last executing test programs: 4.63138931s ago: executing program 1 (id=4056): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 4.391866081s ago: executing program 1 (id=4060): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='pcspk', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') 4.391280341s ago: executing program 1 (id=4061): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x14c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.774265721s ago: executing program 0 (id=4067): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000000000000000000000700000044"], 0x38}, 0x140) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.59528748s ago: executing program 0 (id=4068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 3.50028692s ago: executing program 0 (id=4069): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x0, 0xfff, @remote}}]}, 0x110) syz_emit_ethernet(0x7b, &(0x7f0000001280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "64edd8", 0x45, 0x2f, 0xff, @private1, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "e4"}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0x9, 0x2, 0x1, 0x0, 0x2, 0x7}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0x8, 0x0, 0x1, 0x1, 0x3, 0x8}, 0x2, {0x386d, 0x4, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 3.410412658s ago: executing program 0 (id=4070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140", @ANYBLOB="5f29e21e12333f6bf8210abc0b3779191d2f5eb33aba5617fd3fca286b090d5b2edca617786e2de7d84f97e5f1becf74cc5698b6a587d8e376fc6498072c7d2260a9617a37486a8e3f6e8a1964c11cd79cc5c2f4"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x1, 0x101002) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0x200, 0x51, 0xeed3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe5, 0x4, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x8, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0xf05, 0x2, 0x91, 0x129, 0x4, 0x16, 0xc, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x5, 0x1ff, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x3, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x77, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67b3, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x4, 0x97f7, 0x3, 0x200000d, 0x3, 0x6, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0xa, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x3, 0x9, 0x3, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x9, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea1, 0x428, 0x3, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0xdab, 0x1, 0x8, 0x13fff, 0x101, 0x11]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(0xffffffffffffffff, 0xc010644d, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)='!+@\x00'}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000040)={&(0x7f00000004c0)=[{0x4, 0x0, 0x0, 0x0}], 0x1}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0x800000000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xfffffffffffffffa, 0x5, 0x400000000f2, 0x101, 0x7fdfffffffffe, 0xa, 0x5, 0xa, 0x7, 0xfffffffffffffff8, 0x9, 0x20000000000000b], 0x25000, 0x304}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x108) write(r6, &(0x7f0000000300)='a', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8=r8], 0x5c}}, 0x0) 2.454702131s ago: executing program 3 (id=4074): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)}) 2.406520271s ago: executing program 3 (id=4075): 2.334378516s ago: executing program 3 (id=4076): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000000000000000000000700000044"], 0x38}, 0x140) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.293911055s ago: executing program 3 (id=4077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 2.214973591s ago: executing program 3 (id=4078): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5, 0x800000]}}) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003c40)={0x2020}, 0x67ec255e) 2.034531619s ago: executing program 3 (id=4079): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1a5) mount(0x0, 0x0, &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x44902, 0x4b) syz_usb_control_io(r0, 0x0, 0x0) 1.98301946s ago: executing program 0 (id=4080): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='pcspk', 0x5) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') 1.950281997s ago: executing program 0 (id=4081): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.316469731s ago: executing program 1 (id=4083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)}) 1.17851158s ago: executing program 1 (id=4086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 1.026417572s ago: executing program 1 (id=4089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140", @ANYBLOB="5f29e21e12333f6bf8210abc0b3779191d2f5eb33aba5617fd3fca286b090d5b2edca617786e2de7d84f97e5f1becf74cc5698b6a587d8e376fc6498072c7d2260a9617a37486a8e3f6e8a1964c11cd79cc5c2f4"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x1, 0x101002) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0x200, 0x51, 0xeed3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe5, 0x4, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x8, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0xf05, 0x2, 0x91, 0x129, 0x4, 0x16, 0xc, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x5, 0x1ff, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x3, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x77, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67b3, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x4, 0x97f7, 0x3, 0x200000d, 0x3, 0x6, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0xa, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x3, 0x9, 0x3, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x9, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea1, 0x428, 0x3, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0xdab, 0x1, 0x8, 0x13fff, 0x101, 0x11]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(0xffffffffffffffff, 0xc010644d, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)='!+@\x00'}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000040)={&(0x7f00000004c0)=[{0x4, 0x0, 0x0, 0x0}], 0x1}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0x800000000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xfffffffffffffffa, 0x5, 0x400000000f2, 0x101, 0x7fdfffffffffe, 0xa, 0x5, 0xa, 0x7, 0xfffffffffffffff8, 0x9, 0x20000000000000b], 0x25000, 0x304}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x108) write(r6, &(0x7f0000000300)='a', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8=r8], 0x5c}}, 0x0) 401.626765ms ago: executing program 2 (id=4094): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)}) 334.938729ms ago: executing program 2 (id=4095): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000000000000000000000700000044"], 0x38}, 0x140) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 255.796405ms ago: executing program 2 (id=4096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 194.425679ms ago: executing program 2 (id=4097): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r3, 0x0, 0xfdef) 90.48037ms ago: executing program 2 (id=4098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 0s ago: executing program 2 (id=4099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): system: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1275.198634][ T8] dvb-usb: bulk message failed: -22 (4/0) [ 1275.208431][ T8] dvb-usb: error -22 while querying for an remote control event. [ 1275.318376][ T8] dvb-usb: bulk message failed: -22 (4/0) [ 1275.326490][ T8] dvb-usb: error -22 while querying for an remote control event. [ 1275.361222][ T7583] usb 2-1: USB disconnect, device number 113 [ 1275.493485][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1276.264680][T18860] loop0: detected capacity change from 0 to 3904 [ 1276.342896][T18860] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1276.364072][T18860] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1276.378622][T18860] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1276.385338][T18860] loop0: [ 1276.848331][ T789] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1277.047153][ T789] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1277.171393][ T789] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1277.296685][ T789] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1277.386278][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.466056][ T789] usb 4-1: Product: syz [ 1277.472347][ T789] usb 4-1: Manufacturer: syz [ 1277.480218][ T789] usb 4-1: SerialNumber: syz [ 1277.515023][ T789] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 1277.549990][ T789] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1277.587963][T13285] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1277.601602][ T789] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1277.798471][T13285] usb 2-1: Using ep0 maxpacket: 8 [ 1277.811250][T13285] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1277.823932][T13285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.832398][T13285] usb 2-1: Product: syz [ 1277.836728][T13285] usb 2-1: Manufacturer: syz [ 1277.846009][T13285] usb 2-1: SerialNumber: syz [ 1277.859221][T13285] usb 2-1: config 0 descriptor?? [ 1277.870003][T13285] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1277.878865][T13285] pctv452e: pctv452e_power_ctrl: 1 [ 1277.878865][T13285] [ 1277.886225][T13285] usb 2-1: selecting invalid altsetting 3 [ 1277.893461][T13285] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1277.893461][T13285] [ 1277.904176][T13285] dvb-usb: bulk message failed: -22 (5/0) [ 1277.914630][T13285] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1277.924974][T13285] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1277.933713][T13285] usb 2-1: media controller created [ 1277.939669][T13285] dvb-usb: bulk message failed: -22 (8/0) [ 1277.945467][T13285] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1277.956860][T13285] dvb-usb: MAC address reading failed. [ 1277.980006][T13285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1278.002169][T13285] DVB: Unable to find symbol stb0899_attach() [ 1278.008489][T13285] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1278.019493][T13285] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1278.025605][T13285] Registered IR keymap rc-empty [ 1278.033400][T13285] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1278.045755][T13285] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input95 [ 1278.057096][ T8] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1278.069735][T18878] dvb-usb: bulk message failed: -22 (7/0) [ 1278.075592][T18878] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1278.110241][T13285] dvb-usb: schedule remote query interval to 100 msecs. [ 1278.117301][T13285] pctv452e: pctv452e_power_ctrl: 0 [ 1278.117301][T13285] [ 1278.125279][T13285] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1278.218339][T13285] dvb-usb: bulk message failed: -22 (4/0) [ 1278.224137][T13285] dvb-usb: error -22 while querying for an remote control event. [ 1278.267864][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.288321][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1278.300262][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1278.321288][ T8] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1278.331101][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1278.341202][ T8] usb 1-1: Product: syz [ 1278.345483][ T8] usb 1-1: Manufacturer: syz [ 1278.370618][T13285] dvb-usb: bulk message failed: -22 (4/0) [ 1278.403887][T13285] dvb-usb: error -22 while querying for an remote control event. [ 1278.499368][T18904] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1278.660106][T13285] dvb-usb: bulk message failed: -22 (4/0) [ 1278.667675][ T8] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 1278.727047][T13285] dvb-usb: error -22 while querying for an remote control event. [ 1278.846422][ T8] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB2 [ 1278.868094][ T8] usb 1-1: USB disconnect, device number 111 [ 1278.888360][ T8] garmin_gps ttyUSB2: Garmin GPS usb/tty converter now disconnected from ttyUSB2 [ 1278.899190][ T8] garmin_gps 1-1:1.0: device disconnected [ 1278.961249][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1278.967091][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1279.081079][ T23] usb 2-1: USB disconnect, device number 114 [ 1279.119650][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1279.596307][ T7583] usb 4-1: USB disconnect, device number 118 [ 1279.623571][ T7583] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1279.651600][ T7583] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1279.672140][ T7583] ti_usb_3410_5052 4-1:2.0: device disconnected [ 1279.708237][T18940] FAULT_INJECTION: forcing a failure. [ 1279.708237][T18940] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.722960][T18940] CPU: 1 PID: 18940 Comm: syz.3.3337 Not tainted syzkaller #0 [ 1279.730454][T18940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1279.740508][T18940] Call Trace: [ 1279.743871][T18940] [ 1279.746792][T18940] dump_stack_lvl+0x18c/0x250 [ 1279.751470][T18940] ? show_regs_print_info+0x20/0x20 [ 1279.756682][T18940] ? load_image+0x420/0x420 [ 1279.761183][T18940] ? __might_sleep+0xe0/0xe0 [ 1279.765784][T18940] ? __lock_acquire+0x7d80/0x7d80 [ 1279.770848][T18940] should_fail_ex+0x394/0x4c0 [ 1279.775549][T18940] should_failslab+0x9/0x20 [ 1279.780061][T18940] slab_pre_alloc_hook+0x59/0x300 [ 1279.785136][T18940] ? ops_init+0x8b/0x640 [ 1279.789376][T18940] ? ops_init+0x8b/0x640 [ 1279.793638][T18940] __kmem_cache_alloc_node+0x53/0x250 [ 1279.799019][T18940] ? ops_init+0x8b/0x640 [ 1279.803256][T18940] __kmalloc+0xa7/0x240 [ 1279.807412][T18940] ? xt_init_net+0x15a/0x190 [ 1279.812100][T18940] ops_init+0x8b/0x640 [ 1279.816191][T18940] setup_net+0x3b6/0xa20 [ 1279.820453][T18940] ? copy_net_ns+0x530/0x530 [ 1279.825060][T18940] ? copy_net_ns+0x347/0x530 [ 1279.829656][T18940] ? down_read_killable+0x1d0/0x340 [ 1279.834871][T18940] copy_net_ns+0x361/0x530 [ 1279.839332][T18940] create_new_namespaces+0x3ce/0x700 [ 1279.844637][T18940] unshare_nsproxy_namespaces+0x11a/0x160 [ 1279.850395][T18940] ksys_unshare+0x4fa/0x8f0 [ 1279.854908][T18940] ? sighand_ctor+0x50/0x50 [ 1279.859408][T18940] ? lock_chain_count+0x20/0x20 [ 1279.864263][T18940] ? syscall_enter_from_user_mode+0x25/0x80 [ 1279.870156][T18940] __x64_sys_unshare+0x38/0x40 [ 1279.874920][T18940] do_syscall_64+0x55/0xb0 [ 1279.879346][T18940] ? clear_bhb_loop+0x40/0x90 [ 1279.884051][T18940] ? clear_bhb_loop+0x40/0x90 [ 1279.888735][T18940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1279.894635][T18940] RIP: 0033:0x7f7fb7b9e159 [ 1279.899044][T18940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.918650][T18940] RSP: 002b:00007f7fb8a7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1279.927101][T18940] RAX: ffffffffffffffda RBX: 00007f7fb7e25fa0 RCX: 00007f7fb7b9e159 [ 1279.935080][T18940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1279.943414][T18940] RBP: 00007f7fb7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1279.951484][T18940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.959494][T18940] R13: 00007f7fb7e26038 R14: 00007f7fb7e25fa0 R15: 00007fff5a2b7378 [ 1279.967474][T18940] [ 1279.989009][ T23] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1280.221470][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.237697][ T23] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1280.247218][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.255353][ T23] usb 1-1: Product: syz [ 1280.260363][ T23] usb 1-1: Manufacturer: syz [ 1280.265485][ T23] usb 1-1: SerialNumber: syz [ 1280.478979][ T23] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 1280.488653][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 87 [ 1280.496417][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 1280.507566][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 1281.193405][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82 [ 1281.201591][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 1281.209362][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 1281.217030][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 85 [ 1281.226800][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 5 [ 1281.237302][ T23] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1281.248101][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 83 [ 1281.264851][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 1281.273245][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3 [ 1281.281482][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 4 [ 1281.290335][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 86 [ 1281.299042][ T23] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 1281.320889][ T23] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1281.349004][ T23] usb 1-1: USB disconnect, device number 112 [ 1281.392779][ T23] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1281.416898][ T23] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1281.430344][ T23] keyspan 1-1:1.0: device disconnected [ 1281.539868][T18976] create_pit_timer: 1 callbacks suppressed [ 1281.539884][T18976] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 1281.554403][T18976] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 1281.564442][T18976] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 1281.573441][T18976] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 1281.581514][ T5810] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1281.592172][T18976] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 1281.603376][T18976] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 1281.613018][T18976] kvm: requested 27657 ns i8254 timer period limited to 200000 ns [ 1281.625255][T18976] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 1281.634648][T18976] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 1281.644858][T18976] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1281.772215][ T5810] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1281.784773][ T5810] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1281.798422][ T5810] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1281.807497][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.816142][ T5810] usb 4-1: Product: syz [ 1281.820715][ T5810] usb 4-1: Manufacturer: syz [ 1281.825459][ T5810] usb 4-1: SerialNumber: syz [ 1281.825474][ T7583] IPVS: starting estimator thread 0... [ 1281.840442][ T5810] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 1281.852656][ T5810] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1281.865811][ T5810] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1281.948759][T18986] IPVS: using max 18 ests per chain, 43200 per kthread [ 1282.648304][ T5810] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1282.831309][ T5810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.841565][ T5810] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1282.853215][ T5810] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1282.867720][ T5810] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1282.876859][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1282.884944][ T5810] usb 1-1: Product: syz [ 1282.889187][ T5810] usb 1-1: Manufacturer: syz [ 1282.898842][T18998] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1282.907221][ T5810] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 1282.933763][ T5810] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB2 [ 1283.084080][T19020] FAULT_INJECTION: forcing a failure. [ 1283.084080][T19020] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.097162][T19020] CPU: 0 PID: 19020 Comm: syz.1.3362 Not tainted syzkaller #0 [ 1283.104667][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1283.114753][T19020] Call Trace: [ 1283.118062][T19020] [ 1283.118101][ T5810] usb 1-1: USB disconnect, device number 113 [ 1283.120996][T19020] dump_stack_lvl+0x18c/0x250 [ 1283.121035][T19020] ? show_regs_print_info+0x20/0x20 [ 1283.121061][T19020] ? load_image+0x420/0x420 [ 1283.121085][T19020] ? __lock_acquire+0x7d80/0x7d80 [ 1283.121116][T19020] should_fail_ex+0x394/0x4c0 [ 1283.121149][T19020] should_failslab+0x9/0x20 [ 1283.121177][T19020] slab_pre_alloc_hook+0x59/0x300 [ 1283.121212][T19020] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1283.142487][ T5810] garmin_gps ttyUSB2: Garmin GPS usb/tty converter now disconnected from ttyUSB2 [ 1283.146554][T19020] ? sock_alloc_inode+0x28/0xc0 [ 1283.159680][ T5810] garmin_gps 1-1:1.0: device disconnected [ 1283.160743][T19020] sock_alloc_inode+0x28/0xc0 [ 1283.190242][T19020] ? sockfs_init_fs_context+0xb0/0xb0 [ 1283.195687][T19020] new_inode_pseudo+0x63/0x1d0 [ 1283.200920][T19020] __sock_create+0x12d/0x940 [ 1283.205539][T19020] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1283.211540][T19020] __sys_socket+0xd7/0x1b0 [ 1283.215972][T19020] __x64_sys_socket+0x7a/0x90 [ 1283.220657][T19020] do_syscall_64+0x55/0xb0 [ 1283.225088][T19020] ? clear_bhb_loop+0x40/0x90 [ 1283.229781][T19020] ? clear_bhb_loop+0x40/0x90 [ 1283.234593][T19020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1283.240510][T19020] RIP: 0033:0x7f469db9e159 [ 1283.244936][T19020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.264568][T19020] RSP: 002b:00007f469e9e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1283.272993][T19020] RAX: ffffffffffffffda RBX: 00007f469de25fa0 RCX: 00007f469db9e159 [ 1283.281055][T19020] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 0000000000000002 [ 1283.289050][T19020] RBP: 00007f469dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1283.297020][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.305003][T19020] R13: 00007f469de26038 R14: 00007f469de25fa0 R15: 00007ffdfe448698 [ 1283.312995][T19020] [ 1283.325471][T19020] socket: no more sockets [ 1283.755029][T19030] loop0: detected capacity change from 0 to 3904 [ 1283.799753][T19030] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1283.809428][T19030] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1283.826240][T19030] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1283.833583][T19030] loop0: [ 1284.292565][T13285] usb 4-1: USB disconnect, device number 119 [ 1284.308688][T13285] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1284.330385][T13285] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1284.352679][T13285] ti_usb_3410_5052 4-1:2.0: device disconnected [ 1284.384297][T19044] FAULT_INJECTION: forcing a failure. [ 1284.384297][T19044] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.401409][T19044] CPU: 1 PID: 19044 Comm: syz.1.3371 Not tainted syzkaller #0 [ 1284.408892][T19044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1284.418944][T19044] Call Trace: [ 1284.422216][T19044] [ 1284.425137][T19044] dump_stack_lvl+0x18c/0x250 [ 1284.429816][T19044] ? show_regs_print_info+0x20/0x20 [ 1284.435016][T19044] ? load_image+0x420/0x420 [ 1284.439513][T19044] ? __might_sleep+0xe0/0xe0 [ 1284.444120][T19044] ? __lock_acquire+0x7d80/0x7d80 [ 1284.449144][T19044] should_fail_ex+0x394/0x4c0 [ 1284.453834][T19044] should_failslab+0x9/0x20 [ 1284.458356][T19044] slab_pre_alloc_hook+0x59/0x300 [ 1284.463409][T19044] kmem_cache_alloc+0x5a/0x2c0 [ 1284.468184][T19044] ? security_inode_alloc+0x34/0x110 [ 1284.473484][T19044] security_inode_alloc+0x34/0x110 [ 1284.478595][T19044] inode_init_always+0x914/0xc90 [ 1284.483615][T19044] new_inode_pseudo+0x95/0x1d0 [ 1284.488384][T19044] __sock_create+0x12d/0x940 [ 1284.492990][T19044] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1284.499066][T19044] __sys_socket+0xd7/0x1b0 [ 1284.503487][T19044] __x64_sys_socket+0x7a/0x90 [ 1284.508173][T19044] do_syscall_64+0x55/0xb0 [ 1284.512608][T19044] ? clear_bhb_loop+0x40/0x90 [ 1284.517283][T19044] ? clear_bhb_loop+0x40/0x90 [ 1284.521973][T19044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1284.527861][T19044] RIP: 0033:0x7f469db9e159 [ 1284.532356][T19044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.551956][T19044] RSP: 002b:00007f469e9e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1284.560372][T19044] RAX: ffffffffffffffda RBX: 00007f469de25fa0 RCX: 00007f469db9e159 [ 1284.568339][T19044] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 0000000000000002 [ 1284.576303][T19044] RBP: 00007f469dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1284.584268][T19044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.592231][T19044] R13: 00007f469de26038 R14: 00007f469de25fa0 R15: 00007ffdfe448698 [ 1284.600201][T19044] [ 1284.614802][T19044] socket: no more sockets [ 1284.808985][T13285] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1284.969440][ T7583] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1284.998356][T13285] usb 4-1: Using ep0 maxpacket: 8 [ 1285.012047][T13285] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1285.024918][T13285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.033772][T13285] usb 4-1: Product: syz [ 1285.038076][T13285] usb 4-1: Manufacturer: syz [ 1285.047482][T13285] usb 4-1: SerialNumber: syz [ 1285.056966][T13285] usb 4-1: config 0 descriptor?? [ 1285.080394][T13285] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1285.091669][T13285] pctv452e: pctv452e_power_ctrl: 1 [ 1285.091669][T13285] [ 1285.099853][T13285] usb 4-1: selecting invalid altsetting 3 [ 1285.105737][T13285] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1285.105737][T13285] [ 1285.120245][T13285] dvb-usb: bulk message failed: -22 (5/0) [ 1285.132477][T13285] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1285.146712][T13285] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1285.155874][T13285] usb 4-1: media controller created [ 1285.164309][ T7583] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.175414][T13285] dvb-usb: bulk message failed: -22 (8/0) [ 1285.181593][ T7583] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1285.191938][T13285] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1285.200396][T13285] dvb-usb: MAC address reading failed. [ 1285.206115][ T7583] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.232572][ T7583] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1285.245593][ T7583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1285.260859][T13285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1285.269693][ T7583] usb 2-1: Product: syz [ 1285.274029][ T7583] usb 2-1: Manufacturer: syz [ 1285.281998][T19045] dvb-usb: bulk message failed: -22 (7/0) [ 1285.289209][T19045] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1285.311986][T19050] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1285.322158][ T7583] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1285.335824][ T7583] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1285.345558][T13285] DVB: Unable to find symbol stb0899_attach() [ 1285.365151][T13285] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1285.381700][T13285] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1285.389501][T13285] Registered IR keymap rc-empty [ 1285.397898][T13285] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1285.420691][T13285] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input96 [ 1285.437325][T13285] dvb-usb: schedule remote query interval to 100 msecs. [ 1285.453602][T13285] pctv452e: pctv452e_power_ctrl: 0 [ 1285.453602][T13285] [ 1285.462935][T13285] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1285.557085][T13285] usb 2-1: USB disconnect, device number 115 [ 1285.567981][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1285.581260][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1285.610769][T13285] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1285.627922][T13285] garmin_gps 2-1:1.0: device disconnected [ 1285.701009][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1285.707647][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1285.838518][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1285.860344][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1285.930025][ T789] usb 4-1: USB disconnect, device number 120 [ 1285.969291][ T789] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1286.388405][ T5810] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1286.574900][ T5810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.619425][ T5810] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1286.637952][ T5810] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1286.678498][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.656043][T13285] IPVS: starting estimator thread 0... [ 1287.758372][T19110] IPVS: using max 20 ests per chain, 48000 per kthread [ 1287.848319][ T7583] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1288.030462][ T7583] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1288.046135][ T7583] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1288.059233][ T7583] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1288.069492][ T7583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.077499][ T7583] usb 1-1: Product: syz [ 1288.088227][ T7583] usb 1-1: Manufacturer: syz [ 1288.092889][ T7583] usb 1-1: SerialNumber: syz [ 1288.114338][ T7583] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 1288.127245][ T7583] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1288.140748][ T7583] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1289.142190][ T5816] usb 2-1: USB disconnect, device number 116 [ 1289.222707][T19144] loop0: detected capacity change from 0 to 3904 [ 1289.280269][T19144] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1289.292900][T19144] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1289.302338][T19144] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1289.312362][T19144] loop0: [ 1289.878398][ T7583] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1290.081727][ T7583] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.092423][ T7583] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1290.105992][ T7583] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1290.124171][ T7583] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1290.134193][ T7583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1290.145455][ T7583] usb 2-1: Product: syz [ 1290.149788][ T7583] usb 2-1: Manufacturer: syz [ 1290.159181][T19151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1290.173448][ T7583] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1290.202728][ T7583] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB2 [ 1290.328370][ T5810] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1290.374957][ T7583] usb 2-1: USB disconnect, device number 117 [ 1290.389565][ T7583] garmin_gps ttyUSB2: Garmin GPS usb/tty converter now disconnected from ttyUSB2 [ 1290.401639][ T7583] garmin_gps 2-1:1.0: device disconnected [ 1290.520687][ T5810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.530895][ T5810] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1290.540068][ T5810] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1290.549236][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.590822][ T5810] usb 1-1: USB disconnect, device number 114 [ 1290.602434][ T5810] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1290.619399][ T5810] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1290.630940][ T5810] ti_usb_3410_5052 1-1:2.0: device disconnected [ 1291.708960][T19188] jffs2: notice: (19188) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1293.235270][ T7583] usb 4-1: USB disconnect, device number 121 [ 1294.203976][T19250] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3450'. [ 1294.965375][T19258] 9pnet_virtio: no channels available for device syz [ 1295.177812][T19259] create_pit_timer: 4 callbacks suppressed [ 1295.177832][T19259] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 1295.202891][T19259] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1295.219349][T19259] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 1295.244894][T19259] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 1295.266990][T19259] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 1295.294107][T19259] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 1295.321969][T19259] kvm: requested 51961 ns i8254 timer period limited to 200000 ns [ 1295.332982][T19259] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 1295.341847][T19259] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 1295.350203][T19259] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 1295.502320][T19275] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3460'. [ 1295.688559][T19278] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1295.908277][ T5776] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1296.094003][T19298] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3470'. [ 1296.112512][ T5776] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1296.125076][ T5776] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1296.150929][ T5776] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1296.164142][ T5776] usb 1-1: string descriptor 0 read error: -22 [ 1296.175066][ T5776] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 1296.197689][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.448356][ T7583] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1296.640475][ T7583] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.661268][ T7583] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1296.688246][ T7583] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1296.698704][ T5776] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5013.0003/input/input97 [ 1296.705625][ T7583] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1296.738354][ T7583] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1296.747185][ T7583] usb 4-1: Product: syz [ 1296.758276][ T7583] usb 4-1: Manufacturer: syz [ 1296.782676][T19302] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1296.795558][ T7583] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 1296.830167][ T5776] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5013.0003/input/input98 [ 1296.841152][ T7583] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1296.917535][ T5776] kye 0003:0458:5013.0003: input,hiddev0,hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 1296.978586][T19318] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3480'. [ 1296.988098][ T5776] usb 1-1: USB disconnect, device number 115 [ 1297.034310][ T7583] usb 4-1: USB disconnect, device number 122 [ 1297.042698][T19321] udevd[19321]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 1297.073319][ T7583] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1297.098834][ T7583] garmin_gps 4-1:1.0: device disconnected [ 1297.503770][T19342] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3490'. [ 1297.562522][T19346] 9pnet_virtio: no channels available for device syz [ 1297.881680][T19363] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3501'. [ 1299.060985][ T5776] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1299.280469][ T5776] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.309753][ T5776] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1299.323730][ T5776] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1299.345031][ T5776] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1299.354767][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1299.369199][ T5776] usb 2-1: Product: syz [ 1299.383185][ T5776] usb 2-1: Manufacturer: syz [ 1299.398660][T19379] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1299.411266][ T5776] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1299.447673][ T5776] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1299.936673][ T5776] usb 2-1: USB disconnect, device number 118 [ 1300.111767][ T5776] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1300.148928][ T5776] garmin_gps 2-1:1.0: device disconnected [ 1300.365632][T19423] syzkaller0: entered promiscuous mode [ 1300.371592][T19423] syzkaller0: entered allmulticast mode [ 1300.420268][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.426698][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.436378][T19446] syzkaller0: entered promiscuous mode [ 1301.442831][T19446] syzkaller0: entered allmulticast mode [ 1301.479421][ T23] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1301.670395][ T23] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.691818][ T23] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1301.720662][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1301.741482][ T23] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1301.750879][ T23] usb 2-1: Product: syz [ 1301.755489][ T23] usb 2-1: Manufacturer: syz [ 1302.158755][ T23] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1302.409628][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1302.494024][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1302.630288][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1302.675224][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1302.685950][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1302.715071][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1302.739942][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1302.751649][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.972917][ T23] usb 4-1: usb_control_msg returned -32 [ 1302.987609][ T23] usbtmc 4-1:16.0: can't read capabilities [ 1303.610106][ T5816] usb 2-1: USB disconnect, device number 119 [ 1303.866988][T19512] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 1304.477014][T19522] fuse: Unknown parameter 'group_id00000000000000000000' [ 1304.834690][T19536] binder: 19535:19536 ioctl 4018620d 0 returned -22 [ 1305.029040][ T5816] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1305.298305][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 1305.389478][ T5816] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1305.476549][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.511031][ T9] usb 4-1: USB disconnect, device number 123 [ 1305.523900][ T5816] usb 2-1: Product: syz [ 1305.534881][ T5816] usb 2-1: Manufacturer: syz [ 1305.544681][ T5816] usb 2-1: SerialNumber: syz [ 1305.557925][ T5816] usb 2-1: config 0 descriptor?? [ 1305.577860][ T5816] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1305.588093][ T5816] pctv452e: pctv452e_power_ctrl: 1 [ 1305.588093][ T5816] [ 1305.595881][ T5816] usb 2-1: selecting invalid altsetting 3 [ 1305.602346][ T5816] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1305.602346][ T5816] [ 1305.613660][ T5816] dvb-usb: bulk message failed: -22 (5/0) [ 1305.624000][ T5816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1305.634839][ T5816] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1305.643553][ T5816] usb 2-1: media controller created [ 1305.649422][ T5816] dvb-usb: bulk message failed: -22 (8/0) [ 1305.655264][ T5816] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1305.663560][ T5816] dvb-usb: MAC address reading failed. [ 1305.688941][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1305.754999][ T5816] DVB: Unable to find symbol stb0899_attach() [ 1305.768700][ T5816] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1305.791174][T19534] dvb-usb: bulk message failed: -22 (7/0) [ 1305.798231][T19534] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1305.807225][ T5816] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1305.823522][ T5816] Registered IR keymap rc-empty [ 1306.502528][T19552] No source specified [ 1306.529988][ T5816] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1306.542108][ T5816] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input99 [ 1306.556289][ T5816] dvb-usb: schedule remote query interval to 100 msecs. [ 1306.563574][ T5816] pctv452e: pctv452e_power_ctrl: 0 [ 1306.563574][ T5816] [ 1306.575955][ T5816] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1306.640130][ T5816] usb 2-1: USB disconnect, device number 120 [ 1306.678340][T19556] fuse: Unknown parameter 'group_id00000000000000000000' [ 1306.720571][ T5816] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1307.006522][T19569] binder: 19566:19569 ioctl 4018620d 0 returned -22 [ 1307.420179][T19583] No source specified [ 1308.767366][T19614] binder: 19613:19614 ioctl 4018620d 0 returned -22 [ 1309.348694][ T9] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1309.630862][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.657438][ T9] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1309.679632][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1309.688935][ T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1309.697343][ T9] usb 2-1: Product: syz [ 1309.702374][ T9] usb 2-1: Manufacturer: syz [ 1309.715350][ T9] hub 2-1:4.0: bad descriptor, ignoring hub [ 1309.728236][ T9] hub: probe of 2-1:4.0 failed with error -5 [ 1309.739827][ T9] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 1309.925625][ T5816] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1310.118277][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 1310.145565][ T5816] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1310.154853][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.166515][ T5816] usb 1-1: Product: syz [ 1310.171080][ T5816] usb 1-1: Manufacturer: syz [ 1310.175874][ T5816] usb 1-1: SerialNumber: syz [ 1310.188963][ T5816] usb 1-1: config 0 descriptor?? [ 1310.434758][ T5816] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1310.520169][ T5816] pctv452e: pctv452e_power_ctrl: 1 [ 1310.520169][ T5816] [ 1310.620583][ T5816] usb 1-1: selecting invalid altsetting 3 [ 1310.694186][ T5816] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1310.694186][ T5816] [ 1310.763085][ T5816] dvb-usb: bulk message failed: -22 (5/0) [ 1310.777189][ T5816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1310.794721][ T5816] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1310.834671][ T5816] usb 1-1: media controller created [ 1310.867152][ T5816] dvb-usb: bulk message failed: -22 (8/0) [ 1310.886046][ T5816] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1310.910004][ T5816] dvb-usb: MAC address reading failed. [ 1310.962412][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1311.002286][ T5816] DVB: Unable to find symbol stb0899_attach() [ 1311.017041][ T5816] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1311.040164][ T5816] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1311.056523][ T5816] Registered IR keymap rc-empty [ 1311.067466][ T5816] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1311.087988][ T5816] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input100 [ 1311.101362][ T5816] dvb-usb: schedule remote query interval to 100 msecs. [ 1311.108963][ T5816] pctv452e: pctv452e_power_ctrl: 0 [ 1311.108963][ T5816] [ 1311.116553][ T5816] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1311.203070][ T5776] usb 1-1: USB disconnect, device number 116 [ 1311.218943][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 1311.234327][ T9] dvb-usb: error -22 while querying for an remote control event. [ 1311.269478][T19654] binder: 19653:19654 ioctl c0306201 0 returned -14 [ 1311.300236][ T5776] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1312.310850][ T9] usb 2-1: USB disconnect, device number 121 [ 1312.739116][ T789] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1312.843170][T19688] binder: 19686:19688 ioctl c0306201 0 returned -14 [ 1312.990119][ T789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.001318][ T789] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1313.011156][ T789] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1313.378528][ T5816] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1313.635166][ T5816] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.644553][ T789] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1313.656278][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1313.658312][ T5816] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1313.664786][ T789] usb 2-1: Product: syz [ 1313.698737][ T789] usb 2-1: Manufacturer: syz [ 1313.718071][ T5816] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1313.723798][T19670] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1313.749684][ T789] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1313.764908][ T789] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1313.921866][ T5816] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1313.931002][ T5816] usb 4-1: Product: syz [ 1313.935276][ T5816] usb 4-1: Manufacturer: syz [ 1313.945379][ T5816] hub 4-1:4.0: bad descriptor, ignoring hub [ 1313.952609][ T5816] hub: probe of 4-1:4.0 failed with error -5 [ 1313.960668][ T5816] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 1314.304727][ T23] usb 2-1: USB disconnect, device number 122 [ 1314.539533][ T23] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1314.562290][ T23] garmin_gps 2-1:1.0: device disconnected [ 1314.967872][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3635'. [ 1314.977138][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'. [ 1314.989679][T19714] netlink: 'syz.1.3635': attribute type 7 has an invalid length. [ 1315.000062][T19714] netlink: 'syz.1.3635': attribute type 18 has an invalid length. [ 1316.054517][ T5810] usb 4-1: USB disconnect, device number 124 [ 1316.071581][T19735] syzkaller0: entered promiscuous mode [ 1316.077115][T19735] syzkaller0: entered allmulticast mode [ 1317.028569][ T5810] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1317.234619][T19762] syzkaller0: entered promiscuous mode [ 1317.276447][T19762] syzkaller0: entered allmulticast mode [ 1317.310500][ T5810] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.343483][ T5810] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1317.360826][ T5810] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1317.390371][ T5810] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1317.407056][ T5810] usb 2-1: Product: syz [ 1317.413898][ T5810] usb 2-1: Manufacturer: syz [ 1317.436613][ T5810] hub 2-1:4.0: bad descriptor, ignoring hub [ 1317.470746][ T5810] hub: probe of 2-1:4.0 failed with error -5 [ 1317.481528][ T5810] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 1319.609413][ T8] usb 2-1: USB disconnect, device number 123 [ 1319.906750][T19874] syzkaller0: entered promiscuous mode [ 1319.913734][T19874] syzkaller0: entered allmulticast mode [ 1320.558837][ T5816] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1320.843167][ T5816] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.862959][ T5816] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1320.890896][ T5816] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1320.923180][ T5816] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1320.941331][ T5816] usb 4-1: Product: syz [ 1320.958366][ T5816] usb 4-1: Manufacturer: syz [ 1320.978374][ T5816] hub 4-1:4.0: bad descriptor, ignoring hub [ 1320.984407][ T5816] hub: probe of 4-1:4.0 failed with error -5 [ 1320.987247][T19898] FAULT_INJECTION: forcing a failure. [ 1320.987247][T19898] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.002616][ T5816] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 1321.029417][T19898] CPU: 1 PID: 19898 Comm: syz.0.3707 Not tainted syzkaller #0 [ 1321.036945][T19898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1321.047028][T19898] Call Trace: [ 1321.050312][T19898] [ 1321.053257][T19898] dump_stack_lvl+0x18c/0x250 [ 1321.057962][T19898] ? show_regs_print_info+0x20/0x20 [ 1321.063168][T19898] ? load_image+0x420/0x420 [ 1321.067768][T19898] should_fail_ex+0x394/0x4c0 [ 1321.072457][T19898] should_failslab+0x9/0x20 [ 1321.076967][T19898] slab_pre_alloc_hook+0x59/0x300 [ 1321.082015][T19898] kmem_cache_alloc_node+0x5e/0x310 [ 1321.087220][T19898] ? __asan_memcpy+0x40/0x70 [ 1321.091829][T19898] ? __alloc_skb+0x103/0x2c0 [ 1321.096442][T19898] __alloc_skb+0x103/0x2c0 [ 1321.100865][T19898] wireless_send_event+0x51c/0xc50 [ 1321.106114][T19898] ? wireless_nlevent_flush+0x110/0x110 [ 1321.111661][T19898] ? cfg80211_ibss_wext_siwessid+0x2af/0x390 [ 1321.117695][T19898] ? cfg80211_wext_siwessid+0xee/0x120 [ 1321.123160][T19898] ioctl_standard_iw_point+0x9fc/0xd50 [ 1321.128634][T19898] ? cfg80211_wext_giwap+0x120/0x120 [ 1321.133923][T19898] ? iw_handler_get_iwstats+0x110/0x110 [ 1321.139475][T19898] ? wext_ioctl_dispatch+0x106/0x650 [ 1321.144762][T19898] ? mutex_lock_nested+0x20/0x20 [ 1321.149715][T19898] ? apparmor_capable+0x137/0x1a0 [ 1321.154746][T19898] ioctl_standard_call+0xae/0x250 [ 1321.159778][T19898] ? cfg80211_wext_giwap+0x120/0x120 [ 1321.165065][T19898] ? cfg80211_wext_giwap+0x120/0x120 [ 1321.170351][T19898] wext_ioctl_dispatch+0x51a/0x650 [ 1321.175471][T19898] ? __lock_acquire+0x7d80/0x7d80 [ 1321.180504][T19898] ? wext_ioctl_dispatch+0x650/0x650 [ 1321.185796][T19898] ? iw_handler_get_private+0x1f0/0x1f0 [ 1321.191353][T19898] ? wext_handle_ioctl+0x1e0/0x1e0 [ 1321.196471][T19898] ? __might_fault+0xaa/0x120 [ 1321.201263][T19898] ? __might_fault+0xc6/0x120 [ 1321.205940][T19898] ? __might_fault+0xaa/0x120 [ 1321.210624][T19898] wext_handle_ioctl+0x118/0x1e0 [ 1321.215583][T19898] ? call_commit_handler+0xf0/0xf0 [ 1321.220720][T19898] sock_ioctl+0x15d/0x7e0 [ 1321.225078][T19898] ? sock_poll+0x3e0/0x3e0 [ 1321.229525][T19898] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1321.234477][T19898] ? security_file_ioctl+0x80/0xa0 [ 1321.239608][T19898] ? sock_poll+0x3e0/0x3e0 [ 1321.244055][T19898] __se_sys_ioctl+0xfd/0x170 [ 1321.248703][T19898] do_syscall_64+0x55/0xb0 [ 1321.253133][T19898] ? clear_bhb_loop+0x40/0x90 [ 1321.257819][T19898] ? clear_bhb_loop+0x40/0x90 [ 1321.262515][T19898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1321.268421][T19898] RIP: 0033:0x7fc48119e159 [ 1321.272843][T19898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.292460][T19898] RSP: 002b:00007fc4820d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1321.300894][T19898] RAX: ffffffffffffffda RBX: 00007fc481425fa0 RCX: 00007fc48119e159 [ 1321.308870][T19898] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003 [ 1321.316847][T19898] RBP: 00007fc48123506b R08: 0000000000000000 R09: 0000000000000000 [ 1321.324819][T19898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1321.332793][T19898] R13: 00007fc481426038 R14: 00007fc481425fa0 R15: 00007ffc757fca28 [ 1321.340781][T19898] [ 1322.665171][T19949] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.3727'. [ 1322.712862][T19951] FAULT_INJECTION: forcing a failure. [ 1322.712862][T19951] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.746926][T19951] CPU: 0 PID: 19951 Comm: syz.1.3728 Not tainted syzkaller #0 [ 1322.754457][T19951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1322.764544][T19951] Call Trace: [ 1322.767849][T19951] [ 1322.770808][T19951] dump_stack_lvl+0x18c/0x250 [ 1322.775538][T19951] ? show_regs_print_info+0x20/0x20 [ 1322.780781][T19951] ? load_image+0x420/0x420 [ 1322.785510][T19951] ? __might_sleep+0xe0/0xe0 [ 1322.790141][T19951] ? __lock_acquire+0x7d80/0x7d80 [ 1322.795204][T19951] should_fail_ex+0x394/0x4c0 [ 1322.799918][T19951] should_failslab+0x9/0x20 [ 1322.804419][T19951] slab_pre_alloc_hook+0x59/0x300 [ 1322.809459][T19951] ? call_usermodehelper_setup+0x8e/0x260 [ 1322.815226][T19951] __kmem_cache_alloc_node+0x53/0x250 [ 1322.820702][T19951] ? call_usermodehelper_setup+0x8e/0x260 [ 1322.826465][T19951] kmalloc_trace+0x2a/0xe0 [ 1322.830919][T19951] call_usermodehelper_setup+0x8e/0x260 [ 1322.831752][T19958] syzkaller0: entered promiscuous mode [ 1322.836472][T19951] ? __request_module+0x600/0x600 [ 1322.836505][T19951] __request_module+0x3bb/0x600 [ 1322.842206][T19958] syzkaller0: entered allmulticast mode [ 1322.846987][T19951] ? end_current_label_crit_section+0x170/0x170 [ 1322.863653][T19951] ? module_enforce_rwx_sections+0x150/0x150 [ 1322.869642][T19951] ? apparmor_capable+0x137/0x1a0 [ 1322.874670][T19951] ? capable+0x88/0xe0 [ 1322.878744][T19951] ? dev_load+0x21/0x1f0 [ 1322.883051][T19951] wext_ioctl_dispatch+0x101/0x650 [ 1322.888178][T19951] ? __lock_acquire+0x7d80/0x7d80 [ 1322.893254][T19951] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1322.898906][T19951] ? wext_ioctl_dispatch+0x650/0x650 [ 1322.904242][T19951] ? iw_handler_get_private+0x1f0/0x1f0 [ 1322.909794][T19951] ? wext_handle_ioctl+0x1e0/0x1e0 [ 1322.914990][T19951] ? __might_fault+0xaa/0x120 [ 1322.919663][T19951] ? __might_fault+0xc6/0x120 [ 1322.924332][T19951] ? __might_fault+0xaa/0x120 [ 1322.929021][T19951] wext_handle_ioctl+0x118/0x1e0 [ 1322.934023][T19951] ? call_commit_handler+0xf0/0xf0 [ 1322.939150][T19951] sock_ioctl+0x15d/0x7e0 [ 1322.943479][T19951] ? sock_poll+0x3e0/0x3e0 [ 1322.947899][T19951] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1322.952921][T19951] ? security_file_ioctl+0x80/0xa0 [ 1322.958044][T19951] ? sock_poll+0x3e0/0x3e0 [ 1322.962455][T19951] __se_sys_ioctl+0xfd/0x170 [ 1322.967045][T19951] do_syscall_64+0x55/0xb0 [ 1322.971463][T19951] ? clear_bhb_loop+0x40/0x90 [ 1322.976162][T19951] ? clear_bhb_loop+0x40/0x90 [ 1322.981010][T19951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1322.986917][T19951] RIP: 0033:0x7f469db9e159 [ 1322.991329][T19951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.010935][T19951] RSP: 002b:00007f469e9e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1323.019376][T19951] RAX: ffffffffffffffda RBX: 00007f469de25fa0 RCX: 00007f469db9e159 [ 1323.027344][T19951] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004 [ 1323.035322][T19951] RBP: 00007f469dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1323.043296][T19951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1323.051352][T19951] R13: 00007f469de26038 R14: 00007f469de25fa0 R15: 00007ffdfe448698 [ 1323.059444][T19951] [ 1323.289654][ T9] usb 4-1: USB disconnect, device number 125 [ 1323.444798][T19976] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3739'. [ 1323.558986][T19982] syzkaller0: entered promiscuous mode [ 1323.564525][T19982] syzkaller0: entered allmulticast mode [ 1324.490826][T19998] FAULT_INJECTION: forcing a failure. [ 1324.490826][T19998] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.504100][ T5810] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1324.512169][T19998] CPU: 1 PID: 19998 Comm: syz.1.3749 Not tainted syzkaller #0 [ 1324.519667][T19998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1324.529742][T19998] Call Trace: [ 1324.533029][T19998] [ 1324.535964][T19998] dump_stack_lvl+0x18c/0x250 [ 1324.540669][T19998] ? show_regs_print_info+0x20/0x20 [ 1324.545880][T19998] ? load_image+0x420/0x420 [ 1324.550412][T19998] ? __might_sleep+0xe0/0xe0 [ 1324.555026][T19998] ? __lock_acquire+0x7d80/0x7d80 [ 1324.560097][T19998] should_fail_ex+0x394/0x4c0 [ 1324.564805][T19998] should_failslab+0x9/0x20 [ 1324.569328][T19998] slab_pre_alloc_hook+0x59/0x300 [ 1324.574372][T19998] ? call_usermodehelper_setup+0x8e/0x260 [ 1324.580098][T19998] __kmem_cache_alloc_node+0x53/0x250 [ 1324.585495][T19998] ? call_usermodehelper_setup+0x8e/0x260 [ 1324.591224][T19998] kmalloc_trace+0x2a/0xe0 [ 1324.595659][T19998] call_usermodehelper_setup+0x8e/0x260 [ 1324.601210][T19998] ? __request_module+0x600/0x600 [ 1324.606240][T19998] __request_module+0x3bb/0x600 [ 1324.611094][T19998] ? end_current_label_crit_section+0x170/0x170 [ 1324.617363][T19998] ? module_enforce_rwx_sections+0x150/0x150 [ 1324.623454][T19998] ? apparmor_capable+0x137/0x1a0 [ 1324.628673][T19998] ? capable+0x88/0xe0 [ 1324.632753][T19998] ? dev_load+0x21/0x1f0 [ 1324.637006][T19998] wext_ioctl_dispatch+0x101/0x650 [ 1324.642134][T19998] ? __lock_acquire+0x7d80/0x7d80 [ 1324.647167][T19998] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1324.652814][T19998] ? wext_ioctl_dispatch+0x650/0x650 [ 1324.658125][T19998] ? iw_handler_get_private+0x1f0/0x1f0 [ 1324.663702][T19998] ? wext_handle_ioctl+0x1e0/0x1e0 [ 1324.668819][T19998] ? __might_fault+0xaa/0x120 [ 1324.673502][T19998] ? __might_fault+0xc6/0x120 [ 1324.678186][T19998] ? __might_fault+0xaa/0x120 [ 1324.682890][T19998] wext_handle_ioctl+0x118/0x1e0 [ 1324.687833][T19998] ? call_commit_handler+0xf0/0xf0 [ 1324.693053][T19998] sock_ioctl+0x15d/0x7e0 [ 1324.697393][T19998] ? sock_poll+0x3e0/0x3e0 [ 1324.701822][T19998] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1324.706856][T19998] ? security_file_ioctl+0x80/0xa0 [ 1324.712506][T19998] ? sock_poll+0x3e0/0x3e0 [ 1324.716939][T19998] __se_sys_ioctl+0xfd/0x170 [ 1324.721535][T19998] do_syscall_64+0x55/0xb0 [ 1324.725957][T19998] ? clear_bhb_loop+0x40/0x90 [ 1324.730639][T19998] ? clear_bhb_loop+0x40/0x90 [ 1324.735321][T19998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1324.741220][T19998] RIP: 0033:0x7f469db9e159 [ 1324.745650][T19998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.765264][T19998] RSP: 002b:00007f469e9e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1324.773686][T19998] RAX: ffffffffffffffda RBX: 00007f469de25fa0 RCX: 00007f469db9e159 [ 1324.781699][T19998] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004 [ 1324.789679][T19998] RBP: 00007f469dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1324.797659][T19998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.805645][T19998] R13: 00007f469de26038 R14: 00007f469de25fa0 R15: 00007ffdfe448698 [ 1324.813645][T19998] [ 1324.897488][T20005] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3751'. [ 1325.008289][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 1325.016148][ T5810] usb 4-1: config 0 has no interfaces? [ 1325.026792][ T5810] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1325.046883][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.057767][ T5810] usb 4-1: Product: syz [ 1325.065560][ T5810] usb 4-1: Manufacturer: syz [ 1325.070761][ T5810] usb 4-1: SerialNumber: syz [ 1325.091390][ T5810] usb 4-1: config 0 descriptor?? [ 1325.154814][T20015] syzkaller0: entered promiscuous mode [ 1325.163237][T20015] syzkaller0: entered allmulticast mode [ 1325.329609][T20021] FAULT_INJECTION: forcing a failure. [ 1325.329609][T20021] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.343166][T20021] CPU: 1 PID: 20021 Comm: syz.1.3759 Not tainted syzkaller #0 [ 1325.350673][T20021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1325.360744][T20021] Call Trace: [ 1325.364016][T20021] [ 1325.366937][T20021] dump_stack_lvl+0x18c/0x250 [ 1325.371618][T20021] ? show_regs_print_info+0x20/0x20 [ 1325.376807][T20021] ? load_image+0x420/0x420 [ 1325.381306][T20021] ? __might_sleep+0xe0/0xe0 [ 1325.385921][T20021] ? __lock_acquire+0x7d80/0x7d80 [ 1325.391025][T20021] should_fail_ex+0x394/0x4c0 [ 1325.395707][T20021] should_failslab+0x9/0x20 [ 1325.400219][T20021] slab_pre_alloc_hook+0x59/0x300 [ 1325.405261][T20021] ? call_usermodehelper_setup+0x8e/0x260 [ 1325.410978][T20021] __kmem_cache_alloc_node+0x53/0x250 [ 1325.416358][T20021] ? call_usermodehelper_setup+0x8e/0x260 [ 1325.422085][T20021] kmalloc_trace+0x2a/0xe0 [ 1325.426505][T20021] call_usermodehelper_setup+0x8e/0x260 [ 1325.432054][T20021] ? __request_module+0x600/0x600 [ 1325.437101][T20021] __request_module+0x3bb/0x600 [ 1325.441974][T20021] ? end_current_label_crit_section+0x170/0x170 [ 1325.448223][T20021] ? module_enforce_rwx_sections+0x150/0x150 [ 1325.454222][T20021] ? apparmor_capable+0x137/0x1a0 [ 1325.459244][T20021] ? capable+0x88/0xe0 [ 1325.463304][T20021] ? dev_load+0x21/0x1f0 [ 1325.467544][T20021] wext_ioctl_dispatch+0x101/0x650 [ 1325.472671][T20021] ? __lock_acquire+0x7d80/0x7d80 [ 1325.477694][T20021] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1325.483360][T20021] ? wext_ioctl_dispatch+0x650/0x650 [ 1325.488654][T20021] ? iw_handler_get_private+0x1f0/0x1f0 [ 1325.494196][T20021] ? wext_handle_ioctl+0x1e0/0x1e0 [ 1325.499317][T20021] ? __might_fault+0xaa/0x120 [ 1325.504005][T20021] ? __might_fault+0xc6/0x120 [ 1325.508737][T20021] ? __might_fault+0xaa/0x120 [ 1325.513413][T20021] wext_handle_ioctl+0x118/0x1e0 [ 1325.518361][T20021] ? call_commit_handler+0xf0/0xf0 [ 1325.523475][T20021] sock_ioctl+0x15d/0x7e0 [ 1325.527798][T20021] ? sock_poll+0x3e0/0x3e0 [ 1325.532208][T20021] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1325.537133][T20021] ? security_file_ioctl+0x80/0xa0 [ 1325.542239][T20021] ? sock_poll+0x3e0/0x3e0 [ 1325.546645][T20021] __se_sys_ioctl+0xfd/0x170 [ 1325.551244][T20021] do_syscall_64+0x55/0xb0 [ 1325.555675][T20021] ? clear_bhb_loop+0x40/0x90 [ 1325.560345][T20021] ? clear_bhb_loop+0x40/0x90 [ 1325.565012][T20021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1325.570913][T20021] RIP: 0033:0x7f469db9e159 [ 1325.575406][T20021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.595112][T20021] RSP: 002b:00007f469e9e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1325.603557][T20021] RAX: ffffffffffffffda RBX: 00007f469de25fa0 RCX: 00007f469db9e159 [ 1325.611539][T20021] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004 [ 1325.619505][T20021] RBP: 00007f469dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1325.627469][T20021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1325.635439][T20021] R13: 00007f469de26038 R14: 00007f469de25fa0 R15: 00007ffdfe448698 [ 1325.643413][T20021] [ 1326.013104][T20039] fuse: Bad value for 'fd' [ 1326.061760][T20042] syzkaller0: entered promiscuous mode [ 1326.067256][T20042] syzkaller0: entered allmulticast mode [ 1326.677878][T20058] fuse: Bad value for 'fd' [ 1326.678412][ T7583] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1326.788883][ T9] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1326.840324][ T5810] usb 4-1: USB disconnect, device number 126 [ 1326.889676][ T7583] usb 2-1: Using ep0 maxpacket: 8 [ 1326.917121][ T7583] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1326.926615][ T7583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.935504][ T7583] usb 2-1: Product: syz [ 1326.940277][ T7583] usb 2-1: Manufacturer: syz [ 1326.944904][ T7583] usb 2-1: SerialNumber: syz [ 1326.949979][ T9] usb 1-1: device descriptor read/64, error -71 [ 1326.962649][ T7583] usb 2-1: config 0 descriptor?? [ 1326.973384][ T7583] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1326.983751][ T7583] pctv452e: pctv452e_power_ctrl: 1 [ 1326.983751][ T7583] [ 1326.991758][ T7583] usb 2-1: selecting invalid altsetting 3 [ 1326.997617][ T7583] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1326.997617][ T7583] [ 1327.008714][ T7583] dvb-usb: bulk message failed: -22 (5/0) [ 1327.026552][ T7583] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1327.037779][ T7583] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1327.050562][ T7583] usb 2-1: media controller created [ 1327.057511][ T7583] dvb-usb: bulk message failed: -22 (8/0) [ 1327.065804][ T7583] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1327.077303][ T7583] dvb-usb: MAC address reading failed. [ 1327.103194][ T7583] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1327.140261][ T7583] DVB: Unable to find symbol stb0899_attach() [ 1327.147157][ T7583] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1327.164526][ T7583] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1327.170953][ T7583] Registered IR keymap rc-empty [ 1327.173051][T20050] dvb-usb: bulk message failed: -22 (7/0) [ 1327.177276][ T7583] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1327.183053][T20050] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1327.194272][ T7583] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input101 [ 1327.213810][ T7583] dvb-usb: schedule remote query interval to 100 msecs. [ 1327.230844][ T7583] pctv452e: pctv452e_power_ctrl: 0 [ 1327.230844][ T7583] [ 1327.239262][ T9] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1327.248621][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1327.338466][ T5816] dvb-usb: bulk message failed: -22 (4/0) [ 1327.346614][ T5816] dvb-usb: error -22 while querying for an remote control event. [ 1327.408692][ T9] usb 1-1: device descriptor read/64, error -71 [ 1327.478695][ T5816] dvb-usb: bulk message failed: -22 (4/0) [ 1327.529559][ T9] usb usb1-port1: attempt power cycle [ 1327.572345][ T5816] dvb-usb: error -22 while querying for an remote control event. [ 1327.873278][T20083] FAULT_INJECTION: forcing a failure. [ 1327.873278][T20083] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.886763][ T5816] dvb-usb: bulk message failed: -22 (4/0) [ 1327.893112][ T5816] dvb-usb: error -22 while querying for an remote control event. [ 1327.893469][T20083] CPU: 1 PID: 20083 Comm: syz.3.3782 Not tainted syzkaller #0 [ 1327.908313][T20083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1327.918389][T20083] Call Trace: [ 1327.921692][T20083] [ 1327.924655][T20083] dump_stack_lvl+0x18c/0x250 [ 1327.929385][T20083] ? show_regs_print_info+0x20/0x20 [ 1327.934611][T20083] ? load_image+0x420/0x420 [ 1327.939140][T20083] ? verify_lock_unused+0x140/0x140 [ 1327.944341][T20083] ? asan.module_dtor+0x20/0x20 [ 1327.949207][T20083] should_fail_ex+0x394/0x4c0 [ 1327.953916][T20083] should_failslab+0x9/0x20 [ 1327.958421][T20083] slab_pre_alloc_hook+0x59/0x300 [ 1327.963446][T20083] kmem_cache_alloc+0x5a/0x2c0 [ 1327.968216][T20083] ? skb_clone+0x1eb/0x370 [ 1327.972664][T20083] skb_clone+0x1eb/0x370 [ 1327.976936][T20083] __netlink_deliver_tap+0x411/0x7f0 [ 1327.982235][T20083] ? netlink_deliver_tap+0x2e/0x1b0 [ 1327.987435][T20083] netlink_deliver_tap+0x19c/0x1b0 [ 1327.992554][T20083] netlink_sendskb+0x68/0x130 [ 1327.997239][T20083] netlink_ack+0xcd5/0x1160 [ 1328.001745][T20083] ? __dev_queue_xmit+0x272/0x37e0 [ 1328.006866][T20083] ? netlink_dump+0xec0/0xec0 [ 1328.011554][T20083] ? ref_tracker_free+0x686/0x830 [ 1328.016606][T20083] netlink_rcv_skb+0x2b3/0x4c0 [ 1328.021379][T20083] ? rtnetlink_bind+0x80/0x80 [ 1328.026069][T20083] ? netlink_ack+0x1160/0x1160 [ 1328.030841][T20083] ? __lock_acquire+0x7d80/0x7d80 [ 1328.035871][T20083] ? netlink_deliver_tap+0x2e/0x1b0 [ 1328.041077][T20083] netlink_unicast+0x7b1/0x930 [ 1328.045851][T20083] netlink_sendmsg+0x8d0/0xbf0 [ 1328.050622][T20083] ? netlink_getsockopt+0x590/0x590 [ 1328.055828][T20083] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1328.061381][T20083] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1328.066676][T20083] ? security_socket_sendmsg+0x80/0xa0 [ 1328.072143][T20083] ? netlink_getsockopt+0x590/0x590 [ 1328.077343][T20083] ____sys_sendmsg+0x61b/0x980 [ 1328.082466][T20083] ? __asan_memset+0x22/0x40 [ 1328.087060][T20083] ? __sys_sendmsg_sock+0x30/0x30 [ 1328.092091][T20083] ? __import_iovec+0x5f2/0x850 [ 1328.096968][T20083] ? import_iovec+0x73/0xa0 [ 1328.101478][T20083] ___sys_sendmsg+0x2a6/0x360 [ 1328.106164][T20083] ? __sys_sendmsg+0x2b0/0x2b0 [ 1328.110972][T20083] __se_sys_sendmsg+0x1d0/0x2c0 [ 1328.115829][T20083] ? __x64_sys_sendmsg+0x80/0x80 [ 1328.120795][T20083] ? lockdep_hardirqs_on+0x98/0x150 [ 1328.126016][T20083] do_syscall_64+0x55/0xb0 [ 1328.130460][T20083] ? clear_bhb_loop+0x40/0x90 [ 1328.135144][T20083] ? clear_bhb_loop+0x40/0x90 [ 1328.139825][T20083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1328.145731][T20083] RIP: 0033:0x7f7fb7b9e159 [ 1328.150146][T20083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.169784][T20083] RSP: 002b:00007f7fb8a7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1328.178219][T20083] RAX: ffffffffffffffda RBX: 00007f7fb7e25fa0 RCX: 00007f7fb7b9e159 [ 1328.186192][T20083] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 1328.194164][T20083] RBP: 00007f7fb7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1328.202135][T20083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1328.210111][T20083] R13: 00007f7fb7e26038 R14: 00007f7fb7e25fa0 R15: 00007fff5a2b7378 [ 1328.218098][T20083] [ 1328.221495][ T9] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1328.229455][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1328.235470][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1328.258922][ T9] usb 1-1: device descriptor read/8, error -71 [ 1328.348359][ T5816] dvb-usb: bulk message failed: -22 (4/0) [ 1328.355962][ T5816] dvb-usb: error -22 while querying for an remote control event. [ 1328.365678][ T7583] usb 2-1: USB disconnect, device number 124 [ 1328.413737][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1328.532369][T20089] fuse: Bad value for 'fd' [ 1328.538243][ T9] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1328.570843][ T9] usb 1-1: device descriptor read/8, error -71 [ 1328.698599][ T9] usb usb1-port1: unable to enumerate USB device [ 1329.018328][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1329.208319][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1329.215191][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.228261][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1329.237510][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.245894][ T9] usb 4-1: Product: syz [ 1329.250236][ T9] usb 4-1: Manufacturer: syz [ 1329.254920][ T9] usb 4-1: SerialNumber: syz [ 1329.261536][ T9] usb 4-1: config 0 descriptor?? [ 1330.433170][T20130] jffs2: notice: (20130) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1331.090693][ T7583] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1331.360661][ T7583] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.388292][ T7583] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1331.408684][ T7583] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1331.417894][ T7583] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1331.435081][ T7583] usb 2-1: Product: syz [ 1331.439769][ T7583] usb 2-1: Manufacturer: syz [ 1331.463927][ T7583] hub 2-1:4.0: bad descriptor, ignoring hub [ 1331.477155][ T7583] hub: probe of 2-1:4.0 failed with error -5 [ 1331.485686][ T7583] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 1331.734200][T20156] jffs2: notice: (20156) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1331.764893][ T5776] usb 4-1: USB disconnect, device number 127 [ 1333.718631][ T7583] usb 2-1: USB disconnect, device number 125 [ 1334.658515][ T7583] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1335.013065][ T7583] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.028278][ T7583] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1335.044257][ T7583] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1335.054721][ T7583] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1335.069811][ T7583] usb 4-1: Product: syz [ 1335.074030][ T7583] usb 4-1: Manufacturer: syz [ 1335.091866][ T7583] hub 4-1:4.0: bad descriptor, ignoring hub [ 1335.097839][ T7583] hub: probe of 4-1:4.0 failed with error -5 [ 1335.107265][ T7583] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 1335.165421][T20273] fuse: Bad value for 'fd' [ 1335.419696][T20285] syzkaller0: entered promiscuous mode [ 1335.425610][T20285] syzkaller0: entered allmulticast mode [ 1335.788803][T20299] fuse: Bad value for 'fd' [ 1336.418252][ T7583] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1336.537719][T20317] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3878'. [ 1336.621390][ T7583] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.636530][ T7583] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1336.652640][ T7583] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.663249][ T7583] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1336.679667][ T7583] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1336.688902][ T7583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.697403][ T7583] usb 2-1: Product: syz [ 1336.702385][ T7583] usb 2-1: Manufacturer: syz [ 1336.707114][ T7583] usb 2-1: SerialNumber: syz [ 1336.722662][ T7583] ti_usb_3410_5052 2-1:2.0: required endpoints missing [ 1337.044093][T20337] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3887'. [ 1337.289199][T16166] usb 4-1: USB disconnect, device number 2 [ 1337.588339][T16166] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1337.660946][T20371] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3899'. [ 1337.778324][T16166] usb 1-1: Using ep0 maxpacket: 16 [ 1337.785948][T16166] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.798266][T16166] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1337.813528][T16166] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1337.823942][T16166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.832745][T16166] usb 1-1: Product: syz [ 1337.837006][T16166] usb 1-1: Manufacturer: syz [ 1337.843433][T16166] usb 1-1: SerialNumber: syz [ 1337.850761][T16166] usb 1-1: config 0 descriptor?? [ 1338.342586][T20391] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3908'. [ 1338.688780][T20411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3917'. [ 1339.096870][T20437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3927'. [ 1339.156250][ T7583] usb 2-1: USB disconnect, device number 126 [ 1339.809155][T16166] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1339.858376][ T7583] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1340.101353][T16166] usb 2-1: Using ep0 maxpacket: 8 [ 1340.235813][T16166] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1340.342079][T16166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.485016][T16166] usb 2-1: Product: syz [ 1340.565596][T16166] usb 2-1: Manufacturer: syz [ 1340.635945][T16166] usb 2-1: SerialNumber: syz [ 1340.648976][ T7583] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.663350][T16166] usb 2-1: config 0 descriptor?? [ 1340.668208][ T7583] usb 4-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1340.681343][ T5810] usb 1-1: USB disconnect, device number 121 [ 1340.685537][ T7583] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.693696][T16166] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1340.708565][ T7583] usb 4-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1340.721883][T16166] pctv452e: pctv452e_power_ctrl: 1 [ 1340.721883][T16166] [ 1340.735532][T16166] usb 2-1: selecting invalid altsetting 3 [ 1340.743300][T16166] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1340.743300][T16166] [ 1340.758619][T16166] dvb-usb: bulk message failed: -22 (5/0) [ 1340.773085][T16166] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1340.786150][T16166] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1340.797433][T16166] usb 2-1: media controller created [ 1340.813524][T16166] dvb-usb: bulk message failed: -22 (8/0) [ 1340.832032][T16166] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1340.851462][ T7583] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1340.852643][T16166] dvb-usb: MAC address reading failed. [ 1340.861516][ T7583] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.874354][ T7583] usb 4-1: Product: syz [ 1340.882512][ T7583] usb 4-1: Manufacturer: syz [ 1340.887161][ T7583] usb 4-1: SerialNumber: syz [ 1340.898522][T20456] dvb-usb: bulk message failed: -22 (7/0) [ 1340.904298][T20456] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1340.916778][ T7583] ti_usb_3410_5052 4-1:2.0: required endpoints missing [ 1340.923191][T16166] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1340.925052][T20474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3942'. [ 1340.975523][T16166] DVB: Unable to find symbol stb0899_attach() [ 1340.986686][T16166] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1341.007518][T16166] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1341.014084][T16166] Registered IR keymap rc-empty [ 1341.022609][T16166] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1341.034592][T16166] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input102 [ 1341.047519][T16166] dvb-usb: schedule remote query interval to 100 msecs. [ 1341.055253][T16166] pctv452e: pctv452e_power_ctrl: 0 [ 1341.055253][T16166] [ 1341.063496][T16166] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1341.133010][ T7583] usb 2-1: USB disconnect, device number 127 [ 1341.181514][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1342.752302][ T5810] usb 4-1: USB disconnect, device number 3 [ 1342.840759][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1343.068307][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 1343.078872][ T5816] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1343.088016][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.096580][ T5816] usb 2-1: Product: syz [ 1343.101097][ T5816] usb 2-1: Manufacturer: syz [ 1343.105923][ T5816] usb 2-1: SerialNumber: syz [ 1343.113256][ T5816] usb 2-1: config 0 descriptor?? [ 1343.124229][ T5816] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1343.132393][ T5816] pctv452e: pctv452e_power_ctrl: 1 [ 1343.132393][ T5816] [ 1343.139848][ T5816] usb 2-1: selecting invalid altsetting 3 [ 1343.145603][ T5816] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1343.145603][ T5816] [ 1343.156969][ T5816] dvb-usb: bulk message failed: -22 (5/0) [ 1343.164917][ T5816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1343.175215][ T5816] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1343.183748][ T5816] usb 2-1: media controller created [ 1343.189129][ T5816] dvb-usb: bulk message failed: -22 (8/0) [ 1343.194866][ T5816] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1343.203154][ T5816] dvb-usb: MAC address reading failed. [ 1343.221058][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1343.228350][ T5810] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1343.247253][ T5816] DVB: Unable to find symbol stb0899_attach() [ 1343.253441][ T5816] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1343.264300][ T5816] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1343.270555][ T5816] Registered IR keymap rc-empty [ 1343.276543][ T5816] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1343.287890][ T5816] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input103 [ 1343.303244][ T5816] dvb-usb: schedule remote query interval to 100 msecs. [ 1343.310620][ T5816] pctv452e: pctv452e_power_ctrl: 0 [ 1343.310620][ T5816] [ 1343.317917][ T5816] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1343.329355][T20499] dvb-usb: bulk message failed: -22 (7/0) [ 1343.335085][T20499] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1343.418544][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 1343.420272][ T5816] dvb-usb: bulk message failed: -22 (4/0) [ 1343.429639][ T5816] dvb-usb: error -22 while querying for an remote control event. [ 1343.433347][ T5810] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1343.455785][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.464708][ T5810] usb 4-1: Product: syz [ 1343.469284][ T5810] usb 4-1: Manufacturer: syz [ 1343.473992][ T5810] usb 4-1: SerialNumber: syz [ 1343.491044][ T5810] usb 4-1: config 0 descriptor?? [ 1343.504342][ T5810] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1343.516439][ T5810] pctv452e: pctv452e_power_ctrl: 1 [ 1343.516439][ T5810] [ 1343.524707][ T5810] usb 4-1: selecting invalid altsetting 3 [ 1343.530858][ T5810] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1343.530858][ T5810] [ 1343.541935][ T5810] dvb-usb: bulk message failed: -22 (5/0) [ 1343.553909][ T5816] dvb-usb: bulk message failed: -22 (4/0) [ 1343.559075][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1343.559898][ T5816] dvb-usb: error -22 while querying for an remote control event. [ 1343.573353][ T5810] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1343.585680][ T5810] usb 4-1: media controller created [ 1343.591290][ T5810] dvb-usb: bulk message failed: -22 (8/0) [ 1343.597159][ T5810] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1343.605560][ T5810] dvb-usb: MAC address reading failed. [ 1343.630568][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1343.679851][ T5810] DVB: Unable to find symbol stb0899_attach() [ 1343.686031][ T5810] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1343.689495][ T5816] usb 2-1: USB disconnect, device number 2 [ 1343.700835][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1343.706591][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1343.725708][T20522] dvb-usb: bulk message failed: -22 (7/0) [ 1343.742620][ T5810] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1343.748333][T20522] pctv452e: I2C error -22; AA 06 08 00 00 -> aa 06 31 03 08 00 00 [ 1343.760496][ T5810] Registered IR keymap rc-empty [ 1343.772127][ T5810] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1 [ 1343.808545][ T5810] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1/input104 [ 1343.838450][ T5810] dvb-usb: schedule remote query interval to 100 msecs. [ 1343.872060][ T5810] pctv452e: pctv452e_power_ctrl: 0 [ 1343.872060][ T5810] [ 1343.928036][ T5810] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1343.993341][ T5810] dvb-usb: bulk message failed: -22 (4/0) [ 1344.026172][ T5810] dvb-usb: error -22 while querying for an remote control event. [ 1344.770525][ T5810] dvb-usb: bulk message failed: -22 (4/0) [ 1344.776346][ T5810] dvb-usb: error -22 while querying for an remote control event. [ 1344.929368][ T5810] dvb-usb: bulk message failed: -22 (4/0) [ 1344.939402][ T7583] usb 4-1: USB disconnect, device number 4 [ 1344.939694][ T5810] dvb-usb: error -22 while querying for an remote control event. [ 1344.948853][ T5816] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1345.056711][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1345.428066][T20584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3977'. [ 1345.640440][T20589] FAULT_INJECTION: forcing a failure. [ 1345.640440][T20589] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1345.654251][T20589] CPU: 1 PID: 20589 Comm: syz.3.3979 Not tainted syzkaller #0 [ 1345.661759][T20589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1345.671817][T20589] Call Trace: [ 1345.675142][T20589] [ 1345.678180][T20589] dump_stack_lvl+0x18c/0x250 [ 1345.682888][T20589] ? show_regs_print_info+0x20/0x20 [ 1345.688092][T20589] ? load_image+0x420/0x420 [ 1345.692601][T20589] ? __might_fault+0xaa/0x120 [ 1345.697293][T20589] should_fail_ex+0x394/0x4c0 [ 1345.701977][T20589] get_futex_key+0x136/0x1030 [ 1345.706652][T20589] ? futex_setup_timer+0xc0/0xc0 [ 1345.709683][ T7583] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1345.711626][T20589] futex_wake+0x127/0x4f0 [ 1345.723610][T20589] ? futex_wake_mark+0x150/0x150 [ 1345.728563][T20589] ? __lock_acquire+0x7d80/0x7d80 [ 1345.733615][T20589] ? file_end_write+0x159/0x250 [ 1345.738477][T20589] ? vfs_write+0x5de/0x9a0 [ 1345.742899][T20589] do_futex+0x35d/0x3e0 [ 1345.747067][T20589] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1345.752970][T20589] __se_sys_futex+0x3a9/0x440 [ 1345.757651][T20589] ? __x64_sys_futex+0xf0/0xf0 [ 1345.762449][T20589] ? __x64_sys_futex+0x21/0xf0 [ 1345.767233][T20589] do_syscall_64+0x55/0xb0 [ 1345.771664][T20589] ? clear_bhb_loop+0x40/0x90 [ 1345.776348][T20589] ? clear_bhb_loop+0x40/0x90 [ 1345.781026][T20589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1345.787184][T20589] RIP: 0033:0x7f7fb7b9e159 [ 1345.791694][T20589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1345.811394][T20589] RSP: 002b:00007f7fb8a7d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1345.819824][T20589] RAX: ffffffffffffffda RBX: 00007f7fb7e25fa8 RCX: 00007f7fb7b9e159 [ 1345.827819][T20589] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7fb7e25fac [ 1345.835790][T20589] RBP: 00007f7fb7e25fa0 R08: 00000000007459d7 R09: 0000000000000000 [ 1345.843851][T20589] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1345.851823][T20589] R13: 00007f7fb7e26038 R14: 00007fff5a2b7290 R15: 00007fff5a2b7378 [ 1345.859832][T20589] [ 1345.929177][ T7583] usb 1-1: Using ep0 maxpacket: 8 [ 1345.941476][ T7583] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1345.952745][ T7583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.962495][ T7583] usb 1-1: Product: syz [ 1345.966829][ T7583] usb 1-1: Manufacturer: syz [ 1345.972279][ T7583] usb 1-1: SerialNumber: syz [ 1345.983228][ T7583] usb 1-1: config 0 descriptor?? [ 1345.995452][ T7583] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1346.010518][ T7583] pctv452e: pctv452e_power_ctrl: 1 [ 1346.010518][ T7583] [ 1346.024083][ T7583] usb 1-1: selecting invalid altsetting 3 [ 1346.032655][ T7583] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1346.032655][ T7583] [ 1346.044846][ T7583] dvb-usb: bulk message failed: -22 (5/0) [ 1346.061615][ T7583] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1346.074050][ T7583] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1346.094041][ T7583] usb 1-1: media controller created [ 1346.103983][ T7583] dvb-usb: bulk message failed: -22 (8/0) [ 1346.113479][ T7583] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1346.123888][ T7583] dvb-usb: MAC address reading failed. [ 1346.157530][ T7583] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1346.192750][ T7583] DVB: Unable to find symbol stb0899_attach() [ 1346.201212][ T7583] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1346.211107][T20584] dvb-usb: bulk message failed: -22 (7/0) [ 1346.217218][T20584] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1346.237589][ T7583] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1346.255443][ T7583] Registered IR keymap rc-empty [ 1346.262112][ T7583] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1346.295872][ T7583] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input105 [ 1346.318953][ T7583] dvb-usb: schedule remote query interval to 100 msecs. [ 1346.340235][ T7583] pctv452e: pctv452e_power_ctrl: 0 [ 1346.340235][ T7583] [ 1346.347577][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1346.448296][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1346.460308][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1346.568282][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1346.574125][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1346.691444][ T7583] usb 1-1: USB disconnect, device number 122 [ 1346.746706][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1346.838266][T13285] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1347.028966][T13285] usb 2-1: Using ep0 maxpacket: 8 [ 1347.039904][T13285] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1347.049422][T13285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.057452][T13285] usb 2-1: Product: syz [ 1347.062221][T13285] usb 2-1: Manufacturer: syz [ 1347.066853][T13285] usb 2-1: SerialNumber: syz [ 1347.074512][T13285] usb 2-1: config 0 descriptor?? [ 1347.083791][T13285] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1347.095884][T13285] pctv452e: pctv452e_power_ctrl: 1 [ 1347.095884][T13285] [ 1347.103941][T13285] usb 2-1: selecting invalid altsetting 3 [ 1347.110344][T13285] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1347.110344][T13285] [ 1347.121255][T13285] dvb-usb: bulk message failed: -22 (5/0) [ 1347.132031][T13285] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1347.142340][T13285] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1347.151319][T13285] usb 2-1: media controller created [ 1347.156722][T13285] dvb-usb: bulk message failed: -22 (8/0) [ 1347.162526][T13285] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1347.171054][T13285] dvb-usb: MAC address reading failed. [ 1347.187362][T13285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1347.205890][T13285] DVB: Unable to find symbol stb0899_attach() [ 1347.212207][T13285] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1347.218255][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1347.238492][T13285] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1347.244589][T13285] Registered IR keymap rc-empty [ 1347.259397][T13285] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1347.271307][T13285] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input106 [ 1347.285086][T20613] dvb-usb: bulk message failed: -22 (7/0) [ 1347.291268][T20613] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1347.301732][T13285] dvb-usb: schedule remote query interval to 100 msecs. [ 1347.316423][T13285] pctv452e: pctv452e_power_ctrl: 0 [ 1347.316423][T13285] [ 1347.324396][T13285] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1347.410007][ T23] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.423137][ T23] usb 4-1: config 2 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1347.431730][T13285] dvb-usb: bulk message failed: -22 (4/0) [ 1347.440035][ T23] usb 4-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1347.448539][T13285] dvb-usb: error -22 while querying for an remote control event. [ 1347.454841][ T23] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.474093][ T23] usb 4-1: config 2 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1347.486113][ T23] usb 4-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1347.501836][ T23] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1347.511547][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.519974][ T23] usb 4-1: Product: syz [ 1347.524745][ T23] usb 4-1: Manufacturer: syz [ 1347.529936][ T23] usb 4-1: SerialNumber: syz [ 1347.541608][ T23] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 1347.550668][ T23] ti_usb_3410_5052 4-1:2.0: missing endpoints [ 1347.588526][T13285] dvb-usb: bulk message failed: -22 (4/0) [ 1347.595135][ T23] usb 2-1: USB disconnect, device number 3 [ 1347.603170][T13285] dvb-usb: error -22 while querying for an remote control event. [ 1347.635577][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1348.166527][T20644] FAULT_INJECTION: forcing a failure. [ 1348.166527][T20644] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1348.179934][T20644] CPU: 1 PID: 20644 Comm: syz.1.3999 Not tainted syzkaller #0 [ 1348.187434][T20644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1348.197492][T20644] Call Trace: [ 1348.200786][T20644] [ 1348.203718][T20644] dump_stack_lvl+0x18c/0x250 [ 1348.208405][T20644] ? show_regs_print_info+0x20/0x20 [ 1348.213599][T20644] ? load_image+0x420/0x420 [ 1348.218098][T20644] ? get_user_pages_fast_only+0xa0/0xa0 [ 1348.223678][T20644] should_fail_ex+0x394/0x4c0 [ 1348.228391][T20644] get_futex_key+0x857/0x1030 [ 1348.233100][T20644] ? futex_setup_timer+0xc0/0xc0 [ 1348.238072][T20644] futex_wake+0x127/0x4f0 [ 1348.242427][T20644] ? virtblk_probe_zoned_device+0x420/0x910 [ 1348.248358][T20644] ? futex_wake_mark+0x150/0x150 [ 1348.253342][T20644] do_futex+0x35d/0x3e0 [ 1348.257539][T20644] ? __might_fault+0xaa/0x120 [ 1348.262244][T20644] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1348.268168][T20644] ? __might_fault+0xc6/0x120 [ 1348.272876][T20644] mm_release+0x184/0x3a0 [ 1348.277236][T20644] ? exit_mm_release+0x30/0x30 [ 1348.280349][T20646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4000'. [ 1348.282010][T20644] ? lockdep_hardirqs_on+0x98/0x150 [ 1348.296168][T20644] exit_mm+0xa4/0x340 [ 1348.300183][T20644] ? sysctl_delayacct+0x220/0x220 [ 1348.305243][T20644] ? do_exit+0x2530/0x2530 [ 1348.309710][T20644] ? tty_audit_exit+0x14d/0x1f0 [ 1348.314564][T20644] do_exit+0x909/0x2530 [ 1348.318721][T20644] ? put_task_struct+0xc0/0xc0 [ 1348.323483][T20644] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1348.329460][T20644] ? get_signal+0x100e/0x1390 [ 1348.334126][T20644] ? lock_chain_count+0x20/0x20 [ 1348.338981][T20644] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1348.344015][T20644] do_group_exit+0x22d/0x2f0 [ 1348.348598][T20644] ? lockdep_hardirqs_on+0x98/0x150 [ 1348.353792][T20644] get_signal+0x12a6/0x1390 [ 1348.358310][T20644] arch_do_signal_or_restart+0xc2/0x7b0 [ 1348.363850][T20644] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1348.369731][T20644] ? get_sigframe_size+0x20/0x20 [ 1348.374669][T20644] ? exit_to_user_mode_loop+0x3b/0x110 [ 1348.380121][T20644] exit_to_user_mode_loop+0x70/0x110 [ 1348.385418][T20644] exit_to_user_mode_prepare+0xee/0x180 [ 1348.390970][T20644] syscall_exit_to_user_mode+0x1a/0x50 [ 1348.396532][T20644] do_syscall_64+0x61/0xb0 [ 1348.400940][T20644] ? clear_bhb_loop+0x40/0x90 [ 1348.405610][T20644] ? clear_bhb_loop+0x40/0x90 [ 1348.410279][T20644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.416169][T20644] RIP: 0033:0x7f469db9e159 [ 1348.420568][T20644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.440263][T20644] RSP: 002b:00007f469e9e90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1348.448703][T20644] RAX: fffffffffffffe00 RBX: 00007f469de25fa8 RCX: 00007f469db9e159 [ 1348.456697][T20644] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f469de25fa8 [ 1348.464695][T20644] RBP: 00007f469de25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.472689][T20644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1348.480693][T20644] R13: 00007f469de26038 R14: 00007ffdfe4485b0 R15: 00007ffdfe448698 [ 1348.488705][T20644] [ 1348.598419][ T7583] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1348.808234][ T7583] usb 1-1: Using ep0 maxpacket: 8 [ 1348.816832][ T7583] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1348.826146][ T7583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.834355][ T7583] usb 1-1: Product: syz [ 1348.838845][ T7583] usb 1-1: Manufacturer: syz [ 1348.843484][ T7583] usb 1-1: SerialNumber: syz [ 1348.857472][ T7583] usb 1-1: config 0 descriptor?? [ 1348.865658][ T7583] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1348.873741][ T7583] pctv452e: pctv452e_power_ctrl: 1 [ 1348.873741][ T7583] [ 1348.881118][ T7583] usb 1-1: selecting invalid altsetting 3 [ 1348.886848][ T7583] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1348.886848][ T7583] [ 1348.897130][ T7583] dvb-usb: bulk message failed: -22 (5/0) [ 1348.906514][ T7583] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1348.916616][ T7583] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1348.925353][ T7583] usb 1-1: media controller created [ 1348.930667][ T7583] dvb-usb: bulk message failed: -22 (8/0) [ 1348.936399][ T7583] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1348.944527][ T7583] dvb-usb: MAC address reading failed. [ 1348.961466][ T7583] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1348.987896][ T7583] DVB: Unable to find symbol stb0899_attach() [ 1348.994212][ T7583] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1349.004702][ T7583] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1349.010931][ T7583] Registered IR keymap rc-empty [ 1349.017943][ T7583] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1349.031761][ T7583] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input107 [ 1349.045969][ T7583] dvb-usb: schedule remote query interval to 100 msecs. [ 1349.053409][ T7583] pctv452e: pctv452e_power_ctrl: 0 [ 1349.053409][ T7583] [ 1349.062421][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1349.076273][T20646] dvb-usb: bulk message failed: -22 (7/0) [ 1349.083080][T20646] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1349.160331][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1349.166139][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1349.298399][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1349.304197][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1349.321321][ T23] usb 1-1: USB disconnect, device number 123 [ 1349.355688][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1349.427279][T20667] ip_tables: iptables: counters copy to user failed while replacing table [ 1349.477038][T20669] syzkaller0: entered promiscuous mode [ 1349.482646][T20669] syzkaller0: entered allmulticast mode [ 1349.877573][T20674] FAULT_INJECTION: forcing a failure. [ 1349.877573][T20674] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1349.890767][T20674] CPU: 1 PID: 20674 Comm: syz.0.4010 Not tainted syzkaller #0 [ 1349.898260][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1349.908363][T20674] Call Trace: [ 1349.911745][T20674] [ 1349.914677][T20674] dump_stack_lvl+0x18c/0x250 [ 1349.919366][T20674] ? show_regs_print_info+0x20/0x20 [ 1349.924649][T20674] ? load_image+0x420/0x420 [ 1349.929150][T20674] ? get_user_pages_fast_only+0xa0/0xa0 [ 1349.934796][T20674] should_fail_ex+0x394/0x4c0 [ 1349.939476][T20674] get_futex_key+0x857/0x1030 [ 1349.944175][T20674] ? futex_setup_timer+0xc0/0xc0 [ 1349.949395][T20674] futex_wake+0x127/0x4f0 [ 1349.953752][T20674] ? futex_wake_mark+0x150/0x150 [ 1349.958715][T20674] do_futex+0x35d/0x3e0 [ 1349.962874][T20674] ? __might_fault+0xaa/0x120 [ 1349.967559][T20674] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1349.973449][T20674] ? __might_fault+0xc6/0x120 [ 1349.978301][T20674] mm_release+0x184/0x3a0 [ 1349.982634][T20674] ? exit_mm_release+0x30/0x30 [ 1349.987394][T20674] ? lockdep_hardirqs_on+0x98/0x150 [ 1349.992594][T20674] exit_mm+0xa4/0x340 [ 1349.996576][T20674] ? sysctl_delayacct+0x220/0x220 [ 1350.001596][T20674] ? do_exit+0x2530/0x2530 [ 1350.006042][T20674] ? tty_audit_exit+0x14d/0x1f0 [ 1350.010911][T20674] do_exit+0x909/0x2530 [ 1350.015075][T20674] ? put_task_struct+0xc0/0xc0 [ 1350.019864][T20674] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1350.025844][T20674] ? get_signal+0x100e/0x1390 [ 1350.030545][T20674] ? lock_chain_count+0x20/0x20 [ 1350.035391][T20674] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1350.040417][T20674] do_group_exit+0x22d/0x2f0 [ 1350.045090][T20674] ? lockdep_hardirqs_on+0x98/0x150 [ 1350.050309][T20674] get_signal+0x12a6/0x1390 [ 1350.054959][T20674] arch_do_signal_or_restart+0xc2/0x7b0 [ 1350.060682][T20674] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1350.066572][T20674] ? get_sigframe_size+0x20/0x20 [ 1350.071520][T20674] ? exit_to_user_mode_loop+0x3b/0x110 [ 1350.076984][T20674] exit_to_user_mode_loop+0x70/0x110 [ 1350.082281][T20674] exit_to_user_mode_prepare+0xee/0x180 [ 1350.087827][T20674] syscall_exit_to_user_mode+0x1a/0x50 [ 1350.093282][T20674] do_syscall_64+0x61/0xb0 [ 1350.097715][T20674] ? clear_bhb_loop+0x40/0x90 [ 1350.102395][T20674] ? clear_bhb_loop+0x40/0x90 [ 1350.107071][T20674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.112990][T20674] RIP: 0033:0x7fc48119e159 [ 1350.117401][T20674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.137004][T20674] RSP: 002b:00007fc4820d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1350.145507][T20674] RAX: fffffffffffffe00 RBX: 00007fc481425fa8 RCX: 00007fc48119e159 [ 1350.153472][T20674] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc481425fa8 [ 1350.161434][T20674] RBP: 00007fc481425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.169401][T20674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.177370][T20674] R13: 00007fc481426038 R14: 00007ffc757fc940 R15: 00007ffc757fca28 [ 1350.185349][T20674] [ 1350.221424][T13285] usb 4-1: USB disconnect, device number 5 [ 1350.397380][T20684] binder: 20683:20684 ioctl c0306201 0 returned -14 [ 1350.503442][T20689] syzkaller0: entered promiscuous mode [ 1350.510595][T20689] syzkaller0: entered allmulticast mode [ 1350.633637][T20692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4019'. [ 1350.778406][T13285] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1350.908335][ T7583] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1350.963602][T13285] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.974022][T13285] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1350.984502][T13285] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1351.003711][T13285] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1351.013026][T13285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1351.025753][T13285] usb 1-1: Product: syz [ 1351.030230][T13285] usb 1-1: Manufacturer: syz [ 1351.037679][T20690] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1351.047512][T13285] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 1351.058038][T13285] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1351.098253][ T7583] usb 4-1: Using ep0 maxpacket: 8 [ 1351.108841][ T7583] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1351.117949][ T7583] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.126427][ T7583] usb 4-1: Product: syz [ 1351.130751][ T7583] usb 4-1: Manufacturer: syz [ 1351.135427][ T7583] usb 4-1: SerialNumber: syz [ 1351.144761][ T7583] usb 4-1: config 0 descriptor?? [ 1351.153014][ T7583] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1351.161057][ T7583] pctv452e: pctv452e_power_ctrl: 1 [ 1351.161057][ T7583] [ 1351.168605][ T7583] usb 4-1: selecting invalid altsetting 3 [ 1351.174393][ T7583] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1351.174393][ T7583] [ 1351.184719][ T7583] dvb-usb: bulk message failed: -22 (5/0) [ 1351.193802][ T7583] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1351.203776][ T7583] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1351.212219][ T7583] usb 4-1: media controller created [ 1351.217456][ T7583] dvb-usb: bulk message failed: -22 (8/0) [ 1351.223626][ T7583] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1351.232047][ T7583] dvb-usb: MAC address reading failed. [ 1351.270771][ T7583] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1351.277001][ T5810] usb 1-1: USB disconnect, device number 124 [ 1351.302386][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1351.310920][ T5810] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1351.315096][ T7583] DVB: Unable to find symbol stb0899_attach() [ 1351.323542][ T5810] garmin_gps 1-1:1.0: device disconnected [ 1351.327818][ T7583] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1351.345493][ T7583] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1351.353040][ T7583] Registered IR keymap rc-empty [ 1351.359223][T20692] dvb-usb: bulk message failed: -22 (7/0) [ 1351.364980][T20692] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1351.374310][ T7583] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1351.391245][ T7583] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input108 [ 1351.403625][ T7583] dvb-usb: schedule remote query interval to 100 msecs. [ 1351.411049][ T7583] pctv452e: pctv452e_power_ctrl: 0 [ 1351.411049][ T7583] [ 1351.418549][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1351.500200][ T23] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.518222][ T23] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1351.518577][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1351.536988][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1351.539058][ T23] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1351.555824][ T23] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1351.570488][ T23] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.580989][ T23] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1351.590803][ T23] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1351.600673][ T23] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1351.624907][ T23] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1351.638463][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.648485][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1351.654284][ T7583] dvb-usb: error -22 while querying for an remote control event. [ 1351.660983][ T23] usb 2-1: Product: syz [ 1351.666420][ T23] usb 2-1: Manufacturer: syz [ 1351.679268][ T23] usb 2-1: SerialNumber: syz [ 1351.699953][ T23] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 1351.722592][ T23] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1351.735124][ T23] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1351.751350][ T7583] usb 4-1: USB disconnect, device number 6 [ 1351.841383][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1351.927552][T20694] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1352.024069][T20709] binder: 20708:20709 ioctl c0306201 0 returned -14 [ 1352.076977][T20713] syzkaller0: entered promiscuous mode [ 1352.083109][T20713] syzkaller0: entered allmulticast mode [ 1352.458413][ T23] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1352.658306][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1352.667092][ T23] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1352.676649][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.684896][ T23] usb 1-1: Product: syz [ 1352.690088][ T23] usb 1-1: Manufacturer: syz [ 1352.695067][ T23] usb 1-1: SerialNumber: syz [ 1352.701784][ T23] usb 1-1: config 0 descriptor?? [ 1352.709694][ T23] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1352.717810][ T23] pctv452e: pctv452e_power_ctrl: 1 [ 1352.717810][ T23] [ 1352.725212][ T23] usb 1-1: selecting invalid altsetting 3 [ 1352.731626][ T23] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1352.731626][ T23] [ 1352.742095][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 1352.750803][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1352.760848][ T23] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1352.769383][ T23] usb 1-1: media controller created [ 1352.774806][ T23] dvb-usb: bulk message failed: -22 (8/0) [ 1352.780638][ T23] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1352.788766][ T23] dvb-usb: MAC address reading failed. [ 1352.804694][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1352.821762][ T23] DVB: Unable to find symbol stb0899_attach() [ 1352.827966][ T23] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1352.838777][ T23] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1352.844862][ T23] Registered IR keymap rc-empty [ 1352.850950][ T23] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1352.862167][ T23] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input109 [ 1352.875318][ T23] dvb-usb: schedule remote query interval to 100 msecs. [ 1352.882326][ T23] pctv452e: pctv452e_power_ctrl: 0 [ 1352.882326][ T23] [ 1352.889882][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1352.939597][T20715] dvb-usb: bulk message failed: -22 (7/0) [ 1352.945549][T20715] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1352.988433][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 1352.994234][ T23] dvb-usb: error -22 while querying for an remote control event. [ 1353.101377][ T7583] usb 1-1: USB disconnect, device number 125 [ 1353.136848][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1353.506012][T20744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4037'. [ 1354.048648][ T7583] usb 2-1: USB disconnect, device number 4 [ 1354.068920][ T7583] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1354.100131][ T7583] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1354.125657][ T7583] ti_usb_3410_5052 2-1:2.0: device disconnected [ 1354.563296][T20769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4047'. [ 1354.658334][ T5776] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1354.838294][T13285] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1354.849910][ T5776] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.860240][ T5776] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1354.870149][ T5776] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1354.885287][ T5776] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1354.894537][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1354.902660][ T5776] usb 2-1: Product: syz [ 1354.906842][ T5776] usb 2-1: Manufacturer: syz [ 1354.915139][T20759] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1354.923777][ T5776] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1354.934247][ T5776] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1355.018285][T13285] usb 1-1: Using ep0 maxpacket: 8 [ 1355.030371][T13285] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1355.039513][T13285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.047524][T13285] usb 1-1: Product: syz [ 1355.051893][T13285] usb 1-1: Manufacturer: syz [ 1355.056509][T13285] usb 1-1: SerialNumber: syz [ 1355.065537][T13285] usb 1-1: config 0 descriptor?? [ 1355.078092][T13285] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1355.086784][T13285] pctv452e: pctv452e_power_ctrl: 1 [ 1355.086784][T13285] [ 1355.108257][T13285] usb 1-1: selecting invalid altsetting 3 [ 1355.114047][T13285] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1355.114047][T13285] [ 1355.124532][T13285] dvb-usb: bulk message failed: -22 (5/0) [ 1355.136909][T13285] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1355.153761][T13285] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1355.164110][T13285] usb 1-1: media controller created [ 1355.178229][T13285] dvb-usb: bulk message failed: -22 (8/0) [ 1355.184051][T13285] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1355.192410][T13285] dvb-usb: MAC address reading failed. [ 1355.192730][ T5776] usb 2-1: USB disconnect, device number 5 [ 1355.211523][ T5776] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1355.227530][T13285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1355.229122][ T5776] garmin_gps 2-1:1.0: device disconnected [ 1355.264275][T13285] DVB: Unable to find symbol stb0899_attach() [ 1355.270615][T13285] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1355.281536][T20769] dvb-usb: bulk message failed: -22 (7/0) [ 1355.287307][T20769] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1355.297208][T13285] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1355.303858][T13285] Registered IR keymap rc-empty [ 1355.310103][T13285] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1355.330930][T13285] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input110 [ 1355.347256][T13285] dvb-usb: schedule remote query interval to 100 msecs. [ 1355.370292][T13285] pctv452e: pctv452e_power_ctrl: 0 [ 1355.370292][T13285] [ 1355.388036][T13285] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1355.478290][T13285] dvb-usb: bulk message failed: -22 (4/0) [ 1355.484091][T13285] dvb-usb: error -22 while querying for an remote control event. [ 1355.618308][T13285] dvb-usb: bulk message failed: -22 (4/0) [ 1355.624067][T13285] dvb-usb: error -22 while querying for an remote control event. [ 1355.651373][ T5776] usb 1-1: USB disconnect, device number 126 [ 1355.702158][ T5776] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1356.208256][T16166] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1356.349569][T13285] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1356.393274][T16166] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1356.406871][T16166] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1356.431807][T16166] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1356.441511][T16166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.461488][T16166] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 1356.482932][T16166] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1356.550276][T13285] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.563685][T13285] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1356.573880][T13285] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1356.590910][T13285] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1356.609362][T13285] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.622127][T13285] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1356.633111][T13285] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1356.645180][T13285] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1356.664672][T13285] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1356.674157][T13285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.684560][T13285] usb 2-1: Product: syz [ 1356.693001][T13285] usb 2-1: Manufacturer: syz [ 1356.697974][T13285] usb 2-1: SerialNumber: syz [ 1356.718092][T13285] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 1356.731587][T13285] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1356.746101][T13285] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 1357.028998][T20803] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1357.036460][T20803] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1357.045716][T20803] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1357.126206][T16166] usb 4-1: USB disconnect, device number 7 [ 1357.138460][T16166] SPCP8x5 ttyUSB0: failed to set control lines: -19 [ 1357.147301][T16166] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1357.156081][T16166] spcp8x5 4-1:1.0: device disconnected [ 1357.288258][T13285] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1357.478395][T13285] usb 1-1: Using ep0 maxpacket: 8 [ 1357.487481][T13285] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1357.496957][T13285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.505045][T13285] usb 1-1: Product: syz [ 1357.509324][T13285] usb 1-1: Manufacturer: syz [ 1357.514025][T13285] usb 1-1: SerialNumber: syz [ 1357.521754][T13285] usb 1-1: config 0 descriptor?? [ 1357.530710][T13285] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1357.538890][T13285] pctv452e: pctv452e_power_ctrl: 1 [ 1357.538890][T13285] [ 1357.546354][T13285] usb 1-1: selecting invalid altsetting 3 [ 1357.552186][T13285] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1357.552186][T13285] [ 1357.562516][T13285] dvb-usb: bulk message failed: -22 (5/0) [ 1357.570750][T13285] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1357.580743][T13285] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1357.589381][T13285] usb 1-1: media controller created [ 1357.594633][T13285] dvb-usb: bulk message failed: -22 (8/0) [ 1357.600491][T13285] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1357.608649][T13285] dvb-usb: MAC address reading failed. [ 1357.625397][T13285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1357.647447][T13285] DVB: Unable to find symbol stb0899_attach() [ 1357.653734][T13285] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1357.667848][T13285] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1357.674132][T13285] Registered IR keymap rc-empty [ 1357.681412][T13285] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1357.693822][T13285] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input111 [ 1357.707751][T13285] dvb-usb: schedule remote query interval to 100 msecs. [ 1357.714926][T13285] pctv452e: pctv452e_power_ctrl: 0 [ 1357.714926][T13285] [ 1357.722393][T13285] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1357.730037][T20825] dvb-usb: bulk message failed: -22 (7/0) [ 1357.738301][T20825] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1357.818380][T13285] dvb-usb: bulk message failed: -22 (4/0) [ 1357.828274][T13285] dvb-usb: error -22 while querying for an remote control event. [ 1357.932202][T13285] usb 1-1: USB disconnect, device number 127 [ 1357.982355][T13285] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1358.256678][T20848] loop5: detected capacity change from 0 to 4095 [ 1358.269473][ C1] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1358.285088][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 1358.288041][ C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.295004][ C1] I/O error, dev loop5, sector 1032 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 1358.304670][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 1358.314429][ C1] I/O error, dev loop5, sector 2112 op 0x0:(READ) flags 0x80700 phys_seg 48 prio class 2 [ 1358.324312][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.341366][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1358.668264][T13285] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1358.809970][ T7583] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1358.859686][T13285] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1358.869461][T13285] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1358.879292][T13285] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1358.888391][T13285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.904557][T13285] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 1358.914649][T13285] usb 4-1: SPCP8x5 converter now attached to ttyUSB3 [ 1358.998240][ T7583] usb 1-1: Using ep0 maxpacket: 16 [ 1359.004935][ T7583] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1359.022850][ T7583] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1359.032169][ T7583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.040338][ T7583] usb 1-1: Product: syz [ 1359.044648][ T7583] usb 1-1: Manufacturer: syz [ 1359.049527][ T7583] usb 1-1: SerialNumber: syz [ 1359.056680][ T7583] usb 1-1: config 0 descriptor?? [ 1359.095546][T20858] »»»»»»: renamed from vlan0 (while UP) [ 1359.122949][ T7583] usb 2-1: USB disconnect, device number 6 [ 1359.145773][ T7583] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1359.173120][ T7583] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 1359.209116][ T7583] ti_usb_3410_5052 2-1:2.0: device disconnected [ 1359.818473][ T7583] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1360.008336][ T7583] usb 2-1: Using ep0 maxpacket: 8 [ 1360.018974][ T7583] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1360.031584][ T7583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.041210][ T7583] usb 2-1: Product: syz [ 1360.045994][ T7583] usb 2-1: Manufacturer: syz [ 1360.054600][ T7583] usb 2-1: SerialNumber: syz [ 1360.062920][ T7583] usb 2-1: config 0 descriptor?? [ 1360.072337][ T7583] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1360.080781][ T7583] pctv452e: pctv452e_power_ctrl: 1 [ 1360.080781][ T7583] [ 1360.088668][ T7583] usb 2-1: selecting invalid altsetting 3 [ 1360.094676][ T7583] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1360.094676][ T7583] [ 1360.106044][ T7583] dvb-usb: bulk message failed: -22 (5/0) [ 1360.116912][ T7583] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1360.127327][ T7583] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1360.136245][ T7583] usb 2-1: media controller created [ 1360.142000][ T7583] dvb-usb: bulk message failed: -22 (8/0) [ 1360.147847][ T7583] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1360.156567][ T7583] dvb-usb: MAC address reading failed. [ 1360.182513][ T7583] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1360.211649][ T7583] DVB: Unable to find symbol stb0899_attach() [ 1360.217870][ T7583] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1360.230694][ T7583] rc_core: Couldn't load IR keymap rc-tt-1500 [ 1360.237048][ T7583] Registered IR keymap rc-empty [ 1360.245083][ T7583] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1360.261083][ T7583] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input112 [ 1360.274187][T20872] dvb-usb: bulk message failed: -22 (7/0) [ 1360.280142][T20872] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1360.300197][ T7583] dvb-usb: schedule remote query interval to 100 msecs. [ 1360.310150][ T7583] pctv452e: pctv452e_power_ctrl: 0 [ 1360.310150][ T7583] [ 1360.317657][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1360.418477][ T7583] dvb-usb: bulk message failed: -22 (4/0) [ 1360.432311][ T7583] dvb-usb: error -22 while querying for an remote control event. SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 1360.485919][ T7583] usb 2-1: USB disconnect, device number 7 [ 1360.560077][ T7583] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1361.588527][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.622677][T13285] usb 4-1: USB disconnect, device number 8 [ 1361.632698][T16166] usb 1-1: USB disconnect, device number 2 [ 1361.656345][T13285] SPCP8x5 ttyUSB3: SPCP8x5 converter now disconnected from ttyUSB3 [ 1361.676231][T13285] spcp8x5 4-1:1.0: device disconnected [ 1361.741964][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.817772][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.861197][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.867748][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.892033][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.962974][ T42] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.985738][ T42] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.004036][ T42] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.027599][ T42] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.620896][ T42] IPVS: stopping master sync thread 17562 ... [ 1362.751372][ T42] hsr_slave_0: left promiscuous mode [ 1362.757249][ T42] hsr_slave_1: left promiscuous mode [ 1362.764054][ T42] bridge_slave_1: left allmulticast mode [ 1362.771120][ T42] bridge_slave_1: left promiscuous mode [ 1362.776872][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.787288][ T42] bridge_slave_0: left allmulticast mode [ 1362.793277][ T42] bridge_slave_0: left promiscuous mode [ 1362.799134][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.823151][ T42] veth1_macvtap: left promiscuous mode [ 1362.829638][ T42] veth0_macvtap: left promiscuous mode [ 1362.835400][ T42] veth1_vlan: left promiscuous mode [ 1362.841551][ T42] veth0_vlan: left promiscuous mode [ 1363.474286][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1363.524515][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1363.573574][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.632629][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.005552][ T42] bond0 (unregistering): Released all slaves [ 1364.287805][ T42] IPVS: stop unused estimator thread 0... [ 1364.421299][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.510563][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.580736][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.633694][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.709641][ T42] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.730709][ T42] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.754191][ T42] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.770430][ T42] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.810348][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.881685][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.966579][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.043071][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.145887][ T42] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.172173][ T42] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.205630][ T42] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.222781][ T42] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.269003][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.360384][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.457210][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.526154][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.633683][ T42] netdevsim netdevsim3 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.655945][ T42] netdevsim netdevsim3 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.677873][ T42] netdevsim netdevsim3 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.697115][ T42] netdevsim netdevsim3 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.743647][ T42] tipc: Disabling bearer [ 1365.762778][ T42] tipc: Left network mode [ 1367.227353][ T42] hsr_slave_0: left promiscuous mode [ 1367.234377][ T42] hsr_slave_1: left promiscuous mode [ 1367.240906][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1367.248401][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.256045][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1367.263620][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.272515][ T42] bridge_slave_1: left allmulticast mode [ 1367.278301][ T42] bridge_slave_1: left promiscuous mode [ 1367.284021][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.295426][ T42] bridge_slave_0: left allmulticast mode [ 1367.301334][ T42] bridge_slave_0: left promiscuous mode [ 1367.306980][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.322121][ T42] hsr_slave_0: left promiscuous mode [ 1367.327892][ T42] hsr_slave_1: left promiscuous mode [ 1367.338500][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1367.345958][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.354716][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1367.362748][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.370687][ T42] bridge_slave_1: left allmulticast mode [ 1367.376346][ T42] bridge_slave_1: left promiscuous mode [ 1367.382289][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.391533][ T42] bridge_slave_0: left allmulticast mode [ 1367.397195][ T42] bridge_slave_0: left promiscuous mode [ 1367.402959][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.415122][ T42] hsr_slave_0: left promiscuous mode [ 1367.421127][ T42] hsr_slave_1: left promiscuous mode [ 1367.426918][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1367.436165][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.444528][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1367.452088][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.460117][ T42] bridge_slave_1: left allmulticast mode [ 1367.466018][ T42] bridge_slave_1: left promiscuous mode [ 1367.475357][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.485464][ T42] bridge_slave_0: left allmulticast mode [ 1367.491342][ T42] bridge_slave_0: left promiscuous mode [ 1367.497025][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.551699][ T42] veth1_macvtap: left promiscuous mode [ 1367.557306][ T42] veth0_macvtap: left promiscuous mode [ 1367.566673][ T42] veth1_vlan: left promiscuous mode [ 1367.572106][ T42] veth0_vlan: left promiscuous mode [ 1367.581499][ T42] vlan0: left allmulticast mode [ 1367.590412][ T42] veth0_vlan: left allmulticast mode [ 1367.595752][ T42] vlan0: left promiscuous mode [ 1367.602478][ T42] veth1_macvtap: left promiscuous mode [ 1367.608090][ T42] veth0_macvtap: left promiscuous mode [ 1367.615221][ T42] veth1_vlan: left promiscuous mode [ 1367.621504][ T42] veth0_vlan: left promiscuous mode [ 1367.630222][ T42] veth1_macvtap: left promiscuous mode [ 1367.635785][ T42] veth0_macvtap: left promiscuous mode [ 1367.641637][ T42] veth1_vlan: left promiscuous mode [ 1367.646948][ T42] veth0_vlan: left promiscuous mode [ 1368.555212][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1368.607672][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1368.695565][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.745667][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.152793][ T42] bond0 (unregistering): Released all slaves [ 1369.755916][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1369.804147][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1369.851937][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.900541][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1370.283617][ T42] bond0 (unregistering): Released all slaves