120303][ T6056] ath9k_htc: Failed to initialize the device [ 264.129793][ T5973] usb 3-1: ath9k_htc: USB layer deinitialized [ 264.527944][ T5973] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 264.556193][ T30] audit: type=1400 audit(1756245324.528:51): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9945 comm="syz.3.1298" [ 264.692947][ T5973] usb 3-1: Using ep0 maxpacket: 8 [ 264.699132][ T5973] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 264.710355][ T5973] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 264.720929][ T5973] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.730957][ T5973] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.744066][ T5991] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 264.751586][ T5973] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.761429][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.813033][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 264.925391][ T5991] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 264.934567][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.944162][ T5991] usb 2-1: config 0 descriptor?? [ 264.975504][ T5973] usb 3-1: GET_CAPABILITIES returned 0 [ 264.981145][ T5973] usbtmc 3-1:16.0: can't read capabilities [ 264.988149][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.999282][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 265.010105][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.022372][ T9] usb 1-1: config 0 descriptor?? [ 265.276026][ T6056] usb 3-1: USB disconnect, device number 74 [ 265.553654][ T5991] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 265.563866][ T5991] asix 2-1:0.0: probe with driver asix failed with error -32 [ 265.592961][ T1210] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 265.742949][ T1210] usb 4-1: Using ep0 maxpacket: 8 [ 265.750431][ T1210] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.759649][ T1210] usb 4-1: config 7 has an invalid interface number: 169 but max is 0 [ 265.767877][ T1210] usb 4-1: config 7 has no interface number 0 [ 265.775745][ T1210] usb 4-1: New USB device found, idVendor=04c5, idProduct=1330, bcdDevice=79.99 [ 265.785047][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.793293][ T1210] usb 4-1: Product: syz [ 265.797630][ T1210] usb 4-1: Manufacturer: syz [ 265.802232][ T1210] usb 4-1: SerialNumber: syz [ 265.864803][ T9961] fuse: Bad value for 'fd' [ 266.022521][ T1210] usb 4-1: USB disconnect, device number 91 [ 266.143686][ T5991] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 266.313690][ T5991] usb 3-1: Using ep0 maxpacket: 8 [ 266.321512][ T5991] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 266.330657][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.338680][ T5991] usb 3-1: Product: syz [ 266.342871][ T5991] usb 3-1: Manufacturer: syz [ 266.347488][ T5991] usb 3-1: SerialNumber: syz [ 266.353411][ T5991] usb 3-1: config 0 descriptor?? [ 266.560616][ T5991] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 266.724442][ T30] audit: type=1400 audit(1756245326.698:52): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9967 comm="syz.3.1305" [ 266.724833][ T9972] syzkaller1: entered promiscuous mode [ 266.749083][ T9972] syzkaller1: entered allmulticast mode [ 267.525622][ T1210] usb 2-1: USB disconnect, device number 82 [ 267.588903][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 267.599285][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 267.609644][ T9] usb 1-1: USB disconnect, device number 106 [ 267.634214][ T9983] syzkaller1: entered promiscuous mode [ 267.639832][ T9983] syzkaller1: entered allmulticast mode [ 267.793827][ T30] audit: type=1400 audit(1756245327.768:53): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9984 comm="syz.3.1310" [ 267.847953][ T9995] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1313'. [ 267.875743][ T9997] sctp: [Deprecated]: syz.0.1314 (pid 9997) Use of int in max_burst socket option. [ 267.875743][ T9997] Use struct sctp_assoc_value instead [ 267.891145][ T9997] sctp: [Deprecated]: syz.0.1314 (pid 9997) Use of int in maxseg socket option. [ 267.891145][ T9997] Use struct sctp_assoc_value instead [ 267.907675][ T1210] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 268.084953][ T1210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.095210][ T1210] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.105007][ T1210] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.114253][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.125254][ T1210] usb 2-1: config 0 descriptor?? [ 268.142959][ T9] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 268.292942][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 268.299560][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 268.309151][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.319329][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.330521][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.339629][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.347766][ T9] usb 1-1: Product: syz [ 268.351933][ T9] usb 1-1: Manufacturer: syz [ 268.356645][ T9] usb 1-1: SerialNumber: syz [ 268.405536][ T5991] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 268.416800][ T5991] dvbdev: DVB: registering new adapter (Terratec H7) [ 268.423746][ T5991] usb 3-1: media controller created [ 268.540958][ T1210] usb 2-1: USB disconnect, device number 83 [ 268.646932][ T5991] usb read operation failed. (-71) [ 268.654223][ T5991] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 268.665269][ T5991] usb 3-1: USB disconnect, device number 75 [ 268.691286][ T30] audit: type=1400 audit(1756245328.658:54): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9999 comm="syz.3.1315" [ 268.691725][T10003] syzkaller1: entered promiscuous mode [ 268.716506][T10003] syzkaller1: entered allmulticast mode [ 268.973023][ T9] usb 1-1: 0:2 : does not exist [ 268.981842][ T9] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 268.998259][ T9] usb 1-1: USB disconnect, device number 107 [ 269.065486][T10005] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.1316'. [ 269.187176][T10010] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 269.193735][T10010] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 269.306998][ T30] audit: type=1326 audit(1756245329.278:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.1319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57abf8ebe9 code=0x0 [ 269.392982][ T1210] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 269.478371][T10015] overlayfs: missing 'lowerdir' [ 269.544240][ T1210] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 269.563823][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.578942][ T1210] usb 2-1: config 0 descriptor?? [ 269.608209][ T30] audit: type=1326 audit(1756245329.578:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6aad78ebe9 code=0x0 [ 269.843032][ T43] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 270.026347][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.036870][ T43] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.047389][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.056737][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.067014][ T43] usb 1-1: config 0 descriptor?? [ 270.199868][ T1210] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 270.224391][ T1210] asix 2-1:0.0: probe with driver asix failed with error -32 [ 270.252716][T10034] FAULT_INJECTION: forcing a failure. [ 270.252716][T10034] name failslab, interval 1, probability 0, space 0, times 0 [ 270.266920][T10034] CPU: 0 UID: 0 PID: 10034 Comm: syz.2.1327 Not tainted syzkaller #0 PREEMPT(full) [ 270.266946][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.266958][T10034] Call Trace: [ 270.266965][T10034] [ 270.266973][T10034] dump_stack_lvl+0x189/0x250 [ 270.267000][T10034] ? __pfx____ratelimit+0x10/0x10 [ 270.267021][T10034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.267042][T10034] ? __pfx__printk+0x10/0x10 [ 270.267062][T10034] ? rcu_is_watching+0x15/0xb0 [ 270.267081][T10034] ? __pfx___might_resched+0x10/0x10 [ 270.267099][T10034] ? lock_acquire+0x5f/0x360 [ 270.267116][T10034] should_fail_ex+0x414/0x560 [ 270.267139][T10034] should_failslab+0xa8/0x100 [ 270.267173][T10034] __kmalloc_noprof+0xcb/0x4b0 [ 270.267195][T10034] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 270.267215][T10034] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 270.267235][T10034] genl_family_rcv_msg_doit+0xb8/0x300 [ 270.267254][T10034] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 270.267271][T10034] ? __pfx___mutex_lock+0x10/0x10 [ 270.267293][T10034] ? __pfx_genl_get_cmd+0x10/0x10 [ 270.267308][T10034] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 270.267336][T10034] genl_rcv_msg+0x60e/0x790 [ 270.267361][T10034] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.267378][T10034] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 270.267394][T10034] ? __asan_memcpy+0x40/0x70 [ 270.267414][T10034] ? __pfx_ref_tracker_free+0x10/0x10 [ 270.267436][T10034] ? __skb_clone+0x63/0x7a0 [ 270.267461][T10034] netlink_rcv_skb+0x205/0x470 [ 270.267481][T10034] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.267498][T10034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.267521][T10034] ? lock_release+0x4b/0x3e0 [ 270.267538][T10034] ? down_read+0x1ad/0x2e0 [ 270.267553][T10034] genl_rcv+0x28/0x40 [ 270.267567][T10034] netlink_unicast+0x82f/0x9e0 [ 270.267588][T10034] ? __pfx_netlink_unicast+0x10/0x10 [ 270.267607][T10034] ? netlink_sendmsg+0x642/0xb30 [ 270.267627][T10034] ? skb_put+0x11b/0x210 [ 270.267649][T10034] netlink_sendmsg+0x805/0xb30 [ 270.267675][T10034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.267697][T10034] ? aa_sock_msg_perm+0xf1/0x1d0 [ 270.267719][T10034] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.267738][T10034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.267757][T10034] __sock_sendmsg+0x21c/0x270 [ 270.267777][T10034] ____sys_sendmsg+0x505/0x830 [ 270.267801][T10034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.267826][T10034] ? import_iovec+0x74/0xa0 [ 270.267846][T10034] ___sys_sendmsg+0x21f/0x2a0 [ 270.267868][T10034] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.267903][T10034] ? __fget_files+0x2a/0x420 [ 270.267921][T10034] ? __fget_files+0x3a0/0x420 [ 270.267942][T10034] __x64_sys_sendmsg+0x19b/0x260 [ 270.267963][T10034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.267989][T10034] ? __pfx_ksys_write+0x10/0x10 [ 270.268007][T10034] ? rcu_is_watching+0x15/0xb0 [ 270.268026][T10034] do_syscall_64+0xfa/0xfa0 [ 270.268048][T10034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.268065][T10034] ? clear_bhb_loop+0x60/0xb0 [ 270.268083][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.268101][T10034] RIP: 0033:0x7f57abf8ebe9 [ 270.268116][T10034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.268131][T10034] RSP: 002b:00007f57acdca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.268149][T10034] RAX: ffffffffffffffda RBX: 00007f57ac1b5fa0 RCX: 00007f57abf8ebe9 [ 270.268162][T10034] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 270.268175][T10034] RBP: 00007f57acdca090 R08: 0000000000000000 R09: 0000000000000000 [ 270.268186][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.268197][T10034] R13: 00007f57ac1b6038 R14: 00007f57ac1b5fa0 R15: 00007ffdcd7e2a78 [ 270.268217][T10034] [ 270.644838][ T43] usb 1-1: USB disconnect, device number 108 [ 270.706213][T10039] @: renamed from vlan0 (while UP) [ 270.749006][T10042] /dev/rnullb0: Can't open blockdev [ 271.183165][ T43] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 271.226506][T10063] FAULT_INJECTION: forcing a failure. [ 271.226506][T10063] name failslab, interval 1, probability 0, space 0, times 0 [ 271.239540][T10063] CPU: 0 UID: 0 PID: 10063 Comm: syz.0.1337 Not tainted syzkaller #0 PREEMPT(full) [ 271.239564][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.239576][T10063] Call Trace: [ 271.239583][T10063] [ 271.239590][T10063] dump_stack_lvl+0x189/0x250 [ 271.239618][T10063] ? __pfx____ratelimit+0x10/0x10 [ 271.239638][T10063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.239659][T10063] ? __pfx__printk+0x10/0x10 [ 271.239682][T10063] ? __pfx___might_resched+0x10/0x10 [ 271.239700][T10063] ? lock_acquire+0x5f/0x360 [ 271.239717][T10063] should_fail_ex+0x414/0x560 [ 271.239740][T10063] should_failslab+0xa8/0x100 [ 271.239758][T10063] kmem_cache_alloc_node_noprof+0x76/0x390 [ 271.239781][T10063] ? __alloc_skb+0x112/0x2d0 [ 271.239803][T10063] __alloc_skb+0x112/0x2d0 [ 271.239824][T10063] mgmt_cmd_status+0x41/0x4c0 [ 271.239848][T10063] hci_mgmt_cmd+0x9c9/0xef0 [ 271.239873][T10063] hci_sock_sendmsg+0x6ca/0xef0 [ 271.239896][T10063] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 271.239918][T10063] ? aa_sock_msg_perm+0xf1/0x1d0 [ 271.239938][T10063] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.239958][T10063] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 271.239979][T10063] __sock_sendmsg+0x21c/0x270 [ 271.239997][T10063] sock_write_iter+0x258/0x330 [ 271.240015][T10063] ? __pfx_sock_write_iter+0x10/0x10 [ 271.240036][T10063] ? bpf_lsm_file_permission+0x9/0x20 [ 271.240057][T10063] ? security_file_permission+0x75/0x290 [ 271.240076][T10063] vfs_write+0x5c9/0xb30 [ 271.240095][T10063] ? __pfx_sock_write_iter+0x10/0x10 [ 271.240112][T10063] ? __pfx_vfs_write+0x10/0x10 [ 271.240132][T10063] ? __fget_files+0x2a/0x420 [ 271.240154][T10063] ksys_write+0x145/0x250 [ 271.240171][T10063] ? __pfx_ksys_write+0x10/0x10 [ 271.240186][T10063] ? rcu_is_watching+0x15/0xb0 [ 271.240206][T10063] do_syscall_64+0xfa/0xfa0 [ 271.240226][T10063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.240242][T10063] ? clear_bhb_loop+0x60/0xb0 [ 271.240265][T10063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.240278][T10063] RIP: 0033:0x7fb5a7b8ebe9 [ 271.240290][T10063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.240302][T10063] RSP: 002b:00007fb5a893b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.240317][T10063] RAX: ffffffffffffffda RBX: 00007fb5a7db5fa0 RCX: 00007fb5a7b8ebe9 [ 271.240328][T10063] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 271.240336][T10063] RBP: 00007fb5a893b090 R08: 0000000000000000 R09: 0000000000000000 [ 271.240345][T10063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.240353][T10063] R13: 00007fb5a7db6038 R14: 00007fb5a7db5fa0 R15: 00007ffe56e0cb08 [ 271.240368][T10063] [ 271.532884][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 271.539507][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.563274][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 271.572431][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.579045][T10069] netlink: 'syz.3.1339': attribute type 1 has an invalid length. [ 271.587587][ T43] usb 3-1: config 0 descriptor?? [ 271.588825][T10069] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1339'. [ 271.604549][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 271.605453][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 271.611145][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 271.638155][ T43] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 271.780105][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1345'. [ 271.923448][ T43] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 272.074435][ T43] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 272.083562][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.096869][ T43] usb 4-1: config 0 descriptor?? [ 272.103637][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 272.163163][ T5991] usb 2-1: USB disconnect, device number 84 [ 272.192157][T10086] syzkaller1: left promiscuous mode [ 272.200027][T10086] syzkaller1: left allmulticast mode [ 272.562926][ T5991] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 272.582942][ T5878] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 272.707622][ T43] gp8psk: usb out operation failed. [ 272.713084][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 272.715111][ T5991] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.724006][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 272.744699][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 272.750040][ T5991] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 272.751306][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.759418][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.773604][ T43] usb 4-1: USB disconnect, device number 92 [ 272.785436][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.798530][ T5991] usb 2-1: config 0 descriptor?? [ 272.799155][ T5878] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 272.813676][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.819885][ T5991] pwc: Askey VC010 type 2 USB webcam detected. [ 272.828946][ T5878] usb 1-1: config 0 descriptor?? [ 273.221885][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.232754][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.242385][ T5991] pwc: recv_control_msg error -32 req 02 val 2b00 [ 273.251121][ T5991] pwc: recv_control_msg error -32 req 02 val 2700 [ 273.255374][ T5878] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0 [ 273.262402][ T5991] pwc: recv_control_msg error -32 req 02 val 2c00 [ 273.265244][ T5878] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0 [ 273.272635][T10093] ./file0: Can't lookup blockdev [ 273.280178][ T5878] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0 [ 273.286789][T10094] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 273.290751][ T5878] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0 [ 273.296904][T10094] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 273.297931][T10094] vhci_hcd vhci_hcd.0: Device attached [ 273.304412][ T5878] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0 [ 273.316293][T10095] vhci_hcd: connection closed [ 273.318304][ T5878] mcp2221 0003:04D8:00DD.002E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 273.330435][ T2200] vhci_hcd: stop threads [ 273.345599][ T2200] vhci_hcd: release socket [ 273.350127][ T2200] vhci_hcd: disconnect device [ 273.462458][ T9] usb 1-1: USB disconnect, device number 109 [ 273.473513][ T5991] pwc: recv_control_msg error -71 req 04 val 1300 [ 273.480311][ T5991] pwc: recv_control_msg error -71 req 04 val 1400 [ 273.489572][ T5991] pwc: recv_control_msg error -71 req 02 val 2000 [ 273.496475][ T5991] pwc: recv_control_msg error -71 req 02 val 2100 [ 273.503361][ T5991] pwc: recv_control_msg error -71 req 04 val 1500 [ 273.510070][ T5991] pwc: recv_control_msg error -71 req 02 val 2500 [ 273.516963][ T5991] pwc: recv_control_msg error -71 req 02 val 2400 [ 273.527556][ T5991] pwc: recv_control_msg error -71 req 02 val 2600 [ 273.534401][ T5991] pwc: recv_control_msg error -71 req 02 val 2900 [ 273.541048][ T5991] pwc: recv_control_msg error -71 req 02 val 2800 [ 273.547851][ T5991] pwc: recv_control_msg error -71 req 04 val 1100 [ 273.554718][ T5991] pwc: recv_control_msg error -71 req 04 val 1200 [ 273.561876][ T5991] pwc: Registered as video103. [ 273.568009][ T5991] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 273.590043][ T5991] usb 2-1: USB disconnect, device number 85 [ 274.044094][ T5991] usb 3-1: USB disconnect, device number 76 [ 274.172448][T10120] /dev/rnullb0: Can't open blockdev [ 274.206337][T10124] afs: Unknown parameter 'd' [ 274.211418][T10124] afs: Unknown parameter 'd' [ 274.218465][T10124] FAULT_INJECTION: forcing a failure. [ 274.218465][T10124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.232063][T10124] CPU: 1 UID: 0 PID: 10124 Comm: syz.0.1360 Not tainted syzkaller #0 PREEMPT(full) [ 274.232084][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.232094][T10124] Call Trace: [ 274.232101][T10124] [ 274.232109][T10124] dump_stack_lvl+0x189/0x250 [ 274.232134][T10124] ? __pfx____ratelimit+0x10/0x10 [ 274.232152][T10124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.232172][T10124] ? __pfx__printk+0x10/0x10 [ 274.232190][T10124] ? __might_fault+0xb0/0x130 [ 274.232211][T10124] ? __pfx___mutex_lock+0x10/0x10 [ 274.232230][T10124] ? rcu_is_watching+0x15/0xb0 [ 274.232249][T10124] should_fail_ex+0x414/0x560 [ 274.232271][T10124] _copy_from_user+0x2d/0xb0 [ 274.232288][T10124] comedi_unlocked_ioctl+0x28e/0x1020 [ 274.232313][T10124] ? rcu_is_watching+0x15/0xb0 [ 274.232330][T10124] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 274.232350][T10124] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 274.232366][T10124] ? kfree+0x18e/0x440 [ 274.232387][T10124] ? do_vfs_ioctl+0xbe8/0x1430 [ 274.232400][T10124] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 274.232415][T10124] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 274.232438][T10124] ? lock_release+0x4b/0x3e0 [ 274.232453][T10124] ? vfs_write+0x956/0xb30 [ 274.232472][T10124] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 274.232504][T10124] ? __fget_files+0x3a0/0x420 [ 274.232522][T10124] ? __fget_files+0x2a/0x420 [ 274.232541][T10124] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.232560][T10124] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 274.232581][T10124] __se_sys_ioctl+0xf9/0x170 [ 274.232604][T10124] do_syscall_64+0xfa/0xfa0 [ 274.232625][T10124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.232641][T10124] ? clear_bhb_loop+0x60/0xb0 [ 274.232660][T10124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.232676][T10124] RIP: 0033:0x7fb5a7b8ebe9 [ 274.232691][T10124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.232705][T10124] RSP: 002b:00007fb5a893b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.232721][T10124] RAX: ffffffffffffffda RBX: 00007fb5a7db5fa0 RCX: 00007fb5a7b8ebe9 [ 274.232734][T10124] RDX: 00002000000000c0 RSI: 000000008010640b RDI: 0000000000000005 [ 274.232746][T10124] RBP: 00007fb5a893b090 R08: 0000000000000000 R09: 0000000000000000 [ 274.232757][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.232767][T10124] R13: 00007fb5a7db6038 R14: 00007fb5a7db5fa0 R15: 00007ffe56e0cb08 [ 274.232795][T10124] [ 274.393029][ T5991] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 274.427090][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.452883][ T5878] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 274.559725][T10131] random: crng reseeded on system resumption [ 274.629780][T10128] /dev/rnullb0: Can't open blockdev [ 274.643192][ T5991] usb 3-1: Using ep0 maxpacket: 16 [ 274.660660][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 274.677575][ T5991] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.688251][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.696613][ T5991] usb 3-1: Product: syz [ 274.701022][ T5991] usb 3-1: Manufacturer: syz [ 274.706014][ T5991] usb 3-1: SerialNumber: syz [ 274.713791][ T5991] usb 3-1: config 0 descriptor?? [ 274.728521][ T5991] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 274.741355][ T5991] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 275.009814][T10138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.312987][ T6056] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 275.328832][ T5991] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 275.465667][ T6056] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.492706][ T6056] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.507833][ T5878] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 275.517039][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.523014][ T6056] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 275.535192][ T5878] usb 2-1: config 0 descriptor?? [ 275.545430][ T6056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.564506][ T6056] usb 1-1: config 0 descriptor?? [ 275.741875][T10147] ALSA: mixer_oss: invalid OSS volume '' [ 275.950383][ T5878] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 275.960482][ T5878] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 275.971013][ T5878] asix 2-1:0.0: probe with driver asix failed with error -61 [ 275.982797][ T6056] glorious 0003:258A:0036.002F: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.0-1/input0 [ 276.010657][ T5991] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 276.018906][ T5991] em28xx 3-1:0.0: board has no eeprom [ 276.082947][ T5991] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 276.091314][ T5991] em28xx 3-1:0.0: dvb set to bulk mode. [ 276.097061][ T6056] em28xx 3-1:0.0: Binding DVB extension [ 276.109922][ T5991] usb 3-1: USB disconnect, device number 77 [ 276.132226][ T6056] em28xx 3-1:0.0: Registering input extension [ 276.138965][ T5991] em28xx 3-1:0.0: Disconnecting em28xx [ 276.144624][ T5991] em28xx 3-1:0.0: Closing input extension [ 276.154608][ T5991] em28xx 3-1:0.0: Freeing device [ 276.234445][ T5917] usb 1-1: USB disconnect, device number 110 [ 276.588261][T10157] ALSA: mixer_oss: invalid OSS volume '' [ 276.594599][T10157] FAULT_INJECTION: forcing a failure. [ 276.594599][T10157] name failslab, interval 1, probability 0, space 0, times 0 [ 276.609395][T10157] CPU: 0 UID: 0 PID: 10157 Comm: syz.3.1369 Not tainted syzkaller #0 PREEMPT(full) [ 276.609417][T10157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.609428][T10157] Call Trace: [ 276.609435][T10157] [ 276.609442][T10157] dump_stack_lvl+0x189/0x250 [ 276.609468][T10157] ? __pfx____ratelimit+0x10/0x10 [ 276.609498][T10157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.609517][T10157] ? __pfx__printk+0x10/0x10 [ 276.609537][T10157] ? __pfx___might_resched+0x10/0x10 [ 276.609555][T10157] ? lock_acquire+0x5f/0x360 [ 276.609573][T10157] should_fail_ex+0x414/0x560 [ 276.609594][T10157] should_failslab+0xa8/0x100 [ 276.609611][T10157] __kmalloc_noprof+0xcb/0x4b0 [ 276.609631][T10157] ? kfree+0x4d/0x440 [ 276.609650][T10157] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 276.609675][T10157] tomoyo_realpath_from_path+0xe3/0x5d0 [ 276.609696][T10157] ? tomoyo_domain+0xd9/0x130 [ 276.609719][T10157] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 276.609737][T10157] tomoyo_path_number_perm+0x1e8/0x5a0 [ 276.609755][T10157] ? lock_release+0x4b/0x3e0 [ 276.609771][T10157] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 276.609790][T10157] ? rcu_is_watching+0x15/0xb0 [ 276.609808][T10157] ? lock_release+0x4b/0x3e0 [ 276.609823][T10157] ? vfs_write+0x956/0xb30 [ 276.609841][T10157] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 276.609879][T10157] ? __fget_files+0x3a0/0x420 [ 276.609896][T10157] ? __fget_files+0x2a/0x420 [ 276.609913][T10157] security_file_ioctl+0xcb/0x2d0 [ 276.609931][T10157] __se_sys_ioctl+0x47/0x170 [ 276.609954][T10157] do_syscall_64+0xfa/0xfa0 [ 276.609974][T10157] ? rcu_is_watching+0x15/0xb0 [ 276.609990][T10157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.610005][T10157] ? clear_bhb_loop+0x60/0xb0 [ 276.610023][T10157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.610038][T10157] RIP: 0033:0x7f6aad78ebe9 [ 276.610053][T10157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.610069][T10157] RSP: 002b:00007f6aae662038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.610088][T10157] RAX: ffffffffffffffda RBX: 00007f6aad9b6090 RCX: 00007f6aad78ebe9 [ 276.610101][T10157] RDX: 0000200000000040 RSI: 00000000400442c8 RDI: 0000000000000005 [ 276.610113][T10157] RBP: 00007f6aae662090 R08: 0000000000000000 R09: 0000000000000000 [ 276.610124][T10157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.610135][T10157] R13: 00007f6aad9b6128 R14: 00007f6aad9b6090 R15: 00007ffdd8ea4468 [ 276.610154][T10157] [ 276.610162][T10157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 276.751502][T10160] ALSA: mixer_oss: invalid OSS volume '' [ 276.850928][T10163] netlink: 'syz.0.1373': attribute type 29 has an invalid length. [ 276.887996][T10164] netlink: 'syz.0.1373': attribute type 29 has an invalid length. [ 277.190397][ T5917] usb 2-1: USB disconnect, device number 86 [ 277.231260][T10168] binder: BC_ATTEMPT_ACQUIRE not supported [ 277.237512][T10168] binder: 10167:10168 ioctl c0306201 2000000002c0 returned -22 [ 277.643088][ T5917] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 277.647308][T10194] qnx6: unable to read the first superblock [ 277.782876][ T5878] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 277.795894][ T5917] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 277.805044][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.813085][ T5917] usb 2-1: Product: syz [ 277.817249][ T5917] usb 2-1: Manufacturer: syz [ 277.821822][ T5917] usb 2-1: SerialNumber: syz [ 277.828666][ T5917] usb 2-1: config 0 descriptor?? [ 277.835496][ T5917] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 277.902883][ T43] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 277.932878][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 277.939433][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 277.951782][ T5878] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 277.961475][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.970252][ T5878] usb 1-1: Product: syz [ 277.974964][ T5878] usb 1-1: Manufacturer: syz [ 277.979629][ T5878] usb 1-1: SerialNumber: syz [ 277.986010][ T5878] usb 1-1: config 0 descriptor?? [ 277.992784][ T5878] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 278.002118][ T5878] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 278.064373][ T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 278.075344][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.086276][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.096060][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 278.110033][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 278.119452][ T43] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 278.127688][ T43] usb 3-1: Manufacturer: syz [ 278.134581][ T43] usb 3-1: config 0 descriptor?? [ 278.235459][ T5917] gspca_sunplus: reg_w_riv err -71 [ 278.242384][ T5917] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 278.252402][ T5917] usb 2-1: USB disconnect, device number 87 [ 278.402170][ T5874] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 278.404949][ T30] audit: type=1326 audit(1756245338.378:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1383" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6aad78ebe9 code=0x0 [ 278.410930][ T5874] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 278.443130][ T5874] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 278.544663][T10194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.553261][T10194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.563680][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 278.569725][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 278.579215][ T43] usb 3-1: USB disconnect, device number 78 [ 278.595973][ T5878] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 279.279815][ T5878] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 279.294951][ T5878] em28xx 1-1:0.0: board has no eeprom [ 279.301758][ T5874] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 279.303731][T10210] kvm: pic: non byte read [ 279.313509][T10210] kvm: pic: non byte read [ 279.318040][T10210] kvm: pic: non byte read [ 279.322510][T10210] kvm: pic: single mode not supported [ 279.322549][T10210] kvm: pic: non byte read [ 279.332501][T10210] kvm: pic: non byte read [ 279.337266][T10210] kvm: pic: non byte read [ 279.341786][T10210] kvm: pic: non byte read [ 279.346345][T10210] kvm: pic: single mode not supported [ 279.346359][T10210] kvm: pic: level sensitive irq not supported [ 279.351925][T10210] kvm: pic: non byte read [ 279.364203][ T5878] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 279.372293][ T5878] em28xx 1-1:0.0: dvb set to bulk mode. [ 279.379360][ T1210] em28xx 1-1:0.0: Binding DVB extension [ 279.383237][T10210] kvm: pic: non byte read [ 279.395913][ T5878] usb 1-1: USB disconnect, device number 111 [ 279.424365][ T5878] em28xx 1-1:0.0: Disconnecting em28xx [ 279.437765][ T1210] em28xx 1-1:0.0: Registering input extension [ 279.444201][ T5878] em28xx 1-1:0.0: Closing input extension [ 279.456734][ T5878] em28xx 1-1:0.0: Freeing device [ 279.512367][T10220] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 279.518895][T10220] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 279.618296][T10230] /dev/rnullb0: Can't open blockdev [ 279.849913][ T30] audit: type=1800 audit(1756245339.818:58): pid=10245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1399" name="bus" dev="overlay" ino=1979 res=0 errno=0 [ 279.972996][ T43] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 280.132877][ T43] usb 4-1: device descriptor read/64, error -71 [ 280.270249][T10253] syzkaller1: entered promiscuous mode [ 280.276099][T10253] syzkaller1: entered allmulticast mode [ 280.372898][ T43] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 280.507894][ T43] usb 4-1: device descriptor read/64, error -71 [ 280.578341][T10255] /dev/rnullb0: Can't open blockdev [ 280.634245][ T43] usb usb4-port1: attempt power cycle [ 280.688111][ T5874] Bluetooth: hci2: unexpected event for opcode 0x200a [ 280.982890][ T43] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 281.003510][ T43] usb 4-1: device descriptor read/8, error -71 [ 281.057598][T10275] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 281.066240][T10275] /dev/rnullb0: Can't open blockdev [ 281.073117][ T1210] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 281.099604][T10277] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1410'. [ 281.232992][ T1210] usb 3-1: Using ep0 maxpacket: 16 [ 281.239587][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 281.252203][ T1210] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 281.261341][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.269400][ T43] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 281.277081][ T1210] usb 3-1: Product: syz [ 281.281285][ T1210] usb 3-1: Manufacturer: syz [ 281.286136][ T1210] usb 3-1: SerialNumber: syz [ 281.292522][ T1210] usb 3-1: config 0 descriptor?? [ 281.299467][ T1210] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 281.309790][ T1210] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 281.316177][ T43] usb 4-1: device descriptor read/8, error -71 [ 281.344522][T10282] syzkaller1: entered promiscuous mode [ 281.350012][T10282] syzkaller1: entered allmulticast mode [ 281.423954][ T43] usb usb4-port1: unable to enumerate USB device [ 281.826218][T10289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1414'. [ 281.835285][T10289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1414'. [ 281.846426][T10289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1414'. [ 281.855520][T10289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1414'. [ 281.900715][ T1210] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 282.173084][ T43] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 282.179424][T10299] syzkaller1: entered promiscuous mode [ 282.180766][ T30] audit: type=1400 audit(1756245342.148:59): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10296 comm="syz.0.1417" [ 282.205512][T10299] syzkaller1: entered allmulticast mode [ 282.355566][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 282.364723][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.372856][ T43] usb 2-1: Product: syz [ 282.377034][ T43] usb 2-1: Manufacturer: syz [ 282.381618][ T43] usb 2-1: SerialNumber: syz [ 282.575705][ T1210] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 282.583885][ T1210] em28xx 3-1:0.0: board has no eeprom [ 282.642885][ T1210] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 282.650829][ T1210] em28xx 3-1:0.0: dvb set to bulk mode. [ 282.656641][ T5917] em28xx 3-1:0.0: Binding DVB extension [ 282.665461][ T1210] usb 3-1: USB disconnect, device number 79 [ 282.675630][ T1210] em28xx 3-1:0.0: Disconnecting em28xx [ 282.702022][ T5917] em28xx 3-1:0.0: Registering input extension [ 282.708389][ T1210] em28xx 3-1:0.0: Closing input extension [ 282.717202][ T1210] em28xx 3-1:0.0: Freeing device [ 283.153096][ T5917] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 283.242936][ T1210] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 283.302895][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 283.309214][ T5917] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 283.320279][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.329919][ T5917] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 283.339197][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.347627][ T5917] usb 4-1: Product: syz [ 283.351852][ T5917] usb 4-1: Manufacturer: syz [ 283.357259][ T5917] usb 4-1: SerialNumber: syz [ 283.363082][ T5917] usb 4-1: config 0 descriptor?? [ 283.370192][ T5917] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 283.393915][ T43] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 283.405902][ T5878] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 283.413591][ T43] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 283.422924][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 283.429145][ T43] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 283.438179][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.449132][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.460111][ T43] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 283.471850][ T43] usb 2-1: USB disconnect, device number 88 [ 283.477905][ T1210] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 283.489452][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.498976][ T1210] usb 1-1: config 0 descriptor?? [ 283.505987][ T1210] hub 1-1:0.0: USB hub found [ 283.571308][ T5917] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 283.580722][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.591380][ T5917] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 283.601241][ T5878] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 283.611648][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.624664][ T5878] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 283.633771][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.643614][ T5878] usb 3-1: config 0 descriptor?? [ 283.651283][ T5878] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 283.707582][ T1210] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 283.719419][ T1210] usbhid 1-1:0.0: can't add hid device: -71 [ 283.725548][ T1210] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 283.753461][ T1210] usb 1-1: USB disconnect, device number 112 [ 283.772083][ T5878] usb 4-1: USB disconnect, device number 97 [ 284.079694][T10317] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 284.228201][T10323] syzkaller1: entered promiscuous mode [ 284.233870][T10323] syzkaller1: entered allmulticast mode [ 284.472982][ T6056] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 284.556190][T10332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.562919][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 284.565938][T10332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.624413][ T6056] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 284.635196][ T6056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.645492][ T6056] usb 1-1: config 0 descriptor?? [ 284.732874][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 284.740780][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 284.750143][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.758545][ T9] usb 4-1: Product: syz [ 284.763161][ T9] usb 4-1: Manufacturer: syz [ 284.767801][ T9] usb 4-1: SerialNumber: syz [ 284.775801][ T9] usb 4-1: config 0 descriptor?? [ 284.984360][ T9] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 285.053861][ T6056] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 285.064126][ T6056] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 285.075129][ T6056] asix 1-1:0.0: probe with driver asix failed with error -61 [ 285.453154][ T5878] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 285.602980][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 285.610340][ T5878] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 285.618713][ T5878] usb 2-1: config 0 has no interface number 0 [ 285.626670][ T5878] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 285.635815][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.643871][ T5878] usb 2-1: Product: syz [ 285.648066][ T5878] usb 2-1: Manufacturer: syz [ 285.652642][ T5878] usb 2-1: SerialNumber: syz [ 285.658820][ T5878] usb 2-1: config 0 descriptor?? [ 285.866351][T10340] /dev/rnullb0: Can't open blockdev [ 285.874504][ T5878] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.890502][ T5878] usb 2-1: USB disconnect, device number 89 [ 285.921591][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.120008][ T5878] usb 3-1: USB disconnect, device number 80 [ 286.452979][ T5878] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 286.507367][ T5874] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 286.515794][ T30] audit: type=1326 audit(1756245346.488:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.1.1434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9d558ebe9 code=0x0 [ 286.539107][ T5874] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 286.547349][ T5874] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 286.613066][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 286.619517][ T5878] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 286.627822][ T5878] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 286.639154][ T5878] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 286.650685][ T5878] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 286.664058][ T5878] usb 3-1: config 0 interface 0 has no altsetting 0 [ 286.672383][ T5878] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 286.681512][ T5878] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 286.689967][ T5878] usb 3-1: Product: syz [ 286.694191][ T5878] usb 3-1: Manufacturer: syz [ 286.698781][ T5878] usb 3-1: SerialNumber: syz [ 286.704768][ T5878] usb 3-1: config 0 descriptor?? [ 286.711716][ T5878] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 286.721958][ T5878] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 286.848545][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 286.859268][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 286.866094][ T9] usb 4-1: media controller created [ 286.948258][ T9] usb 4-1: dvb_usb_v2: MAC address: 30:af:a8:e8:fa:82 [ 286.968411][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.982082][ T30] audit: type=1326 audit(1756245346.948:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.2.1432" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57abf8ebe9 code=0x0 [ 287.009268][ T9] DVB: Unable to find symbol drxk_attach() [ 287.028723][ T9] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 287.198034][ T9] usb 4-1: USB disconnect, device number 98 [ 287.254141][ T5878] usb 1-1: USB disconnect, device number 113 [ 287.273689][T10366] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1435'. [ 287.492255][ T30] audit: type=1400 audit(1756245347.458:62): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10373 comm="syz.1.1439" [ 287.712889][ T9] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 287.770462][T10381] md: md2 stopped. [ 287.787090][T10381] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 287.799533][T10381] kvm: requested 41066 ns i8254 timer period limited to 200000 ns [ 287.862969][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 287.869699][ T9] usb 1-1: config 6 has an invalid interface number: 192 but max is 0 [ 287.880102][ T9] usb 1-1: config 6 has no interface number 0 [ 287.887430][ T9] usb 1-1: config 6 interface 192 altsetting 9 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 287.900531][ T9] usb 1-1: config 6 interface 192 altsetting 9 endpoint 0x87 has invalid maxpacket 33024, setting to 1024 [ 287.912266][ T9] usb 1-1: config 6 interface 192 altsetting 9 bulk endpoint 0x87 has invalid maxpacket 1024 [ 287.923722][ T9] usb 1-1: config 6 interface 192 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 287.934705][ T9] usb 1-1: config 6 interface 192 altsetting 9 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 287.947910][ T9] usb 1-1: config 6 interface 192 has no altsetting 0 [ 287.956592][ T9] usb 1-1: New USB device found, idVendor=257a, idProduct=260b, bcdDevice=ff.fc [ 287.966209][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.974253][ T9] usb 1-1: Product: 굻褋ꂍ餵￞韞纡허ꮵឍ引ჼᡜ⾠忀㎧ꔹ蟊ଶ用蓚滆⻴뻿䍀 [ 287.986285][ T9] usb 1-1: Manufacturer: 鐠灴ὔ驴虵琟䬄鏀ᨐﰜѫ䢤挗徤줣㩓㜾뉝썣賷螆퇭ཻ静ܫ젓萤糍⛓췣ᝲ≱ᵭᏁ䦢薾贘뤳共敃エኧ୮瓾쯐෮櫆 [ 288.007630][ T9] usb 1-1: SerialNumber: 塾빌뉤乶䎠岃꽟쏢꾭Ἱ鏪྿ྃד귇容㿼େ鷶봩杁⓻➢挀墅㏁髺נ䮅ᱻ쇯ꖲ広㉆떘鸔厾뗟췛崳輈꛾둄꙱㺣뙍ꭇ㺐ᕬ飼姷拔鄗靹薱헥⼺鱽ﴟ䖴⎄礿ꛑᦴࡪ豞੘㴊Ҿꓜ힥你珁淑緤ꋡ轳瀯㒄삢듲㞌젻딾쪴⮜ߚ갫혺殇鵙ퟕ뒘ꫳॼ鑌賘࡫菉떰괫껉佒㞠 [ 288.043193][T10377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.253017][ T5878] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 288.258519][ T9] option 1-1:6.192: GSM modem (1-port) converter detected [ 288.273340][ T9] usb 1-1: USB disconnect, device number 114 [ 288.283429][ T9] option 1-1:6.192: device disconnected [ 288.392955][ T5878] usb 4-1: device descriptor read/64, error -71 [ 288.542887][ T24] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 288.592909][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 288.633482][ T5878] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 288.694131][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 288.703385][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.712516][ T24] usb 2-1: config 0 descriptor?? [ 288.773018][ T5878] usb 4-1: device descriptor read/64, error -71 [ 288.797015][ T30] audit: type=1326 audit(1756245348.768:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.0.1445" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5a7b8ebe9 code=0x0 [ 288.883218][ T5878] usb usb4-port1: attempt power cycle [ 288.921343][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 288.932296][ T24] asix 2-1:0.0: probe with driver asix failed with error -32 [ 289.160309][ T9] usb 3-1: USB disconnect, device number 81 [ 289.169046][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 289.222929][ T5878] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 289.252978][ T5878] usb 4-1: device descriptor read/8, error -71 [ 289.275846][T10398] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1447'. [ 289.502945][ T5878] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 289.523461][ T5878] usb 4-1: device descriptor read/8, error -71 [ 289.642972][ T24] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 289.650688][ T5878] usb usb4-port1: unable to enumerate USB device [ 289.746955][T10407] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 289.824309][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.835922][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 289.845062][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 289.855139][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.867324][ T24] usb 3-1: config 0 descriptor?? [ 289.874950][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 289.883923][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 289.897749][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 289.908283][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 289.916752][ T24] usb 3-1: media controller created [ 289.923726][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.937979][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 289.944042][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 289.952364][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 289.965500][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 289.972454][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 290.036073][ T30] audit: type=1400 audit(1756245350.008:64): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10410 comm="syz.0.1452" [ 290.036412][T10415] syzkaller1: entered promiscuous mode [ 290.060579][T10415] syzkaller1: entered allmulticast mode [ 290.123020][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 290.129907][ T24] dvb-usb: error while querying for an remote control event. [ 290.148027][ T9] usb 3-1: USB disconnect, device number 82 [ 290.162244][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 290.777573][T10422] FAULT_INJECTION: forcing a failure. [ 290.777573][T10422] name failslab, interval 1, probability 0, space 0, times 0 [ 290.790465][T10422] CPU: 0 UID: 0 PID: 10422 Comm: syz.2.1454 Not tainted syzkaller #0 PREEMPT(full) [ 290.790489][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.790500][T10422] Call Trace: [ 290.790506][T10422] [ 290.790514][T10422] dump_stack_lvl+0x189/0x250 [ 290.790539][T10422] ? __pfx____ratelimit+0x10/0x10 [ 290.790557][T10422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.790577][T10422] ? __pfx__printk+0x10/0x10 [ 290.790599][T10422] ? __pfx___might_resched+0x10/0x10 [ 290.790629][T10422] ? lock_acquire+0x5f/0x360 [ 290.790647][T10422] should_fail_ex+0x414/0x560 [ 290.790669][T10422] should_failslab+0xa8/0x100 [ 290.790685][T10422] kmem_cache_alloc_node_noprof+0x76/0x390 [ 290.790706][T10422] ? __alloc_skb+0x112/0x2d0 [ 290.790726][T10422] __alloc_skb+0x112/0x2d0 [ 290.790744][T10422] alloc_skb_with_frags+0xca/0x890 [ 290.790765][T10422] ? is_bpf_text_address+0x26/0x2b0 [ 290.790781][T10422] ? kernel_text_address+0xa5/0xe0 [ 290.790801][T10422] ? __kernel_text_address+0xd/0x40 [ 290.790821][T10422] ? unwind_get_return_address+0x4d/0x90 [ 290.790840][T10422] virtio_transport_alloc_skb+0xf2/0x1120 [ 290.790864][T10422] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 290.790886][T10422] virtio_transport_send_pkt_info+0x617/0xf00 [ 290.790902][T10422] ? kmem_cache_free+0x309/0x400 [ 290.790928][T10422] virtio_transport_release+0x28f/0x7e0 [ 290.790947][T10422] ? __pfx_virtio_transport_release+0x10/0x10 [ 290.790963][T10422] ? __vsock_release+0x2c/0x520 [ 290.790979][T10422] ? __local_bh_enable_ip+0x12d/0x1c0 [ 290.790997][T10422] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 290.791018][T10422] __vsock_release+0x9c/0x520 [ 290.791037][T10422] __vsock_release+0x376/0x520 [ 290.791055][T10422] vsock_release+0x99/0x100 [ 290.791073][T10422] sock_close+0xc0/0x240 [ 290.791090][T10422] ? __pfx_sock_close+0x10/0x10 [ 290.791103][T10422] __fput+0x449/0xa70 [ 290.791126][T10422] task_work_run+0x1d4/0x260 [ 290.791149][T10422] ? __pfx_task_work_run+0x10/0x10 [ 290.791170][T10422] ? rcu_is_watching+0x15/0xb0 [ 290.791188][T10422] exit_to_user_mode_loop+0xec/0x130 [ 290.791202][T10422] do_syscall_64+0x2bd/0xfa0 [ 290.791222][T10422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.791237][T10422] ? clear_bhb_loop+0x60/0xb0 [ 290.791254][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.791270][T10422] RIP: 0033:0x7f57abf8ebe9 [ 290.791285][T10422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.791300][T10422] RSP: 002b:00007f57acdca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 290.791318][T10422] RAX: 0000000000000000 RBX: 00007f57ac1b5fa0 RCX: 00007f57abf8ebe9 [ 290.791329][T10422] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 290.791338][T10422] RBP: 00007f57acdca090 R08: 0000000000000000 R09: 0000000000000000 [ 290.791348][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.791357][T10422] R13: 00007f57ac1b6038 R14: 00007f57ac1b5fa0 R15: 00007ffdcd7e2a78 [ 290.791374][T10422] [ 291.105846][ T5873] Bluetooth: hci0: command 0x0406 tx timeout [ 291.142088][T10427] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1456'. [ 291.170564][T10429] binder: 10428:10429 ioctl c0306201 200000000080 returned -14 [ 291.298483][T10434] FAULT_INJECTION: forcing a failure. [ 291.298483][T10434] name failslab, interval 1, probability 0, space 0, times 0 [ 291.311288][T10434] CPU: 0 UID: 0 PID: 10434 Comm: syz.0.1458 Not tainted syzkaller #0 PREEMPT(full) [ 291.311309][T10434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.311318][T10434] Call Trace: [ 291.311324][T10434] [ 291.311331][T10434] dump_stack_lvl+0x189/0x250 [ 291.311358][T10434] ? __pfx____ratelimit+0x10/0x10 [ 291.311378][T10434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.311398][T10434] ? __pfx__printk+0x10/0x10 [ 291.311416][T10434] ? rcu_is_watching+0x15/0xb0 [ 291.311435][T10434] ? __pfx___might_resched+0x10/0x10 [ 291.311452][T10434] ? lock_acquire+0x5f/0x360 [ 291.311468][T10434] should_fail_ex+0x414/0x560 [ 291.311489][T10434] should_failslab+0xa8/0x100 [ 291.311506][T10434] __kmalloc_noprof+0xcb/0x4b0 [ 291.311528][T10434] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 291.311548][T10434] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 291.311566][T10434] genl_family_rcv_msg_doit+0xb8/0x300 [ 291.311595][T10434] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 291.311614][T10434] ? apparmor_capable+0x137/0x1b0 [ 291.311631][T10434] ? bpf_lsm_capable+0x9/0x20 [ 291.311646][T10434] ? security_capable+0x7e/0x2e0 [ 291.311666][T10434] genl_rcv_msg+0x60e/0x790 [ 291.311684][T10434] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.311698][T10434] ? __pfx_seg6_genl_sethmac+0x10/0x10 [ 291.311721][T10434] ? __asan_memcpy+0x40/0x70 [ 291.311739][T10434] ? __pfx_ref_tracker_free+0x10/0x10 [ 291.311759][T10434] ? __skb_clone+0x63/0x7a0 [ 291.311782][T10434] netlink_rcv_skb+0x205/0x470 [ 291.311802][T10434] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.311818][T10434] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.311841][T10434] ? lock_release+0x4b/0x3e0 [ 291.311857][T10434] ? down_read+0x1ad/0x2e0 [ 291.311871][T10434] genl_rcv+0x28/0x40 [ 291.311884][T10434] netlink_unicast+0x82f/0x9e0 [ 291.311904][T10434] ? __pfx_netlink_unicast+0x10/0x10 [ 291.311922][T10434] ? netlink_sendmsg+0x642/0xb30 [ 291.311940][T10434] ? skb_put+0x11b/0x210 [ 291.311961][T10434] netlink_sendmsg+0x805/0xb30 [ 291.311984][T10434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.312003][T10434] ? aa_sock_msg_perm+0xf1/0x1d0 [ 291.312023][T10434] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.312041][T10434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.312060][T10434] __sock_sendmsg+0x21c/0x270 [ 291.312078][T10434] ____sys_sendmsg+0x505/0x830 [ 291.312101][T10434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.312126][T10434] ? import_iovec+0x74/0xa0 [ 291.312144][T10434] ___sys_sendmsg+0x21f/0x2a0 [ 291.312164][T10434] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.312197][T10434] ? __fget_files+0x2a/0x420 [ 291.312214][T10434] ? __fget_files+0x3a0/0x420 [ 291.312234][T10434] __x64_sys_sendmsg+0x19b/0x260 [ 291.312257][T10434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.312282][T10434] ? __pfx_ksys_write+0x10/0x10 [ 291.312299][T10434] ? rcu_is_watching+0x15/0xb0 [ 291.312317][T10434] do_syscall_64+0xfa/0xfa0 [ 291.312337][T10434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.312353][T10434] ? clear_bhb_loop+0x60/0xb0 [ 291.312370][T10434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.312385][T10434] RIP: 0033:0x7fb5a7b8ebe9 [ 291.312400][T10434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.312415][T10434] RSP: 002b:00007fb5a893b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.312432][T10434] RAX: ffffffffffffffda RBX: 00007fb5a7db5fa0 RCX: 00007fb5a7b8ebe9 [ 291.312445][T10434] RDX: 0000000000004000 RSI: 0000200000004440 RDI: 0000000000000003 [ 291.312456][T10434] RBP: 00007fb5a893b090 R08: 0000000000000000 R09: 0000000000000000 [ 291.312468][T10434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.312478][T10434] R13: 00007fb5a7db6038 R14: 00007fb5a7db5fa0 R15: 00007ffe56e0cb08 [ 291.312497][T10434] [ 291.725333][ T9] usb 2-1: USB disconnect, device number 90 [ 292.253923][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 292.412897][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 292.419320][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.430399][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.440345][ T6056] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 292.448062][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 292.457256][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.466655][ T9] usb 2-1: config 0 descriptor?? [ 292.475876][ T9] hub 2-1:0.0: USB hub found [ 292.622865][ T6056] usb 1-1: Using ep0 maxpacket: 8 [ 292.629724][ T6056] usb 1-1: unable to get BOS descriptor or descriptor too short [ 292.638268][ T6056] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 292.646407][ T6056] usb 1-1: config 4 has no interface number 0 [ 292.652539][ T6056] usb 1-1: config 4 interface 30 has no altsetting 0 [ 292.661754][ T6056] usb 1-1: string descriptor 0 read error: -22 [ 292.668019][ T6056] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 292.677778][ T6056] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.688707][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 292.701689][ T6056] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 292.708997][ T6056] dw2102: su3000_power_ctrl: 1, initialized 0 [ 292.716471][ T6056] dvb-usb: bulk message failed: -22 (2/0) [ 292.723170][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 292.729117][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 292.738671][ T6056] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.749114][ T6056] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 292.756797][ T6056] usb 1-1: media controller created [ 292.762042][ T6056] dvb-usb: bulk message failed: -22 (6/0) [ 292.768506][ T9] usb 2-1: USB disconnect, device number 91 [ 292.775691][ T6056] dw2102: i2c transfer failed. [ 292.782634][ T6056] dvb-usb: bulk message failed: -22 (6/0) [ 292.788580][ T6056] dw2102: i2c transfer failed. [ 292.793395][ T6056] dvb-usb: bulk message failed: -22 (6/0) [ 292.799119][ T6056] dw2102: i2c transfer failed. [ 292.803923][ T6056] dvb-usb: bulk message failed: -22 (6/0) [ 292.809654][ T6056] dw2102: i2c transfer failed. [ 292.814634][ T6056] dvb-usb: bulk message failed: -22 (6/0) [ 292.820364][ T6056] dw2102: i2c transfer failed. [ 292.825220][ T6056] dvb-usb: bulk message failed: -22 (6/0) [ 292.830944][ T6056] dw2102: i2c transfer failed. [ 292.835825][ T6056] dvb-usb: MAC address: 02:02:02:02:02:02 [ 292.852059][ T6056] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.872557][ T6056] dvb-usb: bulk message failed: -22 (3/0) [ 292.878396][ T6056] dw2102: command 0x0e transfer failed. [ 292.885040][ T6056] dvb-usb: bulk message failed: -22 (3/0) [ 292.890805][ T6056] dw2102: command 0x0e transfer failed. [ 293.012262][T10463] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1469'. [ 293.206367][ T6056] dvb-usb: bulk message failed: -22 (3/0) [ 293.221467][ T6056] dw2102: command 0x0e transfer failed. [ 293.231872][ T6056] dvb-usb: bulk message failed: -22 (3/0) [ 293.241049][ T6056] dw2102: command 0x0e transfer failed. [ 293.244296][T10471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1472'. [ 293.247187][ T6056] dvb-usb: bulk message failed: -22 (1/0) [ 293.265699][ T6056] dw2102: command 0x51 transfer failed. [ 293.271280][ T6056] dvb-usb: bulk message failed: -22 (5/0) [ 293.277651][ T6056] dw2102: i2c probe for address 0x68 failed. [ 293.287054][ T6056] dvb-usb: bulk message failed: -22 (5/0) [ 293.305364][ T6056] dw2102: i2c probe for address 0x69 failed. [ 293.311457][ T6056] dvb-usb: bulk message failed: -22 (5/0) [ 293.317268][ T6056] dw2102: i2c probe for address 0x6a failed. [ 293.323277][ T6056] dw2102: probing for demodulator failed. Is the external power switched on? [ 293.328263][T10453] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 293.332122][ T6056] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 293.344420][T10453] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 293.344446][T10453] CPU: 1 UID: 0 PID: 10453 Comm: syz.0.1465 Not tainted syzkaller #0 PREEMPT(full) [ 293.344465][T10453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.344477][T10453] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 293.344504][T10453] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 0d 60 32 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 293.344520][T10453] RSP: 0018:ffffc90004ce7a88 EFLAGS: 00010202 [ 293.344534][T10453] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 293.344546][T10453] RDX: ffffffff87f21855 RSI: ffffffff8f4ecdb0 RDI: 0000000000001900 [ 293.344559][T10453] RBP: 0000000000000000 R08: ffff88802da0da00 R09: 0000000000000002 [ 293.344571][T10453] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 293.344582][T10453] R13: 1ffff11008741f44 R14: 0000000000000001 R15: ffff888043a0fa28 [ 293.344592][T10453] FS: 00007fb5a893b6c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 293.344606][T10453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.344617][T10453] CR2: 00007fb9d5572020 CR3: 00000000374d6000 CR4: 00000000003526f0 [ 293.344633][T10453] DR0: 0000000000000000 DR1: 000000003d22dc30 DR2: 0000000000000000 [ 293.403063][ T6056] rc_core: IR keymap rc-tt-1500 not found [ 293.405451][T10453] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 293.405469][T10453] Call Trace: [ 293.405477][T10453] [ 293.411574][ T6056] Registered IR keymap rc-empty [ 293.419484][T10453] ? i2cdev_ioctl+0x64b/0x7f0 [ 293.419511][T10453] __i2c_transfer+0x871/0x2170 [ 293.419536][T10453] ? __pfx___i2c_transfer+0x10/0x10 [ 293.419555][T10453] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 293.429867][ T6056] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 293.435984][T10453] ? i2c_transfer+0x120/0x3a0 [ 293.436011][T10453] i2c_transfer+0x25b/0x3a0 [ 293.436029][T10453] ? lock_release+0x4b/0x3e0 [ 293.436047][T10453] ? __pfx_i2c_transfer+0x10/0x10 [ 293.446068][ T6056] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input46 [ 293.452385][T10453] ? __might_fault+0xcc/0x130 [ 293.452416][T10453] ? _copy_from_user+0x94/0xb0 [ 293.474787][ T6056] dvb-usb: schedule remote query interval to 250 msecs. [ 293.475854][T10453] i2cdev_ioctl_rdwr+0x460/0x740 [ 293.587001][T10453] i2cdev_ioctl+0x64b/0x7f0 [ 293.591509][T10453] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 293.596521][T10453] ? __fget_files+0x3a0/0x420 [ 293.601181][T10453] ? __fget_files+0x2a/0x420 [ 293.605755][T10453] ? bpf_lsm_file_ioctl+0x9/0x20 [ 293.610686][T10453] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 293.615694][T10453] __se_sys_ioctl+0xf9/0x170 [ 293.620284][T10453] do_syscall_64+0xfa/0xfa0 [ 293.624773][T10453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.630840][T10453] ? clear_bhb_loop+0x60/0xb0 [ 293.635500][T10453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.641375][T10453] RIP: 0033:0x7fb5a7b8ebe9 [ 293.645771][T10453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.665532][T10453] RSP: 002b:00007fb5a893b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.674018][T10453] RAX: ffffffffffffffda RBX: 00007fb5a7db5fa0 RCX: 00007fb5a7b8ebe9 [ 293.681973][T10453] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 293.689928][T10453] RBP: 00007fb5a7c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 293.697904][T10453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.705861][T10453] R13: 00007fb5a7db6038 R14: 00007fb5a7db5fa0 R15: 00007ffe56e0cb08 [ 293.713824][T10453] [ 293.716826][T10453] Modules linked in: [ 293.721738][T10453] ---[ end trace 0000000000000000 ]--- [ 293.728974][ T6056] dw2102: su3000_power_ctrl: 0, initialized 1 [ 293.731343][T10453] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 293.735099][ T6056] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 293.741312][T10453] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 0d 60 32 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 293.769701][T10453] RSP: 0018:ffffc90004ce7a88 EFLAGS: 00010202 [ 293.776126][T10453] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 293.784168][T10453] RDX: ffffffff87f21855 RSI: ffffffff8f4ecdb0 RDI: 0000000000001900 [ 293.792147][T10453] RBP: 0000000000000000 R08: ffff88802da0da00 R09: 0000000000000002 [ 293.802204][T10453] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 293.810248][T10453] R13: 1ffff11008741f44 R14: 0000000000000001 R15: ffff888043a0fa28 [ 293.818279][T10453] FS: 00007fb5a893b6c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 293.827309][T10453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.835772][T10453] CR2: 00007fb9d5572020 CR3: 00000000374d6000 CR4: 00000000003526f0 [ 293.844644][T10453] DR0: 0000000000000000 DR1: 000000003d22dc30 DR2: 0000000000000000 [ 293.852654][T10453] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 293.862076][ T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 293.868465][T10453] Kernel panic - not syncing: Fatal exception [ 293.869913][T10453] Kernel Offset: disabled