last executing test programs: 1m49.949110606s ago: executing program 4 (id=901): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x3fc}, 0x0, r1}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="830505000000000020001280080001006772650014000280080005000800000008000600"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000200)=0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000000000256111730000000000850000001d0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r6}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) 1m47.759248371s ago: executing program 4 (id=905): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(0x0, &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90, 0x0, 0xe00, {0x6, 0x3, 0x7, 0x101, 0xc5b, 0x2, {0x4, 0x8000000000000001, 0x8, 0x5, 0x7, 0x3, 0x7, 0xd75, 0x7, 0x703327eea4d9e39a, 0x7fff, r2, r3, 0x7, 0x1aeb9df5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m47.31272214s ago: executing program 4 (id=907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x840) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x200100, 0x40, 0x22}, 0x18) renameat2(r7, &(0x7f00000001c0)='./file0/../file0\x00', r3, 0x0, 0x5) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x7}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1) 1m46.32737284s ago: executing program 4 (id=909): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, 0x0, 0x0, 0x2af2) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) 1m45.980729209s ago: executing program 4 (id=911): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt(r3, 0x0, 0x22, &(0x7f0000000080)="01", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='meas', 0x4) 1m44.791797803s ago: executing program 4 (id=912): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt(r3, 0x0, 0x22, &(0x7f0000000080)="01", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='meas', 0x4) 1m27.636531734s ago: executing program 32 (id=912): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt(r3, 0x0, 0x22, &(0x7f0000000080)="01", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='meas', 0x4) 19.791133727s ago: executing program 3 (id=1008): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$kcm(0x29, 0x7, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 15.559922198s ago: executing program 1 (id=1012): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000240)) inotify_init() writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) 13.334448902s ago: executing program 1 (id=1013): r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000280)={0x3, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000080004, 0x50000000004}}) 12.949885771s ago: executing program 3 (id=1014): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) 10.82857061s ago: executing program 0 (id=1016): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 10.780694468s ago: executing program 1 (id=1017): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 10.687653303s ago: executing program 3 (id=1019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a3100000000"], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 10.458793268s ago: executing program 1 (id=1020): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 9.727722874s ago: executing program 0 (id=1021): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='meas', 0x4) 8.953382084s ago: executing program 0 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebdf4000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000002580)=0x4, 0x4) set_mempolicy(0x5, 0x0, 0xf) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) writev(r4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, r2}) r6 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000305", @ANYRES32=0x0, @ANYBLOB="11110200318800001c0012800b0001006d616373656300000c000280060002404e22000008000500", @ANYRES32=r7, @ANYBLOB="e9a8d0d01d1d0bdebbae54c83e0454e599bb733104a3a2fc9dc49f6fde7de13a6c04df94e401da60156c497a7d74aed360a4932e8e84abe9d088d5315c380166ebbd8dfa9820cab0f18308cf5e"], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='ac', 0x2) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000004c0)={0xf5, [[0xaf01, 0x7f, 0x8, 0x35, 0x3, 0x10, 0x0, 0x5], [0x72, 0x101, 0xcf82, 0x3ff, 0xfffffff9, 0xffff9b9a, 0xfffffffc, 0x6], [0x4e33, 0x6, 0x8, 0x8, 0x4, 0x6, 0x7, 0x3]], '\x00', [{0x8, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x75c, 0x1, 0x0, 0x1}, {0x5, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x8, 0x1, 0x1}, {0x7, 0x1ff, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x5, 0x0, 0x0, 0x0, 0x1}, {0xc, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x10001, 0x40007, 0x0, 0x0, 0x1}, {0xa, 0x8, 0x0, 0x0, 0x1}, {0x7, 0xa518, 0x0, 0x1}, {0x7, 0x8, 0x1, 0x1}, {0x3, 0x6, 0x0, 0x0, 0x1}], '\x00', 0x85b2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 8.881222675s ago: executing program 2 (id=1023): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Yy\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000500), &(0x7f0000000800)=r0}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="61202a0100207700"], 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r5, &(0x7f00000057c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x29, 0x32}], 0x10}}], 0x1, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000104010200000000000000000a00000108000540000000a6050001000100000008000440000010000800034000000f2b06000638a944b4d1c82673e540000500000a000200000007ff020000000800054009b141d10800044000000008"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8000, 0x0) 6.306816611s ago: executing program 1 (id=1024): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8080ffd0, 0x0, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @ldst={0x3, 0x3, 0x6, 0x7, 0x2, 0x30}]}, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xff) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000440)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000280)={0x3, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000080004, 0x50000000004}}) 6.215913222s ago: executing program 0 (id=1025): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffeb9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 6.194107407s ago: executing program 3 (id=1026): r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000280)={0x3, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000080004, 0x50000000004}}) 6.145345361s ago: executing program 2 (id=1027): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, r1, 0x2f, 0x2008, 0x4}, 0x20) 5.952960528s ago: executing program 3 (id=1028): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$kcm(0x29, 0x7, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 5.772730279s ago: executing program 2 (id=1029): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) 4.387749539s ago: executing program 2 (id=1030): mkdirat(0xffffffffffffff9c, 0x0, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000280)=@secondary) r4 = io_uring_setup(0x1561, &(0x7f0000000180)={0x0, 0x460f, 0x20, 0x0, 0x186, 0x0, r1}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f00000002c0)=[0x81, 0x3], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r5, 0x0, 0x0) 3.179788776s ago: executing program 1 (id=1031): unshare(0x6020400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0x2, 0x2, 0x3c, 0x3, 0x8}) r3 = creat(0x0, 0x2e) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000100009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000002180)={r7, 0x2, r0, 0x80, 0x80000}) r8 = dup(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_nanosleep(0x9, 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) mmap$panthor(&(0x7f0000b4d000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r8, 0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x8401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write(r9, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) file_setattr(r3, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000020c0)={0x110, 0x2, 0x264e, 0x9, 0x1}, 0x18, 0x800) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000002140)=[@in6={0xa, 0x4e20, 0x5, @loopback, 0x400}, @in={0x2, 0x4e23, @loopback}], 0x2c) 2.991787681s ago: executing program 2 (id=1032): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='meas', 0x4) 2.751624134s ago: executing program 2 (id=1033): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f01"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$FUSE(r0, 0x0, 0x0) 1.984938843s ago: executing program 3 (id=1034): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8080ffd0, 0x0, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @ldst={0x3, 0x3, 0x6, 0x7, 0x2, 0x30}]}, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xff) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000440)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000280)={0x3, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000080004, 0x50000000004}}) 101.010886ms ago: executing program 0 (id=1035): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000000000000000000f0400000009000000feffffff0b0000000008000002000000ff23000000005afde1c9cb21dea0cbe8b8bd5730c8b0dff1201c7ccbcbf9463f3c46af573bdaf9f0b5682391734b333b7c596ae9f68a8ddc06fddd707f95493558dc0614cf508b16733d1e9c3514439a369bb11e0ce0c7340082ad1c7093d9e4ec2f88b5f77408f95716f7e5"], 0x0, 0x3e}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 0s ago: executing program 0 (id=1036): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2eb, 0x282) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0', 0x1) write(r1, &(0x7f00000001a0)='1', 0x1) unshare(0x22020600) mmap(&(0x7f0000af6000/0x2000)=nil, 0x2000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x801, {0x2, 0x0, 0x2}}, 0x18) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f00000001c0)={0x0, {0xfff, 0x5}}) kernel console output (not intermixed with test programs): ] ? hook_file_ioctl+0x1f5/0x610 [ 289.813196][ T7153] ? __asan_memset+0x22/0x50 [ 289.813210][ T7153] ? smack_file_ioctl+0x335/0x370 [ 289.813223][ T7153] ? __pfx_smack_file_ioctl+0x10/0x10 [ 289.813241][ T7153] ? __fget_files+0x2a/0x420 [ 289.813252][ T7153] ? __fget_files+0x3a8/0x420 [ 289.813263][ T7153] ? __fget_files+0x2a/0x420 [ 289.813277][ T7153] ? bpf_lsm_file_ioctl+0x9/0x20 [ 289.813289][ T7153] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 289.813307][ T7153] __se_sys_ioctl+0xff/0x170 [ 289.813323][ T7153] do_syscall_64+0x166/0x520 [ 289.813338][ T7153] ? trace_irq_disable+0x3b/0x140 [ 289.813352][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.813364][ T7153] ? clear_bhb_loop+0x70/0xc0 [ 289.813379][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.813390][ T7153] RIP: 0033:0x7f577fe4e159 [ 289.813403][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.813414][ T7153] RSP: 002b:00007f577e0a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.813429][ T7153] RAX: ffffffffffffffda RBX: 00007f57800d5fa0 RCX: 00007f577fe4e159 [ 289.813439][ T7153] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 289.813447][ T7153] RBP: 00007f577fee5024 R08: 0000000000000000 R09: 0000000000000000 [ 289.813456][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.813464][ T7153] R13: 00007f57800d6038 R14: 00007f57800d5fa0 R15: 00007ffec9d62138 [ 289.813483][ T7153] [ 289.816402][ T7153] debugfs: out of free dentries, can not create file 'pid' [ 290.757292][ T7182] Mount JFS Failure: -5 [ 290.757307][ T7182] jfs_mount failed w/return code = -5 [ 290.859708][ T6998] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 291.010290][ T6998] usb 2-1: Using ep0 maxpacket: 32 [ 291.011063][ T6998] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 291.012647][ T6998] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 291.012666][ T6998] usb 2-1: config 0 has no interface number 0 [ 291.021546][ T6998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.021567][ T6998] usb 2-1: Product: syz [ 291.021576][ T6998] usb 2-1: Manufacturer: syz [ 291.021584][ T6998] usb 2-1: SerialNumber: syz [ 291.049299][ T6998] usb 2-1: config 0 descriptor?? [ 291.579317][ T5609] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 291.638956][ T6998] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 291.638981][ T6998] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 291.873922][ T5609] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.878745][ T5609] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.878767][ T5609] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 291.878780][ T5609] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.878811][ T5609] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.884359][ T5609] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.884380][ T5609] usb 1-1: Product: syz [ 291.884389][ T5609] usb 1-1: Manufacturer: syz [ 291.945917][ T5609] cdc_wdm 1-1:1.0: skipping garbage [ 291.945935][ T5609] cdc_wdm 1-1:1.0: skipping garbage [ 291.945957][ T5609] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 292.711015][ T7198] netlink: 56 bytes leftover after parsing attributes in process `syz.3.428'. [ 293.313210][ T7184] input input34: cannot allocate more than FF_MAX_EFFECTS effects [ 293.534942][ T5609] usb 1-1: USB disconnect, device number 24 [ 294.816003][ T6998] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 294.816192][ T6998] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 297.799417][ T6998] usb 2-1: USB disconnect, device number 19 [ 301.249441][ T6998] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 301.251095][ T5609] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 301.412351][ T6998] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.421785][ T5609] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 301.445561][ T6998] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.445584][ T6998] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 301.445596][ T6998] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.445628][ T6998] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.447615][ T5609] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 301.447638][ T5609] usb 5-1: config 0 has no interface number 0 [ 301.447666][ T5609] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 301.447735][ T5609] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 301.460481][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 301.460502][ T5609] usb 5-1: Product: syz [ 301.460510][ T5609] usb 5-1: SerialNumber: syz [ 301.460866][ T6998] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.460881][ T6998] usb 4-1: Product: syz [ 301.460890][ T6998] usb 4-1: Manufacturer: syz [ 301.499389][ T5609] usb 5-1: config 0 descriptor?? [ 301.539084][ T5609] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 301.551506][ T6998] cdc_wdm 4-1:1.0: skipping garbage [ 301.551526][ T6998] cdc_wdm 4-1:1.0: skipping garbage [ 301.551548][ T6998] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 301.671301][ T7262] Mount JFS Failure: -5 [ 301.671317][ T7262] jfs_mount failed w/return code = -5 [ 301.726686][ T6998] usb 5-1: USB disconnect, device number 16 [ 301.787271][ T7248] input input35: cannot allocate more than FF_MAX_EFFECTS effects [ 301.829544][ T5794] usb 4-1: USB disconnect, device number 17 [ 301.909343][ T5609] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 302.069858][ T5609] usb 3-1: Using ep0 maxpacket: 32 [ 302.070620][ T5609] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 302.071656][ T5609] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 302.071673][ T5609] usb 3-1: config 0 has no interface number 0 [ 302.076239][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.076259][ T5609] usb 3-1: Product: syz [ 302.076269][ T5609] usb 3-1: Manufacturer: syz [ 302.076278][ T5609] usb 3-1: SerialNumber: syz [ 302.083495][ T5609] usb 3-1: config 0 descriptor?? [ 302.449394][ T6998] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 302.506778][ T5609] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 302.506802][ T5609] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 302.515240][ T7272] FAULT_INJECTION: forcing a failure. [ 302.515240][ T7272] name failslab, interval 1, probability 0, space 0, times 0 [ 302.515265][ T7272] CPU: 0 UID: 0 PID: 7272 Comm: syz.4.455 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 302.515281][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.515289][ T7272] Call Trace: [ 302.515295][ T7272] [ 302.515300][ T7272] dump_stack_lvl+0xe8/0x150 [ 302.515323][ T7272] should_fail_ex+0x46b/0x600 [ 302.515339][ T7272] ? jfs_alloc_inode+0x28/0x70 [ 302.515353][ T7272] should_failslab+0xa8/0x100 [ 302.515370][ T7272] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 302.515387][ T7272] ? jfs_alloc_inode+0x28/0x70 [ 302.515401][ T7272] ? __pfx_jfs_alloc_inode+0x10/0x10 [ 302.515413][ T7272] jfs_alloc_inode+0x28/0x70 [ 302.515424][ T7272] alloc_inode+0x6a/0x1b0 [ 302.515442][ T7272] new_inode+0x1f/0x170 [ 302.515456][ T7272] jfs_fill_super+0x570/0xda0 [ 302.515472][ T7272] get_tree_bdev_flags+0x430/0x4f0 [ 302.515487][ T7272] ? __pfx_jfs_fill_super+0x10/0x10 [ 302.515499][ T7272] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 302.515515][ T7272] ? safesetid_security_capable+0xa9/0x1a0 [ 302.515532][ T7272] vfs_get_tree+0x92/0x2a0 [ 302.515546][ T7272] do_new_mount+0x319/0xdc0 [ 302.515557][ T7272] ? cap_capable+0x123/0x460 [ 302.515572][ T7272] ? __pfx_do_new_mount+0x10/0x10 [ 302.515585][ T7272] ? ns_capable+0x89/0xe0 [ 302.515600][ T7272] ? path_mount+0x647/0x1050 [ 302.515628][ T7272] ? user_path_at+0xd4/0x160 [ 302.515641][ T7272] __se_sys_mount+0x31d/0x420 [ 302.515657][ T7272] ? __pfx___se_sys_mount+0x10/0x10 [ 302.515672][ T7272] ? __x64_sys_mount+0x20/0xc0 [ 302.515685][ T7272] do_syscall_64+0x166/0x520 [ 302.515700][ T7272] ? trace_irq_disable+0x3b/0x140 [ 302.515715][ T7272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.515727][ T7272] ? clear_bhb_loop+0x70/0xc0 [ 302.515741][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.515753][ T7272] RIP: 0033:0x7f858acae159 [ 302.515765][ T7272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.515776][ T7272] RSP: 002b:00007f8588f06028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.515792][ T7272] RAX: ffffffffffffffda RBX: 00007f858af35fa0 RCX: 00007f858acae159 [ 302.515801][ T7272] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000000 [ 302.515809][ T7272] RBP: 00007f858ad45024 R08: 0000000000000000 R09: 0000000000000000 [ 302.515817][ T7272] R10: 0000000002200010 R11: 0000000000000246 R12: 0000000000000000 [ 302.515826][ T7272] R13: 00007f858af36038 R14: 00007f858af35fa0 R15: 00007ffff6b516b8 [ 302.515845][ T7272] [ 302.603717][ T6998] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 302.604954][ T6998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.605012][ T6998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.605037][ T6998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.673055][ T6998] usb 2-1: config 0 descriptor?? [ 302.700025][ T59] Bluetooth: hci5: command 0xfc11 tx timeout [ 302.729651][ T5604] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 303.322450][ T7270] binder: 7269:7270 ioctl c0306201 200000000480 returned -14 [ 303.388231][ T7278] tipc: Started in network mode [ 303.388256][ T7278] tipc: Node identity 7f000001, cluster identity 4711 [ 303.965817][ T7278] tipc: New replicast peer: 127.0.0.1 [ 304.086153][ T6998] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 304.086180][ T6998] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 304.086195][ T6998] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 304.086210][ T6998] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 304.086225][ T6998] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 304.086742][ T6998] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 304.086763][ T6998] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 304.216922][ T7278] tipc: Enabled bearer , priority 10 [ 304.217124][ T7279] tipc: Disabling bearer [ 304.872849][ T5609] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 304.873038][ T5609] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 304.896802][ T6998] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 305.097874][ T7284] udevd[7284]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 305.270880][ T6998] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 305.270919][ T6998] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 305.356626][ T6998] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71 [ 305.411837][ T6998] usb 2-1: USB disconnect, device number 20 [ 308.802951][ T7294] fuse: Unknown parameter 'use00000000000000000000' [ 308.903559][ T5609] usb 3-1: USB disconnect, device number 12 [ 309.258951][ T7306] FAULT_INJECTION: forcing a failure. [ 309.258951][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 309.258979][ T7306] CPU: 0 UID: 0 PID: 7306 Comm: syz.0.466 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 309.258995][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.259003][ T7306] Call Trace: [ 309.259009][ T7306] [ 309.259016][ T7306] dump_stack_lvl+0xe8/0x150 [ 309.259122][ T7306] should_fail_ex+0x46b/0x600 [ 309.259140][ T7306] ? jfs_alloc_inode+0x28/0x70 [ 309.259155][ T7306] should_failslab+0xa8/0x100 [ 309.259176][ T7306] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 309.259195][ T7306] ? jfs_alloc_inode+0x28/0x70 [ 309.259209][ T7306] ? __pfx_jfs_alloc_inode+0x10/0x10 [ 309.259221][ T7306] jfs_alloc_inode+0x28/0x70 [ 309.259233][ T7306] alloc_inode+0x6a/0x1b0 [ 309.259253][ T7306] new_inode+0x1f/0x170 [ 309.259267][ T7306] jfs_fill_super+0x570/0xda0 [ 309.259285][ T7306] get_tree_bdev_flags+0x430/0x4f0 [ 309.259300][ T7306] ? __pfx_jfs_fill_super+0x10/0x10 [ 309.259321][ T7306] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 309.259337][ T7306] ? safesetid_security_capable+0xa9/0x1a0 [ 309.259364][ T7306] vfs_get_tree+0x92/0x2a0 [ 309.259381][ T7306] do_new_mount+0x319/0xdc0 [ 309.259392][ T7306] ? cap_capable+0x123/0x460 [ 309.259408][ T7306] ? __pfx_do_new_mount+0x10/0x10 [ 309.259425][ T7306] ? ns_capable+0x89/0xe0 [ 309.259756][ T7306] ? path_mount+0x647/0x1050 [ 309.259778][ T7306] ? user_path_at+0xd4/0x160 [ 309.259793][ T7306] __se_sys_mount+0x31d/0x420 [ 309.259811][ T7306] ? __pfx___se_sys_mount+0x10/0x10 [ 309.259827][ T7306] ? __x64_sys_mount+0x20/0xc0 [ 309.259840][ T7306] do_syscall_64+0x166/0x520 [ 309.259857][ T7306] ? trace_irq_disable+0x3b/0x140 [ 309.259872][ T7306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.259884][ T7306] ? clear_bhb_loop+0x70/0xc0 [ 309.259899][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.259911][ T7306] RIP: 0033:0x7f577fe4e159 [ 309.259925][ T7306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.259936][ T7306] RSP: 002b:00007f577e0a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.259959][ T7306] RAX: ffffffffffffffda RBX: 00007f57800d5fa0 RCX: 00007f577fe4e159 [ 309.259969][ T7306] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000000 [ 309.259977][ T7306] RBP: 00007f577fee5024 R08: 0000000000000000 R09: 0000000000000000 [ 309.259986][ T7306] R10: 0000000002200010 R11: 0000000000000246 R12: 0000000000000000 [ 309.259993][ T7306] R13: 00007f57800d6038 R14: 00007f57800d5fa0 R15: 00007ffec9d62138 [ 309.260013][ T7306] [ 309.536408][ T5609] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 309.598390][ T7313] Mount JFS Failure: -5 [ 309.598404][ T7313] jfs_mount failed w/return code = -5 [ 309.716955][ T5609] usb 4-1: Using ep0 maxpacket: 32 [ 309.721758][ T5609] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 309.722883][ T5609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.722909][ T5609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.722933][ T5609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.781212][ T5609] usb 4-1: config 0 descriptor?? [ 310.099354][ T6998] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 310.304878][ T6998] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 310.305910][ T6998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.305931][ T6998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.305956][ T6998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.396563][ T6998] usb 2-1: config 0 descriptor?? [ 310.497634][ T5609] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 310.497661][ T5609] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 310.576002][ T7327] netlink: 'syz.4.472': attribute type 3 has an invalid length. [ 310.577803][ T7327] netlink: 'syz.4.472': attribute type 3 has an invalid length. [ 310.616012][ T5609] ft260 0003:0403:6030.000C: failed to retrieve chip version [ 310.616410][ T5609] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -5 [ 310.863807][ T7316] binder: 7315:7316 ioctl c0306201 200000000480 returned -14 [ 311.131933][ T6998] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 311.131961][ T6998] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 311.131976][ T6998] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 311.131991][ T6998] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 311.132006][ T6998] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 311.132020][ T6998] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 311.132035][ T6998] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 311.157526][ T6998] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 311.403579][ T7337] udevd[7337]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 311.695221][ T6998] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 311.695258][ T6998] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 311.878808][ T6998] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71 [ 311.913097][ T6998] usb 2-1: USB disconnect, device number 21 [ 312.394243][ T6998] usb 4-1: USB disconnect, device number 18 [ 312.454913][ T7353] Mount JFS Failure: -5 [ 312.520569][ T7353] jfs_mount failed w/return code = -5 [ 313.176405][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 313.190018][ T7363] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 313.261876][ T5609] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 313.672173][ T5609] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 313.774458][ T5609] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.774491][ T5609] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.774507][ T5609] usb 3-1: config 0 interface 0 has no altsetting 0 [ 313.774529][ T5609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.454733][ T5609] usb 3-1: config 0 descriptor?? [ 317.767822][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.767888][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.535061][ T5609] usbhid 3-1:0.0: can't add hid device: -71 [ 318.548417][ T5609] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 318.570695][ T5609] usb 3-1: USB disconnect, device number 13 [ 321.545342][ T7426] tipc: New replicast peer: 127.0.0.1 [ 321.650524][ T7426] tipc: Enabled bearer , priority 10 [ 321.754417][ T7428] tipc: Disabling bearer [ 322.239251][ T5723] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 323.624835][ T7440] netlink: 36 bytes leftover after parsing attributes in process `syz.3.511'. [ 323.625620][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 323.625644][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 323.736548][ T2877] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.766113][ T5723] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.766761][ T2881] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.767072][ T2881] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.767242][ T2881] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.799337][ T5723] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.799371][ T5723] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 323.799389][ T5723] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.799457][ T5723] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.813206][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.813237][ T5723] usb 2-1: Product: syz [ 323.813251][ T5723] usb 2-1: Manufacturer: syz [ 323.931707][ T5723] cdc_wdm 2-1:1.0: skipping garbage [ 323.931733][ T5723] cdc_wdm 2-1:1.0: skipping garbage [ 323.931772][ T5723] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 324.177587][ T7434] input input36: cannot allocate more than FF_MAX_EFFECTS effects [ 324.202978][ T36] usb 2-1: USB disconnect, device number 22 [ 325.866439][ T7453] FAULT_INJECTION: forcing a failure. [ 325.866439][ T7453] name fail_futex, interval 1, probability 0, space 0, times 1 [ 325.889122][ T7453] CPU: 1 UID: 0 PID: 7453 Comm: syz.2.515 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.889157][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.889170][ T7453] Call Trace: [ 325.889180][ T7453] [ 325.889190][ T7453] dump_stack_lvl+0xe8/0x150 [ 325.889232][ T7453] should_fail_ex+0x46b/0x600 [ 325.889266][ T7453] get_futex_key+0x1b4/0x1580 [ 325.889295][ T7453] ? __update_load_avg_cfs_rq+0x6ae/0xad0 [ 325.889341][ T7453] ? __pfx_get_futex_key+0x10/0x10 [ 325.889372][ T7453] ? update_se+0x90/0xf30 [ 325.889407][ T7453] futex_wait_setup+0x4a/0x590 [ 325.889438][ T7453] ? __futex_wait+0xe1/0x410 [ 325.889468][ T7453] __futex_wait+0x161/0x410 [ 325.889499][ T7453] ? __pfx___futex_wait+0x10/0x10 [ 325.889528][ T7453] ? __pfx_futex_wake_mark+0x10/0x10 [ 325.889560][ T7453] ? try_to_wake_up+0x84b/0x1430 [ 325.889595][ T7453] futex_wait+0x121/0x390 [ 325.889623][ T7453] ? __pfx_futex_wait+0x10/0x10 [ 325.889668][ T7453] do_futex+0x3e7/0x4e0 [ 325.889707][ T7453] ? __pfx_do_futex+0x10/0x10 [ 325.889739][ T7453] ? blkcg_maybe_throttle_current+0x1a9/0xbd0 [ 325.889774][ T7453] __se_sys_futex+0x3a8/0x450 [ 325.889807][ T7453] ? __pfx_task_work_run+0x10/0x10 [ 325.889829][ T7453] ? __pfx___se_sys_futex+0x10/0x10 [ 325.889858][ T7453] ? rcu_is_watching+0x16/0xb0 [ 325.889909][ T7453] ? __x64_sys_futex+0x21/0xf0 [ 325.889946][ T7453] do_syscall_64+0x166/0x520 [ 325.889974][ T7453] ? trace_irq_disable+0x3b/0x140 [ 325.890000][ T7453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.890023][ T7453] ? clear_bhb_loop+0x70/0xc0 [ 325.890050][ T7453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.890069][ T7453] RIP: 0033:0x7fcffdfce159 [ 325.890091][ T7453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.890110][ T7453] RSP: 002b:00007fcffc2260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 325.890136][ T7453] RAX: ffffffffffffffda RBX: 00007fcffe255fa8 RCX: 00007fcffdfce159 [ 325.890152][ T7453] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcffe255fa8 [ 325.890167][ T7453] RBP: 00007fcffe255fa0 R08: 0000000000000000 R09: 0000000000000000 [ 325.890181][ T7453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.890195][ T7453] R13: 00007fcffe256038 R14: 00007ffe6eecfcd0 R15: 00007ffe6eecfdb8 [ 325.890230][ T7453] [ 326.226167][ T7455] FAULT_INJECTION: forcing a failure. [ 326.226167][ T7455] name failslab, interval 1, probability 0, space 0, times 0 [ 326.227992][ T7455] CPU: 1 UID: 0 PID: 7455 Comm: syz.0.518 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 326.228025][ T7455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.228038][ T7455] Call Trace: [ 326.228047][ T7455] [ 326.228057][ T7455] dump_stack_lvl+0xe8/0x150 [ 326.228097][ T7455] should_fail_ex+0x46b/0x600 [ 326.228127][ T7455] ? jfs_alloc_inode+0x28/0x70 [ 326.228150][ T7455] should_failslab+0xa8/0x100 [ 326.228184][ T7455] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 326.228214][ T7455] ? jfs_alloc_inode+0x28/0x70 [ 326.228251][ T7455] ? __pfx_jfs_alloc_inode+0x10/0x10 [ 326.228272][ T7455] jfs_alloc_inode+0x28/0x70 [ 326.228292][ T7455] alloc_inode+0x6a/0x1b0 [ 326.228327][ T7455] new_inode+0x1f/0x170 [ 326.228350][ T7455] jfs_fill_super+0x570/0xda0 [ 326.228380][ T7455] get_tree_bdev_flags+0x430/0x4f0 [ 326.228408][ T7455] ? __pfx_jfs_fill_super+0x10/0x10 [ 326.228439][ T7455] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 326.228468][ T7455] ? safesetid_security_capable+0xa9/0x1a0 [ 326.228500][ T7455] vfs_get_tree+0x92/0x2a0 [ 326.228528][ T7455] do_new_mount+0x319/0xdc0 [ 326.228548][ T7455] ? cap_capable+0x123/0x460 [ 326.228576][ T7455] ? __pfx_do_new_mount+0x10/0x10 [ 326.228598][ T7455] ? ns_capable+0x89/0xe0 [ 326.228629][ T7455] ? path_mount+0x647/0x1050 [ 326.228664][ T7455] ? user_path_at+0xd4/0x160 [ 326.228690][ T7455] __se_sys_mount+0x31d/0x420 [ 326.228724][ T7455] ? __pfx___se_sys_mount+0x10/0x10 [ 326.228751][ T7455] ? __x64_sys_mount+0x20/0xc0 [ 326.228772][ T7455] do_syscall_64+0x166/0x520 [ 326.228796][ T7455] ? trace_irq_disable+0x3b/0x140 [ 326.228820][ T7455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.228840][ T7455] ? clear_bhb_loop+0x70/0xc0 [ 326.228865][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.228885][ T7455] RIP: 0033:0x7f577fe4e159 [ 326.228907][ T7455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.228925][ T7455] RSP: 002b:00007f577e0a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.228950][ T7455] RAX: ffffffffffffffda RBX: 00007f57800d5fa0 RCX: 00007f577fe4e159 [ 326.228965][ T7455] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000000 [ 326.228979][ T7455] RBP: 00007f577fee5024 R08: 0000000000000000 R09: 0000000000000000 [ 326.228991][ T7455] R10: 0000000002200010 R11: 0000000000000246 R12: 0000000000000000 [ 326.229004][ T7455] R13: 00007f57800d6038 R14: 00007f57800d5fa0 R15: 00007ffec9d62138 [ 326.229036][ T7455] [ 326.480891][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 331.642633][ T7505] netlink: 'syz.4.531': attribute type 3 has an invalid length. [ 331.642912][ T7505] netlink: 'syz.4.531': attribute type 3 has an invalid length. [ 333.663070][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 334.244133][ T7540] fuse: Unknown parameter 'user_id00000000000000000000' [ 338.887042][ T7555] smpboot: CPU 1 is now offline [ 339.251795][ T7559] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 340.779557][ T5794] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 340.950290][ T5794] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 340.965716][ T5794] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 340.976520][ T5794] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 340.976552][ T5794] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 340.976615][ T5794] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.020518][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 341.024353][ T5794] usb 2-1: Product: syz [ 341.024380][ T5794] usb 2-1: Manufacturer: syz [ 341.093947][ T5794] cdc_wdm 2-1:1.0: skipping garbage [ 341.101099][ T5794] cdc_wdm 2-1:1.0: skipping garbage [ 341.104133][ T5794] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 342.247681][ T7573] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 342.788591][ T5794] usb 2-1: USB disconnect, device number 23 [ 342.867218][ T7592] netlink: 'syz.4.559': attribute type 30 has an invalid length. [ 342.879821][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 342.879866][ T7592] bond0: option arp_missed_max: invalid value (0) [ 342.879887][ T7592] bond0: option arp_missed_max: allowed values 1 - 255 [ 343.239269][ T5723] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 343.412092][ T5723] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 343.414123][ T5723] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.414158][ T5723] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.414183][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 343.414221][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.489501][ T7599] smpboot: CPU 1 is now offline [ 343.523775][ T5723] usb 5-1: config 0 descriptor?? [ 344.026161][ T7601] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 347.282601][ T5723] usbhid 5-1:0.0: can't add hid device: -71 [ 347.282825][ T5723] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 347.359782][ T5723] usb 5-1: USB disconnect, device number 17 [ 347.688310][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.570'. [ 349.467296][ T7629] Mount JFS Failure: -5 [ 349.467319][ T7629] jfs_mount failed w/return code = -5 [ 350.034977][ T7630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.570'. [ 350.035016][ T7630] nbd: nbd64 already in use [ 350.211207][ T998] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 350.358952][ T7645] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 350.372582][ T998] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 350.378638][ T998] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 350.378669][ T998] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 350.378687][ T998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.378706][ T998] usb 3-1: config 0 has no interface number 0 [ 350.378747][ T998] usb 3-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.378787][ T998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.450276][ T998] usb 3-1: config 0 descriptor?? [ 350.635406][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 350.749562][ T5724] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 350.949889][ T5724] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 350.963682][ T5724] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.963759][ T5724] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 350.963782][ T5724] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.963834][ T5724] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.979215][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 350.979247][ T5724] usb 5-1: Product: syz [ 350.979264][ T5724] usb 5-1: Manufacturer: syz [ 351.076504][ T5724] cdc_wdm 5-1:1.0: skipping garbage [ 351.076698][ T5724] cdc_wdm 5-1:1.0: skipping garbage [ 351.076752][ T5724] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 351.162134][ T6997] usb 3-1: USB disconnect, device number 14 [ 351.321298][ T7644] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 351.452970][ T5724] usb 5-1: USB disconnect, device number 18 [ 352.265465][ T7670] kAFS: No cell specified [ 354.972099][ T7679] FAULT_INJECTION: forcing a failure. [ 354.972099][ T7679] name failslab, interval 1, probability 0, space 0, times 0 [ 354.987638][ T7679] CPU: 1 UID: 0 PID: 7679 Comm: syz.2.584 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 354.987670][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.987683][ T7679] Call Trace: [ 354.987766][ T7679] [ 354.987799][ T7679] dump_stack_lvl+0xe8/0x150 [ 354.988031][ T7679] should_fail_ex+0x46b/0x600 [ 354.988105][ T7679] should_failslab+0xa8/0x100 [ 354.988162][ T7679] ? __kernfs_new_node+0xe7/0xa70 [ 354.988215][ T7679] kmem_cache_alloc_noprof+0x9e/0x690 [ 354.988246][ T7679] ? __kernfs_new_node+0xe7/0xa70 [ 354.988275][ T7679] __kernfs_new_node+0xe7/0xa70 [ 354.988308][ T7679] ? __pfx___kernfs_new_node+0x10/0x10 [ 354.988332][ T7679] ? kernfs_root+0x1c/0x230 [ 354.988360][ T7679] ? kernfs_root+0x1c/0x230 [ 354.988381][ T7679] ? kernfs_root+0x1c/0x230 [ 354.988399][ T7679] ? kernfs_root+0x1c/0x230 [ 354.988425][ T7679] kernfs_create_dir_ns+0xfe/0x230 [ 354.988456][ T7679] sysfs_create_dir_ns+0x12f/0x2a0 [ 354.988483][ T7679] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 354.988511][ T7679] ? rt_spin_unlock+0x165/0x200 [ 354.988637][ T7679] kobject_add_internal+0x62c/0xce0 [ 354.988693][ T7679] kobject_add+0x163/0x240 [ 354.988726][ T7679] ? __pfx_kobject_add+0x10/0x10 [ 354.988754][ T7679] ? bus_get_dev_root+0x12d/0x160 [ 354.988832][ T7679] ? get_device_parent+0x396/0x3a0 [ 354.988876][ T7679] ? __pfx_klist_children_get+0x10/0x10 [ 354.988899][ T7679] device_add+0x3fa/0xb80 [ 354.988926][ T7679] iommu_mock_device_add+0x83/0x1e0 [ 354.988990][ T7679] iommufd_test+0x38d9/0x6370 [ 354.989074][ T7679] ? __lock_acquire+0x6df/0x2e40 [ 354.989127][ T7679] ? __pfx_iommufd_test+0x10/0x10 [ 354.989169][ T7679] ? tomoyo_path_number_perm+0x219/0x5f0 [ 354.989212][ T7679] ? tomoyo_path_number_perm+0x219/0x5f0 [ 354.989236][ T7679] ? lock_acquire+0x115/0x350 [ 354.989284][ T7679] iommufd_fops_ioctl+0x468/0x600 [ 354.989324][ T7679] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 354.989359][ T7679] ? __fget_files+0x2a/0x420 [ 354.989395][ T7679] ? bpf_lsm_file_ioctl+0x9/0x20 [ 354.989437][ T7679] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 354.989458][ T7679] __se_sys_ioctl+0xff/0x170 [ 354.989486][ T7679] do_syscall_64+0x166/0x520 [ 354.989555][ T7679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.989593][ T7679] ? clear_bhb_loop+0x70/0xc0 [ 354.989617][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.989637][ T7679] RIP: 0033:0x7fcffdfce159 [ 354.989677][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.989695][ T7679] RSP: 002b:00007fcffc226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.989728][ T7679] RAX: ffffffffffffffda RBX: 00007fcffe255fa0 RCX: 00007fcffdfce159 [ 354.989742][ T7679] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 354.989756][ T7679] RBP: 00007fcffe065024 R08: 0000000000000000 R09: 0000000000000000 [ 354.989769][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.989781][ T7679] R13: 00007fcffe256038 R14: 00007fcffe255fa0 R15: 00007ffe6eecfdb8 [ 354.989812][ T7679] [ 355.007609][ T7679] kobject: kobject_add_internal failed for iommufd_mock0 (error: -12 parent: devices) [ 355.709671][ T7692] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 356.259446][ T36] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 356.409283][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 356.417045][ T36] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 356.437801][ T36] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 356.437895][ T36] usb 4-1: config 0 has no interface number 0 [ 356.456267][ T6997] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 356.481076][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.481141][ T36] usb 4-1: Product: syz [ 356.481157][ T36] usb 4-1: Manufacturer: syz [ 356.481173][ T36] usb 4-1: SerialNumber: syz [ 356.521255][ T36] usb 4-1: config 0 descriptor?? [ 356.621346][ T6997] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.645565][ T6997] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 356.646141][ T6997] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 356.646172][ T6997] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 356.646234][ T6997] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.774861][ T6997] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.778433][ T6997] usb 1-1: Product: syz [ 356.778458][ T6997] usb 1-1: Manufacturer: syz [ 356.825695][ T6997] cdc_wdm 1-1:1.0: skipping garbage [ 356.832163][ T6997] cdc_wdm 1-1:1.0: skipping garbage [ 356.832249][ T6997] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 356.887259][ T7707] fuse: Unknown parameter '0x0000000000000003' [ 357.041249][ T7701] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 357.052200][ T36] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 357.052297][ T36] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 357.245606][ T998] usb 1-1: USB disconnect, device number 25 [ 357.278299][ T7712] netlink: 'syz.1.597': attribute type 3 has an invalid length. [ 357.339542][ T6997] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 357.412816][ T7712] netlink: 'syz.1.597': attribute type 3 has an invalid length. [ 357.561148][ T6997] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 357.575394][ T6997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 357.576767][ T6997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.576798][ T6997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 357.576826][ T6997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 357.651576][ T6997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.658555][ T6997] usb 3-1: Product: syz [ 357.658582][ T6997] usb 3-1: Manufacturer: syz [ 357.658600][ T6997] usb 3-1: SerialNumber: syz [ 357.705102][ T6997] usb 3-1: config 0 descriptor?? [ 360.118794][ T36] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 360.123982][ T36] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 361.221600][ T5737] usb 4-1: USB disconnect, device number 19 [ 361.230464][ T6997] adutux 3-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 361.596183][ T6997] usb 3-1: USB disconnect, device number 15 [ 364.139845][ T7746] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 364.402934][ T7747] netlink: 'syz.0.608': attribute type 30 has an invalid length. [ 364.413624][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 364.413672][ T7747] bond0: option arp_missed_max: invalid value (0) [ 364.413692][ T7747] bond0: option arp_missed_max: allowed values 1 - 255 [ 364.808324][ T7751] netlink: 'syz.0.609': attribute type 3 has an invalid length. [ 364.808727][ T7751] netlink: 'syz.0.609': attribute type 3 has an invalid length. [ 365.152652][ T7755] netlink: 'syz.0.611': attribute type 1 has an invalid length. [ 365.239403][ T36] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 365.400705][ T36] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 365.415870][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 365.415918][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 365.415943][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 365.415979][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 365.479723][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.488448][ T36] usb 2-1: Product: syz [ 365.488491][ T36] usb 2-1: Manufacturer: syz [ 365.488507][ T36] usb 2-1: SerialNumber: syz [ 365.522381][ T7765] netlink: 'syz.4.614': attribute type 10 has an invalid length. [ 365.550869][ T6997] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 366.384651][ T6997] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 366.388091][ T6997] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 366.388123][ T6997] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 366.388141][ T6997] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 366.388190][ T6997] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.399652][ T6997] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 366.399684][ T6997] usb 3-1: Product: syz [ 366.399698][ T6997] usb 3-1: Manufacturer: syz [ 367.014139][ T36] usb 2-1: config 0 descriptor?? [ 369.276893][ T7771] fuse: Unknown parameter '0x0000000000000003' [ 369.290238][ T6997] usb 3-1: can't set config #1, error -71 [ 369.303876][ T36] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 369.387037][ T6997] usb 3-1: USB disconnect, device number 16 [ 369.452849][ T7765] team0 (unregistering): Port device team_slave_0 removed [ 369.538109][ T7765] team0 (unregistering): Port device team_slave_1 removed [ 369.601581][ T7773] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 370.958865][ T6997] usb 2-1: USB disconnect, device number 24 [ 371.333778][ T7788] netlink: 'syz.0.619': attribute type 30 has an invalid length. [ 371.344662][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 371.344706][ T7788] bond0: option arp_missed_max: invalid value (0) [ 371.344725][ T7788] bond0: option arp_missed_max: allowed values 1 - 255 [ 371.615130][ T7800] netlink: 56 bytes leftover after parsing attributes in process `syz.4.624'. [ 371.629709][ T7801] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 371.711994][ T7805] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 372.009308][ T5737] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 372.079438][ T6997] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 372.159952][ T5737] usb 5-1: Using ep0 maxpacket: 32 [ 372.161289][ T5737] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 372.164016][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.164050][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.164089][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.171057][ T5737] usb 5-1: config 0 descriptor?? [ 372.230230][ T6997] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 372.241191][ T6997] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 372.241534][ T6997] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 372.241557][ T6997] usb 4-1: config 0 has no interface number 0 [ 372.241603][ T6997] usb 4-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.242026][ T6997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.264691][ T6997] usb 4-1: config 0 descriptor?? [ 372.637732][ T5737] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 372.637843][ T5737] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 372.831141][ T5724] usb 4-1: USB disconnect, device number 20 [ 372.841055][ T5737] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 372.851622][ T6997] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 373.647639][ T7822] netlink: 'syz.3.633': attribute type 30 has an invalid length. [ 373.647721][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 373.647752][ T7822] bond0: option arp_missed_max: invalid value (0) [ 373.647770][ T7822] bond0: option arp_missed_max: allowed values 1 - 255 [ 373.740936][ T5737] ft260 0003:0403:6030.000E: failed to retrieve system status [ 373.744518][ T5737] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -32 [ 373.808805][ T5737] usb 5-1: USB disconnect, device number 19 [ 373.890153][ T6997] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 373.892286][ T6997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 373.892317][ T6997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 373.892342][ T6997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 373.892369][ T6997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 373.902726][ T6997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.902756][ T6997] usb 1-1: Product: syz [ 373.902770][ T6997] usb 1-1: Manufacturer: syz [ 373.902784][ T6997] usb 1-1: SerialNumber: syz [ 373.939935][ T6997] usb 1-1: config 0 descriptor?? [ 374.234918][ T6997] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 374.362050][ T7835] netlink: 56 bytes leftover after parsing attributes in process `syz.2.639'. [ 374.394218][ T7834] netlink: 'syz.3.638': attribute type 1 has an invalid length. [ 374.504434][ T7837] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 374.770263][ T7842] Mount JFS Failure: -5 [ 374.771935][ T7842] jfs_mount failed w/return code = -5 [ 378.276984][ T7855] smpboot: CPU 1 is now offline [ 378.401500][ T7858] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 378.674682][ T5794] usb 1-1: USB disconnect, device number 26 [ 378.913091][ T7872] netlink: 'syz.2.652': attribute type 8 has an invalid length. [ 378.913181][ T7872] netlink: 96 bytes leftover after parsing attributes in process `syz.2.652'. [ 379.045267][ T7879] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 379.094751][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 379.194282][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.194529][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.903450][ T7910] netlink: 'syz.4.665': attribute type 8 has an invalid length. [ 382.909284][ T7910] netlink: 96 bytes leftover after parsing attributes in process `syz.4.665'. [ 383.179146][ T7924] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 383.629323][ T5737] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 383.784554][ T5737] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 383.795494][ T5737] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 383.795901][ T5737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 383.795932][ T5737] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.795956][ T5737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 383.795980][ T5737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 383.816463][ T5737] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 383.816525][ T5737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 383.816551][ T5737] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.816574][ T5737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 383.816599][ T5737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 383.875278][ T5737] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 383.875337][ T5737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 383.875363][ T5737] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.875387][ T5737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 383.875505][ T5737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 383.886299][ T5737] usb 5-1: string descriptor 0 read error: -22 [ 383.886445][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.973819][ T5737] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 384.100345][ T7944] netlink: 'syz.0.678': attribute type 3 has an invalid length. [ 384.100554][ T7944] netlink: 'syz.0.678': attribute type 3 has an invalid length. [ 384.263120][ T7948] FAULT_INJECTION: forcing a failure. [ 384.263120][ T7948] name failslab, interval 1, probability 0, space 0, times 0 [ 384.290532][ T7948] CPU: 1 UID: 0 PID: 7948 Comm: syz.2.681 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 384.290567][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.290580][ T7948] Call Trace: [ 384.290589][ T7948] [ 384.290598][ T7948] dump_stack_lvl+0xe8/0x150 [ 384.290661][ T7948] should_fail_ex+0x46b/0x600 [ 384.290696][ T7948] should_failslab+0xa8/0x100 [ 384.290730][ T7948] __kmalloc_noprof+0xfb/0x790 [ 384.290756][ T7948] ? tomoyo_realpath_from_path+0xef/0x640 [ 384.290782][ T7948] ? tomoyo_realpath_from_path+0xef/0x640 [ 384.290814][ T7948] tomoyo_realpath_from_path+0xef/0x640 [ 384.290851][ T7948] ? tomoyo_path_number_perm+0x219/0x5f0 [ 384.290872][ T7948] tomoyo_path_number_perm+0x246/0x5f0 [ 384.290896][ T7948] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.290916][ T7948] ? __lock_acquire+0x6df/0x2e40 [ 384.290956][ T7948] ? hook_file_ioctl+0x1f5/0x610 [ 384.291034][ T7948] ? __fget_files+0x2a/0x420 [ 384.291057][ T7948] ? __fget_files+0x2a/0x420 [ 384.291074][ T7948] ? __fget_files+0x3a8/0x420 [ 384.291092][ T7948] ? __fget_files+0x2a/0x420 [ 384.291114][ T7948] security_file_ioctl+0xc3/0x2a0 [ 384.291139][ T7948] __se_sys_ioctl+0x47/0x170 [ 384.291165][ T7948] do_syscall_64+0x166/0x520 [ 384.291189][ T7948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.291208][ T7948] ? clear_bhb_loop+0x70/0xc0 [ 384.291232][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.291251][ T7948] RIP: 0033:0x7fcffdfce159 [ 384.291281][ T7948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.291299][ T7948] RSP: 002b:00007fcffc226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.291323][ T7948] RAX: ffffffffffffffda RBX: 00007fcffe255fa0 RCX: 00007fcffdfce159 [ 384.291338][ T7948] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 384.291352][ T7948] RBP: 00007fcffe065024 R08: 0000000000000000 R09: 0000000000000000 [ 384.291365][ T7948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.291377][ T7948] R13: 00007fcffe256038 R14: 00007fcffe255fa0 R15: 00007ffe6eecfdb8 [ 384.291409][ T7948] [ 384.291436][ T7948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 384.366616][ T7952] netlink: 96 bytes leftover after parsing attributes in process `syz.1.680'. [ 384.427557][ T6997] usb 5-1: USB disconnect, device number 20 [ 384.922593][ T7948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.123778][ T7959] binder: 7958:7959 ioctl 4018620d 0 returned -22 [ 385.173649][ T7957] Mount JFS Failure: -5 [ 385.173754][ T7957] jfs_mount failed w/return code = -5 [ 387.252865][ T7973] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 387.312252][ T36] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 387.349646][ T7975] netlink: 'syz.4.690': attribute type 3 has an invalid length. [ 387.358121][ T7975] netlink: 'syz.4.690': attribute type 3 has an invalid length. [ 387.510004][ T7978] kAFS: bad VL server IP address [ 387.560098][ T7978] kAFS: No cell specified [ 387.689349][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 387.720863][ T36] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 387.803679][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.815578][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.815723][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.293683][ T36] usb 2-1: config 0 descriptor?? [ 390.003304][ T36] usb 2-1: can't set config #0, error -71 [ 390.033066][ T36] usb 2-1: USB disconnect, device number 25 [ 390.294258][ T7986] netlink: 96 bytes leftover after parsing attributes in process `syz.3.692'. [ 391.667875][ T7995] binder: 7994:7995 ioctl 4018620d 0 returned -22 [ 395.843498][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 396.233462][ T8014] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 396.599256][ T36] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 396.719426][ T6996] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 396.750178][ T36] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 396.761928][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.761967][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.762010][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.814921][ T36] usb 3-1: config 0 descriptor?? [ 396.939533][ T6996] usb 5-1: Using ep0 maxpacket: 32 [ 396.941747][ T6996] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 396.965281][ T6996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.965388][ T6996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.965432][ T6996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.014932][ T6996] usb 5-1: config 0 descriptor?? [ 397.505774][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 397.507841][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 397.509525][ T36] usbhid 3-1:0.0: can't add hid device: -32 [ 397.509710][ T36] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 397.566572][ T36] usb 3-1: USB disconnect, device number 17 [ 397.578380][ T6996] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 397.578500][ T6996] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 397.687451][ T6996] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 397.898653][ T6996] ft260 0003:0403:6030.000F: failed to retrieve system status [ 397.899464][ T6996] ft260 0003:0403:6030.000F: probe with driver ft260 failed with error -32 [ 397.992281][ T6996] usb 5-1: USB disconnect, device number 21 [ 398.049339][ T8021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.694'. [ 398.057503][ T8030] netlink: 96 bytes leftover after parsing attributes in process `syz.3.707'. [ 398.066830][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 398.066896][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 398.355816][ T8037] binder: 8035:8037 ioctl 4018620d 0 returned -22 [ 401.549346][ T2882] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.551660][ T2882] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.551708][ T2882] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.551747][ T2882] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.924548][ T8056] kAFS: bad VL server IP address [ 401.995183][ T8056] kAFS: No cell specified [ 405.851488][ T8072] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 405.875371][ T8073] netlink: 96 bytes leftover after parsing attributes in process `syz.3.719'. [ 406.189293][ T36] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 406.204085][ T8079] FAULT_INJECTION: forcing a failure. [ 406.204085][ T8079] name failslab, interval 1, probability 0, space 0, times 0 [ 406.204132][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.4.722 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 406.204159][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.204173][ T8079] Call Trace: [ 406.204182][ T8079] [ 406.204192][ T8079] dump_stack_lvl+0xe8/0x150 [ 406.204237][ T8079] should_fail_ex+0x46b/0x600 [ 406.204274][ T8079] should_failslab+0xa8/0x100 [ 406.204311][ T8079] __kmalloc_noprof+0xfb/0x790 [ 406.204339][ T8079] ? tomoyo_realpath_from_path+0xef/0x640 [ 406.204366][ T8079] ? tomoyo_realpath_from_path+0xef/0x640 [ 406.204400][ T8079] tomoyo_realpath_from_path+0xef/0x640 [ 406.204437][ T8079] ? tomoyo_path_number_perm+0x219/0x5f0 [ 406.204462][ T8079] tomoyo_path_number_perm+0x246/0x5f0 [ 406.204486][ T8079] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 406.204510][ T8079] ? __lock_acquire+0x6df/0x2e40 [ 406.204559][ T8079] ? hook_file_ioctl+0x1f5/0x610 [ 406.204608][ T8079] ? __fget_files+0x2a/0x420 [ 406.204635][ T8079] ? __fget_files+0x2a/0x420 [ 406.204657][ T8079] ? __fget_files+0x3a8/0x420 [ 406.204678][ T8079] ? __fget_files+0x2a/0x420 [ 406.204707][ T8079] security_file_ioctl+0xc3/0x2a0 [ 406.204734][ T8079] __se_sys_ioctl+0x47/0x170 [ 406.204793][ T8079] do_syscall_64+0x166/0x520 [ 406.204819][ T8079] ? trace_irq_disable+0x3b/0x140 [ 406.204887][ T8079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.204910][ T8079] ? clear_bhb_loop+0x70/0xc0 [ 406.204936][ T8079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.204957][ T8079] RIP: 0033:0x7f858acae159 [ 406.204978][ T8079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.204996][ T8079] RSP: 002b:00007f8588f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.205022][ T8079] RAX: ffffffffffffffda RBX: 00007f858af35fa0 RCX: 00007f858acae159 [ 406.205037][ T8079] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 406.205052][ T8079] RBP: 00007f858ad45024 R08: 0000000000000000 R09: 0000000000000000 [ 406.205065][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.205077][ T8079] R13: 00007f858af36038 R14: 00007f858af35fa0 R15: 00007ffff6b516b8 [ 406.205111][ T8079] [ 406.205144][ T8079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.250636][ T8079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.349319][ T998] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 406.533431][ T36] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 406.543236][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.543275][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.543315][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.702915][ T36] usb 4-1: config 0 descriptor?? [ 406.799205][ T998] usb 1-1: Using ep0 maxpacket: 8 [ 406.807862][ T998] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 406.835366][ T998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.844619][ T998] usb 1-1: Product: syz [ 406.844643][ T998] usb 1-1: Manufacturer: syz [ 406.844751][ T998] usb 1-1: SerialNumber: syz [ 406.907225][ T998] usb 1-1: config 0 descriptor?? [ 406.954497][ T998] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 406.964756][ T998] pctv452e: pctv452e_power_ctrl: 1 [ 406.964756][ T998] [ 406.964889][ T998] usb 1-1: selecting invalid altsetting 3 [ 406.964906][ T998] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 406.964906][ T998] [ 406.965019][ T998] dvb-usb: bulk message failed: -22 (5/0) [ 407.027128][ T998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 407.043791][ T998] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 407.052666][ T998] usb 1-1: media controller created [ 407.074107][ T998] dvb-usb: bulk message failed: -22 (8/0) [ 407.074242][ T998] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 407.084088][ T998] dvb-usb: MAC address reading failed. [ 407.115706][ T998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.147387][ T8077] dvb-usb: bulk message failed: -22 (7/0) [ 407.153442][ T8077] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 407.289291][ T6996] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 407.362505][ T8088] loop0: detected capacity change from 0 to 21 [ 407.378146][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 407.379131][ T36] usbhid 4-1:0.0: can't add hid device: -71 [ 407.379266][ T36] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 407.403851][ T36] usb 4-1: USB disconnect, device number 21 [ 407.451528][ T6996] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 407.467322][ T8088] loop0: [ 407.485931][ T6996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.495286][ T6996] usb 2-1: Product: syz [ 407.495312][ T6996] usb 2-1: Manufacturer: syz [ 407.495327][ T6996] usb 2-1: SerialNumber: syz [ 407.522733][ T998] DVB: Unable to find symbol stb0899_attach() [ 407.522826][ T998] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 407.564427][ T6996] r8152-cfgselector 2-1: Unknown version 0x0000 [ 407.571882][ T6996] r8152-cfgselector 2-1: config 0 descriptor?? [ 407.836705][ T8090] smpboot: CPU 1 is now offline [ 407.910891][ T998] rc_core: IR keymap rc-tt-1500 not found [ 407.910964][ T998] Registered IR keymap rc-empty [ 407.912789][ T998] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 407.927248][ T998] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input41 [ 407.934088][ T998] dvb-usb: schedule remote query interval to 100 msecs. [ 407.934108][ T998] pctv452e: pctv452e_power_ctrl: 0 [ 407.934108][ T998] [ 407.934115][ T998] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 407.966472][ T998] usb 1-1: USB disconnect, device number 27 [ 408.271696][ T998] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 408.494332][ T8105] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 412.868657][ T6996] r8152-cfgselector 2-1: USB disconnect, device number 26 [ 413.586802][ T8124] loop0: detected capacity change from 0 to 21 [ 413.711105][ T8124] loop0: [ 413.719958][ T4966] loop0: [ 418.646299][ T8148] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 420.310374][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.749'. [ 420.570590][ T8166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.754'. [ 421.236236][ T6996] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 421.515648][ T6996] usb 3-1: Using ep0 maxpacket: 32 [ 421.517978][ T6996] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 421.521134][ T6996] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 421.521153][ T6996] usb 3-1: config 0 has no interface number 0 [ 421.551694][ T6996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.551718][ T6996] usb 3-1: Product: syz [ 421.551727][ T6996] usb 3-1: Manufacturer: syz [ 421.551735][ T6996] usb 3-1: SerialNumber: syz [ 421.574167][ T6996] usb 3-1: config 0 descriptor?? [ 425.393445][ T6996] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 425.393704][ T6996] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 425.475713][ T6996] usb 3-1: USB disconnect, device number 18 [ 426.772709][ T8199] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 427.133186][ T5606] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 427.309204][ T5606] usb 1-1: Using ep0 maxpacket: 32 [ 427.309779][ T5606] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 427.310712][ T5606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.310730][ T5606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.310753][ T5606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.380329][ T5606] usb 1-1: config 0 descriptor?? [ 427.710198][ T5609] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 427.845237][ T5606] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 427.845264][ T5606] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 428.011115][ T5609] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 428.019667][ T5609] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 428.019687][ T5609] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 428.019700][ T5609] usb 2-1: config 0 has no interface number 0 [ 428.019729][ T5609] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 428.019743][ T5609] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.020267][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.027231][ T5606] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 428.042421][ T5609] usb 2-1: config 0 descriptor?? [ 428.228413][ T5606] ft260 0003:0403:6030.0010: failed to retrieve system status [ 428.228826][ T5606] ft260 0003:0403:6030.0010: probe with driver ft260 failed with error -5 [ 428.455216][ T5794] usb 1-1: USB disconnect, device number 28 [ 428.485303][ T8208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.767'. [ 428.603441][ T5609] usb 2-1: USB disconnect, device number 27 [ 430.482226][ T8229] nfs4: Bad value for 'source' [ 430.569249][ T5794] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 430.618059][ T8233] netlink: 'syz.3.765': attribute type 3 has an invalid length. [ 430.618266][ T8233] netlink: 'syz.3.765': attribute type 3 has an invalid length. [ 430.729321][ T5794] usb 2-1: Using ep0 maxpacket: 8 [ 430.739214][ T5609] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 430.866907][ T5794] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 430.884358][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.884380][ T5794] usb 2-1: Product: syz [ 430.884389][ T5794] usb 2-1: Manufacturer: syz [ 430.884398][ T5794] usb 2-1: SerialNumber: syz [ 430.898361][ T5794] usb 2-1: config 0 descriptor?? [ 430.921788][ T5794] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 430.921884][ T5794] pctv452e: pctv452e_power_ctrl: 1 [ 430.921884][ T5794] [ 430.921918][ T5794] usb 2-1: selecting invalid altsetting 3 [ 430.921928][ T5794] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 430.921928][ T5794] [ 430.921939][ T5794] dvb-usb: bulk message failed: -22 (5/0) [ 430.931314][ T5609] usb 1-1: Using ep0 maxpacket: 32 [ 430.937572][ T5609] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 430.940631][ T5609] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 430.940665][ T5609] usb 1-1: config 0 has no interface number 0 [ 430.965395][ T5609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.965418][ T5609] usb 1-1: Product: syz [ 430.965426][ T5609] usb 1-1: Manufacturer: syz [ 430.965435][ T5609] usb 1-1: SerialNumber: syz [ 430.993706][ T5609] usb 1-1: config 0 descriptor?? [ 431.030674][ T5794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 431.033590][ T5794] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 431.033631][ T5794] usb 2-1: media controller created [ 431.033748][ T5794] dvb-usb: bulk message failed: -22 (8/0) [ 431.033758][ T5794] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 431.033799][ T5794] dvb-usb: MAC address reading failed. [ 431.180470][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.205699][ T8223] dvb-usb: bulk message failed: -22 (7/0) [ 431.205772][ T8223] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 431.371510][ T6996] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 431.445714][ T5609] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 431.445740][ T5609] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 431.525346][ T5794] DVB: Unable to find symbol stb0899_attach() [ 431.525363][ T5794] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 431.559275][ T5737] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 431.599694][ T6996] usb 4-1: Using ep0 maxpacket: 16 [ 431.600524][ T6996] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 431.611295][ T6996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.611318][ T6996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.611332][ T6996] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 431.611357][ T6996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.652409][ T6996] usb 4-1: config 0 descriptor?? [ 431.720019][ T5737] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 431.721732][ T5737] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 431.721751][ T5737] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 431.721815][ T5737] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 431.722428][ T5737] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.724410][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 431.724426][ T5737] usb 5-1: Product: syz [ 431.724435][ T5737] usb 5-1: Manufacturer: syz [ 431.804013][ T5737] cdc_wdm 5-1:1.0: skipping garbage [ 431.804030][ T5737] cdc_wdm 5-1:1.0: skipping garbage [ 431.804052][ T5737] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 431.970277][ T5794] rc_core: IR keymap rc-tt-1500 not found [ 431.970295][ T5794] Registered IR keymap rc-empty [ 431.980547][ T5794] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 431.992616][ T8239] input input43: cannot allocate more than FF_MAX_EFFECTS effects [ 432.033141][ T5794] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input44 [ 432.046626][ T5794] dvb-usb: schedule remote query interval to 100 msecs. [ 432.046645][ T5794] pctv452e: pctv452e_power_ctrl: 0 [ 432.046645][ T5794] [ 432.046652][ T5794] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 432.092345][ T5794] usb 5-1: USB disconnect, device number 22 [ 432.172334][ T5737] dvb-usb: bulk message failed: -22 (4/0) [ 432.172407][ T5737] dvb-usb: error -22 while querying for an remote control event. [ 432.283014][ T5737] dvb-usb: bulk message failed: -22 (4/0) [ 432.283161][ T5737] dvb-usb: error -22 while querying for an remote control event. [ 432.396597][ T5794] dvb-usb: bulk message failed: -22 (4/0) [ 432.396624][ T5794] dvb-usb: error -22 while querying for an remote control event. [ 432.490523][ T6996] usbhid 4-1:0.0: can't add hid device: -71 [ 432.490653][ T6996] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 432.499496][ T5606] dvb-usb: bulk message failed: -22 (4/0) [ 432.499525][ T5606] dvb-usb: error -22 while querying for an remote control event. [ 432.552616][ T6996] usb 4-1: USB disconnect, device number 22 [ 432.617102][ T5606] dvb-usb: bulk message failed: -22 (4/0) [ 432.617128][ T5606] dvb-usb: error -22 while querying for an remote control event. [ 432.720654][ T5606] dvb-usb: bulk message failed: -22 (4/0) [ 432.720680][ T5606] dvb-usb: error -22 while querying for an remote control event. [ 432.723635][ T5606] usb 2-1: USB disconnect, device number 28 [ 433.020378][ T8249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.778'. [ 434.358471][ T5609] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 434.358656][ T5609] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 434.389046][ T5606] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 434.509244][ T6997] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 434.685518][ T5794] usb 1-1: USB disconnect, device number 29 [ 434.771311][ T6997] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 434.774681][ T6997] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 434.774701][ T6997] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 434.774714][ T6997] usb 5-1: config 0 has no interface number 0 [ 434.774741][ T6997] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 434.774754][ T6997] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 434.774776][ T6997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.786339][ T6997] usb 5-1: config 0 descriptor?? [ 435.916617][ T8272] ima: policy update failed [ 435.965674][ T37] audit: type=1807 audit(1788714919.252:2): UNKNOWN=meas res=0 [ 435.965714][ T37] audit: type=1802 audit(1788714919.252:3): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.0.787" res=0 errno=0 [ 435.965754][ T37] audit: type=1802 audit(1788714919.252:4): pid=8272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.787" res=0 errno=0 [ 437.094155][ T8281] loop0: detected capacity change from 0 to 21 [ 437.592187][ T5606] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 438.299218][ T5606] usb 2-1: Using ep0 maxpacket: 8 [ 438.317011][ T5606] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 438.646774][ T8287] netlink: 40 bytes leftover after parsing attributes in process `syz.3.791'. [ 438.784811][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.789291][ T6997] usb 5-1: USB disconnect, device number 23 [ 438.803993][ T5606] usb 2-1: config 0 descriptor?? [ 438.841543][ T8281] Dev loop0: unable to read RDB block 8 [ 438.841585][ T8281] loop0: unable to read partition table [ 438.841711][ T8281] loop0: partition table beyond EOD, truncated [ 438.841738][ T8281] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 438.854628][ T5606] usb 2-1: can't set config #0, error -71 [ 438.945555][ T5606] usb 2-1: USB disconnect, device number 29 [ 439.091947][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.793'. [ 443.604863][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.604912][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.050153][ T8321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.804'. [ 444.279302][ T8327] loop0: detected capacity change from 0 to 21 [ 444.326234][ T6996] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 444.459012][ T8329] loop0: unable to read partition table [ 444.481496][ T8329] loop0: partition table beyond EOD, truncated [ 444.481527][ T8329] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 444.490694][ T6996] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 444.492616][ T6996] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 444.492640][ T6996] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 444.492653][ T6996] usb 3-1: config 0 has no interface number 0 [ 444.492682][ T6996] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 444.492696][ T6996] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 444.492721][ T6996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.520488][ T6996] usb 3-1: config 0 descriptor?? [ 444.607107][ T8332] netlink: 'syz.4.808': attribute type 3 has an invalid length. [ 444.607299][ T8332] netlink: 'syz.4.808': attribute type 3 has an invalid length. [ 445.142498][ T6996] usb 3-1: USB disconnect, device number 19 [ 449.709611][ T6997] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 453.552188][ T6997] usb 5-1: device descriptor read/all, error -71 [ 453.819355][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.818'. [ 453.964203][ T8373] loop0: detected capacity change from 0 to 21 [ 454.024136][ T8373] loop0: unable to read partition table [ 454.024284][ T8373] loop0: partition table beyond EOD, truncated [ 454.024299][ T8373] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 455.443074][ T8375] ima: policy update failed [ 455.533937][ T37] audit: type=1804 audit(1788714938.782:5): pid=8376 uid=0 auid=4294967295 ses=4294967295 subj=_ op=measuring_policy cause=store_entry comm="syz.1.821" name="ima_policy_written" res=0 errno=-17 [ 455.533979][ T37] audit: type=1807 audit(1788714938.782:6): UNKNOWN=meas res=0 [ 455.534001][ T37] audit: type=1802 audit(1788714938.782:7): pid=8376 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.1.821" res=0 errno=0 [ 455.534023][ T37] audit: type=1802 audit(1788714938.782:8): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.821" res=0 errno=0 [ 461.030144][ T5609] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 461.039443][ T6997] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 461.399344][ T6997] usb 5-1: Using ep0 maxpacket: 8 [ 461.409449][ T5609] usb 4-1: Using ep0 maxpacket: 32 [ 461.519759][ T6997] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 461.671013][ T5609] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 461.842901][ T5609] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.842941][ T5609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.075562][ T6997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.075586][ T6997] usb 5-1: Product: syz [ 463.075595][ T6997] usb 5-1: Manufacturer: syz [ 463.075604][ T6997] usb 5-1: SerialNumber: syz [ 463.237718][ T5609] usb 4-1: config 0 descriptor?? [ 464.114166][ T6997] usb 5-1: config 0 descriptor?? [ 464.125680][ T5609] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 464.376675][ T6997] usb 5-1: can't set config #0, error -71 [ 464.412513][ T5794] usb 4-1: USB disconnect, device number 24 [ 464.439216][ T6997] usb 5-1: USB disconnect, device number 26 [ 465.325573][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 466.256749][ T5794] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 466.449913][ T5794] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 466.451043][ T5794] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 466.451062][ T5794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.451074][ T5794] usb 1-1: config 0 has no interface number 0 [ 466.452555][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 466.452615][ T5794] usb 1-1: Product: syz [ 466.452625][ T5794] usb 1-1: SerialNumber: syz [ 466.575504][ T5794] usb 1-1: config 0 descriptor?? [ 470.019166][ T5606] usb 1-1: USB disconnect, device number 30 [ 470.241336][ T8454] loop0: detected capacity change from 0 to 1 [ 470.460330][ T6997] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 470.507915][ T8454] ldm_validate_privheads(): Disk read failed. [ 470.508177][ T8454] loop0: [ 470.508191][ T8454] loop0: partition table partially beyond EOD, truncated [ 470.589823][ T5606] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 470.621015][ T6997] usb 3-1: Using ep0 maxpacket: 32 [ 470.621750][ T6997] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 470.623559][ T6997] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.623595][ T6997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.664996][ T6997] usb 3-1: config 0 descriptor?? [ 470.686749][ T6997] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 470.739235][ T5606] usb 5-1: Using ep0 maxpacket: 8 [ 470.740633][ T5606] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 470.764923][ T5606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.764946][ T5606] usb 5-1: Product: syz [ 470.764955][ T5606] usb 5-1: Manufacturer: syz [ 470.764964][ T5606] usb 5-1: SerialNumber: syz [ 470.801665][ T5606] usb 5-1: config 0 descriptor?? [ 471.388955][ T5606] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 471.388998][ T5606] pctv452e: pctv452e_power_ctrl: 1 [ 471.388998][ T5606] [ 471.389027][ T5606] usb 5-1: selecting invalid altsetting 3 [ 471.389037][ T5606] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 471.389037][ T5606] [ 471.389162][ T5606] dvb-usb: bulk message failed: -22 (5/0) [ 471.434089][ T8463] netlink: 32 bytes leftover after parsing attributes in process `syz.1.851'. [ 471.576183][ T5606] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.578834][ T5606] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 471.578874][ T5606] usb 5-1: media controller created [ 471.578908][ T5606] dvb-usb: bulk message failed: -22 (8/0) [ 471.578918][ T5606] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 471.578949][ T5606] dvb-usb: MAC address reading failed. [ 471.894506][ T5606] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.695749][ T5606] DVB: Unable to find symbol stb0899_attach() [ 472.695764][ T5606] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 472.822463][ T5606] rc_core: IR keymap rc-tt-1500 not found [ 472.822482][ T5606] Registered IR keymap rc-empty [ 472.825167][ T5606] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 472.828142][ T5606] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input47 [ 472.941825][ T5606] dvb-usb: schedule remote query interval to 100 msecs. [ 472.941843][ T5606] pctv452e: pctv452e_power_ctrl: 0 [ 472.941843][ T5606] [ 472.941850][ T5606] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 473.049311][ T5606] dvb-usb: bulk message failed: -22 (4/0) [ 473.049345][ T5606] dvb-usb: error -22 while querying for an remote control event. [ 473.081542][ T6997] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 473.159324][ T5606] dvb-usb: bulk message failed: -22 (4/0) [ 473.159352][ T5606] dvb-usb: error -22 while querying for an remote control event. [ 474.160241][ T5606] dvb-usb: bulk message failed: -22 (4/0) [ 474.160269][ T5606] dvb-usb: error -22 while querying for an remote control event. [ 474.429236][ T6997] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 474.822729][ T6997] usb 2-1: config 0 has an invalid interface number: 159 but max is 0 [ 474.822752][ T6997] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.822764][ T6997] usb 2-1: config 0 has no interface number 0 [ 476.297006][ T5609] dvb-usb: bulk message failed: -22 (4/0) [ 476.297076][ T5609] dvb-usb: error -22 while querying for an remote control event. [ 476.399643][ T5606] dvb-usb: bulk message failed: -22 (4/0) [ 476.399671][ T5606] dvb-usb: error -22 while querying for an remote control event. [ 476.491109][ T5609] usb 5-1: USB disconnect, device number 27 [ 476.535408][ T6997] usb 2-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 476.557305][ T6997] usb 2-1: config 0 descriptor?? [ 476.584981][ T6997] usb 2-1: can't set config #0, error -71 [ 476.599163][ T6997] usb 2-1: USB disconnect, device number 30 [ 476.779375][ T5606] usb 3-1: USB disconnect, device number 20 [ 477.312538][ T5609] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 480.749191][ T5606] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 480.752744][ T8506] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 480.834334][ T8519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.865'. [ 480.953644][ T5606] usb 3-1: device descriptor read/64, error -71 [ 481.292384][ T5606] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 481.698002][ T5606] usb 3-1: device descriptor read/64, error -71 [ 481.800402][ T5606] usb usb3-port1: attempt power cycle [ 482.139289][ T6997] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 482.182398][ T8540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.289170][ T6997] usb 4-1: Using ep0 maxpacket: 8 [ 482.293291][ T6997] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 482.297166][ T6997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.297185][ T6997] usb 4-1: Product: syz [ 482.297194][ T6997] usb 4-1: Manufacturer: syz [ 482.297203][ T6997] usb 4-1: SerialNumber: syz [ 482.317091][ T6997] usb 4-1: config 0 descriptor?? [ 482.361370][ T5609] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 482.391927][ T6997] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 482.391960][ T6997] pctv452e: pctv452e_power_ctrl: 1 [ 482.391960][ T6997] [ 482.391991][ T6997] usb 4-1: selecting invalid altsetting 3 [ 482.392001][ T6997] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 482.392001][ T6997] [ 482.392011][ T6997] dvb-usb: bulk message failed: -22 (5/0) [ 482.399528][ T6996] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 482.434115][ T6997] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 482.435116][ T6997] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 482.435155][ T6997] usb 4-1: media controller created [ 482.435188][ T6997] dvb-usb: bulk message failed: -22 (8/0) [ 482.435197][ T6997] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 482.435230][ T6997] dvb-usb: MAC address reading failed. [ 482.473945][ T6997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 482.512041][ T5609] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 482.515265][ T5609] usb 5-1: config 0 has an invalid interface number: 159 but max is 0 [ 482.515284][ T5609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.515295][ T5609] usb 5-1: config 0 has no interface number 0 [ 482.517549][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 482.517567][ T5609] usb 5-1: Product: syz [ 482.517576][ T5609] usb 5-1: SerialNumber: syz [ 482.529920][ T5609] usb 5-1: config 0 descriptor?? [ 482.554168][ T6996] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 482.555098][ T6996] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.555119][ T6996] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.555134][ T6996] usb 2-1: config 0 interface 0 has no altsetting 0 [ 482.555154][ T6996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.586810][ T6996] usb 2-1: config 0 descriptor?? [ 482.621049][ T8534] dvb-usb: bulk message failed: -22 (7/0) [ 482.621068][ T8534] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 482.872337][ T6997] DVB: Unable to find symbol stb0899_attach() [ 482.872353][ T6997] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 482.903044][ T5609] usb 5-1: USB disconnect, device number 28 [ 483.078441][ T6996] kye 0003:0458:501A.0011: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 483.080645][ T6996] kye 0003:0458:501A.0011: unknown main item tag 0x0 [ 483.080671][ T6996] kye 0003:0458:501A.0011: unknown main item tag 0x0 [ 483.080688][ T6996] kye 0003:0458:501A.0011: unknown main item tag 0x0 [ 483.080702][ T6996] kye 0003:0458:501A.0011: unbalanced collection at end of report description [ 483.086032][ T6996] kye 0003:0458:501A.0011: parse failed [ 483.086084][ T6996] kye 0003:0458:501A.0011: probe with driver kye failed with error -22 [ 483.202285][ T6997] rc_core: IR keymap rc-tt-1500 not found [ 483.202303][ T6997] Registered IR keymap rc-empty [ 483.203476][ T6997] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 483.255543][ T6997] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input49 [ 483.257079][ T6997] dvb-usb: schedule remote query interval to 100 msecs. [ 483.257095][ T6997] pctv452e: pctv452e_power_ctrl: 0 [ 483.257095][ T6997] [ 483.257102][ T6997] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 483.361438][ T6997] dvb-usb: bulk message failed: -22 (4/0) [ 483.361466][ T6997] dvb-usb: error -22 while querying for an remote control event. [ 483.469182][ T6997] dvb-usb: bulk message failed: -22 (4/0) [ 483.469211][ T6997] dvb-usb: error -22 while querying for an remote control event. [ 483.587038][ T6997] dvb-usb: bulk message failed: -22 (4/0) [ 483.587067][ T6997] dvb-usb: error -22 while querying for an remote control event. [ 483.594976][ T8558] FAULT_INJECTION: forcing a failure. [ 483.594976][ T8558] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 483.595004][ T8558] CPU: 0 UID: 0 PID: 8558 Comm: syz.0.878 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 483.595020][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.595032][ T8558] Call Trace: [ 483.595038][ T8558] [ 483.595044][ T8558] dump_stack_lvl+0xe8/0x150 [ 483.595069][ T8558] should_fail_ex+0x46b/0x600 [ 483.595088][ T8558] _copy_from_user+0x2d/0xb0 [ 483.595136][ T8558] __sys_bpf+0x2e7/0xd90 [ 483.595162][ T8558] ? __pfx___sys_bpf+0x10/0x10 [ 483.595185][ T8558] ? do_futex+0x3e7/0x4e0 [ 483.595231][ T8558] ? rcu_is_watching+0x16/0xb0 [ 483.595260][ T8558] __x64_sys_bpf+0xba/0xd0 [ 483.595277][ T8558] do_syscall_64+0x166/0x520 [ 483.595295][ T8558] ? trace_irq_disable+0x3b/0x140 [ 483.595311][ T8558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.595324][ T8558] ? clear_bhb_loop+0x70/0xc0 [ 483.595339][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.595351][ T8558] RIP: 0033:0x7f577fe4e159 [ 483.595365][ T8558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.595376][ T8558] RSP: 002b:00007f577e0a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 483.595392][ T8558] RAX: ffffffffffffffda RBX: 00007f57800d5fa0 RCX: 00007f577fe4e159 [ 483.595402][ T8558] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 483.595410][ T8558] RBP: 00007f577fee5024 R08: 0000000000000000 R09: 0000000000000000 [ 483.595419][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.595426][ T8558] R13: 00007f57800d6038 R14: 00007f57800d5fa0 R15: 00007ffec9d62138 [ 483.595445][ T8558] [ 483.689174][ T6997] dvb-usb: bulk message failed: -22 (4/0) [ 483.689202][ T6997] dvb-usb: error -22 while querying for an remote control event. [ 483.808696][ T6997] dvb-usb: bulk message failed: -22 (4/0) [ 483.808730][ T6997] dvb-usb: error -22 while querying for an remote control event. [ 483.909185][ T5609] dvb-usb: bulk message failed: -22 (4/0) [ 483.909211][ T5609] dvb-usb: error -22 while querying for an remote control event. [ 483.934392][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.880'. [ 484.128496][ T5609] dvb-usb: bulk message failed: -22 (4/0) [ 484.128527][ T5609] dvb-usb: error -22 while querying for an remote control event. [ 484.516396][ T5609] dvb-usb: bulk message failed: -22 (4/0) [ 484.516423][ T5609] dvb-usb: error -22 while querying for an remote control event. [ 484.619272][ T6997] dvb-usb: bulk message failed: -22 (4/0) [ 484.619296][ T6997] dvb-usb: error -22 while querying for an remote control event. [ 484.699713][ T6997] usb 4-1: USB disconnect, device number 25 [ 484.896018][ T5609] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 485.025226][ T6997] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 485.070038][ T5609] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 485.071045][ T5609] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 485.071062][ T5609] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 485.071074][ T5609] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 485.071102][ T5609] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.074810][ T5609] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 485.074828][ T5609] usb 1-1: Product: syz [ 485.074836][ T5609] usb 1-1: Manufacturer: syz [ 485.156911][ T5609] cdc_wdm 1-1:1.0: skipping garbage [ 485.156928][ T5609] cdc_wdm 1-1:1.0: skipping garbage [ 485.156950][ T5609] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 485.257581][ T5609] usb 2-1: USB disconnect, device number 31 [ 485.398885][ T8575] input input50: cannot allocate more than FF_MAX_EFFECTS effects [ 485.428537][ T6996] usb 1-1: USB disconnect, device number 31 [ 489.054079][ T8577] FAULT_INJECTION: forcing a failure. [ 489.054079][ T8577] name failslab, interval 1, probability 0, space 0, times 0 [ 489.054108][ T8577] CPU: 0 UID: 0 PID: 8577 Comm: syz.2.884 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 489.054124][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.054131][ T8577] Call Trace: [ 489.054138][ T8577] [ 489.054144][ T8577] dump_stack_lvl+0xe8/0x150 [ 489.054167][ T8577] should_fail_ex+0x46b/0x600 [ 489.054185][ T8577] should_failslab+0xa8/0x100 [ 489.054203][ T8577] ? __send_signal_locked+0x22c/0xeb0 [ 489.054246][ T8577] kmem_cache_alloc_noprof+0x9e/0x690 [ 489.054262][ T8577] ? __send_signal_locked+0x22c/0xeb0 [ 489.054276][ T8577] ? sig_get_ucounts+0x3e4/0x450 [ 489.054293][ T8577] __send_signal_locked+0x22c/0xeb0 [ 489.054311][ T8577] send_signal_locked+0x138/0x9e0 [ 489.054328][ T8577] ? __pfx_send_signal_locked+0x10/0x10 [ 489.054340][ T8577] ? rt_spin_lock+0x2d0/0x400 [ 489.054360][ T8577] ? __pfx_rt_spin_lock+0x10/0x10 [ 489.054384][ T8577] force_sig_info_to_task+0x31d/0x4b0 [ 489.054403][ T8577] force_sig_fault+0xf0/0x150 [ 489.054418][ T8577] ? __pfx_force_sig_fault+0x10/0x10 [ 489.054435][ T8577] ? __bad_area_nosemaphore+0x31e/0x6a0 [ 489.054462][ T8577] exc_page_fault+0x6a/0xc0 [ 489.054477][ T8577] asm_exc_page_fault+0x26/0x30 [ 489.054489][ T8577] RIP: 0033:0x7fcffdfb72df [ 489.054502][ T8577] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 489.054512][ T8577] RSP: 002b:00007fcffc225bd8 EFLAGS: 00010283 [ 489.054525][ T8577] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000000000 [ 489.054533][ T8577] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007fcffc225c00 [ 489.054541][ T8577] RBP: 00007fcffc225c00 R08: 0000000000000000 R09: 0000000000000000 [ 489.054548][ T8577] R10: 0000000000000000 R11: 0000000000000002 R12: cccccccccccccccd [ 489.054556][ T8577] R13: 00007fcffe256038 R14: 00007fcffe255fa0 R15: 00007ffe6eecfdb8 [ 489.054582][ T8577] [ 490.443031][ T8577] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 490.717515][ T8603] netlink: 32 bytes leftover after parsing attributes in process `syz.4.893'. [ 491.261199][ T8615] loop0: detected capacity change from 0 to 1 [ 491.759988][ T6997] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 494.385423][ T6997] usb 4-1: Using ep0 maxpacket: 8 [ 494.605355][ T6997] usb 4-1: device descriptor read/all, error -71 [ 495.293814][ T8637] input input51: cannot allocate more than FF_MAX_EFFECTS effects [ 495.321485][ T5737] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 495.492160][ T5737] usb 2-1: Using ep0 maxpacket: 32 [ 495.494384][ T5737] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 495.497023][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.497051][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.512640][ T5737] usb 2-1: config 0 descriptor?? [ 495.544391][ T5737] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 495.754344][ T8643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.906'. [ 496.941039][ T8654] loop0: detected capacity change from 0 to 1 [ 499.688775][ T5737] usb 2-1: USB disconnect, device number 32 [ 506.191722][ T8681] input input52: cannot allocate more than FF_MAX_EFFECTS effects [ 506.329232][ T5737] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 506.436103][ T8690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.918'. [ 506.499907][ T5737] usb 1-1: Using ep0 maxpacket: 8 [ 506.500809][ T5737] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 506.516154][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.516176][ T5737] usb 1-1: Product: syz [ 506.516184][ T5737] usb 1-1: Manufacturer: syz [ 506.516193][ T5737] usb 1-1: SerialNumber: syz [ 506.530287][ T5737] usb 1-1: config 0 descriptor?? [ 506.560722][ T6996] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 506.585651][ T5737] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 506.585683][ T5737] pctv452e: pctv452e_power_ctrl: 1 [ 506.585683][ T5737] [ 506.585712][ T5737] usb 1-1: selecting invalid altsetting 3 [ 506.585722][ T5737] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 506.585722][ T5737] [ 506.585732][ T5737] dvb-usb: bulk message failed: -22 (5/0) [ 506.602941][ T5737] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 506.610279][ T5737] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 506.610320][ T5737] usb 1-1: media controller created [ 506.610353][ T5737] dvb-usb: bulk message failed: -22 (8/0) [ 506.610362][ T5737] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 506.610392][ T5737] dvb-usb: MAC address reading failed. [ 506.832559][ T6996] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 506.834221][ T6996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.834242][ T6996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.834265][ T6996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.856572][ T5737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.979345][ T6996] usb 2-1: config 0 descriptor?? [ 510.243727][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.243836][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.608789][ T6996] usb 2-1: can't set config #0, error -71 [ 510.690117][ T6996] usb 2-1: USB disconnect, device number 33 [ 510.722525][ T5737] DVB: Unable to find symbol stb0899_attach() [ 510.722540][ T5737] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 510.736578][ T8704] loop0: detected capacity change from 0 to 1 [ 513.025068][ T5737] rc_core: IR keymap rc-tt-1500 not found [ 513.025088][ T5737] Registered IR keymap rc-empty [ 513.048548][ T5737] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 514.026448][ T5737] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input53 [ 514.050951][ T5737] dvb-usb: schedule remote query interval to 100 msecs. [ 514.050969][ T5737] pctv452e: pctv452e_power_ctrl: 0 [ 514.050969][ T5737] [ 514.050977][ T5737] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 514.174295][ T5737] usb 1-1: USB disconnect, device number 32 [ 517.090461][ T8736] input input54: cannot allocate more than FF_MAX_EFFECTS effects [ 517.182051][ T5737] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 517.236661][ T8739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.930'. [ 517.800907][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 517.869602][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 517.871848][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 517.881441][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 517.883594][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 518.015037][ T8748] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 518.057439][ T6996] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 518.233889][ T6996] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 518.235691][ T6996] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.235711][ T6996] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.235735][ T6996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.253394][ T6996] usb 1-1: config 0 descriptor?? [ 522.738839][ T5604] Bluetooth: hci5: command tx timeout [ 523.115790][ T6996] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 523.115816][ T6996] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 523.115831][ T6996] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 523.115846][ T6996] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 523.115860][ T6996] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 523.115874][ T6996] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 523.115889][ T6996] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 523.884531][ T6996] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 523.944372][ T6996] cp2112 0003:10C4:EA90.0012: error requesting version [ 523.990664][ T6996] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 524.164468][ T6996] usb 1-1: USB disconnect, device number 33 [ 524.389844][ T8775] udevd[8775]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 524.838900][ T5604] Bluetooth: hci5: command tx timeout [ 525.975559][ T8793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.942'. [ 526.199153][ T6997] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 526.365324][ T6997] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 526.368295][ T6997] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.368319][ T6997] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.368335][ T6997] usb 4-1: config 0 interface 0 has no altsetting 0 [ 526.368356][ T6997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.382412][ T6997] usb 4-1: config 0 descriptor?? [ 526.859520][ T5604] Bluetooth: hci5: command tx timeout [ 526.968952][ T6997] kye 0003:0458:501A.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 526.970196][ T6997] kye 0003:0458:501A.0013: unknown main item tag 0x0 [ 526.970218][ T6997] kye 0003:0458:501A.0013: unbalanced collection at end of report description [ 526.975196][ T6997] kye 0003:0458:501A.0013: parse failed [ 526.975246][ T6997] kye 0003:0458:501A.0013: probe with driver kye failed with error -22 [ 527.126035][ T8792] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 531.169117][ T5604] Bluetooth: hci5: command tx timeout [ 532.626030][ T6997] usb 4-1: USB disconnect, device number 28 [ 533.260321][ T8825] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 537.287149][ T8843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.796937][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.797024][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.797162][ T8744] bridge_slave_0: entered allmulticast mode [ 543.817259][ T8744] bridge_slave_0: entered promiscuous mode [ 543.912471][ T8861] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 543.922705][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.922795][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.922946][ T8744] bridge_slave_1: entered allmulticast mode [ 543.968806][ T8744] bridge_slave_1: entered promiscuous mode [ 546.748214][ T8744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.765929][ T8744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.964062][ T8744] team0: Port device team_slave_0 added [ 546.985893][ T8744] team0: Port device team_slave_1 added [ 547.191153][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.191175][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.191242][ T8744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.206327][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.206375][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.206429][ T8744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.668795][ T8744] hsr_slave_0: entered promiscuous mode [ 547.698180][ T8744] hsr_slave_1: entered promiscuous mode [ 547.701259][ T8744] debugfs: 'hsr0' already exists in 'hsr' [ 547.701288][ T8744] Cannot create hsr debugfs directory [ 552.158124][ T8883] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 552.770886][ T8873] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 552.779660][ T8873] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 552.779703][ T8873] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 553.037185][ T8873] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 553.287318][ T8873] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 553.725089][ T8744] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 553.791184][ T8744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.803563][ T8744] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 553.931919][ T8744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.940617][ T8744] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 554.242112][ T8744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 555.197627][ T8744] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 555.340298][ T8744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.965206][ T8744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.021359][ T8744] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.717455][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.717793][ T8187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.851836][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.852057][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.375381][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.980'. [ 566.058614][ T8744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.403936][ T8973] ima: policy update failed [ 568.055005][ T37] audit: type=1804 audit(1788715050.362:9): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj=_ op=measuring_policy cause=store_entry comm="syz.2.985" name="ima_policy_written" res=0 errno=-17 [ 568.055065][ T37] audit: type=1807 audit(1788715050.372:10): UNKNOWN=meas res=0 [ 568.055103][ T37] audit: type=1802 audit(1788715050.372:11): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.2.985" res=0 errno=0 [ 568.055223][ T37] audit: type=1802 audit(1788715050.742:12): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.985" res=0 errno=0 [ 571.529268][ T8744] veth0_vlan: entered promiscuous mode [ 571.665785][ T8744] veth1_vlan: entered promiscuous mode [ 571.853570][ T8744] veth0_macvtap: entered promiscuous mode [ 571.875308][ T8744] veth1_macvtap: entered promiscuous mode [ 572.558519][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.580940][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.923426][ T8188] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.130978][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.143308][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.179256][ T2882] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.551892][ T9019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.993'. [ 573.758127][ T9020] jffs2: notice: (9020) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 573.776457][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.817351][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 577.185175][ T12] IPVS: starting estimator thread 0... [ 577.500549][ T9033] IPVS: using max 7 ests per chain, 16800 per kthread [ 577.923454][ T9042] ima: policy update failed [ 577.923968][ T37] audit: type=1804 audit(1788715061.262:13): pid=9044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=measuring_policy cause=store_entry comm="syz.3.1000" name="ima_policy_written" res=0 errno=-17 [ 577.924021][ T37] audit: type=1807 audit(1788715061.262:14): UNKNOWN=meas res=0 [ 578.317887][ T9043] ima: policy update failed [ 578.331787][ T37] audit: type=1802 audit(1788715061.262:15): pid=9044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.3.1000" res=0 errno=0 [ 578.331872][ T37] audit: type=1802 audit(1788715061.262:16): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.3.1000" res=0 errno=0 [ 578.331947][ T37] audit: type=1804 audit(1788715061.532:17): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=_ op=measuring_policy cause=store_entry comm="syz.0.998" name="ima_policy_written" res=0 errno=-17 [ 578.332017][ T37] audit: type=1807 audit(1788715061.532:18): UNKNOWN=meas res=0 [ 578.332081][ T37] audit: type=1802 audit(1788715061.532:19): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.0.998" res=0 errno=0 [ 578.332148][ T37] audit: type=1802 audit(1788715061.652:20): pid=9043 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.998" res=0 errno=0 [ 578.334220][ T5606] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 578.522619][ T5606] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 578.522751][ T5606] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 578.530086][ T5606] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.534536][ T5606] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.555732][ T5606] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.595501][ T5606] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.627688][ T5606] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.652907][ T5606] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.657626][ T5606] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.680770][ T5606] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.685137][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.798045][ T5606] usb 2-1: config 0 descriptor?? [ 578.914855][ T9055] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 578.947206][ T5606] pwc: Askey VC010 type 2 USB webcam detected. [ 578.954275][ T5606] pwc: Warning: more than 1 configuration available. [ 578.968776][ T9055] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 578.992353][ T9055] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 579.014074][ T9055] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 579.047311][ T9040] capability: warning: `syz.1.999' uses deprecated v2 capabilities in a way that may be insecure [ 579.111851][ T9055] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 579.318741][ T5606] pwc: send_video_command error -71 [ 579.329969][ T5606] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 579.330127][ T5606] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 580.460337][ T9057] ima: policy update failed [ 580.984880][ T37] audit: type=1804 audit(1788715063.272:21): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=_ op=measuring_policy cause=store_entry comm="syz.2.1003" name="ima_policy_written" res=0 errno=-17 [ 580.984920][ T37] audit: type=1807 audit(1788715063.272:22): UNKNOWN=meas res=0 [ 581.298652][ T5606] usb 2-1: USB disconnect, device number 34 [ 582.012764][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1006'. [ 584.946330][ T5604] Bluetooth: hci1: command tx timeout [ 587.023829][ T5604] Bluetooth: hci1: command tx timeout [ 587.242990][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 587.243356][ T37] audit: type=1804 audit(1788715070.572:25): pid=9090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=measuring_policy cause=store_entry comm="syz.1.1011" name="ima_policy_written" res=0 errno=-17 [ 587.243406][ T37] audit: type=1807 audit(1788715070.582:26): UNKNOWN=meas res=0 [ 587.243439][ T37] audit: type=1802 audit(1788715070.582:27): pid=9090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.1.1011" res=0 errno=0 [ 587.355310][ T9088] ima: policy update failed [ 587.486485][ T37] audit: type=1802 audit(1788715070.712:28): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.1011" res=0 errno=0 [ 587.518788][ T9082] FAULT_INJECTION: forcing a failure. [ 587.518788][ T9082] name failslab, interval 1, probability 0, space 0, times 0 [ 587.583856][ T9082] CPU: 1 UID: 0 PID: 9082 Comm: syz.3.1008 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 587.583891][ T9082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.583905][ T9082] Call Trace: [ 587.583915][ T9082] [ 587.583926][ T9082] dump_stack_lvl+0xe8/0x150 [ 587.583969][ T9082] should_fail_ex+0x46b/0x600 [ 587.584002][ T9082] ? __alloc_empty_sheaf+0x28/0x40 [ 587.584032][ T9082] should_failslab+0xa8/0x100 [ 587.584065][ T9082] ? __alloc_empty_sheaf+0x28/0x40 [ 587.584089][ T9082] __kmalloc_flags_noprof+0x128/0x810 [ 587.584118][ T9082] ? rt_spin_unlock+0x159/0x200 [ 587.584152][ T9082] ? __alloc_empty_sheaf+0x28/0x40 [ 587.584185][ T9082] __alloc_empty_sheaf+0x28/0x40 [ 587.584212][ T9082] __pcs_replace_empty_main+0x479/0x690 [ 587.584278][ T9082] ? rt_spin_trylock+0x13a/0x2b0 [ 587.584316][ T9082] kmem_cache_alloc_noprof+0x45d/0x690 [ 587.584343][ T9082] ? mempool_init_node+0x21f/0x510 [ 587.584371][ T9082] ? mempool_init_node+0x21f/0x510 [ 587.584401][ T9082] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 587.584428][ T9082] mempool_init_node+0x21f/0x510 [ 587.584462][ T9082] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 587.584491][ T9082] mempool_create_node_noprof+0xb8/0x150 [ 587.584517][ T9082] ? __pfx_mempool_free_slab+0x10/0x10 [ 587.584549][ T9082] ceph_osdc_init+0x50a/0x910 [ 587.584675][ T9082] ceph_create_client+0x246/0x310 [ 587.584723][ T9082] ceph_get_tree+0x1ca/0x1a40 [ 587.584779][ T9082] ? cap_capable+0x123/0x460 [ 587.584803][ T9082] ? safesetid_security_capable+0xa9/0x1a0 [ 587.584836][ T9082] vfs_get_tree+0x92/0x2a0 [ 587.584878][ T9082] vfs_cmd_create+0xa2/0x200 [ 587.584925][ T9082] __se_sys_fsconfig+0x6bf/0x810 [ 587.584963][ T9082] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 587.584996][ T9082] ? rcu_is_watching+0x16/0xb0 [ 587.585037][ T9082] ? __x64_sys_fsconfig+0x20/0xc0 [ 587.585067][ T9082] do_syscall_64+0x166/0x520 [ 587.585093][ T9082] ? trace_irq_disable+0x3b/0x140 [ 587.585118][ T9082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.585140][ T9082] ? clear_bhb_loop+0x70/0xc0 [ 587.585164][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.585186][ T9082] RIP: 0033:0x7fa03ed5e159 [ 587.585208][ T9082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.585227][ T9082] RSP: 002b:00007fa03cfb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 587.585254][ T9082] RAX: ffffffffffffffda RBX: 00007fa03efe5fa0 RCX: 00007fa03ed5e159 [ 587.585269][ T9082] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 587.585282][ T9082] RBP: 00007fa03edf5024 R08: 0000000000000000 R09: 0000000000000000 [ 587.585296][ T9082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.585309][ T9082] R13: 00007fa03efe6038 R14: 00007fa03efe5fa0 R15: 00007ffc60e3bff8 [ 587.585344][ T9082] [ 587.713866][ T9082] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 589.441195][ T5604] Bluetooth: hci1: command tx timeout [ 591.297355][ T2878] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.524195][ T5604] Bluetooth: hci1: command tx timeout [ 592.401563][ T9114] netlink: 'syz.0.1016': attribute type 12 has an invalid length. [ 592.768835][ T9118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1018'. [ 592.810460][ T9118] jffs2: notice: (9118) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 593.899384][ T36] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 593.948448][ T9127] ima: policy update failed [ 593.958086][ T37] audit: type=1804 audit(1788715077.282:29): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=_ op=measuring_policy cause=store_entry comm="syz.0.1021" name="ima_policy_written" res=0 errno=-17 [ 593.981868][ T37] audit: type=1807 audit(1788715077.282:30): UNKNOWN=meas res=0 [ 593.981913][ T37] audit: type=1802 audit(1788715077.282:31): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.0.1021" res=0 errno=0 [ 593.981937][ T37] audit: type=1802 audit(1788715077.292:32): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.1021" res=0 errno=0 [ 594.114678][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 594.123417][ T36] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 594.130856][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.130961][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.131028][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.199968][ T36] usb 2-1: config 0 descriptor?? [ 595.216699][ T9134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1022'. [ 595.263779][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 595.263928][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'. [ 596.176826][ T36] usbhid 2-1:0.0: can't add hid device: -32 [ 596.185333][ T36] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 596.193171][ T2878] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.289503][ T36] usb 2-1: USB disconnect, device number 35 [ 596.406316][ T9138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1023'. [ 599.935125][ T2878] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.173430][ T9149] FAULT_INJECTION: forcing a failure. [ 600.173430][ T9149] name failslab, interval 1, probability 0, space 0, times 0 [ 600.190649][ T9149] CPU: 1 UID: 0 PID: 9149 Comm: syz.3.1028 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 600.190684][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.190698][ T9149] Call Trace: [ 600.190708][ T9149] [ 600.190719][ T9149] dump_stack_lvl+0xe8/0x150 [ 600.190758][ T9149] should_fail_ex+0x46b/0x600 [ 600.190789][ T9149] should_failslab+0xa8/0x100 [ 600.190818][ T9149] ? mempool_init_node+0x21f/0x510 [ 600.190844][ T9149] kmem_cache_alloc_noprof+0x9e/0x690 [ 600.190871][ T9149] ? mempool_init_node+0x21f/0x510 [ 600.190893][ T9149] ? mempool_init_node+0x21f/0x510 [ 600.190923][ T9149] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 600.190950][ T9149] mempool_init_node+0x21f/0x510 [ 600.190984][ T9149] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 600.191012][ T9149] mempool_create_node_noprof+0xb8/0x150 [ 600.191038][ T9149] ? __pfx_mempool_free_slab+0x10/0x10 [ 600.191066][ T9149] ceph_osdc_init+0x50a/0x910 [ 600.191106][ T9149] ceph_create_client+0x246/0x310 [ 600.191133][ T9149] ceph_get_tree+0x1ca/0x1a40 [ 600.191159][ T9149] ? cap_capable+0x123/0x460 [ 600.191181][ T9149] ? safesetid_security_capable+0xa9/0x1a0 [ 600.191211][ T9149] vfs_get_tree+0x92/0x2a0 [ 600.191240][ T9149] vfs_cmd_create+0xa2/0x200 [ 600.191273][ T9149] __se_sys_fsconfig+0x6bf/0x810 [ 600.191311][ T9149] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 600.191344][ T9149] ? rcu_is_watching+0x16/0xb0 [ 600.191395][ T9149] ? __x64_sys_fsconfig+0x20/0xc0 [ 600.191428][ T9149] do_syscall_64+0x166/0x520 [ 600.191453][ T9149] ? trace_irq_disable+0x3b/0x140 [ 600.191482][ T9149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.191504][ T9149] ? clear_bhb_loop+0x70/0xc0 [ 600.191529][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.191551][ T9149] RIP: 0033:0x7fa03ed5e159 [ 600.191573][ T9149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.191590][ T9149] RSP: 002b:00007fa03cfb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 600.191616][ T9149] RAX: ffffffffffffffda RBX: 00007fa03efe5fa0 RCX: 00007fa03ed5e159 [ 600.191633][ T9149] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 600.191648][ T9149] RBP: 00007fa03edf5024 R08: 0000000000000000 R09: 0000000000000000 [ 600.191663][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.191677][ T9149] R13: 00007fa03efe6038 R14: 00007fa03efe5fa0 R15: 00007ffc60e3bff8 [ 600.191712][ T9149] [ 600.297502][ T37] audit: type=1804 audit(1788715083.632:33): pid=9162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=measuring_policy cause=store_entry comm="syz.2.1032" name="ima_policy_written" res=0 errno=-17 [ 600.297556][ T37] audit: type=1807 audit(1788715083.632:34): UNKNOWN=meas res=0 [ 600.297588][ T37] audit: type=1802 audit(1788715083.632:35): pid=9162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.2.1032" res=0 errno=0 [ 600.297793][ T9161] ima: policy update failed [ 600.297977][ T37] audit: type=1802 audit(1788715083.632:36): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.1032" res=0 errno=0 [ 603.210861][ T5606] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 603.356764][ T5723] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 604.373545][ T27] [ 604.375953][ T27] ====================================================== [ 604.383259][ T27] WARNING: possible circular locking dependency detected [ 604.390409][ T27] syzkaller #0 Not tainted [ 604.394919][ T27] ------------------------------------------------------ [ 604.402669][ T27] migration/1/27 is trying to acquire lock: [ 604.408846][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 604.417750][ T27] [ 604.417750][ T27] but task is already holding lock: [ 604.425262][ T27] ffff88801fbc0b00 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 604.435300][ T27] [ 604.435300][ T27] which lock already depends on the new lock. [ 604.435300][ T27] [ 604.445878][ T27] [ 604.445878][ T27] the existing dependency chain (in reverse order) is: [ 604.454980][ T27] [ 604.454980][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 604.462489][ T27] _raw_spin_lock+0x2e/0x40 [ 604.467728][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 604.473897][ T27] rt_spin_lock+0x165/0x400 [ 604.479142][ T27] finish_wait+0xbe/0x1e0 [ 604.485099][ T27] synchronize_rcu_expedited+0x63e/0x770 [ 604.492873][ T27] rcu_set_runtime_mode+0x39/0x60 [ 604.499026][ T27] do_one_initcall+0x250/0x870 [ 604.504827][ T27] do_initcall_level+0x10a/0x1a0 [ 604.511056][ T27] do_initcalls+0x59/0xa0 [ 604.516372][ T27] kernel_init_freeable+0x29d/0x3e0 [ 604.523140][ T27] kernel_init+0x22/0x1d0 [ 604.528101][ T27] ret_from_fork+0x514/0xb70 [ 604.533633][ T27] ret_from_fork_asm+0x1a/0x30 [ 604.539726][ T27] [ 604.539726][ T27] -> #0 (_T->lock){....}-{2:2}: [ 604.547476][ T27] __lock_acquire+0x15ff/0x2e40 [ 604.553272][ T27] lock_acquire+0x115/0x350 [ 604.558951][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 604.565300][ T27] rt_spin_trylock+0x56/0x2b0 [ 604.571244][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 604.576849][ T27] kvfree_call_rcu+0xa4/0x430 [ 604.582539][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 604.588479][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 604.594966][ T27] select_fallback_rq+0x11e/0x200 [ 604.600755][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 604.606908][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 604.613022][ T27] smpboot_thread_fn+0x565/0xa70 [ 604.619335][ T27] kthread+0x38b/0x470 [ 604.624605][ T27] ret_from_fork+0x514/0xb70 [ 604.630386][ T27] ret_from_fork_asm+0x1a/0x30 [ 604.636363][ T27] [ 604.636363][ T27] other info that might help us debug this: [ 604.636363][ T27] [ 604.647657][ T27] Possible unsafe locking scenario: [ 604.647657][ T27] [ 604.655242][ T27] CPU0 CPU1 [ 604.660743][ T27] ---- ---- [ 604.666433][ T27] lock(&p->pi_lock); [ 604.672106][ T27] lock(_T->lock); [ 604.679242][ T27] lock(&p->pi_lock); [ 604.686747][ T27] lock(_T->lock); [ 604.690787][ T27] [ 604.690787][ T27] *** DEADLOCK *** [ 604.690787][ T27] [ 604.699038][ T27] locks held by migration/1/27: 2, last CPU#1: [ 604.706385][ T27] #0: ffff88801fbc0b00 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 604.716736][ T27] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 604.727850][ T27] [ 604.727850][ T27] stack backtrace: [ 604.734246][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 604.744958][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.755747][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 604.764741][ T27] Call Trace: [ 604.768597][ T27] [ 604.771554][ T27] dump_stack_lvl+0xe8/0x150 [ 604.776840][ T27] print_circular_bug+0x2e2/0x300 [ 604.783556][ T27] check_noncircular+0x12f/0x150 [ 604.789176][ T27] __lock_acquire+0x15ff/0x2e40 [ 604.794422][ T27] ? __bfs+0x153/0x290 [ 604.799052][ T27] ? __pfx_usage_match+0x10/0x10 [ 604.804859][ T27] ? lockdep_unlock+0x5c/0xd0 [ 604.809922][ T27] ? __lock_acquire+0x14b9/0x2e40 [ 604.815060][ T27] lock_acquire+0x115/0x350 [ 604.820118][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 604.825977][ T27] ? plist_check_list+0x2d7/0x310 [ 604.831574][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 604.837449][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 604.842748][ T27] rt_spin_trylock+0x56/0x2b0 [ 604.847993][ T27] ? enqueue_pushable_task+0x248/0x3e0 [ 604.854183][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 604.859444][ T27] kvfree_call_rcu+0xa4/0x430 [ 604.864274][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 604.869613][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 604.875300][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 604.881323][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 604.887881][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 604.894055][ T27] select_fallback_rq+0x11e/0x200 [ 604.899367][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 604.905464][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 604.911024][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.916630][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 604.922680][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 604.927817][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 604.933531][ T27] smpboot_thread_fn+0x565/0xa70 [ 604.938752][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 604.944164][ T27] kthread+0x38b/0x470 [ 604.949145][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 604.954919][ T27] ? __pfx_kthread+0x10/0x10 [ 604.959606][ T27] ret_from_fork+0x514/0xb70 [ 604.964380][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 604.970066][ T27] ? __switch_to+0xc89/0x1420 [ 604.974783][ T27] ? __pfx_kthread+0x10/0x10 [ 604.979390][ T27] ret_from_fork_asm+0x1a/0x30 [ 604.984342][ T27] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 604.987619][ T27] process 9179 (syz.3.1034) no longer affine to cpu1 [ 604.999949][ T5723] usb 2-1: device descriptor read/all, error -71 [ 605.079146][ T5606] usb 3-1: Using ep0 maxpacket: 8 [ 605.099459][ T5606] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 605.099508][ T5606] usb 3-1: no configurations [ 605.099522][ T5606] usb 3-1: can't read configurations, error -22 [ 605.190893][ T9054] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 605.249171][ T5606] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 605.321998][ T27] numa_remove_cpu cpu 1 node 0: mask now 0 [ 605.322024][ T27] numa_remove_cpu cpu 1 node 1: mask now 0 [ 605.324050][ T9184] smpboot: CPU 1 is now offline [ 605.431954][ T9185] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 605.433362][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 605.433388][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 605.437322][ T2878] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.133065][ T2878] bridge_slave_1: left allmulticast mode [ 607.133151][ T2878] bridge_slave_1: left promiscuous mode [ 607.133323][ T2878] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.289734][ T2878] bridge_slave_0: left allmulticast mode [ 607.289793][ T2878] bridge_slave_0: left promiscuous mode [ 607.289955][ T2878] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.880341][ T2878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.959726][ T2878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.981290][ T2878] bond0 (unregistering): Released all slaves [ 608.021428][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 608.411721][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 608.689218][ T2878] hsr_slave_0: left promiscuous mode [ 608.729248][ T2878] hsr_slave_1: left promiscuous mode [ 608.729997][ T2878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.730017][ T2878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.770244][ T2878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.770307][ T2878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.829565][ T2878] veth1_macvtap: left promiscuous mode [ 608.829656][ T2878] veth0_macvtap: left promiscuous mode [ 608.829744][ T2878] veth1_vlan: left promiscuous mode [ 608.829823][ T2878] veth0_vlan: left promiscuous mode [ 609.341769][ T2878] team0 (unregistering): Port device team_slave_1 removed [ 609.379549][ T2878] team0 (unregistering): Port device team_slave_0 removed [ 609.470845][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 609.768013][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 610.841574][ T2878] bond0 (unregistering): Released all slaves