last executing test programs: 11.359386689s ago: executing program 1 (id=1031): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x7, 0x40, 0x10, 0xffff, 0x5, 0x2, 0xfffff800, 0x18001, 0x9, 0x81, 0x12804b33, 0x7, 0x4d22, 0x9, 0x5b7, 0xffffffc0, 0xd527, 0x6, 0xb, 0x4}}) syz_extract_tcp_res(0x0, 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r1 = syz_io_uring_setup(0x111, &(0x7f0000000440)={0x0, 0x39c4, 0x2, 0x400004, 0x34d}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000500)='n', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000006a51) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000fc0)=[@register_looper], 0x0, 0x0, 0x0}) 10.387181687s ago: executing program 1 (id=1036): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 7.342539279s ago: executing program 3 (id=1042): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) membarrier(0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.916980931s ago: executing program 3 (id=1047): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x7, 0x40, 0x10, 0xffff, 0x5, 0x2, 0xfffff800, 0x18001, 0x9, 0x81, 0x12804b33, 0x7, 0x4d22, 0x9, 0x5b7, 0xffffffc0, 0xd527, 0x6, 0xb, 0x4}}) syz_extract_tcp_res(0x0, 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r1 = syz_io_uring_setup(0x111, &(0x7f0000000440)={0x0, 0x39c4, 0x2, 0x400004, 0x34d}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000500)='n', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000006a51) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000fc0)=[@register_looper], 0x0, 0x0, 0x0}) 5.91598316s ago: executing program 1 (id=1048): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback, r0, 0x2f, 0x2008, 0x4}, 0x20) 5.387526577s ago: executing program 1 (id=1050): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x2400000001, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) 4.327274445s ago: executing program 3 (id=1051): socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x6, 0x10001, 0x3011, 0x0, 0x3, 0x7, 0xdd82d8c9e0dfa6dc, 0x1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 4.230128742s ago: executing program 1 (id=1052): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902120001000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x20, 0x13, 0x4, "68510fe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 4.137987695s ago: executing program 3 (id=1053): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.901762541s ago: executing program 0 (id=1056): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="10"], 0x20}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="05000000030000000000000000400000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}, 0x300}, 0x0) 3.839718107s ago: executing program 3 (id=1057): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.772929615s ago: executing program 2 (id=1059): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 3.582481905s ago: executing program 0 (id=1061): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xba, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2", 0xc5) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505f", 0x72, 0x10000485, 0x0, 0x0) 3.473323627s ago: executing program 2 (id=1062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x2400000001, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) 1.842592415s ago: executing program 4 (id=1063): socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x6, 0x10001, 0x3011, 0x0, 0x3, 0x7, 0xdd82d8c9e0dfa6dc, 0x1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.720059666s ago: executing program 0 (id=1064): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) 1.682540059s ago: executing program 3 (id=1065): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) 1.620250404s ago: executing program 0 (id=1066): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x0, 0x400, 0x0, 0x255}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x10002, 0x27e}, &(0x7f0000001240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x988a, 0x5420, 0x0, 0x10000003, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5240, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd15, 0x10, 0x1, 0x262}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0x1, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x200000, 0x0, {}, 0x0, r4, '\x00', {0x0, 0x5, 0x0, 0x0}}, 0x0) 1.567225399s ago: executing program 2 (id=1067): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000000000000000000f0400000009000000feffffff0b0000000008000002000000ff23000000005afde1c9cb21dea0cbe8b8bd5730c8b0dff1201c7ccbcbf9463f3c46af573bdaf9f0b5682391734b333b7c596ae9f68a8ddc06fddd707f95493558dc0614cf508b16733d1e9c3514439a369bb11e0ce0c7340082ad1c7093d9e4ec2f88b5f77408f95716f7e5"], 0x0, 0x3e}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1.513791667s ago: executing program 4 (id=1068): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.383001579s ago: executing program 2 (id=1069): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) eventfd2(0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xf603594}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[0x0]) io_pgetevents(r3, 0x2, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) shutdown(r2, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000afc000/0x3000)=nil, 0x3000}, 0x1000000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000706050000000000000000000100000205000100070000000900020073797a3100000000050001000700"], 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000000c0)) writev(r5, &(0x7f0000000100)=[{&(0x7f00000001c0)="1515daf6667a1fb84e4e91e2e85d1debef12fa821399c0b30d3f3c46de80230b46282e4fecf74f43abd846e7da49546d69b9a328aee3b71a97d42150393b97dd9847951245bbf9429fa11b904e7e97ba0963fb6ab672d597269ec4e7", 0x5c}, {&(0x7f0000000280)="fcaa4615", 0x4}], 0x14) 1.212107127s ago: executing program 4 (id=1070): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 798.806614ms ago: executing program 4 (id=1071): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c0012"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 622.077221ms ago: executing program 4 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 569.644804ms ago: executing program 1 (id=1073): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0xa6, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000000702c00fe8000000000000000000000000000bbfe8000000000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x800000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 343.930366ms ago: executing program 4 (id=1074): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xba, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2", 0xc5) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505f", 0x72, 0x10000485, 0x0, 0x0) 330.685742ms ago: executing program 0 (id=1075): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff0b, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 319.668284ms ago: executing program 2 (id=1076): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) 171.496417ms ago: executing program 0 (id=1077): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2eb, 0x282) syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000e10000000000000008004a00008c00000000001190787f0000010a010101071374e0000001ac1414aaffffffff000000000000004e2000649078020000000000000000000000fdcdae25a7a296872a27fe90e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0', 0x1) write(r1, &(0x7f00000001a0)='1', 0x1) mmap(&(0x7f0000af6000/0x2000)=nil, 0x2000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x801, {0x2, 0x0, 0x2}}, 0x18) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f00000001c0)={0x0, {0xfff, 0x5}}) 0s ago: executing program 2 (id=1078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r1, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): 7.739893][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.740029][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.782430][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 268.840332][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 269.161042][ T10] usb 4-1: device descriptor read/64, error -32 [ 269.402731][ T5697] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 269.425122][ T5697] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input20 [ 269.444569][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 269.448371][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 269.459448][ T5721] usb 1-1: config 0 descriptor?? [ 269.578562][ T5697] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:13> initialized [ 269.590325][ T10] usb 4-1: device descriptor read/64, error -32 [ 269.737214][ T10] usb usb4-port1: attempt power cycle [ 271.713234][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 271.750497][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 271.777760][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 271.869419][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 271.878333][ T10] usb 4-1: can't read configurations, error -61 [ 271.930889][ T7038] imon:vfd_write: invalid payload size [ 272.043306][ T7038] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 272.072173][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 272.082134][ T5721] usbhid 1-1:0.0: can't add hid device: -71 [ 272.088276][ T5721] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 272.104067][ T10] usb 4-1: device descriptor read/8, error -71 [ 272.118017][ T5697] usb 3-1: USB disconnect, device number 13 [ 272.189950][ T5721] usb 1-1: USB disconnect, device number 9 [ 272.221897][ T10] usb usb4-port1: unable to enumerate USB device [ 272.369957][ T7060] loop0: detected capacity change from 0 to 6 [ 272.902046][ T7067] netlink: 48 bytes leftover after parsing attributes in process `syz.2.421'. [ 276.059137][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 276.059203][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 276.071633][ T7082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.425'. [ 276.631861][ T2246] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.802681][ T1176] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.802833][ T1176] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.804155][ T1176] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.124399][ T5695] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 280.204710][ T7095] ./dev/sda1: Can't open blockdev [ 280.291300][ T5695] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 280.296914][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.297008][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.297116][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.459148][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 280.598181][ T5695] usb 1-1: config 0 descriptor?? [ 280.680231][ T7110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.432'. [ 281.673367][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 281.948835][ T5695] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 281.950619][ T5695] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 281.950718][ T5695] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 281.950786][ T5695] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 281.950814][ T5695] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 281.950841][ T5695] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 281.950869][ T5695] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 282.120072][ T5695] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 282.190381][ T5695] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 282.190492][ T5695] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 282.248683][ T5695] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -5 [ 282.297570][ T7122] udevd[7122]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 282.468012][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 283.051141][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 285.413271][ T5722] usb 1-1: USB disconnect, device number 10 [ 285.970328][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 286.129295][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'. [ 288.544474][ T6837] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 288.944547][ T6837] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 288.952691][ T6837] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 288.952751][ T6837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 288.952780][ T6837] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.952808][ T6837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 288.952836][ T6837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 289.042148][ T6837] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 289.051302][ T6837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 289.051336][ T6837] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.051367][ T6837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 289.051386][ T6837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 289.158839][ T6837] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 289.163519][ T6837] usb 5-1: can't read configurations, error -71 [ 289.923629][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 291.620417][ T6837] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 292.001143][ T6837] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.014640][ T6837] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.014672][ T6837] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 292.014694][ T6837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.014747][ T6837] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.100946][ T6837] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.109074][ T6837] usb 2-1: Product: syz [ 292.109090][ T6837] usb 2-1: Manufacturer: syz [ 292.173389][ T6837] cdc_wdm 2-1:1.0: skipping garbage [ 292.179368][ T6837] cdc_wdm 2-1:1.0: skipping garbage [ 292.179412][ T6837] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 292.591458][ T6837] usb 2-1: USB disconnect, device number 15 [ 295.735289][ T7225] fuse: Unknown parameter 'grou00000000000000000000' [ 295.901667][ T5697] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 296.060265][ T5697] usb 1-1: Using ep0 maxpacket: 8 [ 296.067583][ T5697] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 296.081674][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.204724][ T5697] pvrusb2: Hardware description: Terratec Grabster AV400 [ 296.204829][ T5697] pvrusb2: ********** [ 296.204837][ T5697] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 296.204851][ T5697] pvrusb2: Important functionality might not be entirely working. [ 296.204862][ T5697] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 296.204874][ T5697] pvrusb2: ********** [ 296.529344][ T2383] pvrusb2: Invalid write control endpoint [ 296.777884][ T7234] loop0: detected capacity change from 0 to 21 [ 296.787535][ T5697] usb 1-1: USB disconnect, device number 11 [ 297.140303][ T7236] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 297.182041][ T7236] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 297.182134][ T7236] loop0: [ 297.309768][ T2383] pvrusb2: Invalid write control endpoint [ 297.334259][ T2383] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 297.334276][ T2383] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 297.334285][ T2383] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 297.334297][ T2383] pvrusb2: Device being rendered inoperable [ 297.334339][ T2383] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 297.389475][ T2383] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 297.591311][ T2383] pvrusb2: Attached sub-driver cx25840 [ 297.591384][ T2383] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 297.591397][ T2383] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 302.116944][ T7258] fuse: Unknown parameter 'grou00000000000000000000' [ 302.817239][ T7267] loop0: detected capacity change from 0 to 21 [ 302.930316][ T5779] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 303.054310][ T7268] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 303.054398][ T7268] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 303.055315][ T7268] loop0: [ 303.100245][ T5779] usb 3-1: Using ep0 maxpacket: 8 [ 303.106355][ T5779] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 303.107566][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.222796][ T5779] pvrusb2: Hardware description: Terratec Grabster AV400 [ 303.231545][ T5779] pvrusb2: ********** [ 303.231559][ T5779] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 303.231572][ T5779] pvrusb2: Important functionality might not be entirely working. [ 303.231583][ T5779] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 303.231603][ T5779] pvrusb2: ********** [ 303.469042][ T2383] pvrusb2: Invalid write control endpoint [ 303.675468][ T5698] usb 3-1: USB disconnect, device number 14 [ 303.691898][ T2383] pvrusb2: Invalid write control endpoint [ 303.694414][ T2383] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 303.694428][ T2383] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 303.694437][ T2383] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 303.694447][ T2383] pvrusb2: Device being rendered inoperable [ 303.723745][ T2383] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 303.820349][ T5722] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 305.648723][ T2383] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 305.686342][ T2383] pvrusb2: Attached sub-driver cx25840 [ 305.688923][ T2383] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 305.688944][ T2383] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 305.713916][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 305.736588][ T5722] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 305.767147][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.976435][ T5722] pvrusb2: Hardware description: Terratec Grabster AV400 [ 305.982398][ T5722] pvrusb2: ********** [ 305.982445][ T5722] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 305.982489][ T5722] pvrusb2: Important functionality might not be entirely working. [ 305.982526][ T5722] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 305.982558][ T5722] pvrusb2: ********** [ 306.080621][ T2383] pvrusb2: Invalid write control endpoint [ 306.216335][ T2383] pvrusb2: Invalid write control endpoint [ 306.226456][ T2383] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 306.226474][ T2383] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 306.226483][ T2383] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 306.226495][ T2383] pvrusb2: Device being rendered inoperable [ 306.271208][ T2383] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 306.273367][ T2383] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 306.293675][ T2383] pvrusb2: Attached sub-driver cx25840 [ 306.299370][ T2383] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 306.318752][ T2383] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 306.399729][ T7273] pvrusb2: Attempted to execute control transfer when device not ok [ 306.528547][ T5779] usb 5-1: USB disconnect, device number 14 [ 306.937079][ T5722] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 307.131933][ T5722] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.141118][ T36] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 307.186861][ T7291] udevd[7291]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 307.292273][ T36] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 307.314400][ T36] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 307.328813][ T36] usb 3-1: Product: syz [ 307.328835][ T36] usb 3-1: SerialNumber: syz [ 307.411648][ T36] usb 3-1: config 0 descriptor?? [ 307.727046][ T36] usb 3-1: USB disconnect, device number 15 [ 307.821356][ T5779] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 307.980448][ T5779] usb 5-1: Using ep0 maxpacket: 8 [ 307.987014][ T5779] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 308.005607][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.009597][ T5779] usb 5-1: Product: syz [ 308.009612][ T5779] usb 5-1: Manufacturer: syz [ 308.009623][ T5779] usb 5-1: SerialNumber: syz [ 308.058746][ T5779] usb 5-1: config 0 descriptor?? [ 308.094241][ T5779] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 308.097653][ T5779] pctv452e: pctv452e_power_ctrl: 1 [ 308.097653][ T5779] [ 308.097866][ T5779] usb 5-1: selecting invalid altsetting 3 [ 308.097883][ T5779] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 308.097883][ T5779] [ 308.097900][ T5779] dvb-usb: bulk message failed: -22 (5/0) [ 308.188508][ T5779] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.200787][ T5779] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 308.210253][ T5779] usb 5-1: media controller created [ 308.210812][ T5779] dvb-usb: bulk message failed: -22 (8/0) [ 308.210832][ T5779] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 308.210887][ T5779] dvb-usb: MAC address reading failed. [ 308.310379][ T7295] dvb-usb: bulk message failed: -22 (7/0) [ 308.332706][ T7295] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 308.348392][ T5779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.413733][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 308.556266][ T5779] DVB: Unable to find symbol stb0899_attach() [ 308.559217][ T5779] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 308.582325][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 308.588312][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 308.606401][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.683723][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 308.684091][ T10] pvrusb2: ********** [ 308.684115][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 308.684147][ T10] pvrusb2: Important functionality might not be entirely working. [ 308.684176][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 308.684208][ T10] pvrusb2: ********** [ 308.872015][ T2383] pvrusb2: Invalid write control endpoint [ 309.154327][ T7300] dvb-usb: bulk message failed: -22 (38/0) [ 309.154438][ T7300] pctv452e: I2C error -22; AA 03 0A 1F 00 -> aa 03 31 22 0a 1f 00 [ 309.230271][ T5779] rc_core: IR keymap rc-tt-1500 not found [ 309.237060][ T5779] Registered IR keymap rc-empty [ 309.287365][ T10] usb 1-1: USB disconnect, device number 12 [ 309.287394][ T5779] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 310.694311][ T5779] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input22 [ 310.718263][ T5779] dvb-usb: schedule remote query interval to 100 msecs. [ 310.726032][ T5779] pctv452e: pctv452e_power_ctrl: 0 [ 310.726032][ T5779] [ 310.726050][ T5779] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 310.830366][ T5779] dvb-usb: bulk message failed: -22 (4/0) [ 310.860889][ T5779] dvb-usb: error -22 while querying for an remote control event. [ 310.970349][ T5779] dvb-usb: bulk message failed: -22 (4/0) [ 310.980034][ T5779] dvb-usb: error -22 while querying for an remote control event. [ 311.001512][ T5722] usb 5-1: USB disconnect, device number 15 [ 313.597132][ T2383] pvrusb2: Invalid write control endpoint [ 313.601496][ T2383] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 313.601529][ T2383] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 313.601558][ T2383] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 313.601598][ T2383] pvrusb2: Device being rendered inoperable [ 313.601665][ T2383] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 313.603149][ T2383] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 313.639893][ T2383] pvrusb2: Attached sub-driver cx25840 [ 313.639942][ T2383] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 313.639972][ T2383] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 314.247583][ T5722] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 314.782233][ T7327] kAFS: No cell specified [ 317.349154][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.359772][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.837317][ T7334] FAULT_INJECTION: forcing a failure. [ 317.837317][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 317.837910][ T7334] CPU: 0 UID: 0 PID: 7334 Comm: syz.3.509 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 317.837987][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.838040][ T7334] Call Trace: [ 317.838062][ T7334] [ 317.838086][ T7334] dump_stack_lvl+0xe8/0x150 [ 317.838189][ T7334] should_fail_ex+0x46b/0x600 [ 317.838259][ T7334] should_failslab+0xa8/0x100 [ 317.838359][ T7334] __kmalloc_cache_noprof+0xa1/0x680 [ 317.838435][ T7334] ? sget_fc+0x74a/0x1a60 [ 317.838485][ T7334] ? sget_fc+0x74a/0x1a60 [ 317.838558][ T7334] sget_fc+0x74a/0x1a60 [ 317.838642][ T7334] ? __pfx_set_anon_super_fc+0x10/0x10 [ 317.838715][ T7334] ? __pfx_sget_fc+0x10/0x10 [ 317.838778][ T7334] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 317.838843][ T7334] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 317.838922][ T7334] ? __pfx_mqueue_fill_super+0x10/0x10 [ 317.838959][ T7334] get_tree_nodev+0x2a/0x150 [ 317.839045][ T7334] vfs_get_tree+0x92/0x2a0 [ 317.839133][ T7334] fc_mount_longterm+0x1c/0x100 [ 317.839245][ T7334] mq_init_ns+0x508/0x770 [ 317.839319][ T7334] copy_ipcs+0x45c/0x6c0 [ 317.839402][ T7334] create_new_namespaces+0x210/0x6b0 [ 317.839487][ T7334] ? security_capable+0x7e/0x2c0 [ 317.839581][ T7334] unshare_nsproxy_namespaces+0x149/0x190 [ 317.839665][ T7334] ksys_unshare+0x5a7/0x950 [ 317.839777][ T7334] ? __pfx_ksys_unshare+0x10/0x10 [ 317.839861][ T7334] ? rcu_is_watching+0x16/0xb0 [ 317.839982][ T7334] __x64_sys_unshare+0x38/0x50 [ 317.840083][ T7334] do_syscall_64+0x166/0x520 [ 317.840139][ T7334] ? trace_irq_disable+0x3b/0x140 [ 317.840168][ T7334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.840192][ T7334] ? clear_bhb_loop+0x70/0xc0 [ 317.840218][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.840242][ T7334] RIP: 0033:0x7f7a3267e159 [ 317.840264][ T7334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.840282][ T7334] RSP: 002b:00007f7a308d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 317.840343][ T7334] RAX: ffffffffffffffda RBX: 00007f7a32905fa0 RCX: 00007f7a3267e159 [ 317.840416][ T7334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 317.840431][ T7334] RBP: 00007f7a32715024 R08: 0000000000000000 R09: 0000000000000000 [ 317.840479][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.840494][ T7334] R13: 00007f7a32906038 R14: 00007f7a32905fa0 R15: 00007ffea6df2098 [ 317.840582][ T7334] [ 317.916528][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 318.740332][ T5721] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 318.894122][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 318.898288][ T5721] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 318.912578][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.113270][ T5721] pvrusb2: Hardware description: Terratec Grabster AV400 [ 319.113346][ T5721] pvrusb2: ********** [ 319.113356][ T5721] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 319.113368][ T5721] pvrusb2: Important functionality might not be entirely working. [ 319.113378][ T5721] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 319.113390][ T5721] pvrusb2: ********** [ 319.199441][ T2383] pvrusb2: Invalid write control endpoint [ 319.247695][ T5721] usb 4-1: USB disconnect, device number 17 [ 319.514972][ T2383] pvrusb2: Invalid write control endpoint [ 319.517967][ T2383] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 319.518003][ T2383] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 319.518033][ T2383] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 319.518057][ T2383] pvrusb2: Device being rendered inoperable [ 319.518172][ T2383] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 319.518385][ T2383] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 319.530469][ T2383] pvrusb2: Attached sub-driver cx25840 [ 319.530510][ T2383] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 319.530541][ T2383] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 319.650540][ T36] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 319.811605][ T36] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.931836][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.941906][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.001887][ T36] usb 3-1: config 0 descriptor?? [ 320.071110][ T7359] syz.3.519 uses obsolete (PF_INET,SOCK_PACKET) [ 320.241903][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 320.288958][ T7348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.309828][ T7348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.325946][ T36] usbhid 3-1:0.0: can't add hid device: -71 [ 320.330854][ T36] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 320.366442][ T36] usb 3-1: USB disconnect, device number 16 [ 320.880285][ T36] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 321.032700][ T36] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 321.043305][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.054355][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.080949][ T36] usb 3-1: config 0 descriptor?? [ 321.921974][ T36] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 321.936907][ T36] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 322.153800][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 322.180358][ T5721] usb 3-1: USB disconnect, device number 17 [ 322.180486][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 322.276690][ T6011] udevd[6011]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 323.000283][ T5698] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 323.170352][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 323.177059][ T5698] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 323.179141][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.202596][ T5722] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 323.232375][ T5698] pvrusb2: Hardware description: Terratec Grabster AV400 [ 323.234041][ T5698] pvrusb2: ********** [ 323.234053][ T5698] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 323.234066][ T5698] pvrusb2: Important functionality might not be entirely working. [ 323.234077][ T5698] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 323.234089][ T5698] pvrusb2: ********** [ 323.365807][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 323.369518][ T5722] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 323.379745][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.379780][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.379862][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.419515][ T5722] usb 3-1: config 0 descriptor?? [ 323.475142][ T2383] pvrusb2: Invalid write control endpoint [ 323.522377][ T5698] usb 5-1: USB disconnect, device number 16 [ 323.705886][ T2383] pvrusb2: Invalid write control endpoint [ 323.710255][ T2383] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 323.710269][ T2383] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 323.710277][ T2383] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 323.710286][ T2383] pvrusb2: Device being rendered inoperable [ 323.710324][ T2383] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 323.710406][ T2383] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 323.784648][ T2383] pvrusb2: Attached sub-driver cx25840 [ 323.784721][ T2383] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 323.784872][ T2383] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 323.970368][ T5722] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 323.970463][ T5722] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 324.069036][ T5722] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 324.272668][ T5722] ft260 0003:0403:6030.000A: failed to retrieve system status [ 324.276287][ T5722] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -5 [ 324.980352][ T5721] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 325.140416][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 325.141624][ T5721] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 325.159666][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.159757][ T5721] usb 5-1: Product: syz [ 325.159800][ T5721] usb 5-1: Manufacturer: syz [ 325.159873][ T5721] usb 5-1: SerialNumber: syz [ 325.232095][ T5721] usb 5-1: config 0 descriptor?? [ 325.244822][ T5721] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 325.246574][ T5721] pctv452e: pctv452e_power_ctrl: 1 [ 325.246574][ T5721] [ 325.246704][ T5721] usb 5-1: selecting invalid altsetting 3 [ 325.246747][ T5721] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 325.246747][ T5721] [ 325.246789][ T5721] dvb-usb: bulk message failed: -22 (5/0) [ 325.260249][ T5698] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 325.339924][ T5721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 325.344408][ T5721] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 325.344611][ T5721] usb 5-1: media controller created [ 325.344755][ T5721] dvb-usb: bulk message failed: -22 (8/0) [ 325.344797][ T5721] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 325.344898][ T5721] dvb-usb: MAC address reading failed. [ 325.424714][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.456446][ T7424] dvb-usb: bulk message failed: -22 (7/0) [ 325.456525][ T7424] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 325.463262][ T5698] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 325.485646][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.497782][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.516540][ T5698] usb 1-1: config 0 descriptor?? [ 325.715376][ T5721] DVB: Unable to find symbol stb0899_attach() [ 325.715393][ T5721] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 325.755166][ T7428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.781906][ T7428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.825088][ T5698] usbhid 1-1:0.0: can't add hid device: -71 [ 325.832591][ T5698] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 325.858510][ T7445] dvb-usb: bulk message failed: -22 (7/0) [ 325.864643][ T7445] pctv452e: I2C error -22; AA 03 00 00 00 -> aa 03 31 03 00 00 00 [ 325.867764][ T5698] usb 1-1: USB disconnect, device number 13 [ 325.940365][ T5721] rc_core: IR keymap rc-tt-1500 not found [ 325.940431][ T5721] Registered IR keymap rc-empty [ 325.988334][ T5721] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 325.999678][ T5721] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input24 [ 326.026531][ T5721] dvb-usb: schedule remote query interval to 100 msecs. [ 326.026611][ T5721] pctv452e: pctv452e_power_ctrl: 0 [ 326.026611][ T5721] [ 326.026625][ T5721] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 326.130348][ T5721] dvb-usb: bulk message failed: -22 (4/0) [ 326.130429][ T5721] dvb-usb: error -22 while querying for an remote control event. [ 326.240345][ T5721] dvb-usb: bulk message failed: -22 (4/0) [ 326.240440][ T5721] dvb-usb: error -22 while querying for an remote control event. [ 326.350237][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 326.350328][ T5722] dvb-usb: error -22 while querying for an remote control event. [ 326.380264][ T5698] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 326.470380][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 326.477099][ T5722] dvb-usb: error -22 while querying for an remote control event. [ 326.531325][ T5698] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 326.541750][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.541804][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.580776][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 326.580875][ T5722] dvb-usb: error -22 while querying for an remote control event. [ 326.594608][ T5698] usb 1-1: config 0 descriptor?? [ 326.690354][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 326.690448][ T5722] dvb-usb: error -22 while querying for an remote control event. [ 326.810302][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 326.810417][ T5722] dvb-usb: error -22 while querying for an remote control event. [ 326.920234][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 326.920376][ T5722] dvb-usb: error -22 while querying for an remote control event. [ 327.000633][ T5722] usb 3-1: USB disconnect, device number 18 [ 327.045572][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 327.045669][ T10] dvb-usb: error -22 while querying for an remote control event. [ 327.150269][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 327.150407][ T10] dvb-usb: error -22 while querying for an remote control event. [ 327.260280][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 327.260365][ T5722] dvb-usb: error -22 while querying for an remote control event. [ 327.380393][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 327.380495][ T5722] dvb-usb: error -22 while querying for an remote control event. [ 327.421319][ T5698] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 327.438245][ T5698] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 327.476383][ T5722] usb 5-1: USB disconnect, device number 17 [ 327.743718][ T10] usb 1-1: USB disconnect, device number 14 [ 327.743858][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 327.975862][ T5722] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 331.661119][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 331.880520][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 331.883312][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 331.912125][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.912221][ T10] usb 1-1: Product: syz [ 331.912239][ T10] usb 1-1: Manufacturer: syz [ 331.912255][ T10] usb 1-1: SerialNumber: syz [ 331.945453][ T10] usb 1-1: config 0 descriptor?? [ 331.961913][ T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 331.963914][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 331.963914][ T10] [ 331.967400][ T10] usb 1-1: selecting invalid altsetting 3 [ 331.967452][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 331.967452][ T10] [ 331.967506][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 331.980270][ T5722] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 332.078961][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.091760][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 332.091824][ T10] usb 1-1: media controller created [ 332.091875][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 332.091891][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 332.091946][ T10] dvb-usb: MAC address reading failed. [ 332.140290][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 332.143225][ T5722] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 332.166426][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.166515][ T5722] usb 2-1: Product: syz [ 332.166533][ T5722] usb 2-1: Manufacturer: syz [ 332.166550][ T5722] usb 2-1: SerialNumber: syz [ 332.193469][ T7487] dvb-usb: bulk message failed: -22 (7/0) [ 332.201907][ T7487] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 332.228673][ T5722] usb 2-1: config 0 descriptor?? [ 332.270860][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.283528][ T5722] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 332.294382][ T5722] pctv452e: pctv452e_power_ctrl: 1 [ 332.294382][ T5722] [ 332.294438][ T5722] usb 2-1: selecting invalid altsetting 3 [ 332.294455][ T5722] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 332.294455][ T5722] [ 332.294481][ T5722] dvb-usb: bulk message failed: -22 (5/0) [ 332.435848][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.477773][ T7494] dvb-usb: bulk message failed: -22 (7/0) [ 332.484764][ T7494] pctv452e: I2C error -22; AA 03 00 00 00 -> aa 03 31 03 00 00 00 [ 332.510879][ T5722] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 332.511021][ T5722] usb 2-1: media controller created [ 332.511200][ T5722] dvb-usb: bulk message failed: -22 (8/0) [ 332.511242][ T5722] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 332.511385][ T5722] dvb-usb: MAC address reading failed. [ 332.749707][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.861778][ T10] DVB: Unable to find symbol stb0899_attach() [ 332.861853][ T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 333.081488][ T5722] DVB: Unable to find symbol stb0899_attach() [ 333.081579][ T5722] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 333.190211][ T10] rc_core: IR keymap rc-tt-1500 not found [ 333.190281][ T10] Registered IR keymap rc-empty [ 333.205613][ T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 333.271571][ T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input26 [ 333.293417][ T5722] rc_core: IR keymap rc-tt-1500 not found [ 333.293500][ T5722] Registered IR keymap rc-empty [ 333.336144][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 333.338779][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 333.338779][ T10] [ 333.338831][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 333.397674][ T5722] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1 [ 333.419901][ T5722] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1/input27 [ 333.446637][ T5722] dvb-usb: schedule remote query interval to 100 msecs. [ 333.452182][ T5722] pctv452e: pctv452e_power_ctrl: 0 [ 333.452182][ T5722] [ 333.457615][ T5722] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 333.488405][ T5317] dvb-usb: bulk message failed: -22 (4/0) [ 333.488497][ T5317] dvb-usb: error -22 while querying for an remote control event. [ 333.495384][ T10] usb 1-1: USB disconnect, device number 15 [ 333.652296][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 333.652397][ T5722] dvb-usb: error -22 while querying for an remote control event. [ 333.764071][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 333.764166][ T5722] dvb-usb: error -22 while querying for an remote control event. [ 333.824444][ T5722] usb 2-1: USB disconnect, device number 16 [ 333.873515][ T5317] dvb-usb: bulk message failed: -22 (4/0) [ 333.873599][ T5317] dvb-usb: error -22 while querying for an remote control event. [ 334.352054][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 334.862595][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 334.931629][ T5722] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 337.815394][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 337.973903][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 337.979925][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 338.005933][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.014191][ T10] usb 3-1: Product: syz [ 338.014215][ T10] usb 3-1: Manufacturer: syz [ 338.014232][ T10] usb 3-1: SerialNumber: syz [ 338.097604][ T10] usb 3-1: config 0 descriptor?? [ 338.124879][ T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 338.124977][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 338.124977][ T10] [ 338.125026][ T10] usb 3-1: selecting invalid altsetting 3 [ 338.125043][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 338.125043][ T10] [ 338.125062][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 338.214687][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.231508][ T5317] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 338.239942][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 338.248691][ T10] usb 3-1: media controller created [ 338.248750][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 338.248767][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 338.248823][ T10] dvb-usb: MAC address reading failed. [ 338.316079][ T7537] dvb-usb: bulk message failed: -22 (7/0) [ 338.317780][ T7537] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 338.334265][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.421494][ T5317] usb 1-1: Using ep0 maxpacket: 32 [ 338.422421][ T5317] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 338.423972][ T5317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.424005][ T5317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.424045][ T5317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.482570][ T5317] usb 1-1: config 0 descriptor?? [ 338.809176][ T10] DVB: Unable to find symbol stb0899_attach() [ 338.815497][ T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 338.921961][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 338.929381][ T5317] usbhid 1-1:0.0: can't add hid device: -32 [ 338.935539][ T5317] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 338.975010][ T5317] usb 1-1: USB disconnect, device number 16 [ 339.010822][ T10] rc_core: IR keymap rc-tt-1500 not found [ 339.013906][ T10] Registered IR keymap rc-empty [ 339.025077][ T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 339.076262][ T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input28 [ 339.288487][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 339.296304][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 339.296304][ T10] [ 339.296326][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 339.346191][ T10] usb 3-1: USB disconnect, device number 19 [ 339.666806][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 339.666886][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 340.244431][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 340.367001][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 342.790911][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 348.988625][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 353.009880][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.608'. [ 355.314545][ T7656] fuse: Bad value for 'user_id' [ 355.319705][ T7656] fuse: Bad value for 'user_id' [ 358.908059][ T7664] smpboot: CPU 1 is now offline [ 359.271262][ T5722] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 359.420705][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 359.423897][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 359.425906][ T5722] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 359.444111][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.444132][ T5722] usb 4-1: Product: syz [ 359.444144][ T5722] usb 4-1: Manufacturer: syz [ 359.444155][ T5722] usb 4-1: SerialNumber: syz [ 359.492207][ T5722] usb 4-1: config 0 descriptor?? [ 359.528860][ T5722] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 359.528898][ T5722] pctv452e: pctv452e_power_ctrl: 1 [ 359.528898][ T5722] [ 359.528940][ T5722] usb 4-1: selecting invalid altsetting 3 [ 359.528951][ T5722] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 359.528951][ T5722] [ 359.528989][ T5722] dvb-usb: bulk message failed: -22 (5/0) [ 359.552481][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 359.560436][ T5722] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 359.560552][ T5722] usb 4-1: media controller created [ 359.560615][ T5722] dvb-usb: bulk message failed: -22 (8/0) [ 359.560627][ T5722] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 359.560693][ T5722] dvb-usb: MAC address reading failed. [ 359.634591][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.744765][ T7672] dvb-usb: bulk message failed: -22 (7/0) [ 359.744785][ T7672] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 360.087768][ T5722] DVB: Unable to find symbol stb0899_attach() [ 360.087782][ T5722] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 360.360227][ T5722] rc_core: IR keymap rc-tt-1500 not found [ 360.360321][ T5722] Registered IR keymap rc-empty [ 360.451979][ T5722] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 361.486905][ T5722] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input29 [ 361.503862][ T5722] dvb-usb: schedule remote query interval to 100 msecs. [ 361.503894][ T5722] pctv452e: pctv452e_power_ctrl: 0 [ 361.503894][ T5722] [ 361.503903][ T5722] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 361.523110][ T5722] usb 4-1: USB disconnect, device number 18 [ 362.558874][ T5722] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 366.843653][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 366.978976][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 373.545293][ T7737] fuse: Bad value for 'fd' [ 373.673245][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 373.771913][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.872542][ T7741] fuse: Unknown parameter 'user_i00000000000000000000' [ 374.525086][ T7751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.622166][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 374.775471][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 374.778821][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 374.780037][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.780059][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.780200][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.780233][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.809151][ T9] usb 4-1: config 0 descriptor?? [ 375.367375][ T9] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 375.451229][ T9] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 375.532450][ T9] usb 4-1: USB disconnect, device number 19 [ 376.139506][ T7759] udevd[7759]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 376.524988][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 377.492670][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.492728][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.631171][ T7776] fuse: Bad value for 'fd' [ 383.107632][ T7808] fuse: Bad value for 'fd' [ 383.190265][ T9] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 383.286806][ T7811] loop0: detected capacity change from 0 to 21 [ 383.320193][ T9] usb 2-1: device descriptor read/64, error -71 [ 383.407745][ T7811] loop0: unable to read partition table [ 383.407905][ T7811] loop0: partition table beyond EOD, truncated [ 383.408962][ T7811] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 383.561143][ T9] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 383.620246][ T5317] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 383.730430][ T9] usb 2-1: device descriptor read/64, error -71 [ 383.770796][ T5317] usb 4-1: Using ep0 maxpacket: 32 [ 383.771616][ T5317] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 383.775250][ T5317] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 383.775275][ T5317] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.775295][ T5317] usb 4-1: config 0 interface 0 has no altsetting 0 [ 383.775320][ T5317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.800519][ T5317] usb 4-1: config 0 descriptor?? [ 383.841173][ T9] usb usb2-port1: attempt power cycle [ 383.939730][ T7823] FAULT_INJECTION: forcing a failure. [ 383.939730][ T7823] name failslab, interval 1, probability 0, space 0, times 0 [ 383.939821][ T7823] CPU: 0 UID: 0 PID: 7823 Comm: syz.0.676 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 383.939841][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.939855][ T7823] Call Trace: [ 383.939861][ T7823] [ 383.939869][ T7823] dump_stack_lvl+0xe8/0x150 [ 383.940025][ T7823] should_fail_ex+0x46b/0x600 [ 383.940073][ T7823] should_failslab+0xa8/0x100 [ 383.940116][ T7823] __kmalloc_cache_noprof+0xa1/0x680 [ 383.940145][ T7823] ? copy_ipcs+0x1f9/0x6c0 [ 383.940180][ T7823] ? copy_ipcs+0x1f9/0x6c0 [ 383.940210][ T7823] copy_ipcs+0x1f9/0x6c0 [ 383.940233][ T7823] create_new_namespaces+0x210/0x6b0 [ 383.940275][ T7823] ? security_capable+0x7e/0x2c0 [ 383.940313][ T7823] unshare_nsproxy_namespaces+0x149/0x190 [ 383.940339][ T7823] ksys_unshare+0x5a7/0x950 [ 383.940368][ T7823] ? __pfx_ksys_unshare+0x10/0x10 [ 383.940393][ T7823] ? rcu_is_watching+0x16/0xb0 [ 383.940432][ T7823] __x64_sys_unshare+0x38/0x50 [ 383.940458][ T7823] do_syscall_64+0x166/0x520 [ 383.940555][ T7823] ? trace_irq_disable+0x3b/0x140 [ 383.940587][ T7823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.940615][ T7823] ? clear_bhb_loop+0x70/0xc0 [ 383.940636][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.940656][ T7823] RIP: 0033:0x7f14cf0be159 [ 383.940672][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.940686][ T7823] RSP: 002b:00007f14cd316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 383.940704][ T7823] RAX: ffffffffffffffda RBX: 00007f14cf345fa0 RCX: 00007f14cf0be159 [ 383.940716][ T7823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 383.940727][ T7823] RBP: 00007f14cf155024 R08: 0000000000000000 R09: 0000000000000000 [ 383.940737][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.940747][ T7823] R13: 00007f14cf346038 R14: 00007f14cf345fa0 R15: 00007ffdf7496a08 [ 383.940772][ T7823] [ 384.222267][ T9] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 384.249835][ T9] usb 2-1: device descriptor read/8, error -71 [ 384.280312][ T5317] usbhid 4-1:0.0: can't add hid device: -71 [ 384.280405][ T5317] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 384.296755][ T5317] usb 4-1: USB disconnect, device number 20 [ 384.490236][ T9] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 384.511768][ T9] usb 2-1: device descriptor read/8, error -71 [ 384.557460][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 384.620621][ T9] usb usb2-port1: unable to enumerate USB device [ 384.757561][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 384.792964][ T7840] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 384.971064][ T7842] fuse: Bad value for 'fd' [ 385.270369][ T7847] loop0: detected capacity change from 0 to 21 [ 385.405003][ T7847] loop0: unable to read partition table [ 385.405157][ T7847] loop0: partition table beyond EOD, truncated [ 385.405185][ T7847] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 389.766750][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 393.666012][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 396.027758][ T7893] loop0: detected capacity change from 0 to 21 [ 396.174120][ T7893] loop0: unable to read partition table [ 396.174274][ T7893] loop0: partition table beyond EOD, truncated [ 396.174303][ T7893] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 396.773429][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 396.916859][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'. [ 399.480235][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 399.632023][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 399.635556][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 399.635583][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 399.635660][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 399.635682][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 399.651118][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.651140][ T9] usb 2-1: Product: syz [ 399.651151][ T9] usb 2-1: Manufacturer: syz [ 399.651163][ T9] usb 2-1: SerialNumber: syz [ 399.675535][ T9] usb 2-1: config 0 descriptor?? [ 399.977867][ T9] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 400.121102][ T7916] fuse: Bad value for 'fd' [ 401.170452][ T59] Bluetooth: hci5: command 0xfc11 tx timeout [ 401.170600][ T4900] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 401.185358][ T5604] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 401.319424][ T5317] usb 2-1: USB disconnect, device number 21 [ 401.347338][ T5604] usb 1-1: Using ep0 maxpacket: 32 [ 401.356245][ T5604] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 401.372771][ T5604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.372799][ T5604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.372827][ T5604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.481054][ T5604] usb 1-1: config 0 descriptor?? [ 401.948259][ T7933] loop0: detected capacity change from 0 to 21 [ 402.008687][ T5604] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 402.008716][ T5604] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 402.162018][ T7933] loop0: [ 402.179818][ T5604] ft260 0003:0403:6030.000C: failed to retrieve chip version [ 402.180244][ T5604] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -5 [ 402.436456][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'. [ 402.823878][ T7944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.721'. [ 403.160039][ T5604] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 403.314737][ T5604] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.319197][ T5604] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.319222][ T5604] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 403.319237][ T5604] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 403.319273][ T5604] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.327551][ T5604] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.327576][ T5604] usb 5-1: Product: syz [ 403.327587][ T5604] usb 5-1: Manufacturer: syz [ 403.405458][ T5604] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 403.639516][ T7953] ERROR: Out of memory at tomoyo_memory_ok. [ 403.697823][ T9] usb 5-1: USB disconnect, device number 19 [ 404.071261][ T9] usb 1-1: USB disconnect, device number 17 [ 404.769831][ T7980] netlink: 'syz.4.732': attribute type 3 has an invalid length. [ 404.838623][ T7980] netlink: 'syz.4.732': attribute type 3 has an invalid length. [ 405.543187][ T7989] FAULT_INJECTION: forcing a failure. [ 405.543187][ T7989] name failslab, interval 1, probability 0, space 0, times 0 [ 405.543217][ T7989] CPU: 0 UID: 0 PID: 7989 Comm: syz.2.735 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 405.543237][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.543247][ T7989] Call Trace: [ 405.543254][ T7989] [ 405.543261][ T7989] dump_stack_lvl+0xe8/0x150 [ 405.543292][ T7989] should_fail_ex+0x46b/0x600 [ 405.543322][ T7989] should_failslab+0xa8/0x100 [ 405.543350][ T7989] __kmalloc_cache_noprof+0xa1/0x680 [ 405.543371][ T7989] ? __pfx_snprintf+0x10/0x10 [ 405.543427][ T7989] ? jfs_fill_super+0xc2/0xda0 [ 405.543457][ T7989] ? jfs_fill_super+0xc2/0xda0 [ 405.543491][ T7989] jfs_fill_super+0xc2/0xda0 [ 405.543508][ T7989] ? setup_bdev_super+0x586/0x680 [ 405.543541][ T7989] get_tree_bdev_flags+0x430/0x4f0 [ 405.543560][ T7989] ? __pfx_jfs_fill_super+0x10/0x10 [ 405.543575][ T7989] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 405.543599][ T7989] ? safesetid_security_capable+0xa9/0x1a0 [ 405.543626][ T7989] vfs_get_tree+0x92/0x2a0 [ 405.543647][ T7989] do_new_mount+0x319/0xdc0 [ 405.543661][ T7989] ? cap_capable+0x123/0x460 [ 405.543681][ T7989] ? __pfx_do_new_mount+0x10/0x10 [ 405.543698][ T7989] ? ns_capable+0x89/0xe0 [ 405.543722][ T7989] ? path_mount+0x647/0x1050 [ 405.543749][ T7989] ? user_path_at+0xd4/0x160 [ 405.543769][ T7989] __se_sys_mount+0x31d/0x420 [ 405.543788][ T7989] ? __pfx___se_sys_mount+0x10/0x10 [ 405.543809][ T7989] ? __x64_sys_mount+0x20/0xc0 [ 405.543826][ T7989] do_syscall_64+0x166/0x520 [ 405.543844][ T7989] ? trace_irq_disable+0x3b/0x140 [ 405.543864][ T7989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.543880][ T7989] ? clear_bhb_loop+0x70/0xc0 [ 405.543900][ T7989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.543916][ T7989] RIP: 0033:0x7f0506bfe159 [ 405.543931][ T7989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.543945][ T7989] RSP: 002b:00007f0504e56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.543962][ T7989] RAX: ffffffffffffffda RBX: 00007f0506e85fa0 RCX: 00007f0506bfe159 [ 405.543974][ T7989] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000000 [ 405.543985][ T7989] RBP: 00007f0506c95024 R08: 0000000000000000 R09: 0000000000000000 [ 405.543996][ T7989] R10: 0000000002200010 R11: 0000000000000246 R12: 0000000000000000 [ 405.544006][ T7989] R13: 00007f0506e86038 R14: 00007f0506e85fa0 R15: 00007fffb2e69028 [ 405.544030][ T7989] [ 405.630914][ T7992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.736'. [ 405.963137][ T7999] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 407.845600][ T8014] FAULT_INJECTION: forcing a failure. [ 407.845600][ T8014] name failslab, interval 1, probability 0, space 0, times 0 [ 407.846734][ T8014] CPU: 0 UID: 0 PID: 8014 Comm: syz.1.745 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 407.846770][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.846785][ T8014] Call Trace: [ 407.846795][ T8014] [ 407.846806][ T8014] dump_stack_lvl+0xe8/0x150 [ 407.846850][ T8014] should_fail_ex+0x46b/0x600 [ 407.846885][ T8014] should_failslab+0xa8/0x100 [ 407.846924][ T8014] __kmalloc_cache_noprof+0xa1/0x680 [ 407.846954][ T8014] ? __pfx_snprintf+0x10/0x10 [ 407.846989][ T8014] ? jfs_fill_super+0xc2/0xda0 [ 407.847010][ T8014] ? jfs_fill_super+0xc2/0xda0 [ 407.847040][ T8014] jfs_fill_super+0xc2/0xda0 [ 407.847065][ T8014] ? setup_bdev_super+0x586/0x680 [ 407.847117][ T8014] get_tree_bdev_flags+0x430/0x4f0 [ 407.847148][ T8014] ? __pfx_jfs_fill_super+0x10/0x10 [ 407.847171][ T8014] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 407.847201][ T8014] ? safesetid_security_capable+0xa9/0x1a0 [ 407.847234][ T8014] vfs_get_tree+0x92/0x2a0 [ 407.847265][ T8014] do_new_mount+0x319/0xdc0 [ 407.847286][ T8014] ? cap_capable+0x123/0x460 [ 407.847314][ T8014] ? __pfx_do_new_mount+0x10/0x10 [ 407.847340][ T8014] ? ns_capable+0x89/0xe0 [ 407.847375][ T8014] ? path_mount+0x647/0x1050 [ 407.847414][ T8014] ? user_path_at+0xd4/0x160 [ 407.847442][ T8014] __se_sys_mount+0x31d/0x420 [ 407.847472][ T8014] ? __pfx___se_sys_mount+0x10/0x10 [ 407.847503][ T8014] ? __x64_sys_mount+0x20/0xc0 [ 407.847530][ T8014] do_syscall_64+0x166/0x520 [ 407.847557][ T8014] ? trace_irq_disable+0x3b/0x140 [ 407.847585][ T8014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.847608][ T8014] ? clear_bhb_loop+0x70/0xc0 [ 407.847633][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.847655][ T8014] RIP: 0033:0x7ff74ce8e159 [ 407.847678][ T8014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.847698][ T8014] RSP: 002b:00007ff74b0e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 407.847724][ T8014] RAX: ffffffffffffffda RBX: 00007ff74d115fa0 RCX: 00007ff74ce8e159 [ 407.847743][ T8014] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000000 [ 407.847758][ T8014] RBP: 00007ff74cf25024 R08: 0000000000000000 R09: 0000000000000000 [ 407.847773][ T8014] R10: 0000000002200010 R11: 0000000000000246 R12: 0000000000000000 [ 407.847787][ T8014] R13: 00007ff74d116038 R14: 00007ff74d115fa0 R15: 00007ffcb84d8818 [ 407.847823][ T8014] [ 408.181166][ T8017] loop0: detected capacity change from 0 to 21 [ 408.257264][ T8017] loop0: unable to read partition table [ 408.257652][ T8017] loop0: partition table beyond EOD, truncated [ 408.257786][ T8017] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 408.410268][ T5695] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 408.514130][ T8024] FAULT_INJECTION: forcing a failure. [ 408.514130][ T8024] name failslab, interval 1, probability 0, space 0, times 0 [ 408.527204][ T8024] CPU: 1 UID: 0 PID: 8024 Comm: syz.2.750 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 408.527240][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.527254][ T8024] Call Trace: [ 408.527264][ T8024] [ 408.527276][ T8024] dump_stack_lvl+0xe8/0x150 [ 408.527323][ T8024] should_fail_ex+0x46b/0x600 [ 408.527355][ T8024] ? jfs_alloc_inode+0x28/0x70 [ 408.527381][ T8024] should_failslab+0xa8/0x100 [ 408.527422][ T8024] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 408.527457][ T8024] ? jfs_alloc_inode+0x28/0x70 [ 408.527486][ T8024] ? __pfx_jfs_alloc_inode+0x10/0x10 [ 408.527509][ T8024] jfs_alloc_inode+0x28/0x70 [ 408.527533][ T8024] alloc_inode+0x6a/0x1b0 [ 408.527587][ T8024] new_inode+0x1f/0x170 [ 408.527616][ T8024] jfs_fill_super+0x570/0xda0 [ 408.527647][ T8024] get_tree_bdev_flags+0x430/0x4f0 [ 408.527678][ T8024] ? __pfx_jfs_fill_super+0x10/0x10 [ 408.527701][ T8024] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 408.527729][ T8024] ? safesetid_security_capable+0xa9/0x1a0 [ 408.527763][ T8024] vfs_get_tree+0x92/0x2a0 [ 408.527793][ T8024] do_new_mount+0x319/0xdc0 [ 408.527814][ T8024] ? cap_capable+0x123/0x460 [ 408.527844][ T8024] ? __pfx_do_new_mount+0x10/0x10 [ 408.527870][ T8024] ? ns_capable+0x89/0xe0 [ 408.527908][ T8024] ? path_mount+0x647/0x1050 [ 408.527954][ T8024] ? user_path_at+0xd4/0x160 [ 408.527982][ T8024] __se_sys_mount+0x31d/0x420 [ 408.528010][ T8024] ? __pfx___se_sys_mount+0x10/0x10 [ 408.528039][ T8024] ? __x64_sys_mount+0x20/0xc0 [ 408.528067][ T8024] do_syscall_64+0x166/0x520 [ 408.528100][ T8024] ? trace_irq_disable+0x3b/0x140 [ 408.528138][ T8024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.528170][ T8024] ? clear_bhb_loop+0x70/0xc0 [ 408.528200][ T8024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.528226][ T8024] RIP: 0033:0x7f0506bfe159 [ 408.528251][ T8024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.528274][ T8024] RSP: 002b:00007f0504e56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 408.528304][ T8024] RAX: ffffffffffffffda RBX: 00007f0506e85fa0 RCX: 00007f0506bfe159 [ 408.528328][ T8024] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000000 [ 408.528345][ T8024] RBP: 00007f0506c95024 R08: 0000000000000000 R09: 0000000000000000 [ 408.528361][ T8024] R10: 0000000002200010 R11: 0000000000000246 R12: 0000000000000000 [ 408.528376][ T8024] R13: 00007f0506e86038 R14: 00007f0506e85fa0 R15: 00007fffb2e69028 [ 408.528413][ T8024] [ 408.561136][ T5695] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 408.563963][ T5695] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.564011][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.845934][ T5695] usb 1-1: config 0 descriptor?? [ 408.882488][ T5695] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 408.998143][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 411.460367][ T5695] usb 1-1: USB disconnect, device number 18 [ 412.133414][ T8060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.763'. [ 413.340602][ T5695] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 413.403492][ T8069] ima: Unable to open file: / (-22) [ 413.416036][ T8067] ima: policy update failed [ 413.431920][ T37] audit: type=1802 audit(1788714774.811:4): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.765" res=0 errno=0 [ 413.499677][ T5695] usb 1-1: device descriptor read/64, error -71 [ 413.743414][ T5695] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 413.871618][ T5695] usb 1-1: device descriptor read/64, error -71 [ 413.983436][ T5695] usb usb1-port1: attempt power cycle [ 414.146435][ T8078] FAULT_INJECTION: forcing a failure. [ 414.146435][ T8078] name failslab, interval 1, probability 0, space 0, times 0 [ 414.146547][ T8078] CPU: 1 UID: 0 PID: 8078 Comm: syz.1.770 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 414.146575][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.146594][ T8078] Call Trace: [ 414.146662][ T8078] [ 414.146701][ T8078] dump_stack_lvl+0xe8/0x150 [ 414.146878][ T8078] should_fail_ex+0x46b/0x600 [ 414.146955][ T8078] ? jfs_alloc_inode+0x28/0x70 [ 414.147030][ T8078] should_failslab+0xa8/0x100 [ 414.147136][ T8078] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 414.147230][ T8078] ? jfs_alloc_inode+0x28/0x70 [ 414.147304][ T8078] ? __pfx_jfs_alloc_inode+0x10/0x10 [ 414.147358][ T8078] jfs_alloc_inode+0x28/0x70 [ 414.147418][ T8078] alloc_inode+0x6a/0x1b0 [ 414.147519][ T8078] new_inode+0x1f/0x170 [ 414.147594][ T8078] jfs_fill_super+0x570/0xda0 [ 414.147664][ T8078] get_tree_bdev_flags+0x430/0x4f0 [ 414.147739][ T8078] ? __pfx_jfs_fill_super+0x10/0x10 [ 414.147802][ T8078] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 414.147878][ T8078] ? safesetid_security_capable+0xa9/0x1a0 [ 414.147963][ T8078] vfs_get_tree+0x92/0x2a0 [ 414.148047][ T8078] do_new_mount+0x319/0xdc0 [ 414.148075][ T8078] ? cap_capable+0x123/0x460 [ 414.148132][ T8078] ? __pfx_do_new_mount+0x10/0x10 [ 414.148171][ T8078] ? ns_capable+0x89/0xe0 [ 414.148281][ T8078] ? path_mount+0x647/0x1050 [ 414.148395][ T8078] ? user_path_at+0xd4/0x160 [ 414.148469][ T8078] __se_sys_mount+0x31d/0x420 [ 414.148545][ T8078] ? __pfx___se_sys_mount+0x10/0x10 [ 414.148630][ T8078] ? __x64_sys_mount+0x20/0xc0 [ 414.148697][ T8078] do_syscall_64+0x166/0x520 [ 414.148771][ T8078] ? trace_irq_disable+0x3b/0x140 [ 414.148854][ T8078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.148911][ T8078] ? clear_bhb_loop+0x70/0xc0 [ 414.148993][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.149050][ T8078] RIP: 0033:0x7ff74ce8e159 [ 414.149133][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.149186][ T8078] RSP: 002b:00007ff74b0e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.149249][ T8078] RAX: ffffffffffffffda RBX: 00007ff74d115fa0 RCX: 00007ff74ce8e159 [ 414.149298][ T8078] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000000 [ 414.149341][ T8078] RBP: 00007ff74cf25024 R08: 0000000000000000 R09: 0000000000000000 [ 414.149381][ T8078] R10: 0000000002200010 R11: 0000000000000246 R12: 0000000000000000 [ 414.149415][ T8078] R13: 00007ff74d116038 R14: 00007ff74d115fa0 R15: 00007ffcb84d8818 [ 414.149514][ T8078] [ 414.170861][ T5698] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 414.347841][ T5698] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 414.360260][ T5695] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 414.382387][ T5698] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.382532][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.481328][ T5695] usb 1-1: device descriptor read/8, error -71 [ 414.493673][ T5698] usb 3-1: config 0 descriptor?? [ 414.538970][ T5698] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 415.045944][ T5695] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 415.257283][ T5695] usb 1-1: device descriptor read/8, error -71 [ 415.497687][ T5695] usb usb1-port1: unable to enumerate USB device [ 416.063924][ T8093] netlink: 20 bytes leftover after parsing attributes in process `syz.4.774'. [ 416.123844][ T8096] netlink: 'syz.0.775': attribute type 3 has an invalid length. [ 416.133413][ T8096] netlink: 'syz.0.775': attribute type 3 has an invalid length. [ 416.196138][ T8098] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 416.220859][ T8099] fuse: Bad value for 'rootmode' [ 417.982990][ T5604] usb 3-1: USB disconnect, device number 20 [ 418.520276][ T5604] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 418.582860][ T36] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 419.455950][ T5604] usb 3-1: Using ep0 maxpacket: 8 [ 419.457113][ T5604] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 419.469810][ T5604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.469881][ T5604] usb 3-1: Product: syz [ 419.469899][ T5604] usb 3-1: Manufacturer: syz [ 419.469916][ T5604] usb 3-1: SerialNumber: syz [ 419.491064][ T5604] usb 3-1: config 0 descriptor?? [ 419.599947][ T5604] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 419.600080][ T5604] pctv452e: pctv452e_power_ctrl: 1 [ 419.600080][ T5604] [ 419.600755][ T5604] usb 3-1: selecting invalid altsetting 3 [ 419.600799][ T5604] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 419.600799][ T5604] [ 419.600851][ T5604] dvb-usb: bulk message failed: -22 (5/0) [ 419.640682][ T36] usb 5-1: device descriptor read/64, error -71 [ 419.703595][ T5604] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 419.716621][ T5604] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 419.716738][ T5604] usb 3-1: media controller created [ 419.716883][ T5604] dvb-usb: bulk message failed: -22 (8/0) [ 419.716926][ T5604] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 419.717054][ T5604] dvb-usb: MAC address reading failed. [ 419.770702][ T8120] dvb-usb: bulk message failed: -22 (7/0) [ 419.770792][ T8120] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 419.854597][ T5604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.880230][ T36] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 420.030211][ T36] usb 5-1: device descriptor read/64, error -71 [ 420.151055][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.787'. [ 420.224878][ T36] usb usb5-port1: attempt power cycle [ 420.262489][ T5604] DVB: Unable to find symbol stb0899_attach() [ 420.262508][ T5604] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 420.490240][ T5604] rc_core: IR keymap rc-tt-1500 not found [ 420.493350][ T5604] Registered IR keymap rc-empty [ 420.510508][ T5604] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 420.557975][ T8135] smpboot: CPU 1 is now offline [ 420.581595][ T36] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 420.593546][ T5604] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input32 [ 420.601124][ T36] usb 5-1: device descriptor read/8, error -71 [ 420.602122][ T5604] dvb-usb: schedule remote query interval to 100 msecs. [ 420.602138][ T5604] pctv452e: pctv452e_power_ctrl: 0 [ 420.602138][ T5604] [ 420.602146][ T5604] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 420.649727][ T8136] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 420.841800][ T36] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 420.861562][ T36] usb 5-1: device descriptor read/8, error -71 [ 420.898671][ T5604] dvb-usb: bulk message failed: -22 (4/0) [ 420.905715][ T5604] dvb-usb: error -22 while querying for an remote control event. [ 420.972398][ T36] usb usb5-port1: unable to enumerate USB device [ 421.010569][ T5604] dvb-usb: bulk message failed: -22 (4/0) [ 421.013669][ T5604] dvb-usb: error -22 while querying for an remote control event. [ 421.120359][ T5604] dvb-usb: bulk message failed: -22 (4/0) [ 421.124227][ T5604] dvb-usb: error -22 while querying for an remote control event. [ 421.230383][ T5604] dvb-usb: bulk message failed: -22 (4/0) [ 421.237772][ T5604] dvb-usb: error -22 while querying for an remote control event. [ 421.321891][ T5695] usb 3-1: USB disconnect, device number 21 [ 421.409389][ T8141] fuse: Unknown parameter 'use00000000000000000000' [ 421.705909][ T5695] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 421.920033][ T8151] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 422.470584][ T5317] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 423.351700][ T5317] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 423.366136][ T5317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.366189][ T5317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.428441][ T5317] usb 5-1: config 0 descriptor?? [ 423.471896][ T5317] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 423.516007][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 423.605710][ T8167] netlink: 32 bytes leftover after parsing attributes in process `syz.1.797'. [ 423.691411][ T8170] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 423.718167][ T8177] fuse: Unknown parameter 'use00000000000000000000' [ 423.738971][ T8170] bond1 (unregistering): Released all slaves [ 423.790242][ T5695] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 423.865602][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 423.870256][ T5604] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 423.930338][ T5695] usb 4-1: device descriptor read/64, error -71 [ 424.030335][ T5604] usb 3-1: Using ep0 maxpacket: 16 [ 424.036463][ T5604] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 424.049403][ T5604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.059180][ T5604] usb 3-1: Product: syz [ 424.059204][ T5604] usb 3-1: Manufacturer: syz [ 424.059221][ T5604] usb 3-1: SerialNumber: syz [ 424.429960][ T5695] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 425.599785][ T5695] usb 4-1: device descriptor read/64, error -71 [ 425.657608][ T5604] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 425.692984][ T5604] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 425.706592][ T5604] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 425.716588][ T5604] usb 3-1: media controller created [ 425.781968][ T5604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.833850][ T5695] usb usb4-port1: attempt power cycle [ 425.848798][ T10] usb 5-1: USB disconnect, device number 24 [ 425.999666][ T5604] zl10353_read_register: readreg error (reg=127, ret==-71) [ 426.089516][ T8196] netlink: 'syz.0.808': attribute type 3 has an invalid length. [ 426.089812][ T8196] netlink: 'syz.0.808': attribute type 3 has an invalid length. [ 426.166992][ T5604] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 426.170860][ T5695] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 426.203189][ T5695] usb 4-1: device descriptor read/8, error -71 [ 426.211049][ T5604] usb 3-1: USB disconnect, device number 22 [ 426.337475][ T8201] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 427.347233][ T5695] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 427.550228][ T5695] usb 4-1: device not accepting address 24, error -71 [ 427.559023][ T5695] usb usb4-port1: unable to enumerate USB device [ 427.608054][ T8212] netlink: 'syz.1.815': attribute type 3 has an invalid length. [ 427.650305][ T5698] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 427.662713][ T8212] netlink: 'syz.1.815': attribute type 3 has an invalid length. [ 427.664333][ T8214] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 427.726315][ T8210] netlink: 32 bytes leftover after parsing attributes in process `syz.3.813'. [ 428.062609][ T5698] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 428.076114][ T5698] usb 1-1: config 0 has no interfaces? [ 428.081838][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.105006][ T5698] usb 1-1: config 0 descriptor?? [ 429.021365][ T8227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.445092][ T36] usb 1-1: USB disconnect, device number 23 [ 429.510649][ T5698] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 429.570885][ T8236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'. [ 429.680587][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 429.686105][ T5698] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 429.696805][ T5698] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.697258][ T5698] usb 5-1: config 0 has no interfaces? [ 429.716176][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.716246][ T5698] usb 5-1: Product: syz [ 429.716290][ T5698] usb 5-1: Manufacturer: syz [ 429.716339][ T5698] usb 5-1: SerialNumber: syz [ 429.764059][ T5698] usb 5-1: config 0 descriptor?? [ 429.915514][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 430.020869][ T5698] usb 5-1: USB disconnect, device number 25 [ 430.360299][ T36] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 430.413130][ T8246] binder: BINDER_SET_CONTEXT_MGR already set [ 430.434670][ T8246] binder: 8245:8246 ioctl 4018620d 200000000300 returned -16 [ 430.512160][ T36] usb 2-1: device descriptor read/64, error -71 [ 430.761894][ T36] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 430.890280][ T36] usb 2-1: device descriptor read/64, error -71 [ 431.173092][ T36] usb usb2-port1: attempt power cycle [ 432.392065][ T36] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 432.422324][ T36] usb 2-1: device descriptor read/8, error -71 [ 432.450227][ T5698] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 432.605827][ T5698] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 432.607284][ T5698] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 432.607312][ T5698] usb 5-1: config 0 has no interface number 0 [ 432.607354][ T5698] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 432.607383][ T5698] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 432.609192][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 432.609217][ T5698] usb 5-1: Product: syz [ 432.609233][ T5698] usb 5-1: SerialNumber: syz [ 432.656960][ T5698] usb 5-1: config 0 descriptor?? [ 432.677243][ T36] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 432.707629][ T36] usb 2-1: device descriptor read/8, error -71 [ 432.732093][ T5698] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 432.821883][ T36] usb usb2-port1: unable to enumerate USB device [ 432.936856][ T36] usb 5-1: USB disconnect, device number 26 [ 433.363431][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 433.680331][ T8281] netlink: 'syz.1.839': attribute type 8 has an invalid length. [ 433.688172][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.839'. [ 433.724311][ T8282] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 434.570286][ T5722] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 434.645093][ T8301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.847'. [ 434.688533][ T8302] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 434.734846][ T5722] usb 5-1: device descriptor read/64, error -71 [ 434.773198][ T8304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.847'. [ 434.774906][ T8304] nbd: nbd64 already in use [ 434.980725][ T5722] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 435.122366][ T5722] usb 5-1: device descriptor read/64, error -71 [ 435.232726][ T5722] usb usb5-port1: attempt power cycle [ 435.502244][ T8313] netlink: 'syz.2.849': attribute type 30 has an invalid length. [ 435.512517][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 435.512556][ T8313] bond0: option arp_missed_max: invalid value (0) [ 435.512576][ T8313] bond0: option arp_missed_max: allowed values 1 - 255 [ 435.585074][ T5722] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 435.610353][ T5722] usb 5-1: device descriptor read/8, error -71 [ 435.724543][ T8320] netlink: 'syz.2.852': attribute type 8 has an invalid length. [ 435.733003][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.852'. [ 435.862945][ T5722] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 435.898461][ T5722] usb 5-1: device descriptor read/8, error -71 [ 436.001865][ T5722] usb usb5-port1: unable to enumerate USB device [ 437.210221][ T5695] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 437.309453][ T8345] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 437.374508][ T5695] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 437.384713][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.384751][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.384793][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.400201][ T5698] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 437.444337][ T5695] usb 1-1: config 0 descriptor?? [ 437.572187][ T5698] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 437.584288][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.593681][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.593722][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.639812][ T5698] usb 4-1: config 0 descriptor?? [ 437.895690][ T8336] binder: 8335:8336 ioctl c0306201 200000000480 returned -14 [ 437.998779][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.863'. [ 438.165722][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 438.174079][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 438.176047][ T5698] usbhid 4-1:0.0: can't add hid device: -32 [ 438.176149][ T5698] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 438.258146][ T5698] usb 4-1: USB disconnect, device number 25 [ 438.287409][ T5695] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 438.289300][ T5695] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 438.289332][ T5695] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 438.289358][ T5695] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 438.304351][ T5695] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 438.304388][ T5695] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 438.304417][ T5695] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 438.402853][ T5695] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 438.693177][ T8358] udevd[8358]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 438.833826][ T5695] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 438.833912][ T5695] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 438.867108][ T5695] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71 [ 438.912475][ T5695] usb 1-1: USB disconnect, device number 24 [ 439.143019][ T8360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.866'. [ 440.212750][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.212904][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.288935][ T7868] block nbd64: NBD_DISCONNECT [ 443.291625][ T5604] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 443.430891][ T5604] usb 3-1: device descriptor read/64, error -71 [ 443.518516][ T8384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.874'. [ 443.615201][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 443.690383][ T5604] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 443.830281][ T5604] usb 3-1: device descriptor read/64, error -71 [ 443.900195][ T6837] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 443.940723][ T5604] usb usb3-port1: attempt power cycle [ 444.140944][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 444.161270][ T6837] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 444.176190][ T6837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.184949][ T6837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.185001][ T6837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.218874][ T6837] usb 2-1: config 0 descriptor?? [ 444.250622][ T7881] udevd[7881]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 445.247804][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 445.255058][ T5604] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 445.350240][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.350295][ T10] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.350325][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 445.350362][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.355665][ T10] usb 1-1: config 0 descriptor?? [ 445.365623][ T5604] usb 3-1: device descriptor read/8, error -71 [ 445.484814][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 445.492648][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 445.503645][ T6837] usbhid 2-1:0.0: can't add hid device: -32 [ 445.510444][ T6837] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 445.576816][ T6837] usb 2-1: USB disconnect, device number 26 [ 445.603078][ T5604] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 445.717245][ T5604] usb 3-1: device descriptor read/8, error -71 [ 446.439693][ T5604] usb usb3-port1: unable to enumerate USB device [ 447.149529][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.887'. [ 448.619049][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 448.621120][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 448.680815][ T10] usb 1-1: USB disconnect, device number 25 [ 450.388585][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 452.228650][ T8456] smpboot: CPU 1 is now offline [ 452.253339][ T6837] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 452.265137][ T8462] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 452.400862][ T6837] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 452.411364][ T6837] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 452.411441][ T6837] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 452.411509][ T6837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.411575][ T6837] usb 1-1: config 0 has no interface number 0 [ 452.411743][ T6837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.473415][ T6837] usb 1-1: config 0 descriptor?? [ 454.738598][ T6532] usb 1-1: USB disconnect, device number 26 [ 458.028464][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 458.057011][ T10] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.098575][ T8481] udevd[8481]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 458.543916][ T5698] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 459.810187][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 459.815759][ T5698] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 459.824237][ T5698] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 459.824269][ T5698] usb 5-1: config 0 has no interface number 0 [ 459.858567][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.860118][ T5698] usb 5-1: Product: syz [ 459.860141][ T5698] usb 5-1: Manufacturer: syz [ 459.860159][ T5698] usb 5-1: SerialNumber: syz [ 459.896144][ T5698] usb 5-1: config 0 descriptor?? [ 460.297178][ T8492] netlink: 56 bytes leftover after parsing attributes in process `syz.0.909'. [ 460.485108][ T5698] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 460.486830][ T5698] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 461.378651][ T8506] netlink: 'syz.2.902': attribute type 1 has an invalid length. [ 465.256301][ T5698] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 465.258754][ T5698] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 465.729860][ T5698] usb 5-1: USB disconnect, device number 31 [ 465.913100][ T5695] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 465.962251][ T5695] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 466.192352][ T8534] netlink: 56 bytes leftover after parsing attributes in process `syz.0.921'. [ 466.307114][ T8539] udevd[8539]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 466.544142][ T8538] smpboot: CPU 1 is now offline [ 466.711469][ T8543] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 470.270191][ T8562] netlink: 'syz.4.929': attribute type 3 has an invalid length. [ 470.270748][ T8562] netlink: 'syz.4.929': attribute type 3 has an invalid length. [ 470.550706][ T5698] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 470.667121][ T8573] FAULT_INJECTION: forcing a failure. [ 470.667121][ T8573] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 470.671741][ T8573] CPU: 1 UID: 0 PID: 8573 Comm: syz.3.935 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 470.671839][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.671881][ T8573] Call Trace: [ 470.671910][ T8573] [ 470.671932][ T8573] dump_stack_lvl+0xe8/0x150 [ 470.672065][ T8573] should_fail_ex+0x46b/0x600 [ 470.672147][ T8573] _copy_from_user+0x2d/0xb0 [ 470.672270][ T8573] bpf_vlog_reverse_ubuf+0x110/0x3e0 [ 470.672397][ T8573] bpf_vlog_finalize+0x1c9/0x3f0 [ 470.672477][ T8573] bpf_log_attr_finalize+0x80/0x1e0 [ 470.672559][ T8573] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 470.672649][ T8573] ? btf_parse_hdr+0x54f/0x810 [ 470.672745][ T8573] btf_new_fd+0x35e/0xc10 [ 470.672864][ T8573] __sys_bpf+0xd2e/0xd90 [ 470.672973][ T8573] ? __pfx___sys_bpf+0x10/0x10 [ 470.673067][ T8573] ? do_futex+0x3e7/0x4e0 [ 470.673267][ T8573] ? rcu_is_watching+0x16/0xb0 [ 470.673372][ T8573] __x64_sys_bpf+0xba/0xd0 [ 470.673458][ T8573] do_syscall_64+0x166/0x520 [ 470.673533][ T8573] ? trace_irq_disable+0x3b/0x140 [ 470.673614][ T8573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.673677][ T8573] ? clear_bhb_loop+0x70/0xc0 [ 470.673751][ T8573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.673813][ T8573] RIP: 0033:0x7f7a3267e159 [ 470.673874][ T8573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.673928][ T8573] RSP: 002b:00007f7a308d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 470.674003][ T8573] RAX: ffffffffffffffda RBX: 00007f7a32905fa0 RCX: 00007f7a3267e159 [ 470.674047][ T8573] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 470.674086][ T8573] RBP: 00007f7a32715024 R08: 0000000000000000 R09: 0000000000000000 [ 470.674128][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.674155][ T8573] R13: 00007f7a32906038 R14: 00007f7a32905fa0 R15: 00007ffea6df2098 [ 470.674247][ T8573] [ 470.710220][ T5698] usb 2-1: Using ep0 maxpacket: 32 [ 470.771691][ T5698] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 471.178890][ T5698] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 471.182508][ T5698] usb 2-1: config 0 has no interface number 0 [ 471.584201][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.594254][ T5698] usb 2-1: Product: syz [ 471.594327][ T5698] usb 2-1: Manufacturer: syz [ 471.594364][ T5698] usb 2-1: SerialNumber: syz [ 473.167834][ T5722] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 473.560140][ T5698] usb 2-1: config 0 descriptor?? [ 473.724181][ T5722] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 473.764034][ T5698] usb 2-1: can't set config #0, error -71 [ 473.846192][ T8585] udevd[8585]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 473.968783][ T5698] usb 2-1: USB disconnect, device number 27 [ 474.091086][ T6945] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 475.029942][ T6945] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 475.170397][ T6945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 475.170488][ T6945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 475.170515][ T6945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 475.170542][ T6945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 475.527367][ T6945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.539681][ T6945] usb 5-1: Product: syz [ 475.539704][ T6945] usb 5-1: Manufacturer: syz [ 475.539721][ T6945] usb 5-1: SerialNumber: syz [ 476.284573][ T6945] usb 5-1: config 0 descriptor?? [ 476.344103][ T6945] usb 5-1: can't set config #0, error -71 [ 476.356282][ T6945] usb 5-1: USB disconnect, device number 32 [ 476.544024][ T8602] netlink: 'syz.4.944': attribute type 3 has an invalid length. [ 476.579839][ T8602] netlink: 'syz.4.944': attribute type 3 has an invalid length. [ 477.192897][ T7722] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 477.338596][ T8620] libceph: resolve '9' (ret=-3): failed [ 477.351373][ T7722] usb 5-1: device descriptor read/64, error -71 [ 477.470735][ T6945] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 477.590325][ T7722] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 477.631769][ T6945] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 477.641929][ T6945] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 477.644439][ T6945] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 477.644458][ T6945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.644472][ T6945] usb 1-1: config 0 has no interface number 0 [ 477.644506][ T6945] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.644537][ T6945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.683062][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 477.734218][ T7722] usb 5-1: device descriptor read/64, error -71 [ 477.745427][ T6945] usb 1-1: config 0 descriptor?? [ 477.781983][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 477.842688][ T7722] usb usb5-port1: attempt power cycle [ 477.951212][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 477.986509][ T10] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 477.986605][ T10] usb 4-1: Product: syz [ 477.986623][ T10] usb 4-1: SerialNumber: syz [ 478.042927][ T10] usb 4-1: config 0 descriptor?? [ 478.200433][ T7722] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 478.240642][ T6945] usb 1-1: USB disconnect, device number 27 [ 478.249040][ T7722] usb 5-1: device descriptor read/8, error -71 [ 478.377897][ T10] hso 4-1:0.0: Failed to find BULK eps [ 479.837920][ T7722] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 479.852581][ T7722] usb 5-1: device descriptor read/8, error -71 [ 479.960527][ T7722] usb usb5-port1: unable to enumerate USB device [ 480.596060][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'. [ 480.631424][ T7722] usb 4-1: USB disconnect, device number 26 [ 480.899124][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 481.113259][ T8648] vlan3: entered allmulticast mode [ 481.113342][ T8648] bridge1: entered allmulticast mode [ 481.115770][ T8649] bridge1: port 1(erspan0) entered blocking state [ 481.115864][ T8649] bridge1: port 1(erspan0) entered disabled state [ 481.116055][ T8649] erspan0: entered allmulticast mode [ 481.149971][ T8649] erspan0: entered promiscuous mode [ 481.167497][ T8649] bridge1: port 1(erspan0) entered blocking state [ 481.180288][ T8649] bridge1: port 1(erspan0) entered forwarding state [ 481.841938][ T5779] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 482.001775][ T5779] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 482.016493][ T5779] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 482.025728][ T5779] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 482.025757][ T5779] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.025778][ T5779] usb 1-1: config 0 has no interface number 0 [ 482.025843][ T5779] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.025879][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.090361][ T5779] usb 1-1: config 0 descriptor?? [ 482.583030][ T5779] usb 1-1: USB disconnect, device number 28 [ 485.848153][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 486.360202][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 486.513905][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 486.526142][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 486.526238][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 486.526267][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 486.526372][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 486.581468][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.581566][ T10] usb 2-1: Product: syz [ 486.581584][ T10] usb 2-1: Manufacturer: syz [ 486.581630][ T10] usb 2-1: SerialNumber: syz [ 486.626320][ T10] usb 2-1: config 0 descriptor?? [ 486.740238][ T6945] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 486.910193][ T6945] usb 1-1: Using ep0 maxpacket: 8 [ 486.917130][ T6945] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 486.920221][ T5779] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 486.947740][ T6945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.947817][ T6945] usb 1-1: Product: syz [ 486.947834][ T6945] usb 1-1: Manufacturer: syz [ 486.947851][ T6945] usb 1-1: SerialNumber: syz [ 486.987040][ T6945] usb 1-1: config 0 descriptor?? [ 486.998478][ T6945] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 486.998624][ T6945] pctv452e: pctv452e_power_ctrl: 1 [ 486.998624][ T6945] [ 486.998777][ T6945] usb 1-1: selecting invalid altsetting 3 [ 486.998814][ T6945] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 486.998814][ T6945] [ 486.998845][ T6945] dvb-usb: bulk message failed: -22 (5/0) [ 487.048644][ T6945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.049665][ T6945] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 487.049813][ T6945] usb 1-1: media controller created [ 487.049957][ T6945] dvb-usb: bulk message failed: -22 (8/0) [ 487.050016][ T6945] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 487.050340][ T6945] dvb-usb: MAC address reading failed. [ 487.079755][ T6945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.100157][ T5779] usb 3-1: Using ep0 maxpacket: 32 [ 487.130200][ T5779] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 487.146553][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.146631][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.146678][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.187181][ T5779] usb 3-1: config 0 descriptor?? [ 487.286114][ T8712] dvb-usb: bulk message failed: -22 (7/0) [ 487.297437][ T8712] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 487.357647][ T8716] smpboot: CPU 1 is now offline [ 487.759799][ T10] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 487.837548][ T8717] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 487.971514][ T5779] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 487.971611][ T5779] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 488.027822][ T6945] DVB: Unable to find symbol stb0899_attach() [ 488.027893][ T6945] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 488.141909][ T5779] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 488.262870][ T6945] rc_core: IR keymap rc-tt-1500 not found [ 488.262938][ T6945] Registered IR keymap rc-empty [ 488.291304][ T6945] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 488.332554][ T6945] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input33 [ 488.344188][ T5779] ft260 0003:0403:6030.0011: failed to retrieve system status [ 488.440310][ T5779] ft260 0003:0403:6030.0011: probe with driver ft260 failed with error -32 [ 488.476127][ T6945] dvb-usb: schedule remote query interval to 100 msecs. [ 488.476536][ T6945] pctv452e: pctv452e_power_ctrl: 0 [ 488.476536][ T6945] [ 488.476579][ T6945] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 488.595288][ T6945] usb 1-1: USB disconnect, device number 29 [ 488.614560][ T5779] usb 3-1: USB disconnect, device number 27 [ 489.959015][ T8727] ima: policy update failed [ 490.713737][ T37] audit: type=1807 audit(1788714851.111:5): UNKNOWN=meas res=0 [ 490.713789][ T37] audit: type=1802 audit(1788714851.121:6): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.0.990" res=0 errno=0 [ 490.713894][ T37] audit: type=1802 audit(1788714851.351:7): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.990" res=0 errno=0 [ 490.715771][ T36] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 490.911351][ T5695] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 490.981104][ T36] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 491.003347][ T36] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.003433][ T36] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.003465][ T36] usb 5-1: config 0 interface 0 has no altsetting 0 [ 491.003502][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.101827][ T6945] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 491.101918][ T5695] usb 4-1: Using ep0 maxpacket: 8 [ 491.125346][ T5695] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 491.142814][ T36] usb 5-1: config 0 descriptor?? [ 491.162333][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.162494][ T5695] usb 4-1: Product: syz [ 491.162557][ T5695] usb 4-1: Manufacturer: syz [ 491.162782][ T5695] usb 4-1: SerialNumber: syz [ 491.454004][ T5695] usb 4-1: config 0 descriptor?? [ 491.517900][ T6532] usb 2-1: USB disconnect, device number 28 [ 491.678133][ T5695] usb 4-1: can't set config #0, error -71 [ 491.736901][ T5695] usb 4-1: USB disconnect, device number 27 [ 491.820917][ T10] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 491.992299][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 492.006863][ T10] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 492.006951][ T10] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 492.006976][ T10] usb 3-1: config 0 has no interface number 0 [ 492.007025][ T10] usb 3-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 492.007067][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.069223][ T10] usb 3-1: config 0 descriptor?? [ 492.443794][ T10] usb 3-1: USB disconnect, device number 28 [ 493.583101][ T36] usbhid 5-1:0.0: can't add hid device: -71 [ 493.583282][ T36] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 493.603414][ T36] usb 5-1: USB disconnect, device number 37 [ 493.740229][ T5722] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 493.871406][ T8768] Mount JFS Failure: -5 [ 493.895105][ T5722] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 493.895300][ T8768] jfs_mount failed w/return code = -5 [ 493.911320][ T5722] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 493.919017][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 493.919055][ T5722] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.919084][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 493.919113][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 493.967501][ T5722] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 493.967567][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 493.967598][ T5722] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.967627][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 493.967658][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 494.030185][ T36] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 494.040683][ T5722] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 494.048319][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 494.059138][ T5722] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.060186][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 494.060219][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 494.115876][ T5722] usb 4-1: string descriptor 0 read error: -22 [ 494.119459][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.186373][ T5722] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 494.194989][ T8773] fuse: Unknown parameter '0x0000000000000003' [ 494.252650][ T36] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 494.261321][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.261411][ T36] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.285182][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.285272][ T36] usb 5-1: Product: syz [ 494.285291][ T36] usb 5-1: Manufacturer: syz [ 494.285307][ T36] usb 5-1: SerialNumber: syz [ 494.370900][ T5722] usb 4-1: USB disconnect, device number 28 [ 494.427473][ T36] r8152-cfgselector 5-1: Unknown version 0x0000 [ 494.427505][ T36] r8152-cfgselector 5-1: config 0 descriptor?? [ 497.802437][ T8810] loop0: detected capacity change from 0 to 21 [ 497.810337][ T36] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 497.869001][ T8810] loop0: [ 497.972132][ T36] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 497.978210][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 497.978303][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 497.978374][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 497.978446][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 497.991904][ T6532] r8152-cfgselector 5-1: USB disconnect, device number 38 [ 498.042689][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.042721][ T36] usb 3-1: Product: syz [ 498.042738][ T36] usb 3-1: Manufacturer: syz [ 498.042754][ T36] usb 3-1: SerialNumber: syz [ 498.118334][ T36] usb 3-1: config 0 descriptor?? [ 500.156518][ T36] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 500.366070][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 500.391596][ T5722] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 500.500303][ T10] usb 1-1: device descriptor read/64, error -71 [ 500.558559][ T5722] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 500.570941][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 500.574047][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 500.574078][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 500.574108][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 500.597811][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.597851][ T5722] usb 4-1: Product: syz [ 500.597868][ T5722] usb 4-1: Manufacturer: syz [ 500.597884][ T5722] usb 4-1: SerialNumber: syz [ 500.655077][ T5722] usb 4-1: config 0 descriptor?? [ 500.770228][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 500.894575][ T5722] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 500.910308][ T10] usb 1-1: device descriptor read/64, error -71 [ 501.021098][ T10] usb usb1-port1: attempt power cycle [ 501.165900][ T36] usb 4-1: USB disconnect, device number 29 [ 501.370333][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 501.391014][ T10] usb 1-1: device descriptor read/8, error -71 [ 501.654917][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.655089][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.671097][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 501.691819][ T10] usb 1-1: device descriptor read/8, error -71 [ 501.810568][ T10] usb usb1-port1: unable to enumerate USB device [ 501.907862][ T36] usb 3-1: USB disconnect, device number 29 [ 502.068316][ T8846] FAULT_INJECTION: forcing a failure. [ 502.068316][ T8846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.084237][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.3.1032 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 502.084272][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.084288][ T8846] Call Trace: [ 502.084297][ T8846] [ 502.084307][ T8846] dump_stack_lvl+0xe8/0x150 [ 502.084351][ T8846] should_fail_ex+0x46b/0x600 [ 502.084385][ T8846] _copy_to_user+0x31/0xb0 [ 502.084418][ T8846] bpf_verifier_vlog+0x52a/0x900 [ 502.084460][ T8846] btf_verifier_log+0x11d/0x1a0 [ 502.084492][ T8846] ? __pfx_btf_verifier_log+0x10/0x10 [ 502.084513][ T8846] ? __btf_verifier_log+0xe2/0x140 [ 502.084542][ T8846] ? __pfx___btf_verifier_log+0x10/0x10 [ 502.084569][ T8846] btf_func_proto_log+0x44d/0x840 [ 502.084606][ T8846] __btf_verifier_log_type+0x45d/0x6a0 [ 502.084645][ T8846] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 502.084676][ T8846] ? __pfx_sort+0x10/0x10 [ 502.084702][ T8846] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 502.084736][ T8846] btf_func_proto_check_meta+0xc7/0x160 [ 502.084769][ T8846] btf_parse_type_sec+0x3cf/0x2360 [ 502.084807][ T8846] ? btf_parse_hdr+0x1da/0x810 [ 502.084841][ T8846] ? btf_parse_hdr+0x5f2/0x810 [ 502.084867][ T8846] ? btf_parse_str_sec+0x244/0x2f0 [ 502.084901][ T8846] btf_new_fd+0x487/0xc10 [ 502.084940][ T8846] __sys_bpf+0xd2e/0xd90 [ 502.084982][ T8846] ? __pfx___sys_bpf+0x10/0x10 [ 502.085018][ T8846] ? do_futex+0x3e7/0x4e0 [ 502.085084][ T8846] ? rcu_is_watching+0x16/0xb0 [ 502.085123][ T8846] __x64_sys_bpf+0xba/0xd0 [ 502.085155][ T8846] do_syscall_64+0x166/0x520 [ 502.085190][ T8846] ? trace_irq_disable+0x3b/0x140 [ 502.085219][ T8846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.085243][ T8846] ? clear_bhb_loop+0x70/0xc0 [ 502.085272][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.085295][ T8846] RIP: 0033:0x7f7a3267e159 [ 502.085316][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.085336][ T8846] RSP: 002b:00007f7a308d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 502.085361][ T8846] RAX: ffffffffffffffda RBX: 00007f7a32905fa0 RCX: 00007f7a3267e159 [ 502.085378][ T8846] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 502.085393][ T8846] RBP: 00007f7a32715024 R08: 0000000000000000 R09: 0000000000000000 [ 502.085406][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.085420][ T8846] R13: 00007f7a32906038 R14: 00007f7a32905fa0 R15: 00007ffea6df2098 [ 502.085456][ T8846] [ 502.425212][ T8849] FAULT_INJECTION: forcing a failure. [ 502.425212][ T8849] name failslab, interval 1, probability 0, space 0, times 0 [ 502.443771][ T8849] CPU: 0 UID: 0 PID: 8849 Comm: syz.4.1033 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 502.443803][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.443816][ T8849] Call Trace: [ 502.443824][ T8849] [ 502.443834][ T8849] dump_stack_lvl+0xe8/0x150 [ 502.443873][ T8849] should_fail_ex+0x46b/0x600 [ 502.443905][ T8849] should_failslab+0xa8/0x100 [ 502.443942][ T8849] __kmalloc_noprof+0xfb/0x790 [ 502.443972][ T8849] ? tomoyo_realpath_from_path+0xef/0x640 [ 502.444004][ T8849] ? tomoyo_realpath_from_path+0xef/0x640 [ 502.444041][ T8849] tomoyo_realpath_from_path+0xef/0x640 [ 502.444079][ T8849] ? tomoyo_path_number_perm+0x219/0x5f0 [ 502.444104][ T8849] tomoyo_path_number_perm+0x246/0x5f0 [ 502.444132][ T8849] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 502.444158][ T8849] ? __lock_acquire+0x6df/0x2e40 [ 502.444246][ T8849] ? hook_file_ioctl+0x1f5/0x610 [ 502.444298][ T8849] ? __fget_files+0x2a/0x420 [ 502.444323][ T8849] ? __fget_files+0x2a/0x420 [ 502.444344][ T8849] ? __fget_files+0x3a8/0x420 [ 502.444365][ T8849] ? __fget_files+0x2a/0x420 [ 502.444392][ T8849] security_file_ioctl+0xc3/0x2a0 [ 502.444420][ T8849] __se_sys_ioctl+0x47/0x170 [ 502.444454][ T8849] do_syscall_64+0x166/0x520 [ 502.444480][ T8849] ? trace_irq_disable+0x3b/0x140 [ 502.444508][ T8849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.444530][ T8849] ? clear_bhb_loop+0x70/0xc0 [ 502.444557][ T8849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.444578][ T8849] RIP: 0033:0x7f5943dfe159 [ 502.444598][ T8849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.444619][ T8849] RSP: 002b:00007f5942056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.444652][ T8849] RAX: ffffffffffffffda RBX: 00007f5944085fa0 RCX: 00007f5943dfe159 [ 502.444668][ T8849] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 502.444684][ T8849] RBP: 00007f5943e95024 R08: 0000000000000000 R09: 0000000000000000 [ 502.444700][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.444715][ T8849] R13: 00007f5944086038 R14: 00007f5944085fa0 R15: 00007fff74a02d38 [ 502.444749][ T8849] [ 502.444759][ T8849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 502.449902][ T8849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.971815][ T8857] netlink: 620 bytes leftover after parsing attributes in process `syz.4.1035'. [ 505.208365][ T36] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 505.442308][ T36] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 505.452191][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.452261][ T36] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 505.491185][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.491281][ T36] usb 4-1: Product: syz [ 505.491299][ T36] usb 4-1: Manufacturer: syz [ 505.491317][ T36] usb 4-1: SerialNumber: syz [ 505.607135][ T36] r8152-cfgselector 4-1: Unknown version 0x0000 [ 505.607221][ T36] r8152-cfgselector 4-1: config 0 descriptor?? [ 505.713745][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1039'. [ 505.847127][ T36] r8152-cfgselector 4-1: USB disconnect, device number 30 [ 507.605237][ T8891] netlink: 'syz.0.1045': attribute type 10 has an invalid length. [ 508.051810][ T8893] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1049'. [ 508.966461][ T8891] team0 (unregistering): Port device team_slave_0 removed [ 509.028205][ T8891] team0 (unregistering): Port device team_slave_1 removed [ 509.236967][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1054'. [ 509.321507][ T5695] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 509.359005][ T8910] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1055'. [ 509.481110][ T5695] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 509.493195][ T5695] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.493226][ T5695] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 509.519618][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.527786][ T5695] usb 2-1: Product: syz [ 509.527809][ T5695] usb 2-1: Manufacturer: syz [ 509.527827][ T5695] usb 2-1: SerialNumber: syz [ 509.560171][ T5695] r8152-cfgselector 2-1: Unknown version 0x0000 [ 509.566565][ T5695] r8152-cfgselector 2-1: config 0 descriptor?? [ 512.056881][ T8960] FAULT_INJECTION: forcing a failure. [ 512.056881][ T8960] name failslab, interval 1, probability 0, space 0, times 0 [ 512.069904][ T8960] CPU: 1 UID: 0 PID: 8960 Comm: syz.4.1070 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 512.069937][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.069952][ T8960] Call Trace: [ 512.069961][ T8960] [ 512.069972][ T8960] dump_stack_lvl+0xe8/0x150 [ 512.070015][ T8960] should_fail_ex+0x46b/0x600 [ 512.070052][ T8960] should_failslab+0xa8/0x100 [ 512.070090][ T8960] __kmalloc_noprof+0xfb/0x790 [ 512.070120][ T8960] ? tomoyo_realpath_from_path+0xef/0x640 [ 512.070149][ T8960] ? tomoyo_realpath_from_path+0xef/0x640 [ 512.070187][ T8960] tomoyo_realpath_from_path+0xef/0x640 [ 512.070226][ T8960] ? tomoyo_path_number_perm+0x219/0x5f0 [ 512.070251][ T8960] tomoyo_path_number_perm+0x246/0x5f0 [ 512.070279][ T8960] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 512.070303][ T8960] ? __lock_acquire+0x6df/0x2e40 [ 512.070357][ T8960] ? hook_file_ioctl+0x1f5/0x610 [ 512.070413][ T8960] ? __fget_files+0x2a/0x420 [ 512.070442][ T8960] ? __fget_files+0x2a/0x420 [ 512.070464][ T8960] ? __fget_files+0x3a8/0x420 [ 512.070486][ T8960] ? __fget_files+0x2a/0x420 [ 512.070514][ T8960] security_file_ioctl+0xc3/0x2a0 [ 512.070543][ T8960] __se_sys_ioctl+0x47/0x170 [ 512.070577][ T8960] do_syscall_64+0x166/0x520 [ 512.070605][ T8960] ? trace_irq_disable+0x3b/0x140 [ 512.070634][ T8960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.070658][ T8960] ? clear_bhb_loop+0x70/0xc0 [ 512.070687][ T8960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.070711][ T8960] RIP: 0033:0x7f5943dfe159 [ 512.070734][ T8960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.070754][ T8960] RSP: 002b:00007f5942056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.070779][ T8960] RAX: ffffffffffffffda RBX: 00007f5944085fa0 RCX: 00007f5943dfe159 [ 512.070798][ T8960] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 512.070813][ T8960] RBP: 00007f5943e95024 R08: 0000000000000000 R09: 0000000000000000 [ 512.070828][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.070842][ T8960] R13: 00007f5944086038 R14: 00007f5944085fa0 R15: 00007fff74a02d38 [ 512.070877][ T8960] [ 512.090172][ T8960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 512.331916][ T8960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 512.545665][ T8963] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1071'. [ 512.781746][ T5722] r8152-cfgselector 2-1: USB disconnect, device number 29 [ 513.369900][ T27] [ 513.372301][ T27] ====================================================== [ 513.379349][ T27] WARNING: possible circular locking dependency detected [ 513.386395][ T27] syzkaller #0 Not tainted [ 513.390856][ T27] ------------------------------------------------------ [ 513.397886][ T27] migration/1/27 is trying to acquire lock: [ 513.403795][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 513.412493][ T27] [ 513.412493][ T27] but task is already holding lock: [ 513.419882][ T27] ffff8880305f4980 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 513.429416][ T27] [ 513.429416][ T27] which lock already depends on the new lock. [ 513.429416][ T27] [ 513.439848][ T27] [ 513.439848][ T27] the existing dependency chain (in reverse order) is: [ 513.448880][ T27] [ 513.448880][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 513.456313][ T27] _raw_spin_lock+0x2e/0x40 [ 513.461368][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 513.467374][ T27] rt_spin_lock+0x165/0x400 [ 513.472423][ T27] __wake_up_common_lock+0x2f/0x1f0 [ 513.478169][ T27] rcu_exp_sel_wait_wake+0xc00/0x1170 [ 513.484089][ T27] kthread_worker_fn+0x4eb/0xb20 [ 513.489576][ T27] kthread+0x38b/0x470 [ 513.494204][ T27] ret_from_fork+0x514/0xb70 [ 513.499394][ T27] ret_from_fork_asm+0x1a/0x30 [ 513.504700][ T27] [ 513.504700][ T27] -> #0 (_T->lock){....}-{2:2}: [ 513.511771][ T27] __lock_acquire+0x15ff/0x2e40 [ 513.517173][ T27] lock_acquire+0x115/0x350 [ 513.522224][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 513.527971][ T27] rt_spin_trylock+0x56/0x2b0 [ 513.533199][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 513.538601][ T27] kvfree_call_rcu+0xa4/0x430 [ 513.543854][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 513.549782][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 513.556240][ T27] select_fallback_rq+0x11e/0x200 [ 513.561825][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 513.567891][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 513.573494][ T27] smpboot_thread_fn+0x565/0xa70 [ 513.578999][ T27] kthread+0x38b/0x470 [ 513.583623][ T27] ret_from_fork+0x514/0xb70 [ 513.588764][ T27] ret_from_fork_asm+0x1a/0x30 [ 513.594073][ T27] [ 513.594073][ T27] other info that might help us debug this: [ 513.594073][ T27] [ 513.604320][ T27] Possible unsafe locking scenario: [ 513.604320][ T27] [ 513.611792][ T27] CPU0 CPU1 [ 513.617176][ T27] ---- ---- [ 513.622579][ T27] lock(&p->pi_lock); [ 513.626677][ T27] lock(_T->lock); [ 513.633033][ T27] lock(&p->pi_lock); [ 513.639646][ T27] lock(_T->lock); [ 513.643518][ T27] [ 513.643518][ T27] *** DEADLOCK *** [ 513.643518][ T27] [ 513.651683][ T27] locks held by migration/1/27: 2, last CPU#1: [ 513.657866][ T27] #0: ffff8880305f4980 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 513.667837][ T27] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 513.678412][ T27] [ 513.678412][ T27] stack backtrace: [ 513.684323][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 513.694068][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.704153][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 513.712622][ T27] Call Trace: [ 513.715931][ T27] [ 513.718883][ T27] dump_stack_lvl+0xe8/0x150 [ 513.723516][ T27] print_circular_bug+0x2e2/0x300 [ 513.728586][ T27] check_noncircular+0x12f/0x150 [ 513.733572][ T27] __lock_acquire+0x15ff/0x2e40 [ 513.738466][ T27] ? __bfs+0x153/0x290 [ 513.742567][ T27] ? __pfx_usage_match+0x10/0x10 [ 513.747534][ T27] ? lockdep_unlock+0x5c/0xd0 [ 513.752245][ T27] ? __lock_acquire+0x14b9/0x2e40 [ 513.757313][ T27] lock_acquire+0x115/0x350 [ 513.761870][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 513.766807][ T27] ? plist_check_list+0x2d7/0x310 [ 513.771986][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 513.777226][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 513.782118][ T27] rt_spin_trylock+0x56/0x2b0 [ 513.786845][ T27] ? enqueue_pushable_task+0x248/0x3e0 [ 513.792344][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 513.797245][ T27] kvfree_call_rcu+0xa4/0x430 [ 513.801973][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 513.807128][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 513.812552][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 513.818491][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 513.824517][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 513.830456][ T27] select_fallback_rq+0x11e/0x200 [ 513.835558][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 513.841597][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 513.847008][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.852237][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 513.858246][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 513.863316][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 513.868375][ T27] smpboot_thread_fn+0x565/0xa70 [ 513.873348][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 513.878412][ T27] kthread+0x38b/0x470 [ 513.882505][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 513.888101][ T27] ? __pfx_kthread+0x10/0x10 [ 513.892734][ T27] ret_from_fork+0x514/0xb70 [ 513.897361][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 513.902496][ T27] ? __switch_to+0xc89/0x1420 [ 513.907205][ T27] ? __pfx_kthread+0x10/0x10 [ 513.911827][ T27] ret_from_fork_asm+0x1a/0x30 [ 513.916625][ T27] [ 513.919689][ T27] process 8967 (syz.1.1073) no longer affine to cpu1 [ 513.919802][ C1] process 8966 (syz.1.1073) no longer affine to cpu1 [ 513.997829][ T8966] process 8977 (syz.1.1073) no longer affine to cpu1 [ 514.304384][ T27] numa_remove_cpu cpu 1 node 0: mask now 0 [ 514.304413][ T27] numa_remove_cpu cpu 1 node 1: mask now 0 [ 514.307013][ T8975] smpboot: CPU 1 is now offline [ 514.328833][ T8978] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 514.329798][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 514.329821][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1