last executing test programs: 6m48.682311378s ago: executing program 3 (id=2794): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 6m45.424094371s ago: executing program 3 (id=2809): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x18) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) capset(0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa, '\x00', 0x0, r2, 0x2, 0x2, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0xc11d15b68094f7d1, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 6m42.524547073s ago: executing program 3 (id=2818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x947}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x95ff, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 6m42.292196981s ago: executing program 3 (id=2820): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f0000000240)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102000000106a05d300400001"], 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406e05fc000000000000010902240001000000000904007eaeb9c9950002030000000100feff00012205000905810340040600"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1/file4\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0xa8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1, 0x0) 6m38.650102486s ago: executing program 3 (id=2832): openat$kvm(0xffffffffffffff9c, 0x0, 0x10002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1003d, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xdabeffff, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 6m36.504562704s ago: executing program 3 (id=2844): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd408205140099bb0000000109022400011b00001009040000022a3e74000905015e01031d101109050b36"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1], 0xeeee8000, 0x2011c0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000000)=0x200, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x10}, 0xc) sendto$inet6(r6, &(0x7f0000000480)="aa", 0x1, 0x20000000, 0x0, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m35.367849753s ago: executing program 1 (id=2848): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d4, 0x35c, 0x294, 0x444, 0x35c, 0x294, 0x50c, 0x50c, 0x50c, 0x50c, 0x50c, 0x6, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'pimreg0\x00', 'macvtap0\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000010000000}}, @HL={0x24}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x44}, [], [], 'vlan0\x00', 'veth1_vlan\x00'}, 0x0, 0xa4, 0x1cc}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8, 0x48000000}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xc8}}, {{@ipv6={@mcast1, @mcast2, [0x0, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x32, 0x9, 0x4, 0x40}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@rand_addr=0x64010101}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8, 0x0, {0x0, 0xc05000000000000}}, {0x24}}}}, 0x630) 6m34.938607923s ago: executing program 1 (id=2849): r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x94100, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000040)={"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"}) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)="1fa034a845ccd87c99aba611ecd901b79e222590bcfdfe156dd22fe2853cad59d2dab68c746d28b0a0ef50458a7bc7dbad702b1b669d938d8c9c839f32d769988c6eb175620fa40ffda57260b2ff37c6ba4d069ace55f5c9d336e896d465adcab3499dc774e046e80c20fdbb947c48ec2ecebbc7c25f3ac285909742e30f015837c80c57bb38be2102a7c3f7e71711dc743a745ad7d05dca97f2e4a8362a455e988729a028408a3013f43c636edcd7615727184af64473eb1e49081e27705667251fcd9937bbc449be492d6684", 0xcd}, {&(0x7f0000000580)="f3543d2587eae3be294cfbde42ffa584c33b3e5dad66def4594261971181aa05aff65389a16865fae2150b7f460ac95e6afd35cc54c13531516f392fbbd0d9bc6bae6a954fd5b578f432f2774b79d626a665faac58", 0x55}, {&(0x7f0000000600)="e2e8382af381eec2f518595612559b284dcc845ec001b97081057e0d0f86f5b74c474df07d4caa60c595f5c4efbe1d5a32d46b00010e375ef6cca5", 0x3b}], 0x3}, 0x4004801) (async) unshare(0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f00000006c0)=@isdn={0x22, 0x34, 0x7, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)="187cb8970534dd92fcc42865887d259f88c674", 0x13}], 0x1}, 0x0) (async, rerun: 32) unshare(0x2000000) (async) syz_usb_connect(0x6, 0x1a0, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x32, 0x93, 0x87, 0x10, 0x19d2, 0x1072, 0x687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18e, 0x2, 0x5, 0x0, 0x80, 0x15, [{{0x9, 0x4, 0xb5, 0x8, 0x0, 0xff, 0xff, 0xff, 0x3f}}, {{0x9, 0x4, 0x79, 0x9, 0x8, 0xff, 0x6f, 0xfa, 0x40, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0xb, 0x3, "aabdd8", 'TW'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0xc, 0x1, "57d9", "801b"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x81, 0xb0, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x6, 0xc, "", "e3"}, @as_header={0x7, 0x24, 0x1, 0xbb, 0xf, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x8, 0x10, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x2, 0xff, 0x9, "", "15c7de"}]}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x1, 0x2, 0x80}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x1b, 0xe6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}, {{0x9, 0x5, 0xd, 0x8, 0x0, 0x4, 0x7, 0xc9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x80f2}, @generic={0xaf, 0x7, "0b876cbe8afbf8143dfa697b1e3363a254f961cd6f7668fd653679e6a33f913caea7b791be783a3fda10831c693ee93cb080ff2ffba45575d9b34e548c27365e924d0ece9aebdc308a6122529f8ed4eff673b9bd30f60989d4b8baefa551462ecdc7d5d317afc79ba6e7d2c284b689a81c62a3b53eb4f95b0df4fd93566bd9837a505c306a52fcab28ec065c88e836adbba12e561bba743e10d3c1b392b80f1e4a2d1ac6c8785ea200d794241c"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x7fe, 0xee, 0x1, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x1, 0xe5, 0x3, [@generic={0x10, 0x9, "1c246ec1cc1877541b131e2b3be9"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x10, 0xe, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x7, 0x3f4f}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0xa4, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x3}]}}, {{0x9, 0x5, 0xe, 0x4, 0x30f, 0x4, 0x51, 0x5}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x201, 0x32, 0x0, 0x0, 0x10, 0x8}, 0x5c, &(0x7f0000000a00)={0x5, 0xf, 0x5c, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xb5, 0x2, 0x6, 0xff00, 0x9, [0xc0, 0xff0000]}, @generic={0x39, 0x10, 0x1, "570f20d8947d825d3a23bd1d178e7be71eddc1c767882ed979e19a98ad6f65dd98158bfe439f2dc97a52f0a73689c2451921ff5913cc"}, @ss_cap={0xa, 0x10, 0x3, 0xbbf770cb368559f, 0x5, 0x54, 0xa, 0xada}]}, 0x8, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x140c}}, {0xa7, &(0x7f0000000ac0)=@string={0xa7, 0x3, "9bc041a6ace1c840af7747fb1ad13a8af07727981457061a1f7e0a4067eed8f564960da32c839bb53a2c391ec74705e66b120871e36d6bae9891cc026c8ea17bb21a3f5ce6dbe94ad5a80cb57557fffb5d9eeb3ed6b4468fbd9efd4d80e652dec358ecf541cee4ba6b71dbd611b3e9e0e6d49c1d0934d845acd59071d38bab9d3c7679a41032b39dcaf42715b462bc20b2a4344ae8d44c1f7291e2ebbdd9fc3f5bfed8bc8c"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x240a}}, {0x41, &(0x7f0000000c00)=@string={0x41, 0x3, "508d2d5803f8316867225b6cf66e1516f755dabc6d3d12783e08c8cdd035399f571a38112c81c87e074976aa9451dc8099290d96cfce9b96a87b497a79f831"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x424}}, {0xa6, &(0x7f0000000d00)=@string={0xa6, 0x3, "1243a45351667d8d9ff9b26a2f2b2f33713630801403a303a84af2ecd7572647807c30cb45779aec80114cdf09e01c24b0aef43a48135bf30502a187fad919cfbc8438759b7f82e1da0c303190c293d97c93f7e6e6ae659e25248468de534e7d19066907fc6152bd8ff945143d41c32f333cddd9728736104c3964a12d616b5629b4d3fb48c2045a4032862e84d1140aac2a3f2d6dd2ecc4bafe8309453ad5d563940105"}}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) eventfd(0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r3, &(0x7f0000000e40)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000ec0)=0x80) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x7fff, 0x400) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000f40)='wlan1\x00', 0x10) r5 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r5, &(0x7f0000001100)={&(0x7f0000000f80)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000fc0)="5c7554633b4b088668b6d8045d0e575cc652ab79496c400678b567cac4416c63ab4daad388e6e8d6791c9b2907730ac1b6ec75e35ba88c32469a0eef44c49554f0b3a02b7230471cc7e2cbe7713c09ccbdf6faa7db0a75cd71d83da45c1a2b0a3ee2007f9f29159bab01f3ab549839857348644f2ab2f49053b869c45ee56e6817f739ce3cf6b84c6d1210cfd705c145a0fdb450a5d6f34dc58b6bacfd5482d34be2e22aecbf179c6f471cee1b652133ff531e6f80a59df9858e", 0xba}, {&(0x7f0000001080)="d3d2ba689a90468e521b9e599cbcb6fe6d79041ff4672d7e485e5b194a5abf6878119e2f261a288960bd8ca670261cd223f5985333efde11845c", 0x3a}], 0x2}, 0x20004084) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{r0, 0xffffffffffffffff}, &(0x7f0000001140), &(0x7f0000001180)=r4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x1f, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x197, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x8, 0x8, 0xa, 0x8, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001300)='GPL\x00', 0x7, 0xe0, &(0x7f0000001340)=""/224, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001440)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001480)={0x5, 0xd, 0xfbc, 0x746}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x62}, 0x94) (async) r7 = accept4(r2, &(0x7f0000001580)=@un=@abs, &(0x7f0000001600)=0x80, 0x81800) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) unshare(0x4000000) (async) r8 = syz_io_uring_setup(0x6515, &(0x7f0000001640)={0x0, 0x6cc4, 0x800, 0x1, 0x2d7, 0x0, r0}, &(0x7f00000016c0)=0x0, &(0x7f0000001700)=0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000002940)=@IORING_OP_RECVMSG={0xa, 0x49, 0x4, r4, 0x0, &(0x7f0000002900)={&(0x7f0000001740)=@isdn, 0x80, &(0x7f0000002840)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/91, 0x5b}], 0x2, &(0x7f0000002880)=""/120, 0x78}, 0x0, 0x40, 0x1, {0x3}}) lsetxattr$trusted_overlay_upper(&(0x7f0000002980)='./file0\x00', &(0x7f00000029c0), &(0x7f0000002a00)={0x0, 0xfb, 0x76, 0x2, 0x9, "965cb9ed660322ef2cff9efa24530eee", "61a19a244f534de25c56aba384043ee5e1020bdbbf5ea4da83cdb87762ad60a7ee2a2adcee368da6993c0a169518c8f4204743eb1f95b95a07eb2c6bcb733a061780c1a4f59f7352e087a2b24bf0e53b4b78924411b9a40a0e184bf49f76a3db99"}, 0x76, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000002ac0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x2, r2, &(0x7f0000002a80), 0x0, 0x0, 0x80000, 0x1, {0x0, r11}}) (async) r12 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000002b00)={0x2, r12}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000002bc0)={'syztnl0\x00', &(0x7f0000002b40)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x24, 0x270, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x0, 0x8, 0x4}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002cc0)={{{@in=@empty, @in=@multicast2, 0x4e20, 0xe, 0x4e21, 0x9, 0x2, 0x20, 0x20, 0x3b, r13}, {0xb, 0x8, 0x2, 0x2, 0x8, 0x3, 0x6, 0x5}, {0x3, 0x8000000000000001, 0xb4c8, 0xb}, 0xe, 0x0, 0x1, 0x1, 0x2, 0x3}, {{@in6=@private1, 0x4d2, 0x505cf984ad4df81b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x5, 0x10000, 0xd, 0x4}}, 0xe4) 6m34.244076278s ago: executing program 1 (id=2851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c0001400000"], 0xdc}}, 0x0) 6m34.178218267s ago: executing program 1 (id=2852): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100a600010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r5, 0xc008aec1, &(0x7f0000000180)=ANY=[]) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6m30.991933723s ago: executing program 1 (id=2866): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_io_uring_setup(0x2402, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = creat(0x0, 0xd931d3864d39dcdb) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000130a03000000000000000000020000000900020073797a31000000000800034000000001090001"], 0x34}}, 0x0) socket$inet(0x2, 0x4, 0x6) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6m30.228621011s ago: executing program 1 (id=2869): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1], 0xeeee8000, 0x2011c0}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 6m21.35546331s ago: executing program 32 (id=2844): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd408205140099bb0000000109022400011b00001009040000022a3e74000905015e01031d101109050b36"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1], 0xeeee8000, 0x2011c0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000000)=0x200, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x10}, 0xc) sendto$inet6(r6, &(0x7f0000000480)="aa", 0x1, 0x20000000, 0x0, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m15.16285258s ago: executing program 33 (id=2869): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1], 0xeeee8000, 0x2011c0}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 6.006260631s ago: executing program 2 (id=4042): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x47) 5.751326551s ago: executing program 2 (id=4045): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000780)) 5.543790161s ago: executing program 2 (id=4048): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x495, &(0x7f0000000200)={0x0, 0x3661, 0x0, 0x1, 0x29}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.496198772s ago: executing program 6 (id=4059): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) 3.460148755s ago: executing program 5 (id=4063): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "00ab086539040304010100e000000000000000efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 3.216281459s ago: executing program 5 (id=4064): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x240400d5) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 3.126166988s ago: executing program 2 (id=4065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 2.948264872s ago: executing program 5 (id=4066): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt(r0, 0x28, 0x1, 0x0, &(0x7f0000000000)) 2.789493378s ago: executing program 5 (id=4067): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/39, 0x27}], 0x1, 0x3ff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0xc, 0x42, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r5}, 0x38) 2.064135391s ago: executing program 4 (id=4069): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x200]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.008360264s ago: executing program 6 (id=4070): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x8000fff, 0x3, 0x4, 0x0, 0x1}) 1.847469112s ago: executing program 4 (id=4071): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x14a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x400000000088, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) read$FUSE(r2, &(0x7f00000089c0)={0x2020}, 0x2020) 1.568156061s ago: executing program 6 (id=4072): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x0, 0x6, &(0x7f0000000240)}) 1.386264222s ago: executing program 6 (id=4073): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000002c0)={0x0, 0x0, 0x1b, 0x16, 0x84, &(0x7f0000000540)="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"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="e1", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x10) 1.26333017s ago: executing program 0 (id=4074): r0 = syz_clone(0x0, 0x0, 0xe, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x403, &(0x7f0000000240)={&(0x7f0000000180)=""/116, 0x74}) 1.158696878s ago: executing program 6 (id=4075): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) read(r0, &(0x7f0000000280)=""/36, 0x24) ioctl$KDMKTONE(r4, 0x4b30, 0x8000000000000001) 988.247106ms ago: executing program 0 (id=4076): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e32}]}}}]}, 0x40}}, 0x0) 870.104807ms ago: executing program 0 (id=4077): r0 = syz_open_dev$video(&(0x7f0000000100), 0x10000000000008, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0xa, {0x7ffffffc, 0xfff}}) 837.820502ms ago: executing program 5 (id=4078): gettid() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$TCFLSH(r0, 0x80045439, 0x20000000000407) 837.576165ms ago: executing program 4 (id=4079): r0 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) rt_tgsigqueueinfo(r2, r2, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) tkill(r2, 0x2e) ptrace$peeksig(0x4209, r2, &(0x7f0000000580)={0x1, 0x0, 0x1}, &(0x7f00000016c0)=[{}]) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) 636.06893ms ago: executing program 0 (id=4080): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x13, 0x3a, '^%-\xd6}[)#[)\x95[', 0x3a, '^%-\x01}[)#[)\x95[', 0x3a, './file0', 0x3a, [0x46, 0x50]}, 0x41) 615.643104ms ago: executing program 2 (id=4081): set_mempolicy(0x4003, &(0x7f00000001c0)=0x8000000100000003, 0xe1) mincore(&(0x7f000057b000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/172) 581.924107ms ago: executing program 4 (id=4082): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000600)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0xe, 0x58, 0x65, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0xff, 0x1, 0x0, 0x1, 0x6, 0x8}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0xf5, 0x3, 0x0, 0x0, 0x5, 0x8}, 0x2, {0x7ff, 0x50, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 520.123124ms ago: executing program 5 (id=4083): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x4, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x2, 0x0, &(0x7f0000000000)) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0xfffffff7) 451.948255ms ago: executing program 0 (id=4084): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) fadvise64(r0, 0xff, 0xdf0, 0x5) 407.885652ms ago: executing program 2 (id=4085): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8953, 0xfffffffffffffffe) clock_gettime(0x7, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}], ['\x00']}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) 352.204876ms ago: executing program 4 (id=4086): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xe9) 173.842282ms ago: executing program 4 (id=4087): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "000000013904030401010000000000010000e0efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 122.237472ms ago: executing program 6 (id=4088): r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) 0s ago: executing program 0 (id=4089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x101}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): change from 0 to 7 [ 1300.079578][ T5221] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1300.094798][T19516] Dev loop6: unable to read RDB block 7 [ 1300.109273][T19516] loop6: unable to read partition table [ 1300.120592][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.129073][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.220585][T19516] loop6: partition table beyond EOD, truncated [ 1300.367666][T19516] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1300.555948][ T5914] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1301.010006][ T5914] usb 1-1: config 0 has no interfaces? [ 1301.041198][ T5914] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1301.055236][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.091952][ T5914] usb 1-1: Product: syz [ 1301.117503][ T5914] usb 1-1: Manufacturer: syz [ 1301.137751][ T5914] usb 1-1: SerialNumber: syz [ 1301.146531][T19529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3570'. [ 1301.189409][ T5914] usb 1-1: config 0 descriptor?? [ 1301.266418][T19532] x_tables: duplicate underflow at hook 2 [ 1301.499629][T19536] pimreg: entered allmulticast mode [ 1301.511465][T19536] pimreg: left allmulticast mode [ 1301.658540][ T5914] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1301.722142][T19541] pimreg: entered allmulticast mode [ 1301.732171][T19541] pimreg: left allmulticast mode [ 1301.855997][ T5914] usb 7-1: Using ep0 maxpacket: 16 [ 1302.031007][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.077276][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.104788][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1302.122376][ T5914] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1302.136480][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.236532][ T5914] usb 7-1: config 0 descriptor?? [ 1302.451974][ T5930] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1302.725189][ T5930] usb 6-1: Using ep0 maxpacket: 16 [ 1302.879757][T19546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.914873][T19535] random: crng reseeded on system resumption [ 1302.957898][T19546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.010317][ T5914] usbhid 7-1:0.0: can't add hid device: -71 [ 1303.069032][ T5914] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1303.171890][ T5914] usb 7-1: USB disconnect, device number 23 [ 1304.299182][T16439] usb 1-1: USB disconnect, device number 77 [ 1304.933056][T16439] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1305.190482][T16439] usb 7-1: Using ep0 maxpacket: 32 [ 1305.229889][T16439] usb 7-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1305.263741][T16439] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1305.306928][T16439] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1305.318259][T16439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.337227][T16439] usb 7-1: Product: syz [ 1305.341505][T16439] usb 7-1: Manufacturer: syz [ 1305.400730][T16439] usb 7-1: SerialNumber: syz [ 1305.459605][T16439] usb 7-1: config 0 descriptor?? [ 1305.734362][T19558] binder: 19554:19558 ioctl c0306201 80000100 returned -11 [ 1305.752693][T19558] fuse: Bad value for 'fd' [ 1306.147948][ T5930] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1306.199667][ T5930] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1306.210647][T19570] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1306.217139][ T5930] usb 6-1: can't read configurations, error -71 [ 1307.330327][ T9521] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1307.395996][ T10] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1307.508520][ T9521] usb 3-1: Using ep0 maxpacket: 16 [ 1307.547599][ T9521] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.584827][ T9521] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.636056][ T9521] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1307.685442][ T9521] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1307.732438][T19594] loop4: detected capacity change from 0 to 7 [ 1307.750546][ T9521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.781996][ T10] usb 1-1: config 0 has no interfaces? [ 1307.819074][T19594] Dev loop4: unable to read RDB block 7 [ 1307.824721][T19594] loop4: unable to read partition table [ 1307.848624][ T9521] usb 3-1: config 0 descriptor?? [ 1308.006205][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1308.075683][T19594] loop4: partition table beyond EOD, truncated [ 1308.082068][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.185363][T19594] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1308.401899][ T10] usb 1-1: Product: syz [ 1308.422778][ T10] usb 1-1: Manufacturer: syz [ 1308.442693][ T10] usb 1-1: SerialNumber: syz [ 1308.536633][ T10] usb 1-1: config 0 descriptor?? [ 1308.610226][T16439] usb 7-1: USB disconnect, device number 24 [ 1308.613467][T19590] random: crng reseeded on system resumption [ 1308.697047][ T9521] usbhid 3-1:0.0: can't add hid device: -71 [ 1308.703130][ T9521] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1308.719194][T19601] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3590'. [ 1308.793454][ T9521] usb 3-1: USB disconnect, device number 76 [ 1308.812843][T19601] FAULT_INJECTION: forcing a failure. [ 1308.812843][T19601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.827173][T19601] CPU: 0 UID: 0 PID: 19601 Comm: syz.5.3590 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1308.827201][T19601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1308.827214][T19601] Call Trace: [ 1308.827222][T19601] [ 1308.827231][T19601] dump_stack_lvl+0x189/0x250 [ 1308.827261][T19601] ? __pfx____ratelimit+0x10/0x10 [ 1308.827294][T19601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1308.827318][T19601] ? __pfx__printk+0x10/0x10 [ 1308.827359][T19601] should_fail_ex+0x414/0x560 [ 1308.827393][T19601] _copy_to_user+0x31/0xb0 [ 1308.827419][T19601] simple_read_from_buffer+0xe1/0x170 [ 1308.827449][T19601] proc_fail_nth_read+0x1df/0x250 [ 1308.827481][T19601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1308.827514][T19601] ? rw_verify_area+0x258/0x650 [ 1308.827536][T19601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1308.827567][T19601] vfs_read+0x200/0x980 [ 1308.827595][T19601] ? __pfx___mutex_lock+0x10/0x10 [ 1308.827616][T19601] ? __pfx_vfs_read+0x10/0x10 [ 1308.827640][T19601] ? __fget_files+0x2a/0x420 [ 1308.827689][T19601] ? __fget_files+0x3a0/0x420 [ 1308.827717][T19601] ? __fget_files+0x2a/0x420 [ 1308.827756][T19601] ksys_read+0x145/0x250 [ 1308.827802][T19601] ? __pfx_ksys_read+0x10/0x10 [ 1308.827828][T19601] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1308.827861][T19601] ? lockdep_hardirqs_on+0x9c/0x150 [ 1308.827895][T19601] __do_fast_syscall_32+0xb6/0x2b0 [ 1308.827918][T19601] ? lockdep_hardirqs_on+0x9c/0x150 [ 1308.827972][T19601] do_fast_syscall_32+0x34/0x80 [ 1308.827995][T19601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1308.828022][T19601] RIP: 0023:0xf711e539 [ 1308.828040][T19601] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1308.828059][T19601] RSP: 002b:00000000f510e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1308.828083][T19601] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f510e620 [ 1308.828099][T19601] RDX: 000000000000000f RSI: 00000000f7483ff4 RDI: 0000000000000000 [ 1308.828113][T19601] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1308.828126][T19601] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1308.828139][T19601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1308.828170][T19601] [ 1308.995446][ T5923] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1309.154469][T19604] pimreg: entered allmulticast mode [ 1309.162315][T19604] pimreg: left allmulticast mode [ 1309.226589][T19607] pimreg: entered allmulticast mode [ 1309.240277][T19607] pimreg: left allmulticast mode [ 1309.675343][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 1309.683319][ T5923] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1309.702399][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.764130][ T5923] usb 5-1: config 0 descriptor?? [ 1309.820168][T19613] loop6: detected capacity change from 0 to 7 [ 1309.848094][T19613] Dev loop6: unable to read RDB block 7 [ 1309.853840][T19613] loop6: unable to read partition table [ 1309.871489][T19613] loop6: partition table beyond EOD, truncated [ 1309.943819][T19613] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1310.005192][T19599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3591'. [ 1310.018478][T19599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.028839][T19599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.104978][ T5923] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1310.148587][ T5923] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1310.196613][ T5923] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1310.598198][T19622] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3598'. [ 1310.627495][T16439] usb 1-1: USB disconnect, device number 78 [ 1311.967694][ T9521] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1312.178249][ T9521] usb 6-1: Using ep0 maxpacket: 32 [ 1312.215363][ T9521] usb 6-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1312.240245][ T9521] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1312.290207][ T9521] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1312.319541][ T9521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.343533][T19637] loop4: detected capacity change from 0 to 7 [ 1312.373109][ T7265] Dev loop4: unable to read RDB block 7 [ 1312.384120][ T7265] loop4: unable to read partition table [ 1312.390615][ T9521] usb 6-1: Product: syz [ 1312.395866][ T9521] usb 6-1: Manufacturer: syz [ 1312.404102][ T7265] loop4: partition table beyond EOD, truncated [ 1312.410716][ T9521] usb 6-1: SerialNumber: syz [ 1312.421056][ T9521] usb 6-1: config 0 descriptor?? [ 1312.428988][T19637] Dev loop4: unable to read RDB block 7 [ 1312.435150][T19637] loop4: unable to read partition table [ 1312.441794][T19637] loop4: partition table beyond EOD, truncated [ 1312.468642][T19637] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1312.503374][ T5221] Dev loop4: unable to read RDB block 7 [ 1312.511269][ T5221] loop4: unable to read partition table [ 1312.520912][ T5221] loop4: partition table beyond EOD, truncated [ 1312.595377][ T5930] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1312.686901][T19635] binder: 19632:19635 ioctl c0306201 80000100 returned -11 [ 1312.698349][T19635] fuse: Bad value for 'fd' [ 1312.828156][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 1312.897221][T19642] loop6: detected capacity change from 0 to 7 [ 1312.912153][ T5943] Dev loop6: unable to read RDB block 7 [ 1312.914323][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.940959][ T5943] loop6: AHDI p3 p4 [ 1312.945068][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.947037][ T5943] loop6: partition table partially beyond EOD, truncated [ 1312.961323][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1312.983775][ T5943] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1313.000434][T19642] Dev loop6: unable to read RDB block 7 [ 1313.007125][T19642] loop6: AHDI p3 p4 [ 1313.007123][ T5930] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1313.007150][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.011930][T19642] loop6: partition table partially beyond EOD, [ 1313.108383][T19645] loop2: detected capacity change from 0 to 7 [ 1313.128143][T19642] truncated [ 1313.131697][T19642] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1313.186255][ T5930] usb 3-1: config 0 descriptor?? [ 1313.222781][T19645] Dev loop2: unable to read RDB block 7 [ 1313.229689][T19645] loop2: AHDI p1 p2 p3 [ 1313.248505][T19645] loop2: partition table partially beyond EOD, truncated [ 1313.262097][T19645] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1313.367800][T19645] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1313.825000][T19639] random: crng reseeded on system resumption [ 1313.833748][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1313.905614][ T5930] usbhid 3-1:0.0: can't add hid device: -71 [ 1313.914210][ T5930] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1313.947308][ T5930] usb 3-1: USB disconnect, device number 77 [ 1314.006705][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1314.044463][ T10] usb 7-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1314.057754][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1314.084844][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1314.115520][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.129516][ T10] usb 7-1: Product: syz [ 1314.134888][ T10] usb 7-1: Manufacturer: syz [ 1314.143094][ T10] usb 7-1: SerialNumber: syz [ 1314.151707][ T10] usb 7-1: config 0 descriptor?? [ 1314.481616][T19649] binder: 19646:19649 ioctl 4018620d 0 returned -22 [ 1314.490985][T19649] binder: 19646:19649 ioctl c0306201 80000100 returned -11 [ 1314.514065][T19649] fuse: Bad value for 'fd' [ 1315.115917][T16535] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1315.272955][T16535] usb 3-1: config 0 has no interfaces? [ 1315.291163][T16535] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1315.306509][T16535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.482084][T16535] usb 3-1: Product: syz [ 1315.567157][ T9521] usb 6-1: USB disconnect, device number 38 [ 1315.592782][T16535] usb 3-1: Manufacturer: syz [ 1315.751699][T16535] usb 3-1: SerialNumber: syz [ 1315.943507][T16535] usb 3-1: config 0 descriptor?? [ 1316.848088][T19666] pimreg: entered allmulticast mode [ 1317.778977][ T10] usb 7-1: USB disconnect, device number 25 [ 1318.039728][T16535] usb 3-1: USB disconnect, device number 78 [ 1318.452829][T19677] pimreg: entered allmulticast mode [ 1318.460306][T19677] pimreg: left allmulticast mode [ 1319.502619][T19695] loop6: detected capacity change from 0 to 7 [ 1319.695500][T19695] Dev loop6: unable to read RDB block 7 [ 1319.806055][T19695] loop6: AHDI p3 p4 [ 1319.855366][T19695] loop6: partition table partially beyond EOD, truncated [ 1319.892943][T19695] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1320.445319][ T5930] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1320.615288][T19704] loop2: detected capacity change from 0 to 7 [ 1320.627872][T19704] Dev loop2: unable to read RDB block 7 [ 1320.633588][T19704] loop2: AHDI p1 p2 p3 [ 1320.646178][T19704] loop2: partition table partially beyond EOD, truncated [ 1320.657920][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 1320.667960][T19704] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1320.675563][T19704] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1320.771170][ T5930] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.801011][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3622'. [ 1320.803462][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1320.840504][ T5930] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1320.872210][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.920121][ T5930] usb 1-1: config 0 descriptor?? [ 1321.555856][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1321.865983][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1321.874558][ T5930] nzxt-smart2 0003:1E71:2009.001E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1321.890224][ T10] usb 6-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1321.965943][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1322.130483][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1322.141679][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.150089][ T10] usb 6-1: Product: syz [ 1322.160365][ T10] usb 6-1: Manufacturer: syz [ 1322.170785][ T10] usb 6-1: SerialNumber: syz [ 1322.318500][ T5930] usb 1-1: USB disconnect, device number 79 [ 1322.476169][ T5914] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1322.484596][ T10] usb 6-1: config 0 descriptor?? [ 1322.519986][T19717] fido_id[19717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1322.724437][ T5914] usb 7-1: config 0 has no interfaces? [ 1322.735562][ T5914] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1322.745074][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.756795][T19711] binder: 19707:19711 ioctl 4018620d 0 returned -22 [ 1322.774016][ T5914] usb 7-1: Product: syz [ 1322.801733][T19711] binder: 19707:19711 ioctl c0306201 80000100 returned -11 [ 1322.812241][ T5914] usb 7-1: Manufacturer: syz [ 1322.845871][ T5914] usb 7-1: SerialNumber: syz [ 1322.869963][ T5914] usb 7-1: config 0 descriptor?? [ 1322.909337][T19724] fuse: Bad value for 'fd' [ 1323.235097][T19728] pimreg: entered allmulticast mode [ 1323.249729][T19728] pimreg: left allmulticast mode [ 1323.540390][T19729] pimreg: entered allmulticast mode [ 1324.322081][ T10] usb 6-1: USB disconnect, device number 39 [ 1324.866177][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1325.035795][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1325.057278][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.086711][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.103173][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1325.142159][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1325.192126][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.224442][ T10] usb 6-1: config 0 descriptor?? [ 1325.324196][ T5914] usb 7-1: USB disconnect, device number 26 [ 1325.677762][T19747] mmap: syz.6.3632 (19747): VmData 37502976 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1325.692523][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1325.699346][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1325.814183][ T10] usb 6-1: USB disconnect, device number 40 [ 1325.992579][T19752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1326.266110][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1326.346541][T19759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.362173][T19759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.416199][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1326.427408][ T10] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1326.438284][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.450098][ T10] usb 7-1: config 0 descriptor?? [ 1326.455172][T19759] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.464836][T19759] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.477717][T19759] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.486055][T16535] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1326.487302][T19759] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.559244][T19759] : left promiscuous mode [ 1326.648892][T16535] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 1326.660260][T16535] usb 1-1: config 0 has no interface number 0 [ 1326.671196][T16535] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.684094][T16535] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.696574][T16535] usb 1-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1326.710268][T16535] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1326.721426][T16535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.759162][T16535] usb 1-1: config 0 descriptor?? [ 1326.815164][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1326.847916][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1326.866890][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1326.887153][ T10] usb 7-1: media controller created [ 1326.949090][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1327.082476][ T10] az6027: usb out operation failed. (-71) [ 1327.106701][ T10] az6027: usb out operation failed. (-71) [ 1327.112491][ T10] stb0899_attach: Driver disabled by Kconfig [ 1327.119338][ T10] az6027: no front-end attached [ 1327.119338][ T10] [ 1327.136488][ T10] az6027: usb out operation failed. (-71) [ 1327.142381][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1327.165612][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input142 [ 1327.189317][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1327.216991][T16535] uclogic 0003:28BD:0905.001F: interface is invalid, ignoring [ 1327.226918][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1327.277013][ T10] usb 7-1: USB disconnect, device number 27 [ 1327.377758][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1327.444464][T19761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1327.466737][ T5914] usb 1-1: USB disconnect, device number 80 [ 1328.023589][T19777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.070219][T19777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.376565][ T5914] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1328.415668][ T5930] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1328.655358][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 1328.685131][ T5930] usb 3-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1328.707629][ T5930] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1328.777172][ T5930] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1328.801782][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.812856][ T5930] usb 3-1: Product: syz [ 1328.818710][ T5930] usb 3-1: Manufacturer: syz [ 1328.823889][ T5930] usb 3-1: SerialNumber: syz [ 1328.925878][T16535] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1328.940860][ T5930] usb 3-1: config 0 descriptor?? [ 1329.136039][ T5914] usb 7-1: device descriptor read/64, error -71 [ 1329.176178][T19783] binder: 19778:19783 ioctl 4018620d 0 returned -22 [ 1329.190289][T19783] binder: 19778:19783 ioctl c0306201 80000100 returned -11 [ 1329.197775][T16439] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1329.284431][T16535] usb 1-1: config 0 has no interfaces? [ 1329.296958][T16535] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1329.331149][T16535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.390650][T16535] usb 1-1: Product: syz [ 1329.404654][T16535] usb 1-1: Manufacturer: syz [ 1329.415633][ T5914] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1329.439976][T19783] fuse: Bad value for 'fd' [ 1329.466135][T16439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.494746][T16439] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1329.540486][T16439] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1329.552172][T16439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.560329][T16535] usb 1-1: SerialNumber: syz [ 1329.582304][T16535] usb 1-1: config 0 descriptor?? [ 1329.582455][T16439] usb 6-1: config 0 descriptor?? [ 1329.686104][ T5914] usb 7-1: Using ep0 maxpacket: 16 [ 1329.801159][T19792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.054140][T19798] pimreg: entered allmulticast mode [ 1330.063712][T19798] pimreg: left allmulticast mode [ 1330.094593][T19792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.134674][T16439] kovaplus 0003:1E7D:2D50.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1330.514088][T16439] kovaplus 0003:1E7D:2D50.0020: couldn't init struct kovaplus_device [ 1330.531880][T16439] kovaplus 0003:1E7D:2D50.0020: couldn't install mouse [ 1330.564971][T16439] kovaplus 0003:1E7D:2D50.0020: probe with driver kovaplus failed with error -5 [ 1331.341657][ T5930] usb 3-1: USB disconnect, device number 79 [ 1331.472225][T19801] FAULT_INJECTION: forcing a failure. [ 1331.472225][T19801] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.501843][T19801] CPU: 0 UID: 0 PID: 19801 Comm: syz.2.3645 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1331.501904][T19801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1331.501919][T19801] Call Trace: [ 1331.501929][T19801] [ 1331.501939][T19801] dump_stack_lvl+0x189/0x250 [ 1331.501972][T19801] ? __pfx____ratelimit+0x10/0x10 [ 1331.502007][T19801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1331.502035][T19801] ? __pfx__printk+0x10/0x10 [ 1331.502073][T19801] ? __pfx___might_resched+0x10/0x10 [ 1331.502098][T19801] ? fs_reclaim_acquire+0x7d/0x100 [ 1331.502135][T19801] should_fail_ex+0x414/0x560 [ 1331.502173][T19801] should_failslab+0xa8/0x100 [ 1331.502206][T19801] __kmalloc_noprof+0xcb/0x4f0 [ 1331.502231][T19801] ? kfree+0x4d/0x440 [ 1331.502252][T19801] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1331.502281][T19801] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1331.502305][T19801] ? tomoyo_domain+0xd9/0x130 [ 1331.502335][T19801] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1331.502366][T19801] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1331.502400][T19801] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1331.502451][T19801] ? __lock_acquire+0xab9/0xd20 [ 1331.502498][T19801] ? __fget_files+0x2a/0x420 [ 1331.502532][T19801] ? __fget_files+0x3a0/0x420 [ 1331.502561][T19801] ? __fget_files+0x2a/0x420 [ 1331.502595][T19801] security_file_ioctl_compat+0xcb/0x2d0 [ 1331.502636][T19801] __ia32_compat_sys_ioctl+0x128/0x840 [ 1331.502666][T19801] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1331.502692][T19801] ? __fget_files+0x3a0/0x420 [ 1331.502729][T19801] ? fput+0xa0/0xd0 [ 1331.502763][T19801] ? ksys_write+0x22a/0x250 [ 1331.502797][T19801] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1331.502838][T19801] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.502874][T19801] __do_fast_syscall_32+0xb6/0x2b0 [ 1331.502899][T19801] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.502938][T19801] do_fast_syscall_32+0x34/0x80 [ 1331.502960][T19801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1331.502988][T19801] RIP: 0023:0xf7fe7539 [ 1331.503007][T19801] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1331.503027][T19801] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1331.503063][T19801] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1331.503077][T19801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1331.503089][T19801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1331.503102][T19801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1331.503113][T19801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1331.503142][T19801] [ 1331.504182][T19801] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1331.841242][ T5914] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1331.868935][ T5914] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1331.897394][ T5914] usb 7-1: can't read configurations, error -71 [ 1331.937030][ T5914] usb usb7-port1: attempt power cycle [ 1331.949559][ T5930] usb 6-1: USB disconnect, device number 41 [ 1332.112041][T16439] usb 1-1: USB disconnect, device number 81 [ 1332.146264][T19806] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1332.218932][T19812] loop6: detected capacity change from 0 to 7 [ 1332.244482][T19812] Dev loop6: unable to read RDB block 7 [ 1332.288324][T19812] loop6: unable to read partition table [ 1332.310907][T19812] loop6: partition table beyond EOD, truncated [ 1332.336205][T19812] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1332.457962][T19819] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3651'. [ 1333.305278][ T5914] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1333.385333][T19817] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1333.490823][ T5914] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 1333.616284][ T5914] usb 6-1: config 0 has no interface number 0 [ 1333.622838][ T5914] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.646717][ T5914] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.658202][ T5914] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1333.672395][ T5914] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1333.779333][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.856601][ T5914] usb 6-1: config 0 descriptor?? [ 1333.917688][T19841] loop6: detected capacity change from 0 to 7 [ 1333.967198][T19841] Dev loop6: unable to read RDB block 7 [ 1333.976312][T19841] loop6: AHDI p3 p4 [ 1333.980285][T19841] loop6: partition table partially beyond EOD, truncated [ 1334.003486][T19843] loop4: detected capacity change from 0 to 7 [ 1334.012426][T19841] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1334.034389][T19843] Dev loop4: unable to read RDB block 7 [ 1334.055868][T19843] loop4: unable to read partition table [ 1334.079520][T19843] loop4: partition table beyond EOD, truncated [ 1334.109992][T19843] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1334.288005][ T5914] uclogic 0003:28BD:0905.0021: interface is invalid, ignoring [ 1334.571017][T19828] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1334.593565][T19858] ptrace attach of "./syz-executor exec"[16479] was attempted by "./syz-executor exec"[19858] [ 1334.625361][ T5914] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1334.632607][T16535] usb 6-1: USB disconnect, device number 42 [ 1335.146026][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 1335.170963][ T5930] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1335.196677][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.217935][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.245810][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1335.269035][ T5914] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1335.298452][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.326419][ T5914] usb 1-1: config 0 descriptor?? [ 1335.449509][ T5930] usb 3-1: config 0 has no interfaces? [ 1335.494335][ T5930] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1335.509043][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.561119][ T5930] usb 3-1: Product: syz [ 1335.585230][ T5930] usb 3-1: Manufacturer: syz [ 1335.590089][ T5930] usb 3-1: SerialNumber: syz [ 1335.617141][ T5930] usb 3-1: config 0 descriptor?? [ 1335.774523][ T5914] usbhid 1-1:0.0: can't add hid device: -71 [ 1335.780595][ T5914] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1335.810553][ T5914] usb 1-1: USB disconnect, device number 82 [ 1336.189325][T19878] loop6: detected capacity change from 0 to 7 [ 1336.201847][ T5944] Dev loop6: unable to read RDB block 7 [ 1336.229303][ T5944] loop6: unable to read partition table [ 1336.251839][ T5944] loop6: partition table beyond EOD, truncated [ 1336.268631][T19878] Dev loop6: unable to read RDB block 7 [ 1336.274365][T19878] loop6: unable to read partition table [ 1336.280998][T19878] loop6: partition table beyond EOD, truncated [ 1336.294080][T19878] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1336.501840][T19880] loop6: detected capacity change from 0 to 7 [ 1336.518975][T19880] Dev loop6: unable to read RDB block 7 [ 1336.525609][T19880] loop6: unable to read partition table [ 1336.532025][T19880] loop6: partition table beyond EOD, truncated [ 1336.568490][T19880] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1336.817617][T19887] erspan0: entered promiscuous mode [ 1336.837664][T19887] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1337.078250][T19894] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1337.275277][ T5914] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1337.425972][T16535] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1337.447190][ T5914] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.457635][ T5914] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1337.495049][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.541278][ T5914] usb 7-1: config 0 descriptor?? [ 1337.574658][ T5914] rndis_host 7-1:0.0: probe with driver rndis_host failed with error -22 [ 1337.578495][T16535] usb 1-1: Using ep0 maxpacket: 32 [ 1337.603114][T19904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3675'. [ 1337.620151][T16535] usb 1-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1337.631367][T16535] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1337.646984][T19904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3675'. [ 1337.664087][T16535] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1337.675481][T16535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.687283][T16535] usb 1-1: Product: syz [ 1337.691533][T16535] usb 1-1: Manufacturer: syz [ 1337.731664][ T5914] usb 3-1: USB disconnect, device number 80 [ 1337.733868][T16535] usb 1-1: SerialNumber: syz [ 1337.769899][ T5930] usb 7-1: USB disconnect, device number 31 [ 1337.796714][T16535] usb 1-1: config 0 descriptor?? [ 1337.845074][T19907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3676'. [ 1338.049291][T19902] binder: 19897:19902 ioctl c0306201 80000100 returned -11 [ 1338.072050][T19902] fuse: Bad value for 'fd' [ 1338.254324][T19909] FAULT_INJECTION: forcing a failure. [ 1338.254324][T19909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.267750][T19909] CPU: 1 UID: 0 PID: 19909 Comm: syz.2.3677 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1338.267794][T19909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1338.267817][T19909] Call Trace: [ 1338.267831][T19909] [ 1338.267841][T19909] dump_stack_lvl+0x189/0x250 [ 1338.267873][T19909] ? __pfx____ratelimit+0x10/0x10 [ 1338.267907][T19909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1338.267933][T19909] ? __pfx__printk+0x10/0x10 [ 1338.267982][T19909] ? __might_fault+0xb0/0x130 [ 1338.268022][T19909] should_fail_ex+0x414/0x560 [ 1338.268071][T19909] _copy_from_iter+0x1db/0x16f0 [ 1338.268098][T19909] ? rcu_is_watching+0x15/0xb0 [ 1338.268125][T19909] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1338.268153][T19909] ? __pfx__copy_from_iter+0x10/0x10 [ 1338.268179][T19909] ? __build_skb_around+0x257/0x3e0 [ 1338.268208][T19909] ? netlink_sendmsg+0x642/0xb30 [ 1338.268233][T19909] ? skb_put+0x11b/0x210 [ 1338.268269][T19909] netlink_sendmsg+0x6b2/0xb30 [ 1338.268305][T19909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1338.268335][T19909] ? __import_iovec+0x5d4/0x7f0 [ 1338.268357][T19909] ? aa_sock_msg_perm+0x94/0x160 [ 1338.268393][T19909] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1338.268426][T19909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1338.268454][T19909] __sock_sendmsg+0x21c/0x270 [ 1338.268490][T19909] ____sys_sendmsg+0x505/0x830 [ 1338.268524][T19909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1338.268569][T19909] ___sys_sendmsg+0x21f/0x2a0 [ 1338.268601][T19909] ? __pfx____sys_sendmsg+0x10/0x10 [ 1338.268666][T19909] ? __fget_files+0x2a/0x420 [ 1338.268694][T19909] ? __fget_files+0x3a0/0x420 [ 1338.268734][T19909] __sys_sendmsg+0x164/0x220 [ 1338.268765][T19909] ? __pfx___sys_sendmsg+0x10/0x10 [ 1338.268808][T19909] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1338.268844][T19909] ? lockdep_hardirqs_on+0x9c/0x150 [ 1338.268880][T19909] __do_fast_syscall_32+0xb6/0x2b0 [ 1338.268903][T19909] ? lockdep_hardirqs_on+0x9c/0x150 [ 1338.268940][T19909] do_fast_syscall_32+0x34/0x80 [ 1338.268962][T19909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1338.268989][T19909] RIP: 0023:0xf7fe7539 [ 1338.269008][T19909] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1338.269027][T19909] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1338.269051][T19909] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1338.269067][T19909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1338.269080][T19909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1338.269093][T19909] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1338.269106][T19909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1338.269137][T19909] [ 1338.938087][T19919] netlink: 'syz.4.3682': attribute type 10 has an invalid length. [ 1339.005700][ T5914] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1339.155654][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 1339.170350][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.181637][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.240345][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1339.417087][ T5914] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1339.458453][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.563810][ T5914] usb 3-1: config 0 descriptor?? [ 1339.657601][T19934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3685'. [ 1340.168842][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 1340.174896][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1340.266307][ T5914] usb 3-1: USB disconnect, device number 81 [ 1340.492983][T19948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1340.915021][T16535] usb 1-1: USB disconnect, device number 83 [ 1341.086373][T19962] FAULT_INJECTION: forcing a failure. [ 1341.086373][T19962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.110732][T19962] CPU: 0 UID: 0 PID: 19962 Comm: syz.5.3690 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1341.110760][T19962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1341.110773][T19962] Call Trace: [ 1341.110782][T19962] [ 1341.110792][T19962] dump_stack_lvl+0x189/0x250 [ 1341.110822][T19962] ? __pfx____ratelimit+0x10/0x10 [ 1341.110854][T19962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1341.110880][T19962] ? __pfx__printk+0x10/0x10 [ 1341.110921][T19962] should_fail_ex+0x414/0x560 [ 1341.110962][T19962] _copy_to_user+0x31/0xb0 [ 1341.110989][T19962] simple_read_from_buffer+0xe1/0x170 [ 1341.111020][T19962] proc_fail_nth_read+0x1df/0x250 [ 1341.111052][T19962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1341.111084][T19962] ? rw_verify_area+0x258/0x650 [ 1341.111106][T19962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1341.111137][T19962] vfs_read+0x200/0x980 [ 1341.111166][T19962] ? __pfx___mutex_lock+0x10/0x10 [ 1341.111187][T19962] ? __pfx_vfs_read+0x10/0x10 [ 1341.111211][T19962] ? __fget_files+0x2a/0x420 [ 1341.111243][T19962] ? __fget_files+0x3a0/0x420 [ 1341.111269][T19962] ? __fget_files+0x2a/0x420 [ 1341.111305][T19962] ksys_read+0x145/0x250 [ 1341.111331][T19962] ? __pfx_ksys_read+0x10/0x10 [ 1341.111356][T19962] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1341.111390][T19962] ? lockdep_hardirqs_on+0x9c/0x150 [ 1341.111424][T19962] __do_fast_syscall_32+0xb6/0x2b0 [ 1341.111445][T19962] ? lockdep_hardirqs_on+0x9c/0x150 [ 1341.111481][T19962] do_fast_syscall_32+0x34/0x80 [ 1341.111506][T19962] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1341.111531][T19962] RIP: 0023:0xf711e539 [ 1341.111549][T19962] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1341.111568][T19962] RSP: 002b:00000000f510e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1341.111590][T19962] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f510e620 [ 1341.111605][T19962] RDX: 000000000000000f RSI: 00000000f7483ff4 RDI: 0000000000000000 [ 1341.111618][T19962] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1341.111630][T19962] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1341.111642][T19962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1341.111671][T19962] [ 1341.432482][T19969] FAULT_INJECTION: forcing a failure. [ 1341.432482][T19969] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.461747][T19969] CPU: 1 UID: 0 PID: 19969 Comm: syz.0.3691 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1341.461775][T19969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1341.461789][T19969] Call Trace: [ 1341.461797][T19969] [ 1341.461806][T19969] dump_stack_lvl+0x189/0x250 [ 1341.461844][T19969] ? __pfx____ratelimit+0x10/0x10 [ 1341.461895][T19969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1341.461946][T19969] ? __pfx__printk+0x10/0x10 [ 1341.461984][T19969] ? ref_tracker_alloc+0x318/0x460 [ 1341.462022][T19969] should_fail_ex+0x414/0x560 [ 1341.462059][T19969] should_failslab+0xa8/0x100 [ 1341.462092][T19969] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1341.462117][T19969] ? skb_clone+0x212/0x3a0 [ 1341.462154][T19969] skb_clone+0x212/0x3a0 [ 1341.462188][T19969] __netlink_deliver_tap+0x404/0x850 [ 1341.462230][T19969] ? netlink_deliver_tap+0x2e/0x1b0 [ 1341.462258][T19969] netlink_deliver_tap+0x19c/0x1b0 [ 1341.462287][T19969] netlink_unicast+0x72f/0x8d0 [ 1341.462324][T19969] netlink_sendmsg+0x805/0xb30 [ 1341.462362][T19969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.462393][T19969] ? __import_iovec+0x5d4/0x7f0 [ 1341.462416][T19969] ? aa_sock_msg_perm+0x94/0x160 [ 1341.462441][T19969] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1341.462466][T19969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.462486][T19969] __sock_sendmsg+0x21c/0x270 [ 1341.462515][T19969] ____sys_sendmsg+0x505/0x830 [ 1341.462540][T19969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1341.462573][T19969] ___sys_sendmsg+0x21f/0x2a0 [ 1341.462595][T19969] ? __pfx____sys_sendmsg+0x10/0x10 [ 1341.462642][T19969] ? __fget_files+0x2a/0x420 [ 1341.462672][T19969] ? __fget_files+0x3a0/0x420 [ 1341.462701][T19969] __sys_sendmsg+0x164/0x220 [ 1341.462723][T19969] ? __pfx___sys_sendmsg+0x10/0x10 [ 1341.462755][T19969] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1341.462782][T19969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1341.462808][T19969] __do_fast_syscall_32+0xb6/0x2b0 [ 1341.462824][T19969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1341.462852][T19969] do_fast_syscall_32+0x34/0x80 [ 1341.462867][T19969] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1341.462887][T19969] RIP: 0023:0xf7f23539 [ 1341.462900][T19969] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1341.462915][T19969] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1341.462933][T19969] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1341.462944][T19969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1341.462953][T19969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1341.462962][T19969] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1341.462974][T19969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1341.462996][T19969] [ 1342.145303][ T9521] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1342.306473][ T9521] usb 1-1: Using ep0 maxpacket: 16 [ 1342.320823][ T9521] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.559775][ T9521] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.619624][ T9521] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1342.639181][ T9521] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1342.683188][ T9521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.754721][ T9521] usb 1-1: config 0 descriptor?? [ 1342.988666][T19974] FAULT_INJECTION: forcing a failure. [ 1342.988666][T19974] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.015726][T19974] CPU: 1 UID: 0 PID: 19974 Comm: syz.0.3693 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1343.015755][T19974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1343.015776][T19974] Call Trace: [ 1343.015784][T19974] [ 1343.015793][T19974] dump_stack_lvl+0x189/0x250 [ 1343.015823][T19974] ? __pfx____ratelimit+0x10/0x10 [ 1343.015856][T19974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1343.015880][T19974] ? __pfx__printk+0x10/0x10 [ 1343.015909][T19974] ? __pfx___might_resched+0x10/0x10 [ 1343.015934][T19974] ? fs_reclaim_acquire+0x7d/0x100 [ 1343.015968][T19974] should_fail_ex+0x414/0x560 [ 1343.016002][T19974] should_failslab+0xa8/0x100 [ 1343.016032][T19974] __kmalloc_noprof+0xcb/0x4f0 [ 1343.016055][T19974] ? tomoyo_encode+0x28b/0x550 [ 1343.016076][T19974] tomoyo_encode+0x28b/0x550 [ 1343.016101][T19974] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1343.016132][T19974] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1343.016161][T19974] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1343.016190][T19974] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1343.016241][T19974] ? __lock_acquire+0xab9/0xd20 [ 1343.016276][T19974] ? __fget_files+0x2a/0x420 [ 1343.016306][T19974] ? __fget_files+0x3a0/0x420 [ 1343.016330][T19974] ? __fget_files+0x2a/0x420 [ 1343.016358][T19974] security_file_ioctl_compat+0xcb/0x2d0 [ 1343.016385][T19974] __ia32_compat_sys_ioctl+0x128/0x840 [ 1343.016403][T19974] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1343.016418][T19974] ? __fget_files+0x3a0/0x420 [ 1343.016445][T19974] ? fput+0xa0/0xd0 [ 1343.016490][T19974] ? ksys_write+0x22a/0x250 [ 1343.016519][T19974] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1343.016544][T19974] ? lockdep_hardirqs_on+0x9c/0x150 [ 1343.016567][T19974] __do_fast_syscall_32+0xb6/0x2b0 [ 1343.016583][T19974] ? lockdep_hardirqs_on+0x9c/0x150 [ 1343.016617][T19974] do_fast_syscall_32+0x34/0x80 [ 1343.016638][T19974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1343.016661][T19974] RIP: 0023:0xf7f23539 [ 1343.016676][T19974] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1343.016688][T19974] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1343.016704][T19974] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000004148 [ 1343.016715][T19974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1343.016723][T19974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1343.016731][T19974] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1343.016743][T19974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1343.016778][T19974] [ 1343.016799][T19974] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1343.597681][T19994] pimreg: entered allmulticast mode [ 1343.608136][T19994] pimreg: left allmulticast mode [ 1344.429880][ T9521] usbhid 1-1:0.0: can't add hid device: -71 [ 1344.469296][ T9521] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1344.521750][ T9521] usb 1-1: USB disconnect, device number 84 [ 1344.592586][T19999] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1344.622915][T20002] loop4: detected capacity change from 0 to 7 [ 1344.718985][ T5943] Dev loop4: unable to read RDB block 7 [ 1344.727309][ T5943] loop4: unable to read partition table [ 1344.734760][ T5943] loop4: partition table beyond EOD, truncated [ 1344.755972][T20002] Dev loop4: unable to read RDB block 7 [ 1344.761562][T20002] loop4: unable to read partition table [ 1344.784739][T20002] loop4: partition table beyond EOD, truncated [ 1344.807236][T20002] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1344.882116][ T5221] Dev loop4: unable to read RDB block 7 [ 1344.888436][ T5221] loop4: unable to read partition table [ 1344.894423][ T5221] loop4: partition table beyond EOD, truncated [ 1345.321094][T20004] loop6: detected capacity change from 0 to 7 [ 1345.372229][T20004] Dev loop6: unable to read RDB block 7 [ 1345.394694][T20004] loop6: unable to read partition table [ 1345.412536][T20004] loop6: partition table beyond EOD, truncated [ 1345.529620][T20004] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1345.792407][T20009] loop6: detected capacity change from 0 to 7 [ 1345.823617][T20009] Dev loop6: unable to read RDB block 7 [ 1345.872492][T20009] loop6: unable to read partition table [ 1345.879993][T20009] loop6: partition table beyond EOD, truncated [ 1345.893901][T20009] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1346.076204][T20017] pimreg: entered allmulticast mode [ 1346.087979][T20017] pimreg: left allmulticast mode [ 1346.235956][T16535] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1346.469537][T16535] usb 1-1: Using ep0 maxpacket: 16 [ 1346.504663][T16535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1346.527599][T16535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1346.571597][T16535] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 1346.593347][T16535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.627548][T16535] usb 1-1: Product: syz [ 1346.646336][T16535] usb 1-1: Manufacturer: syz [ 1346.668186][T16535] usb 1-1: SerialNumber: syz [ 1346.706514][T16535] usb 1-1: config 0 descriptor?? [ 1346.724554][T16535] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1346.924574][T20010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.937423][T20010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.983560][T16535] usb 1-1: USB disconnect, device number 85 [ 1347.437889][T20033] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1347.696143][T20044] loop4: detected capacity change from 0 to 7 [ 1347.709752][T20044] Dev loop4: unable to read RDB block 7 [ 1347.710919][T20046] FAULT_INJECTION: forcing a failure. [ 1347.710919][T20046] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.716741][T20044] loop4: unable to read partition table [ 1347.837152][T20044] loop4: partition table beyond EOD, truncated [ 1347.850970][T20046] CPU: 0 UID: 0 PID: 20046 Comm: syz.6.3716 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1347.851002][T20046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1347.851016][T20046] Call Trace: [ 1347.851026][T20046] [ 1347.851036][T20046] dump_stack_lvl+0x189/0x250 [ 1347.851068][T20046] ? __pfx____ratelimit+0x10/0x10 [ 1347.851128][T20046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1347.851156][T20046] ? __pfx__printk+0x10/0x10 [ 1347.851193][T20046] ? __pfx___might_resched+0x10/0x10 [ 1347.851226][T20046] should_fail_ex+0x414/0x560 [ 1347.851264][T20046] should_failslab+0xa8/0x100 [ 1347.851298][T20046] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1347.851326][T20046] ? __alloc_skb+0x112/0x2d0 [ 1347.851356][T20046] __alloc_skb+0x112/0x2d0 [ 1347.851386][T20046] netlink_dump+0x22b/0xe20 [ 1347.851428][T20046] ? __pfx_netlink_dump+0x10/0x10 [ 1347.851470][T20046] ? genl_start+0x499/0x6c0 [ 1347.851514][T20046] __netlink_dump_start+0x5cb/0x7e0 [ 1347.851550][T20046] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1347.851591][T20046] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1347.851625][T20046] ? genl_get_cmd+0x7d9/0x910 [ 1347.851665][T20046] ? __pfx_genl_start+0x10/0x10 [ 1347.851695][T20046] ? __pfx_genl_dumpit+0x10/0x10 [ 1347.851726][T20046] ? __pfx_genl_done+0x10/0x10 [ 1347.851776][T20046] genl_rcv_msg+0x5da/0x790 [ 1347.851818][T20046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.851850][T20046] ? ref_tracker_free+0x63a/0x7d0 [ 1347.851884][T20046] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1347.851909][T20046] ? __pfx_ref_tracker_free+0x10/0x10 [ 1347.851960][T20046] netlink_rcv_skb+0x208/0x470 [ 1347.851988][T20046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.852022][T20046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1347.852069][T20046] ? down_read+0x1ad/0x2e0 [ 1347.852104][T20046] genl_rcv+0x28/0x40 [ 1347.852135][T20046] netlink_unicast+0x75b/0x8d0 [ 1347.852173][T20046] netlink_sendmsg+0x805/0xb30 [ 1347.852213][T20046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.852244][T20046] ? __import_iovec+0x5d4/0x7f0 [ 1347.852269][T20046] ? aa_sock_msg_perm+0x94/0x160 [ 1347.852305][T20046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1347.852338][T20046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.852367][T20046] __sock_sendmsg+0x21c/0x270 [ 1347.852407][T20046] ____sys_sendmsg+0x505/0x830 [ 1347.852443][T20046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1347.852492][T20046] ___sys_sendmsg+0x21f/0x2a0 [ 1347.852525][T20046] ? __pfx____sys_sendmsg+0x10/0x10 [ 1347.852596][T20046] ? __fget_files+0x2a/0x420 [ 1347.852625][T20046] ? __fget_files+0x3a0/0x420 [ 1347.852668][T20046] __sys_sendmsg+0x164/0x220 [ 1347.852700][T20046] ? __pfx___sys_sendmsg+0x10/0x10 [ 1347.852746][T20046] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1347.852784][T20046] ? lockdep_hardirqs_on+0x9c/0x150 [ 1347.852821][T20046] __do_fast_syscall_32+0xb6/0x2b0 [ 1347.852845][T20046] ? lockdep_hardirqs_on+0x9c/0x150 [ 1347.852885][T20046] do_fast_syscall_32+0x34/0x80 [ 1347.852908][T20046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1347.852936][T20046] RIP: 0023:0xf703e539 [ 1347.852956][T20046] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1347.852976][T20046] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1347.853000][T20046] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1347.853017][T20046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1347.853043][T20046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1347.853056][T20046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1347.853069][T20046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1347.853109][T20046] [ 1347.853699][T20044] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1348.432429][ T5221] Dev loop4: unable to read RDB block 7 [ 1348.440501][ T5221] loop4: unable to read partition table [ 1348.525396][ T5221] loop4: partition table beyond EOD, truncated [ 1348.659578][T20055] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3719'. [ 1348.672287][T20057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3718'. [ 1348.795349][ T5914] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1348.965556][ T5914] usb 7-1: Using ep0 maxpacket: 32 [ 1348.974322][ T5914] usb 7-1: config 141 has an invalid interface number: 84 but max is 1 [ 1349.005265][ T5914] usb 7-1: config 141 has an invalid interface number: 90 but max is 1 [ 1349.132007][ T5914] usb 7-1: config 141 has no interface number 0 [ 1349.151879][ T5914] usb 7-1: config 141 has no interface number 1 [ 1349.158683][ T5914] usb 7-1: config 141 interface 84 altsetting 2 endpoint 0xA has an invalid bInterval 25, changing to 7 [ 1349.174787][ T5914] usb 7-1: config 141 interface 84 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1349.188607][ T5914] usb 7-1: config 141 interface 84 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1349.235783][T20064] pimreg: entered allmulticast mode [ 1349.242974][T20066] pimreg: left allmulticast mode [ 1349.303657][ T5914] usb 7-1: config 141 interface 90 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1349.342393][ T5914] usb 7-1: config 141 interface 90 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1349.385333][ T5914] usb 7-1: config 141 interface 90 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1349.438259][ T5914] usb 7-1: config 141 interface 90 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1349.469220][T20068] loop6: detected capacity change from 0 to 7 [ 1349.484941][ T5914] usb 7-1: config 141 interface 90 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 1349.501561][T20068] Dev loop6: unable to read RDB block 7 [ 1349.508491][T20068] loop6: unable to read partition table [ 1349.514230][ T5914] usb 7-1: config 141 interface 90 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 1349.526770][T20068] loop6: partition table beyond EOD, truncated [ 1349.538984][T20068] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1349.656159][ T5914] usb 7-1: config 141 interface 90 altsetting 3 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1349.690873][ T5914] usb 7-1: config 141 interface 90 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1349.714587][ T5914] usb 7-1: config 141 interface 90 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1349.726128][ T5914] usb 7-1: config 141 interface 90 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1349.850245][ T5914] usb 7-1: config 141 interface 84 has no altsetting 0 [ 1349.860106][ T5914] usb 7-1: config 141 interface 90 has no altsetting 0 [ 1349.921414][ T5914] usb 7-1: Dual-Role OTG device on HNP port [ 1349.959726][ T5914] usb 7-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=4a.2f [ 1350.195466][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.222654][ T5914] usb 7-1: Product: 㲦ೳ㢓狭㜢⮬퀇䬧å“䉸é©á‹•æ˜ï‰–擪㈗䖀헅춳꘰ᶘꬼ넧ሧ쭪춧媯譳棎䊸鎆肤彶塅䎃⋶䴤献㗓Í귞봟雰祜濱࿹â¾ä¾å–®í‹šêˆ’䲰Ղɪä¡á–™ïŠ™ëª¤è•žèŽ£è®”ê©”ë¯ã¾˜æˆ„冿࢑㜖垘笊Ḅ㜤㇤溥컸ë¡ï¾½ë“㺜 [ 1350.615463][ T5914] usb 7-1: Manufacturer: äœî—‡â—­á†¥ã»ä¥½ï¥á°Œå‚¶ì¥œá§§à³™äŸîŽ¢ä¾µá“†îˆˆä²»å¸‡ã»î´¼å—¢å•æŽ¼âŸá‡ºï¥™äˆªä…Œå…«æ´ê¥´êº¨ï¡‰ê¥ªå·°ãƒ”팟귇朑Ａåªã£«á¾à¯£ë•˜ì°î‰¨î¡¢à³¬î€¥à­¿é•¢áµ©î¹§à¨ì‚誜詃郱윖⧮귨㇥ [ 1350.638794][ T5914] usb 7-1: SerialNumber: 츛ä«á¾æŸ—â›¿ç’ [ 1350.786023][T16535] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 1350.900859][T20053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.916450][T20053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.928256][T16535] usb 3-1: device descriptor read/64, error -71 [ 1350.941614][T20077] loop6: detected capacity change from 0 to 7 [ 1350.955705][ T5914] usb 7-1: USB disconnect, device number 32 [ 1351.003860][T20077] Dev loop6: unable to read RDB block 7 [ 1351.032918][T20077] loop6: unable to read partition table [ 1351.062597][T20077] loop6: partition table beyond EOD, truncated [ 1351.083399][T20077] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1351.185887][T16535] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 1351.319189][T16535] usb 3-1: device descriptor read/64, error -71 [ 1351.436546][T16535] usb usb3-port1: attempt power cycle [ 1351.660128][T20087] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1351.713808][T20089] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1351.788856][T16535] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 1351.816553][T16535] usb 3-1: device descriptor read/8, error -71 [ 1352.056835][T16535] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 1352.065326][T16439] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1352.098611][T16535] usb 3-1: device descriptor read/8, error -71 [ 1352.206513][T16535] usb usb3-port1: unable to enumerate USB device [ 1352.235718][T16439] usb 1-1: Using ep0 maxpacket: 8 [ 1352.247428][T16439] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 1352.257424][T16439] usb 1-1: config 0 has no interface number 0 [ 1352.266294][T16439] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1352.275718][T16439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.283830][T16439] usb 1-1: Product: syz [ 1352.288523][T16439] usb 1-1: Manufacturer: syz [ 1352.293158][T16439] usb 1-1: SerialNumber: syz [ 1352.301048][T16439] usb 1-1: config 0 descriptor?? [ 1352.324432][T16439] as10x_usb: device has been detected [ 1352.331071][T16439] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 1352.355992][T16439] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 1352.419861][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1352.430493][T16439] as10x_usb: error during firmware upload part1 [ 1352.455824][T16439] Registered device PCTV Systems picoStick (74e) [ 1352.531153][T16439] usb 1-1: USB disconnect, device number 86 [ 1352.588423][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1352.609634][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1352.612375][T16439] Unregistered device PCTV Systems picoStick (74e) [ 1352.622699][T16439] as10x_usb: device has been disconnected [ 1352.631141][ T10] usb 6-1: config 0 has no interface number 0 [ 1352.644038][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1352.658976][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1352.675924][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.704717][ T10] usb 6-1: Product: syz [ 1352.709487][ T10] usb 6-1: Manufacturer: syz [ 1352.714140][ T10] usb 6-1: SerialNumber: syz [ 1352.729888][ T10] usb 6-1: config 0 descriptor?? [ 1352.741536][ T10] smsc75xx v1.0.0 [ 1353.343819][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1353.359686][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1353.605818][T16535] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1353.617053][T20115] loop6: detected capacity change from 0 to 7 [ 1353.627035][T20115] Dev loop6: unable to read RDB block 7 [ 1353.632643][T20115] loop6: unable to read partition table [ 1353.646642][T20115] loop6: partition table beyond EOD, truncated [ 1353.652862][T20115] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1353.815045][T16535] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1353.842780][T16535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.854922][T16535] usb 1-1: Product: syz [ 1353.860128][T16535] usb 1-1: Manufacturer: syz [ 1353.865049][T16535] usb 1-1: SerialNumber: syz [ 1353.881880][T16535] usb 1-1: config 0 descriptor?? [ 1353.902320][T20120] loop2: detected capacity change from 0 to 7 [ 1353.942551][T16535] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1353.961796][T20123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1353.974279][ T5943] Dev loop2: unable to read RDB block 7 [ 1354.103735][ T5943] loop2: AHDI p1 p2 p3 [ 1354.120318][ T5943] loop2: partition table partially beyond EOD, truncated [ 1354.191920][ T5943] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1354.213899][ T5943] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1354.225390][ T5914] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1354.280646][T20120] Dev loop2: unable to read RDB block 7 [ 1354.289249][T20120] loop2: AHDI p1 p2 p3 [ 1354.302490][T20120] loop2: partition table partially beyond EOD, truncated [ 1354.310971][T20120] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1354.318492][T20120] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1354.458874][T20130] pimreg: left allmulticast mode [ 1354.498588][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 1354.531103][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.537388][T20111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.548414][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.565986][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1354.572379][T20111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.587053][ T5914] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1354.657593][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.695183][ T5914] usb 3-1: config 0 descriptor?? [ 1354.798476][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1354.811663][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1354.825449][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1354.898763][T16439] usb 1-1: USB disconnect, device number 87 [ 1354.926690][T20122] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3741'. [ 1354.994373][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1355.027175][ T10] usb 6-1: USB disconnect, device number 43 [ 1355.165272][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 1355.185304][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1355.277321][ T5914] usb 3-1: USB disconnect, device number 86 [ 1355.572269][T20138] Unknown options in mask 473c [ 1355.611052][T20138] loop4: detected capacity change from 0 to 7 [ 1355.689876][T20138] Dev loop4: unable to read RDB block 7 [ 1355.698718][T20138] loop4: unable to read partition table [ 1355.727365][T20138] loop4: partition table beyond EOD, truncated [ 1355.778600][T20138] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1356.606384][ T30] audit: type=1326 audit(1751935545.527:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20154 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 1356.680383][ T30] audit: type=1326 audit(1751935545.527:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20154 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 1356.720945][T20153] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3752'. [ 1356.771433][T20161] loop6: detected capacity change from 0 to 7 [ 1356.786343][T20161] Dev loop6: unable to read RDB block 7 [ 1356.802419][T20161] loop6: unable to read partition table [ 1356.811863][ T30] audit: type=1326 audit(1751935545.557:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20154 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 1356.830708][T20161] loop6: partition table beyond EOD, truncated [ 1356.846183][T20161] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1357.032482][ T30] audit: type=1326 audit(1751935545.557:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20154 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 1357.084640][ T30] audit: type=1326 audit(1751935545.557:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20154 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 1357.141710][T20164] loop6: detected capacity change from 0 to 7 [ 1357.150594][T20164] Dev loop6: unable to read RDB block 7 [ 1357.187052][T20164] loop6: unable to read partition table [ 1357.194964][T20164] loop6: partition table beyond EOD, truncated [ 1357.230753][T20164] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1357.514246][T20171] FAULT_INJECTION: forcing a failure. [ 1357.514246][T20171] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.550312][T20171] CPU: 1 UID: 0 PID: 20171 Comm: syz.4.3758 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1357.550339][T20171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1357.550351][T20171] Call Trace: [ 1357.550359][T20171] [ 1357.550368][T20171] dump_stack_lvl+0x189/0x250 [ 1357.550398][T20171] ? __pfx____ratelimit+0x10/0x10 [ 1357.550429][T20171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1357.550455][T20171] ? __pfx__printk+0x10/0x10 [ 1357.550485][T20171] ? __pfx___might_resched+0x10/0x10 [ 1357.550510][T20171] ? fs_reclaim_acquire+0x7d/0x100 [ 1357.550545][T20171] should_fail_ex+0x414/0x560 [ 1357.550580][T20171] should_failslab+0xa8/0x100 [ 1357.550610][T20171] __kmalloc_cache_noprof+0x70/0x3d0 [ 1357.550635][T20171] ? cfg80211_sinfo_alloc_tid_stats+0x77/0x100 [ 1357.550674][T20171] cfg80211_sinfo_alloc_tid_stats+0x77/0x100 [ 1357.550718][T20171] sta_set_sinfo+0x1d38/0x4690 [ 1357.550775][T20171] ? ieee80211_dump_station+0xf5/0x160 [ 1357.550812][T20171] ieee80211_dump_station+0x106/0x160 [ 1357.550849][T20171] nl80211_dump_station+0x34f/0x6e0 [ 1357.550869][T20171] ? do_fast_syscall_32+0x34/0x80 [ 1357.550888][T20171] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1357.550930][T20171] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1357.550976][T20171] ? trace_kmalloc+0x1f/0xd0 [ 1357.550997][T20171] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1357.551031][T20171] ? __build_skb_around+0x257/0x3e0 [ 1357.551062][T20171] genl_dumpit+0x10b/0x1b0 [ 1357.551097][T20171] netlink_dump+0x62d/0xe20 [ 1357.551133][T20171] ? __pfx_netlink_dump+0x10/0x10 [ 1357.551171][T20171] ? genl_start+0x499/0x6c0 [ 1357.551222][T20171] __netlink_dump_start+0x5cb/0x7e0 [ 1357.551255][T20171] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1357.551291][T20171] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1357.551321][T20171] ? genl_get_cmd+0x7d9/0x910 [ 1357.551356][T20171] ? __pfx_genl_start+0x10/0x10 [ 1357.551384][T20171] ? __pfx_genl_dumpit+0x10/0x10 [ 1357.551411][T20171] ? __pfx_genl_done+0x10/0x10 [ 1357.551459][T20171] genl_rcv_msg+0x5da/0x790 [ 1357.551497][T20171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1357.551525][T20171] ? ref_tracker_free+0x63a/0x7d0 [ 1357.551555][T20171] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1357.551577][T20171] ? __pfx_ref_tracker_free+0x10/0x10 [ 1357.551620][T20171] netlink_rcv_skb+0x208/0x470 [ 1357.551645][T20171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1357.551678][T20171] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1357.551720][T20171] ? down_read+0x1ad/0x2e0 [ 1357.551746][T20171] genl_rcv+0x28/0x40 [ 1357.551774][T20171] netlink_unicast+0x75b/0x8d0 [ 1357.551808][T20171] netlink_sendmsg+0x805/0xb30 [ 1357.551844][T20171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1357.551891][T20171] ? __import_iovec+0x5d4/0x7f0 [ 1357.551916][T20171] ? aa_sock_msg_perm+0x94/0x160 [ 1357.551952][T20171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1357.551987][T20171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1357.552016][T20171] __sock_sendmsg+0x21c/0x270 [ 1357.552055][T20171] ____sys_sendmsg+0x505/0x830 [ 1357.552092][T20171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1357.552141][T20171] ___sys_sendmsg+0x21f/0x2a0 [ 1357.552174][T20171] ? __pfx____sys_sendmsg+0x10/0x10 [ 1357.552254][T20171] ? __fget_files+0x2a/0x420 [ 1357.552284][T20171] ? __fget_files+0x3a0/0x420 [ 1357.552327][T20171] __sys_sendmsg+0x164/0x220 [ 1357.552360][T20171] ? __pfx___sys_sendmsg+0x10/0x10 [ 1357.552407][T20171] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1357.552445][T20171] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.552483][T20171] __do_fast_syscall_32+0xb6/0x2b0 [ 1357.552506][T20171] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.552546][T20171] do_fast_syscall_32+0x34/0x80 [ 1357.552569][T20171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1357.552597][T20171] RIP: 0023:0xf710e539 [ 1357.552616][T20171] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1357.552635][T20171] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1357.552659][T20171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1357.552676][T20171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1357.552689][T20171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1357.552702][T20171] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1357.552715][T20171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1357.552749][T20171] [ 1358.144096][ T5914] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1358.305286][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 1358.312495][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.323509][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.333307][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1358.346181][ T5914] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1358.356425][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.367176][ T5914] usb 1-1: config 0 descriptor?? [ 1358.848240][T20188] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3763'. [ 1358.861980][T20189] loop2: detected capacity change from 0 to 7 [ 1358.874975][T20189] Dev loop2: unable to read RDB block 7 [ 1358.884004][T20189] loop2: AHDI p1 p2 p3 [ 1358.892661][T20189] loop2: partition table partially beyond EOD, truncated [ 1358.902055][T20189] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1358.912342][T20189] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1359.041623][ T5914] usbhid 1-1:0.0: can't add hid device: -71 [ 1359.051412][ T5914] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1359.123270][ T5221] Dev loop2: unable to read RDB block 7 [ 1359.135553][ T5221] loop2: AHDI p1 p2 p3 [ 1359.150126][ T5914] usb 1-1: USB disconnect, device number 88 [ 1359.156171][ T5221] loop2: partition table partially beyond EOD, truncated [ 1359.177542][ T5221] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1359.324026][ T5221] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1360.560842][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 1361.307245][ T5914] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1361.393324][T20228] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3771'. [ 1361.560987][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.567616][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.637386][ T5914] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1361.684150][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.703231][ T5914] usb 3-1: Product: syz [ 1361.708023][ T5914] usb 3-1: Manufacturer: syz [ 1361.710414][T20235] loop6: detected capacity change from 0 to 7 [ 1361.712683][ T5914] usb 3-1: SerialNumber: syz [ 1361.754088][T20235] Dev loop6: unable to read RDB block 7 [ 1361.763773][T20235] loop6: unable to read partition table [ 1361.784233][T20235] loop6: partition table beyond EOD, truncated [ 1361.850534][T20235] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1361.873474][ T5914] usb 3-1: config 0 descriptor?? [ 1361.894388][ T5914] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1362.655508][ T5914] sonixb 3-1:0.0: Error writing register 01: -110 [ 1362.668953][ T5914] sonixb 3-1:0.0: probe with driver sonixb failed with error -110 [ 1363.620359][ T10] usb 3-1: USB disconnect, device number 87 [ 1363.675555][ T5914] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1363.781957][T20259] loop6: detected capacity change from 0 to 7 [ 1363.802409][T20259] Dev loop6: unable to read RDB block 7 [ 1363.827555][T20259] loop6: AHDI p3 p4 [ 1363.870496][T20259] loop6: partition table partially beyond EOD, truncated [ 1363.890003][ T5914] usb 6-1: device descriptor read/64, error -71 [ 1363.901605][T20253] vlan2: entered allmulticast mode [ 1363.918804][T20259] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1364.055476][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1364.145386][ T5914] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1364.226940][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1364.256203][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.277871][T20263] xt_ecn: cannot match TCP bits for non-tcp packets [ 1364.295435][ T5914] usb 6-1: device descriptor read/64, error -71 [ 1364.344917][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.406292][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1364.440112][ T5914] usb usb6-port1: attempt power cycle [ 1364.440191][ T10] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1364.509016][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.597155][ T10] usb 7-1: config 0 descriptor?? [ 1364.699134][T20269] loop2: detected capacity change from 0 to 7 [ 1364.733124][T20269] Dev loop2: unable to read RDB block 7 [ 1364.738952][T20269] loop2: AHDI p1 p2 p3 [ 1364.753443][T20269] loop2: partition table partially beyond EOD, truncated [ 1364.777360][T20269] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1364.791241][T20269] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1364.851307][ T5914] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1364.950764][ T5914] usb 6-1: device descriptor read/8, error -71 [ 1365.283671][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1365.314163][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1365.373159][ T10] usb 7-1: USB disconnect, device number 33 [ 1365.897395][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1366.149728][ T5914] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1366.175260][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1366.217989][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 1366.228387][T20281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.242779][ T5914] usb 6-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1366.258756][T20281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.340815][ T5914] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1366.514940][ T5914] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1366.525148][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.533239][ T5914] usb 6-1: Product: syz [ 1366.552234][ T5914] usb 6-1: Manufacturer: syz [ 1366.583405][ T5914] usb 6-1: SerialNumber: syz [ 1366.686526][ T5914] usb 6-1: config 0 descriptor?? [ 1367.028256][T20287] binder: 20282:20287 ioctl c0306201 80000100 returned -11 [ 1367.059882][T20287] fuse: Bad value for 'fd' [ 1367.383445][T20289] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1367.807359][T20297] loop6: detected capacity change from 0 to 7 [ 1367.857437][T20297] Dev loop6: unable to read RDB block 7 [ 1367.890388][T20297] loop6: unable to read partition table [ 1367.934782][T20297] loop6: partition table beyond EOD, truncated [ 1368.002900][T20297] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1368.354239][T20302] loop6: detected capacity change from 0 to 7 [ 1368.390352][T20302] Dev loop6: unable to read RDB block 7 [ 1368.410070][T20302] loop6: unable to read partition table [ 1368.424974][T20302] loop6: partition table beyond EOD, truncated [ 1368.439464][T20302] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1368.915068][T20304] loop6: detected capacity change from 0 to 7 [ 1368.971460][T20304] Dev loop6: unable to read RDB block 7 [ 1369.020921][T20304] loop6: AHDI p3 p4 [ 1369.025376][T20304] loop6: partition table partially beyond EOD, truncated [ 1369.059486][T20304] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1369.323183][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1369.378509][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1369.420529][ T10] usb 7-1: can't read configurations, error -71 [ 1369.572451][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3800'. [ 1370.868685][ T5914] usb 6-1: USB disconnect, device number 47 [ 1371.365310][ T5914] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1371.429687][T20331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1371.525391][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 1371.586260][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.603454][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.634222][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1371.666759][ T5914] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1371.684946][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.712471][ T5914] usb 6-1: config 0 descriptor?? [ 1371.799087][ T5923] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1371.817217][ T5923] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1371.844677][ T5923] usb 5-1: USB disconnect, device number 36 [ 1372.590815][ T5914] usbhid 6-1:0.0: can't add hid device: -71 [ 1372.617118][ T5914] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1372.662220][ T5914] usb 6-1: USB disconnect, device number 48 [ 1373.125363][ T5914] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1373.195371][ T5923] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1373.319209][ T5914] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1373.367682][T20349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1373.395239][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 1373.407273][ T5914] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1373.424686][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.439036][ T5914] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1373.448616][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.458532][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.466712][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1373.481307][ T5923] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1373.492627][T20345] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1373.502362][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.525379][T20353] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3809'. [ 1373.557871][ T5914] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1373.570127][ T5923] usb 5-1: config 0 descriptor?? [ 1373.849897][T20357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.876132][T20357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.420052][ T5923] usbhid 5-1:0.0: can't add hid device: -71 [ 1374.435369][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1374.499285][ T5923] usb 5-1: USB disconnect, device number 37 [ 1375.025260][ T5923] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1375.415148][ T10] usb 6-1: USB disconnect, device number 49 [ 1375.475280][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 1375.570314][T20380] loop2: detected capacity change from 0 to 7 [ 1375.585391][T20380] Dev loop2: unable to read RDB block 7 [ 1375.591203][T20380] loop2: AHDI p1 p2 p3 [ 1375.595635][T20380] loop2: partition table partially beyond EOD, truncated [ 1375.603586][T20380] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1375.610538][T20380] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1375.634087][ T5923] usb 5-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1375.701049][ T5923] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1375.917881][ T5923] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1375.947892][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.999230][ T5923] usb 5-1: Product: syz [ 1376.046002][ T5923] usb 5-1: Manufacturer: syz [ 1376.123544][ T5923] usb 5-1: SerialNumber: syz [ 1376.430408][ T5923] usb 5-1: config 0 descriptor?? [ 1376.742506][T20372] binder: 20367:20372 ioctl c0306201 80000100 returned -11 [ 1376.752241][T20389] loop4: detected capacity change from 0 to 7 [ 1376.783683][T20389] Dev loop4: unable to read RDB block 7 [ 1376.802029][T20372] fuse: Bad value for 'fd' [ 1376.846017][T20389] loop4: unable to read partition table [ 1376.879345][T20389] loop4: partition table beyond EOD, truncated [ 1376.907353][T20389] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1378.329650][ T10] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1378.486055][T16535] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1378.495889][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1378.509113][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.528329][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.540082][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1378.553973][ T10] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1378.564465][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.577471][ T10] usb 7-1: config 0 descriptor?? [ 1378.638878][T16535] usb 3-1: not running at top speed; connect to a high speed hub [ 1378.659494][T16535] usb 3-1: config 1 has an invalid interface number: 78 but max is 0 [ 1378.668558][T16535] usb 3-1: config 1 has no interface number 0 [ 1378.686009][T16535] usb 3-1: config 1 interface 78 has no altsetting 0 [ 1378.704247][T16535] usb 3-1: string descriptor 0 read error: -22 [ 1378.713462][T16535] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 1378.738095][T16535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.771972][T16535] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1378.781018][T16535] usb 3-1: selecting invalid altsetting 0 [ 1378.812969][ T5923] usb 5-1: USB disconnect, device number 38 [ 1378.931712][ T30] audit: type=1326 audit(1751935567.857:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20397 comm="syz.0.3827" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x0 [ 1379.008134][T16535] usb 3-1: USB disconnect, device number 88 [ 1379.014765][ T2343] pvrusb2: control-write URB failure, status=-71 [ 1379.072563][ T2343] pvrusb2: Device being rendered inoperable [ 1379.093867][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1379.139158][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1379.158815][T20416] dlm: non-version read from control device 8 [ 1379.238598][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1379.259497][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1379.297835][ T10] usb 7-1: USB disconnect, device number 36 [ 1379.306085][ T5923] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1379.488972][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 1379.517108][ T5923] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1379.547974][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.609709][ T5923] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1379.627121][ T5923] pvrusb2: ********** [ 1379.642233][ T5923] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1379.686630][ T5923] pvrusb2: Important functionality might not be entirely working. [ 1379.702325][ T5923] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1379.720070][T20424] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1379.732493][ T5923] pvrusb2: ********** [ 1379.918094][T20435] ksmbd: Unknown IPC event: 3, ignore. [ 1379.943830][T20435] usb usb8: usbfs: process 20435 (syz.5.3838) did not claim interface 0 before use [ 1380.032947][T20437] loop6: detected capacity change from 0 to 7 [ 1380.040676][T20437] Dev loop6: unable to read RDB block 7 [ 1380.051707][T20437] loop6: AHDI p3 p4 [ 1380.091663][T20437] loop6: partition table partially beyond EOD, truncated [ 1380.133212][T20437] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1380.713046][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3842'. [ 1380.777297][T20445] loop6: detected capacity change from 0 to 7 [ 1380.804660][T20445] Dev loop6: unable to read RDB block 7 [ 1380.842289][T20445] loop6: unable to read partition table [ 1380.887794][T20445] loop6: partition table beyond EOD, truncated [ 1380.898418][T20445] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1380.931928][ T2343] pvrusb2: Invalid write control endpoint [ 1380.938261][ T5923] usb 1-1: USB disconnect, device number 89 [ 1381.249182][ T2343] pvrusb2: Invalid write control endpoint [ 1381.255022][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1381.322563][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1381.357762][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1381.402985][ T2343] pvrusb2: Device being rendered inoperable [ 1381.426331][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1381.442871][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1381.554708][ T2343] pvrusb2: Attached sub-driver cx25840 [ 1381.561476][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1381.574660][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1382.096436][ T5923] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1382.206184][T20466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1382.316811][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 1382.495657][T20467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.507960][T20467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.657949][T20471] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1382.775985][T20481] pimreg: entered allmulticast mode [ 1383.908912][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3855'. [ 1385.276386][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1385.289303][ T5923] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1385.320490][ T5923] usb 1-1: can't read configurations, error -71 [ 1385.377272][T20497] loop6: detected capacity change from 0 to 7 [ 1385.468114][T20497] Dev loop6: unable to read RDB block 7 [ 1385.575896][T20497] loop6: AHDI p3 p4 [ 1385.615564][T20497] loop6: partition table partially beyond EOD, truncated [ 1385.668642][T20497] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1385.946169][T20509] loop6: detected capacity change from 0 to 7 [ 1385.982359][T20509] Dev loop6: unable to read RDB block 7 [ 1386.005024][T20509] loop6: unable to read partition table [ 1386.033875][T20509] loop6: partition table beyond EOD, truncated [ 1386.085973][T20509] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1386.784837][T20524] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1387.067814][T20525] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3865'. [ 1387.925358][ T5923] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1387.977065][T20548] loop4: detected capacity change from 0 to 7 [ 1387.987605][T20548] Dev loop4: unable to read RDB block 7 [ 1387.996878][T20548] loop4: unable to read partition table [ 1388.016575][T20548] loop4: partition table beyond EOD, truncated [ 1388.028865][T20548] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1388.085320][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 1388.109245][ T5923] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1388.130423][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.139503][ T5221] Dev loop4: unable to read RDB block 7 [ 1388.165293][ T5221] loop4: unable to read partition table [ 1388.181310][ T5923] usb 5-1: Product: syz [ 1388.187764][ T5221] loop4: partition table beyond EOD, truncated [ 1388.205993][ T5923] usb 5-1: Manufacturer: syz [ 1388.210658][ T5923] usb 5-1: SerialNumber: syz [ 1388.231252][T20550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1388.268267][ T5923] usb 5-1: config 0 descriptor?? [ 1388.300960][ T5923] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1389.116532][T16535] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1389.295924][T16535] usb 6-1: Using ep0 maxpacket: 16 [ 1389.307095][T16535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.349631][T16535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.385988][T16535] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1389.388454][T20563] loop6: detected capacity change from 0 to 7 [ 1389.415429][T16535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.419734][T20563] Dev loop6: unable to read RDB block 7 [ 1389.442057][T20563] loop6: AHDI p3 p4 [ 1389.450996][ T5848] usb 5-1: USB disconnect, device number 39 [ 1389.472490][T20563] loop6: partition table partially beyond EOD, truncated [ 1389.478074][T16535] usb 6-1: config 0 descriptor?? [ 1389.513129][T20563] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1389.912660][T16535] corsair 0003:1B1C:1B02.0022: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 1390.242510][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1390.324356][ T5923] usb 6-1: USB disconnect, device number 50 [ 1391.235968][T16535] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1391.254053][T20587] loop6: detected capacity change from 0 to 7 [ 1391.289851][T20587] Dev loop6: unable to read RDB block 7 [ 1391.306769][T20587] loop6: unable to read partition table [ 1391.342455][T20587] loop6: partition table beyond EOD, truncated [ 1391.379641][T20587] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1391.426209][T16535] usb 1-1: Using ep0 maxpacket: 16 [ 1391.495539][T16535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.547795][T16535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1391.577009][T16535] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1391.609943][T16535] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1391.650492][T16535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.688849][T16535] usb 1-1: config 0 descriptor?? [ 1392.186152][T16535] usbhid 1-1:0.0: can't add hid device: -71 [ 1392.204394][T16535] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1392.222611][T20607] loop4: detected capacity change from 0 to 7 [ 1392.239132][T20607] Dev loop4: unable to read RDB block 7 [ 1392.240820][T16535] usb 1-1: USB disconnect, device number 92 [ 1392.244756][T20607] loop4: unable to read partition table [ 1392.244964][T20607] loop4: partition table beyond EOD, truncated [ 1392.244985][T20607] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1392.540307][T20616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3900'. [ 1392.566138][T20616] 8021q: VLANs not supported on ip_vti0 [ 1392.659421][T20620] loop6: detected capacity change from 0 to 7 [ 1392.668374][T20594] delete_channel: no stack [ 1392.668581][T20620] Dev loop6: unable to read RDB block 7 [ 1392.716233][T20620] loop6: unable to read partition table [ 1392.722278][T20620] loop6: partition table beyond EOD, truncated [ 1392.739470][T20620] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1392.947732][T20626] loop6: detected capacity change from 0 to 7 [ 1392.981073][T20626] Dev loop6: unable to read RDB block 7 [ 1393.003821][T20626] loop6: unable to read partition table [ 1393.014100][T20626] loop6: partition table beyond EOD, truncated [ 1393.020786][T20626] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1393.200210][T20630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3907'. [ 1393.350663][T20639] pimreg: left allmulticast mode [ 1393.553109][T20646] netlink: 'syz.6.3908': attribute type 15 has an invalid length. [ 1394.042164][ T10] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1394.256394][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1394.270634][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.283372][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.301992][T20655] loop4: detected capacity change from 0 to 7 [ 1394.311257][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1394.345649][T20655] Dev loop4: unable to read RDB block 7 [ 1394.353491][T20655] loop4: unable to read partition table [ 1394.364428][ T10] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1394.379066][T20655] loop4: partition table beyond EOD, truncated [ 1394.388415][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.406521][T20655] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1394.442366][ T10] usb 1-1: config 0 descriptor?? [ 1394.657071][T20659] loop6: detected capacity change from 0 to 7 [ 1394.680776][ T7265] Dev loop6: unable to read RDB block 7 [ 1394.693099][ T7265] loop6: AHDI p3 p4 [ 1394.698503][ T7265] loop6: partition table partially beyond EOD, truncated [ 1394.711823][ T7265] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1394.728914][T20659] Dev loop6: unable to read RDB block 7 [ 1394.735055][T20659] loop6: AHDI p3 p4 [ 1394.739416][T20659] loop6: partition table partially beyond EOD, truncated [ 1394.753435][T20659] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1394.850665][ T5221] Dev loop6: unable to read RDB block 7 [ 1394.871250][ T5221] loop6: AHDI p3 p4 [ 1394.882879][ T5221] loop6: partition table partially beyond EOD, truncated [ 1395.020211][ T5221] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1395.079086][T20641] random: crng reseeded on system resumption [ 1395.102798][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1395.109116][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1395.131256][ T10] usb 1-1: USB disconnect, device number 93 [ 1395.256041][ T5923] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1395.416863][ T5923] usb 7-1: device descriptor read/64, error -71 [ 1395.671619][ T5923] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1395.836934][ T5923] usb 7-1: device descriptor read/64, error -71 [ 1395.859316][T20672] loop6: detected capacity change from 0 to 7 [ 1395.884221][T20672] Dev loop6: unable to read RDB block 7 [ 1395.898178][T20672] loop6: unable to read partition table [ 1395.941731][T20672] loop6: partition table beyond EOD, truncated [ 1395.981233][ T5923] usb usb7-port1: attempt power cycle [ 1396.023554][T20672] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1396.345465][ T5923] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1396.386372][ T5923] usb 7-1: device descriptor read/8, error -71 [ 1396.487051][T20682] loop4: detected capacity change from 0 to 7 [ 1396.504852][T20682] Dev loop4: unable to read RDB block 7 [ 1396.525958][T20682] loop4: unable to read partition table [ 1396.531905][T20682] loop4: partition table beyond EOD, truncated [ 1396.549892][T20682] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1396.625436][ T5923] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1396.656022][ T5923] usb 7-1: device descriptor read/8, error -71 [ 1396.769094][ T5923] usb usb7-port1: unable to enumerate USB device [ 1396.780296][ T5930] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1396.822804][T20694] loop6: detected capacity change from 0 to 7 [ 1396.831608][T20694] Dev loop6: unable to read RDB block 7 [ 1396.858548][T20694] loop6: AHDI p3 p4 [ 1396.862533][T20694] loop6: partition table partially beyond EOD, truncated [ 1396.876736][T20694] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1396.965062][ T5930] usb 3-1: device descriptor read/64, error -71 [ 1397.078811][ T979] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1397.235993][ T5930] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1397.246076][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 1397.259452][ T979] usb 5-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1397.271237][ T979] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1397.296262][ T979] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1397.306217][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.314489][ T979] usb 5-1: Product: syz [ 1397.349096][ T979] usb 5-1: Manufacturer: syz [ 1397.384137][ T979] usb 5-1: SerialNumber: syz [ 1397.395097][ T979] usb 5-1: config 0 descriptor?? [ 1397.407766][ T5930] usb 3-1: device descriptor read/64, error -71 [ 1397.445467][T20701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.454256][T20701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.516368][ T5930] usb usb3-port1: attempt power cycle [ 1397.626491][T20695] binder: 20690:20695 ioctl c0306201 80000100 returned -11 [ 1397.638623][T20695] fuse: Bad value for 'fd' [ 1397.668826][ T5923] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1397.848580][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1397.867440][ T5923] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1397.875297][ T5930] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1397.886531][ T5923] usb 6-1: can't read configurations, error -71 [ 1397.906092][ T5930] usb 3-1: device descriptor read/8, error -71 [ 1398.166702][ T5930] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1398.206345][ T5930] usb 3-1: device descriptor read/8, error -71 [ 1398.326393][ T5930] usb usb3-port1: unable to enumerate USB device [ 1399.015733][T20718] pimreg: entered allmulticast mode [ 1399.059975][T20718] pimreg: left allmulticast mode [ 1399.625603][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3938'. [ 1399.646215][ T10] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1399.648188][T20725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3938'. [ 1399.738692][T20727] loop6: detected capacity change from 0 to 7 [ 1399.746671][T20725] netlink: 'syz.6.3938': attribute type 18 has an invalid length. [ 1399.769313][T20727] Dev loop6: unable to read RDB block 7 [ 1399.800527][T20727] loop6: unable to read partition table [ 1399.815942][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1399.844152][T20727] loop6: partition table beyond EOD, truncated [ 1399.844570][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.862193][T20727] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1399.882452][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.918439][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1399.974119][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1399.984052][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.000192][ T10] usb 6-1: config 0 descriptor?? [ 1400.035868][ T979] usb 5-1: USB disconnect, device number 40 [ 1400.285912][T20734] loop4: detected capacity change from 0 to 7 [ 1400.295916][T20734] Dev loop4: unable to read RDB block 7 [ 1400.309037][T20734] loop4: unable to read partition table [ 1400.315769][T20734] loop4: partition table beyond EOD, truncated [ 1400.331259][T20734] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1400.358479][ T5221] Dev loop4: unable to read RDB block 7 [ 1400.364527][ T5221] loop4: unable to read partition table [ 1400.373385][ T5221] loop4: partition table beyond EOD, truncated [ 1400.476112][ T5938] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1400.651606][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.674131][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1400.704813][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1400.721524][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1400.739051][ T5938] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1400.750198][ T5938] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1400.762832][ T5938] usb 3-1: Manufacturer: syz [ 1400.770970][ T5938] usb 3-1: config 0 descriptor?? [ 1400.941545][T20742] loop6: detected capacity change from 0 to 7 [ 1400.969471][T20742] Dev loop6: unable to read RDB block 7 [ 1400.991449][T20742] loop6: AHDI p3 p4 [ 1401.010111][T20742] loop6: partition table partially beyond EOD, truncated [ 1401.058806][T20742] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1401.115278][ T5938] rc_core: IR keymap rc-hauppauge not found [ 1401.121247][ T5938] Registered IR keymap rc-empty [ 1401.128899][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.175810][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.218662][ T5938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1401.252698][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3945'. [ 1401.266054][ T5938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input144 [ 1401.268429][T20745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3945'. [ 1401.295858][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.316206][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.327263][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3946'. [ 1401.365363][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.396147][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.420662][T20746] input: syz0 as /devices/virtual/input/input145 [ 1401.436712][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.478943][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.516156][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.545368][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.597607][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.641606][ T5938] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1401.678665][ T5938] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1401.721439][ T5938] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1401.756892][ T5938] usb 3-1: USB disconnect, device number 93 [ 1401.783050][T20755] kAFS: unable to lookup cell 'Þ({^ú@' [ 1402.239210][ T5938] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1402.365084][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1402.376693][ T979] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1402.413518][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1402.413893][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1402.461494][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1402.474706][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 1402.477550][ T10] usb 6-1: USB disconnect, device number 53 [ 1402.495117][ T5938] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.502217][T20766] netlink: 'syz.2.3952': attribute type 18 has an invalid length. [ 1402.526865][ T5938] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.606080][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 1402.622118][ T979] usb 5-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1402.640655][ T5938] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1402.993221][ T5938] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1403.009214][ T979] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1403.040063][ T5938] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1403.049878][ T979] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1403.070196][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.078358][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.078389][ T979] usb 5-1: Product: syz [ 1403.082771][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3953'. [ 1403.119692][ T979] usb 5-1: Manufacturer: syz [ 1403.128033][ T979] usb 5-1: SerialNumber: syz [ 1403.129135][ T5938] usb 7-1: config 0 descriptor?? [ 1403.174838][ T979] usb 5-1: config 0 descriptor?? [ 1403.514817][T20763] binder: 20758:20763 ioctl c0306201 80000100 returned -11 [ 1403.545888][T20763] fuse: Bad value for 'fd' [ 1403.626565][ T5938] uclogic 0003:5543:0781.0023: ignoring exceeding usage max [ 1403.658678][ T5938] uclogic 0003:5543:0781.0023: unbalanced collection at end of report description [ 1403.738423][ T5938] uclogic 0003:5543:0781.0023: parse failed [ 1403.765115][ T5938] uclogic 0003:5543:0781.0023: probe with driver uclogic failed with error -22 [ 1403.834593][ T5938] usb 7-1: USB disconnect, device number 41 [ 1403.857580][T20780] loop6: detected capacity change from 0 to 7 [ 1403.869012][T20780] Dev loop6: unable to read RDB block 7 [ 1403.892961][T20780] loop6: AHDI p3 p4 [ 1403.912641][T20780] loop6: partition table partially beyond EOD, truncated [ 1403.952871][T20780] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1404.366147][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3958'. [ 1405.095857][T20800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3963'. [ 1405.120945][T20800] netlink: 'syz.6.3963': attribute type 5 has an invalid length. [ 1405.176423][T20800] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3963'. [ 1405.474682][T20800] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1405.488054][T20800] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1405.579554][T20800] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1405.588387][T20800] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1405.606599][T20800] geneve2: entered promiscuous mode [ 1405.655885][ T5848] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1405.759260][T20800] geneve2: entered allmulticast mode [ 1405.828661][ T979] usb 5-1: USB disconnect, device number 41 [ 1405.867356][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1405.936000][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 1405.951728][ T5848] usb 3-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1405.962593][ T5848] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1405.990956][ T5848] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1406.012954][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.044428][ T5848] usb 3-1: Product: syz [ 1406.069772][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1406.083033][ T5848] usb 3-1: Manufacturer: syz [ 1406.130946][ T9] usb 6-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1406.154140][ T5848] usb 3-1: SerialNumber: syz [ 1406.170208][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1406.193518][ T5848] usb 3-1: config 0 descriptor?? [ 1406.366799][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1406.380781][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.405949][ T9] usb 6-1: Product: syz [ 1406.411515][ T9] usb 6-1: Manufacturer: syz [ 1406.430449][ T5938] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1406.436281][ T9] usb 6-1: SerialNumber: syz [ 1406.448770][ T9] usb 6-1: config 0 descriptor?? [ 1406.583825][T20807] binder: 20802:20807 ioctl c0306201 80000100 returned -11 [ 1406.623314][T20807] fuse: Bad value for 'fd' [ 1406.635408][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 1406.683172][T20815] binder: 20809:20815 ioctl c0306201 80000100 returned -11 [ 1406.698713][T20815] fuse: Bad value for 'fd' [ 1406.894812][ T5938] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1406.925134][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1406.942632][ T5938] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1407.149559][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.220789][ T5938] usb 5-1: config 0 descriptor?? [ 1407.679705][T20819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.688605][T20819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.969638][ T5938] usbhid 5-1:0.0: can't add hid device: -71 [ 1407.975819][ T5938] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1408.004449][ T5938] usb 5-1: USB disconnect, device number 42 [ 1408.234916][T20825] loop6: detected capacity change from 0 to 7 [ 1408.244990][T20825] Dev loop6: unable to read RDB block 7 [ 1408.250909][T20825] loop6: AHDI p3 p4 [ 1408.265608][T20825] loop6: partition table partially beyond EOD, truncated [ 1408.290236][T20825] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1409.103649][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3970'. [ 1409.548837][ T9] usb 6-1: USB disconnect, device number 54 [ 1409.568991][T20842] loop6: detected capacity change from 0 to 7 [ 1409.637835][ T5848] usb 3-1: USB disconnect, device number 94 [ 1409.665647][ T5221] Dev loop6: unable to read RDB block 7 [ 1409.672479][ T5221] loop6: unable to read partition table [ 1409.691798][ T5221] loop6: partition table beyond EOD, truncated [ 1409.710082][T20842] Dev loop6: unable to read RDB block 7 [ 1409.720030][T20842] loop6: unable to read partition table [ 1409.729156][T20842] loop6: partition table beyond EOD, truncated [ 1409.738765][T20842] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1409.754128][ T5221] Dev loop6: unable to read RDB block 7 [ 1409.772563][ T5221] loop6: unable to read partition table [ 1409.791373][ T5221] loop6: partition table beyond EOD, truncated [ 1409.985382][ T979] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1410.296776][ T979] usb 7-1: Using ep0 maxpacket: 16 [ 1410.341065][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1410.374009][ T979] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1410.413317][ T979] usb 7-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1410.437106][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.465727][ T979] usb 7-1: config 0 descriptor?? [ 1410.934000][T20846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.950515][T20846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.455549][ T979] usbhid 7-1:0.0: can't add hid device: -71 [ 1411.485771][ T979] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1411.532682][T20872] loop6: detected capacity change from 0 to 7 [ 1411.559157][ T979] usb 7-1: USB disconnect, device number 42 [ 1411.574825][T20872] Dev loop6: unable to read RDB block 7 [ 1411.627827][T20872] loop6: unable to read partition table [ 1411.647707][T20872] loop6: partition table beyond EOD, truncated [ 1411.675842][T20872] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1411.778325][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3981'. [ 1412.412660][T20884] input: syz1 as /devices/virtual/input/input146 [ 1412.804534][T20895] fuse: Bad value for 'fd' [ 1412.955975][ T979] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1413.281821][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 1413.360088][T20901] netlink: 'syz.0.3989': attribute type 10 has an invalid length. [ 1413.373933][T20901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3989'. [ 1413.590598][ T5938] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1413.688896][T20901] bridge0: port 3(dummy0) entered blocking state [ 1413.707512][T20901] bridge0: port 3(dummy0) entered disabled state [ 1413.720381][ T979] usb 3-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1413.737653][T20901] dummy0: entered allmulticast mode [ 1413.763713][ T979] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1413.830413][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 1413.867555][T20901] dummy0: entered promiscuous mode [ 1413.908697][ T5938] usb 7-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1413.928026][T20901] bridge0: port 3(dummy0) entered blocking state [ 1413.934552][T20901] bridge0: port 3(dummy0) entered forwarding state [ 1413.935305][ T979] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1414.048710][ T5938] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1414.069056][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.131935][ T979] usb 3-1: Product: syz [ 1414.159812][ T979] usb 3-1: Manufacturer: syz [ 1414.186519][ T5938] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1414.250729][ T979] usb 3-1: SerialNumber: syz [ 1414.298384][T20905] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3991'. [ 1414.311143][ T979] usb 3-1: config 0 descriptor?? [ 1414.317401][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.559970][ T5938] usb 7-1: Product: syz [ 1414.564226][ T5938] usb 7-1: Manufacturer: syz [ 1414.663578][ T5938] usb 7-1: SerialNumber: syz [ 1414.716232][ T5938] usb 7-1: config 0 descriptor?? [ 1414.923521][T20892] binder: 20889:20892 ioctl c0306201 80000100 returned -11 [ 1414.945425][T20892] fuse: Bad value for 'fd' [ 1415.024647][T20899] binder: 20894:20899 ioctl c0306201 80000100 returned -11 [ 1415.050657][T20899] fuse: Bad value for 'fd' [ 1415.324198][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3994'. [ 1416.981655][ T979] usb 3-1: USB disconnect, device number 95 [ 1417.205403][ T5923] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1417.236152][ T5938] usb 7-1: USB disconnect, device number 43 [ 1417.385538][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 1417.410344][ T5923] usb 1-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1417.507423][ T5923] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1417.537846][T20931] vlan2: entered allmulticast mode [ 1417.547331][T20931] : entered allmulticast mode [ 1417.566155][T20931] bond_slave_0: entered allmulticast mode [ 1417.577573][T20931] bond_slave_1: entered allmulticast mode [ 1417.643821][ T5923] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1417.796576][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.804640][ T5923] usb 1-1: Product: syz [ 1417.906772][ T5923] usb 1-1: Manufacturer: syz [ 1417.911450][ T5923] usb 1-1: SerialNumber: syz [ 1417.940787][T20937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4003'. [ 1417.991375][T20937] netlink: 'syz.2.4003': attribute type 1 has an invalid length. [ 1417.998945][ T5923] usb 1-1: config 0 descriptor?? [ 1418.017042][T20937] netlink: 'syz.2.4003': attribute type 2 has an invalid length. [ 1418.232312][T20923] binder: 20920:20923 ioctl c0306201 80000100 returned -11 [ 1418.437928][T20923] fuse: Bad value for 'fd' [ 1420.575650][ T5923] usb 1-1: USB disconnect, device number 94 [ 1421.784708][T21004] IPVS: Unknown mcast interface: pimreg1 [ 1422.026771][T21002] could not allocate digest TFM handle poly1305-generic [ 1422.824882][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4039'. [ 1422.999022][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.006805][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.617735][ T30] audit: type=1326 audit(1751935613.537:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21071 comm="syz.5.4056" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x0 [ 1426.405701][ T30] audit: type=1400 audit(1751935615.337:710): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=21086 comm="syz.0.4062" [ 1427.619382][T21120] usb usb8: usbfs: process 21120 (syz.6.4072) did not claim interface 0 before use [ 1428.061296][T21127] input: syz0 as /devices/virtual/input/input147 [ 1428.576175][T21139] binfmt_misc: register: failed to install interpreter file ./file0 [ 1429.096871][T17100] ------------[ cut here ]------------ [ 1429.102714][T17100] WARNING: CPU: 0 PID: 17100 at kernel/softirq.c:387 __local_bh_enable_ip+0x180/0x1c0 [ 1429.112303][T17100] Modules linked in: [ 1429.116462][T17100] CPU: 0 UID: 0 PID: 17100 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1429.127060][T17100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1429.137128][T17100] RIP: 0010:__local_bh_enable_ip+0x180/0x1c0 [ 1429.143190][T17100] Code: 48 3b 44 24 48 75 57 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d e9 82 41 ec 09 cc 90 0f 0b 90 e9 f9 fe ff ff e8 53 00 00 00 eb 9f 90 <0f> 0b 90 e9 24 ff ff ff 48 c7 c1 30 17 a2 8f 80 e1 07 80 c1 03 38 [ 1429.162812][T17100] RSP: 0018:ffffc900044af4c0 EFLAGS: 00010046 [ 1429.168896][T17100] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000000 [ 1429.176874][T17100] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89de65e3 [ 1429.184850][T17100] RBP: ffffc900044af548 R08: ffff8880b863bf03 R09: 1ffff110170c77e0 [ 1429.192835][T17100] R10: dffffc0000000000 R11: ffffed10170c77e1 R12: ffff8880b863bf00 [ 1429.200817][T17100] R13: ffff88805de15a70 R14: dffffc0000000000 R15: 1ffff92000895e98 [ 1429.208799][T17100] FS: 0000000000000000(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 1429.217744][T17100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1429.224338][T17100] CR2: 00000000f74a6188 CR3: 0000000033b1e000 CR4: 00000000003526f0 [ 1429.232327][T17100] Call Trace: [ 1429.235711][T17100] [ 1429.238657][T17100] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1429.244393][T17100] ? do_raw_spin_unlock+0x122/0x240 [ 1429.249612][T17100] ? rt_set_nexthop+0x693/0xa80 [ 1429.254493][T17100] rt_set_nexthop+0x693/0xa80 [ 1429.259200][T17100] ip_route_output_key_hash_rcu+0x18f6/0x23a0 [ 1429.265302][T17100] ? ip_route_output_key_hash+0xde/0x2e0 [ 1429.270946][T17100] ip_route_output_key_hash+0x1b9/0x2e0 [ 1429.276510][T17100] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1429.282605][T17100] ? make_kuid+0x1d9/0x680 [ 1429.287044][T17100] ? lockdep_unlock+0x89/0x120 [ 1429.291826][T17100] ? __pfx_make_kuid+0x10/0x10 [ 1429.296627][T17100] ip_route_output_flow+0x2a/0x150 [ 1429.301767][T17100] rxrpc_init_peer+0x50a/0xc60 [ 1429.306565][T17100] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 1429.311977][T17100] ? __lock_acquire+0xab9/0xd20 [ 1429.316864][T17100] ? do_raw_spin_lock+0x121/0x290 [ 1429.321918][T17100] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1429.327330][T17100] rxrpc_new_incoming_peer+0x281/0x5a0 [ 1429.332822][T17100] rxrpc_new_incoming_call+0x612/0x14f0 [ 1429.338410][T17100] rxrpc_io_thread+0x18b2/0x2cd0 [ 1429.343372][T17100] ? rxrpc_io_thread+0x1171/0x2cd0 [ 1429.348541][T17100] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1429.353848][T17100] ? do_raw_spin_lock+0x121/0x290 [ 1429.358899][T17100] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1429.364841][T17100] ? __kthread_parkme+0x1a1/0x200 [ 1429.369883][T17100] kthread+0x70e/0x8a0 [ 1429.373972][T17100] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1429.379270][T17100] ? __pfx_kthread+0x10/0x10 [ 1429.383971][T17100] ? _raw_spin_unlock_irq+0x23/0x50 [ 1429.389188][T17100] ? lockdep_hardirqs_on+0x9c/0x150 [ 1429.394403][T17100] ? __pfx_kthread+0x10/0x10 [ 1429.399015][T17100] ret_from_fork+0x3fc/0x770 [ 1429.403615][T17100] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.408746][T17100] ? __switch_to_asm+0x39/0x70 [ 1429.413513][T17100] ? __switch_to_asm+0x33/0x70 [ 1429.418291][T17100] ? __pfx_kthread+0x10/0x10 [ 1429.422924][T17100] ret_from_fork_asm+0x1a/0x30 [ 1429.427720][T17100] [ 1429.430763][T17100] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1429.438050][T17100] CPU: 0 UID: 0 PID: 17100 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1429.448642][T17100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1429.458737][T17100] Call Trace: [ 1429.462067][T17100] [ 1429.465010][T17100] dump_stack_lvl+0x99/0x250 [ 1429.469608][T17100] ? __asan_memcpy+0x40/0x70 [ 1429.474220][T17100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1429.479452][T17100] ? __pfx__printk+0x10/0x10 [ 1429.484069][T17100] panic+0x2db/0x790 [ 1429.487986][T17100] ? __pfx_panic+0x10/0x10 [ 1429.492413][T17100] ? show_trace_log_lvl+0x4fb/0x550 [ 1429.497636][T17100] ? ret_from_fork_asm+0x1a/0x30 [ 1429.502607][T17100] __warn+0x31b/0x4b0 [ 1429.506610][T17100] ? __local_bh_enable_ip+0x180/0x1c0 [ 1429.512002][T17100] ? __local_bh_enable_ip+0x180/0x1c0 [ 1429.517394][T17100] report_bug+0x2be/0x4f0 [ 1429.521742][T17100] ? __local_bh_enable_ip+0x180/0x1c0 [ 1429.527139][T17100] ? __local_bh_enable_ip+0x180/0x1c0 [ 1429.532527][T17100] ? __local_bh_enable_ip+0x182/0x1c0 [ 1429.537924][T17100] handle_bug+0x84/0x160 [ 1429.542187][T17100] exc_invalid_op+0x1a/0x50 [ 1429.546703][T17100] asm_exc_invalid_op+0x1a/0x20 [ 1429.551554][T17100] RIP: 0010:__local_bh_enable_ip+0x180/0x1c0 [ 1429.557574][T17100] Code: 48 3b 44 24 48 75 57 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d e9 82 41 ec 09 cc 90 0f 0b 90 e9 f9 fe ff ff e8 53 00 00 00 eb 9f 90 <0f> 0b 90 e9 24 ff ff ff 48 c7 c1 30 17 a2 8f 80 e1 07 80 c1 03 38 [ 1429.577193][T17100] RSP: 0018:ffffc900044af4c0 EFLAGS: 00010046 [ 1429.583273][T17100] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000000 [ 1429.591270][T17100] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89de65e3 [ 1429.599249][T17100] RBP: ffffc900044af548 R08: ffff8880b863bf03 R09: 1ffff110170c77e0 [ 1429.607239][T17100] R10: dffffc0000000000 R11: ffffed10170c77e1 R12: ffff8880b863bf00 [ 1429.615216][T17100] R13: ffff88805de15a70 R14: dffffc0000000000 R15: 1ffff92000895e98 [ 1429.623234][T17100] ? rt_set_nexthop+0x693/0xa80 [ 1429.628111][T17100] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1429.633845][T17100] ? do_raw_spin_unlock+0x122/0x240 [ 1429.639197][T17100] ? rt_set_nexthop+0x693/0xa80 [ 1429.644089][T17100] rt_set_nexthop+0x693/0xa80 [ 1429.648785][T17100] ip_route_output_key_hash_rcu+0x18f6/0x23a0 [ 1429.654904][T17100] ? ip_route_output_key_hash+0xde/0x2e0 [ 1429.660575][T17100] ip_route_output_key_hash+0x1b9/0x2e0 [ 1429.666151][T17100] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1429.672264][T17100] ? make_kuid+0x1d9/0x680 [ 1429.676703][T17100] ? lockdep_unlock+0x89/0x120 [ 1429.681489][T17100] ? __pfx_make_kuid+0x10/0x10 [ 1429.686273][T17100] ip_route_output_flow+0x2a/0x150 [ 1429.691403][T17100] rxrpc_init_peer+0x50a/0xc60 [ 1429.696200][T17100] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 1429.701505][T17100] ? __lock_acquire+0xab9/0xd20 [ 1429.706375][T17100] ? do_raw_spin_lock+0x121/0x290 [ 1429.711419][T17100] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1429.716812][T17100] rxrpc_new_incoming_peer+0x281/0x5a0 [ 1429.722327][T17100] rxrpc_new_incoming_call+0x612/0x14f0 [ 1429.727920][T17100] rxrpc_io_thread+0x18b2/0x2cd0 [ 1429.732892][T17100] ? rxrpc_io_thread+0x1171/0x2cd0 [ 1429.738050][T17100] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1429.743356][T17100] ? do_raw_spin_lock+0x121/0x290 [ 1429.748403][T17100] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1429.754328][T17100] ? __kthread_parkme+0x1a1/0x200 [ 1429.759366][T17100] kthread+0x70e/0x8a0 [ 1429.763480][T17100] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1429.768783][T17100] ? __pfx_kthread+0x10/0x10 [ 1429.773392][T17100] ? _raw_spin_unlock_irq+0x23/0x50 [ 1429.778608][T17100] ? lockdep_hardirqs_on+0x9c/0x150 [ 1429.783821][T17100] ? __pfx_kthread+0x10/0x10 [ 1429.788431][T17100] ret_from_fork+0x3fc/0x770 [ 1429.793037][T17100] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.798186][T17100] ? __switch_to_asm+0x39/0x70 [ 1429.802975][T17100] ? __switch_to_asm+0x33/0x70 [ 1429.807756][T17100] ? __pfx_kthread+0x10/0x10 [ 1429.812363][T17100] ret_from_fork_asm+0x1a/0x30 [ 1429.817182][T17100] [ 1429.820599][T17100] Kernel Offset: disabled [ 1429.824942][T17100] Rebooting in 86400 seconds..