last executing test programs: 1.648342285s ago: executing program 0 (id=6398): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x4, {0x1fffffffffffff9, 0x2, 0x5, 0xfffffffffffffffe, 0xa003, 0x1ff, {0x8, 0x2, 0x6, 0x2, 0x2, 0x3f49, 0xc05, 0x6, 0xd, 0x2000, 0x0, 0x0, r2, 0xe70, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 1.53316299s ago: executing program 1 (id=6400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004400)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) 1.465963574s ago: executing program 3 (id=6401): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x400002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="38087e6af82af72f18cb5430734590fe64441d8c28ab22f6d6f84fa135e6e1ac757879d942f9f2131485ebfaea898151f895c7589d74313ccd70dc17fe8d85f532982954d6a1d34e865c7d38ec287d57fb7f98e4edd6efdce12a0307f513d84522d86ca1f8fa735f23405054bf178c92da12541206c927c823f2e8ae2dc53b3afc7aed86ae019800175df0fcf8a7a650348affb9c1adf09a692188b470"], 0x64}, 0x1, 0x0, 0x0, 0x400e0}, 0x4008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7830, 0x0, 0x3) dup(r1) 1.397615809s ago: executing program 1 (id=6402): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 1.283162444s ago: executing program 3 (id=6403): socket$inet_udp(0x2, 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa3, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x800, 0x0, 0x10000, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.271430317s ago: executing program 0 (id=6404): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={r0, r1, r2, 0xffffffff, 0xb, 0xddffffff, 0x4, 0x0, 0x8, 0x7, 0x0, 0x40000}) 1.166725759s ago: executing program 0 (id=6405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 1.165790319s ago: executing program 3 (id=6406): r0 = inotify_init() mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa0, 0x0, 0xffffffffffffffff, {{0x5, 0x3, 0xfff, 0x0, 0x8, 0x1, {0xfffffffffffffffd, 0x1, 0x5, 0xfc5, 0x124, 0x4749, 0x6, 0x9, 0x0, 0x8000, 0x808, r3, r4, 0x9, 0x80000002}}, {0x0, 0x1e}}}, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f00000006c0)={0x50, 0x0, r2, {0x7, 0x26, 0x4, 0x12885b10, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x10, 0x11fff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.079885987s ago: executing program 0 (id=6408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) read(r1, &(0x7f0000000080)=""/72, 0x48) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000001400)={'aio_aio12_8\x00', [0x100, 0xd, 0x4d0, 0x2, 0x1, 0x100, 0xc9cd, 0x20000000, 0x6, 0x9, 0x0, 0xf, 0x1, 0x401, 0xfffd, 0x0, 0x0, 0x8, 0xea9, 0x401, 0x7, 0x2, 0x4, 0x9, 0x3, 0x7, 0x7, 0x0, 0x7, 0x7, 0x8]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, 0x0, 0x24000800) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) 977.0362ms ago: executing program 0 (id=6409): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xb}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) 976.34316ms ago: executing program 3 (id=6410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0, 0x50}], 0xaaaaaaaaaaaabf0, 0x28, 0x0, 0xfffe) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944c", 0x2}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 782.164671ms ago: executing program 2 (id=6411): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000002c0)={0x82, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000180)={0x8, r2}) 758.920356ms ago: executing program 3 (id=6412): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='4\nL', 0x3) 720.305855ms ago: executing program 2 (id=6413): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={r0, r1, r2, 0xffffffff, 0xb, 0xddffffff, 0x4, 0x0, 0x8, 0x7, 0x0, 0x40000}) 602.119691ms ago: executing program 3 (id=6414): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x9a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x20, 0x40, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0xc, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x26, 0xf7, 0xe9, {0x8, 0x25, 0x1, 0x1, 0x27, 0x6, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x0, 0x1, {0x8, 0x25, 0x1, 0x83, 0xc, 0xc}}}}}}}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="0003"]}]}) 598.586871ms ago: executing program 2 (id=6415): socket$inet_udp(0x2, 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa3, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x800, 0x0, 0x10000, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 493.423604ms ago: executing program 1 (id=6416): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x2, 0x7, 0xc07, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44084) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x9c) 374.746499ms ago: executing program 1 (id=6417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 373.845879ms ago: executing program 2 (id=6418): socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl(r1, 0x8914, &(0x7f0000000000)) ioctl(r1, 0x8914, &(0x7f0000000040)="6c6f7770616e3000000000000000000001") 279.524859ms ago: executing program 1 (id=6419): r0 = inotify_init() mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa0, 0x0, 0xffffffffffffffff, {{0x5, 0x3, 0xfff, 0x0, 0x8, 0x1, {0xfffffffffffffffd, 0x1, 0x5, 0xfc5, 0x124, 0x4749, 0x6, 0x9, 0x0, 0x8000, 0x808, r3, r4, 0x9, 0x80000002}}, {0x0, 0x1e}}}, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f00000006c0)={0x50, 0x0, r2, {0x7, 0x26, 0x4, 0x12885b10, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x10, 0x11fff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 122.062444ms ago: executing program 2 (id=6420): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 62.541877ms ago: executing program 2 (id=6421): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x41102) writev(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, 0x0, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)) 18.886766ms ago: executing program 0 (id=6422): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = userfaultfd(0x80001) mremap(&(0x7f00002f9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000162000/0x2000)=nil) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 0s ago: executing program 1 (id=6423): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={r1, r2, r3, 0xffffffff, 0xb, 0xddffffff, 0x4, 0x0, 0x8, 0x7, 0x0, 0x40000}) kernel console output (not intermixed with test programs): errno=0 [ 1925.932854][T26773] syzkaller0: entered promiscuous mode [ 1925.956055][T26773] syzkaller0: entered allmulticast mode [ 1926.845026][T26777] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1927.089529][ T28] audit: type=1800 audit(1790580970.423:103): pid=26783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5750" name="c_srate" dev="configfs" ino=235289 res=0 errno=0 [ 1927.243922][ T8] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1927.925697][ T28] audit: type=1800 audit(1790580971.263:104): pid=26786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5749" name="c_srate" dev="configfs" ino=236634 res=0 errno=0 [ 1928.011528][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1928.063190][ T8] usb 3-1: config 0 has no interfaces? [ 1928.108040][ T8] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1928.159449][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.195407][ T8] usb 3-1: Product: syz [ 1928.231554][ T8] usb 3-1: Manufacturer: syz [ 1928.251762][ T8] usb 3-1: SerialNumber: syz [ 1928.264933][ T8] usb 3-1: config 0 descriptor?? [ 1928.317290][T26768] [U] ^C [ 1928.854896][T26799] kvm: kvm [26798]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50 [ 1929.952015][T20575] usb 3-1: USB disconnect, device number 42 [ 1930.843992][T26819] syzkaller0: entered promiscuous mode [ 1930.866462][T26819] syzkaller0: entered allmulticast mode [ 1931.188018][T26821] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1933.465046][T26840] kvm: kvm [26839]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50 [ 1933.832088][T20575] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1934.223015][T20575] usb 4-1: Using ep0 maxpacket: 8 [ 1934.309209][T20575] usb 4-1: config 0 has no interfaces? [ 1934.323501][T20575] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1934.341414][T20575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.349503][T20575] usb 4-1: Product: syz [ 1934.355026][T20575] usb 4-1: Manufacturer: syz [ 1934.359786][T20575] usb 4-1: SerialNumber: syz [ 1934.368609][T20575] usb 4-1: config 0 descriptor?? [ 1934.389318][T26857] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1934.465925][T26859] syzkaller0: entered promiscuous mode [ 1934.477691][T26859] syzkaller0: entered allmulticast mode [ 1936.981793][T20575] usb 4-1: USB disconnect, device number 94 [ 1937.088506][T26870] loop5: detected capacity change from 0 to 7 [ 1937.125588][T26870] Dev loop5: unable to read RDB block 7 [ 1937.147029][T26870] loop5: AHDI p2 [ 1937.150748][T26870] loop5: partition table partially beyond EOD, truncated [ 1937.928891][ T28] audit: type=1800 audit(1790580981.203:105): pid=26883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5777" name="c_srate" dev="configfs" ino=237349 res=0 errno=0 [ 1944.624146][T26912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5783'. [ 1944.729209][T26915] syzkaller0: entered promiscuous mode [ 1944.735165][T26915] syzkaller0: entered allmulticast mode [ 1944.782602][T26919] binder: 26917:26919 unknown command 0 [ 1944.801185][T26919] binder: 26917:26919 ioctl c0306201 200000000080 returned -22 [ 1945.939932][ T28] audit: type=1800 audit(1790580989.293:106): pid=26930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5787" name="c_srate" dev="configfs" ino=238079 res=0 errno=0 [ 1946.161614][ T5847] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1947.494343][ T5847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1950.813497][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 1951.848222][ T5847] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 1952.111482][ T5847] usb 4-1: can't read configurations, error -71 [ 1952.452156][T26948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5794'. [ 1953.056336][T26952] syzkaller0: entered promiscuous mode [ 1953.074839][T26952] syzkaller0: entered allmulticast mode [ 1953.171394][T20575] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1953.362351][T20575] usb 1-1: Using ep0 maxpacket: 8 [ 1953.372605][T20575] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1953.404372][T20575] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1953.445026][T20575] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 1953.481781][T20575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.512980][T20575] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 1953.564197][T20575] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1953.783803][ T28] audit: type=1800 audit(1790580997.143:107): pid=26961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5798" name="c_srate" dev="configfs" ino=238635 res=0 errno=0 [ 1956.594677][T26950] jffs2: notice: (26950) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1957.877108][T20575] usb 1-1: USB disconnect, device number 43 [ 1957.888082][T20575] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1957.899064][T20575] kobil_sct 1-1:1.0: device disconnected [ 1958.330335][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5804'. [ 1958.823859][T26974] [U] ^C [ 1960.363595][ T28] audit: type=1800 audit(1790581003.703:108): pid=26984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5801" name="c_srate" dev="configfs" ino=238215 res=0 errno=0 [ 1962.239885][T26990] fuse: Bad value for 'fd' [ 1966.042554][T27002] tipc: Enabled bearer , priority 0 [ 1966.134012][T27001] tipc: Disabling bearer [ 1966.275206][ T28] audit: type=1800 audit(1790581009.633:109): pid=27009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5808" name="c_srate" dev="configfs" ino=238294 res=0 errno=0 [ 1966.562821][T27010] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1967.353860][T20575] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1967.631948][T20575] usb 3-1: Using ep0 maxpacket: 16 [ 1967.700894][T20575] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1967.712299][ T5847] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1967.802929][T20575] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1967.876590][T20575] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1967.941819][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 1967.978134][ T5847] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1968.000471][T20575] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1968.049717][ T5847] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1968.070044][T20575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.132861][ T5847] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 1968.205241][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.235795][T20575] usb 3-1: config 0 descriptor?? [ 1968.265002][T27023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5816'. [ 1968.314579][ T5847] kobil_sct 2-1:1.0: KOBIL USB smart card terminal converter detected [ 1968.340894][ T5847] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1968.487949][T20575] usbhid 3-1:0.0: can't add hid device: -71 [ 1968.511674][T20575] usbhid: probe of 3-1:0.0 failed with error -71 [ 1968.536478][T20575] usb 3-1: USB disconnect, device number 43 [ 1968.579377][T27020] jffs2: notice: (27020) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1969.657914][T27028] [U] ^C [ 1971.499621][T22719] usb 2-1: USB disconnect, device number 75 [ 1971.516876][T22719] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1971.527642][T22719] kobil_sct 2-1:1.0: device disconnected [ 1971.618862][T27040] tipc: Started in network mode [ 1971.627094][T27040] tipc: Node identity 5edd3b50d85f, cluster identity 4711 [ 1971.636262][T27040] tipc: Enabled bearer , priority 0 [ 1971.669912][T27039] tipc: Disabling bearer [ 1971.921726][ T5824] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1972.126644][ T28] audit: type=1800 audit(1790581015.483:110): pid=27045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5822" name="c_srate" dev="configfs" ino=238801 res=0 errno=0 [ 1972.151692][T27045] FAULT_INJECTION: forcing a failure. [ 1972.151692][T27045] name failslab, interval 1, probability 0, space 0, times 0 [ 1972.164432][T27045] CPU: 0 PID: 27045 Comm: syz.1.5822 Not tainted syzkaller #0 [ 1972.171928][T27045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1972.182016][T27045] Call Trace: [ 1972.185318][T27045] [ 1972.188265][T27045] dump_stack_lvl+0x18c/0x250 [ 1972.192982][T27045] ? show_regs_print_info+0x20/0x20 [ 1972.198214][T27045] ? load_image+0x420/0x420 [ 1972.202754][T27045] ? __might_sleep+0xe0/0xe0 [ 1972.207374][T27045] ? __lock_acquire+0x7d80/0x7d80 [ 1972.212432][T27045] should_fail_ex+0x394/0x4c0 [ 1972.217259][T27045] should_failslab+0x9/0x20 [ 1972.221809][T27045] slab_pre_alloc_hook+0x59/0x300 [ 1972.226878][T27045] ? ima_eventname_init_common+0x1de/0x710 [ 1972.232723][T27045] ? ima_eventname_init_common+0x1de/0x710 [ 1972.238579][T27045] __kmem_cache_alloc_node+0x53/0x250 [ 1972.244013][T27045] ? ima_eventname_init_common+0x1de/0x710 [ 1972.249944][T27045] __kmalloc+0xa7/0x240 [ 1972.254143][T27045] ima_eventname_init_common+0x1de/0x710 [ 1972.259823][T27045] ? ima_eventname_init+0x30/0x30 [ 1972.264889][T27045] ? ima_alloc_init_template+0x172/0x6e0 [ 1972.270547][T27045] ? rcu_is_watching+0x15/0xb0 [ 1972.275343][T27045] ? ima_alloc_init_template+0x172/0x6e0 [ 1972.281006][T27045] ? __kmalloc+0xe5/0x240 [ 1972.285368][T27045] ? prepend_path+0x8a7/0x950 [ 1972.290080][T27045] ? ima_eventname_init_common+0x710/0x710 [ 1972.295921][T27045] ima_alloc_init_template+0x308/0x6e0 [ 1972.301421][T27045] ima_store_measurement+0x1db/0x690 [ 1972.306751][T27045] ? ima_collect_measurement+0xa30/0xa30 [ 1972.312505][T27045] ? ima_d_path+0x184/0x240 [ 1972.317048][T27045] ? ima_get_hash_algo+0x91/0x4a0 [ 1972.322371][T27045] ? ima_get_cache_status+0xd0/0xd0 [ 1972.327711][T27045] process_measurement+0x1304/0x1d50 [ 1972.333064][T27045] ? ima_file_mmap+0x1d0/0x1d0 [ 1972.338108][T27045] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 1972.344317][T27045] ima_file_check+0xcc/0x110 [ 1972.349252][T27045] ? ima_bprm_check+0x200/0x200 [ 1972.354149][T27045] path_openat+0x2910/0x3270 [ 1972.358810][T27045] ? do_filp_open+0x430/0x430 [ 1972.363659][T27045] do_filp_open+0x1f2/0x430 [ 1972.368292][T27045] ? vfs_tmpfile+0x620/0x620 [ 1972.373033][T27045] ? _raw_spin_unlock+0x28/0x40 [ 1972.377926][T27045] ? alloc_fd+0x590/0x640 [ 1972.382476][T27045] do_sys_openat2+0x134/0x1d0 [ 1972.387230][T27045] ? do_sys_open+0xe0/0xe0 [ 1972.391679][T27045] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1972.397778][T27045] ? lock_chain_count+0x20/0x20 [ 1972.402751][T27045] __x64_sys_openat+0x139/0x160 [ 1972.407645][T27045] do_syscall_64+0x55/0xb0 [ 1972.412124][T27045] ? clear_bhb_loop+0x40/0x90 [ 1972.416835][T27045] ? clear_bhb_loop+0x40/0x90 [ 1972.421546][T27045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1972.427514][T27045] RIP: 0033:0x7fc48e59e159 [ 1972.431952][T27045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1972.451676][T27045] RSP: 002b:00007fc48f44d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1972.460122][T27045] RAX: ffffffffffffffda RBX: 00007fc48e826180 RCX: 00007fc48e59e159 [ 1972.468127][T27045] RDX: 00000000000e8202 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 1972.476220][T27045] RBP: 00007fc48e63506b R08: 0000000000000000 R09: 0000000000000000 [ 1972.484395][T27045] R10: 00000000000001c3 R11: 0000000000000246 R12: 0000000000000000 [ 1972.492478][T27045] R13: 00007fc48e826218 R14: 00007fc48e826180 R15: 00007ffe5b7ce048 [ 1972.500492][T27045] [ 1972.847698][ T5824] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1972.861449][ T28] audit: type=1804 audit(1790581015.873:111): pid=27045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.5822" name="/newroot/328/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=238801 res=0 errno=0 [ 1972.885515][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.934154][ T5824] usb 4-1: config 0 descriptor?? [ 1973.880601][ T5824] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1973.901468][ T5824] [drm] Initialized udl on minor 2 [ 1973.920575][ T28] audit: type=1800 audit(1790581017.273:112): pid=27051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5823" name="c_srate" dev="configfs" ino=238347 res=0 errno=0 [ 1974.221394][T27055] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1974.236637][ T28] audit: type=1800 audit(1790581017.593:113): pid=27059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5832" name="c_srate" dev="configfs" ino=238848 res=0 errno=0 [ 1975.091416][ T5824] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1975.141547][ T5824] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1975.151458][T22719] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1975.231012][T22719] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1975.243443][ T5824] usb 4-1: USB disconnect, device number 97 [ 1975.451946][T22719] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1976.455946][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.467769][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.299592][T27066] [U] ^C [ 1978.426124][T27071] tipc: Enabled bearer , priority 0 [ 1978.466993][T27071] syzkaller0: entered promiscuous mode [ 1978.481025][T27071] syzkaller0: entered allmulticast mode [ 1978.564015][T27071] tipc: Resetting bearer [ 1978.586661][T27070] tipc: Resetting bearer [ 1978.630846][T27070] tipc: Disabling bearer [ 1978.647912][T27074] tipc: Enabled bearer , priority 0 [ 1978.660826][T27074] syzkaller0: entered promiscuous mode [ 1978.666929][T27074] syzkaller0: entered allmulticast mode [ 1978.757764][T27074] tipc: Resetting bearer [ 1978.781740][T27073] tipc: Resetting bearer [ 1978.992473][T27073] tipc: Disabling bearer [ 1979.604795][T27076] [U] ^C [ 1980.068655][ T28] audit: type=1800 audit(1790581023.423:114): pid=27083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5833" name="c_srate" dev="configfs" ino=238890 res=0 errno=0 [ 1982.100961][ T28] audit: type=1800 audit(1790581025.453:115): pid=27100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5836" name="c_srate" dev="configfs" ino=238414 res=0 errno=0 [ 1983.642924][T27101] [U] ^C [ 1984.779953][T27108] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1986.335806][T27111] [U] ^C [ 1987.232048][T22719] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1987.753226][T22719] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1987.782847][T22719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.160581][T22719] usb 2-1: config 0 descriptor?? [ 1988.486531][T27136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5845'. [ 1988.489569][ T28] audit: type=1800 audit(1790581031.503:116): pid=27134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5840" name="c_srate" dev="configfs" ino=239203 res=0 errno=0 [ 1988.790230][T22719] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1988.801395][T22719] [drm] Initialized udl on minor 2 [ 1990.125631][T22719] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1990.172869][T22719] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1990.184690][ T5824] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1990.223380][T22719] usb 2-1: USB disconnect, device number 76 [ 1990.231780][ T5824] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1990.263959][ T5824] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1994.338366][T27173] [U] ^C [ 1997.133604][ T28] audit: type=1800 audit(1790581040.493:117): pid=27182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5858" name="c_srate" dev="configfs" ino=240002 res=0 errno=0 [ 1998.384347][ T28] audit: type=1800 audit(1790581041.743:118): pid=27191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5861" name="c_srate" dev="configfs" ino=240026 res=0 errno=0 [ 1999.080695][T27193] [U] ^C [ 2000.059134][T27202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5857'. [ 2004.388407][T27229] syzkaller0: entered promiscuous mode [ 2004.405746][T27229] syzkaller0: entered allmulticast mode [ 2004.438370][T27229] tipc: Enabled bearer , priority 0 [ 2004.457367][T27228] tipc: Resetting bearer [ 2004.526544][T27228] tipc: Disabling bearer [ 2004.971010][T27225] kvm: kvm [27223]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2008.943071][ T28] audit: type=1800 audit(1790581052.303:119): pid=27260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5878" name="c_srate" dev="configfs" ino=239492 res=0 errno=0 [ 2009.966707][T27268] loop5: detected capacity change from 0 to 7 [ 2011.553409][T27268] Dev loop5: unable to read RDB block 7 [ 2011.559127][T27268] loop5: AHDI p2 [ 2011.616582][T27268] loop5: partition table partially beyond EOD, truncated [ 2012.073042][T27285] FAULT_INJECTION: forcing a failure. [ 2012.073042][T27285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2012.086425][T27285] CPU: 1 PID: 27285 Comm: syz.0.5884 Not tainted syzkaller #0 [ 2012.093913][T27285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2012.103992][T27285] Call Trace: [ 2012.107290][T27285] [ 2012.110236][T27285] dump_stack_lvl+0x18c/0x250 [ 2012.114958][T27285] ? show_regs_print_info+0x20/0x20 [ 2012.120276][T27285] ? load_image+0x420/0x420 [ 2012.124820][T27285] ? __might_fault+0xaa/0x120 [ 2012.129541][T27285] ? __lock_acquire+0x7d80/0x7d80 [ 2012.134600][T27285] ? __kasan_slab_alloc+0x6c/0x80 [ 2012.139669][T27285] should_fail_ex+0x394/0x4c0 [ 2012.145000][T27285] strncpy_from_user+0x36/0x2f0 [ 2012.149904][T27285] getname_flags+0xf6/0x500 [ 2012.154441][T27285] __x64_sys_mkdirat+0x7c/0xa0 [ 2012.159231][T27285] do_syscall_64+0x55/0xb0 [ 2012.163679][T27285] ? clear_bhb_loop+0x40/0x90 [ 2012.168392][T27285] ? clear_bhb_loop+0x40/0x90 [ 2012.173197][T27285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2012.179143][T27285] RIP: 0033:0x7ff88c19e159 [ 2012.183579][T27285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2012.203216][T27285] RSP: 002b:00007ff88d03d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2012.211668][T27285] RAX: ffffffffffffffda RBX: 00007ff88c426090 RCX: 00007ff88c19e159 [ 2012.219754][T27285] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 2012.228485][T27285] RBP: 00007ff88c23506b R08: 0000000000000000 R09: 0000000000000000 [ 2012.236577][T27285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2012.244660][T27285] R13: 00007ff88c426128 R14: 00007ff88c426090 R15: 00007ffc8b3bedd8 [ 2012.252925][T27285] [ 2012.263740][ T28] audit: type=1800 audit(1790581055.623:120): pid=27287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5884" name="c_srate" dev="configfs" ino=240755 res=0 errno=0 [ 2012.750095][T27289] binder: 27288:27289 unknown command 0 [ 2012.795919][T27289] binder: 27288:27289 ioctl c0306201 200000000080 returned -22 [ 2014.321412][ T5847] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2014.336417][ T28] audit: type=1800 audit(1790581057.693:121): pid=27300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5889" name="c_srate" dev="configfs" ino=240785 res=0 errno=0 [ 2014.441536][ T5824] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2014.457038][T27302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5890'. [ 2014.543184][ T5847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2014.553997][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2014.569346][ T5847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2014.580023][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2014.595832][ T5847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2014.610588][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2014.628054][ T5847] usb 4-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 2014.637236][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.651671][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 2014.652753][ T5847] usb 4-1: config 0 descriptor?? [ 2014.658728][ T5824] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2014.681832][ T5847] usb 4-1: bad CDC descriptors [ 2014.697409][ T5824] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2014.707298][ T5847] usb 4-1: bad CDC descriptors [ 2014.711321][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.731361][ T5824] usb 1-1: Product: syz [ 2014.735615][ T5824] usb 1-1: Manufacturer: syz [ 2014.740316][ T5824] usb 1-1: SerialNumber: syz [ 2014.747868][ T5824] usb 1-1: config 0 descriptor?? [ 2014.756526][ T5824] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2014.795589][T27305] binder: 27304:27305 unknown command 0 [ 2014.801701][T27305] binder: 27304:27305 ioctl c0306201 200000000080 returned -22 [ 2014.906344][T13304] usb 4-1: USB disconnect, device number 98 [ 2015.104005][T20575] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2015.293465][T20575] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.304112][T20575] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2015.318701][T20575] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.329153][T20575] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2015.346525][T20575] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.356773][T20575] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2015.370568][T20575] usb 2-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 2015.380163][T20575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.391154][T20575] usb 2-1: config 0 descriptor?? [ 2015.403208][T20575] usb 2-1: bad CDC descriptors [ 2015.420492][T20575] usb 2-1: bad CDC descriptors [ 2015.491987][ T28] audit: type=1800 audit(1790581058.853:122): pid=27310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5900" name="c_srate" dev="configfs" ino=241850 res=0 errno=0 [ 2015.553239][T27309] syzkaller0: entered promiscuous mode [ 2015.558866][T27309] syzkaller0: entered allmulticast mode [ 2015.981504][T20575] usb 2-1: USB disconnect, device number 77 [ 2017.434797][ T5824] gspca_zc3xx: reg_r err -32 [ 2018.991409][ T5824] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2019.047132][ T5824] gspca_zc3xx: probe of 1-1:0.0 failed with error -32 [ 2019.067129][ T5824] usb 1-1: USB disconnect, device number 44 [ 2020.963107][ T28] audit: type=1800 audit(1790581064.313:123): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5899" name="c_srate" dev="configfs" ino=241043 res=0 errno=0 [ 2021.530698][T27346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5901'. [ 2021.815688][ T28] audit: type=1800 audit(1790581065.173:124): pid=27349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5902" name="c_srate" dev="configfs" ino=241055 res=0 errno=0 [ 2023.475203][T27363] binder: 27362:27363 unknown command 0 [ 2023.481237][T27363] binder: 27362:27363 ioctl c0306201 200000000080 returned -22 [ 2023.801820][T13304] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2023.972973][T27359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5913'. [ 2023.996250][T13304] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.008487][T13304] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2024.031508][T13304] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.048107][T13304] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2024.083268][T13304] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.097158][T13304] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2024.116889][T13304] usb 1-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 2024.131711][T13304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.154664][T13304] usb 1-1: config 0 descriptor?? [ 2024.172810][T13304] usb 1-1: bad CDC descriptors [ 2024.179915][T13304] usb 1-1: bad CDC descriptors [ 2024.407803][T20575] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2024.870887][T20575] usb 4-1: Using ep0 maxpacket: 8 [ 2024.967443][T13304] usb 1-1: USB disconnect, device number 45 [ 2024.985248][T20575] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2025.128981][T20575] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2025.164838][T20575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.175176][T20575] usb 4-1: Product: syz [ 2025.179377][T20575] usb 4-1: Manufacturer: syz [ 2025.186034][T20575] usb 4-1: SerialNumber: syz [ 2025.202365][T20575] usb 4-1: config 0 descriptor?? [ 2025.210538][T20575] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2025.721587][T20575] gspca_zc3xx: reg_w_i err -110 [ 2027.725365][T20575] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2027.759911][T20575] gspca_zc3xx: probe of 4-1:0.0 failed with error -110 [ 2027.785499][T20575] usb 4-1: USB disconnect, device number 99 [ 2027.990480][ T28] audit: type=1800 audit(1790581071.303:125): pid=27388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5914" name="c_srate" dev="configfs" ino=241175 res=0 errno=0 [ 2028.095639][ T5824] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2028.769429][T27399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5916'. [ 2028.911777][ T5824] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2028.983743][ T28] audit: type=1800 audit(1790581072.313:126): pid=27402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5917" name="c_srate" dev="configfs" ino=241309 res=0 errno=0 [ 2029.676913][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.687487][ T5824] usb 2-1: config 0 descriptor?? [ 2029.931529][ T28] audit: type=1800 audit(1790581073.263:127): pid=27408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5918" name="c_srate" dev="configfs" ino=242278 res=0 errno=0 [ 2030.387777][ T5824] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 2030.416331][ T5824] [drm] Initialized udl on minor 2 [ 2030.653855][ T5824] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2030.677235][ T5824] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2030.705711][T22719] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2030.773244][T22719] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2030.781404][ T5824] usb 2-1: USB disconnect, device number 78 [ 2030.830036][T22719] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2031.091388][T21768] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2031.761447][T21768] usb 3-1: Using ep0 maxpacket: 8 [ 2031.771966][T21768] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2031.798068][T21768] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2031.821308][T21768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.849410][T21768] usb 3-1: Product: syz [ 2031.859345][T21768] usb 3-1: Manufacturer: syz [ 2031.905160][T21768] usb 3-1: SerialNumber: syz [ 2031.924691][T21768] usb 3-1: config 0 descriptor?? [ 2031.947040][T21768] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2033.252877][T27439] [U] ^C [ 2034.706241][T27455] syz.1.5931 (27455): drop_caches: 2 [ 2034.841363][ T8] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 2035.045604][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2035.071352][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2035.111434][ T8] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 2035.127674][T21768] gspca_zc3xx: reg_r err -32 [ 2035.133891][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.175996][ T8] usb 4-1: config 0 descriptor?? [ 2035.752523][T21768] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2035.758940][T21768] gspca_zc3xx: probe of 3-1:0.0 failed with error -32 [ 2037.437158][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 2037.450472][T22719] usb 3-1: USB disconnect, device number 44 [ 2037.469036][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 2037.563163][ T8] usb 4-1: USB disconnect, device number 100 [ 2037.746890][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.753573][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.942701][T27470] FAULT_INJECTION: forcing a failure. [ 2037.942701][T27470] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2037.955719][T27470] CPU: 0 PID: 27470 Comm: syz.1.5935 Not tainted syzkaller #0 [ 2037.963211][T27470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2037.973303][T27470] Call Trace: [ 2037.976604][T27470] [ 2037.979553][T27470] dump_stack_lvl+0x18c/0x250 [ 2037.984304][T27470] ? show_regs_print_info+0x20/0x20 [ 2037.989558][T27470] ? load_image+0x420/0x420 [ 2037.994109][T27470] ? preempt_schedule_common+0x82/0xc0 [ 2037.999623][T27470] should_fail_ex+0x394/0x4c0 [ 2038.004364][T27470] get_futex_key+0x136/0x1030 [ 2038.009084][T27470] ? futex_setup_timer+0xc0/0xc0 [ 2038.014059][T27470] ? __fget_files+0x28/0x460 [ 2038.018806][T27470] futex_wake+0x127/0x4f0 [ 2038.023169][T27470] ? futex_wake_mark+0x150/0x150 [ 2038.028138][T27470] ? __lock_acquire+0x7d80/0x7d80 [ 2038.033376][T27470] ? __fdget+0x192/0x210 [ 2038.037838][T27470] do_futex+0x35d/0x3e0 [ 2038.042027][T27470] ? bpf_prog_test_run+0x1cc/0x390 [ 2038.047174][T27470] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2038.053097][T27470] ? bpf_link_show_fdinfo+0x560/0x560 [ 2038.058506][T27470] __se_sys_futex+0x3a9/0x440 [ 2038.063221][T27470] ? __x64_sys_futex+0xf0/0xf0 [ 2038.068033][T27470] ? __x64_sys_futex+0x21/0xf0 [ 2038.072829][T27470] do_syscall_64+0x55/0xb0 [ 2038.077280][T27470] ? clear_bhb_loop+0x40/0x90 [ 2038.082163][T27470] ? clear_bhb_loop+0x40/0x90 [ 2038.086876][T27470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2038.092804][T27470] RIP: 0033:0x7fc48e59e159 [ 2038.097340][T27470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2038.116983][T27470] RSP: 002b:00007fc48f46e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2038.125454][T27470] RAX: ffffffffffffffda RBX: 00007fc48e826098 RCX: 00007fc48e59e159 [ 2038.133457][T27470] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc48e82609c [ 2038.141456][T27470] RBP: 00007fc48e826090 R08: 0000000000745b08 R09: 0000000000000000 [ 2038.149541][T27470] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 2038.157544][T27470] R13: 00007fc48e826128 R14: 00007ffe5b7cdf60 R15: 00007ffe5b7ce048 [ 2038.165660][T27470] [ 2038.704582][ T28] audit: type=1800 audit(1790581081.533:128): pid=27470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5935" name="c_srate" dev="configfs" ino=242761 res=0 errno=0 [ 2039.031046][T27478] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2039.070474][T27483] bond1: option mode: unable to set because the bond device is up [ 2040.017557][ T28] audit: type=1800 audit(1790581083.373:129): pid=27509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5945" name="c_srate" dev="configfs" ino=244197 res=0 errno=0 [ 2040.122017][T20575] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2040.352366][T20575] usb 1-1: Using ep0 maxpacket: 8 [ 2040.395587][T20575] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2040.469099][T20575] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2040.540596][T20575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.602613][T20575] usb 1-1: Product: syz [ 2040.634901][T20575] usb 1-1: Manufacturer: syz [ 2040.664916][T20575] usb 1-1: SerialNumber: syz [ 2040.755865][T20575] usb 1-1: config 0 descriptor?? [ 2040.824603][T20575] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2041.713951][T27513] [U] ^C [ 2044.638376][T20575] gspca_zc3xx: reg_r err -32 [ 2044.827133][ T28] audit: type=1800 audit(1790581088.183:130): pid=27548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5955" name="c_srate" dev="configfs" ino=243277 res=0 errno=0 [ 2046.271404][T20575] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2046.277910][T20575] gspca_zc3xx: probe of 1-1:0.0 failed with error -32 [ 2046.581919][T20575] usb 1-1: USB disconnect, device number 46 [ 2048.851978][T27565] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2048.869311][T27565] bond1: option mode: unable to set because the bond device has slaves [ 2048.904844][T27565] bond1: (slave macvlan1): Error -98 calling set_mac_address [ 2048.990945][T27565] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5961'. [ 2050.751367][T21768] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2052.561734][T21768] usb 1-1: Using ep0 maxpacket: 8 [ 2052.579258][T21768] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2052.590868][T21768] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2052.601730][T21768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.609873][T21768] usb 1-1: Product: syz [ 2052.621800][T21768] usb 1-1: Manufacturer: syz [ 2052.633943][T21768] usb 1-1: SerialNumber: syz [ 2052.641157][T27584] syz.2.5967 (27584): drop_caches: 2 [ 2052.649515][T21768] usb 1-1: config 0 descriptor?? [ 2052.663669][T21768] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2052.786851][T27587] syzkaller0: entered promiscuous mode [ 2052.798079][T27587] syzkaller0: entered allmulticast mode [ 2052.815566][T27587] tipc: Enabled bearer , priority 0 [ 2052.827816][T27586] tipc: Resetting bearer [ 2052.903211][T27586] tipc: Disabling bearer [ 2053.711376][T27590] [U] ^C [ 2054.479114][ T28] audit: type=1800 audit(1790581097.833:131): pid=27592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5968" name="c_srate" dev="configfs" ino=243420 res=0 errno=0 [ 2055.543189][T21768] gspca_zc3xx: reg_r err -71 [ 2056.161490][T21768] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2057.502200][T21768] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 2057.522960][T21768] usb 1-1: USB disconnect, device number 47 [ 2058.241503][T13304] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2059.121688][T13304] usb 2-1: Using ep0 maxpacket: 8 [ 2059.142201][T13304] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2059.158796][T27629] bond0: entered allmulticast mode [ 2059.164683][T27629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2059.177265][T13304] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2059.194832][T13304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.216312][T13304] usb 2-1: Product: syz [ 2059.220739][T13304] usb 2-1: Manufacturer: syz [ 2060.425044][T13304] usb 2-1: SerialNumber: syz [ 2060.465771][T13304] usb 2-1: config 0 descriptor?? [ 2060.492112][T13304] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2060.688869][ T28] audit: type=1800 audit(1790581104.043:132): pid=27638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5982" name="c_srate" dev="configfs" ino=243528 res=0 errno=0 [ 2063.042978][T13304] gspca_zc3xx: reg_w_i err -71 [ 2063.442113][ T28] audit: type=1800 audit(1790581106.803:133): pid=27661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5991" name="c_srate" dev="configfs" ino=243572 res=0 errno=0 [ 2064.059516][T13304] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2064.207388][T13304] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 2064.216977][T13304] usb 2-1: USB disconnect, device number 79 [ 2064.590359][T27677] FAULT_INJECTION: forcing a failure. [ 2064.590359][T27677] name failslab, interval 1, probability 0, space 0, times 0 [ 2064.604338][T27677] CPU: 0 PID: 27677 Comm: syz.2.5995 Not tainted syzkaller #0 [ 2064.611858][T27677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2064.621944][T27677] Call Trace: [ 2064.625243][T27677] [ 2064.628193][T27677] dump_stack_lvl+0x18c/0x250 [ 2064.632912][T27677] ? show_regs_print_info+0x20/0x20 [ 2064.638229][T27677] ? load_image+0x420/0x420 [ 2064.642764][T27677] ? __might_sleep+0xe0/0xe0 [ 2064.647403][T27677] ? __lock_acquire+0x7d80/0x7d80 [ 2064.652454][T27677] ? __dentry_path+0x46e/0x510 [ 2064.657254][T27677] should_fail_ex+0x394/0x4c0 [ 2064.661975][T27677] should_failslab+0x9/0x20 [ 2064.666515][T27677] slab_pre_alloc_hook+0x59/0x300 [ 2064.671667][T27677] ? tomoyo_encode+0x2ad/0x570 [ 2064.676463][T27677] ? tomoyo_encode+0x2ad/0x570 [ 2064.681254][T27677] __kmem_cache_alloc_node+0x53/0x250 [ 2064.686870][T27677] ? tomoyo_realpath_from_path+0x5c0/0x5c0 [ 2064.692709][T27677] ? tomoyo_encode+0x2ad/0x570 [ 2064.697507][T27677] __kmalloc+0xa7/0x240 [ 2064.701700][T27677] tomoyo_encode+0x2ad/0x570 [ 2064.706316][T27677] tomoyo_realpath_from_path+0x57c/0x5c0 [ 2064.712078][T27677] tomoyo_path_perm+0x282/0x560 [ 2064.716970][T27677] ? tomoyo_path_perm+0x250/0x560 [ 2064.722117][T27677] ? tomoyo_path_permission+0x3a0/0x3a0 [ 2064.727737][T27677] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 2064.733925][T27677] ? ima_file_check+0xcc/0x110 [ 2064.738724][T27677] ? ima_bprm_check+0x200/0x200 [ 2064.743616][T27677] security_file_truncate+0x62/0x90 [ 2064.748864][T27677] path_openat+0x29fe/0x3270 [ 2064.753513][T27677] ? do_filp_open+0x430/0x430 [ 2064.758221][T27677] ? asan.module_dtor+0x20/0x20 [ 2064.763119][T27677] do_filp_open+0x1f2/0x430 [ 2064.767664][T27677] ? vfs_tmpfile+0x620/0x620 [ 2064.772305][T27677] ? _raw_spin_unlock+0x3a/0x40 [ 2064.777191][T27677] ? alloc_fd+0x590/0x640 [ 2064.781657][T27677] do_sys_openat2+0x134/0x1d0 [ 2064.786450][T27677] ? do_sys_open+0xe0/0xe0 [ 2064.790930][T27677] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2064.797033][T27677] ? lock_chain_count+0x20/0x20 [ 2064.801920][T27677] __x64_sys_openat+0x139/0x160 [ 2064.806811][T27677] do_syscall_64+0x55/0xb0 [ 2064.811257][T27677] ? clear_bhb_loop+0x40/0x90 [ 2064.815970][T27677] ? clear_bhb_loop+0x40/0x90 [ 2064.820699][T27677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2064.826866][T27677] RIP: 0033:0x7f37d6b9e159 [ 2064.831307][T27677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2064.850984][T27677] RSP: 002b:00007f37d7a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2064.859513][T27677] RAX: ffffffffffffffda RBX: 00007f37d6e26180 RCX: 00007f37d6b9e159 [ 2064.868031][T27677] RDX: 00000000000e8202 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 2064.876550][T27677] RBP: 00007f37d6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2064.884742][T27677] R10: 00000000000001c3 R11: 0000000000000246 R12: 0000000000000000 [ 2064.892907][T27677] R13: 00007f37d6e26218 R14: 00007f37d6e26180 R15: 00007fffe2d93358 [ 2064.900921][T27677] [ 2064.904847][T27677] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2064.952402][ T28] audit: type=1800 audit(1790581107.943:134): pid=27677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5995" name="c_srate" dev="configfs" ino=244819 res=0 errno=0 [ 2066.771562][T21768] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2066.991444][T21768] usb 3-1: Using ep0 maxpacket: 8 [ 2067.113571][T21768] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2067.233129][T21768] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2067.344011][T21768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.454278][T21768] usb 3-1: Product: syz [ 2067.509506][T21768] usb 3-1: Manufacturer: syz [ 2067.554683][T21768] usb 3-1: SerialNumber: syz [ 2067.677869][T21768] usb 3-1: config 0 descriptor?? [ 2067.798462][T21768] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2069.797966][ T28] audit: type=1800 audit(1790581113.153:135): pid=27698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6002" name="c_srate" dev="configfs" ino=244694 res=0 errno=0 [ 2070.954559][T21768] gspca_zc3xx: reg_r err -71 [ 2071.571441][T21768] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2071.586113][T21768] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 2071.611524][T21768] usb 3-1: USB disconnect, device number 45 [ 2072.530726][T27719] [U] ^C [ 2073.222191][T13304] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2073.992151][T13304] usb 2-1: Using ep0 maxpacket: 16 [ 2074.022016][T13304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2074.051979][T13304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2074.071701][T13304] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2074.097465][T13304] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2074.115589][T13304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.145589][T13304] usb 2-1: config 0 descriptor?? [ 2074.383907][T27726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6012'. [ 2074.455865][T13304] usbhid 2-1:0.0: can't add hid device: -71 [ 2074.471435][T13304] usbhid: probe of 2-1:0.0 failed with error -71 [ 2074.500993][T13304] usb 2-1: USB disconnect, device number 80 [ 2075.044021][ T28] audit: type=1800 audit(1790581118.393:136): pid=27736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6013" name="c_srate" dev="configfs" ino=245943 res=0 errno=0 [ 2076.161348][ T8] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2076.371336][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 2076.380570][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2076.402610][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2076.415390][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.429375][ T8] usb 2-1: Product: syz [ 2076.438233][ T8] usb 2-1: Manufacturer: syz [ 2076.446275][ T8] usb 2-1: SerialNumber: syz [ 2076.459424][ T8] usb 2-1: config 0 descriptor?? [ 2076.474562][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2078.421579][ T8] gspca_zc3xx: reg_w_i err -110 [ 2079.051376][ T8] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2079.068160][ T8] gspca_zc3xx: probe of 2-1:0.0 failed with error -110 [ 2079.465928][T27776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6024'. [ 2080.226374][ T8] usb 2-1: USB disconnect, device number 81 [ 2081.185525][ T28] audit: type=1800 audit(1790581124.543:137): pid=27787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6027" name="c_srate" dev="configfs" ino=245226 res=0 errno=0 [ 2082.229444][T27802] [U] ^C [ 2083.316057][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6035'. [ 2083.361435][ T28] audit: type=1800 audit(1790581126.713:138): pid=27813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6036" name="c_srate" dev="configfs" ino=246403 res=0 errno=0 [ 2083.580066][T27819] FAULT_INJECTION: forcing a failure. [ 2083.580066][T27819] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.593165][T27819] CPU: 1 PID: 27819 Comm: syz.3.6038 Not tainted syzkaller #0 [ 2083.600753][T27819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2083.610840][T27819] Call Trace: [ 2083.614139][T27819] [ 2083.617087][T27819] dump_stack_lvl+0x18c/0x250 [ 2083.621808][T27819] ? show_regs_print_info+0x20/0x20 [ 2083.627129][T27819] ? load_image+0x420/0x420 [ 2083.631673][T27819] ? __might_sleep+0xe0/0xe0 [ 2083.636299][T27819] ? __lock_acquire+0x7d80/0x7d80 [ 2083.641357][T27819] should_fail_ex+0x394/0x4c0 [ 2083.646124][T27819] should_failslab+0x9/0x20 [ 2083.650660][T27819] slab_pre_alloc_hook+0x59/0x300 [ 2083.655813][T27819] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2083.661565][T27819] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2083.667329][T27819] __kmem_cache_alloc_node+0x53/0x250 [ 2083.672943][T27819] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2083.678700][T27819] __kmalloc+0xa7/0x240 [ 2083.682897][T27819] tomoyo_realpath_from_path+0xe6/0x5c0 [ 2083.688553][T27819] ? tomoyo_domain+0xd6/0x120 [ 2083.693268][T27819] tomoyo_path_perm+0x282/0x560 [ 2083.698339][T27819] ? tomoyo_path_perm+0x250/0x560 [ 2083.703500][T27819] ? tomoyo_path_permission+0x3a0/0x3a0 [ 2083.709095][T27819] ? mark_lock+0x94/0x320 [ 2083.713470][T27819] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2083.719185][T27819] ? lockdep_hardirqs_on+0x98/0x150 [ 2083.724429][T27819] ? path_openat+0x29d6/0x3270 [ 2083.729309][T27819] security_file_truncate+0x62/0x90 [ 2083.734580][T27819] path_openat+0x29fe/0x3270 [ 2083.739243][T27819] ? do_filp_open+0x430/0x430 [ 2083.743974][T27819] do_filp_open+0x1f2/0x430 [ 2083.748515][T27819] ? vfs_tmpfile+0x620/0x620 [ 2083.753174][T27819] ? _raw_spin_unlock+0x28/0x40 [ 2083.758147][T27819] ? alloc_fd+0x590/0x640 [ 2083.762531][T27819] do_sys_openat2+0x134/0x1d0 [ 2083.767243][T27819] ? do_sys_open+0xe0/0xe0 [ 2083.771691][T27819] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2083.777703][T27819] ? lock_chain_count+0x20/0x20 [ 2083.782759][T27819] __x64_sys_openat+0x139/0x160 [ 2083.787645][T27819] do_syscall_64+0x55/0xb0 [ 2083.792103][T27819] ? clear_bhb_loop+0x40/0x90 [ 2083.796829][T27819] ? clear_bhb_loop+0x40/0x90 [ 2083.801541][T27819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2083.807482][T27819] RIP: 0033:0x7f28bcd9e159 [ 2083.811921][T27819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2083.831828][T27819] RSP: 002b:00007f28bdbc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2083.840373][T27819] RAX: ffffffffffffffda RBX: 00007f28bd026090 RCX: 00007f28bcd9e159 [ 2083.848382][T27819] RDX: 00000000000e8202 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 2083.856379][T27819] RBP: 00007f28bce3506b R08: 0000000000000000 R09: 0000000000000000 [ 2083.864375][T27819] R10: 00000000000001c3 R11: 0000000000000246 R12: 0000000000000000 [ 2083.872367][T27819] R13: 00007f28bd026128 R14: 00007f28bd026090 R15: 00007ffe9724ea08 [ 2083.880384][T27819] [ 2083.888974][T27819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2083.899784][ T28] audit: type=1800 audit(1790581126.933:139): pid=27819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6038" name="c_srate" dev="configfs" ino=246456 res=0 errno=0 [ 2085.021561][T21768] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2085.231392][T21768] usb 1-1: Using ep0 maxpacket: 8 [ 2085.243097][T21768] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2085.274072][T21768] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2085.301293][T21768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.309352][T21768] usb 1-1: Product: syz [ 2085.331342][T21768] usb 1-1: Manufacturer: syz [ 2085.336108][T21768] usb 1-1: SerialNumber: syz [ 2085.353753][T21768] usb 1-1: config 0 descriptor?? [ 2085.378002][T21768] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2087.908447][T21768] gspca_zc3xx: reg_w_i err -71 [ 2088.412474][ T28] audit: type=1800 audit(1790581131.773:140): pid=27860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6047" name="c_srate" dev="configfs" ino=246941 res=0 errno=0 [ 2088.495729][T27862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6048'. [ 2089.041508][T21768] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2089.071768][T21768] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 2090.731440][T21768] usb 1-1: USB disconnect, device number 48 [ 2090.944283][T27864] FAULT_INJECTION: forcing a failure. [ 2090.944283][T27864] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.957145][T27864] CPU: 0 PID: 27864 Comm: syz.2.6049 Not tainted syzkaller #0 [ 2090.964606][T27864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2090.974843][T27864] Call Trace: [ 2090.978210][T27864] [ 2090.981525][T27864] dump_stack_lvl+0x18c/0x250 [ 2090.986209][T27864] ? show_regs_print_info+0x20/0x20 [ 2090.991423][T27864] ? load_image+0x420/0x420 [ 2090.995942][T27864] ? __might_sleep+0xe0/0xe0 [ 2091.000536][T27864] ? __lock_acquire+0x7d80/0x7d80 [ 2091.005663][T27864] should_fail_ex+0x394/0x4c0 [ 2091.010368][T27864] should_failslab+0x9/0x20 [ 2091.014876][T27864] slab_pre_alloc_hook+0x59/0x300 [ 2091.019905][T27864] ? ima_add_digest_entry+0x56/0x350 [ 2091.025211][T27864] __kmem_cache_alloc_node+0x53/0x250 [ 2091.030722][T27864] ? ima_add_template_entry+0x1d4/0x7f0 [ 2091.036315][T27864] ? ima_add_digest_entry+0x56/0x350 [ 2091.041614][T27864] kmalloc_trace+0x2a/0xe0 [ 2091.046061][T27864] ima_add_digest_entry+0x56/0x350 [ 2091.051369][T27864] ima_add_template_entry+0x5b1/0x7f0 [ 2091.056763][T27864] ? ima_add_template_entry+0x1d4/0x7f0 [ 2091.062327][T27864] ? rcu_is_watching+0x15/0xb0 [ 2091.067102][T27864] ? ima_get_binary_runtime_size+0x20/0x20 [ 2091.072914][T27864] ? ima_calc_field_array_hash+0x428/0x490 [ 2091.078742][T27864] ima_store_measurement+0x2b6/0x690 [ 2091.084050][T27864] ? ima_collect_measurement+0xa30/0xa30 [ 2091.089788][T27864] ? ima_d_path+0x184/0x240 [ 2091.094326][T27864] ? ima_get_hash_algo+0x91/0x4a0 [ 2091.099373][T27864] ? ima_get_cache_status+0xd0/0xd0 [ 2091.104844][T27864] process_measurement+0x1304/0x1d50 [ 2091.110255][T27864] ? ima_file_mmap+0x1d0/0x1d0 [ 2091.115114][T27864] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 2091.121299][T27864] ima_file_check+0xcc/0x110 [ 2091.125932][T27864] ? ima_bprm_check+0x200/0x200 [ 2091.130825][T27864] path_openat+0x2910/0x3270 [ 2091.135445][T27864] ? do_filp_open+0x430/0x430 [ 2091.140224][T27864] do_filp_open+0x1f2/0x430 [ 2091.144820][T27864] ? vfs_tmpfile+0x620/0x620 [ 2091.149431][T27864] ? _raw_spin_unlock+0x28/0x40 [ 2091.154295][T27864] ? alloc_fd+0x590/0x640 [ 2091.158626][T27864] do_sys_openat2+0x134/0x1d0 [ 2091.163396][T27864] ? do_sys_open+0xe0/0xe0 [ 2091.167850][T27864] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2091.173950][T27864] ? lock_chain_count+0x20/0x20 [ 2091.178833][T27864] __x64_sys_openat+0x139/0x160 [ 2091.183704][T27864] do_syscall_64+0x55/0xb0 [ 2091.188122][T27864] ? clear_bhb_loop+0x40/0x90 [ 2091.192819][T27864] ? clear_bhb_loop+0x40/0x90 [ 2091.197509][T27864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2091.203431][T27864] RIP: 0033:0x7f37d6b9e159 [ 2091.207876][T27864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2091.227650][T27864] RSP: 002b:00007f37d7ab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2091.236070][T27864] RAX: ffffffffffffffda RBX: 00007f37d6e25fa0 RCX: 00007f37d6b9e159 [ 2091.244044][T27864] RDX: 00000000000e8202 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 2091.252038][T27864] RBP: 00007f37d6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2091.260064][T27864] R10: 00000000000001c3 R11: 0000000000000246 R12: 0000000000000000 [ 2091.268130][T27864] R13: 00007f37d6e26038 R14: 00007f37d6e25fa0 R15: 00007fffe2d93358 [ 2091.276254][T27864] [ 2091.279678][T27864] ima: OUT OF MEMORY ERROR creating queue entry [ 2091.317028][ T28] audit: type=1800 audit(1790581134.303:141): pid=27864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6049" name="c_srate" dev="configfs" ino=246953 res=0 errno=0 [ 2091.381986][ T28] audit: type=1804 audit(1790581134.643:142): pid=27864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.6049" name="/newroot/337/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=246953 res=0 errno=0 [ 2092.134095][T22719] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2092.561449][T22719] usb 2-1: Using ep0 maxpacket: 8 [ 2092.584822][T27877] FAULT_INJECTION: forcing a failure. [ 2092.584822][T27877] name failslab, interval 1, probability 0, space 0, times 0 [ 2092.598091][T27877] CPU: 0 PID: 27877 Comm: syz.2.6053 Not tainted syzkaller #0 [ 2092.605589][T27877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2092.615678][T27877] Call Trace: [ 2092.618975][T27877] [ 2092.622013][T27877] dump_stack_lvl+0x18c/0x250 [ 2092.626729][T27877] ? show_regs_print_info+0x20/0x20 [ 2092.631956][T27877] ? load_image+0x420/0x420 [ 2092.636475][T27877] ? __might_sleep+0xe0/0xe0 [ 2092.641086][T27877] ? __lock_acquire+0x7d80/0x7d80 [ 2092.646133][T27877] should_fail_ex+0x394/0x4c0 [ 2092.650836][T27877] should_failslab+0x9/0x20 [ 2092.655349][T27877] slab_pre_alloc_hook+0x59/0x300 [ 2092.660390][T27877] ? ima_add_digest_entry+0x56/0x350 [ 2092.665712][T27877] __kmem_cache_alloc_node+0x53/0x250 [ 2092.671098][T27877] ? ima_add_template_entry+0x1d4/0x7f0 [ 2092.676657][T27877] ? ima_add_digest_entry+0x56/0x350 [ 2092.681952][T27877] kmalloc_trace+0x2a/0xe0 [ 2092.686388][T27877] ima_add_digest_entry+0x56/0x350 [ 2092.691511][T27877] ima_add_template_entry+0x5b1/0x7f0 [ 2092.696898][T27877] ? ima_add_template_entry+0x1d4/0x7f0 [ 2092.702466][T27877] ? ima_get_binary_runtime_size+0x20/0x20 [ 2092.708305][T27877] ? ima_calc_field_array_hash+0x428/0x490 [ 2092.714163][T27877] ima_store_measurement+0x2b6/0x690 [ 2092.719489][T27877] ? ima_collect_measurement+0xa30/0xa30 [ 2092.725165][T27877] ? ima_d_path+0x184/0x240 [ 2092.729704][T27877] ? ima_get_hash_algo+0x91/0x4a0 [ 2092.734762][T27877] ? ima_get_cache_status+0xd0/0xd0 [ 2092.739977][T27877] process_measurement+0x1304/0x1d50 [ 2092.745284][T27877] ? ima_file_mmap+0x1d0/0x1d0 [ 2092.750087][T27877] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 2092.756250][T27877] ima_file_check+0xcc/0x110 [ 2092.760866][T27877] ? ima_bprm_check+0x200/0x200 [ 2092.765727][T27877] path_openat+0x2910/0x3270 [ 2092.770342][T27877] ? do_filp_open+0x430/0x430 [ 2092.775030][T27877] ? asan.module_dtor+0x20/0x20 [ 2092.779919][T27877] do_filp_open+0x1f2/0x430 [ 2092.784457][T27877] ? vfs_tmpfile+0x620/0x620 [ 2092.789084][T27877] ? _raw_spin_unlock+0x3a/0x40 [ 2092.793954][T27877] ? alloc_fd+0x590/0x640 [ 2092.798300][T27877] do_sys_openat2+0x134/0x1d0 [ 2092.802991][T27877] ? do_sys_open+0xe0/0xe0 [ 2092.807412][T27877] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2092.813402][T27877] ? lock_chain_count+0x20/0x20 [ 2092.818267][T27877] __x64_sys_openat+0x139/0x160 [ 2092.823140][T27877] do_syscall_64+0x55/0xb0 [ 2092.827570][T27877] ? clear_bhb_loop+0x40/0x90 [ 2092.832256][T27877] ? clear_bhb_loop+0x40/0x90 [ 2092.836974][T27877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2092.842878][T27877] RIP: 0033:0x7f37d6b9e159 [ 2092.847300][T27877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2092.866940][T27877] RSP: 002b:00007f37d7a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2092.875374][T27877] RAX: ffffffffffffffda RBX: 00007f37d6e26090 RCX: 00007f37d6b9e159 [ 2092.883358][T27877] RDX: 00000000000e8202 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 2092.891331][T27877] RBP: 00007f37d6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2092.899308][T27877] R10: 00000000000001c3 R11: 0000000000000246 R12: 0000000000000000 [ 2092.907384][T27877] R13: 00007f37d6e26128 R14: 00007f37d6e26090 R15: 00007fffe2d93358 [ 2092.915382][T27877] [ 2092.924266][T27877] ima: OUT OF MEMORY ERROR creating queue entry [ 2092.966884][T22719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2092.979316][ T28] audit: type=1800 audit(1790581135.943:143): pid=27877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6053" name="c_srate" dev="configfs" ino=246972 res=0 errno=0 [ 2093.079767][T22719] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2093.166798][T22719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.185427][ T28] audit: type=1804 audit(1790581136.283:144): pid=27877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.6053" name="/newroot/338/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=246972 res=0 errno=0 [ 2093.207160][T22719] usb 2-1: Product: syz [ 2093.241609][T22719] usb 2-1: Manufacturer: syz [ 2093.246504][T22719] usb 2-1: SerialNumber: syz [ 2094.502044][T22719] usb 2-1: config 0 descriptor?? [ 2094.530880][T22719] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2094.639464][T22719] gspca_zc3xx: reg_w_i err -71 [ 2095.444516][T27895] [U] ^C [ 2096.151542][T22719] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2096.158027][T22719] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 2096.185994][T22719] usb 2-1: USB disconnect, device number 82 [ 2096.459901][ T28] audit: type=1800 audit(1790581139.813:145): pid=27903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6057" name="c_srate" dev="configfs" ino=247130 res=0 errno=0 [ 2096.843998][T27910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6062'. [ 2099.188064][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.198928][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.301292][ T28] audit: type=1800 audit(1790581142.653:146): pid=27936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6068" name="c_srate" dev="configfs" ino=247300 res=0 errno=0 [ 2100.017682][T27937] [U] ^C [ 2100.708955][T21768] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2100.901588][T21768] usb 1-1: Using ep0 maxpacket: 8 [ 2100.914591][T21768] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2100.929264][T21768] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2100.939567][T21768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.948487][T21768] usb 1-1: Product: syz [ 2100.953044][T21768] usb 1-1: Manufacturer: syz [ 2100.957812][T21768] usb 1-1: SerialNumber: syz [ 2100.973386][T21768] usb 1-1: config 0 descriptor?? [ 2100.988623][T21768] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2101.126368][T27952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6072'. [ 2101.191482][T13304] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2101.381769][T13304] usb 2-1: Using ep0 maxpacket: 8 [ 2101.394177][T13304] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2101.411128][T13304] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2101.420644][T13304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.428875][T13304] usb 2-1: Product: syz [ 2101.433333][T13304] usb 2-1: Manufacturer: syz [ 2101.438033][T13304] usb 2-1: SerialNumber: syz [ 2101.450177][T13304] usb 2-1: config 0 descriptor?? [ 2101.458544][T13304] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2103.054599][T21768] gspca_zc3xx: reg_r err -32 [ 2103.671356][T21768] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2103.701431][T21768] gspca_zc3xx: probe of 1-1:0.0 failed with error -32 [ 2103.708285][T27962] [U] ^C [ 2104.130829][ T5824] usb 1-1: USB disconnect, device number 49 [ 2104.571685][T27978] [U] ^C [ 2105.317868][T13304] gspca_zc3xx: reg_r err -71 [ 2105.956914][T13304] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2105.974150][T13304] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 2105.996205][T13304] usb 2-1: USB disconnect, device number 83 [ 2106.388451][ T28] audit: type=1800 audit(1790581149.743:147): pid=28005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6085" name="c_srate" dev="configfs" ino=248113 res=0 errno=0 [ 2107.502373][T28013] FAULT_INJECTION: forcing a failure. [ 2107.502373][T28013] name failslab, interval 1, probability 0, space 0, times 0 [ 2107.515334][T28013] CPU: 1 PID: 28013 Comm: syz.1.6087 Not tainted syzkaller #0 [ 2107.523004][T28013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2107.533098][T28013] Call Trace: [ 2107.536399][T28013] [ 2107.539395][T28013] dump_stack_lvl+0x18c/0x250 [ 2107.544148][T28013] ? show_regs_print_info+0x20/0x20 [ 2107.549428][T28013] ? load_image+0x420/0x420 [ 2107.553964][T28013] ? __might_sleep+0xe0/0xe0 [ 2107.558594][T28013] ? __lock_acquire+0x7d80/0x7d80 [ 2107.563672][T28013] should_fail_ex+0x394/0x4c0 [ 2107.568413][T28013] should_failslab+0x9/0x20 [ 2107.573044][T28013] slab_pre_alloc_hook+0x59/0x300 [ 2107.578113][T28013] ? ima_add_digest_entry+0x56/0x350 [ 2107.583436][T28013] __kmem_cache_alloc_node+0x53/0x250 [ 2107.588845][T28013] ? ima_add_template_entry+0x1d4/0x7f0 [ 2107.594519][T28013] ? ima_add_digest_entry+0x56/0x350 [ 2107.599835][T28013] kmalloc_trace+0x2a/0xe0 [ 2107.604287][T28013] ima_add_digest_entry+0x56/0x350 [ 2107.609440][T28013] ima_add_template_entry+0x5b1/0x7f0 [ 2107.614848][T28013] ? ima_add_template_entry+0x1d4/0x7f0 [ 2107.620686][T28013] ? ima_get_binary_runtime_size+0x20/0x20 [ 2107.626530][T28013] ? ima_calc_field_array_hash+0x428/0x490 [ 2107.632378][T28013] ima_store_measurement+0x2b6/0x690 [ 2107.637705][T28013] ? ima_collect_measurement+0xa30/0xa30 [ 2107.643364][T28013] ? ima_d_path+0x184/0x240 [ 2107.647901][T28013] ? ima_get_hash_algo+0x91/0x4a0 [ 2107.652951][T28013] ? ima_get_cache_status+0xd0/0xd0 [ 2107.658185][T28013] process_measurement+0x1304/0x1d50 [ 2107.663522][T28013] ? ima_file_mmap+0x1d0/0x1d0 [ 2107.668368][T28013] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 2107.674560][T28013] ima_file_check+0xcc/0x110 [ 2107.679184][T28013] ? ima_bprm_check+0x200/0x200 [ 2107.684098][T28013] path_openat+0x2910/0x3270 [ 2107.688921][T28013] ? do_filp_open+0x430/0x430 [ 2107.693623][T28013] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2107.699676][T28013] do_filp_open+0x1f2/0x430 [ 2107.704224][T28013] ? vfs_tmpfile+0x620/0x620 [ 2107.708863][T28013] ? _raw_spin_unlock+0x28/0x40 [ 2107.713748][T28013] ? alloc_fd+0x590/0x640 [ 2107.718110][T28013] do_sys_openat2+0x134/0x1d0 [ 2107.722826][T28013] ? do_sys_open+0xe0/0xe0 [ 2107.727275][T28013] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2107.733293][T28013] ? lock_chain_count+0x20/0x20 [ 2107.738177][T28013] __x64_sys_openat+0x139/0x160 [ 2107.743160][T28013] do_syscall_64+0x55/0xb0 [ 2107.747637][T28013] ? clear_bhb_loop+0x40/0x90 [ 2107.752344][T28013] ? clear_bhb_loop+0x40/0x90 [ 2107.757097][T28013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2107.763036][T28013] RIP: 0033:0x7fc48e59e159 [ 2107.767570][T28013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2107.787235][T28013] RSP: 002b:00007fc48f46e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2107.795772][T28013] RAX: ffffffffffffffda RBX: 00007fc48e826090 RCX: 00007fc48e59e159 [ 2107.803917][T28013] RDX: 00000000000e8202 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 2107.811933][T28013] RBP: 00007fc48e63506b R08: 0000000000000000 R09: 0000000000000000 [ 2107.819933][T28013] R10: 00000000000001c3 R11: 0000000000000246 R12: 0000000000000000 [ 2107.828012][T28013] R13: 00007fc48e826128 R14: 00007fc48e826090 R15: 00007ffe5b7ce048 [ 2107.836115][T28013] [ 2107.845078][T28013] ima: OUT OF MEMORY ERROR creating queue entry [ 2107.857963][ T28] audit: type=1800 audit(1790581150.853:148): pid=28013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6087" name="c_srate" dev="configfs" ino=248133 res=0 errno=0 [ 2108.007145][ T28] audit: type=1804 audit(1790581151.213:149): pid=28013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.6087" name="/newroot/394/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=248133 res=0 errno=0 [ 2110.567203][T28028] [U] ^C [ 2112.001559][ T8] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2112.211277][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 2112.220405][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2112.236366][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2112.247435][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.263503][T28049] syzkaller0: entered promiscuous mode [ 2112.268692][ T8] usb 2-1: Product: syz [ 2112.278519][ T8] usb 2-1: Manufacturer: syz [ 2112.282858][T28049] syzkaller0: entered allmulticast mode [ 2112.284745][ T8] usb 2-1: SerialNumber: syz [ 2112.311613][ T8] usb 2-1: config 0 descriptor?? [ 2112.333026][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2113.500376][ T28] audit: type=1800 audit(1790581156.853:150): pid=28068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6102" name="c_srate" dev="configfs" ino=249406 res=0 errno=0 [ 2113.521807][T28068] FAULT_INJECTION: forcing a failure. [ 2113.521807][T28068] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.534880][T28068] CPU: 0 PID: 28068 Comm: syz.2.6102 Not tainted syzkaller #0 [ 2113.542370][T28068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2113.552461][T28068] Call Trace: [ 2113.555762][T28068] [ 2113.558711][T28068] dump_stack_lvl+0x18c/0x250 [ 2113.563428][T28068] ? show_regs_print_info+0x20/0x20 [ 2113.568748][T28068] ? load_image+0x420/0x420 [ 2113.573455][T28068] ? __might_sleep+0xe0/0xe0 [ 2113.578079][T28068] ? __lock_acquire+0x7d80/0x7d80 [ 2113.583138][T28068] should_fail_ex+0x394/0x4c0 [ 2113.587857][T28068] should_failslab+0x9/0x20 [ 2113.592392][T28068] slab_pre_alloc_hook+0x59/0x300 [ 2113.597453][T28068] ? ima_add_digest_entry+0x56/0x350 [ 2113.602780][T28068] __kmem_cache_alloc_node+0x53/0x250 [ 2113.608204][T28068] ? ima_add_template_entry+0x1d4/0x7f0 [ 2113.613796][T28068] ? ima_add_digest_entry+0x56/0x350 [ 2113.619113][T28068] kmalloc_trace+0x2a/0xe0 [ 2113.623568][T28068] ima_add_digest_entry+0x56/0x350 [ 2113.628805][T28068] ima_add_template_entry+0x5b1/0x7f0 [ 2113.634212][T28068] ? ima_add_template_entry+0x1d4/0x7f0 [ 2113.639789][T28068] ? rcu_is_watching+0x15/0xb0 [ 2113.644590][T28068] ? ima_get_binary_runtime_size+0x20/0x20 [ 2113.650475][T28068] ? ima_calc_field_array_hash+0x428/0x490 [ 2113.656318][T28068] ima_store_measurement+0x2b6/0x690 [ 2113.661666][T28068] ? ima_collect_measurement+0xa30/0xa30 [ 2113.667437][T28068] ? ima_d_path+0x184/0x240 [ 2113.671997][T28068] ? ima_get_hash_algo+0x91/0x4a0 [ 2113.677058][T28068] ? ima_get_cache_status+0xd0/0xd0 [ 2113.682305][T28068] process_measurement+0x1304/0x1d50 [ 2113.687680][T28068] ? ima_file_mmap+0x1d0/0x1d0 [ 2113.692525][T28068] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 2113.698894][T28068] ima_file_check+0xcc/0x110 [ 2113.703530][T28068] ? ima_bprm_check+0x200/0x200 [ 2113.708510][T28068] path_openat+0x2910/0x3270 [ 2113.713176][T28068] ? do_filp_open+0x430/0x430 [ 2113.717898][T28068] do_filp_open+0x1f2/0x430 [ 2113.722599][T28068] ? vfs_tmpfile+0x620/0x620 [ 2113.727331][T28068] ? _raw_spin_unlock+0x28/0x40 [ 2113.732236][T28068] ? alloc_fd+0x590/0x640 [ 2113.736622][T28068] do_sys_openat2+0x134/0x1d0 [ 2113.741430][T28068] ? do_sys_open+0xe0/0xe0 [ 2113.745888][T28068] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2113.751912][T28068] ? lock_chain_count+0x20/0x20 [ 2113.756797][T28068] __x64_sys_openat+0x139/0x160 [ 2113.761686][T28068] do_syscall_64+0x55/0xb0 [ 2113.766131][T28068] ? clear_bhb_loop+0x40/0x90 [ 2113.770857][T28068] ? clear_bhb_loop+0x40/0x90 [ 2113.775764][T28068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2113.781782][T28068] RIP: 0033:0x7f37d6b9e159 [ 2113.786319][T28068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2113.806055][T28068] RSP: 002b:00007f37d7a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2113.814590][T28068] RAX: ffffffffffffffda RBX: 00007f37d6e26270 RCX: 00007f37d6b9e159 [ 2113.822599][T28068] RDX: 00000000000e8202 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 2113.830617][T28068] RBP: 00007f37d6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2113.838698][T28068] R10: 00000000000001c3 R11: 0000000000000246 R12: 0000000000000000 [ 2113.846694][T28068] R13: 00007f37d6e26308 R14: 00007f37d6e26270 R15: 00007fffe2d93358 [ 2113.854746][T28068] [ 2113.858987][T28068] ima: OUT OF MEMORY ERROR creating queue entry [ 2114.074304][ T28] audit: type=1804 audit(1790581157.223:151): pid=28068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.6102" name="/newroot/352/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=249406 res=0 errno=0 [ 2116.894760][ T8] gspca_zc3xx: reg_r err -32 [ 2116.899528][ T8] gspca_zc3xx: probe of 2-1:0.0 failed with error -32 [ 2116.917866][ T8] usb 2-1: USB disconnect, device number 84 [ 2117.716716][T28091] [U] ^C [ 2119.375224][ T28] audit: type=1800 audit(1790581162.733:152): pid=28107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6112" name="c_srate" dev="configfs" ino=249582 res=0 errno=0 [ 2120.915692][ T28] audit: type=1800 audit(1790581164.273:153): pid=28124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6117" name="c_srate" dev="configfs" ino=249603 res=0 errno=0 [ 2120.953115][T21768] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2121.640997][T28126] [U] ^C [ 2122.356758][T21768] usb 4-1: Using ep0 maxpacket: 8 [ 2122.415341][T21768] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2122.427276][T21768] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2122.436643][T21768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.446423][T21768] usb 4-1: Product: syz [ 2122.455320][T21768] usb 4-1: Manufacturer: syz [ 2122.459973][T21768] usb 4-1: SerialNumber: syz [ 2122.479301][T21768] usb 4-1: config 0 descriptor?? [ 2122.494636][T21768] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2125.686309][ T28] audit: type=1800 audit(1790581169.043:154): pid=28158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6127" name="c_srate" dev="configfs" ino=249892 res=0 errno=0 [ 2125.734347][T21768] gspca_zc3xx: reg_r err -71 [ 2125.739140][T21768] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 2125.768268][T21768] usb 4-1: USB disconnect, device number 101 [ 2126.080556][T28172] loop5: detected capacity change from 0 to 7 [ 2126.113584][T28172] Dev loop5: unable to read RDB block 7 [ 2126.137136][T28172] loop5: AHDI p2 [ 2126.141137][T28172] loop5: partition table partially beyond EOD, truncated [ 2127.519944][ T28] audit: type=1800 audit(1790581170.873:155): pid=28189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6136" name="c_srate" dev="configfs" ino=250118 res=0 errno=0 [ 2127.871354][ T8] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2128.122098][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 2128.177024][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2128.241590][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2128.289054][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.363602][ T8] usb 4-1: Product: syz [ 2128.409089][ T8] usb 4-1: Manufacturer: syz [ 2128.454368][ T8] usb 4-1: SerialNumber: syz [ 2128.545223][ T8] usb 4-1: config 0 descriptor?? [ 2128.593469][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2129.325494][ T28] audit: type=1800 audit(1790581172.683:156): pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6142" name="c_srate" dev="configfs" ino=250214 res=0 errno=0 [ 2130.877504][ T28] audit: type=1800 audit(1790581174.233:157): pid=28234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6148" name="c_srate" dev="configfs" ino=250375 res=0 errno=0 [ 2131.704818][ T8] gspca_zc3xx: reg_r err -32 [ 2131.709609][ T8] gspca_zc3xx: probe of 4-1:0.0 failed with error -32 [ 2131.736250][ T8] usb 4-1: USB disconnect, device number 102 [ 2132.111568][T22719] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2132.319896][T22719] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2132.334321][T22719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.354422][T22719] usb 3-1: config 0 descriptor?? [ 2139.126103][T22719] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 2139.281295][T22719] [drm] Initialized udl on minor 2 [ 2139.287963][ T28] audit: type=1800 audit(1790581182.633:158): pid=28271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6160" name="c_srate" dev="configfs" ino=251350 res=0 errno=0 [ 2139.296242][T22719] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2139.343757][T22719] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2139.351614][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2139.362231][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2139.394976][T22719] usb 3-1: USB disconnect, device number 46 [ 2141.286628][T28295] binder: 28294:28295 unknown command 0 [ 2141.295774][T28295] binder: 28294:28295 ioctl c0306201 200000000080 returned -22 [ 2141.341609][T13304] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 2141.553878][T13304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2141.569498][T13304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2141.580257][T13304] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 2141.594729][T13304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.614830][T13304] usb 2-1: config 0 descriptor?? [ 2141.691472][T21768] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2141.791683][T22719] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2141.818931][ T28] audit: type=1800 audit(1790581185.173:159): pid=28299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6171" name="c_srate" dev="configfs" ino=251515 res=0 errno=0 [ 2141.873285][T21768] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2141.884566][T21768] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2141.899808][T21768] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2141.912586][T21768] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2141.939693][T21768] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2141.981284][T22719] usb 1-1: Using ep0 maxpacket: 8 [ 2141.982700][T21768] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2142.040101][T21768] usb 4-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 2142.149430][T13304] aquacomputer_d5next 0003:0C70:F0B6.000C: unknown main item tag 0x0 [ 2142.190650][T21768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2142.218334][T13304] aquacomputer_d5next 0003:0C70:F0B6.000C: unknown main item tag 0x0 [ 2142.306254][T13304] aquacomputer_d5next 0003:0C70:F0B6.000C: unknown main item tag 0x0 [ 2142.354574][T21768] usb 4-1: config 0 descriptor?? [ 2142.384110][T13304] aquacomputer_d5next 0003:0C70:F0B6.000C: unknown main item tag 0x0 [ 2142.454361][T21768] usb 4-1: bad CDC descriptors [ 2142.535996][T21768] usb 4-1: bad CDC descriptors [ 2142.562877][T13304] aquacomputer_d5next 0003:0C70:F0B6.000C: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 2142.986121][T22719] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2142.996275][T13304] usb 2-1: USB disconnect, device number 85 [ 2143.022577][T22719] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2143.037102][T22719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.046988][T22719] usb 1-1: Product: syz [ 2143.051417][T22719] usb 1-1: Manufacturer: syz [ 2143.056144][T22719] usb 1-1: SerialNumber: syz [ 2143.074472][T22719] usb 1-1: config 0 descriptor?? [ 2143.088300][T22719] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2143.094763][T21768] usb 4-1: USB disconnect, device number 103 [ 2143.176596][T28304] fido_id[28304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2144.545068][T28334] FAULT_INJECTION: forcing a failure. [ 2144.545068][T28334] name failslab, interval 1, probability 0, space 0, times 0 [ 2144.558077][T28334] CPU: 0 PID: 28334 Comm: syz.2.6178 Not tainted syzkaller #0 [ 2144.565585][T28334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2144.576026][T28334] Call Trace: [ 2144.579417][T28334] [ 2144.582370][T28334] dump_stack_lvl+0x18c/0x250 [ 2144.587196][T28334] ? show_regs_print_info+0x20/0x20 [ 2144.592431][T28334] ? load_image+0x420/0x420 [ 2144.596965][T28334] ? __might_sleep+0xe0/0xe0 [ 2144.601674][T28334] ? __lock_acquire+0x7d80/0x7d80 [ 2144.606737][T28334] should_fail_ex+0x394/0x4c0 [ 2144.611625][T28334] should_failslab+0x9/0x20 [ 2144.616162][T28334] slab_pre_alloc_hook+0x59/0x300 [ 2144.621232][T28334] ? ima_alloc_init_template+0x172/0x6e0 [ 2144.626939][T28334] ? ima_alloc_init_template+0x172/0x6e0 [ 2144.632603][T28334] __kmem_cache_alloc_node+0x53/0x250 [ 2144.638014][T28334] ? ima_alloc_init_template+0x172/0x6e0 [ 2144.643679][T28334] __kmalloc+0xa7/0x240 [ 2144.647869][T28334] ? prepend_path+0x8a7/0x950 [ 2144.652573][T28334] ima_alloc_init_template+0x172/0x6e0 [ 2144.658072][T28334] ima_store_measurement+0x1db/0x690 [ 2144.663399][T28334] ? ima_collect_measurement+0xa30/0xa30 [ 2144.669148][T28334] ? ima_d_path+0x184/0x240 [ 2144.673716][T28334] ? ima_get_hash_algo+0x91/0x4a0 [ 2144.678891][T28334] ? ima_get_cache_status+0xd0/0xd0 [ 2144.684230][T28334] process_measurement+0x1304/0x1d50 [ 2144.689569][T28334] ? ima_file_mmap+0x1d0/0x1d0 [ 2144.694412][T28334] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 2144.700649][T28334] ima_file_check+0xcc/0x110 [ 2144.705293][T28334] ? ima_bprm_check+0x200/0x200 [ 2144.710187][T28334] path_openat+0x2910/0x3270 [ 2144.714931][T28334] ? do_filp_open+0x430/0x430 [ 2144.719745][T28334] do_filp_open+0x1f2/0x430 [ 2144.724285][T28334] ? vfs_tmpfile+0x620/0x620 [ 2144.728927][T28334] ? _raw_spin_unlock+0x28/0x40 [ 2144.733892][T28334] ? alloc_fd+0x590/0x640 [ 2144.738433][T28334] do_sys_openat2+0x134/0x1d0 [ 2144.743193][T28334] ? do_sys_open+0xe0/0xe0 [ 2144.747641][T28334] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2144.753654][T28334] ? lock_chain_count+0x20/0x20 [ 2144.758538][T28334] __x64_sys_openat+0x139/0x160 [ 2144.763424][T28334] do_syscall_64+0x55/0xb0 [ 2144.767881][T28334] ? clear_bhb_loop+0x40/0x90 [ 2144.772698][T28334] ? clear_bhb_loop+0x40/0x90 [ 2144.777419][T28334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2144.783935][T28334] RIP: 0033:0x7f37d6b9e159 [ 2144.788383][T28334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2144.808371][T28334] RSP: 002b:00007f37d7a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2144.816910][T28334] RAX: ffffffffffffffda RBX: 00007f37d6e26270 RCX: 00007f37d6b9e159 [ 2144.825255][T28334] RDX: 00000000000e8202 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 2144.833258][T28334] RBP: 00007f37d6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2144.841249][T28334] R10: 00000000000001c3 R11: 0000000000000246 R12: 0000000000000000 [ 2144.849242][T28334] R13: 00007f37d6e26308 R14: 00007f37d6e26270 R15: 00007fffe2d93358 [ 2144.857392][T28334] [ 2144.929692][ T28] audit: type=1800 audit(1790581187.903:160): pid=28334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6178" name="c_srate" dev="configfs" ino=250749 res=0 errno=0 [ 2145.074637][ T28] audit: type=1804 audit(1790581188.223:161): pid=28334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.6178" name="/newroot/380/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=250749 res=0 errno=0 [ 2146.565132][T22719] gspca_zc3xx: reg_r err -71 [ 2147.181494][T22719] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2147.884867][T22719] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 2148.093344][T22719] usb 1-1: USB disconnect, device number 50 [ 2148.410091][T28360] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2148.445081][T28360] bond1: option mode: unable to set because the bond device has slaves [ 2148.489226][T28360] bond1: (slave macvlan1): Error -98 calling set_mac_address [ 2148.543512][T28362] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6185'. [ 2148.611655][T28362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2148.692900][T28362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2148.712005][T28362] bond0 (unregistering): Released all slaves [ 2148.946244][ T28] audit: type=1800 audit(1790581192.303:162): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6189" name="c_srate" dev="configfs" ino=252059 res=0 errno=0 [ 2149.169766][T28373] FAULT_INJECTION: forcing a failure. [ 2149.169766][T28373] name failslab, interval 1, probability 0, space 0, times 0 [ 2149.182539][T28373] CPU: 0 PID: 28373 Comm: syz.2.6190 Not tainted syzkaller #0 [ 2149.190001][T28373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2149.200164][T28373] Call Trace: [ 2149.203806][T28373] [ 2149.206826][T28373] dump_stack_lvl+0x18c/0x250 [ 2149.211513][T28373] ? show_regs_print_info+0x20/0x20 [ 2149.216725][T28373] ? load_image+0x420/0x420 [ 2149.221339][T28373] ? __might_sleep+0xe0/0xe0 [ 2149.225940][T28373] ? __lock_acquire+0x7d80/0x7d80 [ 2149.231104][T28373] should_fail_ex+0x394/0x4c0 [ 2149.236004][T28373] should_failslab+0x9/0x20 [ 2149.240617][T28373] slab_pre_alloc_hook+0x59/0x300 [ 2149.245752][T28373] ? ima_add_digest_entry+0x56/0x350 [ 2149.251135][T28373] __kmem_cache_alloc_node+0x53/0x250 [ 2149.256530][T28373] ? ima_add_template_entry+0x1d4/0x7f0 [ 2149.262099][T28373] ? ima_add_digest_entry+0x56/0x350 [ 2149.267393][T28373] kmalloc_trace+0x2a/0xe0 [ 2149.271817][T28373] ima_add_digest_entry+0x56/0x350 [ 2149.277284][T28373] ima_add_template_entry+0x5b1/0x7f0 [ 2149.282756][T28373] ? ima_add_template_entry+0x1d4/0x7f0 [ 2149.288312][T28373] ? ima_get_binary_runtime_size+0x20/0x20 [ 2149.294129][T28373] ? ima_calc_field_array_hash+0x428/0x490 [ 2149.300002][T28373] ima_store_measurement+0x2b6/0x690 [ 2149.305360][T28373] ? ima_collect_measurement+0xa30/0xa30 [ 2149.311107][T28373] ? ima_d_path+0x184/0x240 [ 2149.316245][T28373] ? ima_get_hash_algo+0x91/0x4a0 [ 2149.321292][T28373] ? ima_get_cache_status+0xd0/0xd0 [ 2149.326866][T28373] process_measurement+0x1304/0x1d50 [ 2149.332179][T28373] ? ima_file_mmap+0x1d0/0x1d0 [ 2149.337010][T28373] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 2149.343317][T28373] ima_file_check+0xcc/0x110 [ 2149.348035][T28373] ? ima_bprm_check+0x200/0x200 [ 2149.352968][T28373] path_openat+0x2910/0x3270 [ 2149.357668][T28373] ? do_filp_open+0x430/0x430 [ 2149.362552][T28373] do_filp_open+0x1f2/0x430 [ 2149.367237][T28373] ? vfs_tmpfile+0x620/0x620 [ 2149.371839][T28373] ? _raw_spin_unlock+0x28/0x40 [ 2149.376701][T28373] ? alloc_fd+0x590/0x640 [ 2149.381039][T28373] do_sys_openat2+0x134/0x1d0 [ 2149.385840][T28373] ? do_sys_open+0xe0/0xe0 [ 2149.390259][T28373] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2149.396330][T28373] ? lock_chain_count+0x20/0x20 [ 2149.401314][T28373] __x64_sys_openat+0x139/0x160 [ 2149.406174][T28373] do_syscall_64+0x55/0xb0 [ 2149.410595][T28373] ? clear_bhb_loop+0x40/0x90 [ 2149.415655][T28373] ? clear_bhb_loop+0x40/0x90 [ 2149.420455][T28373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2149.426464][T28373] RIP: 0033:0x7f37d6b9e159 [ 2149.430882][T28373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2149.450578][T28373] RSP: 002b:00007f37d7ab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2149.459003][T28373] RAX: ffffffffffffffda RBX: 00007f37d6e25fa0 RCX: 00007f37d6b9e159 [ 2149.467086][T28373] RDX: 00000000000e8202 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 2149.475283][T28373] RBP: 00007f37d6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2149.483362][T28373] R10: 00000000000001c3 R11: 0000000000000246 R12: 0000000000000000 [ 2149.491364][T28373] R13: 00007f37d6e26038 R14: 00007f37d6e25fa0 R15: 00007fffe2d93358 [ 2149.499547][T28373] [ 2149.503183][T28373] ima: OUT OF MEMORY ERROR creating queue entry [ 2149.513863][ T28] audit: type=1800 audit(1790581192.523:163): pid=28373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6190" name="c_srate" dev="configfs" ino=250794 res=0 errno=0 [ 2149.534869][ T28] audit: type=1804 audit(1790581192.863:164): pid=28373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.6190" name="/newroot/382/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=250794 res=0 errno=0 [ 2149.628976][T28378] binder: 28377:28378 unknown command 0 [ 2149.634999][T28378] binder: 28377:28378 ioctl c0306201 200000000080 returned -22 [ 2149.651382][T21768] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2153.971359][T21768] usb 1-1: device not accepting address 51, error -71 [ 2155.383776][T28308] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2156.464728][ T28] audit: type=1800 audit(1790581199.823:165): pid=28399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6199" name="c_srate" dev="configfs" ino=252099 res=0 errno=0 [ 2156.840897][T28408] FAULT_INJECTION: forcing a failure. [ 2156.840897][T28408] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2156.854700][T28408] CPU: 0 PID: 28408 Comm: syz.0.6202 Not tainted syzkaller #0 [ 2156.862210][T28408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2156.872470][T28408] Call Trace: [ 2156.875774][T28408] [ 2156.878811][T28408] dump_stack_lvl+0x18c/0x250 [ 2156.883537][T28408] ? show_regs_print_info+0x20/0x20 [ 2156.888859][T28408] ? load_image+0x420/0x420 [ 2156.893390][T28408] ? stack_trace_save+0xaa/0x100 [ 2156.898376][T28408] should_fail_ex+0x394/0x4c0 [ 2156.903108][T28408] get_futex_key+0x136/0x1030 [ 2156.907823][T28408] ? futex_setup_timer+0xc0/0xc0 [ 2156.912806][T28408] futex_wake+0x127/0x4f0 [ 2156.917165][T28408] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2156.923187][T28408] ? futex_wake_mark+0x150/0x150 [ 2156.928163][T28408] ? lockdep_hardirqs_on+0x98/0x150 [ 2156.933393][T28408] do_futex+0x35d/0x3e0 [ 2156.937586][T28408] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2156.943717][T28408] __se_sys_futex+0x3a9/0x440 [ 2156.948450][T28408] ? __x64_sys_futex+0xf0/0xf0 [ 2156.953262][T28408] ? __x64_sys_futex+0x21/0xf0 [ 2156.958059][T28408] do_syscall_64+0x55/0xb0 [ 2156.962509][T28408] ? clear_bhb_loop+0x40/0x90 [ 2156.967274][T28408] ? clear_bhb_loop+0x40/0x90 [ 2156.971985][T28408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2156.977920][T28408] RIP: 0033:0x7ff88c19e159 [ 2156.982340][T28408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2157.001954][T28408] RSP: 002b:00007ff88d03d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2157.010373][T28408] RAX: ffffffffffffffda RBX: 00007ff88c426098 RCX: 00007ff88c19e159 [ 2157.018357][T28408] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff88c42609c [ 2157.026345][T28408] RBP: 00007ff88c426090 R08: 0000000000745b08 R09: 0000000000000000 [ 2157.034327][T28408] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 2157.042307][T28408] R13: 00007ff88c426128 R14: 00007ffc8b3becf0 R15: 00007ffc8b3bedd8 [ 2157.050302][T28408] [ 2157.055172][ T28] audit: type=1800 audit(1790581200.193:166): pid=28408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6202" name="c_srate" dev="configfs" ino=253024 res=0 errno=0 [ 2157.871283][T28416] syzkaller0: entered promiscuous mode [ 2157.879233][T28416] syzkaller0: entered allmulticast mode [ 2157.903500][T28416] tipc: Enabled bearer , priority 0 [ 2157.931836][T28414] tipc: Resetting bearer [ 2158.022813][T28414] tipc: Disabling bearer [ 2158.091323][T21768] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2158.301384][T21768] usb 2-1: Using ep0 maxpacket: 8 [ 2158.388366][T21768] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2158.412759][T21768] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2158.431128][T21768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.441372][T21768] usb 2-1: Product: syz [ 2158.445655][T21768] usb 2-1: Manufacturer: syz [ 2158.484042][T21768] usb 2-1: SerialNumber: syz [ 2158.522346][T21768] usb 2-1: config 0 descriptor?? [ 2158.555184][T21768] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2160.069264][T21768] gspca_zc3xx: reg_w_i err -110 [ 2160.625436][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.631967][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.761810][T21768] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2160.864463][T21768] gspca_zc3xx: probe of 2-1:0.0 failed with error -110 [ 2161.647720][ T28] audit: type=1800 audit(1790581204.973:167): pid=28448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6210" name="c_srate" dev="configfs" ino=252143 res=0 errno=0 [ 2161.910488][T22719] usb 2-1: USB disconnect, device number 86 [ 2163.892148][T28460] FAULT_INJECTION: forcing a failure. [ 2163.892148][T28460] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.905492][T28460] CPU: 0 PID: 28460 Comm: syz.3.6212 Not tainted syzkaller #0 [ 2163.912993][T28460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2163.923599][T28460] Call Trace: [ 2163.926895][T28460] [ 2163.929861][T28460] dump_stack_lvl+0x18c/0x250 [ 2163.935185][T28460] ? show_regs_print_info+0x20/0x20 [ 2163.940491][T28460] ? load_image+0x420/0x420 [ 2163.945036][T28460] ? __might_sleep+0xe0/0xe0 [ 2163.949655][T28460] ? __lock_acquire+0x7d80/0x7d80 [ 2163.954706][T28460] should_fail_ex+0x394/0x4c0 [ 2163.959518][T28460] should_failslab+0x9/0x20 [ 2163.964123][T28460] slab_pre_alloc_hook+0x59/0x300 [ 2163.969526][T28460] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2163.975606][T28460] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2163.981713][T28460] __kmem_cache_alloc_node+0x53/0x250 [ 2163.987108][T28460] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2163.992841][T28460] __kmalloc+0xa7/0x240 [ 2163.997220][T28460] tomoyo_realpath_from_path+0xe6/0x5c0 [ 2164.003136][T28460] ? tomoyo_domain+0xd6/0x120 [ 2164.007839][T28460] tomoyo_path_perm+0x282/0x560 [ 2164.012703][T28460] ? tomoyo_path_perm+0x250/0x560 [ 2164.017738][T28460] ? tomoyo_path_permission+0x3a0/0x3a0 [ 2164.023317][T28460] ? ima_file_check+0xcc/0x110 [ 2164.028088][T28460] ? ima_bprm_check+0x200/0x200 [ 2164.032949][T28460] security_file_truncate+0x62/0x90 [ 2164.038160][T28460] path_openat+0x29fe/0x3270 [ 2164.042779][T28460] ? do_filp_open+0x430/0x430 [ 2164.047561][T28460] do_filp_open+0x1f2/0x430 [ 2164.052071][T28460] ? vfs_tmpfile+0x620/0x620 [ 2164.056683][T28460] ? _raw_spin_unlock+0x28/0x40 [ 2164.061541][T28460] ? alloc_fd+0x590/0x640 [ 2164.065890][T28460] do_sys_openat2+0x134/0x1d0 [ 2164.070575][T28460] ? do_sys_open+0xe0/0xe0 [ 2164.075001][T28460] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2164.080993][T28460] ? lock_chain_count+0x20/0x20 [ 2164.085858][T28460] __x64_sys_openat+0x139/0x160 [ 2164.090812][T28460] do_syscall_64+0x55/0xb0 [ 2164.095240][T28460] ? clear_bhb_loop+0x40/0x90 [ 2164.099930][T28460] ? clear_bhb_loop+0x40/0x90 [ 2164.104880][T28460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2164.110795][T28460] RIP: 0033:0x7f28bcd9e159 [ 2164.115307][T28460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2164.135194][T28460] RSP: 002b:00007f28bdbc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2164.143711][T28460] RAX: ffffffffffffffda RBX: 00007f28bd026090 RCX: 00007f28bcd9e159 [ 2164.151899][T28460] RDX: 00000000000e8202 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 2164.160410][T28460] RBP: 00007f28bce3506b R08: 0000000000000000 R09: 0000000000000000 [ 2164.168414][T28460] R10: 00000000000001c3 R11: 0000000000000246 R12: 0000000000000000 [ 2164.176395][T28460] R13: 00007f28bd026128 R14: 00007f28bd026090 R15: 00007ffe9724ea08 [ 2164.184388][T28460] [ 2164.196498][T28460] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2164.227519][ T28] audit: type=1800 audit(1790581207.253:168): pid=28460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6212" name="c_srate" dev="configfs" ino=253146 res=0 errno=0 [ 2164.606342][T28458] syzkaller0: entered promiscuous mode [ 2164.624559][T28458] syzkaller0: entered allmulticast mode [ 2164.669721][T28459] tipc: Enabled bearer , priority 0 [ 2164.740748][T28456] tipc: Resetting bearer [ 2164.884964][T28456] tipc: Disabling bearer [ 2167.610974][ T28] audit: type=1800 audit(1790581210.963:169): pid=28494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6221" name="c_srate" dev="configfs" ino=253506 res=0 errno=0 [ 2168.611457][T28308] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2168.828368][T28308] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2168.858908][T28308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.894079][T28308] usb 3-1: config 0 descriptor?? [ 2168.922827][T28308] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2169.314114][T28308] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 2169.518941][T28308] gspca_cpia1: usb_control_msg 01, error -71 [ 2169.529946][T28308] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 2169.552620][T28308] usb 3-1: USB disconnect, device number 47 [ 2172.221528][T28308] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2172.421600][T28308] usb 1-1: Using ep0 maxpacket: 16 [ 2172.483300][T28308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2172.500414][T28308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2172.510512][T28308] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2172.525198][T28308] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2172.535344][T28308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.552009][T28308] usb 1-1: config 0 descriptor?? [ 2172.815456][T28308] usbhid 1-1:0.0: can't add hid device: -71 [ 2172.821865][T28308] usbhid: probe of 1-1:0.0 failed with error -71 [ 2172.835595][T28308] usb 1-1: USB disconnect, device number 53 [ 2174.870245][T28576] overlayfs: failed to resolve './file1': -2 [ 2175.715787][T28591] fuse: Bad value for 'fd' [ 2175.726289][T28591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6247'. [ 2177.022847][T28607] syzkaller0: entered promiscuous mode [ 2177.028892][T28607] syzkaller0: entered allmulticast mode [ 2177.079725][T16588] syzkaller0: tun_net_xmit 48 [ 2177.087721][T28616] FAULT_INJECTION: forcing a failure. [ 2177.087721][T28616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2177.121389][T28616] CPU: 1 PID: 28616 Comm: syz.0.6256 Not tainted syzkaller #0 [ 2177.128959][T28616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2177.139133][T28616] Call Trace: [ 2177.142470][T28616] [ 2177.145436][T28616] dump_stack_lvl+0x18c/0x250 [ 2177.150222][T28616] ? show_regs_print_info+0x20/0x20 [ 2177.155642][T28616] ? load_image+0x420/0x420 [ 2177.160167][T28616] ? __might_fault+0xaa/0x120 [ 2177.165009][T28616] ? __lock_acquire+0x7d80/0x7d80 [ 2177.170048][T28616] ? preempt_schedule+0xc0/0xd0 [ 2177.174921][T28616] should_fail_ex+0x394/0x4c0 [ 2177.179619][T28616] _copy_from_user+0x2f/0xe0 [ 2177.184316][T28616] ___sys_sendmsg+0x1c7/0x360 [ 2177.189127][T28616] ? __sys_sendmsg+0x2b0/0x2b0 [ 2177.193936][T28616] __se_sys_sendmsg+0x1d0/0x2c0 [ 2177.198802][T28616] ? __x64_sys_sendmsg+0x80/0x80 [ 2177.203795][T28616] ? lockdep_hardirqs_on+0x98/0x150 [ 2177.209019][T28616] do_syscall_64+0x55/0xb0 [ 2177.213448][T28616] ? clear_bhb_loop+0x40/0x90 [ 2177.218226][T28616] ? clear_bhb_loop+0x40/0x90 [ 2177.222952][T28616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2177.228861][T28616] RIP: 0033:0x7ff88c19e159 [ 2177.233393][T28616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2177.253220][T28616] RSP: 002b:00007ff88d05e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2177.261686][T28616] RAX: ffffffffffffffda RBX: 00007ff88c425fa0 RCX: 00007ff88c19e159 [ 2177.269672][T28616] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 2177.277675][T28616] RBP: 00007ff88c23506b R08: 0000000000000000 R09: 0000000000000000 [ 2177.285655][T28616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2177.293637][T28616] R13: 00007ff88c426038 R14: 00007ff88c425fa0 R15: 00007ffc8b3bedd8 [ 2177.302427][T28616] [ 2177.390166][T28620] CIFS: Attempting to mount //127.0.0.1/share [ 2178.049197][T28635] input: syz1 as /devices/virtual/input/input101 [ 2178.218332][T28620] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2178.250726][T28620] CIFS: VFS: cifs_mount failed w/return code = -4 [ 2178.605347][T28642] 9pnet_virtio: no channels available for device syz [ 2181.449754][T28667] xt_hashlimit: size too large, truncated to 1048576 [ 2181.642389][ T28] audit: type=1800 audit(1790581225.003:170): pid=28675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6271" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 2181.792260][T22719] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2181.991312][T22719] usb 3-1: Using ep0 maxpacket: 8 [ 2182.005689][T22719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.022458][T28308] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2182.031260][T22719] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2182.040191][T22719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2182.061348][T22719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2182.081288][T22719] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2182.090366][T22719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.126815][T22719] hub 3-1:1.0: bad descriptor, ignoring hub [ 2182.133209][T22719] hub: probe of 3-1:1.0 failed with error -5 [ 2182.139943][T22719] cdc_wdm 3-1:1.0: skipping garbage [ 2182.161277][T22719] cdc_wdm 3-1:1.0: skipping garbage [ 2182.167906][T22719] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2182.181282][T22719] cdc_wdm 3-1:1.0: Unknown control protocol [ 2182.211595][T28308] usb 2-1: Using ep0 maxpacket: 16 [ 2182.219155][T28308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2182.236402][T28308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2182.246751][T28308] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2182.265262][T28308] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2182.281350][T28308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.300526][T28308] usb 2-1: config 0 descriptor?? [ 2182.552266][T28308] usbhid 2-1:0.0: can't add hid device: -71 [ 2182.558526][T28308] usbhid: probe of 2-1:0.0 failed with error -71 [ 2182.576463][T28308] usb 2-1: USB disconnect, device number 87 [ 2182.634204][T21768] usb 3-1: USB disconnect, device number 48 [ 2182.897984][T28686] ======================================================= [ 2182.897984][T28686] WARNING: The mand mount option has been deprecated and [ 2182.897984][T28686] and is ignored by this kernel. Remove the mand [ 2182.897984][T28686] option from the mount to silence this warning. [ 2182.897984][T28686] ======================================================= [ 2183.020555][T22719] nvmet: connect request for invalid subsystem t! [ 2183.027600][T28688] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 2183.141430][T28692] binder: 28691:28692 unknown command 1074291477 [ 2183.148165][T28692] binder: 28691:28692 ioctl c0306201 200000004a40 returned -22 [ 2183.208492][T28696] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2183.268156][T28700] binder: 28699:28700 unknown command 0 [ 2183.274211][T28700] binder: 28699:28700 ioctl c0306201 200000000080 returned -22 [ 2183.401813][ T28] audit: type=1800 audit(1790581226.753:171): pid=28702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6288" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 2183.441543][T28308] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2183.571349][T22719] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2183.691438][T28308] usb 2-1: Using ep0 maxpacket: 8 [ 2183.704923][T28308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2183.717530][T28308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2183.728050][T28308] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 2184.022546][T28308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.129175][T28308] kobil_sct 2-1:1.0: KOBIL USB smart card terminal converter detected [ 2184.280274][T28308] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2184.357998][T22719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.369404][T22719] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2184.425219][T22719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.445913][T22719] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2184.463154][T28694] jffs2: notice: (28694) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2184.500132][T22719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.514856][T22719] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2184.528651][T22719] usb 3-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 2184.544282][T22719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.567708][T22719] usb 3-1: config 0 descriptor?? [ 2186.171901][ T5824] usb 2-1: USB disconnect, device number 88 [ 2186.178084][T22719] usb 3-1: bad CDC descriptors [ 2186.202156][ T5824] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2186.212966][T22719] usb 3-1: bad CDC descriptors [ 2186.222670][ T5824] kobil_sct 2-1:1.0: device disconnected [ 2186.311366][T22719] usb 3-1: USB disconnect, device number 49 [ 2186.358795][T28717] input: syz1 as /devices/virtual/input/input102 [ 2186.546057][T28728] binder: 28727:28728 unknown command 1074291477 [ 2186.554222][T28728] binder: 28727:28728 ioctl c0306201 200000004a40 returned -22 [ 2186.645632][T28308] nvmet: connect request for invalid subsystem t! [ 2186.661511][T28726] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 2186.689206][T28737] FAULT_INJECTION: forcing a failure. [ 2186.689206][T28737] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.701987][T28739] input: syz0 as /devices/virtual/input/input103 [ 2186.707684][T28737] CPU: 0 PID: 28737 Comm: syz.0.6292 Not tainted syzkaller #0 [ 2186.716726][T28737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2186.726820][T28737] Call Trace: [ 2186.730142][T28737] [ 2186.733115][T28737] dump_stack_lvl+0x18c/0x250 [ 2186.737922][T28737] ? show_regs_print_info+0x20/0x20 [ 2186.743156][T28737] ? load_image+0x420/0x420 [ 2186.747691][T28737] ? __might_sleep+0xe0/0xe0 [ 2186.752402][T28737] ? __lock_acquire+0x7d80/0x7d80 [ 2186.757452][T28737] ? percpu_ref_put+0x12/0x100 [ 2186.762306][T28737] should_fail_ex+0x394/0x4c0 [ 2186.767025][T28737] should_failslab+0x9/0x20 [ 2186.771572][T28737] slab_pre_alloc_hook+0x59/0x300 [ 2186.776681][T28737] kmem_cache_alloc+0x5a/0x2c0 [ 2186.781489][T28737] ? vm_area_dup+0x61/0x270 [ 2186.786023][T28737] vm_area_dup+0x61/0x270 [ 2186.790383][T28737] copy_mm+0x11a6/0x1e30 [ 2186.794855][T28737] ? copy_signal+0x640/0x640 [ 2186.799604][T28737] ? lockdep_init_map_type+0x9c/0x8e0 [ 2186.805126][T28737] ? __init_rwsem+0x122/0x160 [ 2186.809822][T28737] ? copy_signal+0x51f/0x640 [ 2186.814879][T28737] copy_process+0x16c9/0x3da0 [ 2186.819578][T28737] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2186.825491][T28737] ? copy_process+0x98e/0x3da0 [ 2186.830279][T28737] ? __pidfd_prepare+0x140/0x140 [ 2186.835250][T28737] ? wake_up_q+0xca/0x100 [ 2186.839604][T28737] kernel_clone+0x24b/0x8a0 [ 2186.844127][T28737] ? futex_wake_mark+0x150/0x150 [ 2186.849081][T28737] ? create_io_thread+0x190/0x190 [ 2186.854124][T28737] ? lockdep_hardirqs_on+0x98/0x150 [ 2186.859696][T28737] ? do_futex+0x35d/0x3e0 [ 2186.864044][T28737] __x64_sys_clone+0x1b7/0x230 [ 2186.868825][T28737] ? __ia32_sys_vfork+0x140/0x140 [ 2186.873870][T28737] ? lock_chain_count+0x20/0x20 [ 2186.878773][T28737] ? lockdep_hardirqs_on+0x98/0x150 [ 2186.884078][T28737] do_syscall_64+0x55/0xb0 [ 2186.888510][T28737] ? clear_bhb_loop+0x40/0x90 [ 2186.893198][T28737] ? clear_bhb_loop+0x40/0x90 [ 2186.898065][T28737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2186.903978][T28737] RIP: 0033:0x7ff88c19e159 [ 2186.908414][T28737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2186.928312][T28737] RSP: 002b:00007ff88d05dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2186.936744][T28737] RAX: ffffffffffffffda RBX: 00007ff88c425fa0 RCX: 00007ff88c19e159 [ 2186.944755][T28737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020100000 [ 2186.952780][T28737] RBP: 00007ff88c23506b R08: 0000000000000000 R09: 0000000000000000 [ 2186.960762][T28737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2186.968868][T28737] R13: 00007ff88c426038 R14: 00007ff88c425fa0 R15: 00007ffc8b3bedd8 [ 2186.976955][T28737] [ 2186.980366][ C0] vkms_vblank_simulate: vblank timer overrun [ 2187.313214][T21734] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 2187.435868][T28757] binder: 28755:28757 unknown command 1074291477 [ 2187.442486][T28757] binder: 28755:28757 ioctl c0306201 200000004a40 returned -22 [ 2187.556562][T28761] input: syz0 as /devices/virtual/input/input104 [ 2187.762765][T28308] nvmet: connect request for invalid subsystem t! [ 2187.769550][T28767] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 2187.914515][T28773] FAULT_INJECTION: forcing a failure. [ 2187.914515][T28773] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.935236][T28773] CPU: 0 PID: 28773 Comm: syz.3.6308 Not tainted syzkaller #0 [ 2187.942774][T28773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2187.952858][T28773] Call Trace: [ 2187.956220][T28773] [ 2187.959181][T28773] dump_stack_lvl+0x18c/0x250 [ 2187.963907][T28773] ? show_regs_print_info+0x20/0x20 [ 2187.969121][T28773] ? load_image+0x420/0x420 [ 2187.973629][T28773] ? __might_sleep+0xe0/0xe0 [ 2187.978232][T28773] ? __lock_acquire+0x7d80/0x7d80 [ 2187.983306][T28773] should_fail_ex+0x394/0x4c0 [ 2187.988114][T28773] should_failslab+0x9/0x20 [ 2187.992656][T28773] slab_pre_alloc_hook+0x59/0x300 [ 2187.997728][T28773] kmem_cache_alloc+0x5a/0x2c0 [ 2188.002527][T28773] ? copy_mm+0x178/0x1e30 [ 2188.006906][T28773] copy_mm+0x178/0x1e30 [ 2188.011079][T28773] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2188.017278][T28773] ? __asan_memset+0x22/0x40 [ 2188.021915][T28773] ? lockdep_init_map_type+0x9c/0x8e0 [ 2188.027424][T28773] ? copy_signal+0x640/0x640 [ 2188.032317][T28773] ? lockdep_init_map_type+0x9c/0x8e0 [ 2188.035327][T28776] lo: entered allmulticast mode [ 2188.037837][T28773] ? lockdep_softirqs_off+0x440/0x440 [ 2188.044792][T28775] lo: left allmulticast mode [ 2188.048157][T28773] ? __lock_acquire+0x7d80/0x7d80 [ 2188.058137][T28773] ? __raw_spin_lock_init+0x45/0x100 [ 2188.063564][T28773] ? __init_rwsem+0x122/0x160 [ 2188.068282][T28773] ? copy_signal+0x51f/0x640 [ 2188.073117][T28773] copy_process+0x16c9/0x3da0 [ 2188.077841][T28773] ? plist_add+0x3db/0x490 [ 2188.082417][T28773] ? copy_process+0x98e/0x3da0 [ 2188.087287][T28773] ? futex_wait+0x4a7/0x5c0 [ 2188.091857][T28773] ? __pidfd_prepare+0x140/0x140 [ 2188.096941][T28773] kernel_clone+0x24b/0x8a0 [ 2188.102204][T28773] ? create_io_thread+0x190/0x190 [ 2188.107293][T28773] ? do_futex+0x2ff/0x3e0 [ 2188.112031][T28773] __x64_sys_clone+0x1b7/0x230 [ 2188.117047][T28773] ? __ia32_sys_vfork+0x140/0x140 [ 2188.122133][T28773] ? lock_chain_count+0x20/0x20 [ 2188.127132][T28773] ? lockdep_hardirqs_on+0x98/0x150 [ 2188.132371][T28773] do_syscall_64+0x55/0xb0 [ 2188.137173][T28773] ? clear_bhb_loop+0x40/0x90 [ 2188.141873][T28773] ? clear_bhb_loop+0x40/0x90 [ 2188.146562][T28773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2188.152549][T28773] RIP: 0033:0x7f28bcd9e159 [ 2188.157098][T28773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2188.176727][T28773] RSP: 002b:00007f28bdbe4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2188.185248][T28773] RAX: ffffffffffffffda RBX: 00007f28bd025fa0 RCX: 00007f28bcd9e159 [ 2188.193311][T28773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020100000 [ 2188.201462][T28773] RBP: 00007f28bce3506b R08: 0000000000000000 R09: 0000000000000000 [ 2188.209785][T28773] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2188.217857][T28773] R13: 00007f28bd026038 R14: 00007f28bd025fa0 R15: 00007ffe9724ea08 [ 2188.225855][T28773] [ 2188.229077][ C0] vkms_vblank_simulate: vblank timer overrun [ 2189.060896][T28809] FAULT_INJECTION: forcing a failure. [ 2189.060896][T28809] name failslab, interval 1, probability 0, space 0, times 0 [ 2189.073847][T22719] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2189.081615][T28809] CPU: 0 PID: 28809 Comm: syz.1.6322 Not tainted syzkaller #0 [ 2189.089115][T28809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2189.099303][T28809] Call Trace: [ 2189.102631][T28809] [ 2189.105599][T28809] dump_stack_lvl+0x18c/0x250 [ 2189.110335][T28809] ? show_regs_print_info+0x20/0x20 [ 2189.115586][T28809] ? load_image+0x420/0x420 [ 2189.120132][T28809] ? __might_sleep+0xe0/0xe0 [ 2189.124802][T28809] ? __lock_acquire+0x7d80/0x7d80 [ 2189.129877][T28809] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 2189.135671][T28809] should_fail_ex+0x394/0x4c0 [ 2189.140762][T28809] should_failslab+0x9/0x20 [ 2189.145327][T28809] slab_pre_alloc_hook+0x59/0x300 [ 2189.150481][T28809] kmem_cache_alloc+0x5a/0x2c0 [ 2189.155288][T28809] ? vm_area_dup+0x27/0x270 [ 2189.159844][T28809] vm_area_dup+0x27/0x270 [ 2189.164188][T28809] copy_mm+0x11a6/0x1e30 [ 2189.168481][T28809] ? copy_signal+0x640/0x640 [ 2189.173079][T28809] ? lockdep_init_map_type+0x9c/0x8e0 [ 2189.178570][T28809] ? __init_rwsem+0x122/0x160 [ 2189.183279][T28809] ? copy_signal+0x51f/0x640 [ 2189.187884][T28809] copy_process+0x16c9/0x3da0 [ 2189.192566][T28809] ? plist_add+0x3db/0x490 [ 2189.197025][T28809] ? copy_process+0x98e/0x3da0 [ 2189.201918][T28809] ? futex_wait+0x4a7/0x5c0 [ 2189.206537][T28809] ? __pidfd_prepare+0x140/0x140 [ 2189.211618][T28809] kernel_clone+0x24b/0x8a0 [ 2189.216139][T28809] ? create_io_thread+0x190/0x190 [ 2189.221181][T28809] ? do_futex+0x2ff/0x3e0 [ 2189.225613][T28809] __x64_sys_clone+0x1b7/0x230 [ 2189.230475][T28809] ? __ia32_sys_vfork+0x140/0x140 [ 2189.235515][T28809] ? lock_chain_count+0x20/0x20 [ 2189.240421][T28809] ? lockdep_hardirqs_on+0x98/0x150 [ 2189.245666][T28809] do_syscall_64+0x55/0xb0 [ 2189.250100][T28809] ? clear_bhb_loop+0x40/0x90 [ 2189.254788][T28809] ? clear_bhb_loop+0x40/0x90 [ 2189.259484][T28809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2189.265508][T28809] RIP: 0033:0x7fc48e59e159 [ 2189.269979][T28809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2189.289615][T28809] RSP: 002b:00007fc48f48efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2189.298053][T28809] RAX: ffffffffffffffda RBX: 00007fc48e825fa0 RCX: 00007fc48e59e159 [ 2189.306137][T28809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020100000 [ 2189.314188][T28809] RBP: 00007fc48e63506b R08: 0000000000000000 R09: 0000000000000000 [ 2189.322204][T28809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2189.330210][T28809] R13: 00007fc48e826038 R14: 00007fc48e825fa0 R15: 00007ffe5b7ce048 [ 2189.338215][T28809] [ 2189.341337][ C0] vkms_vblank_simulate: vblank timer overrun [ 2189.469773][ T28] audit: type=1800 audit(1790581232.823:172): pid=28811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6323" name=08 dev="sda1" ino=2059 res=0 errno=0 [ 2189.531279][T22719] usb 1-1: Using ep0 maxpacket: 8 [ 2189.547549][T22719] usb 1-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 2189.571833][T22719] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2189.580801][T22719] usb 1-1: config 1 has no interface number 0 [ 2189.591287][T22719] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 2189.614799][T22719] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2189.624109][T22719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.632235][T22719] usb 1-1: Product: syz [ 2189.636429][T22719] usb 1-1: Manufacturer: syz [ 2189.641053][T22719] usb 1-1: SerialNumber: syz [ 2189.880227][T22719] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 2189.917588][T28673] udevd[28673]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2190.017770][T28821] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6327'. [ 2190.103510][T28825] input: syz1 as /devices/virtual/input/input105 [ 2190.242877][ T28] audit: type=1326 audit(1790581233.573:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28827 comm="syz.1.6331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48e59e159 code=0x7ffc0000 [ 2190.268031][ C0] vkms_vblank_simulate: vblank timer overrun [ 2190.295880][ T28] audit: type=1326 audit(1790581233.573:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28827 comm="syz.1.6331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48e59e159 code=0x7ffc0000 [ 2190.326203][ T28] audit: type=1326 audit(1790581233.573:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28827 comm="syz.1.6331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48e59e159 code=0x7ffc0000 [ 2190.355673][ T28] audit: type=1326 audit(1790581233.573:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28827 comm="syz.1.6331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48e59e159 code=0x7ffc0000 [ 2190.407566][ T28] audit: type=1326 audit(1790581233.573:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28827 comm="syz.1.6331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc48e59e159 code=0x7ffc0000 [ 2190.979988][ T28] audit: type=1326 audit(1790581233.573:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28827 comm="syz.1.6331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48e59e159 code=0x7ffc0000 [ 2191.004297][ T28] audit: type=1326 audit(1790581233.583:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28827 comm="syz.1.6331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48e59e159 code=0x7ffc0000 [ 2191.028760][ C0] vkms_vblank_simulate: vblank timer overrun [ 2191.051900][ T28] audit: type=1326 audit(1790581233.583:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28827 comm="syz.1.6331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48e59e159 code=0x7ffc0000 [ 2191.077118][ T28] audit: type=1326 audit(1790581233.583:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28827 comm="syz.1.6331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48e59e159 code=0x7ffc0000 [ 2191.288039][T28840] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2191.297112][T28840] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2191.496134][T28849] input: syz1 as /devices/virtual/input/input106 [ 2191.709774][T28858] 9pnet_virtio: no channels available for device syz [ 2192.145055][T22719] usb 1-1: USB disconnect, device number 54 [ 2193.528619][T28886] input: syz1 as /devices/virtual/input/input107 [ 2193.632223][T28888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6349'. [ 2193.795781][T28888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6349'. [ 2193.859309][T28893] eCryptfs: maximum fs stacking depth exceeded [ 2193.894883][T28893] Reading sb failed; rc = [-22] [ 2195.344866][T28918] input: syz1 as /devices/virtual/input/input108 [ 2195.480930][T28927] 9pnet_virtio: no channels available for device syz [ 2195.951503][T21768] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2196.143625][T21768] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.161125][T21768] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 2196.174391][T21768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2196.185160][T21768] usb 4-1: Product: syz [ 2196.189490][T21768] usb 4-1: Manufacturer: syz [ 2196.229349][T21768] usb 4-1: selecting invalid altsetting 1 [ 2196.243977][T21768] dvb_ttusb_budget: ttusb_init_controller: error [ 2196.260862][T21768] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2196.359883][T21768] DVB: Unable to find symbol cx22700_attach() [ 2196.419688][T21768] DVB: Unable to find symbol tda10046_attach() [ 2196.428089][T21768] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2196.629576][T28955] input: syz1 as /devices/virtual/input/input109 [ 2197.850058][T28979] input: syz1 as /devices/virtual/input/input110 [ 2197.934154][T28981] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6382'. [ 2198.131859][T28991] syzkaller0: entered promiscuous mode [ 2198.137814][T28991] syzkaller0: entered allmulticast mode [ 2198.374007][T29000] input: syz1 as /devices/virtual/input/input111 [ 2198.732251][ T5824] usb 4-1: USB disconnect, device number 105 [ 2199.080728][T29031] input: syz1 as /devices/virtual/input/input112 [ 2199.282588][T29045] libceph: resolve '0' (ret=-3): failed [ 2199.526304][T29054] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2199.821797][T28975] Bluetooth: hci2: command 0x0406 tx timeout [ 2199.822361][T29062] input: syz1 as /devices/virtual/input/input113 [ 2199.991458][T22719] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2200.183397][T22719] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 2200.198013][T22719] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2200.210533][T22719] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2200.236078][T22719] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2200.261011][T22719] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2200.274109][T22719] usb 4-1: Product: syz [ 2200.278490][T22719] usb 4-1: Manufacturer: syz [ 2200.285429][T22719] usb 4-1: SerialNumber: syz [ 2200.302405][T22719] usb 4-1: config 0 descriptor?? [ 2200.321656][T22719] hub 4-1:0.0: bad descriptor, ignoring hub [ 2200.327682][T22719] hub: probe of 4-1:0.0 failed with error -5 [ 2200.348066][T22719] usb 4-1: selecting invalid altsetting 0 [ 2200.360469][T29078] [ 2200.362859][T29078] ====================================================== [ 2200.369878][T29078] WARNING: possible circular locking dependency detected [ 2200.376991][T29078] syzkaller #0 Not tainted [ 2200.381404][T29078] ------------------------------------------------------ [ 2200.388440][T29078] syz.2.6421/29078 is trying to acquire lock: [ 2200.394620][T29078] ffff88805a9480b8 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfc/0xe30 [ 2200.404355][T29078] [ 2200.404355][T29078] but task is already holding lock: [ 2200.411745][T29078] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 2200.420904][T29078] [ 2200.420904][T29078] which lock already depends on the new lock. [ 2200.420904][T29078] [ 2200.431313][T29078] [ 2200.431313][T29078] the existing dependency chain (in reverse order) is: [ 2200.440408][T29078] [ 2200.440408][T29078] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 2200.447823][T29078] __mutex_lock+0x135/0xc80 [ 2200.452850][T29078] rfcomm_security_cfm+0x41/0x550 [ 2200.458393][T29078] hci_encrypt_cfm+0x363/0x4d0 [ 2200.463751][T29078] hci_encrypt_change_evt+0x5c3/0xe30 [ 2200.469665][T29078] hci_event_packet+0x807/0x1280 [ 2200.475117][T29078] hci_rx_work+0x43a/0xd60 [ 2200.480108][T29078] process_scheduled_works+0xa60/0x1600 [ 2200.486178][T29078] worker_thread+0xa5e/0xfe0 [ 2200.491290][T29078] kthread+0x2fa/0x390 [ 2200.495982][T29078] ret_from_fork+0x48/0x80 [ 2200.500924][T29078] ret_from_fork_asm+0x11/0x20 [ 2200.506234][T29078] [ 2200.506234][T29078] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 2200.514050][T29078] __mutex_lock+0x135/0xc80 [ 2200.519082][T29078] hci_remote_features_evt+0x535/0x900 [ 2200.525066][T29078] hci_event_packet+0x807/0x1280 [ 2200.530527][T29078] hci_rx_work+0x43a/0xd60 [ 2200.535465][T29078] process_scheduled_works+0xa60/0x1600 [ 2200.541619][T29078] worker_thread+0xa5e/0xfe0 [ 2200.546736][T29078] kthread+0x2fa/0x390 [ 2200.551323][T29078] ret_from_fork+0x48/0x80 [ 2200.556266][T29078] ret_from_fork_asm+0x11/0x20 [ 2200.561563][T29078] [ 2200.561563][T29078] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 2200.568952][T29078] __lock_acquire+0x37ef/0x7d80 [ 2200.574332][T29078] lock_acquire+0x19e/0x420 [ 2200.579357][T29078] __mutex_lock+0x135/0xc80 [ 2200.584394][T29078] l2cap_chan_connect+0xfc/0xe30 [ 2200.589943][T29078] l2cap_sock_connect+0x586/0x760 [ 2200.595512][T29078] kernel_connect+0x142/0x1c0 [ 2200.600719][T29078] rfcomm_dlc_open+0xa1f/0xec0 [ 2200.606005][T29078] rfcomm_sock_connect+0x2ed/0x600 [ 2200.611708][T29078] __sys_connect+0x3da/0x470 [ 2200.616868][T29078] __x64_sys_connect+0x7a/0x90 [ 2200.622245][T29078] do_syscall_64+0x55/0xb0 [ 2200.627188][T29078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2200.633607][T29078] [ 2200.633607][T29078] other info that might help us debug this: [ 2200.633607][T29078] [ 2200.643945][T29078] Chain exists of: [ 2200.643945][T29078] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 2200.643945][T29078] [ 2200.656464][T29078] Possible unsafe locking scenario: [ 2200.656464][T29078] [ 2200.664000][T29078] CPU0 CPU1 [ 2200.669361][T29078] ---- ---- [ 2200.674723][T29078] lock(rfcomm_mutex); [ 2200.678879][T29078] lock(hci_cb_list_lock); [ 2200.685896][T29078] lock(rfcomm_mutex); [ 2200.692915][T29078] lock(&hdev->lock); [ 2200.696976][T29078] [ 2200.696976][T29078] *** DEADLOCK *** [ 2200.696976][T29078] [ 2200.705108][T29078] 1 lock held by syz.2.6421/29078: [ 2200.710223][T29078] #0: ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 2200.719541][T29078] [ 2200.719541][T29078] stack backtrace: [ 2200.725517][T29078] CPU: 1 PID: 29078 Comm: syz.2.6421 Not tainted syzkaller #0 [ 2200.732968][T29078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2200.743079][T29078] Call Trace: [ 2200.746359][T29078] [ 2200.749337][T29078] dump_stack_lvl+0x18c/0x250 [ 2200.754021][T29078] ? load_image+0x420/0x420 [ 2200.758526][T29078] ? show_regs_print_info+0x20/0x20 [ 2200.763731][T29078] ? print_circular_bug+0x12b/0x1a0 [ 2200.768931][T29078] check_noncircular+0x2fc/0x400 [ 2200.773965][T29078] ? print_deadlock_bug+0x5d0/0x5d0 [ 2200.779248][T29078] ? lockdep_lock+0xf5/0x230 [ 2200.784277][T29078] ? _find_first_zero_bit+0xd6/0x100 [ 2200.789653][T29078] __lock_acquire+0x37ef/0x7d80 [ 2200.794536][T29078] ? is_bpf_text_address+0x28f/0x2a0 [ 2200.799832][T29078] ? verify_lock_unused+0x140/0x140 [ 2200.805136][T29078] ? __lock_acquire+0x1336/0x7d80 [ 2200.810346][T29078] ? verify_lock_unused+0x140/0x140 [ 2200.815555][T29078] lock_acquire+0x19e/0x420 [ 2200.820066][T29078] ? l2cap_chan_connect+0xfc/0xe30 [ 2200.825185][T29078] ? __might_sleep+0xe0/0xe0 [ 2200.829781][T29078] ? read_lock_is_recursive+0x20/0x20 [ 2200.835238][T29078] ? hci_get_route+0x3a5/0x4d0 [ 2200.840122][T29078] ? __lock_acquire+0x7d80/0x7d80 [ 2200.845153][T29078] __mutex_lock+0x135/0xc80 [ 2200.849656][T29078] ? l2cap_chan_connect+0xfc/0xe30 [ 2200.854769][T29078] ? do_raw_read_unlock+0x3d/0x80 [ 2200.859800][T29078] ? _raw_read_unlock+0x28/0x40 [ 2200.864761][T29078] ? hci_get_route+0x3a5/0x4d0 [ 2200.869560][T29078] ? l2cap_chan_connect+0xfc/0xe30 [ 2200.874703][T29078] ? mutex_lock_nested+0x20/0x20 [ 2200.879647][T29078] ? print_unlock_imbalance_bug+0x160/0x160 [ 2200.885632][T29078] ? mark_lock+0x94/0x320 [ 2200.890234][T29078] l2cap_chan_connect+0xfc/0xe30 [ 2200.895171][T29078] ? lock_chain_count+0x20/0x20 [ 2200.900069][T29078] ? l2cap_chan_le_send_credits+0x4e0/0x4e0 [ 2200.905968][T29078] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2200.911342][T29078] ? _local_bh_enable+0xa0/0xa0 [ 2200.916212][T29078] ? bacmp+0xe/0x30 [ 2200.920118][T29078] l2cap_sock_connect+0x586/0x760 [ 2200.925154][T29078] ? l2cap_sock_bind+0x940/0x940 [ 2200.930095][T29078] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2200.936075][T29078] ? __lock_acquire+0x7d80/0x7d80 [ 2200.941098][T29078] ? kernel_connect+0xf2/0x1c0 [ 2200.945867][T29078] kernel_connect+0x142/0x1c0 [ 2200.950545][T29078] ? kernel_accept+0x350/0x350 [ 2200.955317][T29078] ? rfcomm_dlc_open+0x9e3/0xec0 [ 2200.960322][T29078] rfcomm_dlc_open+0xa1f/0xec0 [ 2200.965087][T29078] ? rfcomm_sock_connect+0x2c6/0x600 [ 2200.970381][T29078] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2200.975752][T29078] ? rfcomm_dlc_free+0x50/0x50 [ 2200.980541][T29078] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2200.985914][T29078] ? _local_bh_enable+0xa0/0xa0 [ 2200.990846][T29078] ? do_raw_spin_unlock+0x121/0x230 [ 2200.996047][T29078] rfcomm_sock_connect+0x2ed/0x600 [ 2201.001183][T29078] __sys_connect+0x3da/0x470 [ 2201.005783][T29078] ? __sys_connect_file+0x170/0x170 [ 2201.010995][T29078] __x64_sys_connect+0x7a/0x90 [ 2201.015763][T29078] do_syscall_64+0x55/0xb0 [ 2201.020180][T29078] ? clear_bhb_loop+0x40/0x90 [ 2201.024889][T29078] ? clear_bhb_loop+0x40/0x90 [ 2201.029573][T29078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2201.035555][T29078] RIP: 0033:0x7f37d6b9e159 [ 2201.039998][T29078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2201.059629][T29078] RSP: 002b:00007f37d7ab9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2201.068069][T29078] RAX: ffffffffffffffda RBX: 00007f37d6e25fa0 RCX: 00007f37d6b9e159 [ 2201.076056][T29078] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 2201.084037][T29078] RBP: 00007f37d6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2201.092019][T29078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2201.100106][T29078] R13: 00007f37d6e26038 R14: 00007f37d6e25fa0 R15: 00007fffe2d93358 [ 2201.108183][T29078] [ 2201.551430][T29060] usb 4-1: reset high-speed USB device number 106 using dummy_hcd [ 2201.762909][T29060] usb 4-1: device firmware changed [ 2201.768462][ T5824] usb 4-1: USB disconnect, device number 106 [ 2201.931339][ T5824] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2202.113248][ T5824] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 2202.122104][ T5824] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2202.132267][ T5824] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2202.143560][ T5824] usb 4-1: string descriptor 0 read error: -22 [ 2202.149937][ T5824] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2202.159184][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2202.168660][ T5824] usb 4-1: config 0 descriptor?? [ 2202.176282][ T5824] hub 4-1:0.0: bad descriptor, ignoring hub [ 2202.182427][ T5824] hub: probe of 4-1:0.0 failed with error -5 [ 2202.189874][ T5824] usb 4-1: selecting invalid altsetting 0 [ 2202.501503][T28308] usb 4-1: USB disconnect, device number 107 [ 2203.181468][T28975] Bluetooth: hci3: command 0x0406 tx timeout