last executing test programs: 2m45.666380649s ago: executing program 2 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x4, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @fd=r0}]}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2m45.5067161s ago: executing program 2 (id=828): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 2m44.726456734s ago: executing program 2 (id=832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fcff9218c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2m44.554027115s ago: executing program 2 (id=835): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)='}', 0x1}], 0x1}}], 0x1, 0x240080c5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001088ff00000000000100070000000000000000ff02000000000000000000070003ff01"], 0xfdef) 2m44.446753564s ago: executing program 2 (id=837): syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)) (async) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000b00)={0x1fd, 0x1, 0xa000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x2, r2}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000bc0)) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x6e0}]}) (async) r4 = syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x4, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xad6f, 0x4, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x2c}, [@country_functional={0xa, 0x24, 0x7, 0x2, 0x8934, [0x0, 0x7fff]}, @dmm={0x7, 0x24, 0x14, 0x1a, 0x400}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7f, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0xe, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x9, 0x5}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0x6, 0xe3, 0x8, 0xd}, 0x29, &(0x7f00000005c0)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x0, 0x1e, 0xc2, [0xff0000, 0x1800f, 0x0, 0x0, 0x6000, 0xff3fff]}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x40, 0x11, 0x22, {0x22, 0x11, "884fb474aeedf2e0a434f6d1f6ae7249838501c4d435f333bcc014d2d3782278"}}, &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000840)={0x20, 0x1, 0x52, "fc33ca715fb2c1a38cfcbc77b813d5a55c3eb2bd86989327fb6e921a6dafa73e10654f4d4934fc304380d9c067d4b311d490ba4ae5f7a2dbbc9a6235c565990db76e70b9a655e597c782c84845d12a8c5b1b"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x8, 0xfffc, 0x80, 0x2, 0x9, 0x4, 0x8, 0x10001, 0xfffa, 0x0, 0x1, 0x10}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000009c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a00)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000a40)={0x20, 0x89, 0x2, 0x1}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x200}]}, 0x30}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000d00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff000}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x20008800) (async) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1c, &(0x7f00000000c0)={0x0, 0xc, 0xf, "b58d082251bc31426acfd47c5f6d04"}, &(0x7f0000000140)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000005c0)=ANY=[]}) 2m42.629341676s ago: executing program 2 (id=848): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000081c1b51edffffff000001090224000100000080090400fe0122054ce3a01d03ff0d200afd00"/54], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb9040220081c0bc14b0a26f7aad3724745f5267cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f90000", 0xd8}], 0x1}, 0x884) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x20, 0x10, 0x5, {0x5, 0x5, "3f198b"}}, 0x0}, 0x0) 2m27.496130883s ago: executing program 32 (id=848): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000081c1b51edffffff000001090224000100000080090400fe0122054ce3a01d03ff0d200afd00"/54], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb9040220081c0bc14b0a26f7aad3724745f5267cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f90000", 0xd8}], 0x1}, 0x884) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x20, 0x10, 0x5, {0x5, 0x5, "3f198b"}}, 0x0}, 0x0) 7.710361432s ago: executing program 0 (id=1900): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x1a, 0x6, 0x200, &(0x7f0000003c40)="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"}) 7.572660475s ago: executing program 0 (id=1901): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000f4", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 7.035722321s ago: executing program 0 (id=1903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000010000100000000000000000000ffff0a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 6.953419892s ago: executing program 0 (id=1905): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000f80)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_io_uring_setup(0x36d2, &(0x7f0000000140)={0x0, 0xde6c, 0x1000, 0x3, 0x19e}, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x0, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) r2 = semget$private(0x0, 0x6, 0x40d) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000240)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000280)='udf\x00', 0x218483, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x2}], 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) unshare(0x20030200) r6 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r6, &(0x7f0000002340)=""/147, 0x93) openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x18101, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000140)='\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x2000, 0x103) mknod$loop(&(0x7f0000000000)='./file7\x00', 0x2000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 6.02600883s ago: executing program 4 (id=1918): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040010}, 0x40094) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="3c002d80080003000300000008000200030000000500040001000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) 6.00499254s ago: executing program 4 (id=1919): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="3c002d80080003000300000008000200030000000500040001000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) (fail_nth: 5) 5.574692592s ago: executing program 4 (id=1920): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x45) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) creat(&(0x7f00000000c0)='./bus\x00', 0x107) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x44, &(0x7f0000000100)='trans=rdma,\xd6\xd2\x1e\x80\xc2W\xbe\xbf\x16S\x84j\xea1Z\x8e\xe9\xc7\x0ep*\xd9\x94Mk\xb9\xc6\x9e\xcf\xd7\x9eoc\xe2(\x03\xc3.{\x8aY\x17\xd0\xa3\xfe\xe3/\xc4\f\b2t\x1c4\x93/^\x91\xe8\xabK\x9e\x14j\xb3\x92\x13\x80\x96m\xc7\x96\"\xcb\xdc\xcc\xd8\x18\"\x9eT\x97Kh5i\x8f\xfc\xd8=\x8b\xe9\x1b\xce\xe4\xf5$\xf1sa,\x8f\xb6\x89\xcfZ\xa0\xae>Xs=\xadu\x9aQ\xe2z\xaf\x90\x90\x9b\x92\x9b\xeb\aQb#\xec}\xa79\xd7\xe6<6\xadL\xd8$\xd3\xa9\x1d\xd9W\x8a\xb9F\x982%g!\x8a\"@*\xb8\xc6\xddw\xefY\xefJ\x0e\xc5%S.\n\xde\x95l\xd9\x1cPp\xb3\xfe+rY\xc24\x99\x88\xe7\njs\xb2\x8f') sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.550066266s ago: executing program 4 (id=1927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xf5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 4.512576893s ago: executing program 4 (id=1928): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x9, 0x6, 0x401}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x3fc, 0x7, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2000000}, 0x1c) 4.38830344s ago: executing program 4 (id=1929): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000034c0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000600)='\x00\x00\x00', 0x3}], 0x1}}], 0x2, 0x2000c044) socket$kcm(0x29, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000002500)) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x29) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') write(r2, &(0x7f00000006c0)='q', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES16], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xc}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r8, &(0x7f0000000300)='}', 0x1, 0x4) fcntl$setstatus(r6, 0x4, 0x2000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0}) 3.858183419s ago: executing program 0 (id=1930): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x108000000000000, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 2.253462497s ago: executing program 0 (id=1931): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) inotify_init1(0x80800) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x40100) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000197ff0000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.93203341s ago: executing program 3 (id=1933): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd70000000004104000000080018000bac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42844}, 0x0) 1.727686509s ago: executing program 3 (id=1935): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1001, @none}, 0xe) r0 = epoll_create1(0x80000) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000200)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x44, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x34, 0x0, 0x0, 0x1, [@typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2}}, @typed={0x8, 0x8d, 0x0, 0x0, @fd=r1}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000029000b00ffffffff0000000005000000180001"], 0x2c}}, 0x0) io_setup(0x5, &(0x7f0000000040)) 1.476273216s ago: executing program 1 (id=1937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec970000582c00fe800000000000000000fff5000000aaff0200000000000000000000000000010600000000000000890290780000000000000000f5"], 0x8e) 1.444759373s ago: executing program 3 (id=1938): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x14, 0x4}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100eeb484ab9e4d359b67d3b1ff1c3c5891883963d4042dbd70", @ANYRES32=r3, @ANYBLOB="0c00238008001400dbffffff"], 0x28}, 0x1, 0x0, 0x0, 0x41801}, 0x20000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b"], 0x118}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) pipe2$9p(&(0x7f0000000240), 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r6, 0x0, 0x15, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', 0x6}) 1.266203432s ago: executing program 1 (id=1939): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x1080, &(0x7f00000002c0)={@ptr={0x70742a85, 0x400000, 0x0, 0x1058, 0x2, 0x400008002d}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x29}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0xfff0, 0x0, 0x0}) 1.23523014s ago: executing program 1 (id=1940): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000081", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 1.187041198s ago: executing program 3 (id=1941): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075d, 0x80000001}}]}, 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) (async) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 1.084849967s ago: executing program 3 (id=1942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc00a118c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 989.877934ms ago: executing program 3 (id=1943): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x1a, 0x6, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf158d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0020000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c77f15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c9d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000055ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe11c79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c9e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509e747d7305114990148a7291cb0fe2d1c773a667c4b6ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b37000000000000000000000000f18b2ebe000000000000f800"}) 677.109323ms ago: executing program 1 (id=1944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000240)=""/253) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008000a000d"], 0x1c}], 0x1}, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) write$tun(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000f5000005"], 0x105c) 520.425236ms ago: executing program 1 (id=1945): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_b, @device_b, @from_mac=@device_b, {0x9, 0xc5}}, @tdls_disc_req={0xc, 0xa, {0xff, {0x65, 0x12, {@random="c1ce23a07a61", @device_a, @device_b}}}}}, 0x2f) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf2502000000080001ff", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0x2, 0x20, 0x2, 0xf, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 0s ago: executing program 1 (id=1946): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000f5", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) kernel console output (not intermixed with test programs): : serial bus timeout: status=0x00 [ 266.243594][ T958] gspca_stk1135: Sensor read failed [ 266.255900][ T958] gspca_stk1135: serial bus timeout: status=0x00 [ 266.265544][ T958] gspca_stk1135: Sensor read failed [ 266.271532][ T958] gspca_stk1135: Detected sensor type unknown (0x0) [ 266.279150][ T958] gspca_stk1135: serial bus timeout: status=0x00 [ 266.285646][ T958] gspca_stk1135: Sensor read failed [ 266.293518][ T44] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 266.301668][ T5917] usb 5-1: device descriptor read/64, error -71 [ 266.308943][ T958] gspca_stk1135: serial bus timeout: status=0x00 [ 266.802019][ T9365] loop9: detected capacity change from 0 to 7 [ 266.819333][ T9365] buffer_io_error: 4 callbacks suppressed [ 266.819380][ T9365] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.833833][ T9365] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.842436][ T9365] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.851077][ T9365] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.859592][ T9365] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.868355][ T9365] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.887254][ T9365] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.895770][ T9365] ldm_validate_partition_table(): Disk read failed. [ 266.903120][ T9365] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.911957][ T9365] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.921247][ T9365] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.932057][ T9365] Dev loop9: unable to read RDB block 0 [ 266.938830][ T9365] loop9: unable to read partition table [ 266.946276][ T9365] loop9: partition table beyond EOD, truncated [ 266.953066][ T9365] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 266.953066][ T9365] ) failed (rc=-5) [ 267.921908][ T958] gspca_stk1135: Sensor read failed [ 267.927955][ T958] gspca_stk1135: serial bus timeout: status=0x00 [ 267.934534][ T958] gspca_stk1135: Sensor write failed [ 267.939979][ T958] gspca_stk1135: serial bus timeout: status=0x00 [ 267.946365][ T958] gspca_stk1135: Sensor write failed [ 267.992444][ T44] usb 1-1: device descriptor read/8, error -71 [ 268.003191][ T958] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 268.017749][ T5917] usb usb5-port1: attempt power cycle [ 268.051232][ T958] usb 2-1: USB disconnect, device number 65 [ 268.141713][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1316'. [ 268.225377][ T9373] loop5: detected capacity change from 0 to 7 [ 268.233765][ T5838] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 268.247879][ T5838] loop5: p1 start 2429259420 is beyond EOD, truncated [ 268.254709][ T5838] loop5: p2 start 3773841650 is beyond EOD, truncated [ 268.277213][ T5838] loop5: p3 start 2117034607 is beyond EOD, truncated [ 268.284028][ T5838] loop5: p4 start 1543794713 is beyond EOD, truncated [ 268.307351][ T5838] loop5: p5 start 1815049829 is beyond EOD, truncated [ 268.314174][ T5838] loop5: p6 start 1947514175 is beyond EOD, truncated [ 268.337425][ T5838] loop5: p7 start 2819344148 is beyond EOD, truncated [ 268.349209][ T9373] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 268.355714][ T9373] loop5: p1 start 2429259420 is beyond EOD, truncated [ 268.363503][ T9373] loop5: p2 start 3773841650 is beyond EOD, truncated [ 268.371046][ T9373] loop5: p3 start 2117034607 is beyond EOD, truncated [ 268.382426][ T9373] loop5: p4 start 1543794713 is beyond EOD, truncated [ 268.389818][ T9373] loop5: p5 start 1815049829 is beyond EOD, truncated [ 268.396994][ T5917] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 268.406159][ T9373] loop5: p6 start 1947514175 is beyond EOD, truncated [ 268.415595][ T9373] loop5: p7 start 2819344148 is beyond EOD, truncated [ 268.426977][ T958] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 268.444429][ T5917] usb 5-1: device descriptor read/8, error -71 [ 268.616954][ T958] usb 4-1: Using ep0 maxpacket: 32 [ 268.628711][ T958] usb 4-1: config 1 interface 0 altsetting 25 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.656946][ T958] usb 4-1: config 1 interface 0 has no altsetting 0 [ 268.662007][ T9379] ADFS-fs (loop0): error: unable to read block 3, try 0 [ 268.670986][ T958] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 268.671018][ T958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.671039][ T958] usb 4-1: Product: syz [ 268.671054][ T958] usb 4-1: Manufacturer: syz [ 268.671070][ T958] usb 4-1: SerialNumber: syz [ 268.940086][ T958] usbhid 4-1:1.0: can't add hid device: -71 [ 268.946149][ T958] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 268.989577][ T958] usb 4-1: USB disconnect, device number 46 [ 269.012007][ T9389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1324'. [ 269.093720][ T9392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1325'. [ 269.155396][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1327'. [ 269.388750][ T9402] NFSD: Failed to start, no listeners configured. [ 269.783664][ T9418] NFSD: Failed to start, no listeners configured. [ 269.817747][ T9420] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 269.824603][ T9420] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 269.836586][ T9420] vhci_hcd vhci_hcd.0: Device attached [ 269.941048][ T9426] binder: 9425:9426 ioctl c0306201 2000000003c0 returned -14 [ 270.087753][ T9] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 270.108426][ T9421] vhci_hcd: connection closed [ 270.111364][ T3007] vhci_hcd vhci_hcd.0: stop threads [ 270.128848][ T3007] vhci_hcd vhci_hcd.0: release socket [ 270.138404][ T3007] vhci_hcd vhci_hcd.0: disconnect device [ 270.146618][ T9432] syzkaller1: entered promiscuous mode [ 270.156554][ T9432] syzkaller1: entered allmulticast mode [ 270.367009][ T10] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 270.539132][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 270.547990][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 270.557783][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 270.572768][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.583150][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.591750][ T10] usb 4-1: Product: syz [ 270.596159][ T10] usb 4-1: Manufacturer: syz [ 270.601366][ T10] usb 4-1: SerialNumber: syz [ 270.652703][ T9442] syzkaller1: entered promiscuous mode [ 270.659250][ T9442] syzkaller1: entered allmulticast mode [ 270.820922][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.852156][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.891239][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 270.898771][ T10] usb 4-1: unit 0 not found! [ 270.909826][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 270.924072][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 270.957633][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 270.975638][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 270.998379][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 271.015313][ T10] usb 4-1: USB disconnect, device number 47 [ 271.046643][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.126191][ T9433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.777197][ T5917] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 271.927055][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 271.934943][ T5917] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 271.943359][ T44] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 271.951109][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.963184][ T5917] usb 5-1: config 0 has no interface number 0 [ 271.970039][ T5917] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.980034][ T5917] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.994307][ T5917] usb 5-1: config 0 interface 196 has no altsetting 0 [ 272.003524][ T5917] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 272.012665][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.020863][ T5917] usb 5-1: Product: syz [ 272.025127][ T5917] usb 5-1: Manufacturer: syz [ 272.029804][ T5917] usb 5-1: SerialNumber: syz [ 272.036838][ T5917] usb 5-1: config 0 descriptor?? [ 272.097071][ T44] usb 4-1: device descriptor read/64, error -71 [ 272.249062][ T9455] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1352'. [ 272.261797][ T9455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.263807][ T9462] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1352'. [ 272.280624][ T9455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.297893][ T5917] ipheth 5-1:0.196: Unable to find endpoints [ 272.313236][ T5917] usb 5-1: USB disconnect, device number 26 [ 272.339851][ T44] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 272.487699][ T44] usb 4-1: device descriptor read/64, error -71 [ 272.597329][ T44] usb usb4-port1: attempt power cycle [ 272.936975][ T44] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 272.958107][ T44] usb 4-1: device descriptor read/8, error -71 [ 273.196992][ T44] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 273.217604][ T44] usb 4-1: device descriptor read/8, error -71 [ 273.297136][ T9434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.349562][ T44] usb usb4-port1: unable to enumerate USB device [ 273.776834][ T9474] loop9: detected capacity change from 0 to 7 [ 273.792229][ T9474] buffer_io_error: 4 callbacks suppressed [ 273.792275][ T9474] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.806941][ T9474] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.815722][ T9474] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.824337][ T9474] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.833437][ T9474] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.855552][ T9474] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.864055][ T9474] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.872832][ T9474] ldm_validate_partition_table(): Disk read failed. [ 273.880101][ T9474] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.888707][ T9474] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.897455][ T9474] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.905879][ T9474] Dev loop9: unable to read RDB block 0 [ 273.912655][ T9474] loop9: unable to read partition table [ 273.920660][ T9474] loop9: partition table beyond EOD, truncated [ 273.927654][ T9474] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 273.927654][ T9474] ) failed (rc=-5) [ 275.230444][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 275.270491][ T9480] loop5: detected capacity change from 0 to 7 [ 275.287630][ T9480] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 275.293746][ T9480] loop5: p1 start 2429259420 is beyond EOD, truncated [ 275.301155][ T9480] loop5: p2 start 3773841650 is beyond EOD, truncated [ 275.308383][ T9480] loop5: p3 start 2117034607 is beyond EOD, truncated [ 275.315279][ T9480] loop5: p4 start 1543794713 is beyond EOD, truncated [ 275.322319][ T9480] loop5: p5 start 1815049829 is beyond EOD, truncated [ 275.346950][ T9480] loop5: p6 start 1947514175 is beyond EOD, truncated [ 275.353854][ T9480] loop5: p7 start 2819344148 is beyond EOD, truncated [ 275.638909][ T44] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 275.797371][ T44] usb 2-1: device descriptor read/64, error -71 [ 276.025787][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1372'. [ 276.037497][ T44] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 276.059270][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 276.153929][ T9515] gfs2: error -5 reading superblock [ 276.187739][ T44] usb 2-1: device descriptor read/64, error -71 [ 276.298480][ T44] usb usb2-port1: attempt power cycle [ 276.481316][ T9530] binder: 9529:9530 ioctl c0306201 2000000003c0 returned -14 [ 276.667023][ T44] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 276.687691][ T44] usb 2-1: device descriptor read/8, error -71 [ 276.731203][ T9540] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1384'. [ 276.787399][ T9544] NFSD: Failed to start, no listeners configured. [ 276.888191][ T9548] syzkaller1: entered promiscuous mode [ 276.893754][ T9548] syzkaller1: entered allmulticast mode [ 276.937334][ T44] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 276.960233][ T44] usb 2-1: device descriptor read/8, error -71 [ 277.066093][ T9550] NFSD: Failed to start, no listeners configured. [ 277.068318][ T44] usb usb2-port1: unable to enumerate USB device [ 277.076613][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 277.241678][ T9] usb 4-1: too many configurations: 49, using maximum allowed: 8 [ 277.251924][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 223 [ 277.260702][ T9] usb 4-1: can't read configurations, error -22 [ 277.397042][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 277.558280][ T9] usb 4-1: too many configurations: 49, using maximum allowed: 8 [ 277.568262][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 223 [ 277.577644][ T9] usb 4-1: can't read configurations, error -22 [ 277.584416][ T9] usb usb4-port1: attempt power cycle [ 277.638533][ T9556] syzkaller1: entered promiscuous mode [ 277.644079][ T9556] syzkaller1: entered allmulticast mode [ 277.928766][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 277.969246][ T9] usb 4-1: too many configurations: 49, using maximum allowed: 8 [ 277.983412][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 223 [ 277.992277][ T9] usb 4-1: can't read configurations, error -22 [ 278.127048][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 278.153351][ T9] usb 4-1: too many configurations: 49, using maximum allowed: 8 [ 278.163118][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 223 [ 278.172037][ T9] usb 4-1: can't read configurations, error -22 [ 278.179121][ T9] usb usb4-port1: unable to enumerate USB device [ 279.065192][ T9577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.237006][ T44] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 280.389994][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.401722][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 280.413236][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 280.424364][ T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 280.433674][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.445160][ T44] usb 4-1: config 0 descriptor?? [ 280.451292][ T9591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.229277][ T9578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.337042][ T44] ath6kl: Failed to submit usb control message: -71 [ 281.343745][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 281.377457][ T44] ath6kl: Unable to send get target info: -71 [ 281.386182][ T44] ath6kl: Failed to init ath6kl core: -71 [ 281.393654][ T44] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 281.406741][ T44] usb 4-1: USB disconnect, device number 56 [ 282.047664][ T9595] loop9: detected capacity change from 0 to 7 [ 282.054311][ T9595] buffer_io_error: 4 callbacks suppressed [ 282.054323][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.067986][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.075818][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.083788][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.091806][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.099812][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.107678][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.115512][ T9595] ldm_validate_partition_table(): Disk read failed. [ 282.122179][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.131064][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.138984][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.147014][ T9595] Dev loop9: unable to read RDB block 0 [ 282.152665][ T9595] loop9: unable to read partition table [ 282.158479][ T9595] loop9: partition table beyond EOD, truncated [ 282.164646][ T9595] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 282.164646][ T9595] ) failed (rc=-5) [ 282.830704][ T9607] loop5: detected capacity change from 0 to 7 [ 282.839916][ T9607] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 282.847858][ T9607] loop5: p1 start 2429259420 is beyond EOD, truncated [ 282.854798][ T9607] loop5: p2 start 3773841650 is beyond EOD, truncated [ 282.866707][ T9607] loop5: p3 start 2117034607 is beyond EOD, truncated [ 282.882897][ T9607] loop5: p4 start 1543794713 is beyond EOD, truncated [ 282.907029][ T9607] loop5: p5 start 1815049829 is beyond EOD, truncated [ 282.924136][ T9607] loop5: p6 start 1947514175 is beyond EOD, truncated [ 282.934267][ T9607] loop5: p7 start 2819344148 is beyond EOD, truncated [ 283.036990][ T44] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 283.183781][ T44] usb 2-1: device descriptor read/64, error -71 [ 283.447535][ T44] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 283.457137][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1419'. [ 283.528200][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1420'. [ 283.607425][ T44] usb 2-1: device descriptor read/64, error -71 [ 283.729438][ T44] usb usb2-port1: attempt power cycle [ 283.800888][ T9644] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 283.800907][ T9644] netlink: 'syz.0.1428': attribute type 3 has an invalid length. [ 283.800917][ T9644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1428'. [ 283.874760][ T9649] binder: 9648:9649 ioctl c0306201 2000000003c0 returned -14 [ 284.087089][ T44] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 284.118211][ T44] usb 2-1: device descriptor read/8, error -71 [ 284.219090][ T9664] syzkaller1: entered promiscuous mode [ 284.224641][ T9664] syzkaller1: entered allmulticast mode [ 284.322184][ T9668] NFSD: Failed to start, no listeners configured. [ 284.357238][ T44] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 284.388948][ T44] usb 2-1: device descriptor read/8, error -71 [ 284.451392][ T9676] syzkaller1: entered promiscuous mode [ 284.457047][ T9676] syzkaller1: entered allmulticast mode [ 284.498972][ T44] usb usb2-port1: unable to enumerate USB device [ 284.572600][ T9670] NFSD: Failed to start, no listeners configured. [ 284.857053][ T5832] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 285.016995][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 285.029521][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.041456][ T5832] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 285.055277][ T5832] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 285.074880][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.093709][ T5832] usb 4-1: Product: syz [ 285.101081][ T5832] usb 4-1: Manufacturer: syz [ 285.105751][ T5832] usb 4-1: SerialNumber: syz [ 285.118437][ T5832] usb 4-1: config 0 descriptor?? [ 285.241692][ T5832] viperboard 4-1:0.0: version 0.00 found at bus 004 address 057 [ 285.283720][ T5832] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 285.298744][ T5832] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 285.350400][ T5832] usb 4-1: USB disconnect, device number 57 [ 285.665891][ T9695] openvswitch: netlink: IP tunnel dst address not specified [ 286.290522][ T9713] loop9: detected capacity change from 0 to 7 [ 286.308610][ T9713] ldm_validate_partition_table(): Disk read failed. [ 286.317282][ T9713] Dev loop9: unable to read RDB block 0 [ 286.323574][ T9713] loop9: unable to read partition table [ 286.331924][ T9713] loop9: partition table beyond EOD, truncated [ 286.338618][ T9713] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 286.338618][ T9713] ) failed (rc=-5) [ 287.611326][ T5904] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 287.644652][ T9699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.786977][ T5904] usb 5-1: device descriptor read/64, error -71 [ 288.037033][ T5904] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 288.166987][ T5904] usb 5-1: device descriptor read/64, error -71 [ 288.277319][ T5904] usb usb5-port1: attempt power cycle [ 288.616998][ T5904] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 288.637653][ T5904] usb 5-1: device descriptor read/8, error -71 [ 288.833410][ T9701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.000514][ T9724] loop5: detected capacity change from 0 to 7 [ 289.011468][ T9724] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 289.021197][ T9724] loop5: p1 start 2429259420 is beyond EOD, truncated [ 289.029368][ T9724] loop5: p2 start 3773841650 is beyond EOD, truncated [ 289.036621][ T9724] loop5: p3 start 2117034607 is beyond EOD, truncated [ 289.043946][ T9724] loop5: p4 start 1543794713 is beyond EOD, truncated [ 289.051386][ T9724] loop5: p5 start 1815049829 is beyond EOD, truncated [ 289.060415][ T9727] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1458'. [ 289.070832][ T9724] loop5: p6 start 1947514175 is beyond EOD, truncated [ 289.078216][ T9724] loop5: p7 start 2819344148 is beyond EOD, truncated [ 289.164472][ T9731] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1458'. [ 289.292856][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1464'. [ 289.498164][ T9751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1465'. [ 289.531457][ T9753] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1468'. [ 289.610557][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'. [ 289.797035][ T5904] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 289.838070][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 289.842967][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.859444][ T9769] binder: BINDER_SET_CONTEXT_MGR already set [ 289.867842][ T9769] binder: 9768:9769 ioctl 4018620d 200000000040 returned -16 [ 289.875412][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 289.885953][ T9769] binder: 9768:9769 ioctl c0306201 2000000003c0 returned -14 [ 289.895027][ T5904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.907049][ T958] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 289.931561][ T5904] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 289.946939][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.964635][ T5904] usb 5-1: Product: syz [ 289.969684][ T5904] usb 5-1: Manufacturer: syz [ 289.974440][ T5904] usb 5-1: SerialNumber: syz [ 290.077270][ T958] usb 4-1: Using ep0 maxpacket: 16 [ 290.099237][ T958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.111883][ T958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.123863][ T958] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 290.134266][ T958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.146597][ T958] usb 4-1: config 0 descriptor?? [ 290.244902][ T9779] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1480'. [ 290.561858][ T958] hid_parser_main: 118 callbacks suppressed [ 290.561883][ T958] apple 0003:05AC:026C.000B: unknown main item tag 0x0 [ 290.577293][ T958] apple 0003:05AC:026C.000B: unknown main item tag 0x0 [ 290.584368][ T958] apple 0003:05AC:026C.000B: unknown main item tag 0x0 [ 290.591486][ T958] apple 0003:05AC:026C.000B: unknown main item tag 0x0 [ 290.599153][ T958] apple 0003:05AC:026C.000B: unknown main item tag 0x0 [ 290.609562][ T958] apple 0003:05AC:026C.000B: hidraw0: USB HID v0.04 Device [HID 05ac:026c] on usb-dummy_hcd.3-1/input0 [ 290.766443][ T10] usb 4-1: USB disconnect, device number 58 [ 290.864132][ T9785] syzkaller1: entered promiscuous mode [ 290.869913][ T9785] syzkaller1: entered allmulticast mode [ 290.956093][ T9787] syzkaller1: entered promiscuous mode [ 290.967027][ T9787] syzkaller1: entered allmulticast mode [ 291.211703][ T9793] NFSD: Failed to start, no listeners configured. [ 291.267003][ T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 291.438040][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 291.445967][ T10] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.458766][ T10] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.469995][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 291.479478][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.939781][ T10] mcp2221 0003:04D8:00DD.000C: collection stack underflow [ 291.947205][ T10] mcp2221 0003:04D8:00DD.000C: item 0 0 0 12 parsing failed [ 291.955421][ T10] mcp2221 0003:04D8:00DD.000C: can't parse reports [ 291.974042][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1489'. [ 291.981127][ T10] mcp2221 0003:04D8:00DD.000C: probe with driver mcp2221 failed with error -22 [ 292.137878][ T44] usb 1-1: USB disconnect, device number 70 [ 292.233160][ T9805] NFSD: Failed to start, no listeners configured. [ 292.262927][ T5904] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 292.286489][ T5904] cdc_ncm 5-1:1.0: bind() failure [ 292.294850][ T5904] usbtest 5-1:1.0: Linux user mode ISO test driver [ 292.302870][ T5904] usbtest 5-1:1.0: high-speed {control iso-in} tests (+alt) [ 292.320491][ T5904] usb 5-1: USB disconnect, device number 30 [ 292.806731][ T9815] loop9: detected capacity change from 0 to 7 [ 292.824414][ T9815] buffer_io_error: 18 callbacks suppressed [ 292.824436][ T9815] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.847833][ T9815] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.856517][ T9815] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.865067][ T9815] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.874034][ T9815] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.883295][ T9815] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.896614][ T9815] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.904703][ T9815] ldm_validate_partition_table(): Disk read failed. [ 292.911909][ T9815] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.921600][ T9815] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.930080][ T9815] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.941084][ T9815] Dev loop9: unable to read RDB block 0 [ 292.947702][ T9815] loop9: unable to read partition table [ 292.954656][ T9815] loop9: partition table beyond EOD, truncated [ 292.961357][ T9815] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 292.961357][ T9815] ) failed (rc=-5) [ 294.344695][ T9822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1500'. [ 294.526969][ T5811] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 294.676983][ T5811] usb 4-1: device descriptor read/64, error -71 [ 294.917182][ T5811] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 295.036978][ T5904] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 295.047102][ T5811] usb 4-1: device descriptor read/64, error -71 [ 295.161570][ T5811] usb usb4-port1: attempt power cycle [ 295.190513][ T5904] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 295.199685][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 295.207766][ T5904] usb 5-1: Product: syz [ 295.211954][ T5904] usb 5-1: SerialNumber: syz [ 295.219082][ T5904] usb 5-1: config 0 descriptor?? [ 295.328742][ T9825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.437716][ T5904] usb 5-1: USB disconnect, device number 31 [ 295.516988][ T5811] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 295.537872][ T5811] usb 4-1: device descriptor read/8, error -71 [ 295.777060][ T5811] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 295.798597][ T5811] usb 4-1: device descriptor read/8, error -71 [ 295.908420][ T5811] usb usb4-port1: unable to enumerate USB device [ 296.108381][ T9839] loop5: detected capacity change from 0 to 7 [ 296.116687][ T9839] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 296.125257][ T9839] loop5: p1 start 2429259420 is beyond EOD, truncated [ 296.132433][ T9839] loop5: p2 start 3773841650 is beyond EOD, truncated [ 296.140052][ T9839] loop5: p3 start 2117034607 is beyond EOD, truncated [ 296.147157][ T9839] loop5: p4 start 1543794713 is beyond EOD, truncated [ 296.154150][ T9839] loop5: p5 start 1815049829 is beyond EOD, truncated [ 296.162065][ T9839] loop5: p6 start 1947514175 is beyond EOD, truncated [ 296.168995][ T9839] loop5: p7 start 2819344148 is beyond EOD, truncated [ 297.498726][ T9826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.709809][ T9864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1515'. [ 297.726451][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1516'. [ 297.909529][ T9878] binder: 9877:9878 ioctl c0306201 2000000003c0 returned -14 [ 297.919359][ T5917] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 297.967033][ T44] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 297.983754][ T29] audit: type=1804 audit(1770452228.475:9): pid=9880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1523" name="/newroot/386/file1" dev="tmpfs" ino=1986 res=1 errno=0 [ 298.091092][ T5917] usb 1-1: not running at top speed; connect to a high speed hub [ 298.110081][ T5917] usb 1-1: config 2 has an invalid interface number: 25 but max is 0 [ 298.118708][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 298.126301][ T9886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1526'. [ 298.140254][ T5917] usb 1-1: config 2 has no interface number 0 [ 298.159103][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 298.169387][ T5917] usb 1-1: config 2 interface 25 has no altsetting 0 [ 298.190620][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 298.202449][ T5917] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=3b.fd [ 298.217684][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.236219][ T44] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 298.259511][ T5917] usb 1-1: Product: syz [ 298.263743][ T5917] usb 1-1: Manufacturer: syz [ 298.268647][ T44] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 298.284737][ T5917] usb 1-1: SerialNumber: syz [ 298.293607][ T44] usb 5-1: Product: syz [ 298.307978][ T9891] syzkaller1: entered promiscuous mode [ 298.312168][ T44] usb 5-1: Manufacturer: syz [ 298.316663][ T9891] syzkaller1: entered allmulticast mode [ 298.323778][ T44] usb 5-1: SerialNumber: syz [ 298.340107][ T44] usb 5-1: config 0 descriptor?? [ 298.381179][ T9893] syzkaller1: entered promiscuous mode [ 298.386707][ T9893] syzkaller1: entered allmulticast mode [ 298.535221][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.553370][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.633699][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.645968][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.660139][ T5917] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.25/input/input18 [ 298.699268][ T5917] usb 1-1: USB disconnect, device number 71 [ 298.706493][ T5904] usb 5-1: USB disconnect, device number 32 [ 298.826747][ T9911] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1535'. [ 298.860530][ T9909] NFSD: Failed to start, no listeners configured. [ 299.957782][ T9924] loop9: detected capacity change from 0 to 7 [ 299.964341][ T9924] buffer_io_error: 4 callbacks suppressed [ 299.964353][ T9924] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.978053][ T9924] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.985896][ T9924] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.993826][ T9924] Buffer I/O error on dev loop9, logical block 0, async page read [ 300.001757][ T9924] Buffer I/O error on dev loop9, logical block 0, async page read [ 300.009652][ T9924] Buffer I/O error on dev loop9, logical block 0, async page read [ 300.017518][ T9924] Buffer I/O error on dev loop9, logical block 0, async page read [ 300.025354][ T9924] ldm_validate_partition_table(): Disk read failed. [ 300.032030][ T9924] Buffer I/O error on dev loop9, logical block 0, async page read [ 300.039925][ T9924] Buffer I/O error on dev loop9, logical block 0, async page read [ 300.047809][ T9924] Buffer I/O error on dev loop9, logical block 0, async page read [ 300.056564][ T9924] Dev loop9: unable to read RDB block 0 [ 300.062258][ T9924] loop9: unable to read partition table [ 300.068067][ T9924] loop9: partition table beyond EOD, truncated [ 300.074256][ T9924] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 300.074256][ T9924] ) failed (rc=-5) [ 300.758194][ T9931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1544'. [ 300.867667][ T9936] loop5: detected capacity change from 0 to 7 [ 300.897279][ T9936] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 300.903467][ T9936] loop5: p1 start 2429259420 is beyond EOD, truncated [ 300.931591][ T9936] loop5: p2 start 3773841650 is beyond EOD, truncated [ 300.938606][ T9936] loop5: p3 start 2117034607 is beyond EOD, truncated [ 300.945643][ T9936] loop5: p4 start 1543794713 is beyond EOD, truncated [ 300.955091][ T9936] loop5: p5 start 1815049829 is beyond EOD, truncated [ 300.964277][ T9936] loop5: p6 start 1947514175 is beyond EOD, truncated [ 300.973359][ T9936] loop5: p7 start 2819344148 is beyond EOD, truncated [ 301.202707][ T9950] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 301.394828][ T9958] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1554'. [ 301.490490][ T5917] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 301.637297][ T5917] usb 2-1: device descriptor read/64, error -71 [ 301.695082][ T9974] mmap: syz.3.1557 (9974) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 301.880717][ T5917] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 302.016982][ T5917] usb 2-1: device descriptor read/64, error -71 [ 302.127447][ T5917] usb usb2-port1: attempt power cycle [ 302.279943][ T9982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.292830][ T9982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.407943][ T9966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.467006][ T5917] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 302.487633][ T5917] usb 2-1: device descriptor read/8, error -71 [ 302.509511][ T9] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 302.646954][ T9] usb 1-1: device descriptor read/64, error -71 [ 302.727106][ T5917] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 302.747922][ T5917] usb 2-1: device descriptor read/8, error -71 [ 302.858736][ T5917] usb usb2-port1: unable to enumerate USB device [ 302.886991][ T9] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 303.017074][ T9] usb 1-1: device descriptor read/64, error -71 [ 303.127751][ T9] usb usb1-port1: attempt power cycle [ 303.467066][ T9] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 303.487464][ T9] usb 1-1: device descriptor read/8, error -71 [ 303.727066][ T9] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 303.747684][ T9] usb 1-1: device descriptor read/8, error -71 [ 303.857654][ T9] usb usb1-port1: unable to enumerate USB device [ 304.298359][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1561'. [ 304.573064][ T9967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.711547][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. [ 304.786873][ T9997] tmpfs: Unknown parameter 'nr_mnodes' [ 304.856119][T10001] binder: 10000:10001 ioctl c0306201 2000000003c0 returned -14 [ 305.205656][T10018] syzkaller1: entered promiscuous mode [ 305.213885][T10018] syzkaller1: entered allmulticast mode [ 305.223489][T10017] syzkaller1: entered promiscuous mode [ 305.231335][T10017] syzkaller1: entered allmulticast mode [ 305.572245][T10034] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 305.588841][T10035] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 306.097642][T10039] loop9: detected capacity change from 0 to 7 [ 306.104131][T10039] buffer_io_error: 4 callbacks suppressed [ 306.104142][T10039] Buffer I/O error on dev loop9, logical block 0, async page read [ 306.117850][T10039] Buffer I/O error on dev loop9, logical block 0, async page read [ 306.125683][T10039] Buffer I/O error on dev loop9, logical block 0, async page read [ 306.133569][T10039] Buffer I/O error on dev loop9, logical block 0, async page read [ 306.141538][T10039] Buffer I/O error on dev loop9, logical block 0, async page read [ 306.149425][T10039] Buffer I/O error on dev loop9, logical block 0, async page read [ 306.157294][T10039] Buffer I/O error on dev loop9, logical block 0, async page read [ 306.165111][T10039] ldm_validate_partition_table(): Disk read failed. [ 306.171760][T10039] Buffer I/O error on dev loop9, logical block 0, async page read [ 306.179634][T10039] Buffer I/O error on dev loop9, logical block 0, async page read [ 306.187504][T10039] Buffer I/O error on dev loop9, logical block 0, async page read [ 306.196259][T10039] Dev loop9: unable to read RDB block 0 [ 306.201937][T10039] loop9: unable to read partition table [ 306.207747][T10039] loop9: partition table beyond EOD, truncated [ 306.213921][T10039] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 306.213921][T10039] ) failed (rc=-5) [ 307.068562][T10045] NFSD: Failed to start, no listeners configured. [ 307.236504][T10053] loop5: detected capacity change from 0 to 7 [ 307.267107][T10053] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 307.277370][T10053] loop5: p1 start 2429259420 is beyond EOD, truncated [ 307.284227][T10053] loop5: p2 start 3773841650 is beyond EOD, truncated [ 307.326952][T10053] loop5: p3 start 2117034607 is beyond EOD, truncated [ 307.333793][T10053] loop5: p4 start 1543794713 is beyond EOD, truncated [ 307.357025][T10053] loop5: p5 start 1815049829 is beyond EOD, truncated [ 307.364083][T10053] loop5: p6 start 1947514175 is beyond EOD, truncated [ 307.371115][ T5832] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 307.378869][T10053] loop5: p7 start 2819344148 is beyond EOD, truncated [ 307.548823][ T5832] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 307.559979][ T5832] usb 4-1: config 0 has no interface number 0 [ 307.566186][ T5832] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 307.578006][ T5832] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.593175][ T5832] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 307.602725][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.614758][ T5832] usb 4-1: Product: syz [ 307.620198][ T5832] usb 4-1: Manufacturer: syz [ 307.625025][ T5832] usb 4-1: SerialNumber: syz [ 307.647264][ T5832] usb 4-1: config 0 descriptor?? [ 307.653026][T10050] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 307.663400][ T5832] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 307.687748][ T5832] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 307.754208][T10061] openvswitch: netlink: Actions may not be safe on all matching packets [ 307.767015][T10062] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 307.775309][T10061] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 307.784728][T10062] macvlan0: entered promiscuous mode [ 307.790275][T10062] macvlan0: entered allmulticast mode [ 307.805918][T10062] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 308.065277][T10050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.080401][T10051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.091714][T10051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.100560][T10050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.137039][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 308.154353][ T44] usb 4-1: USB disconnect, device number 63 [ 308.172720][ T44] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 308.173400][ T44] cyberjack 4-1:0.69: device disconnected [ 308.307802][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 308.318030][ T9] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 308.326212][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.337860][ T9] usb 2-1: config 0 has no interface number 0 [ 308.345782][ T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 308.356932][ T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 308.366792][ T9] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.379854][ T9] usb 2-1: config 0 interface 52 has no altsetting 0 [ 308.389144][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 308.402228][ T9] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 308.410880][ T9] usb 2-1: Product: syz [ 308.415088][ T9] usb 2-1: SerialNumber: syz [ 308.424245][ T9] usb 2-1: config 0 descriptor?? [ 308.559296][ T44] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 308.573693][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1605'. [ 308.643515][ T9] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 308.655463][ T9] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 308.707001][ T5904] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 308.717505][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 308.726357][ T44] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 308.734845][ T44] usb 4-1: config 0 has no interface number 0 [ 308.741161][ T44] usb 4-1: config 0 interface 102 altsetting 130 bulk endpoint 0x2 has invalid maxpacket 584 [ 308.751643][ T44] usb 4-1: config 0 interface 102 has no altsetting 0 [ 308.762223][ T44] usb 4-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=99.56 [ 308.771434][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.779759][ T44] usb 4-1: Product: syz [ 308.784134][ T44] usb 4-1: Manufacturer: syz [ 308.788819][ T44] usb 4-1: SerialNumber: syz [ 308.796131][ T44] usb 4-1: config 0 descriptor?? [ 308.804020][T10078] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 308.813345][ T44] rtl8150 4-1:0.102: couldn't find required endpoints [ 308.820599][ T44] rtl8150 4-1:0.102: probe with driver rtl8150 failed with error -5 [ 308.839935][ T5904] usb 1-1: device descriptor read/64, error -71 [ 308.866361][ T44] usb 2-1: USB disconnect, device number 78 [ 308.928935][T10099] mkiss: ax0: crc mode is auto. [ 309.015043][ T5832] usb 4-1: USB disconnect, device number 64 [ 309.097145][ T5904] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 309.227062][ T5904] usb 1-1: device descriptor read/64, error -71 [ 309.277102][ T44] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 309.337728][ T5904] usb usb1-port1: attempt power cycle [ 309.427793][ T44] usb 2-1: no configurations [ 309.432505][ T44] usb 2-1: can't read configurations, error -22 [ 309.463353][T10089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.567077][ T44] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 309.677015][ T5904] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 309.697959][ T5904] usb 1-1: device descriptor read/8, error -71 [ 309.727670][ T44] usb 2-1: no configurations [ 309.732362][ T44] usb 2-1: can't read configurations, error -22 [ 309.739209][ T44] usb usb2-port1: attempt power cycle [ 309.937058][ T5904] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 309.959063][ T5904] usb 1-1: device descriptor read/8, error -71 [ 310.067868][ T5904] usb usb1-port1: unable to enumerate USB device [ 310.077085][ T44] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 310.108226][ T44] usb 2-1: no configurations [ 310.112916][ T44] usb 2-1: can't read configurations, error -22 [ 310.247058][ T44] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 310.268176][ T44] usb 2-1: no configurations [ 310.272900][ T44] usb 2-1: can't read configurations, error -22 [ 310.279809][ T44] usb usb2-port1: unable to enumerate USB device [ 311.632835][T10090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.948099][T10120] binder: 10119:10120 ioctl c0306201 2000000003c0 returned -14 [ 312.205911][T10131] xt_l2tp: wrong L2TP version: 0 [ 312.213577][T10132] xt_l2tp: wrong L2TP version: 0 [ 312.323906][T10136] syzkaller1: entered promiscuous mode [ 312.329672][ T5904] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 312.340413][T10136] syzkaller1: entered allmulticast mode [ 312.404566][T10139] syzkaller1: entered promiscuous mode [ 312.410794][T10139] syzkaller1: entered allmulticast mode [ 312.498456][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 312.505492][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 312.518161][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 111, changing to 10 [ 312.529744][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 57942, setting to 1024 [ 312.547558][ T5904] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 312.564921][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.585517][ T5904] usb 1-1: config 0 descriptor?? [ 312.595125][ T5904] pegasus_notetaker 1-1:0.0: packet size is too small (0) [ 312.602907][ T5904] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 312.707029][ T5917] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 312.883341][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.895584][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.918307][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.938127][ T5917] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.947659][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.971049][ T5917] usb 2-1: config 0 descriptor?? [ 314.107789][T10159] loop9: detected capacity change from 0 to 7 [ 314.114557][T10159] buffer_io_error: 4 callbacks suppressed [ 314.114569][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.128352][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.136231][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.144157][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.152088][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.160018][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.167939][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.175803][T10159] ldm_validate_partition_table(): Disk read failed. [ 314.183249][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.191201][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.199164][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.207147][T10159] Dev loop9: unable to read RDB block 0 [ 314.212808][T10159] loop9: unable to read partition table [ 314.218741][T10159] loop9: partition table beyond EOD, truncated [ 314.224972][T10159] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 314.224972][T10159] ) failed (rc=-5) [ 314.757036][ T44] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 314.837019][ T5917] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 314.944989][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 314.958006][ T44] usb 4-1: not running at top speed; connect to a high speed hub [ 314.970962][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.985166][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 315.005021][ T5917] usb 2-1: USB disconnect, device number 83 [ 315.025915][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.053207][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 315.066278][ T44] usb 4-1: Product: syz [ 315.071991][ T44] usb 4-1: Manufacturer: syz [ 315.076704][ T44] usb 4-1: SerialNumber: syz [ 315.099392][T10155] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 315.123139][ T5832] usb 1-1: USB disconnect, device number 80 [ 315.305967][T10169] loop5: detected capacity change from 0 to 7 [ 315.316502][ T5838] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 315.327643][ T5838] loop5: p1 start 2429259420 is beyond EOD, truncated [ 315.334570][ T5838] loop5: p2 start 3773841650 is beyond EOD, truncated [ 315.341796][ T5838] loop5: p3 start 2117034607 is beyond EOD, truncated [ 315.348770][ T5838] loop5: p4 start 1543794713 is beyond EOD, truncated [ 315.355979][ T5838] loop5: p5 start 1815049829 is beyond EOD, truncated [ 315.365146][T10155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.377069][ T5838] loop5: p6 start 1947514175 is beyond EOD, truncated [ 315.384983][T10155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.395559][ T5838] loop5: p7 start 2819344148 is beyond EOD, truncated [ 315.436414][T10169] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 315.441506][ T44] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 315.446263][T10169] loop5: p1 start 2429259420 is beyond EOD, truncated [ 315.461998][ T44] usb 4-1: USB disconnect, device number 65 [ 315.484985][T10169] loop5: p2 start 3773841650 is beyond EOD, truncated [ 315.497915][T10169] loop5: p3 start 2117034607 is beyond EOD, truncated [ 315.504978][T10169] loop5: p4 start 1543794713 is beyond EOD, truncated [ 315.513822][T10169] loop5: p5 start 1815049829 is beyond EOD, truncated [ 315.536349][T10169] loop5: p6 start 1947514175 is beyond EOD, truncated [ 315.561924][T10169] loop5: p7 start 2819344148 is beyond EOD, truncated [ 315.811517][T10178] NFSD: Failed to start, no listeners configured. [ 316.154641][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 316.436994][ T5811] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 316.566985][ T5811] usb 4-1: device descriptor read/64, error -71 [ 316.737163][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1652'. [ 316.806998][ T5811] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 316.956963][ T5811] usb 4-1: device descriptor read/64, error -71 [ 317.041101][T10231] binder: 10230:10231 ioctl c0306201 2000000003c0 returned -14 [ 317.097221][ T5811] usb usb4-port1: attempt power cycle [ 317.447001][ T5811] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 317.468369][ T5811] usb 4-1: device descriptor read/8, error -71 [ 317.595822][T10214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.717460][ T5811] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 317.737784][ T5811] usb 4-1: device descriptor read/8, error -71 [ 317.858408][ T5811] usb usb4-port1: unable to enumerate USB device [ 319.607008][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 319.756995][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 319.764864][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.772823][T10215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.773260][ T10] usb 4-1: no configurations [ 319.786564][ T10] usb 4-1: can't read configurations, error -22 [ 319.926606][ T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 320.085091][T10246] syzkaller1: entered promiscuous mode [ 320.091141][T10246] syzkaller1: entered allmulticast mode [ 320.101249][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 320.119277][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 320.137023][ T10] usb 4-1: no configurations [ 320.152115][ T10] usb 4-1: can't read configurations, error -22 [ 320.170617][ T10] usb usb4-port1: attempt power cycle [ 320.264071][T10249] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 320.301048][T10251] syzkaller1: entered promiscuous mode [ 320.306598][T10251] syzkaller1: entered allmulticast mode [ 320.407080][ T5886] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 320.526985][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 320.567838][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 320.568762][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 320.579526][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 320.588238][ T10] usb 4-1: no configurations [ 320.594826][ T5886] usb 2-1: unable to get BOS descriptor or descriptor too short [ 320.609200][ T5886] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 320.616257][ T10] usb 4-1: can't read configurations, error -22 [ 320.633896][ T5886] usb 2-1: config 0 has no interface number 0 [ 320.643150][ T5886] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 320.654494][ T5886] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 320.665056][ T5886] usb 2-1: config 0 interface 88 has no altsetting 0 [ 320.675280][ T5886] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 320.689169][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 320.697817][ T5886] usb 2-1: Product: syz [ 320.702956][ T5886] usb 2-1: Manufacturer: syz [ 320.708444][ T5886] usb 2-1: SerialNumber: syz [ 320.725397][ T5886] usb 2-1: config 0 descriptor?? [ 320.767013][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 320.787973][ T5904] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 320.807971][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 320.815278][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 320.827604][ T10] usb 4-1: no configurations [ 320.832257][ T10] usb 4-1: can't read configurations, error -22 [ 320.862785][ T10] usb usb4-port1: unable to enumerate USB device [ 320.917171][ T5904] usb 5-1: device descriptor read/64, error -71 [ 321.156978][ T5904] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 321.306974][ T5904] usb 5-1: device descriptor read/64, error -71 [ 321.417998][ T5904] usb usb5-port1: attempt power cycle [ 321.766945][ T5904] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 321.809463][ T5904] usb 5-1: device descriptor read/8, error -71 [ 322.128797][T10272] loop9: detected capacity change from 0 to 7 [ 322.138355][T10272] buffer_io_error: 4 callbacks suppressed [ 322.138407][T10272] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.152439][T10272] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.160813][T10272] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.169658][T10272] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.183279][T10272] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.191881][T10272] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.200426][T10272] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.209559][T10272] ldm_validate_partition_table(): Disk read failed. [ 322.216673][T10272] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.225237][T10272] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.233662][T10272] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.242026][T10272] Dev loop9: unable to read RDB block 0 [ 322.248568][T10272] loop9: unable to read partition table [ 322.255544][T10272] loop9: partition table beyond EOD, truncated [ 322.262304][T10272] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 322.262304][T10272] ) failed (rc=-5) [ 323.864345][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.012842][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.072093][ T5904] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 324.093214][ T5886] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input24 [ 324.149886][ T5886] usb 2-1: USB disconnect, device number 84 [ 324.311486][ T5828] udevd[5828]: Error opening device "/dev/input/event4": No such file or directory [ 324.335914][ T5828] udevd[5828]: Unable to EVIOCGABS device "/dev/input/event4" [ 324.354185][ T5828] udevd[5828]: Unable to EVIOCGABS device "/dev/input/event4" [ 324.362167][ T5904] usb 5-1: device not accepting address 36, error -71 [ 324.369864][ T5904] usb usb5-port1: unable to enumerate USB device [ 324.609015][T10283] loop5: detected capacity change from 0 to 7 [ 324.617626][T10283] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 324.623598][T10283] loop5: p1 start 2429259420 is beyond EOD, truncated [ 324.639104][T10285] binder: BINDER_SET_CONTEXT_MGR already set [ 324.657006][T10285] binder: 10284:10285 ioctl 4018620d 200000000040 returned -16 [ 324.664767][T10283] loop5: p2 start 3773841650 is beyond EOD, truncated [ 324.684077][T10283] loop5: p3 start 2117034607 is beyond EOD, truncated [ 324.703082][T10283] loop5: p4 start 1543794713 is beyond EOD, truncated [ 324.721192][T10283] loop5: p5 start 1815049829 is beyond EOD, truncated [ 324.737654][T10283] loop5: p6 start 1947514175 is beyond EOD, truncated [ 324.755540][T10283] loop5: p7 start 2819344148 is beyond EOD, truncated [ 325.036947][ T5904] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 325.123255][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1689'. [ 325.147242][ T5886] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 325.199405][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.216609][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.233327][ T5904] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 325.248612][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 325.256820][ T5904] usb 2-1: SerialNumber: syz [ 325.299524][T10307] loop5: detected capacity change from 0 to 7 [ 325.321422][ T5886] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 325.330009][ T5886] usb 5-1: config 0 has no interface number 1 [ 325.336171][ T5886] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 325.380432][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.416162][ T5886] usb 5-1: config 0 descriptor?? [ 325.544926][ T5904] usb 2-1: 0:2 : does not exist [ 325.658716][T10292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.684028][ T5837] Dev loop5: unable to read RDB block 7 [ 325.701619][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 325.712492][T10292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.721247][ T5837] loop5: unable to read partition table [ 325.731307][ T5904] usb 2-1: USB disconnect, device number 85 [ 325.737829][ T5837] loop5: partition table beyond EOD, truncated [ 325.744546][T10307] Dev loop5: unable to read RDB block 7 [ 325.761045][T10307] loop5: unable to read partition table [ 325.773262][T10307] loop5: partition table beyond EOD, truncated [ 325.786190][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 325.810674][ T5811] usb 5-1: USB disconnect, device number 37 [ 325.820061][T10307] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 325.860782][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 326.093987][T10313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1695'. [ 326.438759][T10327] binder: 10326:10327 ioctl c0306201 2000000003c0 returned -14 [ 326.807002][ T5811] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 326.937030][ T5811] usb 5-1: device descriptor read/64, error -71 [ 326.957089][ T5886] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 327.108680][ T5886] usb 2-1: config 0 has no interfaces? [ 327.116173][ T5886] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 327.126277][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.134622][ T5886] usb 2-1: Product: syz [ 327.138965][ T5886] usb 2-1: Manufacturer: syz [ 327.143623][ T5886] usb 2-1: SerialNumber: syz [ 327.150970][ T5886] usb 2-1: config 0 descriptor?? [ 327.177025][ T5811] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 327.317107][ T5811] usb 5-1: device descriptor read/64, error -71 [ 327.358987][ T5830] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 327.370702][ T5886] usb 2-1: USB disconnect, device number 86 [ 327.394889][T10332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.428015][ T5811] usb usb5-port1: attempt power cycle [ 327.777033][ T5811] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 327.798080][ T5811] usb 5-1: device descriptor read/8, error -71 [ 328.039179][ T5811] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 328.068089][ T5811] usb 5-1: device descriptor read/8, error -71 [ 328.177314][ T5811] usb usb5-port1: unable to enumerate USB device [ 329.563748][T10335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.672827][T10359] netlink: 10916 bytes leftover after parsing attributes in process `syz.1.1710'. [ 329.695791][T10364] syzkaller1: entered promiscuous mode [ 329.702423][T10359] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 329.717139][T10364] syzkaller1: entered allmulticast mode [ 329.805037][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 329.819445][T10368] syzkaller1: entered promiscuous mode [ 329.837019][T10368] syzkaller1: entered allmulticast mode [ 330.984953][T10383] loop9: detected capacity change from 0 to 7 [ 330.991540][T10383] buffer_io_error: 5 callbacks suppressed [ 330.991551][T10383] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.005370][T10383] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.013328][T10383] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.021234][T10383] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.029153][T10383] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.037057][T10383] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.044898][T10383] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.052755][T10383] ldm_validate_partition_table(): Disk read failed. [ 331.059419][T10383] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.067378][T10383] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.075238][T10383] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.084007][T10383] Dev loop9: unable to read RDB block 0 [ 331.089673][T10383] loop9: unable to read partition table [ 331.095601][T10383] loop9: partition table beyond EOD, truncated [ 331.101831][T10383] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 331.101831][T10383] ) failed (rc=-5) [ 331.396959][ T5904] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 331.570902][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 331.588480][ T5904] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 331.599157][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.618691][ T5904] usb 5-1: config 0 has no interface number 0 [ 331.626544][ T5904] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 331.643426][ T5904] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 331.659069][ T5904] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.659106][ T5904] usb 5-1: config 0 interface 52 has no altsetting 0 [ 331.662082][ T5904] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 331.662113][ T5904] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 331.662136][ T5904] usb 5-1: Product: syz [ 331.662153][ T5904] usb 5-1: Manufacturer: syz [ 331.662169][ T5904] usb 5-1: SerialNumber: syz [ 331.665446][ T5904] usb 5-1: config 0 descriptor?? [ 332.019482][T10398] loop5: detected capacity change from 0 to 7 [ 332.038656][T10398] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 332.044694][T10398] loop5: p1 start 2429259420 is beyond EOD, truncated [ 332.066914][T10398] loop5: p2 start 3773841650 is beyond EOD, truncated [ 332.085169][T10382] usb usb8: usbfs: process 10382 (syz.4.1719) did not claim interface 32 before use [ 332.089603][T10398] loop5: p3 start 2117034607 is beyond EOD, [ 332.099182][T10382] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1719'. [ 332.110593][T10398] truncated [ 332.130311][T10398] loop5: p4 start 1543794713 is beyond EOD, truncated [ 332.147010][T10398] loop5: p5 start 1815049829 is beyond EOD, truncated [ 332.158655][T10398] loop5: p6 start 1947514175 is beyond EOD, truncated [ 332.173374][T10398] loop5: p7 start 2819344148 is beyond EOD, truncated [ 332.223895][ T5904] usb 5-1: USB disconnect, device number 42 [ 332.591790][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'. [ 332.627595][T10415] binder_alloc: binder_alloc_mmap_handler: 10414 200000735000-200000736000 already mapped failed -16 [ 332.942551][T10425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1735'. [ 333.204286][T10434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1739'. [ 333.235632][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1742'. [ 333.259303][T10440] FAULT_INJECTION: forcing a failure. [ 333.259303][T10440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.279094][T10440] CPU: 0 UID: 0 PID: 10440 Comm: syz.1.1741 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.279129][T10440] Tainted: [L]=SOFTLOCKUP [ 333.279143][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 333.279163][T10440] Call Trace: [ 333.279175][T10440] [ 333.279184][T10440] dump_stack_lvl+0xe8/0x150 [ 333.279219][T10440] should_fail_ex+0x412/0x560 [ 333.279252][T10440] _copy_from_user+0x2d/0xb0 [ 333.279274][T10440] ___sys_sendmsg+0x1c6/0x360 [ 333.279306][T10440] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.279364][T10440] ? __fget_files+0x2a/0x420 [ 333.279392][T10440] ? __fget_files+0x3a0/0x420 [ 333.279428][T10440] __x64_sys_sendmsg+0x1bd/0x2a0 [ 333.279472][T10440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.279505][T10440] ? __pfx_ksys_write+0x10/0x10 [ 333.279537][T10440] do_syscall_64+0x14d/0xf80 [ 333.279563][T10440] ? trace_irq_disable+0x3b/0x150 [ 333.279592][T10440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.279613][T10440] ? clear_bhb_loop+0x40/0x90 [ 333.279638][T10440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.279659][T10440] RIP: 0033:0x7f2245d9aeb9 [ 333.279684][T10440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.279702][T10440] RSP: 002b:00007f2246d3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.279723][T10440] RAX: ffffffffffffffda RBX: 00007f2246015fa0 RCX: 00007f2245d9aeb9 [ 333.279738][T10440] RDX: 0000000020004000 RSI: 0000200000000140 RDI: 0000000000000004 [ 333.279752][T10440] RBP: 00007f2246d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 333.279765][T10440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.279777][T10440] R13: 00007f2246016038 R14: 00007f2246015fa0 R15: 00007ffefd569da8 [ 333.279809][T10440] [ 333.552644][T10446] binder: 10443:10446 ioctl c0306201 2000000003c0 returned -14 [ 333.662760][T10445] NFSD: Failed to start, no listeners configured. [ 333.947273][ T5917] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 334.119187][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.137175][ T5917] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 334.165703][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.199853][ T5917] usb 1-1: config 0 descriptor?? [ 334.296963][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 334.426942][ T9] usb 4-1: device descriptor read/64, error -71 [ 334.479604][ T5904] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 334.629418][ T5811] IPVS: starting estimator thread 0... [ 334.635834][T10450] IPVS: nq: FWM 3 0x00000003 - no destination available [ 334.643364][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 334.652421][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 334.664397][ T5917] wacom 0003:056A:033B.000E: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 334.667230][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 334.685052][ T5904] usb 5-1: config 255 has an invalid interface number: 68 but max is 0 [ 334.696137][ T5904] usb 5-1: config 255 has no interface number 0 [ 334.703439][ T5917] wacom 0003:056A:033B.000E: hidraw0: USB HID v0.00 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 334.722810][ T5904] usb 5-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=22.59 [ 334.732307][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.740894][ T5904] usb 5-1: Product: syz [ 334.747468][T10473] IPVS: using max 27 ests per chain, 64800 per kthread [ 334.755578][ T5917] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:033B.000E/input/input25 [ 334.770808][ T5904] usb 5-1: Manufacturer: syz [ 334.775523][ T5904] usb 5-1: SerialNumber: syz [ 334.838166][ T9] usb 4-1: device descriptor read/64, error -71 [ 334.868947][ T5917] usb 1-1: USB disconnect, device number 81 [ 334.947323][ T9] usb usb4-port1: attempt power cycle [ 335.009679][T10466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.026277][T10466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.041247][ T5904] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.68/input/input28 [ 335.058874][ T5176] bcm5974 5-1:255.68: could not read from device [ 335.068985][ T5904] usb 5-1: USB disconnect, device number 43 [ 335.077975][ T5176] bcm5974 5-1:255.68: could not read from device [ 335.269426][T10467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.287123][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 335.307723][ T9] usb 4-1: device descriptor read/8, error -71 [ 335.546958][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 335.567686][ T9] usb 4-1: device descriptor read/8, error -71 [ 335.612041][T10485] syzkaller1: entered promiscuous mode [ 335.618480][T10485] syzkaller1: entered allmulticast mode [ 335.677412][ T9] usb usb4-port1: unable to enumerate USB device [ 335.843606][T10491] syzkaller1: entered promiscuous mode [ 335.852210][T10491] syzkaller1: entered allmulticast mode [ 336.610169][T10498] loop9: detected capacity change from 0 to 7 [ 336.616683][T10498] buffer_io_error: 4 callbacks suppressed [ 336.616694][T10498] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.630447][T10498] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.638381][T10498] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.646236][T10498] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.654155][T10498] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.662073][T10498] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.669959][T10498] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.677852][T10498] ldm_validate_partition_table(): Disk read failed. [ 336.684481][T10498] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.692379][T10498] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.700262][T10498] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.708148][T10498] Dev loop9: unable to read RDB block 0 [ 336.714579][T10498] loop9: unable to read partition table [ 336.720454][T10498] loop9: partition table beyond EOD, truncated [ 336.726652][T10498] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 336.726652][T10498] ) failed (rc=-5) [ 337.432353][T10468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.756973][ T5886] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 337.785370][T10510] binder: 10509:10510 ioctl c0306201 2000000001c0 returned -14 [ 337.916926][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 337.928443][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.949558][ T5832] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 337.967025][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.988816][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 338.002071][ T5886] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 338.012156][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.028784][ T5886] usb 4-1: config 0 descriptor?? [ 338.110463][ T5832] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 338.133018][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.175008][ T5832] usb 1-1: config 0 descriptor?? [ 338.222702][T10523] loop5: detected capacity change from 0 to 7 [ 338.230915][T10523] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 338.237793][T10523] loop5: p1 start 2429259420 is beyond EOD, truncated [ 338.246807][T10523] loop5: p2 start 3773841650 is beyond EOD, truncated [ 338.254368][T10523] loop5: p3 start 2117034607 is beyond EOD, truncated [ 338.261540][T10523] loop5: p4 start 1543794713 is beyond EOD, truncated [ 338.268858][T10523] loop5: p5 start 1815049829 is beyond EOD, truncated [ 338.275757][T10523] loop5: p6 start 1947514175 is beyond EOD, truncated [ 338.283229][T10523] loop5: p7 start 2819344148 is beyond EOD, truncated [ 338.377925][ T5917] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 338.549727][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.572573][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.598266][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.611951][ T5917] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.621867][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.636332][ T5917] usb 2-1: config 0 descriptor?? [ 338.694696][T10533] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 338.936993][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 339.089307][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.100071][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 339.110001][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.121621][ T9] usb 5-1: config 0 descriptor?? [ 339.139506][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 339.204431][ T5832] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 339.222876][ T5832] usb 1-1: USB disconnect, device number 82 [ 339.249585][T10516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.260896][T10516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.274972][ T5917] usbhid 2-1:0.0: can't add hid device: -71 [ 339.281718][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 339.301860][ T5917] usb 2-1: USB disconnect, device number 87 [ 339.531523][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 339.538936][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 339.546173][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 339.553550][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 339.561917][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 339.569148][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 339.578413][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 339.585672][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 339.593076][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 339.600455][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 339.607738][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 339.614932][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 339.622266][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 339.775770][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1777'. [ 339.797003][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 339.836806][T10533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1776'. [ 339.861060][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 339.882104][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 339.908340][ T9] pwc: Registered as video103. [ 339.925731][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 339.963475][ T9] usb 5-1: USB disconnect, device number 44 [ 340.164544][T10547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1781'. [ 340.258547][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1783'. [ 340.282219][T10551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1784'. [ 340.352016][T10554] FAULT_INJECTION: forcing a failure. [ 340.352016][T10554] name failslab, interval 1, probability 0, space 0, times 1 [ 340.364825][T10554] CPU: 0 UID: 0 PID: 10554 Comm: syz.0.1786 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.364859][T10554] Tainted: [L]=SOFTLOCKUP [ 340.364868][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 340.364881][T10554] Call Trace: [ 340.364889][T10554] [ 340.364898][T10554] dump_stack_lvl+0xe8/0x150 [ 340.364932][T10554] should_fail_ex+0x412/0x560 [ 340.364965][T10554] should_failslab+0xa8/0x100 [ 340.364993][T10554] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 340.365026][T10554] ? __alloc_skb+0x186/0x7d0 [ 340.365049][T10554] ? __alloc_skb+0x1d0/0x7d0 [ 340.365068][T10554] ? __local_bh_enable_ip+0xd0/0x130 [ 340.365098][T10554] __alloc_skb+0x1d0/0x7d0 [ 340.365126][T10554] netlink_sendmsg+0x5d4/0xb40 [ 340.365158][T10554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.365183][T10554] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 340.365223][T10554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.365243][T10554] sock_sendmsg_nosec+0x18f/0x1d0 [ 340.365277][T10554] ____sys_sendmsg+0x589/0x8c0 [ 340.365313][T10554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.365348][T10554] ? import_iovec+0x73/0xa0 [ 340.365372][T10554] ___sys_sendmsg+0x2a5/0x360 [ 340.365402][T10554] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.365469][T10554] ? __fget_files+0x2a/0x420 [ 340.365496][T10554] ? __fget_files+0x3a0/0x420 [ 340.365532][T10554] __x64_sys_sendmsg+0x1bd/0x2a0 [ 340.365560][T10554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.365594][T10554] ? __pfx_ksys_write+0x10/0x10 [ 340.365626][T10554] do_syscall_64+0x14d/0xf80 [ 340.365655][T10554] ? trace_irq_disable+0x3b/0x150 [ 340.365683][T10554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.365705][T10554] ? clear_bhb_loop+0x40/0x90 [ 340.365731][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.365751][T10554] RIP: 0033:0x7f55e999aeb9 [ 340.365770][T10554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.365786][T10554] RSP: 002b:00007f55ea7b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.365809][T10554] RAX: ffffffffffffffda RBX: 00007f55e9c15fa0 RCX: 00007f55e999aeb9 [ 340.365823][T10554] RDX: 0000000020004000 RSI: 0000200000000140 RDI: 0000000000000004 [ 340.365836][T10554] RBP: 00007f55ea7b8090 R08: 0000000000000000 R09: 0000000000000000 [ 340.365849][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.365861][T10554] R13: 00007f55e9c16038 R14: 00007f55e9c15fa0 R15: 00007ffee9ecc5b8 [ 340.365891][T10554] [ 340.743310][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 340.764748][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 340.809260][T10563] binder: 10562:10563 ioctl c0306201 2000000003c0 returned -14 [ 340.813013][ T5886] usb 4-1: USB disconnect, device number 78 [ 341.037047][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 341.136118][T10577] IPVS: nq: FWM 3 0x00000003 - no destination available [ 341.144743][ T44] IPVS: starting estimator thread 0... [ 341.153235][T10577] netlink: 'syz.3.1794': attribute type 11 has an invalid length. [ 341.197894][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 341.227249][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 341.238583][T10578] IPVS: using max 26 ests per chain, 62400 per kthread [ 341.262716][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.271252][ T9] usb 1-1: Product: syz [ 341.275465][ T9] usb 1-1: Manufacturer: syz [ 341.280234][ T9] usb 1-1: SerialNumber: syz [ 341.298453][ T9] usb 1-1: config 0 descriptor?? [ 341.428191][T10586] syzkaller1: entered promiscuous mode [ 341.433964][T10586] syzkaller1: entered allmulticast mode [ 341.507732][ T9] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 341.614855][T10592] syzkaller1: entered promiscuous mode [ 341.620871][T10592] syzkaller1: entered allmulticast mode [ 342.079985][T10595] loop9: detected capacity change from 0 to 7 [ 342.104532][T10595] buffer_io_error: 4 callbacks suppressed [ 342.104616][T10595] Buffer I/O error on dev loop9, logical block 0, async page read [ 342.128956][T10595] Buffer I/O error on dev loop9, logical block 0, async page read [ 342.144608][T10595] Buffer I/O error on dev loop9, logical block 0, async page read [ 342.154397][T10595] Buffer I/O error on dev loop9, logical block 0, async page read [ 342.163678][T10595] Buffer I/O error on dev loop9, logical block 0, async page read [ 342.173897][T10595] Buffer I/O error on dev loop9, logical block 0, async page read [ 342.183259][T10595] Buffer I/O error on dev loop9, logical block 0, async page read [ 342.191918][T10595] ldm_validate_partition_table(): Disk read failed. [ 342.200282][T10595] Buffer I/O error on dev loop9, logical block 0, async page read [ 342.209637][T10595] Buffer I/O error on dev loop9, logical block 0, async page read [ 342.218762][T10595] Buffer I/O error on dev loop9, logical block 0, async page read [ 342.228448][T10595] Dev loop9: unable to read RDB block 0 [ 342.236331][T10595] loop9: unable to read partition table [ 342.254009][T10595] loop9: partition table beyond EOD, truncated [ 342.261159][T10595] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 342.261159][T10595] ) failed (rc=-5) [ 344.214488][ T9] usb write operation failed. (-71) [ 344.236044][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 344.273522][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 344.298265][T10604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.302705][ T9] usb 1-1: media controller created [ 344.313570][T10611] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1806'. [ 344.315690][ T9] usb read operation failed. (-71) [ 344.326104][T10610] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1806'. [ 344.332163][ T9] usb write operation failed. (-71) [ 344.348387][ T9] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 344.375084][ T9] usb 1-1: USB disconnect, device number 83 [ 344.467216][ T5886] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 344.587068][ T44] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 344.601503][ T5886] usb 2-1: device descriptor read/64, error -71 [ 344.746976][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 344.766607][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.777910][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.787984][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 344.803173][ T44] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 344.813748][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.825528][ T44] usb 4-1: config 0 descriptor?? [ 344.857014][ T5886] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 344.987011][ T5886] usb 2-1: device descriptor read/64, error -71 [ 345.046170][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 345.060468][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 345.097589][ T5886] usb usb2-port1: attempt power cycle [ 345.176233][T10623] binder: 10622:10623 ioctl c0306201 2000000001c0 returned -14 [ 345.260096][ T44] microsoft 0003:045E:07DA.000F: unbalanced collection at end of report description [ 345.274160][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'. [ 345.284240][ T44] microsoft 0003:045E:07DA.000F: parse failed [ 345.284315][ T44] microsoft 0003:045E:07DA.000F: probe with driver microsoft failed with error -22 [ 345.437066][ T5886] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 345.457352][ T44] usb 4-1: USB disconnect, device number 79 [ 345.468663][ T5886] usb 2-1: device descriptor read/8, error -71 [ 345.512051][T10637] loop5: detected capacity change from 0 to 7 [ 345.521858][T10637] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 345.531017][T10637] loop5: p1 start 2429259420 is beyond EOD, truncated [ 345.539658][T10637] loop5: p2 start 3773841650 is beyond EOD, truncated [ 345.546639][T10637] loop5: p3 start 2117034607 is beyond EOD, truncated [ 345.553605][T10637] loop5: p4 start 1543794713 is beyond EOD, truncated [ 345.560606][T10637] loop5: p5 start 1815049829 is beyond EOD, truncated [ 345.567701][T10637] loop5: p6 start 1947514175 is beyond EOD, truncated [ 345.574602][T10637] loop5: p7 start 2819344148 is beyond EOD, truncated [ 345.649880][ T5917] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 345.717071][ T5886] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 345.737672][ T5886] usb 2-1: device descriptor read/8, error -71 [ 345.811073][ T5917] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 345.820256][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.829497][ T5917] usb 5-1: Product: syz [ 345.833694][ T5917] usb 5-1: Manufacturer: syz [ 345.838399][ T5917] usb 5-1: SerialNumber: syz [ 345.851170][ T5886] usb usb2-port1: unable to enumerate USB device [ 345.858184][ T5917] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 345.878612][ T44] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 345.907026][ T958] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 346.069736][ T958] usb 1-1: config 9 has an invalid interface number: 1 but max is 0 [ 346.079422][ T958] usb 1-1: config 9 has no interface number 0 [ 346.085693][ T958] usb 1-1: config 9 interface 1 has no altsetting 0 [ 346.100146][ T958] usb 1-1: string descriptor 0 read error: -22 [ 346.105425][T10633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.108435][ T958] usb 1-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 346.125344][ T958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.136266][T10633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.148824][T10633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.167868][T10633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.170164][ T958] cx231xx 1-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 346.190003][T10633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.202981][T10633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.217278][ T958] cx231xx 1-1:9.1: Not found matching IAD interface [ 346.363874][T10646] netlink: 'syz.3.1821': attribute type 46 has an invalid length. [ 346.372863][ T958] usb 1-1: USB disconnect, device number 84 [ 346.383049][T10646] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1821'. [ 346.415201][T10633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.432231][T10633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.550960][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1822'. [ 346.811652][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1826'. [ 346.917093][ T44] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 346.927534][ T44] ath9k_htc: Failed to initialize the device [ 346.966199][ T44] usb 5-1: ath9k_htc: USB layer deinitialized [ 346.997870][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1828'. [ 347.089506][T10664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1829'. [ 347.264855][T10669] FAULT_INJECTION: forcing a failure. [ 347.264855][T10669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.279636][T10669] CPU: 1 UID: 0 PID: 10669 Comm: syz.1.1831 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.279671][T10669] Tainted: [L]=SOFTLOCKUP [ 347.279678][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 347.279690][T10669] Call Trace: [ 347.279698][T10669] [ 347.279706][T10669] dump_stack_lvl+0xe8/0x150 [ 347.279739][T10669] should_fail_ex+0x412/0x560 [ 347.279770][T10669] _copy_from_iter+0x1d3/0x1670 [ 347.279802][T10669] ? rcu_is_watching+0x15/0xb0 [ 347.279835][T10669] ? __pfx__copy_from_iter+0x10/0x10 [ 347.279871][T10669] ? netlink_sendmsg+0x650/0xb40 [ 347.279892][T10669] ? skb_put+0x11b/0x210 [ 347.279924][T10669] netlink_sendmsg+0x6c0/0xb40 [ 347.279953][T10669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.279977][T10669] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 347.280017][T10669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.280036][T10669] sock_sendmsg_nosec+0x18f/0x1d0 [ 347.280070][T10669] ____sys_sendmsg+0x589/0x8c0 [ 347.280103][T10669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.280137][T10669] ? import_iovec+0x73/0xa0 [ 347.280159][T10669] ___sys_sendmsg+0x2a5/0x360 [ 347.280190][T10669] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.280249][T10669] ? __fget_files+0x2a/0x420 [ 347.280276][T10669] ? __fget_files+0x3a0/0x420 [ 347.280313][T10669] __x64_sys_sendmsg+0x1bd/0x2a0 [ 347.280341][T10669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.280376][T10669] ? __pfx_ksys_write+0x10/0x10 [ 347.280407][T10669] do_syscall_64+0x14d/0xf80 [ 347.280432][T10669] ? trace_irq_disable+0x3b/0x150 [ 347.280459][T10669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.280479][T10669] ? clear_bhb_loop+0x40/0x90 [ 347.280504][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.280524][T10669] RIP: 0033:0x7f2245d9aeb9 [ 347.280544][T10669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.280561][T10669] RSP: 002b:00007f2246d3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.280583][T10669] RAX: ffffffffffffffda RBX: 00007f2246015fa0 RCX: 00007f2245d9aeb9 [ 347.280598][T10669] RDX: 0000000020004000 RSI: 0000200000000140 RDI: 0000000000000004 [ 347.280611][T10669] RBP: 00007f2246d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 347.280623][T10669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.280635][T10669] R13: 00007f2246016038 R14: 00007f2246015fa0 R15: 00007ffefd569da8 [ 347.280667][T10669] [ 347.549423][T10671] binder: 10670:10671 ioctl c0306201 2000000003c0 returned -14 [ 347.846966][ T5811] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 348.007711][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 348.014938][ T5811] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 348.023628][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.034085][ T5811] usb 2-1: config 0 has no interface number 0 [ 348.040406][ T5811] usb 2-1: config 0 interface 17 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 348.051578][ T5811] usb 2-1: config 0 interface 17 altsetting 0 endpoint 0x5 has invalid maxpacket 1431, setting to 1024 [ 348.063028][ T5811] usb 2-1: config 0 interface 17 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 348.073217][ T5811] usb 2-1: config 0 interface 17 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 348.095731][ T5811] usb 2-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=ab.c3 [ 348.105041][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.113257][ T5811] usb 2-1: Product: syz [ 348.118700][ T5811] usb 2-1: Manufacturer: syz [ 348.123344][ T5811] usb 2-1: SerialNumber: syz [ 348.132135][ T5811] usb 2-1: config 0 descriptor?? [ 348.138148][T10673] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 348.151361][ T5811] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.17/input/input30 [ 348.191896][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1842'. [ 348.351637][ T5176] bcm5974 2-1:0.17: could not read from device [ 348.362147][ T5176] bcm5974 2-1:0.17: could not read from device [ 348.371635][ T5176] bcm5974 2-1:0.17: could not read from device [ 348.382906][ T5811] usb 2-1: USB disconnect, device number 92 [ 348.390587][ T5176] bcm5974 2-1:0.17: could not read from device [ 348.469649][ T5886] usb 5-1: USB disconnect, device number 45 [ 348.611084][T10698] syzkaller1: entered promiscuous mode [ 348.619310][T10698] syzkaller1: entered allmulticast mode [ 349.037598][T10704] loop9: detected capacity change from 0 to 7 [ 349.044112][T10704] buffer_io_error: 4 callbacks suppressed [ 349.044123][T10704] Buffer I/O error on dev loop9, logical block 0, async page read [ 349.057820][T10704] Buffer I/O error on dev loop9, logical block 0, async page read [ 349.065652][T10704] Buffer I/O error on dev loop9, logical block 0, async page read [ 349.073531][T10704] Buffer I/O error on dev loop9, logical block 0, async page read [ 349.081453][T10704] Buffer I/O error on dev loop9, logical block 0, async page read [ 349.089364][T10704] Buffer I/O error on dev loop9, logical block 0, async page read [ 349.097249][T10704] Buffer I/O error on dev loop9, logical block 0, async page read [ 349.105639][T10704] ldm_validate_partition_table(): Disk read failed. [ 349.112316][T10704] Buffer I/O error on dev loop9, logical block 0, async page read [ 349.120198][T10704] Buffer I/O error on dev loop9, logical block 0, async page read [ 349.128142][T10704] Buffer I/O error on dev loop9, logical block 0, async page read [ 349.135997][T10704] Dev loop9: unable to read RDB block 0 [ 349.141718][T10704] loop9: unable to read partition table [ 349.147539][T10704] loop9: partition table beyond EOD, truncated [ 349.153730][T10704] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 349.153730][T10704] ) failed (rc=-5) [ 350.015009][T10709] syzkaller1: entered promiscuous mode [ 350.028118][T10709] syzkaller1: entered allmulticast mode [ 350.347138][ T5886] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 350.375694][T10714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.517097][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 350.527319][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.540917][ T5886] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 350.550231][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.561483][ T5886] usb 2-1: config 0 descriptor?? [ 350.738606][T10728] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1854'. [ 350.804479][T10730] binder: 10729:10730 ioctl c0306201 2000000001c0 returned -14 [ 351.002777][T10711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.036359][T10711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.075525][ T5886] usbhid 2-1:0.0: can't add hid device: -71 [ 351.092261][ T5886] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 351.118448][ T5886] usb 2-1: USB disconnect, device number 93 [ 351.180174][T10742] loop5: detected capacity change from 0 to 7 [ 351.188868][T10742] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 351.195251][T10742] loop5: p1 start 2429259420 is beyond EOD, truncated [ 351.203455][T10742] loop5: p2 start 3773841650 is beyond EOD, truncated [ 351.210640][T10742] loop5: p3 start 2117034607 is beyond EOD, truncated [ 351.218250][T10742] loop5: p4 start 1543794713 is beyond EOD, truncated [ 351.225426][T10742] loop5: p5 start 1815049829 is beyond EOD, truncated [ 351.232572][T10742] loop5: p6 start 1947514175 is beyond EOD, truncated [ 351.239738][T10742] loop5: p7 start 2819344148 is beyond EOD, truncated [ 351.297194][ T5811] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 351.320289][T10740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 351.467076][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 351.477530][ T5811] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 351.492837][ T5811] usb 4-1: config 0 has no interface number 0 [ 351.500177][ T5811] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.514312][ T5811] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 351.546941][ T5811] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 351.565716][ T5811] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 351.581934][ T5811] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 351.617065][ T5811] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 351.628269][ T5811] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 351.638825][ T5811] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 351.683170][ T5811] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.725844][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1865'. [ 351.731586][ T5811] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 351.752882][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.781428][ T5811] usb 4-1: Product: syz [ 351.785753][ T5811] usb 4-1: Manufacturer: syz [ 351.797903][ T5811] usb 4-1: SerialNumber: syz [ 351.808274][ T5811] usb 4-1: config 0 descriptor?? [ 351.814169][T10734] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 351.849492][ T5811] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 351.868613][ T5811] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 351.964679][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1870'. [ 352.008860][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1871'. [ 352.040212][ T5917] usb 4-1: USB disconnect, device number 80 [ 352.163121][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1873'. [ 352.194110][ T44] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 352.271512][T10782] FAULT_INJECTION: forcing a failure. [ 352.271512][T10782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.286649][T10782] CPU: 0 UID: 0 PID: 10782 Comm: syz.0.1876 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.286684][T10782] Tainted: [L]=SOFTLOCKUP [ 352.286692][T10782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 352.286705][T10782] Call Trace: [ 352.286714][T10782] [ 352.286723][T10782] dump_stack_lvl+0xe8/0x150 [ 352.286755][T10782] should_fail_ex+0x412/0x560 [ 352.286787][T10782] _copy_from_iter+0x1d3/0x1670 [ 352.286825][T10782] ? rcu_is_watching+0x15/0xb0 [ 352.286858][T10782] ? __pfx__copy_from_iter+0x10/0x10 [ 352.286894][T10782] ? netlink_sendmsg+0x650/0xb40 [ 352.286915][T10782] ? skb_put+0x11b/0x210 [ 352.286941][T10782] netlink_sendmsg+0x6c0/0xb40 [ 352.286971][T10782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.287002][T10782] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 352.287044][T10782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.287064][T10782] sock_sendmsg_nosec+0x18f/0x1d0 [ 352.287099][T10782] ____sys_sendmsg+0x589/0x8c0 [ 352.287133][T10782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.287169][T10782] ? import_iovec+0x73/0xa0 [ 352.287192][T10782] ___sys_sendmsg+0x2a5/0x360 [ 352.287298][T10782] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.287364][T10782] ? __fget_files+0x2a/0x420 [ 352.287409][T10782] ? __fget_files+0x3a0/0x420 [ 352.287446][T10782] __x64_sys_sendmsg+0x1bd/0x2a0 [ 352.287474][T10782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.287509][T10782] ? __pfx_ksys_write+0x10/0x10 [ 352.287542][T10782] do_syscall_64+0x14d/0xf80 [ 352.287569][T10782] ? trace_irq_disable+0x3b/0x150 [ 352.287598][T10782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.287620][T10782] ? clear_bhb_loop+0x40/0x90 [ 352.287646][T10782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.287667][T10782] RIP: 0033:0x7f55e999aeb9 [ 352.287688][T10782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.287706][T10782] RSP: 002b:00007f55ea7b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.287728][T10782] RAX: ffffffffffffffda RBX: 00007f55e9c15fa0 RCX: 00007f55e999aeb9 [ 352.287743][T10782] RDX: 0000000020004000 RSI: 0000200000000140 RDI: 0000000000000004 [ 352.287756][T10782] RBP: 00007f55ea7b8090 R08: 0000000000000000 R09: 0000000000000000 [ 352.287769][T10782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.287780][T10782] R13: 00007f55e9c16038 R14: 00007f55e9c15fa0 R15: 00007ffee9ecc5b8 [ 352.287813][T10782] [ 352.347295][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 352.542877][ T5886] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 352.555162][ T44] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 352.558591][T10784] binder: 10783:10784 ioctl c0306201 2000000003c0 returned -14 [ 352.564801][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.582128][ T44] usb 5-1: Product: syz [ 352.586345][ T44] usb 5-1: Manufacturer: syz [ 352.591073][ T44] usb 5-1: SerialNumber: syz [ 352.599003][ T44] usb 5-1: config 0 descriptor?? [ 352.683896][ T5886] usb 2-1: device descriptor read/64, error -71 [ 352.808363][ T44] usb 5-1: ignoring: not an USB2CAN converter [ 352.927881][ T5886] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 352.968979][ T5811] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 353.015408][ T5904] usb 5-1: USB disconnect, device number 46 [ 353.091705][ T5886] usb 2-1: device descriptor read/64, error -71 [ 353.201141][ T5886] usb usb2-port1: attempt power cycle [ 353.537181][ T5886] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 353.557876][ T5886] usb 2-1: device descriptor read/8, error -71 [ 354.128596][T10849] loop9: detected capacity change from 0 to 7 [ 354.141554][T10849] buffer_io_error: 4 callbacks suppressed [ 354.141692][T10849] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.156292][T10849] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.165039][T10849] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.173859][T10849] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.182641][T10849] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.191408][T10849] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.200102][T10849] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.208478][T10849] ldm_validate_partition_table(): Disk read failed. [ 354.215757][T10849] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.230884][T10849] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.242118][T10849] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.251180][T10849] Dev loop9: unable to read RDB block 0 [ 354.257523][T10849] loop9: unable to read partition table [ 354.264392][T10849] loop9: partition table beyond EOD, truncated [ 354.271152][T10849] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 354.271152][T10849] ) failed (rc=-5) [ 355.436982][ T5886] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 355.559913][T10846] NFSD: Failed to start, no listeners configured. [ 355.615985][ T5886] usb 2-1: device descriptor read/8, error -71 [ 355.721232][T10855] syzkaller1: entered promiscuous mode [ 355.728766][T10855] syzkaller1: entered allmulticast mode [ 355.739371][ T5886] usb usb2-port1: unable to enumerate USB device [ 356.011476][T10861] nbd: must specify a size in bytes for the device [ 356.022336][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1893'. [ 356.278382][T10870] binder: 10869:10870 ioctl c0306201 2000000001c0 returned -14 [ 356.311004][T10872] syzkaller1: entered promiscuous mode [ 356.316555][T10872] syzkaller1: entered allmulticast mode [ 356.374415][T10873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.426941][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 356.577599][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 356.584865][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 356.596752][ T9] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 356.605755][ T9] usb 4-1: config 8 has no interface number 0 [ 356.612458][ T9] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 356.623689][ T9] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 356.635164][ T9] usb 4-1: config 8 interface 24 has no altsetting 0 [ 356.644402][ T9] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 356.653674][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.661801][ T9] usb 4-1: Product: syz [ 356.666034][ T9] usb 4-1: Manufacturer: syz [ 356.670825][ T9] usb 4-1: SerialNumber: syz [ 356.680229][T10867] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 356.736993][ T44] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 356.888831][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.904844][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 356.915860][ T44] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 356.935433][ T9] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 356.940280][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.962612][ T9] usb 4-1: USB disconnect, device number 81 [ 356.967638][ T44] usb 5-1: Product: syz [ 356.972818][ T44] usb 5-1: Manufacturer: syz [ 356.981680][ T44] usb 5-1: SerialNumber: syz [ 357.000445][ T44] usb 5-1: config 0 descriptor?? [ 357.021261][ T44] hub 5-1:0.0: bad descriptor, ignoring hub [ 357.037431][ T44] hub 5-1:0.0: probe with driver hub failed with error -5 [ 357.057751][ T44] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 357.058112][T10886] tipc: Enabled bearer , priority 10 [ 357.075930][T10819] usb 5-1: Failed to submit usb control message: -71 [ 357.088729][T10819] usb 5-1: unable to send the bmi data to the device: -71 [ 357.104882][T10819] usb 5-1: unable to get target info from device [ 357.114265][T10819] usb 5-1: could not get target info (-71) [ 357.121609][T10819] usb 5-1: could not probe fw (-71) [ 357.250266][T10896] loop5: detected capacity change from 0 to 7 [ 357.261173][T10896] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 357.267491][T10896] loop5: p1 start 2429259420 is beyond EOD, truncated [ 357.274822][T10896] loop5: p2 start 3773841650 is beyond EOD, truncated [ 357.282208][T10896] loop5: p3 start 2117034607 is beyond EOD, truncated [ 357.289390][T10896] loop5: p4 start 1543794713 is beyond EOD, truncated [ 357.297618][T10896] loop5: p5 start 1815049829 is beyond EOD, truncated [ 357.304622][T10896] loop5: p6 start 1947514175 is beyond EOD, truncated [ 357.313413][T10896] loop5: p7 start 2819344148 is beyond EOD, truncated [ 357.338263][ T9] usb 5-1: USB disconnect, device number 47 [ 357.537157][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 357.670805][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1912'. [ 357.697011][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 357.711437][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.723407][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.730381][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 357.739953][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.765917][ T9] usb 1-1: config 0 descriptor?? [ 357.876505][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1915'. [ 358.127946][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1918'. [ 358.192471][T10929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1919'. [ 358.215554][T10929] FAULT_INJECTION: forcing a failure. [ 358.215554][T10929] name failslab, interval 1, probability 0, space 0, times 0 [ 358.232103][T10929] CPU: 1 UID: 0 PID: 10929 Comm: syz.4.1919 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.232133][T10929] Tainted: [L]=SOFTLOCKUP [ 358.232141][T10929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 358.232153][T10929] Call Trace: [ 358.232162][T10929] [ 358.232170][T10929] dump_stack_lvl+0xe8/0x150 [ 358.232203][T10929] should_fail_ex+0x412/0x560 [ 358.232237][T10929] should_failslab+0xa8/0x100 [ 358.232263][T10929] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 358.232299][T10929] ? __alloc_skb+0x1d0/0x7d0 [ 358.232320][T10929] ? __local_bh_enable_ip+0xd0/0x130 [ 358.232352][T10929] __alloc_skb+0x1d0/0x7d0 [ 358.232374][T10929] ? netlink_ack_tlv_len+0x6c/0x210 [ 358.232398][T10929] netlink_ack+0x146/0xa50 [ 358.232416][T10929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.232441][T10929] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 358.232465][T10929] ? __pfx_nl802154_post_doit+0x10/0x10 [ 358.232491][T10929] ? __lock_acquire+0x6b5/0x2cf0 [ 358.232529][T10929] netlink_rcv_skb+0x2b6/0x4b0 [ 358.232551][T10929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.232580][T10929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.232618][T10929] ? down_read+0x272/0x2e0 [ 358.232646][T10929] ? genl_rcv+0xd/0x40 [ 358.232674][T10929] genl_rcv+0x28/0x40 [ 358.232698][T10929] netlink_unicast+0x80f/0x9b0 [ 358.232748][T10929] ? __pfx_netlink_unicast+0x10/0x10 [ 358.232781][T10929] ? netlink_sendmsg+0x650/0xb40 [ 358.232801][T10929] ? skb_put+0x11b/0x210 [ 358.232828][T10929] netlink_sendmsg+0x813/0xb40 [ 358.232859][T10929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.232884][T10929] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 358.232926][T10929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.232947][T10929] sock_sendmsg_nosec+0x18f/0x1d0 [ 358.232982][T10929] ____sys_sendmsg+0x589/0x8c0 [ 358.233017][T10929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.233058][T10929] ? import_iovec+0x73/0xa0 [ 358.233082][T10929] ___sys_sendmsg+0x2a5/0x360 [ 358.233113][T10929] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.233175][T10929] ? __fget_files+0x2a/0x420 [ 358.233203][T10929] ? __fget_files+0x3a0/0x420 [ 358.233241][T10929] __x64_sys_sendmsg+0x1bd/0x2a0 [ 358.233270][T10929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.233305][T10929] ? __pfx_ksys_write+0x10/0x10 [ 358.233338][T10929] do_syscall_64+0x14d/0xf80 [ 358.233365][T10929] ? trace_irq_disable+0x3b/0x150 [ 358.233394][T10929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.233415][T10929] ? clear_bhb_loop+0x40/0x90 [ 358.233440][T10929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.233461][T10929] RIP: 0033:0x7f5d0259aeb9 [ 358.233481][T10929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.233499][T10929] RSP: 002b:00007f5d03540028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.233522][T10929] RAX: ffffffffffffffda RBX: 00007f5d02815fa0 RCX: 00007f5d0259aeb9 [ 358.233537][T10929] RDX: 0000000020004000 RSI: 0000200000000140 RDI: 0000000000000004 [ 358.233551][T10929] RBP: 00007f5d03540090 R08: 0000000000000000 R09: 0000000000000000 [ 358.233563][T10929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.233576][T10929] R13: 00007f5d02816038 R14: 00007f5d02815fa0 R15: 00007fffb720f898 [ 358.233609][T10929] [ 358.557576][ T10] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 358.587092][ T9] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 358.807378][T10936] binder: BINDER_SET_CONTEXT_MGR already set [ 358.813732][T10936] binder: 10935:10936 ioctl 4018620d 200000000040 returned -16 [ 358.822431][T10936] binder: 10935:10936 ioctl c0306201 2000000003c0 returned -14 [ 358.832862][ T10] usb 2-1: No LPM exit latency info found, disabling LPM. [ 358.850767][ T10] usb 2-1: config 127 has an invalid interface number: 116 but max is 1 [ 358.859711][ T10] usb 2-1: config 127 has an invalid descriptor of length 1, skipping remainder of the config [ 358.884830][ T10] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 358.907148][ T10] usb 2-1: config 127 has no interface number 0 [ 358.913539][ T10] usb 2-1: config 127 interface 116 altsetting 192 endpoint 0x2 has invalid maxpacket 37896, setting to 8 [ 358.934896][ T10] usb 2-1: config 127 interface 116 altsetting 192 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 358.951732][T10938] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1922'. [ 358.961085][T10938] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1922'. [ 359.075927][ T10] usb 2-1: config 127 interface 116 has no altsetting 0 [ 359.627305][ T5886] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 359.778969][ T5886] usb 4-1: config 0 has an invalid interface number: 165 but max is 0 [ 359.788034][ T5886] usb 4-1: config 0 has no interface number 0 [ 359.794485][ T5886] usb 4-1: config 0 interface 165 has no altsetting 0 [ 359.804508][ T5886] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=71.ba [ 359.815142][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.826627][ T5886] usb 4-1: Product: syz [ 359.832298][ T5886] usb 4-1: Manufacturer: syz [ 359.838341][ T5886] usb 4-1: SerialNumber: syz [ 359.859979][ T5886] usb 4-1: config 0 descriptor?? [ 360.079087][ T5886] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 360.095784][ T5886] usb 4-1: USB disconnect, device number 82 [ 360.147025][ T5904] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 360.229306][ T44] usb 1-1: USB disconnect, device number 86 [ 361.099429][T10955] loop9: detected capacity change from 0 to 7 [ 361.106126][T10955] buffer_io_error: 4 callbacks suppressed [ 361.106138][T10955] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.119798][T10955] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.127704][T10955] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.135657][T10955] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.143563][T10955] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.151458][T10955] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.159370][T10955] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.167246][T10955] ldm_validate_partition_table(): Disk read failed. [ 361.173910][T10955] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.181792][T10955] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.190278][T10955] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.198177][T10955] Dev loop9: unable to read RDB block 0 [ 361.203810][T10955] loop9: unable to read partition table [ 361.209707][T10955] loop9: partition table beyond EOD, truncated [ 361.215897][T10955] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 361.215897][T10955] ) failed (rc=-5) [ 361.891210][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 361.931786][ T5904] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 361.947050][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 361.979241][ T5904] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 361.991694][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 362.006749][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 362.017293][ T10] usb 2-1: New USB device found, idVendor=1b3d, idProduct=016c, bcdDevice=f1.49 [ 362.026382][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.040973][ T10] usb 2-1: Product: 䐊 [ 362.045456][ T10] usb 2-1: Manufacturer: 㑀 [ 362.051205][ T5904] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 362.059086][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 362.077124][ T10] usb 2-1: can't set config #127, error -71 [ 362.084601][ T5904] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 362.099530][ T10] usb 2-1: USB disconnect, device number 98 [ 362.121451][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 362.139364][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 362.151168][ T5904] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 362.159269][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 362.175113][ T5904] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 362.207004][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 362.226958][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 362.242667][ T5904] usb 5-1: string descriptor 0 read error: -22 [ 362.249379][ T5904] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 362.263813][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.324491][ T5904] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 362.497686][T10964] syzkaller1: entered promiscuous mode [ 362.506534][T10964] syzkaller1: entered allmulticast mode [ 362.554191][ T5830] Bluetooth: hci3: unexpected event for opcode 0x204e [ 362.564006][T10966] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 362.803854][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1938'. [ 362.897753][T10978] binder: 10977:10978 ioctl c0306201 2000000001c0 returned -14 [ 363.072869][T10985] syzkaller1: entered promiscuous mode [ 363.078575][T10985] syzkaller1: entered allmulticast mode [ 363.097029][ T5886] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 363.238091][ T5886] usb 1-1: device descriptor read/64, error -71 [ 363.477043][ T5886] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 363.607035][ T5886] usb 1-1: device descriptor read/64, error -71 [ 363.626623][T10990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.717286][ T5886] usb usb1-port1: attempt power cycle [ 364.057115][ T5886] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 364.077695][ T5886] usb 1-1: device descriptor read/8, error -71 [ 364.277129][ T44] ------------[ cut here ]------------ [ 364.277180][ T44] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 364.277199][ T44] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:1/44 [ 364.277235][ T44] Modules linked in: [ 364.277282][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.277303][ T44] Tainted: [L]=SOFTLOCKUP [ 364.277310][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 364.277321][ T44] Workqueue: events drm_fb_helper_damage_work [ 364.277349][ T44] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 364.277371][ T44] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a 7a c0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 79 f6 ff ff b8 92 ff ff ff [ 364.277390][ T44] RSP: 0018:ffffc90000b47920 EFLAGS: 00010246 [ 364.277405][ T44] RAX: 1ffff11004cb4000 RBX: ffffffff903eabd0 RCX: 0000000000000000 [ 364.277417][ T44] RDX: ffffffff8c5262c0 RSI: ffffffff8c541e60 RDI: ffffffff903eabd0 [ 364.277430][ T44] RBP: ffffc90000b47a08 R08: ffffffff903342b7 R09: 1ffffffff2066856 [ 364.277442][ T44] R10: dffffc0000000000 R11: fffffbfff2066857 R12: ffffffff8c541e60 [ 364.277454][ T44] R13: ffff8880265a0000 R14: 0000000000000000 R15: ffffffff8c5262c0 [ 364.277466][ T44] FS: 0000000000000000(0000) GS:ffff888125115000(0000) knlGS:0000000000000000 [ 364.277479][ T44] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.277491][ T44] CR2: 00007f2245de8600 CR3: 0000000064ea0000 CR4: 00000000003526f0 [ 364.277505][ T44] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 364.277515][ T44] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 364.277525][ T44] Call Trace: [ 364.277532][ T44] [ 364.277547][ T44] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 364.277569][ T44] ? __pfx_autoremove_wake_function+0x10/0x10 [ 364.277586][ T44] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 364.277607][ T44] ? lockdep_hardirqs_on+0x7a/0x110 [ 364.277628][ T44] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 364.277647][ T44] ? drm_vblank_get+0x150/0x270 [ 364.277669][ T44] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 364.277688][ T44] drm_fb_helper_damage_work+0x134/0x750 [ 364.277717][ T44] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 364.277746][ T44] ? process_one_work+0x87c/0x1650 [ 364.277765][ T44] process_one_work+0x949/0x1650 [ 364.277800][ T44] ? __pfx_process_one_work+0x10/0x10 [ 364.277818][ T44] ? do_raw_spin_lock+0x12b/0x2f0 [ 364.277846][ T44] worker_thread+0xb46/0x1140 [ 364.277885][ T44] kthread+0x388/0x470 [ 364.277900][ T44] ? __pfx_worker_thread+0x10/0x10 [ 364.277919][ T44] ? __pfx_kthread+0x10/0x10 [ 364.277935][ T44] ret_from_fork+0x51e/0xb90 [ 364.277958][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 364.277976][ T44] ? __switch_to+0xc7d/0x1450 [ 364.277997][ T44] ? __pfx_kthread+0x10/0x10 [ 364.278013][ T44] ret_from_fork_asm+0x1a/0x30 [ 364.278048][ T44] [ 364.278059][ T44] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 364.278070][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.278090][ T44] Tainted: [L]=SOFTLOCKUP [ 364.278096][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 364.278106][ T44] Workqueue: events drm_fb_helper_damage_work [ 364.278128][ T44] Call Trace: [ 364.278136][ T44] [ 364.278143][ T44] vpanic+0x56c/0xa60 [ 364.278168][ T44] ? __pfx__printk+0x10/0x10 [ 364.278184][ T44] ? __pfx_vpanic+0x10/0x10 [ 364.278204][ T44] ? is_bpf_text_address+0x292/0x2b0 [ 364.278219][ T44] ? is_bpf_text_address+0x26/0x2b0 [ 364.278241][ T44] panic+0xc5/0xd0 [ 364.278262][ T44] ? __pfx_panic+0x10/0x10 [ 364.278290][ T44] ? ret_from_fork_asm+0x1a/0x30 [ 364.278316][ T44] __warn+0x315/0x4f0 [ 364.278336][ T44] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 364.278356][ T44] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 364.278390][ T44] __report_bug+0x29a/0x540 [ 364.278415][ T44] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 364.278435][ T44] ? __pfx___report_bug+0x10/0x10 [ 364.278469][ T44] report_bug_entry+0x19a/0x290 [ 364.278489][ T44] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 364.278508][ T44] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 364.278527][ T44] handle_bug+0xca/0x200 [ 364.278551][ T44] exc_invalid_op+0x1a/0x50 [ 364.278573][ T44] asm_exc_invalid_op+0x1a/0x20 [ 364.278589][ T44] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 364.278608][ T44] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a 7a c0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 79 f6 ff ff b8 92 ff ff ff [ 364.278621][ T44] RSP: 0018:ffffc90000b47920 EFLAGS: 00010246 [ 364.278634][ T44] RAX: 1ffff11004cb4000 RBX: ffffffff903eabd0 RCX: 0000000000000000 [ 364.278645][ T44] RDX: ffffffff8c5262c0 RSI: ffffffff8c541e60 RDI: ffffffff903eabd0 [ 364.278656][ T44] RBP: ffffc90000b47a08 R08: ffffffff903342b7 R09: 1ffffffff2066856 [ 364.278668][ T44] R10: dffffc0000000000 R11: fffffbfff2066857 R12: ffffffff8c541e60 [ 364.278680][ T44] R13: ffff8880265a0000 R14: 0000000000000000 R15: ffffffff8c5262c0 [ 364.278706][ T44] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 364.278726][ T44] ? __pfx_autoremove_wake_function+0x10/0x10 [ 364.278742][ T44] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 364.278761][ T44] ? lockdep_hardirqs_on+0x7a/0x110 [ 364.278781][ T44] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 364.278799][ T44] ? drm_vblank_get+0x150/0x270 [ 364.278820][ T44] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 364.278839][ T44] drm_fb_helper_damage_work+0x134/0x750 [ 364.278867][ T44] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 364.278895][ T44] ? process_one_work+0x87c/0x1650 [ 364.278913][ T44] process_one_work+0x949/0x1650 [ 364.278947][ T44] ? __pfx_process_one_work+0x10/0x10 [ 364.278964][ T44] ? do_raw_spin_lock+0x12b/0x2f0 [ 364.278991][ T44] worker_thread+0xb46/0x1140 [ 364.279029][ T44] kthread+0x388/0x470 [ 364.279044][ T44] ? __pfx_worker_thread+0x10/0x10 [ 364.279062][ T44] ? __pfx_kthread+0x10/0x10 [ 364.279077][ T44] ret_from_fork+0x51e/0xb90 [ 364.279099][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 364.279117][ T44] ? __switch_to+0xc7d/0x1450 [ 364.279138][ T44] ? __pfx_kthread+0x10/0x10 [ 364.279153][ T44] ret_from_fork_asm+0x1a/0x30 [ 364.279187][ T44] [ 364.279809][ T44] Kernel Offset: disabled