last executing test programs: 24m20.242917956s ago: executing program 1 (id=1524): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 24m17.163110446s ago: executing program 1 (id=1536): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 24m14.801493501s ago: executing program 1 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b000000", @ANYRES32=r2, @ANYBLOB="6d00330080000800ffffffffffff080211"], 0x8c}, 0x1, 0x0, 0x0, 0x94}, 0x0) 24m14.627186772s ago: executing program 1 (id=1551): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000500)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0x0) 24m14.614526091s ago: executing program 1 (id=1552): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="2047a8"], 0x0, 0x0}) 24m14.111251718s ago: executing program 1 (id=1556): mkdirat(0xffffffffffffff9c, 0x0, 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) fspick(r1, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0x9362, 0x0) 24m13.871051655s ago: executing program 32 (id=1556): mkdirat(0xffffffffffffff9c, 0x0, 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) fspick(r1, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0x9362, 0x0) 21m36.359320403s ago: executing program 2 (id=2431): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x468, &(0x7f0000001300)={[{0x461, 0x4e00, "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"}]}) 21m34.699165483s ago: executing program 2 (id=2439): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df03db0d78c28fc030a88d5060290aa8ecf81ec62b2a6452d5524e4d5b", 0x7f}, {&(0x7f00000000c0)="dab21893738567132a3dc52e13cbf9032ed4", 0x12}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb16c3c64ebcecade0b529986f4cfbcfa9c1c7138091b2ba9da4c7af757ac4d7990bfb36460a2eaaa3b786e6a14e457460793e0fdd4bdc6ef20050bc1ae8a5de6e0f84a007c740a9d6f1169a9b196652b0ee", 0x8a}], 0x3}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 21m34.638125142s ago: executing program 2 (id=2441): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x62) syz_open_dev$swradio(0x0, 0x0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21m34.532075581s ago: executing program 2 (id=2443): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000802"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21m31.343333381s ago: executing program 2 (id=2461): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) 21m31.110991905s ago: executing program 2 (id=2465): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21m15.909314018s ago: executing program 33 (id=2465): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21m2.049929467s ago: executing program 5 (id=2580): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x62) syz_open_dev$swradio(0x0, 0x0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67) 21m1.806683728s ago: executing program 5 (id=2583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) set_mempolicy(0x4000, &(0x7f0000000080)=0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x10004e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, &(0x7f0000000200)=0x4e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x1f0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x8) 21m0.754696487s ago: executing program 5 (id=2586): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) 21m0.634111156s ago: executing program 5 (id=2588): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x62) syz_open_dev$swradio(0x0, 0x0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) 21m0.394530074s ago: executing program 5 (id=2591): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 20m59.407269882s ago: executing program 5 (id=2595): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000010000000000000000000000000000000000400"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 20m43.725099298s ago: executing program 34 (id=2595): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000010000000000000000000000000000000000400"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.987239639s ago: executing program 3 (id=11272): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) 4.722320909s ago: executing program 3 (id=11277): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0xe}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0xa, 0x7, 0x2, 0x2, 0x0, 0x70bd26, 0x25dfdbff}, 0x10}}, 0x4) 3.861459238s ago: executing program 3 (id=11280): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x8, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x2, "dbc79ef4"}, @local=@item_4={0x3, 0x2, 0xa, '\a\x00'}, @global]}}, 0x0}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 3.611114217s ago: executing program 4 (id=11285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 3.474843631s ago: executing program 4 (id=11288): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.259048666s ago: executing program 4 (id=11291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b8608000340000047510800034000000003080001"], 0xdc}, 0x1, 0x0, 0x0, 0x48810}, 0x4008000) 3.164322429s ago: executing program 4 (id=11292): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000802"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) rmdir(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) umount2(0x0, 0x2) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.093560724s ago: executing program 3 (id=11306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r1, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 1.938830022s ago: executing program 3 (id=11309): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)) 1.783139635s ago: executing program 3 (id=11311): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x200201, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x5423, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002480), 0x0, 0x80400) 1.058088662s ago: executing program 0 (id=11318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/204, 0xcc, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xd2}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 847.240214ms ago: executing program 0 (id=11320): r0 = syz_open_dev$loop(&(0x7f0000001400), 0x6, 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001500)={0x2, 0x0, 0x98, &(0x7f0000001440)={0x5, 0x38000000000000, 0xa}}) 786.821809ms ago: executing program 0 (id=11321): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000440)={0xa0, 0x0, 0x0, {{0x2, 0x1, 0x5, 0x7, 0x2, 0x5, {0x2, 0x9, 0x0, 0xfff, 0x2, 0x0, 0xffff8001, 0x0, 0x6, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x3}}, {0x0, 0x2}}}, 0xa0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) 487.248168ms ago: executing program 0 (id=11323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 401.640616ms ago: executing program 0 (id=11325): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000280)=@xdp={0x2c, 0x8, r2, 0x7}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="47c0616363680e9e65e93891001f3569238e9690a29f0c2df5bf751bfda06231f4b3e767aa92a45349e5777815a5b14a36ed822a", 0x34}], 0x1, &(0x7f0000000f40)=[{0x10, 0x115, 0xc}, {0x10, 0x10f, 0x40}], 0x20}, 0x4000001) 361.191741ms ago: executing program 6 (id=11326): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x5b) sendfile(r0, r1, &(0x7f0000000000), 0x9) 275.295369ms ago: executing program 0 (id=11327): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000002100)="8f556edd5ffa77bc2fcf6e0b328dc3a926b3d275d2995671", 0x0, 0x18) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) 275.150722ms ago: executing program 6 (id=11328): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xb10, 0x101900) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x28, 0x1, 0x1, 0x2, "2188d7e188ead0c951391a18cc18bc4ea32e9b220800"}) 204.632211ms ago: executing program 4 (id=11329): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x2, 0x2}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000080)="eda6c80ff3fe1cf30c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) 181.482059ms ago: executing program 6 (id=11330): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) read$FUSE(r2, 0x0, 0x0) 71.188312ms ago: executing program 4 (id=11331): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x20, 0x3, 0x32, "4071bbcf977d9f2c059f2c334b7fdec3321fba33b3abd994fc49e93d9f225860e2ab21032f89dbcf4b219c3d2ee6d3d6399a"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000002c0)={0x21, 0x0, 0x3, "a38477"}}) 71.038388ms ago: executing program 6 (id=11332): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x48001) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x8, 0x2, 0xc000, 0x6, 'syz0\x00', 0xfffffffa}) 39.126145ms ago: executing program 6 (id=11333): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa7aa1ce", 0x8, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) read(r0, &(0x7f0000001400)=""/4046, 0xffd8) 0s ago: executing program 6 (id=11334): open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x48) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x1}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x108}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) kernel console output (not intermixed with test programs): T24] m920x_read = error: -19 [ 1692.708273][ T24] dvb-usb: error while querying for an remote control event. [ 1692.823819][T20605] m920x_read = error: -19 [ 1692.828783][T20605] dvb-usb: error while querying for an remote control event. [ 1692.841094][ T8304] FAULT_INJECTION: forcing a failure. [ 1692.841094][ T8304] name failslab, interval 1, probability 0, space 0, times 0 [ 1692.854141][ T8304] CPU: 1 UID: 0 PID: 8304 Comm: syz.3.10961 Not tainted syzkaller #0 PREEMPT(full) [ 1692.854169][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1692.854181][ T8304] Call Trace: [ 1692.854190][ T8304] [ 1692.854199][ T8304] dump_stack_lvl+0x189/0x250 [ 1692.854233][ T8304] ? __pfx____ratelimit+0x10/0x10 [ 1692.854257][ T8304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1692.854284][ T8304] ? __pfx__printk+0x10/0x10 [ 1692.854315][ T8304] ? __pfx___might_resched+0x10/0x10 [ 1692.854337][ T8304] ? fs_reclaim_acquire+0x7d/0x100 [ 1692.854364][ T8304] should_fail_ex+0x414/0x560 [ 1692.854391][ T8304] should_failslab+0xa8/0x100 [ 1692.854416][ T8304] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1692.854435][ T8304] ? ksys_write+0x22a/0x250 [ 1692.854453][ T8304] ? getname_flags+0xb8/0x540 [ 1692.854484][ T8304] getname_flags+0xb8/0x540 [ 1692.854514][ T8304] __x64_sys_link+0x5d/0x90 [ 1692.854536][ T8304] do_syscall_64+0xfa/0xfa0 [ 1692.854559][ T8304] ? lockdep_hardirqs_on+0x9c/0x150 [ 1692.854584][ T8304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.854602][ T8304] ? clear_bhb_loop+0x60/0xb0 [ 1692.854624][ T8304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.854642][ T8304] RIP: 0033:0x7fe60458ebe9 [ 1692.854660][ T8304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1692.854677][ T8304] RSP: 002b:00007fe605354038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 1692.854697][ T8304] RAX: ffffffffffffffda RBX: 00007fe6047c6090 RCX: 00007fe60458ebe9 [ 1692.854711][ T8304] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 1692.854724][ T8304] RBP: 00007fe605354090 R08: 0000000000000000 R09: 0000000000000000 [ 1692.854736][ T8304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1692.854747][ T8304] R13: 00007fe6047c6128 R14: 00007fe6047c6090 R15: 00007ffd8ff6dc88 [ 1692.854779][ T8304] [ 1692.924011][ T7839] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1692.962052][T20605] m920x_read = error: -19 [ 1693.072780][T20605] dvb-usb: error while querying for an remote control event. [ 1693.103760][ T7839] usb 5-1: Using ep0 maxpacket: 16 [ 1693.110814][ T7839] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 1693.119788][ T7839] usb 5-1: config 0 has no interface number 0 [ 1693.135113][ T7839] usb 5-1: config 0 interface 58 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1693.149124][ T7839] usb 5-1: config 0 interface 58 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1693.161059][ T7839] usb 5-1: config 0 interface 58 has no altsetting 0 [ 1693.171754][ T7839] usb 5-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03 [ 1693.182398][ T7839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.183892][T20605] m920x_read = error: -19 [ 1693.196718][T20605] dvb-usb: error while querying for an remote control event. [ 1693.213764][ T7839] usb 5-1: Product: syz [ 1693.217996][ T7839] usb 5-1: Manufacturer: syz [ 1693.229834][ T7839] usb 5-1: SerialNumber: syz [ 1693.238987][ T7839] usb 5-1: config 0 descriptor?? [ 1693.245127][ T8297] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1693.252653][ T8297] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1693.265180][ T7839] ums-isd200 5-1:0.58: USB Mass Storage device detected [ 1693.313768][T20605] m920x_read = error: -19 [ 1693.318186][T20605] dvb-usb: error while querying for an remote control event. [ 1693.433604][T20605] m920x_read = error: -19 [ 1693.441612][T20605] dvb-usb: error while querying for an remote control event. [ 1693.467847][ T7839] scsi host1: usb-storage 5-1:0.58 [ 1693.482587][ T7839] usb 5-1: USB disconnect, device number 6 [ 1693.553711][T20605] m920x_read = error: -19 [ 1693.561702][T20605] dvb-usb: error while querying for an remote control event. [ 1693.683735][ T24] m920x_read = error: -19 [ 1693.688401][ T24] dvb-usb: error while querying for an remote control event. [ 1693.803809][ T24] m920x_read = error: -19 [ 1693.808239][ T24] dvb-usb: error while querying for an remote control event. [ 1693.824060][T20605] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1693.923620][ T24] m920x_read = error: -19 [ 1693.928024][ T24] dvb-usb: error while querying for an remote control event. [ 1693.986609][T20605] usb 7-1: Using ep0 maxpacket: 32 [ 1694.010333][T20605] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1694.032330][T20605] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1694.046148][ T24] m920x_read = error: -19 [ 1694.050563][ T24] dvb-usb: error while querying for an remote control event. [ 1694.060661][T20605] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1694.080676][T20605] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1694.089056][T20605] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1694.099846][T20605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.140305][T20605] usb 7-1: config 0 descriptor?? [ 1694.183620][ T24] m920x_read = error: -19 [ 1694.188574][ T24] dvb-usb: error while querying for an remote control event. [ 1694.305704][ T24] m920x_read = error: -19 [ 1694.320506][ T24] dvb-usb: error while querying for an remote control event. [ 1694.358017][T20605] usbhid 7-1:0.0: can't add hid device: -71 [ 1694.372795][T20605] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1694.393976][T20605] usb 7-1: USB disconnect, device number 62 [ 1694.443589][ T24] m920x_read = error: -19 [ 1694.448088][ T24] dvb-usb: error while querying for an remote control event. [ 1694.456438][ T8341] md2: using deprecated bitmap file support [ 1694.462989][ T8341] md2: error: failed to get bitmap file [ 1694.564362][ T323] m920x_read = error: -19 [ 1694.568866][ T323] dvb-usb: error while querying for an remote control event. [ 1694.670160][ T8349] netlink: 'syz.3.10975': attribute type 10 has an invalid length. [ 1694.687799][ T8349] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1694.696527][ T5911] m920x_read = error: -19 [ 1694.700927][ T5911] dvb-usb: error while querying for an remote control event. [ 1694.742402][ T8354] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1694.766797][ T8354] block device autoloading is deprecated and will be removed. [ 1694.780043][ T8353] FAULT_INJECTION: forcing a failure. [ 1694.780043][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.793400][ T8353] CPU: 1 UID: 0 PID: 8353 Comm: syz.4.10978 Not tainted syzkaller #0 PREEMPT(full) [ 1694.793436][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1694.793448][ T8353] Call Trace: [ 1694.793456][ T8353] [ 1694.793464][ T8353] dump_stack_lvl+0x189/0x250 [ 1694.793497][ T8353] ? __pfx____ratelimit+0x10/0x10 [ 1694.793524][ T8353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1694.793552][ T8353] ? __pfx__printk+0x10/0x10 [ 1694.793586][ T8353] ? __pfx___might_resched+0x10/0x10 [ 1694.793614][ T8353] should_fail_ex+0x414/0x560 [ 1694.793641][ T8353] should_failslab+0xa8/0x100 [ 1694.793665][ T8353] __kmalloc_noprof+0xcb/0x7f0 [ 1694.793683][ T8353] ? kfree+0x4d/0x6d0 [ 1694.793696][ T8353] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1694.793729][ T8353] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1694.793756][ T8353] ? tomoyo_domain+0xd9/0x130 [ 1694.793779][ T8353] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1694.793801][ T8353] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1694.793827][ T8353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1694.793894][ T8353] ? __fget_files+0x2a/0x420 [ 1694.793925][ T8353] ? __fget_files+0x3a0/0x420 [ 1694.793948][ T8353] ? __fget_files+0x2a/0x420 [ 1694.793975][ T8353] security_file_ioctl+0xcb/0x2d0 [ 1694.793999][ T8353] __se_sys_ioctl+0x47/0x170 [ 1694.794022][ T8353] do_syscall_64+0xfa/0xfa0 [ 1694.794047][ T8353] ? lockdep_hardirqs_on+0x9c/0x150 [ 1694.794071][ T8353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.794089][ T8353] ? clear_bhb_loop+0x60/0xb0 [ 1694.794113][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.794130][ T8353] RIP: 0033:0x7f889cb8ebe9 [ 1694.794148][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1694.794163][ T8353] RSP: 002b:00007f889d9a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1694.794184][ T8353] RAX: ffffffffffffffda RBX: 00007f889cdc5fa0 RCX: 00007f889cb8ebe9 [ 1694.794198][ T8353] RDX: 0000000000000007 RSI: 000000004004092b RDI: 0000000000000004 [ 1694.794210][ T8353] RBP: 00007f889d9a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.794220][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1694.794232][ T8353] R13: 00007f889cdc6038 R14: 00007f889cdc5fa0 R15: 00007ffc3df173a8 [ 1694.794275][ T8353] [ 1695.026804][ T5911] m920x_read = error: -19 [ 1695.031313][ T5911] dvb-usb: error while querying for an remote control event. [ 1695.067928][ T8353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1695.113770][ T8353] md2: using deprecated bitmap file support [ 1695.119832][ T8353] md2: error: failed to get bitmap file [ 1695.143930][ T323] m920x_read = error: -19 [ 1695.148344][ T323] dvb-usb: error while querying for an remote control event. [ 1695.199795][ T8361] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1695.214142][ T8361] block device autoloading is deprecated and will be removed. [ 1695.263790][ T323] m920x_read = error: -19 [ 1695.268206][ T323] dvb-usb: error while querying for an remote control event. [ 1695.282744][ T8360] md: md2 stopped. [ 1695.383685][ T323] m920x_read = error: -19 [ 1695.388107][ T323] dvb-usb: error while querying for an remote control event. [ 1695.514126][ T323] m920x_read = error: -19 [ 1695.518550][ T323] dvb-usb: error while querying for an remote control event. [ 1695.635224][ T323] m920x_read = error: -19 [ 1695.639669][ T323] dvb-usb: error while querying for an remote control event. [ 1695.658732][ T8375] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1695.671103][ T8375] block device autoloading is deprecated and will be removed. [ 1695.679587][ T8374] FAULT_INJECTION: forcing a failure. [ 1695.679587][ T8374] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.696560][ T8374] CPU: 0 UID: 0 PID: 8374 Comm: syz.4.10984 Not tainted syzkaller #0 PREEMPT(full) [ 1695.696590][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1695.696602][ T8374] Call Trace: [ 1695.696611][ T8374] [ 1695.696620][ T8374] dump_stack_lvl+0x189/0x250 [ 1695.696665][ T8374] ? __pfx____ratelimit+0x10/0x10 [ 1695.696692][ T8374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1695.696721][ T8374] ? __pfx__printk+0x10/0x10 [ 1695.696755][ T8374] ? __pfx___might_resched+0x10/0x10 [ 1695.696784][ T8374] should_fail_ex+0x414/0x560 [ 1695.696813][ T8374] should_failslab+0xa8/0x100 [ 1695.696839][ T8374] __kmalloc_noprof+0xcb/0x7f0 [ 1695.696856][ T8374] ? kfree+0x4d/0x6d0 [ 1695.696871][ T8374] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1695.696908][ T8374] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1695.696938][ T8374] ? tomoyo_domain+0xd9/0x130 [ 1695.696972][ T8374] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1695.696996][ T8374] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1695.697024][ T8374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1695.697091][ T8374] ? __fget_files+0x2a/0x420 [ 1695.697122][ T8374] ? __fget_files+0x3a0/0x420 [ 1695.697143][ T8374] ? __fget_files+0x2a/0x420 [ 1695.697169][ T8374] security_file_ioctl+0xcb/0x2d0 [ 1695.697195][ T8374] __se_sys_ioctl+0x47/0x170 [ 1695.697218][ T8374] do_syscall_64+0xfa/0xfa0 [ 1695.697243][ T8374] ? lockdep_hardirqs_on+0x9c/0x150 [ 1695.697268][ T8374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.697287][ T8374] ? clear_bhb_loop+0x60/0xb0 [ 1695.697310][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.697327][ T8374] RIP: 0033:0x7f889cb8ebe9 [ 1695.697346][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1695.697362][ T8374] RSP: 002b:00007f889d9a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1695.697384][ T8374] RAX: ffffffffffffffda RBX: 00007f889cdc5fa0 RCX: 00007f889cb8ebe9 [ 1695.697398][ T8374] RDX: 0000000000000007 RSI: 0000000000000932 RDI: 0000000000000004 [ 1695.697410][ T8374] RBP: 00007f889d9a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.697423][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.697434][ T8374] R13: 00007f889cdc6038 R14: 00007f889cdc5fa0 R15: 00007ffc3df173a8 [ 1695.697464][ T8374] [ 1695.702851][ T8374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1695.774431][ T323] m920x_read = error: -19 [ 1695.799493][ T8374] md: md2 stopped. [ 1695.820250][ T323] dvb-usb: error while querying for an remote control event. [ 1696.084889][ T323] m920x_read = error: -19 [ 1696.089466][ T323] dvb-usb: error while querying for an remote control event. [ 1696.204244][ T323] m920x_read = error: -19 [ 1696.208688][ T323] dvb-usb: error while querying for an remote control event. [ 1696.353671][ T323] m920x_read = error: -19 [ 1696.358174][ T323] dvb-usb: error while querying for an remote control event. [ 1696.484365][ T5911] m920x_read = error: -19 [ 1696.489051][ T5911] dvb-usb: error while querying for an remote control event. [ 1696.603736][ T5911] m920x_read = error: -19 [ 1696.608160][ T5911] dvb-usb: error while querying for an remote control event. [ 1696.684152][ T323] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1696.723748][ T5911] m920x_read = error: -19 [ 1696.730201][ T5911] dvb-usb: error while querying for an remote control event. [ 1696.843829][ T323] usb 5-1: Using ep0 maxpacket: 32 [ 1696.863566][ T5911] m920x_read = error: -19 [ 1696.867983][ T5911] dvb-usb: error while querying for an remote control event. [ 1696.876434][ T323] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1696.887795][ T323] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1696.897800][ T323] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1696.911552][ T323] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1696.923853][ T323] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1696.933089][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.945768][ T323] usb 5-1: config 0 descriptor?? [ 1696.993741][ T5911] m920x_read = error: -19 [ 1696.998260][ T5911] dvb-usb: error while querying for an remote control event. [ 1697.121024][ T5911] m920x_read = error: -19 [ 1697.131266][ T5911] dvb-usb: error while querying for an remote control event. [ 1697.167137][ T323] usbhid 5-1:0.0: can't add hid device: -71 [ 1697.180533][ T323] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1697.192539][ T323] usb 5-1: USB disconnect, device number 7 [ 1697.247522][ T5911] m920x_read = error: -19 [ 1697.251957][ T5911] dvb-usb: error while querying for an remote control event. [ 1697.391176][ T5911] m920x_read = error: -19 [ 1697.396016][ T5911] dvb-usb: error while querying for an remote control event. [ 1697.520493][ T5911] m920x_read = error: -19 [ 1697.526483][ T5911] dvb-usb: error while querying for an remote control event. [ 1697.647903][ T5911] m920x_read = error: -19 [ 1697.652337][ T5911] dvb-usb: error while querying for an remote control event. [ 1697.782887][ T5911] m920x_read = error: -19 [ 1697.789286][ T5911] dvb-usb: error while querying for an remote control event. [ 1697.903717][ T5911] m920x_read = error: -19 [ 1697.908157][ T5911] dvb-usb: error while querying for an remote control event. [ 1698.043787][ T5911] m920x_read = error: -19 [ 1698.048211][ T5911] dvb-usb: error while querying for an remote control event. [ 1698.171177][ T5911] m920x_read = error: -19 [ 1698.176367][ T5911] dvb-usb: error while querying for an remote control event. [ 1698.293602][ T5911] m920x_read = error: -19 [ 1698.299584][ T5911] dvb-usb: error while querying for an remote control event. [ 1698.413801][ T5911] m920x_read = error: -19 [ 1698.418261][ T5911] dvb-usb: error while querying for an remote control event. [ 1698.534487][ T5911] m920x_read = error: -19 [ 1698.538900][ T5911] dvb-usb: error while querying for an remote control event. [ 1698.660110][ T5961] IPVS: starting estimator thread 0... [ 1698.663603][T20605] m920x_read = error: -19 [ 1698.670136][T20605] dvb-usb: error while querying for an remote control event. [ 1698.769259][ T8402] IPVS: using max 27 ests per chain, 64800 per kthread [ 1698.793682][ T5911] m920x_read = error: -19 [ 1698.798123][ T5911] dvb-usb: error while querying for an remote control event. [ 1698.798877][ T8403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1698.887259][ T8403] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1698.896817][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1698.918279][ T5911] m920x_read = error: -19 [ 1698.923506][ T5911] dvb-usb: error while querying for an remote control event. [ 1699.040406][ T5911] m920x_read = error: -19 [ 1699.044940][ T5911] dvb-usb: error while querying for an remote control event. [ 1699.161008][ T5911] m920x_read = error: -19 [ 1699.168464][ T5911] dvb-usb: error while querying for an remote control event. [ 1699.284871][ T5911] m920x_read = error: -19 [ 1699.292589][ T5911] dvb-usb: error while querying for an remote control event. [ 1699.426585][ T5911] m920x_read = error: -19 [ 1699.431006][ T5911] dvb-usb: error while querying for an remote control event. [ 1699.554174][ T5911] m920x_read = error: -19 [ 1699.559348][ T5911] dvb-usb: error while querying for an remote control event. [ 1699.643131][ T8409] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1699.651390][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1699.705586][T20605] m920x_read = error: -19 [ 1699.715835][T20605] dvb-usb: error while querying for an remote control event. [ 1699.847741][T20605] m920x_read = error: -19 [ 1699.852224][T20605] dvb-usb: error while querying for an remote control event. [ 1699.976294][T20605] m920x_read = error: -19 [ 1699.982500][T20605] dvb-usb: error while querying for an remote control event. [ 1700.094449][T20605] m920x_read = error: -19 [ 1700.098856][T20605] dvb-usb: error while querying for an remote control event. [ 1700.193629][ T5911] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1700.237370][T20605] m920x_read = error: -19 [ 1700.241793][T20605] dvb-usb: error while querying for an remote control event. [ 1700.262893][ T8433] FAULT_INJECTION: forcing a failure. [ 1700.262893][ T8433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1700.278331][ T8433] CPU: 0 UID: 0 PID: 8433 Comm: syz.0.11003 Not tainted syzkaller #0 PREEMPT(full) [ 1700.278358][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1700.278369][ T8433] Call Trace: [ 1700.278377][ T8433] [ 1700.278386][ T8433] dump_stack_lvl+0x189/0x250 [ 1700.278419][ T8433] ? __pfx____ratelimit+0x10/0x10 [ 1700.278444][ T8433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1700.278471][ T8433] ? __pfx__printk+0x10/0x10 [ 1700.278497][ T8433] ? __might_fault+0xb0/0x130 [ 1700.278527][ T8433] should_fail_ex+0x414/0x560 [ 1700.278544][ T8433] _copy_from_user+0x2d/0xb0 [ 1700.278561][ T8433] ___sys_sendmsg+0x158/0x2a0 [ 1700.278576][ T8433] ? __pfx____sys_sendmsg+0x10/0x10 [ 1700.278607][ T8433] ? __fget_files+0x2a/0x420 [ 1700.278621][ T8433] ? __fget_files+0x3a0/0x420 [ 1700.278641][ T8433] __x64_sys_sendmsg+0x19b/0x260 [ 1700.278655][ T8433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1700.278671][ T8433] ? __pfx_ksys_write+0x10/0x10 [ 1700.278687][ T8433] ? do_syscall_64+0xbe/0xfa0 [ 1700.278705][ T8433] do_syscall_64+0xfa/0xfa0 [ 1700.278719][ T8433] ? lockdep_hardirqs_on+0x9c/0x150 [ 1700.278734][ T8433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.278746][ T8433] ? clear_bhb_loop+0x60/0xb0 [ 1700.278759][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.278770][ T8433] RIP: 0033:0x7f32d5b8ebe9 [ 1700.278783][ T8433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1700.278793][ T8433] RSP: 002b:00007f32d6a9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1700.278807][ T8433] RAX: ffffffffffffffda RBX: 00007f32d5dc5fa0 RCX: 00007f32d5b8ebe9 [ 1700.278816][ T8433] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 1700.278824][ T8433] RBP: 00007f32d6a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1700.278831][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1700.278838][ T8433] R13: 00007f32d5dc6038 R14: 00007f32d5dc5fa0 R15: 00007fff0c80e088 [ 1700.278857][ T8433] [ 1700.353549][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 1700.419487][ T8435] syzkaller1: entered promiscuous mode [ 1700.433807][T20605] m920x_read = error: -19 [ 1700.443040][ T8435] syzkaller1: entered allmulticast mode [ 1700.497025][T20605] dvb-usb: error while querying for an remote control event. [ 1700.526823][ T5911] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1700.544693][ T5911] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1700.559547][ T5911] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1700.573892][ T5911] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1700.580633][ T5911] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1700.590149][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.600401][ T5911] usb 7-1: config 0 descriptor?? [ 1700.633800][T20605] m920x_read = error: -19 [ 1700.638252][T20605] dvb-usb: error while querying for an remote control event. [ 1700.745510][ T7839] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1700.753784][ T323] m920x_read = error: -19 [ 1700.759185][ T323] dvb-usb: error while querying for an remote control event. [ 1700.783545][T28829] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1700.806566][ T8441] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1700.816371][ T8441] block device autoloading is deprecated and will be removed. [ 1700.820777][ T5911] usbhid 7-1:0.0: can't add hid device: -71 [ 1700.834886][ T8440] FAULT_INJECTION: forcing a failure. [ 1700.834886][ T8440] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.835748][ T5911] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1700.848382][ T8440] CPU: 0 UID: 0 PID: 8440 Comm: syz.4.11006 Not tainted syzkaller #0 PREEMPT(full) [ 1700.848405][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1700.848415][ T8440] Call Trace: [ 1700.848422][ T8440] [ 1700.848429][ T8440] dump_stack_lvl+0x189/0x250 [ 1700.848460][ T8440] ? __pfx____ratelimit+0x10/0x10 [ 1700.848483][ T8440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1700.848508][ T8440] ? __pfx__printk+0x10/0x10 [ 1700.848537][ T8440] ? __pfx___might_resched+0x10/0x10 [ 1700.848562][ T8440] should_fail_ex+0x414/0x560 [ 1700.848587][ T8440] should_failslab+0xa8/0x100 [ 1700.848609][ T8440] __kmalloc_noprof+0xcb/0x7f0 [ 1700.848626][ T8440] ? kfree+0x4d/0x6d0 [ 1700.848638][ T8440] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1700.848670][ T8440] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1700.848696][ T8440] ? tomoyo_domain+0xd9/0x130 [ 1700.848717][ T8440] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1700.848738][ T8440] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1700.848763][ T8440] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1700.848824][ T8440] ? __fget_files+0x2a/0x420 [ 1700.848850][ T8440] ? __fget_files+0x3a0/0x420 [ 1700.848869][ T8440] ? __fget_files+0x2a/0x420 [ 1700.848902][ T8440] security_file_ioctl+0xcb/0x2d0 [ 1700.848925][ T8440] __se_sys_ioctl+0x47/0x170 [ 1700.848947][ T8440] do_syscall_64+0xfa/0xfa0 [ 1700.848967][ T8440] ? lockdep_hardirqs_on+0x9c/0x150 [ 1700.848989][ T8440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.849005][ T8440] ? clear_bhb_loop+0x60/0xb0 [ 1700.849026][ T8440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.849042][ T8440] RIP: 0033:0x7f889cb8ebe9 [ 1700.849058][ T8440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1700.849072][ T8440] RSP: 002b:00007f889d9a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1700.849091][ T8440] RAX: ffffffffffffffda RBX: 00007f889cdc5fa0 RCX: 00007f889cb8ebe9 [ 1700.849104][ T8440] RDX: 0000000000000000 RSI: 0000000040480923 RDI: 0000000000000004 [ 1700.849114][ T8440] RBP: 00007f889d9a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1700.849125][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1700.849135][ T8440] R13: 00007f889cdc6038 R14: 00007f889cdc5fa0 R15: 00007ffc3df173a8 [ 1700.849165][ T8440] [ 1700.849174][ T8440] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1700.866343][ T5911] usb 7-1: USB disconnect, device number 63 [ 1700.919237][ T7839] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 1700.922436][ T323] m920x_read = error: -19 [ 1700.931372][ T7839] usb 1-1: config 0 has no interface number 0 [ 1700.932338][ T323] dvb-usb: error while querying for an remote control event. [ 1700.943165][ T7839] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1701.053964][ T323] m920x_read = error: -19 [ 1701.063304][T28829] usb 4-1: Using ep0 maxpacket: 32 [ 1701.091459][ T323] dvb-usb: error while querying for an remote control event. [ 1701.098629][ T7839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.165287][T28829] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 1701.174286][T28829] usb 4-1: config 0 has no interface number 0 [ 1701.180437][T28829] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1701.190792][ T7839] usb 1-1: Product: syz [ 1701.197607][ T7839] usb 1-1: Manufacturer: syz [ 1701.210376][T28829] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1701.219839][T28829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.227924][T28829] usb 4-1: Product: syz [ 1701.232286][T28829] usb 4-1: Manufacturer: syz [ 1701.237125][ T7839] usb 1-1: SerialNumber: syz [ 1701.237608][ T5911] m920x_read = error: -19 [ 1701.243834][T28829] usb 4-1: SerialNumber: syz [ 1701.251558][ T5911] dvb-usb: error while querying for an remote control event. [ 1701.252163][ T7839] usb 1-1: config 0 descriptor?? [ 1701.273304][T28829] usb 4-1: config 0 descriptor?? [ 1701.282373][T28829] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1701.363730][ T5911] m920x_read = error: -19 [ 1701.368134][ T5911] dvb-usb: error while querying for an remote control event. [ 1701.493701][ T5911] m920x_read = error: -19 [ 1701.501509][ T5911] dvb-usb: error while querying for an remote control event. [ 1701.616652][ T5911] m920x_read = error: -19 [ 1701.621266][ T5911] dvb-usb: error while querying for an remote control event. [ 1701.716024][ T7839] usb 1-1: Firmware: major: 109, minor: 210, hardware type: UNKNOWN (205) [ 1701.733796][ T5911] m920x_read = error: -19 [ 1701.738200][ T5911] dvb-usb: error while querying for an remote control event. [ 1701.864753][ T5911] m920x_read = error: -19 [ 1701.869181][ T5911] dvb-usb: error while querying for an remote control event. [ 1701.925722][ T7839] usb 1-1: Read permanent extended address c2:b9:43:00:d6:2f:11:02 from device [ 1701.945139][ T7839] usb 1-1: atusb_probe: initialization failed, error = -524 [ 1701.964125][ T7839] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 1701.984237][ T5911] m920x_read = error: -19 [ 1701.988833][ T5911] dvb-usb: error while querying for an remote control event. [ 1702.115235][ T5911] m920x_read = error: -19 [ 1702.119363][T28829] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input167 [ 1702.120208][ T5911] dvb-usb: error while querying for an remote control event. [ 1702.190988][ T5911] usb 1-1: USB disconnect, device number 40 [ 1702.253990][T20605] m920x_read = error: -19 [ 1702.259005][T20605] dvb-usb: error while querying for an remote control event. [ 1702.348972][T20605] usb 4-1: USB disconnect, device number 62 [ 1702.383766][ T323] m920x_read = error: -19 [ 1702.388280][ T323] dvb-usb: error while querying for an remote control event. [ 1702.513754][ T5911] m920x_read = error: -19 [ 1702.518181][ T5911] dvb-usb: error while querying for an remote control event. [ 1702.575266][ T8475] FAULT_INJECTION: forcing a failure. [ 1702.575266][ T8475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1702.588529][ T8475] CPU: 1 UID: 0 PID: 8475 Comm: syz.6.11017 Not tainted syzkaller #0 PREEMPT(full) [ 1702.588557][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1702.588566][ T8475] Call Trace: [ 1702.588573][ T8475] [ 1702.588579][ T8475] dump_stack_lvl+0x189/0x250 [ 1702.588602][ T8475] ? __pfx____ratelimit+0x10/0x10 [ 1702.588617][ T8475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1702.588634][ T8475] ? __pfx__printk+0x10/0x10 [ 1702.588650][ T8475] ? __might_fault+0xb0/0x130 [ 1702.588669][ T8475] should_fail_ex+0x414/0x560 [ 1702.588684][ T8475] _copy_from_user+0x2d/0xb0 [ 1702.588701][ T8475] ___sys_sendmsg+0x158/0x2a0 [ 1702.588716][ T8475] ? __pfx____sys_sendmsg+0x10/0x10 [ 1702.588748][ T8475] ? __fget_files+0x2a/0x420 [ 1702.588762][ T8475] ? __fget_files+0x3a0/0x420 [ 1702.588782][ T8475] __x64_sys_sendmsg+0x19b/0x260 [ 1702.588795][ T8475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1702.588812][ T8475] ? __pfx_ksys_write+0x10/0x10 [ 1702.588827][ T8475] ? do_syscall_64+0xbe/0xfa0 [ 1702.588844][ T8475] do_syscall_64+0xfa/0xfa0 [ 1702.588859][ T8475] ? lockdep_hardirqs_on+0x9c/0x150 [ 1702.588882][ T8475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.588892][ T8475] ? clear_bhb_loop+0x60/0xb0 [ 1702.588906][ T8475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.588917][ T8475] RIP: 0033:0x7fba2178ebe9 [ 1702.588929][ T8475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1702.588940][ T8475] RSP: 002b:00007fba2268f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1702.588954][ T8475] RAX: ffffffffffffffda RBX: 00007fba219c6090 RCX: 00007fba2178ebe9 [ 1702.588962][ T8475] RDX: 000000002400c000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1702.588970][ T8475] RBP: 00007fba2268f090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.588977][ T8475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.588984][ T8475] R13: 00007fba219c6128 R14: 00007fba219c6090 R15: 00007ffef2ff3588 [ 1702.589003][ T8475] [ 1702.796452][T20605] m920x_read = error: -19 [ 1702.800848][T20605] dvb-usb: error while querying for an remote control event. [ 1702.913818][ T5911] m920x_read = error: -19 [ 1702.918284][ T5911] dvb-usb: error while querying for an remote control event. [ 1703.033585][ T5911] m920x_read = error: -19 [ 1703.038130][ T5911] dvb-usb: error while querying for an remote control event. [ 1703.144588][ T8481] block nbd3: Attempted send on invalid socket [ 1703.152251][ T8481] blk_print_req_error: 10 callbacks suppressed [ 1703.152266][ T8481] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1703.163661][ T5911] m920x_read = error: -19 [ 1703.172970][ T8481] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32 [ 1703.174901][ T5911] dvb-usb: error while querying for an remote control event. [ 1703.193744][ T7839] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1703.303694][ T5911] m920x_read = error: -19 [ 1703.308199][ T5911] dvb-usb: error while querying for an remote control event. [ 1703.343695][ T7839] usb 1-1: Using ep0 maxpacket: 32 [ 1703.351630][ T7839] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1703.371970][ T7839] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1703.382757][ T7839] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1703.396691][ T7839] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1703.403951][ T7839] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1703.413949][ T7839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.423919][ T5911] m920x_read = error: -19 [ 1703.428325][ T5911] dvb-usb: error while querying for an remote control event. [ 1703.440743][ T7839] usb 1-1: config 0 descriptor?? [ 1703.571293][ T5911] m920x_read = error: -19 [ 1703.576743][ T5911] dvb-usb: error while querying for an remote control event. [ 1703.657514][ T7839] usbhid 1-1:0.0: can't add hid device: -71 [ 1703.667839][ T7839] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1703.696708][ T5911] m920x_read = error: -19 [ 1703.698797][ T7839] usb 1-1: USB disconnect, device number 41 [ 1703.715607][ T5911] dvb-usb: error while querying for an remote control event. [ 1703.844279][ T5911] m920x_read = error: -19 [ 1703.849328][ T5911] dvb-usb: error while querying for an remote control event. [ 1703.963810][ T5911] m920x_read = error: -19 [ 1703.975671][ T5911] dvb-usb: error while querying for an remote control event. [ 1704.094051][ T5911] m920x_read = error: -19 [ 1704.098478][ T5911] dvb-usb: error while querying for an remote control event. [ 1704.233598][ T5911] m920x_read = error: -19 [ 1704.244078][ T5911] dvb-usb: error while querying for an remote control event. [ 1704.363960][ T5911] m920x_read = error: -19 [ 1704.368610][ T5911] dvb-usb: error while querying for an remote control event. [ 1704.493621][ T323] m920x_read = error: -19 [ 1704.498149][ T323] dvb-usb: error while querying for an remote control event. [ 1704.623659][ T323] m920x_read = error: -19 [ 1704.629977][ T323] dvb-usb: error while querying for an remote control event. [ 1704.754950][ T323] m920x_read = error: -19 [ 1704.761744][ T323] dvb-usb: error while querying for an remote control event. [ 1704.894760][ T323] m920x_read = error: -19 [ 1704.923309][ T323] dvb-usb: error while querying for an remote control event. [ 1705.022342][ T8530] FAULT_INJECTION: forcing a failure. [ 1705.022342][ T8530] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.064000][ T8530] CPU: 1 UID: 0 PID: 8530 Comm: syz.4.11030 Not tainted syzkaller #0 PREEMPT(full) [ 1705.064021][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1705.064028][ T8530] Call Trace: [ 1705.064034][ T8530] [ 1705.064040][ T8530] dump_stack_lvl+0x189/0x250 [ 1705.064069][ T8530] ? __pfx____ratelimit+0x10/0x10 [ 1705.064086][ T8530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1705.064103][ T8530] ? __pfx__printk+0x10/0x10 [ 1705.064122][ T8530] ? __pfx___might_resched+0x10/0x10 [ 1705.064139][ T8530] should_fail_ex+0x414/0x560 [ 1705.064156][ T8530] should_failslab+0xa8/0x100 [ 1705.064172][ T8530] __kmalloc_noprof+0xcb/0x7f0 [ 1705.064185][ T8530] ? kfree+0x4d/0x6d0 [ 1705.064193][ T8530] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1705.064215][ T8530] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1705.064233][ T8530] ? tomoyo_domain+0xd9/0x130 [ 1705.064247][ T8530] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1705.064261][ T8530] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1705.064277][ T8530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1705.064314][ T8530] ? __fget_files+0x2a/0x420 [ 1705.064331][ T8530] ? __fget_files+0x3a0/0x420 [ 1705.064345][ T8530] ? __fget_files+0x2a/0x420 [ 1705.064361][ T8530] security_file_ioctl+0xcb/0x2d0 [ 1705.064376][ T8530] __se_sys_ioctl+0x47/0x170 [ 1705.064390][ T8530] do_syscall_64+0xfa/0xfa0 [ 1705.064405][ T8530] ? lockdep_hardirqs_on+0x9c/0x150 [ 1705.064420][ T8530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.064431][ T8530] ? clear_bhb_loop+0x60/0xb0 [ 1705.064445][ T8530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.064456][ T8530] RIP: 0033:0x7f889cb8ebe9 [ 1705.064468][ T8530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1705.064478][ T8530] RSP: 002b:00007f889d9a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1705.064491][ T8530] RAX: ffffffffffffffda RBX: 00007f889cdc5fa0 RCX: 00007f889cb8ebe9 [ 1705.064500][ T8530] RDX: 0000200000000040 RSI: 00000000c03864bc RDI: 0000000000000003 [ 1705.064507][ T8530] RBP: 00007f889d9a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1705.064515][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1705.064522][ T8530] R13: 00007f889cdc6038 R14: 00007f889cdc5fa0 R15: 00007ffc3df173a8 [ 1705.064540][ T8530] [ 1705.064835][ T8530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1705.312978][T20605] m920x_read = error: -19 [ 1705.322820][T20605] dvb-usb: error while querying for an remote control event. [ 1705.433838][ T323] m920x_read = error: -19 [ 1705.438257][ T323] dvb-usb: error while querying for an remote control event. [ 1705.623603][T20605] m920x_read = error: -19 [ 1705.628159][T20605] dvb-usb: error while querying for an remote control event. [ 1705.785570][T20605] m920x_read = error: -19 [ 1705.790051][T20605] dvb-usb: error while querying for an remote control event. [ 1705.924956][T20605] m920x_read = error: -19 [ 1705.932424][T20605] dvb-usb: error while querying for an remote control event. [ 1706.053603][ T323] m920x_read = error: -19 [ 1706.058221][ T323] dvb-usb: error while querying for an remote control event. [ 1706.176138][ T323] m920x_read = error: -19 [ 1706.180561][ T323] dvb-usb: error while querying for an remote control event. [ 1706.311594][ T5911] m920x_read = error: -19 [ 1706.324572][ T5911] dvb-usb: error while querying for an remote control event. [ 1706.454271][ T323] m920x_read = error: -19 [ 1706.463583][ T323] dvb-usb: error while querying for an remote control event. [ 1706.473740][ T5911] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1706.552772][ T8567] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1706.596592][ T323] m920x_read = error: -19 [ 1706.601001][ T323] dvb-usb: error while querying for an remote control event. [ 1706.663587][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 1706.670993][ T5911] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1706.683111][ T5911] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1706.694500][ T5911] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1706.707779][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1706.719189][ T323] m920x_read = error: -19 [ 1706.724359][ T323] dvb-usb: error while querying for an remote control event. [ 1706.731832][ T5911] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1706.741065][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.743739][ T7839] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1706.752887][ T5911] usb 5-1: config 0 descriptor?? [ 1706.802236][ T8570] FAULT_INJECTION: forcing a failure. [ 1706.802236][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.815165][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.0.11042 Not tainted syzkaller #0 PREEMPT(full) [ 1706.815197][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1706.815209][ T8570] Call Trace: [ 1706.815218][ T8570] [ 1706.815226][ T8570] dump_stack_lvl+0x189/0x250 [ 1706.815261][ T8570] ? __pfx____ratelimit+0x10/0x10 [ 1706.815287][ T8570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1706.815315][ T8570] ? __pfx__printk+0x10/0x10 [ 1706.815350][ T8570] ? __pfx___might_resched+0x10/0x10 [ 1706.815379][ T8570] should_fail_ex+0x414/0x560 [ 1706.815407][ T8570] should_failslab+0xa8/0x100 [ 1706.815433][ T8570] __kmalloc_noprof+0xcb/0x7f0 [ 1706.815452][ T8570] ? kfree+0x4d/0x6d0 [ 1706.815467][ T8570] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1706.815503][ T8570] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1706.815533][ T8570] ? tomoyo_domain+0xd9/0x130 [ 1706.815557][ T8570] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1706.815581][ T8570] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1706.815609][ T8570] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1706.815679][ T8570] ? __fget_files+0x2a/0x420 [ 1706.815709][ T8570] ? __fget_files+0x3a0/0x420 [ 1706.815730][ T8570] ? __fget_files+0x2a/0x420 [ 1706.815758][ T8570] security_file_ioctl+0xcb/0x2d0 [ 1706.815782][ T8570] __se_sys_ioctl+0x47/0x170 [ 1706.815825][ T8570] do_syscall_64+0xfa/0xfa0 [ 1706.815858][ T8570] ? lockdep_hardirqs_on+0x9c/0x150 [ 1706.815884][ T8570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.815903][ T8570] ? clear_bhb_loop+0x60/0xb0 [ 1706.815927][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.815946][ T8570] RIP: 0033:0x7f32d5b8ebe9 [ 1706.815964][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1706.815980][ T8570] RSP: 002b:00007f32d6a9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.816000][ T8570] RAX: ffffffffffffffda RBX: 00007f32d5dc5fa0 RCX: 00007f32d5b8ebe9 [ 1706.816013][ T8570] RDX: 0000200000000440 RSI: 000000004400ae8f RDI: 0000000000000005 [ 1706.816021][ T8570] RBP: 00007f32d6a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.816028][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.816035][ T8570] R13: 00007f32d5dc6038 R14: 00007f32d5dc5fa0 R15: 00007fff0c80e088 [ 1706.816056][ T8570] [ 1706.816081][ T8570] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1706.903739][ T7839] usb 7-1: device descriptor read/64, error -71 [ 1707.062837][ T323] m920x_read = error: -19 [ 1707.062936][ T8570] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1707.067467][ T323] dvb-usb: error while querying for an remote control event. [ 1707.094328][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 1707.100381][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1707.122755][ T5911] usb 5-1: USB disconnect, device number 8 [ 1707.143727][ T7839] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1707.195611][T20605] m920x_read = error: -19 [ 1707.200158][T20605] dvb-usb: error while querying for an remote control event. [ 1707.243244][ T4005] Bluetooth: hci1: connection err: -111 [ 1707.283658][ T7839] usb 7-1: device descriptor read/64, error -71 [ 1707.337223][ T323] m920x_read = error: -19 [ 1707.341816][ T323] dvb-usb: error while querying for an remote control event. [ 1707.394133][ T7839] usb usb7-port1: attempt power cycle [ 1707.453860][ T323] m920x_read = error: -19 [ 1707.458464][ T323] dvb-usb: error while querying for an remote control event. [ 1707.460070][ T8577] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1707.496347][T20605] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1707.576092][ T323] m920x_read = error: -19 [ 1707.581500][ T323] dvb-usb: error while querying for an remote control event. [ 1707.663951][T20605] usb 4-1: Using ep0 maxpacket: 32 [ 1707.673743][T20605] usb 4-1: config 0 has an invalid interface number: 53 but max is 0 [ 1707.681913][T20605] usb 4-1: config 0 has no interface number 0 [ 1707.691467][T20605] usb 4-1: New USB device found, idVendor=0456, idProduct=f001, bcdDevice=a4.77 [ 1707.700929][ T323] m920x_read = error: -19 [ 1707.705622][ T323] dvb-usb: error while querying for an remote control event. [ 1707.713100][T20605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.724726][T20605] usb 4-1: Product: syz [ 1707.728950][T20605] usb 4-1: Manufacturer: syz [ 1707.747102][T20605] usb 4-1: SerialNumber: syz [ 1707.753715][ T7839] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1707.756531][T20605] usb 4-1: config 0 descriptor?? [ 1707.776293][ T7839] usb 7-1: device descriptor read/8, error -71 [ 1707.780107][T20605] ftdi_sio 4-1:0.53: FTDI USB Serial Device converter detected [ 1707.814071][T20605] ftdi_sio ttyUSB0: unknown device type: 0xa477 [ 1707.823496][ T323] m920x_read = error: -19 [ 1707.827899][ T323] dvb-usb: error while querying for an remote control event. [ 1707.838063][ T8588] FAULT_INJECTION: forcing a failure. [ 1707.838063][ T8588] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.857718][ T8588] CPU: 1 UID: 0 PID: 8588 Comm: syz.4.11048 Not tainted syzkaller #0 PREEMPT(full) [ 1707.857745][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1707.857756][ T8588] Call Trace: [ 1707.857764][ T8588] [ 1707.857772][ T8588] dump_stack_lvl+0x189/0x250 [ 1707.857806][ T8588] ? __pfx____ratelimit+0x10/0x10 [ 1707.857830][ T8588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1707.857856][ T8588] ? __pfx__printk+0x10/0x10 [ 1707.857891][ T8588] ? __pfx___might_resched+0x10/0x10 [ 1707.857917][ T8588] should_fail_ex+0x414/0x560 [ 1707.857944][ T8588] should_failslab+0xa8/0x100 [ 1707.857968][ T8588] __kmalloc_noprof+0xcb/0x7f0 [ 1707.857986][ T8588] ? kfree+0x4d/0x6d0 [ 1707.858000][ T8588] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1707.858034][ T8588] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1707.858064][ T8588] ? tomoyo_domain+0xd9/0x130 [ 1707.858101][ T8588] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1707.858125][ T8588] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1707.858152][ T8588] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1707.858221][ T8588] ? __fget_files+0x2a/0x420 [ 1707.858251][ T8588] ? __fget_files+0x3a0/0x420 [ 1707.858274][ T8588] ? __fget_files+0x2a/0x420 [ 1707.858302][ T8588] security_file_ioctl+0xcb/0x2d0 [ 1707.858327][ T8588] __se_sys_ioctl+0x47/0x170 [ 1707.858350][ T8588] do_syscall_64+0xfa/0xfa0 [ 1707.858374][ T8588] ? lockdep_hardirqs_on+0x9c/0x150 [ 1707.858399][ T8588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.858418][ T8588] ? clear_bhb_loop+0x60/0xb0 [ 1707.858442][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.858460][ T8588] RIP: 0033:0x7f889cb8ebe9 [ 1707.858478][ T8588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1707.858495][ T8588] RSP: 002b:00007f889d9a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1707.858517][ T8588] RAX: ffffffffffffffda RBX: 00007f889cdc5fa0 RCX: 00007f889cb8ebe9 [ 1707.858531][ T8588] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000005 [ 1707.858544][ T8588] RBP: 00007f889d9a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1707.858556][ T8588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.858568][ T8588] R13: 00007f889cdc6038 R14: 00007f889cdc5fa0 R15: 00007ffc3df173a8 [ 1707.858604][ T8588] [ 1707.859045][ T8588] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1708.039499][ T7839] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1708.066768][ T7839] usb 7-1: device descriptor read/8, error -71 [ 1708.074165][ T323] m920x_read = error: -19 [ 1708.124592][ T323] dvb-usb: error while querying for an remote control event. [ 1708.184106][ T7839] usb usb7-port1: unable to enumerate USB device [ 1708.243691][ T323] m920x_read = error: -19 [ 1708.250702][ T323] dvb-usb: error while querying for an remote control event. [ 1708.384052][ T323] m920x_read = error: -19 [ 1708.388502][ T323] dvb-usb: error while querying for an remote control event. [ 1708.503797][ T323] m920x_read = error: -19 [ 1708.508222][ T323] dvb-usb: error while querying for an remote control event. [ 1708.553600][T28829] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1708.623721][ T323] m920x_read = error: -19 [ 1708.631582][ T323] dvb-usb: error while querying for an remote control event. [ 1708.683626][T28829] usb 5-1: device descriptor read/64, error -71 [ 1708.746664][ T323] m920x_read = error: -19 [ 1708.751073][ T323] dvb-usb: error while querying for an remote control event. [ 1708.863872][ T323] m920x_read = error: -19 [ 1708.868478][ T323] dvb-usb: error while querying for an remote control event. [ 1708.911782][ T8601] binder: 8600:8601 ioctl 4018620d 200000004a80 returned -22 [ 1708.923706][T28829] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1708.939313][ T4005] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1708.953026][ T4005] CPU: 0 UID: 0 PID: 4005 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1708.953056][ T4005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1708.953069][ T4005] Workqueue: hci0 hci_rx_work [ 1708.953099][ T4005] Call Trace: [ 1708.953108][ T4005] [ 1708.953118][ T4005] dump_stack_lvl+0x189/0x250 [ 1708.953157][ T4005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1708.953189][ T4005] ? __pfx__printk+0x10/0x10 [ 1708.953227][ T4005] ? kernfs_path_from_node+0x250/0x290 [ 1708.953245][ T4005] ? kernfs_path_from_node+0x2f/0x290 [ 1708.953270][ T4005] sysfs_create_dir_ns+0x259/0x280 [ 1708.953303][ T4005] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1708.953336][ T4005] ? do_raw_spin_unlock+0x122/0x240 [ 1708.953371][ T4005] kobject_add_internal+0x59f/0xb40 [ 1708.953418][ T4005] kobject_add+0x155/0x220 [ 1708.953451][ T4005] ? __pfx_kobject_add+0x10/0x10 [ 1708.953481][ T4005] ? _raw_spin_unlock+0x28/0x50 [ 1708.953510][ T4005] ? get_device_parent+0x366/0x3a0 [ 1708.953535][ T4005] device_add+0x408/0xb50 [ 1708.953561][ T4005] hci_conn_add_sysfs+0xd5/0x1e0 [ 1708.953589][ T4005] le_conn_complete_evt+0xc3a/0x1220 [ 1708.953632][ T4005] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1708.953662][ T4005] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1708.953700][ T4005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1708.953728][ T4005] ? skb_pull_data+0xfb/0x200 [ 1708.953757][ T4005] hci_le_enh_conn_complete_evt+0x189/0x470 [ 1708.953789][ T4005] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1708.953834][ T4005] hci_event_packet+0x78c/0x1200 [ 1708.953863][ T4005] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1708.953894][ T4005] ? __pfx_hci_event_packet+0x10/0x10 [ 1708.953922][ T4005] ? kcov_remote_start+0x4d3/0x7f0 [ 1708.953944][ T4005] ? local_clock_noinstr+0xe0/0xe0 [ 1708.953975][ T4005] ? hci_send_to_monitor+0xe2/0x570 [ 1708.954008][ T4005] hci_rx_work+0x46a/0xe80 [ 1708.954043][ T4005] ? process_scheduled_works+0x9ef/0x17b0 [ 1708.954075][ T4005] process_scheduled_works+0xae1/0x17b0 [ 1708.954131][ T4005] ? __pfx_process_scheduled_works+0x10/0x10 [ 1708.954176][ T4005] worker_thread+0x8a0/0xda0 [ 1708.954205][ T4005] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1708.954241][ T4005] ? __kthread_parkme+0x7b/0x200 [ 1708.954277][ T4005] kthread+0x70e/0x8a0 [ 1708.954311][ T4005] ? __pfx_worker_thread+0x10/0x10 [ 1708.954335][ T4005] ? __pfx_kthread+0x10/0x10 [ 1708.954364][ T4005] ? _raw_spin_unlock_irq+0x23/0x50 [ 1708.954389][ T4005] ? lockdep_hardirqs_on+0x9c/0x150 [ 1708.954413][ T4005] ? __pfx_kthread+0x10/0x10 [ 1708.954443][ T4005] ret_from_fork+0x47c/0x820 [ 1708.954469][ T4005] ? __pfx_ret_from_fork+0x10/0x10 [ 1708.954500][ T4005] ? __switch_to_asm+0x39/0x70 [ 1708.954519][ T4005] ? __switch_to_asm+0x33/0x70 [ 1708.954536][ T4005] ? __pfx_kthread+0x10/0x10 [ 1708.954565][ T4005] ret_from_fork_asm+0x1a/0x30 [ 1708.954605][ T4005] [ 1709.020345][ T323] m920x_read = error: -19 [ 1709.021440][ C0] vkms_vblank_simulate: vblank timer overrun [ 1709.033471][ T323] dvb-usb: error while querying for an remote control event. [ 1709.038391][ T4005] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1709.204347][ T323] m920x_read = error: -19 [ 1709.213556][T28829] usb 5-1: device descriptor read/64, error -71 [ 1709.279722][ T4005] Bluetooth: hci0: failed to register connection device [ 1709.283894][ T323] dvb-usb: error while querying for an remote control event. [ 1709.394676][T28829] usb usb5-port1: attempt power cycle [ 1709.413794][ T323] m920x_read = error: -19 [ 1709.418213][ T323] dvb-usb: error while querying for an remote control event. [ 1709.563855][ T323] m920x_read = error: -19 [ 1709.568287][ T323] dvb-usb: error while querying for an remote control event. [ 1709.713775][ T323] m920x_read = error: -19 [ 1709.718243][ T323] dvb-usb: error while querying for an remote control event. [ 1709.743602][T28829] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1709.774255][T28829] usb 5-1: device descriptor read/8, error -71 [ 1709.853848][ T323] m920x_read = error: -19 [ 1709.858264][ T323] dvb-usb: error while querying for an remote control event. [ 1709.954334][ T5960] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1709.983948][ T323] m920x_read = error: -19 [ 1709.988372][ T323] dvb-usb: error while querying for an remote control event. [ 1710.014922][T28829] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1710.034685][T28829] usb 5-1: device descriptor read/8, error -71 [ 1710.113531][ T5960] usb 7-1: Using ep0 maxpacket: 32 [ 1710.126771][ T5960] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1710.133605][T20605] m920x_read = error: -19 [ 1710.143621][T20605] dvb-usb: error while querying for an remote control event. [ 1710.147489][T28829] usb usb5-port1: unable to enumerate USB device [ 1710.158137][ T5960] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1710.184547][ T5960] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1710.197818][ T5960] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1710.204623][ T5960] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1710.213899][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.234351][ T5960] usb 7-1: config 0 descriptor?? [ 1710.253691][T20605] m920x_read = error: -19 [ 1710.258259][T20605] dvb-usb: error while querying for an remote control event. [ 1710.262375][T28829] usb 4-1: USB disconnect, device number 63 [ 1710.305668][T28829] ftdi_sio 4-1:0.53: device disconnected [ 1710.373733][T20605] m920x_read = error: -19 [ 1710.378144][T20605] dvb-usb: error while querying for an remote control event. [ 1710.457157][ T5960] usbhid 7-1:0.0: can't add hid device: -71 [ 1710.463663][ T5960] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1710.478359][ T5960] usb 7-1: USB disconnect, device number 68 [ 1710.497968][T20605] m920x_read = error: -19 [ 1710.502373][T20605] dvb-usb: error while querying for an remote control event. [ 1710.633651][T20605] m920x_read = error: -19 [ 1710.638294][T20605] dvb-usb: error while querying for an remote control event. [ 1710.754560][T20605] m920x_read = error: -19 [ 1710.759116][T20605] dvb-usb: error while querying for an remote control event. [ 1710.766724][T28829] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1710.874840][T20605] m920x_read = error: -19 [ 1710.879222][T20605] dvb-usb: error while querying for an remote control event. [ 1710.937039][T28829] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1710.945348][T28829] usb 4-1: can't read configurations, error -61 [ 1710.993606][ T323] m920x_read = error: -19 [ 1710.999272][ T323] dvb-usb: error while querying for an remote control event. [ 1711.073605][T28829] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1711.124810][ T323] m920x_read = error: -19 [ 1711.129318][ T323] dvb-usb: error while querying for an remote control event. [ 1711.158153][ T8631] FAULT_INJECTION: forcing a failure. [ 1711.158153][ T8631] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.172266][ T8631] CPU: 0 UID: 0 PID: 8631 Comm: syz.6.11065 Not tainted syzkaller #0 PREEMPT(full) [ 1711.172295][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1711.172307][ T8631] Call Trace: [ 1711.172315][ T8631] [ 1711.172324][ T8631] dump_stack_lvl+0x189/0x250 [ 1711.172359][ T8631] ? __pfx____ratelimit+0x10/0x10 [ 1711.172387][ T8631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1711.172416][ T8631] ? __pfx__printk+0x10/0x10 [ 1711.172449][ T8631] ? __pfx___might_resched+0x10/0x10 [ 1711.172479][ T8631] should_fail_ex+0x414/0x560 [ 1711.172507][ T8631] should_failslab+0xa8/0x100 [ 1711.172533][ T8631] __kmalloc_noprof+0xcb/0x7f0 [ 1711.172552][ T8631] ? kfree+0x4d/0x6d0 [ 1711.172567][ T8631] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1711.172602][ T8631] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1711.172630][ T8631] ? tomoyo_domain+0xd9/0x130 [ 1711.172652][ T8631] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1711.172675][ T8631] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1711.172694][ T8631] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1711.172730][ T8631] ? __fget_files+0x2a/0x420 [ 1711.172748][ T8631] ? __fget_files+0x3a0/0x420 [ 1711.172761][ T8631] ? __fget_files+0x2a/0x420 [ 1711.172778][ T8631] security_file_ioctl+0xcb/0x2d0 [ 1711.172800][ T8631] __se_sys_ioctl+0x47/0x170 [ 1711.172823][ T8631] do_syscall_64+0xfa/0xfa0 [ 1711.172845][ T8631] ? lockdep_hardirqs_on+0x9c/0x150 [ 1711.172867][ T8631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.172886][ T8631] ? clear_bhb_loop+0x60/0xb0 [ 1711.172909][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.172925][ T8631] RIP: 0033:0x7fba2178ebe9 [ 1711.172938][ T8631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1711.172949][ T8631] RSP: 002b:00007fba226b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1711.172963][ T8631] RAX: ffffffffffffffda RBX: 00007fba219c5fa0 RCX: 00007fba2178ebe9 [ 1711.172972][ T8631] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1711.172979][ T8631] RBP: 00007fba226b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.172987][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.172994][ T8631] R13: 00007fba219c6038 R14: 00007fba219c5fa0 R15: 00007ffef2ff3588 [ 1711.173013][ T8631] [ 1711.173019][ T8631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1711.174072][T20605] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1711.237378][T28829] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1711.253578][ T323] m920x_read = error: -19 [ 1711.260580][T28829] usb 4-1: can't read configurations, error -61 [ 1711.261236][ T323] dvb-usb: error while querying for an remote control event. [ 1711.269387][T28829] usb usb4-port1: attempt power cycle [ 1711.396540][ T24] m920x_read = error: -19 [ 1711.467386][ T24] dvb-usb: error while querying for an remote control event. [ 1711.479241][T20605] usb 1-1: Using ep0 maxpacket: 16 [ 1711.486803][T20605] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1711.496671][T20605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.509610][T20605] usb 1-1: config 0 descriptor?? [ 1711.520350][T20605] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1711.603839][ T24] m920x_read = error: -19 [ 1711.609652][ T24] dvb-usb: error while querying for an remote control event. [ 1711.733892][ T24] m920x_read = error: -19 [ 1711.739005][ T24] dvb-usb: error while querying for an remote control event. [ 1711.773954][T28829] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1711.807450][T28829] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1711.825709][T28829] usb 4-1: can't read configurations, error -61 [ 1711.856743][ T24] m920x_read = error: -19 [ 1711.861279][ T24] dvb-usb: error while querying for an remote control event. [ 1711.963872][T28829] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1711.973830][ T24] m920x_read = error: -19 [ 1711.987579][ T24] dvb-usb: error while querying for an remote control event. [ 1711.999204][T28829] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1712.010682][T28829] usb 4-1: can't read configurations, error -61 [ 1712.026445][T28829] usb usb4-port1: unable to enumerate USB device [ 1712.103608][ T323] m920x_read = error: -19 [ 1712.108156][ T323] dvb-usb: error while querying for an remote control event. [ 1712.224681][ T323] m920x_read = error: -19 [ 1712.229144][ T323] dvb-usb: error while querying for an remote control event. [ 1712.303565][ T24] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1712.353609][ T323] m920x_read = error: -19 [ 1712.358208][ T323] dvb-usb: error while querying for an remote control event. [ 1712.454602][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1712.468628][ T24] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1712.497429][ T323] m920x_read = error: -19 [ 1712.501936][ T24] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1712.512109][ T323] dvb-usb: error while querying for an remote control event. [ 1712.544604][ T323] usb 1-1: USB disconnect, device number 42 [ 1712.555236][ T24] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1712.582647][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1712.593302][ T24] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1712.607992][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.640706][ T24] usb 7-1: config 0 descriptor?? [ 1712.646262][ T920] m920x_read = error: -19 [ 1712.650643][ T920] dvb-usb: error while querying for an remote control event. [ 1712.658618][ T4005] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1712.675953][ T4005] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1712.686754][ T4005] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1712.698541][ T4005] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1712.708507][ T4005] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1712.772130][ T323] m920x_read = error: -19 [ 1712.776624][ T323] dvb-usb: error while querying for an remote control event. [ 1712.782121][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.870276][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 1712.882125][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1712.895256][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.896492][ T323] m920x_read = error: -19 [ 1712.913254][ T24] usb 7-1: USB disconnect, device number 69 [ 1712.923821][ T323] dvb-usb: error while querying for an remote control event. [ 1712.983934][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.044652][ T323] m920x_read = error: -19 [ 1713.049230][ T323] dvb-usb: error while querying for an remote control event. [ 1713.072968][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.165204][ T24] m920x_read = error: -19 [ 1713.169621][ T24] dvb-usb: error while querying for an remote control event. [ 1713.284129][ T323] m920x_read = error: -19 [ 1713.288549][ T323] dvb-usb: error while querying for an remote control event. [ 1713.322462][ T8653] chnl_net:caif_netlink_parms(): no params data found [ 1713.383718][ T12] bridge_slave_1: left allmulticast mode [ 1713.389520][ T12] bridge_slave_1: left promiscuous mode [ 1713.396759][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.413740][ T920] m920x_read = error: -19 [ 1713.418160][ T920] dvb-usb: error while querying for an remote control event. [ 1713.428254][ T12] bridge_slave_0: left allmulticast mode [ 1713.434929][ T12] bridge_slave_0: left promiscuous mode [ 1713.441471][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.528338][ T8663] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1713.545574][T20605] m920x_read = error: -19 [ 1713.550213][T20605] dvb-usb: error while querying for an remote control event. [ 1713.615797][ T8665] sctp: [Deprecated]: syz.3.11076 (pid 8665) Use of int in max_burst socket option. [ 1713.615797][ T8665] Use struct sctp_assoc_value instead [ 1713.673597][ T920] m920x_read = error: -19 [ 1713.678175][ T920] dvb-usb: error while querying for an remote control event. [ 1713.803673][ T920] m920x_read = error: -19 [ 1713.810397][ T920] dvb-usb: error while querying for an remote control event. [ 1713.933581][ T920] m920x_read = error: -19 [ 1713.938174][ T920] dvb-usb: error while querying for an remote control event. [ 1714.063963][ T920] m920x_read = error: -19 [ 1714.069285][ T920] dvb-usb: error while querying for an remote control event. [ 1714.184031][T20605] m920x_read = error: -19 [ 1714.188773][T20605] dvb-usb: error while querying for an remote control event. [ 1714.333630][T20605] m920x_read = error: -19 [ 1714.338221][T20605] dvb-usb: error while querying for an remote control event. [ 1714.386295][ T920] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1714.450110][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.461764][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1714.463667][ T24] m920x_read = error: -19 [ 1714.478898][ T12] bond0 (unregistering): Released all slaves [ 1714.479649][ T24] dvb-usb: error while querying for an remote control event. [ 1714.590580][ T920] usb 7-1: Using ep0 maxpacket: 32 [ 1714.603669][ T24] m920x_read = error: -19 [ 1714.608213][ T24] dvb-usb: error while querying for an remote control event. [ 1714.629524][ T920] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1714.646912][ T920] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1714.657948][ T920] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1714.671291][ T5911] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1714.679137][ T920] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1714.688047][ T920] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1714.697319][ T920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.721227][ T920] usb 7-1: config 0 descriptor?? [ 1714.723759][T27607] Bluetooth: hci3: command tx timeout [ 1714.743964][ T323] m920x_read = error: -19 [ 1714.748411][ T323] dvb-usb: error while querying for an remote control event. [ 1714.845875][ T5911] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1714.869855][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.894542][ T323] m920x_read = error: -19 [ 1714.902334][ T323] dvb-usb: error while querying for an remote control event. [ 1714.918894][ T5911] usb 1-1: config 0 has no interface number 0 [ 1714.930945][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.948703][ T5911] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1714.960181][ T920] usbhid 7-1:0.0: can't add hid device: -71 [ 1714.967022][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.974452][ T920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1714.984712][ T5911] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1714.999426][ T8653] bridge_slave_0: entered allmulticast mode [ 1715.009937][ T920] usb 7-1: USB disconnect, device number 70 [ 1715.018242][ T8653] bridge_slave_0: entered promiscuous mode [ 1715.031377][ T5911] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1715.052748][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.061122][ T323] m920x_read = error: -19 [ 1715.066870][ T323] dvb-usb: error while querying for an remote control event. [ 1715.093305][ T5911] usb 1-1: Product: syz [ 1715.101667][ T5911] usb 1-1: Manufacturer: syz [ 1715.111243][ T5911] usb 1-1: SerialNumber: syz [ 1715.125459][ T5911] usb 1-1: config 0 descriptor?? [ 1715.177259][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.189753][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.198183][ T323] m920x_read = error: -19 [ 1715.202628][ T323] dvb-usb: error while querying for an remote control event. [ 1715.217972][ T8653] bridge_slave_1: entered allmulticast mode [ 1715.227746][ T8653] bridge_slave_1: entered promiscuous mode [ 1715.336272][ T24] m920x_read = error: -19 [ 1715.348940][ T24] dvb-usb: error while querying for an remote control event. [ 1715.403024][ T12] hsr_slave_0: left promiscuous mode [ 1715.422224][ T12] hsr_slave_1: left promiscuous mode [ 1715.434592][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1715.442277][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1715.454510][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1715.461992][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1715.484009][ T5911] m920x_read = error: -19 [ 1715.488504][ T5911] dvb-usb: error while querying for an remote control event. [ 1715.550182][ T5911] usb 1-1: USB disconnect, device number 43 [ 1715.552102][ T12] veth1_macvtap: left promiscuous mode [ 1715.558889][ T8710] FAULT_INJECTION: forcing a failure. [ 1715.558889][ T8710] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.584261][ T12] veth0_macvtap: left promiscuous mode [ 1715.611301][ T12] veth1_vlan: left promiscuous mode [ 1715.617675][ T24] m920x_read = error: -19 [ 1715.621330][ T12] veth0_vlan: left promiscuous mode [ 1715.622069][ T24] dvb-usb: error while querying for an remote control event. [ 1715.645842][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.6.11086 Not tainted syzkaller #0 PREEMPT(full) [ 1715.645870][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1715.645882][ T8710] Call Trace: [ 1715.645890][ T8710] [ 1715.645899][ T8710] dump_stack_lvl+0x189/0x250 [ 1715.645933][ T8710] ? __pfx____ratelimit+0x10/0x10 [ 1715.645958][ T8710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1715.645985][ T8710] ? __pfx__printk+0x10/0x10 [ 1715.646018][ T8710] ? __pfx___might_resched+0x10/0x10 [ 1715.646040][ T8710] ? fs_reclaim_acquire+0x7d/0x100 [ 1715.646067][ T8710] should_fail_ex+0x414/0x560 [ 1715.646094][ T8710] should_failslab+0xa8/0x100 [ 1715.646119][ T8710] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1715.646140][ T8710] ? getname_flags+0xb8/0x540 [ 1715.646165][ T8710] ? __fget_files+0x3a0/0x420 [ 1715.646193][ T8710] getname_flags+0xb8/0x540 [ 1715.646223][ T8710] path_listxattrat+0xd4/0x3a0 [ 1715.646247][ T8710] ? __pfx_path_listxattrat+0x10/0x10 [ 1715.646271][ T8710] ? do_syscall_64+0xbe/0xfa0 [ 1715.646302][ T8710] do_syscall_64+0xfa/0xfa0 [ 1715.646325][ T8710] ? lockdep_hardirqs_on+0x9c/0x150 [ 1715.646351][ T8710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.646370][ T8710] ? clear_bhb_loop+0x60/0xb0 [ 1715.646394][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.646412][ T8710] RIP: 0033:0x7fba2178ebe9 [ 1715.646430][ T8710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1715.646447][ T8710] RSP: 002b:00007fba226b0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 1715.646469][ T8710] RAX: ffffffffffffffda RBX: 00007fba219c5fa0 RCX: 00007fba2178ebe9 [ 1715.646484][ T8710] RDX: 00000000000000ee RSI: 00002000000003c0 RDI: 0000200000000140 [ 1715.646497][ T8710] RBP: 00007fba226b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.646509][ T8710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1715.646521][ T8710] R13: 00007fba219c6038 R14: 00007fba219c5fa0 R15: 00007ffef2ff3588 [ 1715.646555][ T8710] [ 1715.918444][ T24] m920x_read = error: -19 [ 1715.922853][ T24] dvb-usb: error while querying for an remote control event. [ 1716.035483][ T24] m920x_read = error: -19 [ 1716.039937][ T24] dvb-usb: error while querying for an remote control event. [ 1716.183953][ T5911] m920x_read = error: -19 [ 1716.195550][ T5911] dvb-usb: error while querying for an remote control event. [ 1716.333213][ T5911] m920x_read = error: -19 [ 1716.337874][ T5911] dvb-usb: error while querying for an remote control event. [ 1716.475809][ T5911] m920x_read = error: -19 [ 1716.480246][ T5911] dvb-usb: error while querying for an remote control event. [ 1716.538421][ T8731] FAULT_INJECTION: forcing a failure. [ 1716.538421][ T8731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1716.552030][ T8731] CPU: 1 UID: 0 PID: 8731 Comm: syz.3.11094 Not tainted syzkaller #0 PREEMPT(full) [ 1716.552057][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1716.552069][ T8731] Call Trace: [ 1716.552078][ T8731] [ 1716.552087][ T8731] dump_stack_lvl+0x189/0x250 [ 1716.552122][ T8731] ? __pfx____ratelimit+0x10/0x10 [ 1716.552148][ T8731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1716.552177][ T8731] ? __pfx__printk+0x10/0x10 [ 1716.552204][ T8731] ? __might_fault+0xb0/0x130 [ 1716.552237][ T8731] should_fail_ex+0x414/0x560 [ 1716.552264][ T8731] _copy_from_user+0x2d/0xb0 [ 1716.552292][ T8731] __sys_sendto+0x25c/0x520 [ 1716.552324][ T8731] ? __pfx___sys_sendto+0x10/0x10 [ 1716.552348][ T8731] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1716.552391][ T8731] ? __fget_files+0x3a0/0x420 [ 1716.552428][ T8731] ? ksys_write+0x22a/0x250 [ 1716.552453][ T8731] ? __pfx_ksys_write+0x10/0x10 [ 1716.552479][ T8731] __x64_sys_sendto+0xde/0x100 [ 1716.552511][ T8731] do_syscall_64+0xfa/0xfa0 [ 1716.552535][ T8731] ? lockdep_hardirqs_on+0x9c/0x150 [ 1716.552561][ T8731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.552580][ T8731] ? clear_bhb_loop+0x60/0xb0 [ 1716.552603][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.552621][ T8731] RIP: 0033:0x7fe60458ebe9 [ 1716.552639][ T8731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1716.552654][ T8731] RSP: 002b:00007fe605375038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1716.552675][ T8731] RAX: ffffffffffffffda RBX: 00007fe6047c5fa0 RCX: 00007fe60458ebe9 [ 1716.552689][ T8731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1716.552701][ T8731] RBP: 00007fe605375090 R08: 0000200000000040 R09: 000000000000001c [ 1716.552712][ T8731] R10: 0000000024008844 R11: 0000000000000246 R12: 0000000000000001 [ 1716.552724][ T8731] R13: 00007fe6047c6038 R14: 00007fe6047c5fa0 R15: 00007ffd8ff6dc88 [ 1716.552758][ T8731] [ 1716.777272][ T24] m920x_read = error: -19 [ 1716.781682][ T24] dvb-usb: error while querying for an remote control event. [ 1716.810694][T27607] Bluetooth: hci3: command tx timeout [ 1716.930650][ T5911] m920x_read = error: -19 [ 1716.936152][ T5911] dvb-usb: error while querying for an remote control event. [ 1716.964688][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1717.067602][ T323] m920x_read = error: -19 [ 1717.072061][ T323] dvb-usb: error while querying for an remote control event. [ 1717.080360][ T5960] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1717.139145][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1717.146389][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1717.159273][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1717.170686][ T24] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1717.184348][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1717.191030][ T24] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1717.200298][ T323] m920x_read = error: -19 [ 1717.204744][ T323] dvb-usb: error while querying for an remote control event. [ 1717.212202][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.233977][ T24] usb 1-1: config 0 descriptor?? [ 1717.266737][ T5960] usb 7-1: Using ep0 maxpacket: 32 [ 1717.286975][ T5960] usb 7-1: config 0 has no interfaces? [ 1717.294089][ T5911] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1717.314286][ T5960] usb 7-1: New USB device found, idVendor=e724, idProduct=7500, bcdDevice=69.ee [ 1717.323682][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.323877][ T323] m920x_read = error: -19 [ 1717.331701][ T5960] usb 7-1: Product: syz [ 1717.331719][ T5960] usb 7-1: Manufacturer: syz [ 1717.331742][ T5960] usb 7-1: SerialNumber: syz [ 1717.349234][ T5960] usb 7-1: config 0 descriptor?? [ 1717.366188][ T323] dvb-usb: error while querying for an remote control event. [ 1717.414846][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1717.448876][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 1717.455623][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 1717.474964][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1717.484054][ T5911] usb 4-1: config 0 has an invalid interface number: 236 but max is 1 [ 1717.503517][ T5911] usb 4-1: config 0 has an invalid interface number: 129 but max is 1 [ 1717.514269][ T24] usb 1-1: USB disconnect, device number 44 [ 1717.516135][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1717.523500][ T5911] usb 4-1: config 0 has no interface number 0 [ 1717.534768][ T323] m920x_read = error: -19 [ 1717.539179][ T323] dvb-usb: error while querying for an remote control event. [ 1717.551451][ T5911] usb 4-1: config 0 has no interface number 1 [ 1717.561977][ T5911] usb 4-1: config 0 interface 236 has no altsetting 0 [ 1717.573527][ T5911] usb 4-1: config 0 interface 129 has no altsetting 0 [ 1717.583106][ T5911] usb 4-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 1717.594819][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.603057][ T5911] usb 4-1: Product: syz [ 1717.608109][ T5911] usb 4-1: Manufacturer: syz [ 1717.612793][ T5911] usb 4-1: SerialNumber: syz [ 1717.628547][ T5911] usb 4-1: config 0 descriptor?? [ 1717.667918][ T323] m920x_read = error: -19 [ 1717.672508][ T323] dvb-usb: error while querying for an remote control event. [ 1717.773846][ T24] m920x_read = error: -19 [ 1717.778471][ T24] dvb-usb: error while querying for an remote control event. [ 1717.857418][ T5911] ir_usb 4-1:0.236: required endpoints missing [ 1717.887399][ T323] m920x_read = error: -19 [ 1717.891823][ T323] dvb-usb: error while querying for an remote control event. [ 1717.899832][ T5911] usb 4-1: selecting invalid altsetting 0 [ 1717.930939][ T5911] usb 4-1: selecting invalid altsetting 0 [ 1717.937780][ T5911] usb 4-1: Found UVC 2.26 device syz (1ace:e9b2) [ 1717.944512][ T5911] usb 4-1: No valid video chain found. [ 1717.952868][ T5911] usb 4-1: USB disconnect, device number 68 [ 1718.026396][ T323] m920x_read = error: -19 [ 1718.034288][ T323] dvb-usb: error while querying for an remote control event. [ 1718.164229][ T323] m920x_read = error: -19 [ 1718.172953][ T323] dvb-usb: error while querying for an remote control event. [ 1718.314263][ T323] m920x_read = error: -19 [ 1718.320232][ T323] dvb-usb: error while querying for an remote control event. [ 1718.438712][ T323] m920x_read = error: -19 [ 1718.443209][ T323] dvb-usb: error while querying for an remote control event. [ 1718.466311][ T5960] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1718.555163][ T323] m920x_read = error: -19 [ 1718.561412][ T8653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1718.579490][ T323] dvb-usb: error while querying for an remote control event. [ 1718.606533][ T8653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1718.625342][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 1718.634098][ T5960] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1718.655318][ T5960] usb 1-1: config 0 has no interface number 0 [ 1718.677034][ T5960] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1718.686508][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.697041][ T5960] usb 1-1: Product: syz [ 1718.701323][ T5960] usb 1-1: Manufacturer: syz [ 1718.708427][ T5960] usb 1-1: SerialNumber: syz [ 1718.715832][ T323] m920x_read = error: -19 [ 1718.720247][ T323] dvb-usb: error while querying for an remote control event. [ 1718.744023][ T5960] usb 1-1: config 0 descriptor?? [ 1718.745491][ T8653] team0: Port device team_slave_0 added [ 1718.752573][ T5960] smsc95xx v2.0.0 [ 1718.827055][ T8653] team0: Port device team_slave_1 added [ 1718.843732][T28829] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1718.844017][ T323] m920x_read = error: -19 [ 1718.863067][ T323] dvb-usb: error while querying for an remote control event. [ 1718.883835][T27607] Bluetooth: hci3: command tx timeout [ 1718.983787][ T24] m920x_read = error: -19 [ 1718.989298][ T24] dvb-usb: error while querying for an remote control event. [ 1719.005691][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1719.020726][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1719.044101][T28829] usb 4-1: Using ep0 maxpacket: 8 [ 1719.055448][T28829] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 1719.067446][T28829] usb 4-1: config 0 has no interface number 0 [ 1719.076504][T28829] usb 4-1: config 0 interface 102 has no altsetting 0 [ 1719.084482][ T8653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1719.100232][T28829] usb 4-1: New USB device found, idVendor=0482, idProduct=0203, bcdDevice=bb.3e [ 1719.112354][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.119528][T28829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.128182][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1719.134674][ T24] m920x_read = error: -19 [ 1719.154499][T28829] usb 4-1: Product: syz [ 1719.154525][T28829] usb 4-1: Manufacturer: syz [ 1719.154541][T28829] usb 4-1: SerialNumber: syz [ 1719.158223][T28829] usb 4-1: config 0 descriptor?? [ 1719.180934][ T5960] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1719.205497][ T24] dvb-usb: error while querying for an remote control event. [ 1719.214252][ T5960] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1719.226862][ T8653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.251919][ T7839] usb 7-1: USB disconnect, device number 71 [ 1719.305389][ T12] IPVS: stop unused estimator thread 0... [ 1719.334615][ T24] m920x_read = error: -19 [ 1719.339045][ T24] dvb-usb: error while querying for an remote control event. [ 1719.418312][ T8653] hsr_slave_0: entered promiscuous mode [ 1719.448353][ T5960] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1719.463717][ T24] m920x_read = error: -19 [ 1719.465151][ T8653] hsr_slave_1: entered promiscuous mode [ 1719.468110][ T24] dvb-usb: error while querying for an remote control event. [ 1719.475419][T28829] usb 4-1: USB disconnect, device number 69 [ 1719.488589][ T5960] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1719.499549][ T8653] debugfs: 'hsr0' already exists in 'hsr' [ 1719.511616][ T8653] Cannot create hsr debugfs directory [ 1719.538528][ T5960] usb 1-1: USB disconnect, device number 45 [ 1719.598312][ T24] m920x_read = error: -19 [ 1719.602816][ T24] dvb-usb: error while querying for an remote control event. [ 1719.744218][ T24] m920x_read = error: -19 [ 1719.748641][ T24] dvb-usb: error while querying for an remote control event. [ 1719.899211][ T24] m920x_read = error: -19 [ 1719.907625][ T24] dvb-usb: error while querying for an remote control event. [ 1720.036793][ T24] m920x_read = error: -19 [ 1720.052097][ T24] dvb-usb: error while querying for an remote control event. [ 1720.174020][ T24] m920x_read = error: -19 [ 1720.198439][ T24] dvb-usb: error while querying for an remote control event. [ 1720.345197][ T24] m920x_read = error: -19 [ 1720.349618][ T24] dvb-usb: error while querying for an remote control event. [ 1720.484392][ T24] m920x_read = error: -19 [ 1720.488891][ T24] dvb-usb: error while querying for an remote control event. [ 1720.624343][ T24] m920x_read = error: -19 [ 1720.634387][ T24] dvb-usb: error while querying for an remote control event. [ 1720.763947][ T24] m920x_read = error: -19 [ 1720.768370][ T24] dvb-usb: error while querying for an remote control event. [ 1720.915357][ T24] m920x_read = error: -19 [ 1720.921586][ T24] dvb-usb: error while querying for an remote control event. [ 1720.956515][ T8653] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1720.974673][T27607] Bluetooth: hci3: command tx timeout [ 1720.996810][ T8653] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1721.038225][ T8653] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1721.073567][ T24] m920x_read = error: -19 [ 1721.078167][ T24] dvb-usb: error while querying for an remote control event. [ 1721.086103][ T8653] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1721.194332][ T323] m920x_read = error: -19 [ 1721.202702][ T323] dvb-usb: error while querying for an remote control event. [ 1721.343870][ T323] m920x_read = error: -19 [ 1721.348304][ T323] dvb-usb: error while querying for an remote control event. [ 1721.370571][ T8653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1721.425986][ T8653] 8021q: adding VLAN 0 to HW filter on device team0 [ 1721.463524][ T5960] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1721.470090][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.478355][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1721.486416][ T5911] m920x_read = error: -19 [ 1721.490800][ T5911] dvb-usb: error while querying for an remote control event. [ 1721.560378][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.567678][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1721.614770][ T323] m920x_read = error: -19 [ 1721.619283][ T323] dvb-usb: error while querying for an remote control event. [ 1721.669404][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1721.712115][ T5960] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 1721.740896][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.753844][ T5911] m920x_read = error: -19 [ 1721.758259][ T5911] dvb-usb: error while querying for an remote control event. [ 1721.791894][ T5960] usb 1-1: config 0 descriptor?? [ 1721.893557][ T5911] m920x_read = error: -19 [ 1721.903906][ T5911] dvb-usb: error while querying for an remote control event. [ 1722.033653][ T5911] m920x_read = error: -19 [ 1722.038093][ T5911] dvb-usb: error while querying for an remote control event. [ 1722.093556][T28829] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1722.163885][ T5911] m920x_read = error: -19 [ 1722.168494][ T5911] dvb-usb: error while querying for an remote control event. [ 1722.255834][T28829] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.277983][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1722.285250][ T5960] logitech 0003:046D:C626.0030: unbalanced delimiter at end of report description [ 1722.303772][T28829] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1722.313828][ T5911] m920x_read = error: -19 [ 1722.313860][ T5911] dvb-usb: error while querying for an remote control event. [ 1722.338597][ T5960] logitech 0003:046D:C626.0030: parse failed [ 1722.356787][ T5960] logitech 0003:046D:C626.0030: probe with driver logitech failed with error -22 [ 1722.388163][T28829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1722.410140][T28829] usb 7-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 1722.425426][ T5911] m920x_read = error: -19 [ 1722.429829][ T5911] dvb-usb: error while querying for an remote control event. [ 1722.430979][T28829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.475733][ T5960] usb 1-1: USB disconnect, device number 46 [ 1722.504835][T28829] usb 7-1: config 0 descriptor?? [ 1722.554444][ T5911] m920x_read = error: -19 [ 1722.566459][ T5911] dvb-usb: error while querying for an remote control event. [ 1722.710507][ T5911] m920x_read = error: -19 [ 1722.715996][ T5911] dvb-usb: error while querying for an remote control event. [ 1722.853841][ T323] m920x_read = error: -19 [ 1722.858284][ T323] dvb-usb: error while querying for an remote control event. [ 1722.973705][ T323] m920x_read = error: -19 [ 1722.979138][ T323] dvb-usb: error while querying for an remote control event. [ 1723.045231][ T8653] veth0_vlan: entered promiscuous mode [ 1723.086367][ T8653] veth1_vlan: entered promiscuous mode [ 1723.114739][ T323] m920x_read = error: -19 [ 1723.119154][ T323] dvb-usb: error while querying for an remote control event. [ 1723.165490][T28829] usb 7-1: USB disconnect, device number 72 [ 1723.178579][ T8653] veth0_macvtap: entered promiscuous mode [ 1723.196546][ T8653] veth1_macvtap: entered promiscuous mode [ 1723.254161][ T323] m920x_read = error: -19 [ 1723.258585][ T323] dvb-usb: error while querying for an remote control event. [ 1723.278931][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1723.296869][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1723.314101][ T3511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.330217][ T3511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.351359][ T3511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.379412][ T3511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.390691][ T323] m920x_read = error: -19 [ 1723.400578][ T323] dvb-usb: error while querying for an remote control event. [ 1723.533776][ T323] m920x_read = error: -19 [ 1723.538816][ T323] dvb-usb: error while querying for an remote control event. [ 1723.579448][ T2903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1723.601823][ T2903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1723.666785][ T5911] m920x_read = error: -19 [ 1723.675712][ T5911] dvb-usb: error while querying for an remote control event. [ 1723.752593][ T2903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1723.779124][ T2903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1723.823790][ T5911] m920x_read = error: -19 [ 1723.828291][ T5911] dvb-usb: error while querying for an remote control event. [ 1723.972456][ T8880] FAULT_INJECTION: forcing a failure. [ 1723.972456][ T8880] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.987938][ T5911] m920x_read = error: -19 [ 1724.013875][ T5911] dvb-usb: error while querying for an remote control event. [ 1724.023811][ T8880] CPU: 1 UID: 0 PID: 8880 Comm: syz.4.11073 Not tainted syzkaller #0 PREEMPT(full) [ 1724.023841][ T8880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1724.023853][ T8880] Call Trace: [ 1724.023861][ T8880] [ 1724.023871][ T8880] dump_stack_lvl+0x189/0x250 [ 1724.023906][ T8880] ? __pfx____ratelimit+0x10/0x10 [ 1724.023933][ T8880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1724.023960][ T8880] ? __pfx__printk+0x10/0x10 [ 1724.023994][ T8880] ? __pfx___might_resched+0x10/0x10 [ 1724.024017][ T8880] ? fs_reclaim_acquire+0x7d/0x100 [ 1724.024045][ T8880] should_fail_ex+0x414/0x560 [ 1724.024072][ T8880] should_failslab+0xa8/0x100 [ 1724.024098][ T8880] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1724.024118][ T8880] ? __alloc_skb+0x112/0x2d0 [ 1724.024153][ T8880] __alloc_skb+0x112/0x2d0 [ 1724.024185][ T8880] tcp_stream_alloc_skb+0x3d/0x340 [ 1724.024214][ T8880] tcp_sendmsg_locked+0xf38/0x5620 [ 1724.024303][ T8880] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1724.024325][ T8880] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1724.024353][ T8880] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1724.024393][ T8880] tcp_sendmsg+0x2f/0x50 [ 1724.024418][ T8880] __sock_sendmsg+0x19c/0x270 [ 1724.024446][ T8880] __sys_sendto+0x3bd/0x520 [ 1724.024476][ T8880] ? __pfx___sys_sendto+0x10/0x10 [ 1724.024501][ T8880] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1724.024545][ T8880] ? __fget_files+0x3a0/0x420 [ 1724.024583][ T8880] ? ksys_write+0x22a/0x250 [ 1724.024609][ T8880] ? __pfx_ksys_write+0x10/0x10 [ 1724.024635][ T8880] __x64_sys_sendto+0xde/0x100 [ 1724.024668][ T8880] do_syscall_64+0xfa/0xfa0 [ 1724.024693][ T8880] ? lockdep_hardirqs_on+0x9c/0x150 [ 1724.024727][ T8880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.024747][ T8880] ? clear_bhb_loop+0x60/0xb0 [ 1724.024771][ T8880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.024796][ T8880] RIP: 0033:0x7f100958ebe9 [ 1724.024813][ T8880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1724.024828][ T8880] RSP: 002b:00007f100a48c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1724.024850][ T8880] RAX: ffffffffffffffda RBX: 00007f10097c5fa0 RCX: 00007f100958ebe9 [ 1724.024864][ T8880] RDX: 0000000000000501 RSI: 0000200000000580 RDI: 0000000000000003 [ 1724.024877][ T8880] RBP: 00007f100a48c090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.024889][ T8880] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 1724.024899][ T8880] R13: 00007f10097c6038 R14: 00007f10097c5fa0 R15: 00007ffe5b9efb88 [ 1724.024935][ T8880] [ 1724.424465][ T323] m920x_read = error: -19 [ 1724.428892][ T323] dvb-usb: error while querying for an remote control event. [ 1724.563298][ T323] m920x_read = error: -19 [ 1724.568015][ T323] dvb-usb: error while querying for an remote control event. [ 1724.684081][ T24] m920x_read = error: -19 [ 1724.688935][ T24] dvb-usb: error while querying for an remote control event. [ 1724.813582][ T5911] m920x_read = error: -19 [ 1724.818012][ T5911] dvb-usb: error while querying for an remote control event. [ 1724.925007][ T323] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1724.943666][ T5911] m920x_read = error: -19 [ 1724.948263][ T5911] dvb-usb: error while querying for an remote control event. [ 1725.074089][ T5911] m920x_read = error: -19 [ 1725.097622][ T5911] dvb-usb: error while querying for an remote control event. [ 1725.143638][ T323] usb 1-1: Using ep0 maxpacket: 32 [ 1725.211700][ T323] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1725.382599][ T323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.398941][ T5911] m920x_read = error: -19 [ 1725.479636][ T5911] dvb-usb: error while querying for an remote control event. [ 1725.561888][ T323] usb 1-1: config 0 has no interface number 0 [ 1725.593558][ T323] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1725.646436][ T323] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 1725.677254][T20605] m920x_read = error: -19 [ 1725.690374][T20605] dvb-usb: error while querying for an remote control event. [ 1725.723594][ T323] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1725.773489][ T323] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1725.797508][ T323] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1725.819498][ T323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.828294][ T323] usb 1-1: Product: syz [ 1725.837797][ T5911] m920x_read = error: -19 [ 1725.848509][ T5911] dvb-usb: error while querying for an remote control event. [ 1725.869574][ T323] usb 1-1: Manufacturer: syz [ 1725.879717][ T323] usb 1-1: SerialNumber: syz [ 1725.891854][ T323] usb 1-1: config 0 descriptor?? [ 1725.984520][ T5911] m920x_read = error: -19 [ 1725.991121][ T5911] dvb-usb: error while querying for an remote control event. [ 1726.053616][T20605] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1726.114344][ T323] ipheth 1-1:0.196: Unable to find endpoints [ 1726.123833][ T5911] m920x_read = error: -19 [ 1726.131706][ T5911] dvb-usb: error while querying for an remote control event. [ 1726.160537][ T323] usb 1-1: USB disconnect, device number 47 [ 1726.215673][T20605] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1726.233803][T20605] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.257756][T20605] usb 5-1: config 0 has no interface number 0 [ 1726.265383][T20605] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1726.275867][ T5911] m920x_read = error: -19 [ 1726.280347][ T5911] dvb-usb: error while querying for an remote control event. [ 1726.288668][T20605] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1726.305704][T20605] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1726.326756][T20605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.341679][T20605] usb 5-1: Product: syz [ 1726.357536][T20605] usb 5-1: Manufacturer: syz [ 1726.362368][T20605] usb 5-1: SerialNumber: syz [ 1726.379042][T20605] usb 5-1: config 0 descriptor?? [ 1726.414352][ T323] m920x_read = error: -19 [ 1726.418999][ T323] dvb-usb: error while querying for an remote control event. [ 1726.533869][ T323] m920x_read = error: -19 [ 1726.538341][ T323] dvb-usb: error while querying for an remote control event. [ 1726.654046][T20605] m920x_read = error: -19 [ 1726.658727][T20605] dvb-usb: error while querying for an remote control event. [ 1726.785153][T20605] m920x_read = error: -19 [ 1726.789745][T20605] dvb-usb: error while querying for an remote control event. [ 1726.820037][T28829] usb 5-1: USB disconnect, device number 13 [ 1726.915454][T20605] m920x_read = error: -19 [ 1726.920010][T20605] dvb-usb: error while querying for an remote control event. [ 1727.055303][T20605] m920x_read = error: -19 [ 1727.062703][T20605] dvb-usb: error while querying for an remote control event. [ 1727.193756][T20605] m920x_read = error: -19 [ 1727.204068][T20605] dvb-usb: error while querying for an remote control event. [ 1727.323586][T20605] m920x_read = error: -19 [ 1727.332145][T20605] dvb-usb: error while querying for an remote control event. [ 1727.453064][ T8973] tmpfs: Bad value for 'uid' [ 1727.455204][T28829] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1727.458071][T20605] m920x_read = error: -19 [ 1727.475906][ T8973] tmpfs: Bad value for 'uid' [ 1727.481851][T20605] dvb-usb: error while querying for an remote control event. [ 1727.548345][ T8976] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11159'. [ 1727.561284][ T8979] binder: 8978:8979 unknown command 0 [ 1727.571905][ T8979] binder: 8978:8979 ioctl c0306201 200000000080 returned -22 [ 1727.614118][T20605] m920x_read = error: -19 [ 1727.623498][T20605] dvb-usb: error while querying for an remote control event. [ 1727.637369][T28829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1727.666002][T28829] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1727.677843][T28829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.696885][T28829] usb 1-1: config 0 descriptor?? [ 1727.713004][ T8960] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1727.743888][T20605] m920x_read = error: -19 [ 1727.751440][T20605] dvb-usb: error while querying for an remote control event. [ 1727.832435][ T8989] Bluetooth: MGMT ver 1.23 [ 1727.883738][T20605] m920x_read = error: -19 [ 1727.888161][T20605] dvb-usb: error while querying for an remote control event. [ 1728.023794][ T5911] m920x_read = error: -19 [ 1728.028417][ T5911] dvb-usb: error while querying for an remote control event. [ 1728.152403][T28829] elan 0003:04F3:0755.0032: item fetching failed at offset 3/5 [ 1728.163967][ T5911] m920x_read = error: -19 [ 1728.168376][ T5911] dvb-usb: error while querying for an remote control event. [ 1728.182661][T28829] elan 0003:04F3:0755.0032: Hid Parse failed [ 1728.195665][T28829] elan 0003:04F3:0755.0032: probe with driver elan failed with error -22 [ 1728.294111][ T5911] m920x_read = error: -19 [ 1728.298732][ T5911] dvb-usb: error while querying for an remote control event. [ 1728.359387][ T5911] usb 1-1: USB disconnect, device number 48 [ 1728.424479][T20605] m920x_read = error: -19 [ 1728.429122][T20605] dvb-usb: error while querying for an remote control event. [ 1728.523697][T28829] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1728.543795][T20605] m920x_read = error: -19 [ 1728.548766][T20605] dvb-usb: error while querying for an remote control event. [ 1728.663739][T20605] m920x_read = error: -19 [ 1728.670274][T20605] dvb-usb: error while querying for an remote control event. [ 1728.683731][T28829] usb 7-1: Using ep0 maxpacket: 8 [ 1728.691113][T28829] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1728.701895][T28829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.720149][T28829] usb 7-1: config 0 descriptor?? [ 1728.783640][T20605] m920x_read = error: -19 [ 1728.788274][T20605] dvb-usb: error while querying for an remote control event. [ 1728.907112][T20605] m920x_read = error: -19 [ 1728.911534][T20605] dvb-usb: error while querying for an remote control event. [ 1729.063785][ T5911] m920x_read = error: -19 [ 1729.068331][ T5911] dvb-usb: error while querying for an remote control event. [ 1729.194198][T20605] m920x_read = error: -19 [ 1729.202474][T20605] dvb-usb: error while querying for an remote control event. [ 1729.327871][T20605] m920x_read = error: -19 [ 1729.335415][T20605] dvb-usb: error while querying for an remote control event. [ 1729.344758][ T5911] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1729.349276][T28829] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1729.386243][T28829] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1729.415677][T28829] usb 7-1: USB disconnect, device number 73 [ 1729.495749][T20605] m920x_read = error: -19 [ 1729.510079][T20605] dvb-usb: error while querying for an remote control event. [ 1729.535413][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 1729.543332][ T5911] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1729.562093][ T5911] usb 4-1: config 0 has no interface number 0 [ 1729.576629][ T5911] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1729.603031][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1729.619722][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.637153][T20605] m920x_read = error: -19 [ 1729.642097][T20605] dvb-usb: error while querying for an remote control event. [ 1729.656916][ T5911] usb 4-1: Product: syz [ 1729.661156][ T5911] usb 4-1: Manufacturer: syz [ 1729.666339][ T5911] usb 4-1: SerialNumber: syz [ 1729.678086][ T5911] usb 4-1: config 0 descriptor?? [ 1729.701439][ T5911] smsc75xx v1.0.0 [ 1729.705926][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1729.720654][ T5911] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1729.773628][ T5911] m920x_read = error: -19 [ 1729.778053][ T5911] dvb-usb: error while querying for an remote control event. [ 1729.906067][T20605] m920x_read = error: -19 [ 1729.925386][T20605] dvb-usb: error while querying for an remote control event. [ 1730.077847][ T5911] m920x_read = error: -19 [ 1730.082477][ T5911] dvb-usb: error while querying for an remote control event. [ 1730.203681][ T5911] m920x_read = error: -19 [ 1730.208112][ T5911] dvb-usb: error while querying for an remote control event. [ 1730.233715][T20605] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 1730.343773][ T5911] m920x_read = error: -19 [ 1730.349507][ T5911] dvb-usb: error while querying for an remote control event. [ 1730.395570][T20605] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 64 [ 1730.406905][T20605] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1730.416700][T20605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.436753][ T9057] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1730.463609][ T5911] m920x_read = error: -19 [ 1730.471156][ T5911] dvb-usb: error while querying for an remote control event. [ 1730.583797][ T5911] m920x_read = error: -19 [ 1730.589452][ T5911] dvb-usb: error while querying for an remote control event. [ 1730.652435][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.659619][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.660831][T20605] usb 7-1: string descriptor 0 read error: -71 [ 1730.713720][ T5911] m920x_read = error: -19 [ 1730.718326][ T5911] dvb-usb: error while querying for an remote control event. [ 1730.790830][T20605] usb 7-1: USB disconnect, device number 74 [ 1730.874360][ T5911] m920x_read = error: -19 [ 1730.893609][ T5911] dvb-usb: error while querying for an remote control event. [ 1731.008235][ T5911] m920x_read = error: -19 [ 1731.014394][ T5911] dvb-usb: error while querying for an remote control event. [ 1731.143718][T20605] m920x_read = error: -19 [ 1731.148135][T20605] dvb-usb: error while querying for an remote control event. [ 1731.263586][T20605] m920x_read = error: -19 [ 1731.270397][T20605] dvb-usb: error while querying for an remote control event. [ 1731.414583][T20605] m920x_read = error: -19 [ 1731.426004][T20605] dvb-usb: error while querying for an remote control event. [ 1731.686739][T20605] m920x_read = error: -19 [ 1731.691168][T20605] dvb-usb: error while querying for an remote control event. [ 1731.816155][T20605] m920x_read = error: -19 [ 1731.820583][T20605] dvb-usb: error while querying for an remote control event. [ 1731.954512][ T24] m920x_read = error: -19 [ 1731.958946][ T24] dvb-usb: error while querying for an remote control event. [ 1732.106309][T20605] m920x_read = error: -19 [ 1732.112520][T20605] dvb-usb: error while querying for an remote control event. [ 1732.210589][ T9110] [ 1732.247060][T20605] m920x_read = error: -19 [ 1732.258538][T20605] dvb-usb: error while querying for an remote control event. [ 1732.385587][T20605] m920x_read = error: -19 [ 1732.389999][T20605] dvb-usb: error while querying for an remote control event. [ 1732.469765][ T7839] usb 4-1: USB disconnect, device number 70 [ 1732.524140][T20605] m920x_read = error: -19 [ 1732.533175][T20605] dvb-usb: error while querying for an remote control event. [ 1732.663965][T20605] m920x_read = error: -19 [ 1732.668390][T20605] dvb-usb: error while querying for an remote control event. [ 1732.803922][T20605] m920x_read = error: -19 [ 1732.810608][T20605] dvb-usb: error while querying for an remote control event. [ 1732.943615][T20605] m920x_read = error: -19 [ 1732.950513][T20605] dvb-usb: error while querying for an remote control event. [ 1733.093591][ T24] m920x_read = error: -19 [ 1733.098158][ T24] dvb-usb: error while querying for an remote control event. [ 1733.243979][ T24] m920x_read = error: -19 [ 1733.253570][ T24] dvb-usb: error while querying for an remote control event. [ 1733.388180][ T24] m920x_read = error: -19 [ 1733.393236][ T24] dvb-usb: error while querying for an remote control event. [ 1733.521931][ T5911] m920x_read = error: -19 [ 1733.547086][ T5911] dvb-usb: error while querying for an remote control event. [ 1733.674310][ T5911] m920x_read = error: -19 [ 1733.687078][ T5911] dvb-usb: error while querying for an remote control event. [ 1733.823960][ T5911] m920x_read = error: -19 [ 1733.828384][ T5911] dvb-usb: error while querying for an remote control event. [ 1733.966456][ T5911] m920x_read = error: -19 [ 1733.973488][ T5911] dvb-usb: error while querying for an remote control event. [ 1734.113749][ T24] m920x_read = error: -19 [ 1734.118379][ T24] dvb-usb: error while querying for an remote control event. [ 1734.191589][ T9176] loop3: detected capacity change from 0 to 7 [ 1734.217780][ T9176] Dev loop3: unable to read RDB block 7 [ 1734.233614][ T5911] m920x_read = error: -19 [ 1734.242532][ T5911] dvb-usb: error while querying for an remote control event. [ 1734.253810][ T9176] loop3: unable to read partition table [ 1734.259763][ T9176] loop3: partition table beyond EOD, truncated [ 1734.274209][ T9176] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1734.393870][ T24] m920x_read = error: -19 [ 1734.398293][ T24] dvb-usb: error while querying for an remote control event. [ 1734.523643][T20605] m920x_read = error: -19 [ 1734.528160][T20605] dvb-usb: error while querying for an remote control event. [ 1734.563592][ T5911] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 1734.677532][T20605] m920x_read = error: -19 [ 1734.682010][T20605] dvb-usb: error while querying for an remote control event. [ 1734.734857][ T5911] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1734.757881][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.777331][ T5911] usb 4-1: config 0 descriptor?? [ 1734.799903][T20605] m920x_read = error: -19 [ 1734.806634][T20605] dvb-usb: error while querying for an remote control event. [ 1734.923689][T20605] m920x_read = error: -19 [ 1734.928182][T20605] dvb-usb: error while querying for an remote control event. [ 1735.002062][ T9195] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1735.051911][ T24] m920x_read = error: -19 [ 1735.075764][ T24] dvb-usb: error while querying for an remote control event. [ 1735.198460][ T24] m920x_read = error: -19 [ 1735.202938][ T24] dvb-usb: error while querying for an remote control event. [ 1735.327005][ T24] m920x_read = error: -19 [ 1735.331658][ T24] dvb-usb: error while querying for an remote control event. [ 1735.483506][ T24] m920x_read = error: -19 [ 1735.487986][ T24] dvb-usb: error while querying for an remote control event. [ 1735.605712][ T24] m920x_read = error: -19 [ 1735.618642][ T24] dvb-usb: error while querying for an remote control event. [ 1735.753964][ T24] m920x_read = error: -19 [ 1735.758545][ T24] dvb-usb: error while querying for an remote control event. [ 1735.875385][ T24] m920x_read = error: -19 [ 1735.881034][ T24] dvb-usb: error while querying for an remote control event. [ 1736.032813][ T24] m920x_read = error: -19 [ 1736.037914][ T24] dvb-usb: error while querying for an remote control event. [ 1736.159199][T20605] m920x_read = error: -19 [ 1736.163993][T20605] dvb-usb: error while querying for an remote control event. [ 1736.251781][ T5911] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1736.266223][ T5911] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1736.279140][T20605] m920x_read = error: -19 [ 1736.283773][T20605] dvb-usb: error while querying for an remote control event. [ 1736.306599][ T5911] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1736.331114][ T5911] usb 4-1: USB disconnect, device number 71 [ 1736.442663][ T24] m920x_read = error: -19 [ 1736.450481][ T24] dvb-usb: error while querying for an remote control event. [ 1736.553781][ T5911] m920x_read = error: -19 [ 1736.558206][ T5911] dvb-usb: error while querying for an remote control event. [ 1736.696316][ T5911] m920x_read = error: -19 [ 1736.702545][ T5911] dvb-usb: error while querying for an remote control event. [ 1736.818664][ T5911] m920x_read = error: -19 [ 1736.823091][ T5911] dvb-usb: error while querying for an remote control event. [ 1736.937717][ T5911] m920x_read = error: -19 [ 1736.942147][ T5911] dvb-usb: error while querying for an remote control event. [ 1737.141839][ T24] m920x_read = error: -19 [ 1737.210910][ T9232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11262'. [ 1737.227541][ T24] dvb-usb: error while querying for an remote control event. [ 1737.417651][ T24] m920x_read = error: -19 [ 1737.422626][ T24] dvb-usb: error while querying for an remote control event. [ 1737.664731][ T323] m920x_read = error: -19 [ 1737.669163][ T323] dvb-usb: error while querying for an remote control event. [ 1737.806909][ T323] m920x_read = error: -19 [ 1737.811326][ T323] dvb-usb: error while querying for an remote control event. [ 1737.935389][ T323] m920x_read = error: -19 [ 1737.939846][ T323] dvb-usb: error while querying for an remote control event. [ 1738.069705][ T323] m920x_read = error: -19 [ 1738.074296][ T323] dvb-usb: error while querying for an remote control event. [ 1738.195224][ T323] m920x_read = error: -19 [ 1738.199867][ T323] dvb-usb: error while querying for an remote control event. [ 1738.317844][ T323] m920x_read = error: -19 [ 1738.322349][ T323] dvb-usb: error while querying for an remote control event. [ 1738.445166][ T323] m920x_read = error: -19 [ 1738.449686][ T323] dvb-usb: error while querying for an remote control event. [ 1738.573844][ T323] m920x_read = error: -19 [ 1738.578273][ T323] dvb-usb: error while querying for an remote control event. [ 1738.704311][ T323] m920x_read = error: -19 [ 1738.708832][ T323] dvb-usb: error while querying for an remote control event. [ 1738.835067][ T323] m920x_read = error: -19 [ 1738.839501][ T323] dvb-usb: error while querying for an remote control event. [ 1738.965325][ T323] m920x_read = error: -19 [ 1738.970473][ T323] dvb-usb: error while querying for an remote control event. [ 1739.103840][ T323] m920x_read = error: -19 [ 1739.108361][ T323] dvb-usb: error while querying for an remote control event. [ 1739.254809][ T323] m920x_read = error: -19 [ 1739.260397][ T323] dvb-usb: error while querying for an remote control event. [ 1739.396275][ T323] m920x_read = error: -19 [ 1739.401020][ T323] dvb-usb: error while querying for an remote control event. [ 1739.515278][ T323] m920x_read = error: -19 [ 1739.519864][ T323] dvb-usb: error while querying for an remote control event. [ 1739.626755][ T323] m920x_read = error: -19 [ 1739.631430][ T323] dvb-usb: error while querying for an remote control event. [ 1739.754392][ T323] m920x_read = error: -19 [ 1739.759030][ T323] dvb-usb: error while querying for an remote control event. [ 1739.883756][ T323] m920x_read = error: -19 [ 1739.888219][ T323] dvb-usb: error while querying for an remote control event. [ 1740.005101][ T323] m920x_read = error: -19 [ 1740.011437][ T323] dvb-usb: error while querying for an remote control event. [ 1740.140660][ T323] m920x_read = error: -19 [ 1740.146659][ T323] dvb-usb: error while querying for an remote control event. [ 1740.266996][ T323] m920x_read = error: -19 [ 1740.271658][ T323] dvb-usb: error while querying for an remote control event. [ 1740.385367][ T323] m920x_read = error: -19 [ 1740.390260][ T323] dvb-usb: error while querying for an remote control event. [ 1740.504988][ T24] m920x_read = error: -19 [ 1740.509406][ T24] dvb-usb: error while querying for an remote control event. [ 1740.633797][ T24] m920x_read = error: -19 [ 1740.638264][ T24] dvb-usb: error while querying for an remote control event. [ 1740.754666][ T24] m920x_read = error: -19 [ 1740.759189][ T24] dvb-usb: error while querying for an remote control event. [ 1740.874101][ T24] m920x_read = error: -19 [ 1740.878788][ T24] dvb-usb: error while querying for an remote control event. [ 1741.007024][ T24] m920x_read = error: -19 [ 1741.011464][ T24] dvb-usb: error while querying for an remote control event. [ 1741.115975][ T24] m920x_read = error: -19 [ 1741.120389][ T24] dvb-usb: error while querying for an remote control event. [ 1741.234835][ T24] m920x_read = error: -19 [ 1741.239272][ T24] dvb-usb: error while querying for an remote control event. [ 1741.373045][ T24] m920x_read = error: -19 [ 1741.377538][ T24] dvb-usb: error while querying for an remote control event. [ 1741.494507][ T24] m920x_read = error: -19 [ 1741.499233][ T24] dvb-usb: error while querying for an remote control event. [ 1741.621484][ T24] m920x_read = error: -19 [ 1741.632021][ T24] dvb-usb: error while querying for an remote control event. [ 1741.750087][ T24] m920x_read = error: -19 [ 1741.754569][ T24] dvb-usb: error while querying for an remote control event. [ 1741.874627][ T24] m920x_read = error: -19 [ 1741.879054][ T24] dvb-usb: error while querying for an remote control event. [ 1742.003698][ T24] m920x_read = error: -19 [ 1742.008294][ T24] dvb-usb: error while querying for an remote control event. [ 1742.134689][ T24] m920x_read = error: -19 [ 1742.139166][ T24] dvb-usb: error while querying for an remote control event. [ 1742.259016][ T24] m920x_read = error: -19 [ 1742.263519][ T24] dvb-usb: error while querying for an remote control event. [ 1742.383654][ T24] m920x_read = error: -19 [ 1742.388077][ T24] dvb-usb: error while querying for an remote control event. [ 1742.564867][ T24] m920x_read = error: -19 [ 1742.569410][ T24] dvb-usb: error while querying for an remote control event. [ 1742.723647][ T5911] m920x_read = error: -19 [ 1742.728313][ T5911] dvb-usb: error while querying for an remote control event. [ 1742.857461][ T5911] m920x_read = error: -19 [ 1742.920886][ T5911] dvb-usb: error while querying for an remote control event. [ 1743.548254][ T5911] m920x_read = error: -19 [ 1743.554024][ T5911] dvb-usb: error while querying for an remote control event. [ 1743.663606][ T24] m920x_read = error: -19 [ 1743.668031][ T24] dvb-usb: error while querying for an remote control event. [ 1743.843734][ T5911] m920x_read = error: -19 [ 1743.848219][ T5911] dvb-usb: error while querying for an remote control event. [ 1743.969584][ T323] m920x_read = error: -19 [ 1743.979161][ T323] dvb-usb: error while querying for an remote control event. [ 1743.987006][ T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1744.103901][ T323] m920x_read = error: -19 [ 1744.108588][ T323] dvb-usb: error while querying for an remote control event. [ 1744.159513][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1744.185282][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 1744.205227][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.224783][ T24] usb 4-1: config 0 descriptor?? [ 1744.233593][ T323] m920x_read = error: -19 [ 1744.238259][ T323] dvb-usb: error while querying for an remote control event. [ 1744.281313][ T9298] netlink: 88 bytes leftover after parsing attributes in process `syz.4.11291'. [ 1744.291052][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11291'. [ 1744.373625][ T323] m920x_read = error: -19 [ 1744.404579][ T323] dvb-usb: error while querying for an remote control event. [ 1744.429409][ T9300] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1744.468303][ T9300] kvm: pic: non byte read [ 1744.473264][ T9300] kvm: pic: level sensitive irq not supported [ 1744.473385][ T9300] kvm: pic: non byte read [ 1744.493216][ T9300] kvm: pic: level sensitive irq not supported [ 1744.493302][ T9300] kvm: pic: non byte read [ 1744.513802][ T323] m920x_read = error: -19 [ 1744.518442][ T323] dvb-usb: error while querying for an remote control event. [ 1744.538119][ T9300] kvm: pic: level sensitive irq not supported [ 1744.538242][ T9300] kvm: pic: non byte read [ 1744.550713][ T9300] kvm: pic: level sensitive irq not supported [ 1744.550842][ T9300] kvm: pic: non byte read [ 1744.641648][ T24] logitech 0003:046D:C626.0033: ignoring exceeding usage max [ 1744.649543][ T323] m920x_read = error: -19 [ 1744.654029][ T323] dvb-usb: error while querying for an remote control event. [ 1744.662758][ T24] logitech 0003:046D:C626.0033: unbalanced delimiter at end of report description [ 1744.664039][ T5960] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 1744.673835][ T24] logitech 0003:046D:C626.0033: parse failed [ 1744.687949][ T24] logitech 0003:046D:C626.0033: probe with driver logitech failed with error -22 [ 1744.765438][ T24] m920x_read = error: -19 [ 1744.769875][ T24] dvb-usb: error while querying for an remote control event. [ 1744.858286][ T24] usb 4-1: USB disconnect, device number 72 [ 1744.860395][ T5960] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1744.892554][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.904497][ T323] m920x_read = error: -19 [ 1744.909159][ T323] dvb-usb: error while querying for an remote control event. [ 1744.925903][ T5960] usb 5-1: config 0 descriptor?? [ 1745.024294][ T323] m920x_read = error: -19 [ 1745.033675][ T323] dvb-usb: error while querying for an remote control event. [ 1745.164450][ T323] m920x_read = error: -19 [ 1745.173603][ T323] dvb-usb: error while querying for an remote control event. [ 1745.293643][ T323] m920x_read = error: -19 [ 1745.299174][ T323] dvb-usb: error while querying for an remote control event. [ 1745.426606][ T323] m920x_read = error: -19 [ 1745.431058][ T323] dvb-usb: error while querying for an remote control event. [ 1745.604008][ T323] m920x_read = error: -19 [ 1745.609548][ T323] dvb-usb: error while querying for an remote control event. [ 1745.749528][ T323] m920x_read = error: -19 [ 1745.760636][ T323] dvb-usb: error while querying for an remote control event. [ 1745.995071][T28829] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1746.022402][ T323] m920x_read = error: -19 [ 1746.026901][ T323] dvb-usb: error while querying for an remote control event. [ 1746.163676][ T24] m920x_read = error: -19 [ 1746.163737][T28829] usb 4-1: Using ep0 maxpacket: 32 [ 1746.176004][ T24] dvb-usb: error while querying for an remote control event. [ 1746.182724][T28829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1746.199837][T28829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1746.225363][T28829] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1746.238284][T28829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.268128][T28829] usb 4-1: config 0 descriptor?? [ 1746.298851][T28829] hub 4-1:0.0: USB hub found [ 1746.323783][ T323] m920x_read = error: -19 [ 1746.328204][ T323] dvb-usb: error while querying for an remote control event. [ 1746.473635][ T323] m920x_read = error: -19 [ 1746.478058][ T323] dvb-usb: error while querying for an remote control event. [ 1746.491638][T28829] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 1746.544821][ T9363] binder: 9362:9363 unknown command 0 [ 1746.550261][ T9363] binder: 9362:9363 ioctl c0306201 200000000080 returned -22 [ 1746.584956][ T9363] binder: BINDER_SET_CONTEXT_MGR already set [ 1746.591018][ T9363] binder: 9362:9363 ioctl 4018620d 200000000040 returned -16 [ 1746.619741][ T24] m920x_read = error: -19 [ 1746.624210][ T24] dvb-usb: error while querying for an remote control event. [ 1746.733731][ T323] m920x_read = error: -19 [ 1746.743488][ T323] dvb-usb: error while querying for an remote control event. [ 1746.757858][ T5960] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1746.799919][ T5960] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1746.829820][ T5960] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1746.857691][ T24] m920x_read = error: -19 [ 1746.862122][ T24] dvb-usb: error while querying for an remote control event. [ 1746.870253][ T5960] usb 5-1: USB disconnect, device number 14 [ 1746.912195][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11322'. [ 1746.929335][T28829] hid-generic 0003:046D:C31C.0034: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1746.933843][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11322'. [ 1747.013842][ T24] m920x_read = error: -19 [ 1747.018275][ T24] dvb-usb: error while querying for an remote control event. [ 1747.138282][ T24] m920x_read = error: -19 [ 1747.146125][ T24] dvb-usb: error while querying for an remote control event. [ 1747.263848][ T5911] m920x_read = error: -19 [ 1747.271889][ T5911] dvb-usb: error while querying for an remote control event. [ 1747.286584][ T323] usb 4-1: USB disconnect, device number 73 [ 1747.371476][ T9390] binder: 9389:9390 ioctl c0306201 200000000280 returned -11 [ 1747.403960][ T5911] m920x_read = error: -19 [ 1747.416473][ T5911] dvb-usb: error while querying for an remote control event. [ 1747.533730][ T323] m920x_read = error: -19 [ 1747.538178][ T323] dvb-usb: error while querying for an remote control event. [ 1747.630346][ T9401] ================================================================== [ 1747.638489][ T9401] BUG: KASAN: wild-memory-access in __sha512_update+0x10d/0x1d0 [ 1747.646344][ T9401] Read of size 2 at addr 0005088000000000 by task syz.6.11334/9401 [ 1747.654261][ T9401] [ 1747.654911][ T323] m920x_read = error: -19 [ 1747.656604][ T9401] CPU: 0 UID: 0 PID: 9401 Comm: syz.6.11334 Not tainted syzkaller #0 PREEMPT(full) [ 1747.656627][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1747.656638][ T9401] Call Trace: [ 1747.656647][ T9401] [ 1747.656654][ T9401] dump_stack_lvl+0x189/0x250 [ 1747.656686][ T9401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1747.656712][ T9401] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1747.656735][ T9401] ? __virt_addr_valid+0x7c/0x5c0 [ 1747.656761][ T9401] ? __sha512_update+0x10d/0x1d0 [ 1747.656786][ T9401] kasan_report+0x118/0x150 [ 1747.656807][ T9401] ? __sha512_update+0x10d/0x1d0 [ 1747.656832][ T9401] ? __sha512_update+0x10d/0x1d0 [ 1747.656857][ T9401] kasan_check_range+0x2b0/0x2c0 [ 1747.656876][ T9401] ? __sha512_update+0x10d/0x1d0 [ 1747.656900][ T9401] __asan_memcpy+0x29/0x70 [ 1747.656924][ T9401] __sha512_update+0x10d/0x1d0 [ 1747.656950][ T9401] crypto_sha512_update+0x27/0x40 [ 1747.656969][ T9401] shash_ahash_update+0x213/0x2f0 [ 1747.656989][ T9401] hash_sendmsg+0x96b/0x11d0 [ 1747.657019][ T9401] ? __pfx_hash_sendmsg+0x10/0x10 [ 1747.657039][ T9401] __sock_sendmsg+0x21c/0x270 [ 1747.657060][ T9401] ____sys_sendmsg+0x52d/0x830 [ 1747.657080][ T9401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1747.657101][ T9401] ? import_iovec+0x74/0xa0 [ 1747.657126][ T9401] ___sys_sendmsg+0x21f/0x2a0 [ 1747.657143][ T9401] ? __pfx____sys_sendmsg+0x10/0x10 [ 1747.657173][ T9401] ? __fget_files+0x2a/0x420 [ 1747.657194][ T9401] ? __fget_files+0x3a0/0x420 [ 1747.657218][ T9401] __sys_sendmmsg+0x227/0x430 [ 1747.657238][ T9401] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1747.657258][ T9401] ? __pfx_do_futex+0x10/0x10 [ 1747.657295][ T9401] __x64_sys_sendmmsg+0xa0/0xc0 [ 1747.657312][ T9401] do_syscall_64+0xfa/0xfa0 [ 1747.657335][ T9401] ? lockdep_hardirqs_on+0x9c/0x150 [ 1747.657357][ T9401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.657373][ T9401] ? clear_bhb_loop+0x60/0xb0 [ 1747.657393][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.657410][ T9401] RIP: 0033:0x7fba2178ebe9 [ 1747.657427][ T9401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1747.657442][ T9401] RSP: 002b:00007fba2268f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1747.657468][ T9401] RAX: ffffffffffffffda RBX: 00007fba219c6090 RCX: 00007fba2178ebe9 [ 1747.657483][ T9401] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 1747.657495][ T9401] RBP: 00007fba21811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1747.657506][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1747.657517][ T9401] R13: 00007fba219c6128 R14: 00007fba219c6090 R15: 00007ffef2ff3588 [ 1747.657537][ T9401] [ 1747.657544][ T9401] ================================================================== [ 1747.664659][ T323] dvb-usb: error while querying for an remote control event. [ 1747.733536][T28829] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1747.775829][ T9401] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1747.775853][ T9401] CPU: 1 UID: 0 PID: 9401 Comm: syz.6.11334 Not tainted syzkaller #0 PREEMPT(full) [ 1747.775874][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1747.775886][ T9401] Call Trace: [ 1747.775894][ T9401] [ 1747.775903][ T9401] dump_stack_lvl+0x99/0x250 [ 1747.775934][ T9401] ? __asan_memcpy+0x40/0x70 [ 1747.775959][ T9401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1747.775991][ T9401] ? __pfx__printk+0x10/0x10 [ 1747.776020][ T9401] vpanic+0x237/0x6d0 [ 1747.776041][ T9401] ? __pfx_vpanic+0x10/0x10 [ 1747.776061][ T9401] ? preempt_schedule_common+0x83/0xd0 [ 1747.776086][ T9401] ? preempt_schedule+0xae/0xc0 [ 1747.776109][ T9401] panic+0xb9/0xc0 [ 1747.776129][ T9401] ? __pfx_panic+0x10/0x10 [ 1747.776152][ T9401] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1747.776176][ T9401] ? __sha512_update+0x10d/0x1d0 [ 1747.776200][ T9401] check_panic_on_warn+0x89/0xb0 [ 1747.776218][ T9401] ? __sha512_update+0x10d/0x1d0 [ 1747.776240][ T9401] end_report+0x78/0x160 [ 1747.776259][ T9401] kasan_report+0x129/0x150 [ 1747.776279][ T9401] ? __sha512_update+0x10d/0x1d0 [ 1747.776304][ T9401] ? __sha512_update+0x10d/0x1d0 [ 1747.776327][ T9401] kasan_check_range+0x2b0/0x2c0 [ 1747.776346][ T9401] ? __sha512_update+0x10d/0x1d0 [ 1747.776370][ T9401] __asan_memcpy+0x29/0x70 [ 1747.776395][ T9401] __sha512_update+0x10d/0x1d0 [ 1747.776421][ T9401] crypto_sha512_update+0x27/0x40 [ 1747.776439][ T9401] shash_ahash_update+0x213/0x2f0 [ 1747.776461][ T9401] hash_sendmsg+0x96b/0x11d0 [ 1747.776492][ T9401] ? __pfx_hash_sendmsg+0x10/0x10 [ 1747.776513][ T9401] __sock_sendmsg+0x21c/0x270 [ 1747.776536][ T9401] ____sys_sendmsg+0x52d/0x830 [ 1747.776556][ T9401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1747.776577][ T9401] ? import_iovec+0x74/0xa0 [ 1747.776605][ T9401] ___sys_sendmsg+0x21f/0x2a0 [ 1747.776623][ T9401] ? __pfx____sys_sendmsg+0x10/0x10 [ 1747.776653][ T9401] ? __fget_files+0x2a/0x420 [ 1747.776674][ T9401] ? __fget_files+0x3a0/0x420 [ 1747.776708][ T9401] __sys_sendmmsg+0x227/0x430 [ 1747.776727][ T9401] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1747.776748][ T9401] ? __pfx_do_futex+0x10/0x10 [ 1747.776785][ T9401] __x64_sys_sendmmsg+0xa0/0xc0 [ 1747.776804][ T9401] do_syscall_64+0xfa/0xfa0 [ 1747.776828][ T9401] ? lockdep_hardirqs_on+0x9c/0x150 [ 1747.776852][ T9401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.776870][ T9401] ? clear_bhb_loop+0x60/0xb0 [ 1747.776891][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.776910][ T9401] RIP: 0033:0x7fba2178ebe9 [ 1747.776929][ T9401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1747.776947][ T9401] RSP: 002b:00007fba2268f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1747.776969][ T9401] RAX: ffffffffffffffda RBX: 00007fba219c6090 RCX: 00007fba2178ebe9 [ 1747.776986][ T9401] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 1747.777000][ T9401] RBP: 00007fba21811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1747.777014][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1747.777027][ T9401] R13: 00007fba219c6128 R14: 00007fba219c6090 R15: 00007ffef2ff3588 [ 1747.777051][ T9401] [ 1747.777347][ T9401] Kernel Offset: disabled