last executing test programs: 3.036541474s ago: executing program 3 (id=2660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@code={0xa, 0x46, {"b8010000000f01d9450f01d1c481217503660fc730b8010000000f01c13640a50f086526366666660fc737c4a299bbff3e36420f35"}}, @in_dx={0x82, 0x20, {0x4a04, 0x2}}, @wr_crn={0x46, 0x20, {0x3, 0x5}}, @rdmsr={0x32, 0x18, {0x26c}}, @cpuid={0x14, 0x18, {0x10, 0xfb9}}, @wr_drn={0x6e, 0x20, {0x0, 0x6}}, @cpuid={0x14, 0x18, {0x7, 0x1}}, @rdmsr={0x32, 0x18, {0xdc7}}, @out_dx={0xaa, 0x28, {0x4c09, 0x6, 0x6}}, @in_dx={0x82, 0x20, {0xf73d, 0x7}}, @wr_crn={0x46, 0x20, {0x4, 0xfffffffffffffff7}}, @rdmsr={0x32, 0x18, {0xa59}}, @wr_crn={0x46, 0x20, {0x8}}], 0x1a6}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x423, 0x7ff, 0x1, 0x0, 0x1000, 0x8000000000000000, 0xf08f, 0x100000000, 0x2, 0x4, 0x0, 0x3, 0x1000000000, 0x7, 0x8, 0x1000], 0xffff1000, 0x200011}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xd01c4813, &(0x7f00000000c0)={0x1, 0x100, 0x0, 0x2, 0xfffffffd, 0xa537}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000100)={0x800, 0x4, [0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.397479205s ago: executing program 2 (id=2668): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000002b0000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.278186619s ago: executing program 2 (id=2669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xe, 0x1, 0xc, '\x00', 0x8168}) (async) socket$inet6(0xa, 0x80000, 0x3) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) (async) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd0, &(0x7f0000005900), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.056810508s ago: executing program 2 (id=2670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feb9df25030003005800018044000400200001000a0000000000000000000000000000000000003a0000004000000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 1.824866117s ago: executing program 2 (id=2674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000001f00000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000011400000011000100"], 0xc4}, 0x1, 0x4000, 0x0, 0x20004000}, 0x0) 1.799189093s ago: executing program 2 (id=2675): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8857c5fc68d9", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="a0272bbf1f07f2", 0x7}], 0x1}}], 0x3, 0x28048005) 1.73315012s ago: executing program 2 (id=2676): r0 = socket$inet(0x2, 0x3, 0x8) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) dup3(r0, r2, 0x0) 1.476802684s ago: executing program 1 (id=2680): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/98, 0x62}, {&(0x7f0000000180)=""/228, 0xe4}], 0x2}, 0x1}], 0x1, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac0000000000000000000000000600", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 1.352909907s ago: executing program 1 (id=2681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000001000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fe090000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a002ea02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010101000000000000000000f700007f000001000400000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.352679703s ago: executing program 1 (id=2682): syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) fanotify_mark(r1, 0x105, 0x2a, r0, 0x0) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) 1.250313924s ago: executing program 1 (id=2684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feb9df25030012005800018044000400200001000a0000000000000000000000000000000000003a0000004000000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 1.096874057s ago: executing program 1 (id=2685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000001f00000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000011400000011000100"], 0xc4}, 0x1, 0xf4ff, 0x0, 0x20004000}, 0x0) 1.028551554s ago: executing program 0 (id=2686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000001f00000a20000000000a010300000000000000000a0000010900010073797a310000000054000000030a0104000000000c000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.028102647s ago: executing program 3 (id=2687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) socket$netlink(0x10, 0x3, 0xe) (async, rerun: 32) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) write(r2, &(0x7f0000000140)="6b10113a22991f3e674ea4a927451cdabad651eda8391cfb2949ac09d4c5d0f12ea469670a2a073f26d1ad27d4e9b53604958fedc676b713f4380e8706f872aeff8b5a864471262f2997c89cd717c5f653c744ad7793ba5ee16e431d4e02f1b8a8e6c58e43198d5a2bd53e7118dce3da21568214f3827922170f3c7ee9d4529155aee1e3ef17863e2b1cf9e62b94d7", 0x8f) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x5}, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x28, r6, 0x1, 0x70bd27, 0xb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x28}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e440502"], 0x47) (async) r8 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r8) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016", 0x33}], 0x1}, 0x0) (async, rerun: 64) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe45) (async) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x0, '\x00', @ptr}}) request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000480)='\x00', r9) (async) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000200)=""/21, 0x15}], 0x4, 0x2, 0xffffff7f) 989.457686ms ago: executing program 0 (id=2688): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8857c5fc68d9", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="a0272bbf1f07f2", 0x7}], 0x1}}], 0x3, 0x28048005) 973.069924ms ago: executing program 3 (id=2689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000001f00000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000001300010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 944.293082ms ago: executing program 1 (id=2690): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000d40)={0x31c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff63e0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x94}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9e29f02fd7524081b46dfc581dabd59065120c3b"}}, @TIPC_NLA_NODE_ID={0xe7, 0x3, "7762d3be05adc4ece31ec08d77a158edf61382997b79961ef7f05aa75a7add90b936dc0e9b7749c1658b35493f74844aa90b2473e21bda17e7e6186668b3de7e4fddd9385a9c40d7e74f9590b0cdb9b84db5e90b6d6843c4b7b0998899ba3d945a618ebefe57234ae59f9fd4cde86b30a714115c8d239646e28debb005be7b569465e06ec21ec897c3a6b42db5abbb21e0622f525225785bc6e364982a8cdab4d041aee5e3f35ea7ecdb64efd85d4a83cada66274fc35679e94164732a6e019c80e60372bc17b58ddfc782bdbc091ffe636f9c1871ecbebade39adbb7240e310cb7065"}, @TIPC_NLA_NODE_ID={0x94, 0x3, "26d44b468fd1569dcd3edd98be41fccd41e131be8ace8663d248fa9a09c0f53b1c02f553c8691844f41e9b6ea1e6025f118ac474470260fafe78d9c2b29f8f7586aba20662980d6a60b5add85c20304f3ad7a0986c74827b96e7633d331e33b880b75b457b6ada690525ab8cd3edd7d45726e9cc388cd0f95e287f2cc7ae918bfbe2ad22d06655014d4cd81f496a74ca"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "32fbb2a416b821fdc5f3f8cd96235b687bd9ffdbeca7f23c804c6a51c668e2ebe2"}}, @TIPC_NLA_NODE_ID={0x12, 0x3, "3d13a223cf1a2bb3dc59100455cb"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10000}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "da9f89945bc37e6c24f6f2d8a8d5524927a5562a"}}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4004080}, 0x40800) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000040)=0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x130, 0x2a, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x114, 0x7f, 0x0, 0x1, [@typed={0xc, 0x15, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x8, 0xd, 0x0, 0x0, @fd=r0}, @generic="7dd4a790fd0a252cfd75e55609e47255922a68bde6d47b236fbf94ece29da20060415294ee803765aadd25a1fa", @generic="29706753be9cf9ae4b9a4d8af9976532f48d1315bc1c2855a424df0ebb62d74b0e8757823db275d6a482c991785aedb3f68234b4b6398d7721c06d1fd1a6e80e321d5d0f3908ef76a55bb015d71f242b98caa82621a8897b200cb904bd8e6fc96702a6645a45d69dd305090a0858f155eae951cbb239235b560a2d408bf42fce1cbc0afe122534c3cd34f47be6c8aadbaccd099520bc7ac9c996b04ee9f86d788e9ef4116f72d9846b8ddf41280db1c9e87240f43377fb13598757f47199b48464e53d1ddef46ed5e0c79b", @typed={0x4, 0x12d}]}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x12}]}, 0x130}], 0x1, 0x0, 0x0, 0x841}, 0x4040010) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902120001000200000904"], 0x0) syz_usb_control_io$printer(r9, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$sierra_net(r9, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x0, 0x2, 0x74, {0x74, 0x6, "dfc7604576fe68748a423753bbfdb602414589187f43c77d6ecdd9a53a6f588d55e454f60dc37f97351abc0e9d9ce4d9e3186391fba5dece3fb482d72c83e0331a631e6e1934dbea07c896150cafc1838f46d4b5678533fca353174b4c386d2fc6c32e48c90586a918eeca5b9faceeaedb2f"}}, &(0x7f00000005c0)={0x0, 0x3, 0x39, @string={0x39, 0x3, "4db988dc12bad0a8398358dcc679f2de6d8b68a71c3182fd7f4fa39d73c46ae8107d361ffc7ac686c8606024de7589d1e0ad2cb39e72aa"}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000640)={0x40, 0xa}, &(0x7f0000000900)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000680)={0x21, 0x0, 0x1, "b6"}}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r7, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf956, 0x10}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x352}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 836.889973ms ago: executing program 0 (id=2691): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000330000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 836.389064ms ago: executing program 3 (id=2692): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/98, 0x62}, {&(0x7f0000000180)=""/228, 0xe4}], 0x2}, 0x1}], 0x1, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac0000000000000000000000000700", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 724.719986ms ago: executing program 3 (id=2693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf250500000008000600", @ANYRES32=r8, @ANYBLOB="08002c0001000000080039000700000008000300", @ANYRES32=r9], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40040) (async) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x2c}}, 0x20000010) (async, rerun: 32) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0xde8, 0x81, 0x2]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9a}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) (async, rerun: 32) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r11], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 676.919136ms ago: executing program 0 (id=2694): recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/98, 0x62}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861acdabeffff00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 456.779729ms ago: executing program 0 (id=2695): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000001000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fe090000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a01a8a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010101000000000000000000f700007f000001000400000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 404.0148ms ago: executing program 0 (id=2696): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xfa, @none, 0x0, 0x2}, 0xe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fe800000bfc5000076e67cbcf41c810ebd000000ec00000000003bfe8000000000000000000000001500aa00000000008dbde3163c3bb6e4eb19da6f84bc9fe2fb5539fa3ae71b304eb811aebbaf32a7f2d9616fb406ea25d62712b2bd670ed6aadb", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f00000000000000070000000000000003000000000000000000000000000000fdffffffffffffff0500000000000000ffffffffffffffffffffffff0000000000000000000000000000000000000000050000000000000000000000000000000101020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010800ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108d90f2c006b0601356749c5cd178831a07b141cdac8c2b602030109021b000107d440000904"], 0x0) syz_usb_ep_read(r5, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003e2ff00007932"], 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r5, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000302200603"]}, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000040)={0x1, 0x102, 0x0, {0x1, 0x3, 0x7fff, 0x4}}) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f00000001c0)=0x7) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7e, 0x0, 0x5, '\x00', 0x102}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x180380) ioctl$NBD_SET_TIMEOUT(r9, 0xab09, 0x393978ca) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000280)={"734b6f85a0a0dac7f663d561525d8158", 0x0, 0x0, {0x7, 0x2}, {0x9, 0x5}, 0x8ab, [0x1, 0x7, 0x5, 0x8, 0xd, 0x1, 0x1ff, 0x3, 0x3f41, 0xa, 0x2, 0x80000000, 0x1, 0x0, 0x2, 0xffffffffffffff00]}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000005c0)={{r3}, r10, 0x1, @inherit={0x60, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000030000000000000003000000000000000800000000000000000004000000000000000600000000000000e2f80000000000000300000009000000f9ffffffffffffff0500"/96]}, @name="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"}) 0s ago: executing program 3 (id=2697): ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000500)={0x1, 0x1fffffb, 0x6, 0x1bf, 0x1000000009, 0x9, 0x4, 0x101, 0x4000000, 0xcea4, 0xfffff7fd, 0x3}) kernel console output (not intermixed with test programs): .0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 270.992414][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.005547][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.024358][ T5961] usb 2-1: USB disconnect, device number 104 [ 271.030734][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.045828][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 271.055672][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.076633][ T10] usb 3-1: config 0 descriptor?? [ 271.294111][ T10] usbhid 3-1:0.0: can't add hid device: -32 [ 271.300235][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 271.591427][T11395] loop3: detected capacity change from 0 to 7 [ 271.598569][T11395] Dev loop3: unable to read RDB block 7 [ 271.604260][T11395] loop3: unable to read partition table [ 271.610215][T11395] loop3: partition table beyond EOD, truncated [ 271.616390][T11395] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.909069][ T10] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 272.060490][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 272.072745][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 272.083712][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 272.094632][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 272.113123][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.122496][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.133502][ T10] usb 2-1: Product: syz [ 272.137692][ T10] usb 2-1: Manufacturer: syz [ 272.142613][ T10] usb 2-1: SerialNumber: syz [ 272.160215][T11397] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 272.174414][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 272.374328][T11397] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 272.381804][T11397] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 272.992722][T11397] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 273.000281][T11397] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 273.007707][ T10] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 273.210916][ T10] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 273.218264][ T10] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 273.224500][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 273.243382][ T10] wwan wwan0: port wwan0mbim0 attached [ 273.265278][ T10] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, e2:5a:f8:32:57:21 [ 273.416466][ T10] usb 2-1: USB disconnect, device number 105 [ 273.435789][ T10] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 273.513912][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 273.605305][ T43] usb 3-1: USB disconnect, device number 100 [ 273.651865][T11416] loop6: detected capacity change from 0 to 7 [ 273.660613][T11416] Dev loop6: unable to read RDB block 7 [ 273.670781][T11416] loop6: unable to read partition table [ 273.676716][T11416] loop6: partition table beyond EOD, truncated [ 273.684379][T11416] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 273.778230][T11420] loop6: detected capacity change from 0 to 7 [ 273.786577][ T5996] Dev loop6: unable to read RDB block 7 [ 273.792750][ T5996] loop6: AHDI p3 p4 [ 273.796834][ T5996] loop6: partition table partially beyond EOD, truncated [ 273.806630][ T5996] loop6: p3 start 1886353253 is beyond EOD, truncated [ 273.816946][T11420] Dev loop6: unable to read RDB block 7 [ 273.824039][T11420] loop6: AHDI p3 p4 [ 273.828390][T11420] loop6: partition table partially beyond EOD, truncated [ 273.836736][T11420] loop6: p3 start 1886353253 is beyond EOD, truncated [ 274.013479][T11427] tipc: Enabling of bearer rejected, failed to enable media [ 274.275215][ T10] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 274.306627][ T5961] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 274.447996][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 274.459401][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.469588][ T10] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 274.478943][ T5961] usb 2-1: too many configurations: 37, using maximum allowed: 8 [ 274.487027][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.497823][ T10] usb 3-1: config 0 descriptor?? [ 274.519517][ T5961] usb 2-1: string descriptor 0 read error: -71 [ 274.526399][ T5961] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.535609][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.547968][ T5961] usb 2-1: can't set config #1, error -71 [ 274.557699][ T5961] usb 2-1: USB disconnect, device number 106 [ 274.941338][ T10] uclogic 0003:2179:0077.001A: interface is invalid, ignoring [ 275.158326][ T43] usb 3-1: USB disconnect, device number 101 [ 275.500292][T11470] loop3: detected capacity change from 0 to 7 [ 275.509362][ T5996] Dev loop3: unable to read RDB block 7 [ 275.510050][T11471] virtiofs: Unknown parameter 'always 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 20 batadv0 : 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 21 vxcan0 : 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 22 vxcan1 : 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 23 veth0 : 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 24 veth1 : 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 25 wg0 : 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 26 wg1 : 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 27 wg2 : 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 28 veth0_to_bridge: 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 29 bridge_slave_0: 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 30 veth1_to_bridge: 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 31 bridge_slave_1: 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 32 veth0_to_bond: 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 33 bond_slave_0: 1 V3 [ 275.510050][T11471] 010000E0 1 0:00000000 0 [ 275.510050][T11471] 34 veth1_to_bond: 1 V3 [ 275.510050][T11471] 010000E0 1 [ 275.515208][ T5996] loop3: unable to read partition table [ 275.515420][ T5996] loop3: partition table beyond EOD, truncated [ 275.687249][T11470] Dev loop3: unable to read RDB block 7 [ 275.692866][T11470] loop3: unable to read partition table [ 275.699269][T11470] loop3: partition table beyond EOD, truncated [ 275.705716][T11470] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 275.897582][T11484] loop6: detected capacity change from 0 to 7 [ 275.904959][T11484] Dev loop6: unable to read RDB block 7 [ 275.912325][T11484] loop6: AHDI p3 p4 [ 275.916448][T11484] loop6: partition table partially beyond EOD, truncated [ 275.924925][T11484] loop6: p3 start 1886353253 is beyond EOD, truncated [ 276.092503][ T5946] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 276.277177][ T5946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.299680][ T5946] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 276.303503][T11502] loop3: detected capacity change from 0 to 7 [ 276.319159][ T5946] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 276.321033][T11502] Dev loop3: unable to read RDB block 7 [ 276.334189][T11502] loop3: unable to read partition table [ 276.340585][T11502] loop3: partition table beyond EOD, truncated [ 276.346778][T11502] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 276.357842][ T5946] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 276.367809][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.381339][ T5946] usb 2-1: Product: syz [ 276.385539][ T5946] usb 2-1: Manufacturer: syz [ 276.390142][ T5946] usb 2-1: SerialNumber: syz [ 276.623850][ T5946] usb 2-1: USB disconnect, device number 107 [ 277.012142][ T5869] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 277.087119][ T5961] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 277.164995][T11514] loop6: detected capacity change from 0 to 7 [ 277.172080][T11514] Dev loop6: unable to read RDB block 7 [ 277.177798][T11514] loop6: unable to read partition table [ 277.188185][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.188443][T11514] loop6: partition table beyond EOD, [ 277.198820][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 277.199156][T11514] truncated [ 277.206830][ T5869] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 277.211192][T11514] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 277.226481][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.245464][ T5869] usb 3-1: Product: syz [ 277.249992][ T5869] usb 3-1: Manufacturer: syz [ 277.254910][ T5869] usb 3-1: SerialNumber: syz [ 277.262817][ T5869] usb 3-1: config 0 descriptor?? [ 277.262839][ T5961] usb 2-1: unable to get BOS descriptor or descriptor too short [ 277.271917][ T5869] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 277.313970][ T5961] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 277.314889][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.332508][ T5961] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 277.352747][ T5869] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 277.363939][ T5961] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 277.373560][ T5869] usb 3-1: media controller created [ 277.374696][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.387768][ T5961] usb 2-1: Product: syz [ 277.392356][ T5961] usb 2-1: Manufacturer: syz [ 277.398202][ T5961] usb 2-1: SerialNumber: syz [ 277.435767][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.447711][T11518] tipc: Enabling of bearer rejected, failed to enable media [ 277.518903][ T5869] DVB: Unable to find symbol tda10046_attach() [ 277.525146][ T5869] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 277.538890][ T5869] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 277.548922][ T5869] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 277.576890][ T5869] usb 3-1: USB disconnect, device number 102 [ 277.636623][ T5961] usb 2-1: USB disconnect, device number 108 [ 277.716438][T11527] loop3: detected capacity change from 0 to 7 [ 277.723385][T11527] Dev loop3: unable to read RDB block 7 [ 277.731257][T11527] loop3: unable to read partition table [ 277.737160][T11527] loop3: partition table beyond EOD, truncated [ 277.747809][T11527] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 278.060150][ T5869] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 278.220813][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 278.246850][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.258046][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.274301][ T5869] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 278.286888][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.307095][ T5869] usb 4-1: config 0 descriptor?? [ 278.612973][T11547] loop6: detected capacity change from 0 to 7 [ 278.621086][T11547] Dev loop6: unable to read RDB block 7 [ 278.626695][T11547] loop6: unable to read partition table [ 278.633189][T11547] loop6: partition table beyond EOD, truncated [ 278.640624][T11547] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 278.669960][ T43] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 278.752936][ T5869] ft260 0003:0403:6030.001B: item fetching failed at offset 0/2 [ 278.762435][ T5869] ft260 0003:0403:6030.001B: failed to parse HID [ 278.771034][ T5869] ft260 0003:0403:6030.001B: probe with driver ft260 failed with error -22 [ 278.819729][ T43] usb 3-1: device descriptor read/64, error -71 [ 278.826982][T11555] loop3: detected capacity change from 0 to 7 [ 278.836483][T11555] Dev loop3: unable to read RDB block 7 [ 278.842541][T11555] loop3: unable to read partition table [ 278.848470][T11555] loop3: partition table beyond EOD, truncated [ 278.858761][T11555] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 278.964518][T11529] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2247'. [ 278.982303][T11529] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.051876][T11529] bridge_slave_0 (unregistering): left allmulticast mode [ 279.059086][T11529] bridge_slave_0 (unregistering): left promiscuous mode [ 279.074947][T11529] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.088315][ T43] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 279.125045][T11572] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 279.130287][ T5961] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 279.203628][ T5908] usb 4-1: USB disconnect, device number 104 [ 279.248878][ T43] usb 3-1: device descriptor read/64, error -71 [ 279.365155][ T43] usb usb3-port1: attempt power cycle [ 279.521843][T11557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.530661][T11557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.540088][ T5961] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.548786][ T5961] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 279.556497][ T5961] usb 2-1: can't read configurations, error -71 [ 279.729634][ T43] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 279.771294][ T43] usb 3-1: device descriptor read/8, error -71 [ 279.902054][T11583] loop3: detected capacity change from 0 to 7 [ 279.909336][T11583] Dev loop3: unable to read RDB block 7 [ 279.917196][T11583] loop3: unable to read partition table [ 279.924136][T11583] loop3: partition table beyond EOD, truncated [ 279.930459][T11583] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.016757][T11586] syzkaller1: entered promiscuous mode [ 280.023942][T11586] syzkaller1: entered allmulticast mode [ 280.030842][ T43] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 280.067450][ T43] usb 3-1: device descriptor read/8, error -71 [ 280.071473][T11590] tipc: Enabling of bearer rejected, failed to enable media [ 280.142824][T11594] tipc: Enabling of bearer rejected, failed to enable media [ 280.188581][ T43] usb usb3-port1: unable to enumerate USB device [ 280.290080][T11601] loop3: detected capacity change from 0 to 7 [ 280.301146][T11601] Dev loop3: unable to read RDB block 7 [ 280.309043][T11601] loop3: unable to read partition table [ 280.315056][T11601] loop3: partition table beyond EOD, truncated [ 280.327441][T11601] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.409842][T11607] tipc: Enabling of bearer rejected, failed to enable media [ 280.591074][T11615] loop6: detected capacity change from 0 to 7 [ 280.598140][T11615] Dev loop6: unable to read RDB block 7 [ 280.603754][T11615] loop6: unable to read partition table [ 280.609691][T11615] loop6: partition table beyond EOD, truncated [ 280.615928][T11615] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.703816][T11619] loop3: detected capacity change from 0 to 7 [ 280.710888][T11619] Dev loop3: unable to read RDB block 7 [ 280.716598][T11619] loop3: unable to read partition table [ 280.722404][T11619] loop3: partition table beyond EOD, truncated [ 280.729555][T11619] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.777789][ T5908] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 280.786359][T11621] loop6: detected capacity change from 0 to 7 [ 280.796833][T11621] Dev loop6: unable to read RDB block 7 [ 280.803927][T11621] loop6: AHDI p3 p4 [ 280.807928][T11621] loop6: partition table partially beyond EOD, truncated [ 280.815522][T11621] loop6: p3 start 1886353253 is beyond EOD, truncated [ 281.129316][ T5961] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 281.165963][T11613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.174943][T11613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.184968][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.193491][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 281.201122][ T5908] usb 4-1: can't read configurations, error -71 [ 281.296491][ T5961] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 281.305660][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.315734][ T5961] usb 2-1: config 0 descriptor?? [ 281.323831][ T5961] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 281.537415][ T5961] gp8psk: usb in 128 operation failed. [ 281.762539][ T5961] gp8psk: usb in 146 operation failed. [ 281.767398][T11630] tipc: Enabling of bearer rejected, failed to enable media [ 281.770875][ T5961] gp8psk: failed to get FW version [ 281.786800][ T5961] gp8psk: FPGA Version = 67 [ 282.026358][ T5961] gp8psk: usb in 138 operation failed. [ 282.037322][ T9] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 282.045466][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 282.063539][ T5961] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 282.073193][ T5961] usb 2-1: media controller created [ 282.105821][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.134112][ T5961] gp8psk_fe: Frontend attached [ 282.140428][ T5961] usb 2-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 282.170625][ T5961] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 282.223186][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 282.234609][ T9] usb 3-1: config 6 has an invalid interface number: 60 but max is 0 [ 282.243727][ T9] usb 3-1: config 6 has no interface number 0 [ 282.249961][ T5961] gp8psk: usb in 138 operation failed. [ 282.262778][ T9] usb 3-1: config 6 interface 60 altsetting 3 endpoint 0xD has invalid maxpacket 28782, setting to 64 [ 282.273984][ T5961] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 282.283474][ T5961] gp8psk: found Genpix USB device pID = 203 (hex) [ 282.290944][ T9] usb 3-1: config 6 interface 60 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 282.305293][ T5961] usb 2-1: USB disconnect, device number 111 [ 282.311380][ T9] usb 3-1: config 6 interface 60 has no altsetting 0 [ 282.324206][ T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=74.43 [ 282.348315][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.356347][ T9] usb 3-1: Product: syz [ 282.380700][ T9] usb 3-1: Manufacturer: syz [ 282.385334][ T9] usb 3-1: SerialNumber: syz [ 282.408327][T11629] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 282.460075][ T5961] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 282.615870][ T43] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 282.635547][T11646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.636183][T11645] loop6: detected capacity change from 0 to 7 [ 282.653052][T11646] Invalid option length (3672) for dns_resolver key [ 282.670680][T11646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.681985][ T8764] Dev loop6: unable to read RDB block 7 [ 282.701080][ T8764] loop6: unable to read partition table [ 282.715251][ T8764] loop6: partition table beyond EOD, truncated [ 282.725215][T11645] Dev loop6: unable to read RDB block 7 [ 282.730829][T11645] loop6: unable to read partition table [ 282.736881][T11645] loop6: partition table beyond EOD, truncated [ 282.743168][T11645] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 282.815876][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 282.827148][ T43] usb 4-1: config 2 has an invalid interface number: 65 but max is 0 [ 282.861660][ T43] usb 4-1: config 2 has no interface number 0 [ 282.867817][ T43] usb 4-1: config 2 interface 65 has no altsetting 0 [ 282.890201][ T43] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 282.913058][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.933623][ T43] usb 4-1: Product: syz [ 282.939654][ T43] usb 4-1: Manufacturer: syz [ 282.947459][ T43] usb 4-1: SerialNumber: syz [ 282.959765][ T43] (null): radio-mr800 - initialization failed [ 282.969551][ T43] radio-mr800 4-1:2.65: probe with driver radio-mr800 failed with error -22 [ 282.978602][ T43] usbhid 4-1:2.65: couldn't find an input interrupt endpoint [ 283.000229][T11629] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 283.009501][T11652] loop3: detected capacity change from 0 to 7 [ 283.016097][T11629] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 283.017823][ T5873] Dev loop3: unable to read RDB block 7 [ 283.027385][T11629] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 283.033170][ T5873] loop3: unable to read partition table [ 283.038337][T11629] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 283.045980][ T5873] loop3: partition table beyond EOD, truncated [ 283.066597][T11652] Dev loop3: unable to read RDB block 7 [ 283.072296][T11652] loop3: unable to read partition table [ 283.078611][T11652] loop3: partition table beyond EOD, truncated [ 283.084873][T11652] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 283.161173][ T5908] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 283.192257][T11656] loop6: detected capacity change from 0 to 7 [ 283.199922][T11656] Dev loop6: unable to read RDB block 7 [ 283.207013][T11656] loop6: AHDI p3 p4 [ 283.210996][T11656] loop6: partition table partially beyond EOD, truncated [ 283.218602][T11656] loop6: p3 start 1886353253 is beyond EOD, truncated [ 283.550846][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.559715][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.572720][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 283.581277][ T5908] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 283.589015][ T5908] usb 2-1: can't read configurations, error -71 [ 284.701058][ T5908] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 284.840021][ T5908] usb 2-1: device descriptor read/64, error -71 [ 284.923957][ T9] imon_raw 3-1:6.60: IR endpoint missing [ 284.953323][ T9] usb 3-1: USB disconnect, device number 107 [ 284.963760][ T5908] usb usb2-port1: attempt power cycle [ 285.331920][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 285.342640][ T5908] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 285.364758][ T5908] usb 2-1: device descriptor read/8, error -71 [ 285.457863][ T5962] usb 4-1: USB disconnect, device number 107 [ 285.506204][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 285.513086][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 36096, setting to 64 [ 285.524762][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 285.537716][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 285.546892][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.554890][ T9] usb 3-1: Product: syz [ 285.559771][ T9] usb 3-1: Manufacturer: syz [ 285.564385][ T9] usb 3-1: SerialNumber: syz [ 285.571227][ T9] usb 3-1: config 0 descriptor?? [ 285.579184][ T9] usb 3-1: no audio or video endpoints found [ 285.620754][ T5908] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 285.642528][ T5908] usb 2-1: device descriptor read/8, error -71 [ 285.760356][ T5908] usb usb2-port1: unable to enumerate USB device [ 285.793352][ T43] usb 3-1: USB disconnect, device number 108 [ 286.326426][ T43] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 286.361201][T11681] loop3: detected capacity change from 0 to 7 [ 286.368230][T11681] Dev loop3: unable to read RDB block 7 [ 286.374155][T11681] loop3: unable to read partition table [ 286.381220][T11681] loop3: partition table beyond EOD, truncated [ 286.387513][T11681] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 286.447024][T11683] loop6: detected capacity change from 0 to 7 [ 286.454218][T11683] Dev loop6: unable to read RDB block 7 [ 286.459947][T11683] loop6: unable to read partition table [ 286.466080][T11683] loop6: partition table beyond EOD, truncated [ 286.472348][T11683] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 286.498453][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.510739][ T43] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 286.525896][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 286.537002][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.545283][ T43] usb 4-1: Product: syz [ 286.549740][ T43] usb 4-1: Manufacturer: syz [ 286.554767][ T43] usb 4-1: SerialNumber: syz [ 286.591326][T11687] loop6: detected capacity change from 0 to 7 [ 286.600699][T11687] Dev loop6: unable to read RDB block 7 [ 286.606429][T11687] loop6: AHDI p3 p4 [ 286.610388][T11687] loop6: partition table partially beyond EOD, truncated [ 286.618751][T11687] loop6: p3 start 1886353253 is beyond EOD, truncated [ 287.389968][T11701] loop3: detected capacity change from 0 to 7 [ 287.398973][T11701] Dev loop3: unable to read RDB block 7 [ 287.404567][T11701] loop3: unable to read partition table [ 287.411032][T11701] loop3: partition table beyond EOD, truncated [ 287.417434][T11701] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 287.566386][T11708] tipc: Enabling of bearer rejected, failed to enable media [ 287.642298][ T43] usb 4-1: USB disconnect, device number 108 [ 287.873188][T11728] tipc: Enabling of bearer rejected, failed to enable media [ 287.940359][T11730] comedi comedi4: bad chanlist[0]=0x24020006 chan=6 range length=2 [ 288.149425][T11741] loop3: detected capacity change from 0 to 7 [ 288.173840][ T5996] Dev loop3: unable to read RDB block 7 [ 288.187413][ T5996] loop3: unable to read partition table [ 288.208795][ T5996] loop3: partition table beyond EOD, truncated [ 288.222064][T11741] Dev loop3: unable to read RDB block 7 [ 288.238582][T11741] loop3: unable to read partition table [ 288.247500][T11741] loop3: partition table beyond EOD, truncated [ 288.265101][T11741] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 288.463579][T11747] loop6: detected capacity change from 0 to 7 [ 288.488592][ T5996] Dev loop6: unable to read RDB block 7 [ 288.494197][ T5996] loop6: AHDI p3 p4 [ 288.505109][ T5996] loop6: partition table partially beyond EOD, truncated [ 288.524801][ T5996] loop6: p3 start 1886353253 is beyond EOD, truncated [ 288.539180][T11747] Dev loop6: unable to read RDB block 7 [ 288.548044][T11747] loop6: AHDI p3 p4 [ 288.552671][T11747] loop6: partition table partially beyond EOD, truncated [ 288.563017][T11747] loop6: p3 start 1886353253 is beyond EOD, truncated [ 288.603368][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.627706][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.644835][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.660234][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.677632][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.758149][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.813023][T11759] tipc: Enabling of bearer rejected, failed to enable media [ 288.877405][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.956032][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.011364][ T5962] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 289.041601][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.062349][T11750] chnl_net:caif_netlink_parms(): no params data found [ 289.149998][ T5908] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 289.160480][T11750] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.167783][T11750] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.175896][T11750] bridge_slave_0: entered allmulticast mode [ 289.178021][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 289.185602][T11750] bridge_slave_0: entered promiscuous mode [ 289.193253][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.202667][T11750] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.208611][ T5962] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 289.225468][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.225471][T11750] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.229073][ T5962] usb 2-1: config 0 descriptor?? [ 289.243977][T11750] bridge_slave_1: entered allmulticast mode [ 289.255492][T11750] bridge_slave_1: entered promiscuous mode [ 289.288716][ T5908] usb 4-1: device descriptor read/64, error -71 [ 289.318062][T11750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.342581][T11750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.408885][T11750] team0: Port device team_slave_0 added [ 289.419684][T11750] team0: Port device team_slave_1 added [ 289.428911][ T49] bridge_slave_1: left allmulticast mode [ 289.435137][ T49] bridge_slave_1: left promiscuous mode [ 289.443039][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.457636][ T49] bridge_slave_0: left allmulticast mode [ 289.463917][ T49] bridge_slave_0: left promiscuous mode [ 289.469945][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.545334][ T5908] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 289.684465][ T5908] usb 4-1: device descriptor read/64, error -71 [ 289.741932][ T5962] uclogic 0003:2179:0077.001C: interface is invalid, ignoring [ 289.802358][ T5908] usb usb4-port1: attempt power cycle [ 289.861793][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.873301][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.885714][ T49] bond0 (unregistering): Released all slaves [ 289.923717][T11750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.931720][T11750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.959925][T11750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.987479][T11750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.997291][T11750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.023721][T11750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.040863][ T49] tipc: Left network mode [ 290.084471][T11750] hsr_slave_0: entered promiscuous mode [ 290.091672][T11750] hsr_slave_1: entered promiscuous mode [ 290.098212][T11750] debugfs: 'hsr0' already exists in 'hsr' [ 290.105728][T11750] Cannot create hsr debugfs directory [ 290.165577][ T5908] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 290.209035][ T5908] usb 4-1: device descriptor read/8, error -71 [ 290.486582][ T5908] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 290.557839][ T49] hsr_slave_0: left promiscuous mode [ 290.574336][ T5908] usb 4-1: device descriptor read/8, error -71 [ 290.580918][ T49] hsr_slave_1: left promiscuous mode [ 290.592393][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.609866][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.622298][T11787] netlink: 'syz.0.2348': attribute type 17 has an invalid length. [ 290.631914][T11787] netlink: 'syz.0.2348': attribute type 16 has an invalid length. [ 290.633117][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.642866][T11787] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2348'. [ 290.653928][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.690677][ T49] veth1_macvtap: left promiscuous mode [ 290.696867][ T49] veth0_macvtap: left promiscuous mode [ 290.705414][ T5908] usb usb4-port1: unable to enumerate USB device [ 290.712978][ T49] veth1_vlan: left promiscuous mode [ 290.718542][ T49] veth0_vlan: left promiscuous mode [ 290.871849][ T5185] Bluetooth: hci0: command tx timeout [ 291.119408][ T49] team0 (unregistering): Port device team_slave_1 removed [ 291.156149][ T49] team0 (unregistering): Port device team_slave_0 removed [ 291.629891][T11793] loop3: detected capacity change from 0 to 7 [ 291.649740][ T5996] Dev loop3: unable to read RDB block 7 [ 291.656354][ T5996] loop3: unable to read partition table [ 291.662308][ T5996] loop3: partition table beyond EOD, truncated [ 291.680246][T11793] Dev loop3: unable to read RDB block 7 [ 291.688592][T11793] loop3: unable to read partition table [ 291.694532][T11793] loop3: partition table beyond EOD, truncated [ 291.709943][T11793] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 291.971040][ T49] IPVS: stop unused estimator thread 0... [ 291.982487][T11750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.019243][ T5869] usb 2-1: USB disconnect, device number 116 [ 292.019647][T11750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.043678][T11750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.094731][T11750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.221394][T11818] loop6: detected capacity change from 0 to 7 [ 292.229175][T11818] Dev loop6: unable to read RDB block 7 [ 292.244791][T11818] loop6: AHDI p3 p4 [ 292.251504][T11818] loop6: partition table partially beyond EOD, truncated [ 292.265796][T11818] loop6: p3 start 1886353253 is beyond EOD, truncated [ 292.378249][T11750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.424268][T11822] loop3: detected capacity change from 0 to 7 [ 292.437421][T11822] Dev loop3: unable to read RDB block 7 [ 292.442534][T11750] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.448216][T11822] loop3: unable to read partition table [ 292.458959][T11822] loop3: partition table beyond EOD, truncated [ 292.466624][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.474012][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.478572][T11822] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 292.509852][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.517078][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.554513][ T5234] Dev loop3: unable to read RDB block 7 [ 292.560653][ T5234] loop3: unable to read partition table [ 292.574463][ T5234] loop3: partition table beyond EOD, truncated [ 292.821383][T11838] loop3: detected capacity change from 0 to 7 [ 292.837518][T11838] Dev loop3: unable to read RDB block 7 [ 292.851153][T11838] loop3: unable to read partition table [ 292.861046][T11838] loop3: partition table beyond EOD, truncated [ 292.882976][T11838] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 293.097448][ T5185] Bluetooth: hci0: command tx timeout [ 293.197024][T11750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.309713][ T981] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 293.358522][T11750] veth0_vlan: entered promiscuous mode [ 293.373289][T11750] veth1_vlan: entered promiscuous mode [ 293.442130][T11750] veth0_macvtap: entered promiscuous mode [ 293.465294][T11750] veth1_macvtap: entered promiscuous mode [ 293.474456][ T981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 293.484545][ T981] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 293.504673][ T981] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 293.534331][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.543741][T11750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.555960][ T981] usb 2-1: Product: syz [ 293.560176][ T981] usb 2-1: Manufacturer: syz [ 293.586393][T11750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.594348][ T981] usb 2-1: SerialNumber: syz [ 293.640751][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.666513][T11875] loop6: detected capacity change from 0 to 7 [ 293.676707][T11875] Dev loop6: unable to read RDB block 7 [ 293.682734][T11875] loop6: unable to read partition table [ 293.689977][ T801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.701004][T11875] loop6: partition table beyond EOD, truncated [ 293.707780][T11875] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 293.743278][ T801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.784467][ T801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.963835][ T801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.989970][ T801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.070882][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.080991][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.192922][T11891] tipc: Enabling of bearer rejected, failed to enable media [ 294.284987][T11894] tipc: Started in network mode [ 294.289890][T11894] tipc: Node identity , cluster identity 4711 [ 294.307882][T11894] tipc: Failed to set node id, please configure manually [ 294.317796][T11894] tipc: Enabling of bearer rejected, failed to enable media [ 294.498808][ T981] usb 2-1: reset high-speed USB device number 117 using dummy_hcd [ 294.672056][ T981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 294.695422][ T981] usb 2-1: device firmware changed [ 294.712714][ T981] usb 2-1: USB disconnect, device number 117 [ 294.738407][ T5962] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 294.817402][ T5869] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 294.914891][ T5962] usb 3-1: config 0 has an invalid interface number: 152 but max is 0 [ 294.923554][ T5962] usb 3-1: config 0 has no interface number 0 [ 294.930103][ T5962] usb 3-1: New USB device found, idVendor=31b2, idProduct=0011, bcdDevice=22.45 [ 294.939450][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.950082][ T5962] usb 3-1: config 0 descriptor?? [ 294.958940][ T5962] usb 3-1: unknown interface protocol 0xa5, assuming v1 [ 294.965915][ T5962] usb 3-1: cannot find UAC_HEADER [ 294.990098][ T5869] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 295.001178][ T5869] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 295.002074][ T5962] snd-usb-audio 3-1:0.152: probe with driver snd-usb-audio failed with error -22 [ 295.011810][ T5869] usb 4-1: can't read configurations, error -61 [ 295.159570][ T5869] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 295.181108][ T981] usb 3-1: USB disconnect, device number 109 [ 295.320843][ T5185] Bluetooth: hci0: command tx timeout [ 295.327011][ T5869] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 295.336619][ T5869] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 295.344232][ T5869] usb 4-1: can't read configurations, error -61 [ 295.350740][ T5869] usb usb4-port1: attempt power cycle [ 295.533818][ T5946] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 295.704903][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 295.713319][ T5946] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 295.722781][ T5869] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 295.730550][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.739047][ T5946] usb 2-1: Product: syz [ 295.743414][ T5946] usb 2-1: Manufacturer: syz [ 295.749756][ T5946] usb 2-1: SerialNumber: syz [ 295.761331][ T5869] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 295.772691][ T5869] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 295.784156][ T5869] usb 4-1: can't read configurations, error -61 [ 295.940288][ T5869] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 295.973147][ T5869] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 295.984444][ T5946] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 118 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 295.995470][ T5869] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 296.003133][ T5869] usb 4-1: can't read configurations, error -61 [ 296.015271][ T5869] usb usb4-port1: unable to enumerate USB device [ 296.210593][ T5869] usb 2-1: USB disconnect, device number 118 [ 296.233099][ T5869] usblp0: removed [ 296.830636][T11932] loop3: detected capacity change from 0 to 7 [ 296.840559][T11932] Dev loop3: unable to read RDB block 7 [ 296.846167][T11932] loop3: unable to read partition table [ 296.852650][T11932] loop3: partition table beyond EOD, truncated [ 296.861532][T11932] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 296.933237][T11936] tipc: Started in network mode [ 296.939557][T11936] tipc: Node identity , cluster identity 4711 [ 296.946027][T11936] tipc: Failed to set node id, please configure manually [ 296.954506][T11936] tipc: Enabling of bearer rejected, failed to enable media [ 297.057812][T11944] loop3: detected capacity change from 0 to 7 [ 297.067584][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2388'. [ 297.068468][T11944] Dev loop3: unable to read RDB block 7 [ 297.082779][T11944] loop3: unable to read partition table [ 297.090478][T11944] loop3: partition table beyond EOD, truncated [ 297.101298][T11944] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 297.125142][T11947] loop6: detected capacity change from 0 to 7 [ 297.136817][T11947] Dev loop6: unable to read RDB block 7 [ 297.148263][T11947] loop6: unable to read partition table [ 297.163478][T11947] loop6: partition table beyond EOD, truncated [ 297.179261][T11947] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 297.341055][ T5908] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 297.480166][ T5908] usb 3-1: device descriptor read/64, error -71 [ 297.544854][ T5185] Bluetooth: hci0: command tx timeout [ 297.736915][ T5908] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 297.876029][ T5908] usb 3-1: device descriptor read/64, error -71 [ 297.948775][T11972] loop6: detected capacity change from 0 to 7 [ 297.957036][T11972] Dev loop6: unable to read RDB block 7 [ 297.962778][T11972] loop6: AHDI p3 p4 [ 297.966695][T11972] loop6: partition table partially beyond EOD, truncated [ 297.974848][T11972] loop6: p3 start 1886353253 is beyond EOD, truncated [ 297.994755][ T5908] usb usb3-port1: attempt power cycle [ 298.211215][T11982] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 298.225757][T11982] netlink: 'syz.0.2404': attribute type 19 has an invalid length. [ 298.367681][ T5908] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 298.389838][ T5908] usb 3-1: device descriptor read/8, error -71 [ 298.415300][T11987] tipc: Enabling of bearer rejected, failed to enable media [ 298.517430][ T9] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 298.645739][ T5908] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 298.657123][ T9] usb 4-1: device descriptor read/64, error -71 [ 298.668755][ T5908] usb 3-1: device descriptor read/8, error -71 [ 298.742902][ T5962] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 298.784969][ T5908] usb usb3-port1: unable to enumerate USB device [ 298.904743][ T5962] usb 2-1: unable to get BOS descriptor or descriptor too short [ 298.915682][ T9] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 298.924324][ T5962] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 298.936909][ T5962] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 298.946279][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.954429][ T5962] usb 2-1: Product: syz [ 298.958703][ T5962] usb 2-1: Manufacturer: syz [ 298.963373][ T5962] usb 2-1: SerialNumber: syz [ 299.090058][ T9] usb 4-1: device descriptor read/64, error -71 [ 299.212768][ T9] usb usb4-port1: attempt power cycle [ 299.576070][ T9] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 299.598595][ T9] usb 4-1: device descriptor read/8, error -71 [ 299.865803][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 299.873730][ T5962] usb 2-1: reset high-speed USB device number 119 using dummy_hcd [ 299.897356][ T9] usb 4-1: device descriptor read/8, error -71 [ 300.015090][ T9] usb usb4-port1: unable to enumerate USB device [ 300.039256][ T5962] usb 2-1: unable to get BOS descriptor or descriptor too short [ 300.050769][ T5962] usb 2-1: device firmware changed [ 300.065670][ T5962] usb 2-1: USB disconnect, device number 119 [ 300.631341][T11998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 300.656270][ T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 300.827345][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 300.836667][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.848678][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 300.860290][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 300.871930][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 300.881605][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.899220][ T9] usb 3-1: config 0 descriptor?? [ 300.905959][T11996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 300.917595][ T9] hub 3-1:0.0: USB hub found [ 301.128456][ T9] hub 3-1:0.0: 8 ports detected [ 301.133962][ T9] hub 3-1:0.0: insufficient power available to use all downstream ports [ 301.514083][T12005] tipc: Enabling of bearer rejected, failed to enable media [ 301.575237][T12009] loop3: detected capacity change from 0 to 7 [ 301.583139][T12009] Dev loop3: unable to read RDB block 7 [ 301.588996][T12009] loop3: unable to read partition table [ 301.594966][T12009] loop3: partition table beyond EOD, truncated [ 301.603366][T12009] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 301.774947][T12018] loop6: detected capacity change from 0 to 7 [ 301.782467][T12018] Dev loop6: unable to read RDB block 7 [ 301.788325][T12018] loop6: unable to read partition table [ 301.794325][T12018] loop6: partition table beyond EOD, truncated [ 301.800736][T12018] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 301.881856][T12021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.890807][T12021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.905843][T12023] loop6: detected capacity change from 0 to 7 [ 301.914236][T12023] Dev loop6: unable to read RDB block 7 [ 301.920829][T12023] loop6: AHDI p3 p4 [ 301.924839][T12023] loop6: partition table partially beyond EOD, truncated [ 301.934941][T12023] loop6: p3 start 1886353253 is beyond EOD, truncated [ 301.963133][ T10] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 302.023030][ T9] usb 3-1: USB disconnect, device number 114 [ 302.153257][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 302.165832][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 302.186027][ T10] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 302.208894][ T10] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 302.217112][ T10] usb 2-1: config 8 has no interface number 0 [ 302.232033][ T10] usb 2-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 302.248945][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 302.259768][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.278691][ T10] usb 2-1: Product: syz [ 302.283217][ T10] usb 2-1: Manufacturer: syz [ 302.287829][ T10] usb 2-1: SerialNumber: syz [ 302.343496][T12038] loop3: detected capacity change from 0 to 7 [ 302.350968][T12038] Dev loop3: unable to read RDB block 7 [ 302.357191][T12038] loop3: unable to read partition table [ 302.363031][T12038] loop3: partition table beyond EOD, truncated [ 302.369856][T12038] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 302.453055][ T981] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 302.484158][T12042] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 302.551928][T12014] block device autoloading is deprecated and will be removed. [ 302.601722][ T10] sierra 2-1:8.158: Sierra USB modem converter detected [ 302.613396][ T10] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 302.619737][T12045] tipc: Enabling of bearer rejected, failed to enable media [ 302.630175][ T10] usb 2-1: USB disconnect, device number 120 [ 302.644722][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 302.647100][ T981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.660318][ T10] sierra 2-1:8.158: device disconnected [ 302.670594][ T981] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.684261][ T981] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 302.697484][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.720341][ T981] usb 4-1: config 0 descriptor?? [ 302.734506][ T981] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 302.746943][T12047] loop3: detected capacity change from 0 to 7 [ 302.757101][T12047] Dev loop3: unable to read RDB block 7 [ 302.763241][T12047] loop3: unable to read partition table [ 302.769224][T12047] loop3: partition table beyond EOD, truncated [ 302.775794][T12047] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 303.189888][T12053] loop6: detected capacity change from 0 to 7 [ 303.197744][T12053] Dev loop6: unable to read RDB block 7 [ 303.203777][T12053] loop6: unable to read partition table [ 303.209635][T12053] loop6: partition table beyond EOD, truncated [ 303.217204][T12053] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 303.299836][T12057] loop6: detected capacity change from 0 to 7 [ 303.306825][T12057] Dev loop6: unable to read RDB block 7 [ 303.312884][T12057] loop6: AHDI p3 p4 [ 303.316815][T12057] loop6: partition table partially beyond EOD, truncated [ 303.324203][T12057] loop6: p3 start 1886353253 is beyond EOD, truncated [ 303.544104][ T981] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 303.716010][ T981] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.727763][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 303.737568][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 303.750579][ T981] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 303.759741][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.770193][ T981] usb 2-1: config 0 descriptor?? [ 303.995796][ T981] usb 2-1: USB disconnect, device number 121 [ 304.012307][T12067] FAULT_INJECTION: forcing a failure. [ 304.012307][T12067] name failslab, interval 1, probability 0, space 0, times 0 [ 304.025202][T12067] CPU: 0 UID: 0 PID: 12067 Comm: syz.2.2438 Not tainted syzkaller #0 PREEMPT(full) [ 304.025222][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 304.025243][T12067] Call Trace: [ 304.025250][T12067] [ 304.025256][T12067] dump_stack_lvl+0x189/0x250 [ 304.025281][T12067] ? __pfx____ratelimit+0x10/0x10 [ 304.025296][T12067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.025315][T12067] ? __pfx__printk+0x10/0x10 [ 304.025337][T12067] ? __pfx___might_resched+0x10/0x10 [ 304.025357][T12067] should_fail_ex+0x414/0x560 [ 304.025380][T12067] should_failslab+0xa8/0x100 [ 304.025396][T12067] __kmalloc_noprof+0xcb/0x7f0 [ 304.025414][T12067] ? kfree+0x4d/0x6d0 [ 304.025429][T12067] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 304.025451][T12067] tomoyo_realpath_from_path+0xe3/0x5d0 [ 304.025468][T12067] ? tomoyo_domain+0xd9/0x130 [ 304.025489][T12067] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 304.025502][T12067] tomoyo_path_number_perm+0x1e8/0x5a0 [ 304.025518][T12067] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 304.025560][T12067] ? __fget_files+0x2a/0x420 [ 304.025579][T12067] ? __fget_files+0x3a0/0x420 [ 304.025593][T12067] ? __fget_files+0x2a/0x420 [ 304.025611][T12067] security_file_ioctl+0xcb/0x2d0 [ 304.025639][T12067] __se_sys_ioctl+0x47/0x170 [ 304.025654][T12067] do_syscall_64+0xfa/0xfa0 [ 304.025668][T12067] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.025682][T12067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.025695][T12067] ? clear_bhb_loop+0x60/0xb0 [ 304.025716][T12067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.025728][T12067] RIP: 0033:0x7f3e6658eec9 [ 304.025742][T12067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.025754][T12067] RSP: 002b:00007f3e674dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.025769][T12067] RAX: ffffffffffffffda RBX: 00007f3e667e5fa0 RCX: 00007f3e6658eec9 [ 304.025780][T12067] RDX: 0000200000000500 RSI: 00000000c0884113 RDI: 0000000000000005 [ 304.025790][T12067] RBP: 00007f3e674dc090 R08: 0000000000000000 R09: 0000000000000000 [ 304.025798][T12067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.025806][T12067] R13: 00007f3e667e6038 R14: 00007f3e667e5fa0 R15: 00007ffdfa7041e8 [ 304.025831][T12067] [ 304.025840][T12067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.570399][T12071] tipc: Enabling of bearer rejected, failed to enable media [ 304.956735][T12084] netlink: 'syz.2.2445': attribute type 2 has an invalid length. [ 304.962362][T12083] netlink: 'syz.2.2445': attribute type 2 has an invalid length. [ 305.425353][ T981] usb 4-1: USB disconnect, device number 121 [ 305.687789][T12101] kvm: kvm [12095]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 305.698196][T12101] kvm: kvm [12095]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 305.772560][T12109] loop6: detected capacity change from 0 to 7 [ 305.781294][ T5996] Dev loop6: unable to read RDB block 7 [ 305.787407][ T5996] loop6: AHDI p3 p4 [ 305.791605][ T5996] loop6: partition table partially beyond EOD, truncated [ 305.800704][ T5996] loop6: p3 start 1886353253 is beyond EOD, truncated [ 305.811962][T12109] Dev loop6: unable to read RDB block 7 [ 305.817550][T12109] loop6: AHDI p3 p4 [ 305.821890][T12109] loop6: partition table partially beyond EOD, truncated [ 305.829200][T12109] loop6: p3 start 1886353253 is beyond EOD, truncated [ 305.947248][T12114] tipc: Enabling of bearer rejected, failed to enable media [ 306.102618][T12120] tipc: Enabling of bearer rejected, failed to enable media [ 306.178250][ T981] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 306.253748][T12129] XFS (nbd2): no-recovery mounts must be read-only. [ 306.284227][T12130] loop6: detected capacity change from 0 to 7 [ 306.302108][T12130] Dev loop6: unable to read RDB block 7 [ 306.319796][T12130] loop6: unable to read partition table [ 306.326026][T12130] loop6: partition table beyond EOD, truncated [ 306.336848][T12130] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 306.358384][ T981] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 306.378620][ T981] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 306.400777][ T981] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 306.424591][ T981] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 306.434037][ T981] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 306.443777][ T981] usb 2-1: Manufacturer: syz [ 306.448661][ T981] usb 2-1: SerialNumber: syz [ 306.613662][ T5962] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 306.681142][T12112] TCP: TCP_TX_DELAY enabled [ 306.691106][T12112] netlink: 'syz.1.2452': attribute type 1 has an invalid length. [ 306.756427][ T981] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 306.764923][ T981] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input37 [ 306.773229][ T5962] usb 3-1: Using ep0 maxpacket: 8 [ 306.781251][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 306.788275][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 306.795255][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 306.802327][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 306.803319][ T5962] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 306.809300][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 306.819027][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.827128][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 306.833657][ T5962] usb 3-1: Product: syz [ 306.840457][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 306.845575][ T5962] usb 3-1: Manufacturer: syz [ 306.851992][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 306.857142][ T5962] usb 3-1: SerialNumber: syz [ 306.862824][ C1] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 306.881069][ T981] usb 2-1: USB disconnect, device number 122 [ 306.949630][ T5962] usb 3-1: config 0 descriptor?? [ 306.959763][T12141] loop6: detected capacity change from 0 to 7 [ 306.974076][ T5962] gspca_main: sq930x-2.14.0 probing 2770:930c [ 306.983562][ T5873] Dev loop6: unable to read RDB block 7 [ 306.995864][ T5873] loop6: unable to read partition table [ 307.003611][ T5873] loop6: partition table beyond EOD, truncated [ 307.014690][T12141] Dev loop6: unable to read RDB block 7 [ 307.027127][T12141] loop6: unable to read partition table [ 307.033497][T12141] loop6: partition table beyond EOD, truncated [ 307.040437][T12141] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 307.401528][T12135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.423041][T12135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.716695][T12179] tipc: Enabling of bearer rejected, failed to enable media [ 307.760292][T12181] tipc: Enabling of bearer rejected, failed to enable media [ 307.873385][ T5962] gspca_sq930x: ucbus_write failed -71 [ 308.120384][ T5962] gspca_sq930x: Sensor ov9630 not yet treated [ 308.126581][ T5962] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 308.160806][ T5962] usb 3-1: USB disconnect, device number 115 [ 308.268429][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.277332][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.286912][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.297894][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.305722][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.363520][ T801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.403830][T12192] loop3: detected capacity change from 0 to 7 [ 308.411987][T12192] Dev loop3: unable to read RDB block 7 [ 308.417703][T12192] loop3: unable to read partition table [ 308.440951][T12192] loop3: partition table beyond EOD, truncated [ 308.447342][T12192] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 308.510765][ T801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.621886][ T801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.676276][T12189] chnl_net:caif_netlink_parms(): no params data found [ 308.704395][ T801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.777060][T12189] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.784550][T12189] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.791799][T12189] bridge_slave_0: entered allmulticast mode [ 308.800042][ T5962] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 308.800056][T12189] bridge_slave_0: entered promiscuous mode [ 308.803178][T12189] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.821490][T12189] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.830354][T12189] bridge_slave_1: entered allmulticast mode [ 308.837840][T12189] bridge_slave_1: entered promiscuous mode [ 308.884780][T12189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.907707][T12189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.979090][ T5962] usb 2-1: unable to get BOS descriptor or descriptor too short [ 308.988457][ T5962] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 308.988593][T12189] team0: Port device team_slave_0 added [ 309.002396][ T5962] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 309.008883][T12189] team0: Port device team_slave_1 added [ 309.019793][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.022156][ T801] bridge_slave_1: left allmulticast mode [ 309.028146][ T5962] usb 2-1: Product: syz [ 309.036919][ T801] bridge_slave_1: left promiscuous mode [ 309.038100][ T5962] usb 2-1: Manufacturer: syz [ 309.044669][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.056021][ T5962] usb 2-1: SerialNumber: syz [ 309.321393][T12189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.328747][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.355388][T12189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.383412][T12189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.399507][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.434129][T12189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.449805][ T801] tipc: Disabling bearer [ 309.458315][ T801] tipc: Left network mode [ 309.564194][T12213] FAULT_INJECTION: forcing a failure. [ 309.564194][T12213] name failslab, interval 1, probability 0, space 0, times 0 [ 309.577665][T12213] CPU: 0 UID: 0 PID: 12213 Comm: syz.2.2491 Not tainted syzkaller #0 PREEMPT(full) [ 309.577689][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.577699][T12213] Call Trace: [ 309.577706][T12213] [ 309.577712][T12213] dump_stack_lvl+0x189/0x250 [ 309.577737][T12213] ? __pfx____ratelimit+0x10/0x10 [ 309.577752][T12213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.577771][T12213] ? __pfx__printk+0x10/0x10 [ 309.577793][T12213] ? __pfx___might_resched+0x10/0x10 [ 309.577809][T12213] ? fs_reclaim_acquire+0x7d/0x100 [ 309.577826][T12213] should_fail_ex+0x414/0x560 [ 309.577849][T12213] should_failslab+0xa8/0x100 [ 309.577865][T12213] kmem_cache_alloc_noprof+0x74/0x6e0 [ 309.577884][T12213] ? getname_flags+0xb8/0x540 [ 309.577905][T12213] getname_flags+0xb8/0x540 [ 309.577924][T12213] do_sys_openat2+0xbc/0x1c0 [ 309.577944][T12213] ? __pfx_do_sys_openat2+0x10/0x10 [ 309.577963][T12213] ? ksys_write+0x22a/0x250 [ 309.577979][T12213] ? __pfx_ksys_write+0x10/0x10 [ 309.577995][T12213] __x64_sys_open+0x11e/0x150 [ 309.578016][T12213] do_syscall_64+0xfa/0xfa0 [ 309.578031][T12213] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.578045][T12213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.578059][T12213] ? clear_bhb_loop+0x60/0xb0 [ 309.578075][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.578088][T12213] RIP: 0033:0x7f3e6658eec9 [ 309.578101][T12213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.578113][T12213] RSP: 002b:00007f3e674dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 309.578129][T12213] RAX: ffffffffffffffda RBX: 00007f3e667e5fa0 RCX: 00007f3e6658eec9 [ 309.578139][T12213] RDX: 0000000000000182 RSI: 0000000000006040 RDI: 00002000000000c0 [ 309.578148][T12213] RBP: 00007f3e674dc090 R08: 0000000000000000 R09: 0000000000000000 [ 309.578156][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.578165][T12213] R13: 00007f3e667e6038 R14: 00007f3e667e5fa0 R15: 00007ffdfa7041e8 [ 309.578188][T12213] [ 309.866046][T12189] hsr_slave_0: entered promiscuous mode [ 309.882150][T12189] hsr_slave_1: entered promiscuous mode [ 309.889379][T12189] debugfs: 'hsr0' already exists in 'hsr' [ 309.895145][T12189] Cannot create hsr debugfs directory [ 310.026779][ T801] hsr_slave_0: left promiscuous mode [ 310.042976][ T801] hsr_slave_1: left promiscuous mode [ 310.050421][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.058412][ T801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.067187][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.074665][ T801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.077398][ T5962] usb 2-1: reset high-speed USB device number 123 using dummy_hcd [ 310.110993][ T801] veth1_macvtap: left promiscuous mode [ 310.116761][ T801] veth0_macvtap: left promiscuous mode [ 310.123138][ T801] veth1_vlan: left promiscuous mode [ 310.128433][ T801] veth0_vlan: left promiscuous mode [ 310.258327][ T5962] usb 2-1: device firmware changed [ 310.281995][ T5962] usb 2-1: USB disconnect, device number 123 [ 310.445231][ T5962] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 310.508113][ T801] team0 (unregistering): Port device team_slave_1 removed [ 310.543284][ T801] team0 (unregistering): Port device team_slave_0 removed [ 310.550592][ T5185] Bluetooth: hci1: command tx timeout [ 310.617380][ T5962] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 310.631005][ T5962] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 310.640377][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.648482][ T5962] usb 2-1: Product: syz [ 310.652783][ T5962] usb 2-1: Manufacturer: syz [ 310.657487][ T5962] usb 2-1: SerialNumber: syz [ 310.915521][T12233] FAULT_INJECTION: forcing a failure. [ 310.915521][T12233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.928814][T12233] CPU: 0 UID: 0 PID: 12233 Comm: syz.0.2496 Not tainted syzkaller #0 PREEMPT(full) [ 310.928837][T12233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.928848][T12233] Call Trace: [ 310.928854][T12233] [ 310.928861][T12233] dump_stack_lvl+0x189/0x250 [ 310.928888][T12233] ? __pfx____ratelimit+0x10/0x10 [ 310.928904][T12233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.928924][T12233] ? __pfx__printk+0x10/0x10 [ 310.928949][T12233] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.928973][T12233] should_fail_ex+0x414/0x560 [ 310.929000][T12233] _copy_to_user+0x31/0xb0 [ 310.929021][T12233] snd_pcm_sw_params_user+0xf4/0x170 [ 310.929039][T12233] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 310.929057][T12233] ? __pfx_snd_pcm_sw_params_user+0x10/0x10 [ 310.929097][T12233] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 310.929117][T12233] snd_pcm_ioctl+0x8b/0xb0 [ 310.929139][T12233] __se_sys_ioctl+0xfc/0x170 [ 310.929157][T12233] do_syscall_64+0xfa/0xfa0 [ 310.929174][T12233] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.929191][T12233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.929206][T12233] ? clear_bhb_loop+0x60/0xb0 [ 310.929224][T12233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.929239][T12233] RIP: 0033:0x7f2c76d8eec9 [ 310.929255][T12233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.929266][T12233] RSP: 002b:00007f2c77cbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.929289][T12233] RAX: ffffffffffffffda RBX: 00007f2c76fe5fa0 RCX: 00007f2c76d8eec9 [ 310.929300][T12233] RDX: 0000200000000500 RSI: 00000000c0884113 RDI: 0000000000000005 [ 310.929310][T12233] RBP: 00007f2c77cbb090 R08: 0000000000000000 R09: 0000000000000000 [ 310.929318][T12233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.929327][T12233] R13: 00007f2c76fe6038 R14: 00007f2c76fe5fa0 R15: 00007fff4656b408 [ 310.929353][T12233] [ 311.791825][ T801] IPVS: stop unused estimator thread 0... [ 311.892408][T12250] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd0": -EINTR [ 311.919443][ T5962] usb 2-1: USB disconnect, device number 124 [ 312.045036][ T5908] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 312.222243][ T5908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 312.246848][ T5908] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 312.277915][ T5908] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 312.290252][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.301775][ T5908] usb 3-1: Product: syz [ 312.306106][ T5908] usb 3-1: Manufacturer: syz [ 312.311012][ T5908] usb 3-1: SerialNumber: syz [ 312.318184][T12189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 312.342110][T12189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.361806][T12189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.391941][T12189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 312.551047][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.580117][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.584111][T12189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.601748][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.623766][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.649715][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.661112][T12189] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.695167][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.712665][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.719897][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.763961][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.771159][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.786178][ T5185] Bluetooth: hci1: command tx timeout [ 313.123679][T12309] tipc: Enabling of bearer rejected, failed to enable media [ 313.200390][T12313] FAULT_INJECTION: forcing a failure. [ 313.200390][T12313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.207314][T12189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.245206][T12313] CPU: 1 UID: 0 PID: 12313 Comm: syz.0.2511 Not tainted syzkaller #0 PREEMPT(full) [ 313.245228][T12313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 313.245239][T12313] Call Trace: [ 313.245246][T12313] [ 313.245255][T12313] dump_stack_lvl+0x189/0x250 [ 313.245282][T12313] ? __pfx____ratelimit+0x10/0x10 [ 313.245300][T12313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.245323][T12313] ? __pfx__printk+0x10/0x10 [ 313.245357][T12313] should_fail_ex+0x414/0x560 [ 313.245386][T12313] _copy_to_user+0x31/0xb0 [ 313.245409][T12313] simple_read_from_buffer+0xe1/0x170 [ 313.245434][T12313] proc_fail_nth_read+0x1b3/0x220 [ 313.245461][T12313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.245486][T12313] ? rw_verify_area+0x2a6/0x4d0 [ 313.245502][T12313] ? __lock_acquire+0xab9/0xd20 [ 313.245519][T12313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.245546][T12313] vfs_read+0x200/0xa30 [ 313.245562][T12313] ? fdget_pos+0x247/0x320 [ 313.245584][T12313] ? __pfx___mutex_lock+0x10/0x10 [ 313.245604][T12313] ? __pfx_vfs_read+0x10/0x10 [ 313.245622][T12313] ? __fget_files+0x2a/0x420 [ 313.245646][T12313] ? __fget_files+0x3a0/0x420 [ 313.245664][T12313] ? __fget_files+0x2a/0x420 [ 313.245692][T12313] ksys_read+0x145/0x250 [ 313.245712][T12313] ? __pfx_ksys_read+0x10/0x10 [ 313.245732][T12313] ? do_syscall_64+0xbe/0xfa0 [ 313.245754][T12313] do_syscall_64+0xfa/0xfa0 [ 313.245769][T12313] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.245786][T12313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.245802][T12313] ? clear_bhb_loop+0x60/0xb0 [ 313.245831][T12313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.245848][T12313] RIP: 0033:0x7f2c76d8d8dc [ 313.245864][T12313] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 313.245879][T12313] RSP: 002b:00007f2c77cbb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.245897][T12313] RAX: ffffffffffffffda RBX: 00007f2c76fe5fa0 RCX: 00007f2c76d8d8dc [ 313.245909][T12313] RDX: 000000000000000f RSI: 00007f2c77cbb0a0 RDI: 0000000000000006 [ 313.245920][T12313] RBP: 00007f2c77cbb090 R08: 0000000000000000 R09: 0000000000000000 [ 313.245932][T12313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.245941][T12313] R13: 00007f2c76fe6038 R14: 00007f2c76fe5fa0 R15: 00007fff4656b408 [ 313.245970][T12313] [ 313.494679][T12189] veth0_vlan: entered promiscuous mode [ 313.549060][T12189] veth1_vlan: entered promiscuous mode [ 313.583776][T12319] FAULT_INJECTION: forcing a failure. [ 313.583776][T12319] name failslab, interval 1, probability 0, space 0, times 0 [ 313.599490][T12189] veth0_macvtap: entered promiscuous mode [ 313.613244][T12189] veth1_macvtap: entered promiscuous mode [ 313.622119][T12319] CPU: 0 UID: 0 PID: 12319 Comm: syz.1.2513 Not tainted syzkaller #0 PREEMPT(full) [ 313.622143][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 313.622154][T12319] Call Trace: [ 313.622161][T12319] [ 313.622169][T12319] dump_stack_lvl+0x189/0x250 [ 313.622198][T12319] ? __pfx____ratelimit+0x10/0x10 [ 313.622216][T12319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.622240][T12319] ? __pfx__printk+0x10/0x10 [ 313.622264][T12319] ? __pfx___might_resched+0x10/0x10 [ 313.622283][T12319] ? fs_reclaim_acquire+0x7d/0x100 [ 313.622303][T12319] should_fail_ex+0x414/0x560 [ 313.622332][T12319] should_failslab+0xa8/0x100 [ 313.622353][T12319] kmem_cache_alloc_noprof+0x74/0x6e0 [ 313.622376][T12319] ? alloc_empty_file+0x55/0x1d0 [ 313.622398][T12319] ? kernel_text_address+0xa5/0xe0 [ 313.622419][T12319] alloc_empty_file+0x55/0x1d0 [ 313.622441][T12319] path_openat+0x107/0x3830 [ 313.622466][T12319] ? stack_trace_save+0x9c/0xe0 [ 313.622493][T12319] ? stack_depot_save_flags+0x40/0x860 [ 313.622529][T12319] ? kasan_save_track+0x4f/0x80 [ 313.622552][T12319] ? getname_flags+0xb8/0x540 [ 313.622570][T12319] ? do_sys_openat2+0xbc/0x1c0 [ 313.622589][T12319] ? __x64_sys_open+0x11e/0x150 [ 313.622610][T12319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.622627][T12319] ? __pfx_path_openat+0x10/0x10 [ 313.622660][T12319] do_filp_open+0x1fa/0x410 [ 313.622675][T12319] ? __lock_acquire+0xab9/0xd20 [ 313.622695][T12319] ? __pfx_do_filp_open+0x10/0x10 [ 313.622731][T12319] ? _raw_spin_unlock+0x28/0x50 [ 313.622750][T12319] ? alloc_fd+0x64c/0x6c0 [ 313.622780][T12319] do_sys_openat2+0x121/0x1c0 [ 313.622802][T12319] ? __pfx_do_sys_openat2+0x10/0x10 [ 313.622824][T12319] ? ksys_write+0x22a/0x250 [ 313.622843][T12319] ? __pfx_ksys_write+0x10/0x10 [ 313.622863][T12319] __x64_sys_open+0x11e/0x150 [ 313.622889][T12319] do_syscall_64+0xfa/0xfa0 [ 313.622907][T12319] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.622926][T12319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.622942][T12319] ? clear_bhb_loop+0x60/0xb0 [ 313.622961][T12319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.622977][T12319] RIP: 0033:0x7f33bb38eec9 [ 313.622992][T12319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.623006][T12319] RSP: 002b:00007f33b95f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 313.623035][T12319] RAX: ffffffffffffffda RBX: 00007f33bb5e5fa0 RCX: 00007f33bb38eec9 [ 313.623049][T12319] RDX: 0000000000000182 RSI: 0000000000006040 RDI: 00002000000000c0 [ 313.623060][T12319] RBP: 00007f33b95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.623070][T12319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.623079][T12319] R13: 00007f33bb5e6038 R14: 00007f33bb5e5fa0 R15: 00007ffe1386bdc8 [ 313.623108][T12319] [ 313.642942][T12189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.739991][ T5908] usb 3-1: USB disconnect, device number 116 [ 313.746971][T12189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.920631][T12325] loop6: detected capacity change from 0 to 7 [ 313.966630][ T5995] Dev loop6: unable to read RDB block 7 [ 313.981326][ T5995] loop6: AHDI p3 p4 [ 313.999286][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.002011][ T5995] loop6: partition table partially beyond EOD, truncated [ 314.009795][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.036731][ T5995] loop6: p3 start 1886353253 is beyond EOD, truncated [ 314.046110][T12325] Dev loop6: unable to read RDB block 7 [ 314.051719][T12325] loop6: AHDI p3 p4 [ 314.066519][T12325] loop6: partition table partially beyond EOD, truncated [ 314.074816][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.079621][T12325] loop6: p3 start 1886353253 is beyond EOD, truncated [ 314.136759][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.203395][T12334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.245060][T12334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.290707][ T981] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 314.379553][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.398408][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.472564][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 314.479841][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.483721][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.509946][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.519769][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.575980][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.620293][ T981] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.640345][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.675967][ T981] usb 2-1: config 0 descriptor?? [ 314.996809][ T5185] Bluetooth: hci1: command tx timeout [ 315.155064][T12366] loop3: detected capacity change from 0 to 7 [ 315.164172][T12366] Dev loop3: unable to read RDB block 7 [ 315.170978][T12366] loop3: unable to read partition table [ 315.177112][T12366] loop3: partition table beyond EOD, truncated [ 315.185372][T12366] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 315.348657][ T981] usbhid 2-1:0.0: can't add hid device: -71 [ 315.358262][ T981] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 315.371872][ T981] usb 2-1: USB disconnect, device number 125 [ 315.542180][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.549930][T12376] IPv6: NLM_F_CREATE should be set when creating new route [ 315.557264][T12376] IPv6: NLM_F_CREATE should be set when creating new route [ 315.564538][T12376] IPv6: NLM_F_CREATE should be set when creating new route [ 315.636371][T12381] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 315.671104][T12383] tipc: Started in network mode [ 315.676220][T12383] tipc: Node identity , cluster identity 4711 [ 315.684303][T12383] tipc: Failed to set node id, please configure manually [ 315.693431][T12383] tipc: Enabling of bearer rejected, failed to enable media [ 315.733164][T12385] loop6: detected capacity change from 0 to 7 [ 315.740541][T12385] Dev loop6: unable to read RDB block 7 [ 315.746235][T12385] loop6: AHDI p3 p4 [ 315.750383][T12385] loop6: partition table partially beyond EOD, truncated [ 315.758341][T12385] loop6: p3 start 1886353253 is beyond EOD, truncated [ 315.941536][T12391] loop6: detected capacity change from 0 to 7 [ 315.950067][T12391] Dev loop6: unable to read RDB block 7 [ 315.955692][T12391] loop6: unable to read partition table [ 315.964897][T12391] loop6: partition table beyond EOD, truncated [ 315.971867][T12391] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 316.026943][T12395] loop3: detected capacity change from 0 to 7 [ 316.035263][T12395] Dev loop3: unable to read RDB block 7 [ 316.041002][T12395] loop3: unable to read partition table [ 316.050198][T12395] loop3: partition table beyond EOD, truncated [ 316.058436][T12395] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 316.185825][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 316.185841][ T30] audit: type=1326 audit(1758973211.966:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.3.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ec38eec9 code=0x7fc00000 [ 316.231829][ T981] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 316.398143][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 316.405288][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.417036][ T981] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 316.426791][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.436884][ T981] usb 2-1: config 0 descriptor?? [ 316.504367][ T5908] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 316.664779][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 316.671686][ T5908] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 316.680386][ T5908] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 316.689236][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 316.698798][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 316.709167][ T5908] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 316.719296][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 316.732348][ T5908] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 316.741477][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.752217][ T5908] usb 4-1: config 0 descriptor?? [ 316.880331][ T981] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 316.980019][ T5908] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 317.045610][T12401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2537'. [ 317.056744][T12401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2537'. [ 317.067601][T12401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2537'. [ 317.077054][T12401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2537'. [ 317.086494][T12401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2537'. [ 317.098779][T12401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2537'. [ 317.108260][T12401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2537'. [ 317.118422][T12401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2537'. [ 317.127868][T12401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2537'. [ 317.137621][T12401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2537'. [ 317.196149][ T981] usb 4-1: USB disconnect, device number 122 [ 317.207039][ T981] usblp0: removed [ 317.231623][ T5185] Bluetooth: hci1: command tx timeout [ 317.306440][ T5908] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 317.315658][T12393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.324519][T12393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.333668][ T43] usb 2-1: USB disconnect, device number 126 [ 317.471848][ T5908] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 317.482984][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.493043][ T5908] usb 3-1: Product: syz [ 317.497365][ T5908] usb 3-1: Manufacturer: syz [ 317.503780][ T5908] usb 3-1: SerialNumber: syz [ 317.511221][ T5908] usb 3-1: config 0 descriptor?? [ 317.548896][T12408] loop3: detected capacity change from 0 to 7 [ 317.556424][T12408] Dev loop3: unable to read RDB block 7 [ 317.562035][T12408] loop3: unable to read partition table [ 317.568152][T12408] loop3: partition table beyond EOD, truncated [ 317.576184][T12408] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 317.634838][T12410] tipc: Enabling of bearer rejected, failed to enable media [ 317.684367][T12412] loop6: detected capacity change from 0 to 7 [ 317.692086][T12412] Dev loop6: unable to read RDB block 7 [ 317.699587][T12412] loop6: AHDI p3 p4 [ 317.703894][T12412] loop6: partition table partially beyond EOD, truncated [ 317.711098][T12412] loop6: p3 start 1886353253 is beyond EOD, truncated [ 317.732414][ T5908] usb 3-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 317.742538][ T5908] f81604 3-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 317.761313][ T5908] f81604 3-1:0.0: probe with driver f81604 failed with error -121 [ 317.953712][T12426] fuse: Unknown parameter 'default_pe2missions' [ 318.108981][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.117674][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.134742][ T43] usb 3-1: USB disconnect, device number 117 [ 318.206847][T12437] tipc: Started in network mode [ 318.211831][T12437] tipc: Node identity , cluster identity 4711 [ 318.219067][T12437] tipc: Failed to set node id, please configure manually [ 318.226853][T12437] tipc: Enabling of bearer rejected, failed to enable media [ 318.236743][ T5908] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 318.390887][T12443] loop3: detected capacity change from 0 to 7 [ 318.402635][ T5996] Dev loop3: unable to read RDB block 7 [ 318.409327][ T5996] loop3: unable to read partition table [ 318.412471][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 318.415245][ T5996] loop3: partition table beyond EOD, truncated [ 318.433642][T12443] Dev loop3: unable to read RDB block 7 [ 318.435575][ T5908] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 318.439350][T12443] loop3: unable to read partition table [ 318.458962][T12443] loop3: partition table beyond EOD, truncated [ 318.460956][ T5908] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 318.467701][T12443] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 318.477123][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.492420][ T5908] usb 2-1: Product: syz [ 318.496743][ T5908] usb 2-1: Manufacturer: syz [ 318.501354][ T5908] usb 2-1: SerialNumber: syz [ 318.543875][T12447] tipc: Started in network mode [ 318.549315][T12447] tipc: Node identity , cluster identity 4711 [ 318.555433][T12447] tipc: Failed to set node id, please configure manually [ 318.563714][T12447] tipc: Enabling of bearer rejected, failed to enable media [ 318.590343][T12449] loop6: detected capacity change from 0 to 7 [ 318.598183][T12449] Dev loop6: unable to read RDB block 7 [ 318.603994][T12449] loop6: AHDI p3 p4 [ 318.608131][T12449] loop6: partition table partially beyond EOD, truncated [ 318.615942][T12449] loop6: p3 start 1886353253 is beyond EOD, truncated [ 318.633933][ T43] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 318.805557][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 318.812051][ T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 318.823357][ T43] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 318.836588][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 318.843210][ T43] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 318.853247][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.863375][ T43] usb 3-1: config 0 descriptor?? [ 319.038803][ T981] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 319.209984][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 319.216802][ T981] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.225464][ T981] usb 4-1: config 7 has an invalid interface number: 169 but max is 0 [ 319.235136][ T981] usb 4-1: config 7 has no interface number 0 [ 319.243757][ T981] usb 4-1: New USB device found, idVendor=04c5, idProduct=1330, bcdDevice=79.99 [ 319.252881][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.260901][ T981] usb 4-1: Product: syz [ 319.265159][ T981] usb 4-1: Manufacturer: syz [ 319.269870][ T981] usb 4-1: SerialNumber: syz [ 319.304215][ T43] uclogic 0003:5543:0522.001E: item fetching failed at offset 0/4 [ 319.312825][ T43] uclogic 0003:5543:0522.001E: parse failed [ 319.318898][ T43] uclogic 0003:5543:0522.001E: probe with driver uclogic failed with error -22 [ 319.391824][ T5908] usb 2-1: reset high-speed USB device number 127 using dummy_hcd [ 319.400932][ T5908] usb 2-1: device reset changed ep0 maxpacket size! [ 319.414013][ T5908] usb 2-1: USB disconnect, device number 127 [ 319.494252][T12457] fuse: Unknown parameter 'f' [ 319.513960][ T981] usb 4-1: USB disconnect, device number 123 [ 319.529629][ T43] usb 3-1: USB disconnect, device number 118 [ 319.563130][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 319.723220][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 319.730007][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 319.739228][ T5908] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 319.749092][ T5908] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 319.762195][ T5908] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.771288][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.779662][ T5908] usb 2-1: Product: syz [ 319.783842][ T5908] usb 2-1: Manufacturer: syz [ 319.788719][ T5908] usb 2-1: SerialNumber: syz [ 320.023530][ T5908] cdc_ncm 2-1:1.0: bind() failure [ 320.032311][ T5908] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 320.039398][ T5908] cdc_ncm 2-1:1.1: bind() failure [ 320.048003][ T5908] usb 2-1: USB disconnect, device number 2 [ 320.222891][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.251986][T12468] tipc: Started in network mode [ 320.257035][T12468] tipc: Node identity , cluster identity 4711 [ 320.263294][T12468] tipc: Failed to set node id, please configure manually [ 320.272198][T12468] tipc: Enabling of bearer rejected, failed to enable media [ 320.325219][T12472] loop3: detected capacity change from 0 to 7 [ 320.334415][T12472] Dev loop3: unable to read RDB block 7 [ 320.340042][T12472] loop3: unable to read partition table [ 320.348468][T12472] loop3: partition table beyond EOD, truncated [ 320.355627][T12472] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 320.660618][ T5185] Bluetooth: hci3: unexpected event for opcode 0x0002 [ 320.661119][T12488] PKCS8: Unsupported PKCS#8 version [ 320.677109][T12488] fuse: Bad value for 'fd' [ 320.806987][T12497] tipc: Started in network mode [ 320.811963][T12497] tipc: Node identity , cluster identity 4711 [ 320.818473][T12497] tipc: Failed to set node id, please configure manually [ 320.826119][T12497] tipc: Enabling of bearer rejected, failed to enable media [ 320.893159][T12499] autofs: Unknown parameter '/dev/kvm' [ 320.927665][T12501] loop3: detected capacity change from 0 to 7 [ 320.935879][T12501] Dev loop3: unable to read RDB block 7 [ 320.941753][T12501] loop3: unable to read partition table [ 320.948207][T12501] loop3: partition table beyond EOD, truncated [ 320.963624][T12501] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 321.039486][T12506] tipc: Started in network mode [ 321.055310][T12506] tipc: Node identity 0000000000000000000000002200004, cluster identity 4711 [ 321.071689][T12506] tipc: Enabling of bearer rejected, failed to enable media [ 321.349187][T12523] tipc: Enabling of bearer rejected, failed to enable media [ 321.392524][ T43] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 321.455616][ T981] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 321.573496][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 321.580303][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 321.592116][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 321.605992][ T43] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 321.615087][ T43] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 321.623628][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 321.628851][ T43] usb 3-1: Product: syz [ 321.633032][ T43] usb 3-1: Manufacturer: syz [ 321.637924][ T43] usb 3-1: SerialNumber: syz [ 321.645231][ T981] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.657827][ T43] usb 3-1: config 0 descriptor?? [ 321.661982][ T9] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 321.666504][ T981] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 321.683360][ T981] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 321.691984][ T981] usb 2-1: Manufacturer: syz [ 321.698161][ T43] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 321.715964][ T981] usb 2-1: config 0 descriptor?? [ 321.833083][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 321.842313][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.850579][ T9] usb 4-1: Product: syz [ 321.854831][ T9] usb 4-1: Manufacturer: syz [ 321.859741][ T9] usb 4-1: SerialNumber: syz [ 321.870482][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 321.897408][T12513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.906509][T12513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.915775][ T5962] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 321.915825][T12513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.933941][T12513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.947534][T12513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.953169][ T981] usb 2-1: USB disconnect, device number 3 [ 321.959071][T12513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.977552][T12513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.991230][T12513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.006418][T12513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.018188][T12513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.047286][ T43] usb 3-1: USB disconnect, device number 119 [ 322.053946][ T2930] usb 3-1: Failed to submit usb control message: -71 [ 322.070937][ T2930] usb 3-1: unable to send the bmi data to the device: -71 [ 322.081028][ T2930] usb 3-1: unable to get target info from device [ 322.087900][ T2930] usb 3-1: could not get target info (-71) [ 322.094378][ T2930] usb 3-1: could not probe fw (-71) [ 322.198468][T12534] loop3: detected capacity change from 0 to 7 [ 322.206167][T12534] Dev loop3: unable to read RDB block 7 [ 322.211785][T12534] loop3: unable to read partition table [ 322.217969][T12534] loop3: partition table beyond EOD, truncated [ 322.224185][T12534] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 322.538676][T12540] loop3: detected capacity change from 0 to 7 [ 322.546028][T12540] Dev loop3: unable to read RDB block 7 [ 322.552197][T12540] loop3: unable to read partition table [ 322.558859][T12540] loop3: partition table beyond EOD, truncated [ 322.565167][T12540] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 322.632769][ T9] usb 4-1: USB disconnect, device number 124 [ 322.753150][T12546] ieee802154 phy0 wpan0: encryption failed: -126 [ 322.910032][ T5908] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 323.038256][ T981] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 323.070351][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 323.076948][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.087974][ T5908] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 323.097088][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.107055][ T5908] usb 2-1: config 0 descriptor?? [ 323.210126][ T981] usb 3-1: Using ep0 maxpacket: 16 [ 323.217007][ T981] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.228352][ T981] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.238145][ T981] usb 3-1: config 0 interface 0 has no altsetting 0 [ 323.244894][ T981] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 323.254027][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.264450][ T981] usb 3-1: config 0 descriptor?? [ 323.306419][ T5962] usb 4-1: Service connection timeout for: 256 [ 323.312718][ T5962] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 323.322268][ T5962] ath9k_htc: Failed to initialize the device [ 323.328854][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 323.352634][ T5908] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 323.450578][ T5908] usb 2-1: USB disconnect, device number 4 [ 323.488846][T12549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.497688][T12549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.658501][ T9] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 323.728207][ T981] hid_parser_main: 50 callbacks suppressed [ 323.728228][ T981] kye 0003:0458:0138.0020: unknown main item tag 0x0 [ 323.740863][ T981] kye 0003:0458:0138.0020: unknown main item tag 0x0 [ 323.747611][ T981] kye 0003:0458:0138.0020: unknown main item tag 0x0 [ 323.754507][ T981] kye 0003:0458:0138.0020: unknown main item tag 0x0 [ 323.761297][ T981] kye 0003:0458:0138.0020: unknown main item tag 0x0 [ 323.768040][ T981] kye 0003:0458:0138.0020: unknown main item tag 0x0 [ 323.774744][ T981] kye 0003:0458:0138.0020: unknown main item tag 0x0 [ 323.781475][ T981] kye 0003:0458:0138.0020: unknown main item tag 0x0 [ 323.788252][ T981] kye 0003:0458:0138.0020: unknown main item tag 0x0 [ 323.794955][ T981] kye 0003:0458:0138.0020: unknown main item tag 0x0 [ 323.803264][ T981] kye 0003:0458:0138.0020: unexpected long global item [ 323.810713][ T981] kye 0003:0458:0138.0020: parse failed [ 323.816340][ T981] kye 0003:0458:0138.0020: probe with driver kye failed with error -22 [ 323.821246][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 323.834996][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 323.844759][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.854616][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 323.866664][ T9] usb 4-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 323.875860][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.884018][ T9] usb 4-1: Product: syz [ 323.888297][ T9] usb 4-1: Manufacturer: syz [ 323.892882][ T9] usb 4-1: SerialNumber: syz [ 323.900576][ T9] usb 4-1: config 0 descriptor?? [ 323.907969][ T9] ti_usb_3410_5052 4-1:0.0: TI USB 3410 1 port adapter converter detected [ 323.919323][ T9] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 323.944638][ T9] usb 3-1: USB disconnect, device number 120 [ 324.516445][T12564] tipc: Started in network mode [ 324.521500][T12564] tipc: Node identity , cluster identity 4711 [ 324.527895][T12564] tipc: Failed to set node id, please configure manually [ 324.535006][T12564] tipc: Enabling of bearer rejected, failed to enable media [ 324.582649][T12566] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 324.609330][T12566] CIFS mount error: No usable UNC path provided in device string! [ 324.609330][T12566] [ 324.620172][T12566] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 324.866907][ T981] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 325.011723][T12571] __nla_validate_parse: 57 callbacks suppressed [ 325.011739][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2609'. [ 325.038002][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 325.044852][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.056122][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.066072][ T981] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 325.077024][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.090995][ T981] usb 3-1: config 0 descriptor?? [ 325.435199][ T43] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 325.608423][ T43] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 325.616790][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 325.627595][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 325.637870][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 325.649490][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 325.670369][ T43] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 325.678025][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 325.688655][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 325.707851][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 325.719869][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 325.731464][ T43] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 325.740915][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 325.751430][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 325.761784][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 325.773527][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 325.787883][ T43] usb 2-1: string descriptor 0 read error: -22 [ 325.794483][ T43] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 325.806260][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.809461][T12586] loop6: detected capacity change from 0 to 7 [ 325.822268][T12586] Dev loop6: unable to read RDB block 7 [ 325.827872][T12586] loop6: unable to read partition table [ 325.833036][ T43] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 325.835173][T12586] loop6: partition table beyond EOD, truncated [ 325.847988][T12586] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 325.919782][T12588] tipc: Enabling of bearer rejected, failed to enable media [ 326.044650][T12573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.053389][T12573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.376309][ T5908] usb 4-1: USB disconnect, device number 125 [ 326.393502][ T5908] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 326.426486][ T5908] ti_usb_3410_5052 4-1:0.0: device disconnected [ 327.369229][ T5962] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 327.529627][ T5962] usb 4-1: Using ep0 maxpacket: 16 [ 327.536519][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.547514][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.557669][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.570619][ T5962] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.579781][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.590870][ T5962] usb 4-1: config 0 descriptor?? [ 327.791921][ T981] usbhid 3-1:0.0: can't add hid device: -71 [ 327.802651][ T981] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 327.815159][ T981] usb 3-1: USB disconnect, device number 121 [ 327.838156][T12601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2621'. [ 328.030997][ T5962] microsoft 0003:045E:07DA.0021: report is too long [ 328.037778][ T5962] microsoft 0003:045E:07DA.0021: item 0 4 0 8 parsing failed [ 328.045801][ T5962] microsoft 0003:045E:07DA.0021: parse failed [ 328.051970][ T5962] microsoft 0003:045E:07DA.0021: probe with driver microsoft failed with error -22 [ 328.193119][ T981] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 328.244298][ T5962] usb 4-1: USB disconnect, device number 126 [ 328.378319][ T981] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.387424][ T981] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 328.396719][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.400871][ T5908] usb 2-1: USB disconnect, device number 5 [ 328.410932][ T981] usb 3-1: config 0 descriptor?? [ 328.656846][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'. [ 328.973596][ T5908] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 329.004688][T12624] program syz.3.2629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.165778][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 329.172794][ T5908] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 329.181543][ T5908] usb 2-1: config 179 has no interface number 0 [ 329.188120][ T5908] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 329.200698][ T5908] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 329.212039][ T5908] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 329.225779][ T5908] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 329.248001][ T5908] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 329.262975][ T5908] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 329.280008][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.293088][T12608] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 329.313979][T12629] tipc: Enabling of bearer rejected, failed to enable media [ 329.363311][T12631] loop6: detected capacity change from 0 to 7 [ 329.378046][T12631] Dev loop6: unable to read RDB block 7 [ 329.385757][T12631] loop6: AHDI p3 p4 [ 329.390077][T12631] loop6: partition table partially beyond EOD, truncated [ 329.401919][T12631] loop6: p3 start 1886353253 is beyond EOD, truncated [ 329.550430][ T5962] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input38 [ 329.657780][ T5908] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 329.748164][T12608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.757751][T12608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.767587][ T981] usb 2-1: USB disconnect, device number 6 [ 329.767686][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 329.782013][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 329.790686][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.799824][ T5908] usb 4-1: device descriptor read/64, error -71 [ 330.064083][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 330.149719][ T981] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 330.203080][ T5908] usb 4-1: device descriptor read/64, error -71 [ 330.320723][ T981] usb 2-1: Using ep0 maxpacket: 8 [ 330.321240][ T5908] usb usb4-port1: attempt power cycle [ 330.327744][ T981] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 330.339559][ T981] usb 2-1: config 179 has no interface number 0 [ 330.345873][ T981] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 330.356954][ T981] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 330.368281][ T981] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.379452][ T981] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 330.390865][ T981] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 330.405929][ T981] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 330.415103][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.426208][T12608] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 330.661649][ T5962] usb 2-1: USB disconnect, device number 7 [ 330.661649][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 330.661691][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 330.695024][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 330.718746][ T5908] usb 4-1: device descriptor read/8, error -71 [ 330.973075][ T5908] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 330.995663][ T5908] usb 4-1: device descriptor read/8, error -71 [ 331.051199][ T981] usb 3-1: USB disconnect, device number 122 [ 331.112356][ T5908] usb usb4-port1: unable to enumerate USB device [ 331.181022][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2638'. [ 331.336184][T12656] tipc: Started in network mode [ 331.350953][T12656] tipc: Node identity 0000000000000000000000000022004, cluster identity 4711 [ 331.359968][T12656] tipc: Enabling of bearer rejected, failed to enable media [ 331.550483][ T5908] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 331.668150][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 331.689513][ T5908] usb 2-1: device descriptor read/64, error -71 [ 331.830472][ T9] usb 3-1: config 220 has an invalid interface descriptor of length 7, skipping [ 331.839737][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 331.850699][ T9] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 331.859782][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 331.868911][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 331.878029][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.886079][ T9] usb 3-1: Product: syz [ 331.890257][ T9] usb 3-1: Manufacturer: syz [ 331.895421][ T9] usb 3-1: SerialNumber: syz [ 331.956983][ T5908] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 332.106623][ T5908] usb 2-1: device descriptor read/64, error -71 [ 332.126608][ T9] uvcvideo 3-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 332.134031][ T9] uvcvideo 3-1:220.0: No valid video chain found. [ 332.142540][ T9] usb 3-1: USB disconnect, device number 123 [ 332.224532][ T5908] usb usb2-port1: attempt power cycle [ 332.587794][ T5908] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 332.611042][ T5908] usb 2-1: device descriptor read/8, error -71 [ 332.756329][T12668] loop6: detected capacity change from 0 to 7 [ 332.763699][T12668] Dev loop6: unable to read RDB block 7 [ 332.769405][T12668] loop6: AHDI p3 p4 [ 332.774722][T12668] loop6: partition table partially beyond EOD, truncated [ 332.784427][T12668] loop6: p3 start 1886353253 is beyond EOD, truncated [ 332.881912][ T5908] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 332.925972][ T5908] usb 2-1: device descriptor read/8, error -71 [ 333.044340][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2653'. [ 333.057764][ T5908] usb usb2-port1: unable to enumerate USB device [ 333.067827][T12684] loop3: detected capacity change from 0 to 7 [ 333.077214][ T5996] Dev loop3: unable to read RDB block 7 [ 333.084090][ T5996] loop3: unable to read partition table [ 333.090149][ T5996] loop3: partition table beyond EOD, truncated [ 333.110260][T12684] Dev loop3: unable to read RDB block 7 [ 333.118400][T12686] tipc: Enabling of bearer rejected, failed to enable media [ 333.125913][T12684] loop3: unable to read partition table [ 333.145450][T12684] loop3: partition table beyond EOD, truncated [ 333.151945][T12684] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 333.204222][T12689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.219540][T12690] loop6: detected capacity change from 0 to 7 [ 333.232944][T12690] Dev loop6: unable to read RDB block 7 [ 333.238653][T12690] loop6: unable to read partition table [ 333.244709][T12690] loop6: partition table beyond EOD, truncated [ 333.252382][T12690] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 333.517186][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2662'. [ 333.667899][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 333.831661][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.851070][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.861244][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.874643][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.884447][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.898936][ T43] usb 4-1: config 0 descriptor?? [ 333.950449][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2666'. [ 334.021510][T12715] can: request_module (can-proto-0) failed. [ 334.193593][T12720] netlink: 'syz.2.2669': attribute type 29 has an invalid length. [ 334.354089][ T43] hid_parser_main: 74 callbacks suppressed [ 334.354113][ T43] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.370262][ T43] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.378018][ T43] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.386721][ T43] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.394147][ T43] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.402732][ T43] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.406078][T12729] loop6: detected capacity change from 0 to 7 [ 334.411699][ T43] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.420138][T12729] Dev loop6: unable to read RDB block 7 [ 334.428275][ T43] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.431741][T12729] loop6: unable to read partition table [ 334.436930][T12727] tipc: Enabling of bearer rejected, failed to enable media [ 334.445588][T12729] loop6: partition table beyond EOD, truncated [ 334.450530][ T43] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.457242][T12729] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 334.487285][ T43] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.515413][ T43] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 334.657630][ T43] usb 4-1: USB disconnect, device number 5 [ 334.982217][T12751] loop3: detected capacity change from 0 to 7 [ 334.989833][T12751] Dev loop3: unable to read RDB block 7 [ 334.995671][T12751] loop3: unable to read partition table [ 334.995970][ T5946] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 335.002152][T12751] loop3: partition table beyond EOD, truncated [ 335.007359][T12751] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 335.167980][ T5946] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 335.176485][ T5946] usb 3-1: config 0 has no interface number 0 [ 335.182810][ T5946] usb 3-1: config 0 interface 98 has no altsetting 0 [ 335.192232][ T5946] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 335.201654][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.209760][ T5946] usb 3-1: Product: syz [ 335.220176][ T5946] usb 3-1: Manufacturer: syz [ 335.229383][ T5946] usb 3-1: SerialNumber: syz [ 335.247249][ T5946] usb 3-1: config 0 descriptor?? [ 335.270112][T12760] tipc: Enabling of bearer rejected, failed to enable media [ 335.479797][ T5946] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 335.594914][T12776] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2690'. [ 335.628647][T12778] loop3: detected capacity change from 0 to 7 [ 335.636155][T12778] Dev loop3: unable to read RDB block 7 [ 335.641866][T12778] loop3: unable to read partition table [ 335.648438][T12778] loop3: partition table beyond EOD, truncated [ 335.654824][T12778] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 335.808994][T12787] loop3: detected capacity change from 0 to 7 [ 335.820191][ T5995] Dev loop3: unable to read RDB block 7 [ 335.825808][ T5995] loop3: unable to read partition table [ 335.837446][ T5995] loop3: partition table beyond EOD, truncated [ 335.862865][T12787] Dev loop3: unable to read RDB block 7 [ 335.868498][T12787] loop3: unable to read partition table [ 335.874642][T12787] loop3: partition table beyond EOD, truncated [ 335.889739][T12782] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.901093][T12787] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 335.956509][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 336.002197][T12782] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.112900][T12782] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.130031][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 336.141139][ T43] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 336.152978][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.162331][ T43] usb 2-1: Product: syz [ 336.166600][ T43] usb 2-1: Manufacturer: syz [ 336.171323][ T43] usb 2-1: SerialNumber: syz [ 336.181086][ T5946] usb 3-1: reset high-speed USB device number 124 using dummy_hcd [ 336.190185][ T43] usb 2-1: config 0 descriptor?? [ 336.226125][T12782] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.338975][ T3520] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.368086][ T3520] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.388487][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.409883][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.422690][ T43] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 336.571701][ T5946] usb 3-1: failed to restore interface 98 altsetting 4 (error=-71) [ 336.585667][ T5946] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 336.593908][ T5946] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 336.594763][ T5869] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 336.622367][ T5946] usb 3-1: USB disconnect, device number 124 [ 336.628627][ T5869] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 336.667426][ T5869] ------------[ cut here ]------------ [ 336.673437][ T5869] WARNING: fs/kernfs/dir.c:537 at kernfs_get+0x72/0x90, CPU#1: kworker/1:3/5869 [ 336.682509][ T5869] Modules linked in: [ 336.686906][ T5869] CPU: 1 UID: 0 PID: 5869 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 336.696394][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 336.706999][ T5869] Workqueue: events request_firmware_work_func [ 336.713200][ T5869] RIP: 0010:kernfs_get+0x72/0x90 [ 336.718560][ T5869] Code: e8 33 a6 5e ff 48 89 df be 04 00 00 00 e8 66 4a c4 ff f0 ff 03 eb 05 e8 1c a6 5e ff 5b 5d e9 95 4f 29 09 cc e8 0f a6 5e ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65 [ 336.738534][ T5869] RSP: 0018:ffffc90004a8f5c0 EFLAGS: 00010293 [ 336.745382][ T5869] RAX: ffffffff8261f511 RBX: ffff88805ad393c0 RCX: ffff88803246bc80 [ 336.755098][ T5869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.764658][ T5869] RBP: 0000000000000000 R08: ffff88805ad393c3 R09: 1ffff1100b5a7278 [ 336.772990][ T5869] R10: dffffc0000000000 R11: ffffed100b5a7279 R12: ffff8880621d26a8 [ 336.781573][ T5869] R13: 1ffff1100c43a4d6 R14: ffff8880621d26b0 R15: 1ffff1100c43a4d5 [ 336.789570][ T5869] FS: 0000000000000000(0000) GS:ffff8881258b7000(0000) knlGS:0000000000000000 [ 336.798658][ T5869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.805295][ T5869] CR2: 000000110c3edc30 CR3: 000000007d4a6000 CR4: 00000000003526f0 [ 336.813477][ T5869] Call Trace: [ 336.816792][ T5869] [ 336.819752][ T5869] kobject_add_internal+0x632/0xb40 [ 336.825058][ T5869] kobject_add+0x155/0x220 [ 336.829516][ T5869] ? __pfx_kobject_add+0x10/0x10 [ 336.834523][ T5869] ? __kasan_kmalloc+0x93/0xb0 [ 336.839323][ T5869] ? kobject_init+0x83/0x1e0 [ 336.843987][ T5869] get_device_parent+0x316/0x3a0 [ 336.848960][ T5869] device_add+0x2e1/0xb50 [ 336.853323][ T5869] firmware_fallback_sysfs+0x2e4/0x9b0 [ 336.858859][ T5869] ? kmem_cache_free+0x19b/0x690 [ 336.865157][ T5869] _request_firmware+0xf83/0x15b0 [ 336.871512][ T5869] ? __pfx__request_firmware+0x10/0x10 [ 336.877047][ T5869] ? process_scheduled_works+0x9ef/0x17b0 [ 336.882794][ T5869] request_firmware_work_func+0xaf/0x1c0 [ 336.888524][ T5869] ? process_scheduled_works+0x9ef/0x17b0 [ 336.894277][ T5869] process_scheduled_works+0xae1/0x17b0 [ 336.900078][ T5869] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.906184][ T5869] worker_thread+0x8a0/0xda0 [ 336.910873][ T5869] kthread+0x711/0x8a0 [ 336.914969][ T5869] ? __pfx_worker_thread+0x10/0x10 [ 336.920154][ T5869] ? __pfx_kthread+0x10/0x10 [ 336.924760][ T5869] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.930024][ T5869] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.935234][ T5869] ? __pfx_kthread+0x10/0x10 [ 336.939864][ T5869] ret_from_fork+0x4bc/0x870 [ 336.944538][ T5869] ? __pfx_ret_from_fork+0x10/0x10 [ 336.949684][ T5869] ? __switch_to_asm+0x39/0x70 [ 336.954553][ T5869] ? __switch_to_asm+0x33/0x70 [ 336.959364][ T5869] ? __pfx_kthread+0x10/0x10 [ 336.964035][ T5869] ret_from_fork_asm+0x1a/0x30 [ 336.968825][ T5869] [ 336.973034][ T5869] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 336.980340][ T5869] CPU: 1 UID: 0 PID: 5869 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 336.990221][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 337.000287][ T5869] Workqueue: events request_firmware_work_func [ 337.006447][ T5869] Call Trace: [ 337.009719][ T5869] [ 337.012635][ T5869] dump_stack_lvl+0x99/0x250 [ 337.017253][ T5869] ? __asan_memcpy+0x40/0x70 [ 337.021836][ T5869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.027113][ T5869] ? __pfx__printk+0x10/0x10 [ 337.031701][ T5869] vpanic+0x237/0x6d0 [ 337.035673][ T5869] ? __pfx_vpanic+0x10/0x10 [ 337.040160][ T5869] ? is_bpf_text_address+0x292/0x2b0 [ 337.045434][ T5869] ? is_bpf_text_address+0x26/0x2b0 [ 337.050623][ T5869] panic+0xb9/0xc0 [ 337.054336][ T5869] ? __pfx_panic+0x10/0x10 [ 337.058835][ T5869] ? ret_from_fork_asm+0x1a/0x30 [ 337.063762][ T5869] __warn+0x334/0x4c0 [ 337.067729][ T5869] ? kernfs_get+0x72/0x90 [ 337.072047][ T5869] ? kernfs_get+0x72/0x90 [ 337.076362][ T5869] report_bug+0x2be/0x4f0 [ 337.080679][ T5869] ? kernfs_get+0x72/0x90 [ 337.084993][ T5869] ? kernfs_get+0x72/0x90 [ 337.089304][ T5869] ? kernfs_get+0x74/0x90 [ 337.093751][ T5869] handle_bug+0x84/0x160 [ 337.097984][ T5869] exc_invalid_op+0x1a/0x50 [ 337.102476][ T5869] asm_exc_invalid_op+0x1a/0x20 [ 337.107401][ T5869] RIP: 0010:kernfs_get+0x72/0x90 [ 337.112327][ T5869] Code: e8 33 a6 5e ff 48 89 df be 04 00 00 00 e8 66 4a c4 ff f0 ff 03 eb 05 e8 1c a6 5e ff 5b 5d e9 95 4f 29 09 cc e8 0f a6 5e ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65 [ 337.131919][ T5869] RSP: 0018:ffffc90004a8f5c0 EFLAGS: 00010293 [ 337.137976][ T5869] RAX: ffffffff8261f511 RBX: ffff88805ad393c0 RCX: ffff88803246bc80 [ 337.146020][ T5869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.153977][ T5869] RBP: 0000000000000000 R08: ffff88805ad393c3 R09: 1ffff1100b5a7278 [ 337.161934][ T5869] R10: dffffc0000000000 R11: ffffed100b5a7279 R12: ffff8880621d26a8 [ 337.169890][ T5869] R13: 1ffff1100c43a4d6 R14: ffff8880621d26b0 R15: 1ffff1100c43a4d5 [ 337.177856][ T5869] ? kernfs_get+0x71/0x90 [ 337.182178][ T5869] kobject_add_internal+0x632/0xb40 [ 337.187368][ T5869] kobject_add+0x155/0x220 [ 337.191782][ T5869] ? __pfx_kobject_add+0x10/0x10 [ 337.196706][ T5869] ? __kasan_kmalloc+0x93/0xb0 [ 337.201488][ T5869] ? kobject_init+0x83/0x1e0 [ 337.206064][ T5869] get_device_parent+0x316/0x3a0 [ 337.210989][ T5869] device_add+0x2e1/0xb50 [ 337.215313][ T5869] firmware_fallback_sysfs+0x2e4/0x9b0 [ 337.220764][ T5869] ? kmem_cache_free+0x19b/0x690 [ 337.225696][ T5869] _request_firmware+0xf83/0x15b0 [ 337.230811][ T5869] ? __pfx__request_firmware+0x10/0x10 [ 337.236263][ T5869] ? process_scheduled_works+0x9ef/0x17b0 [ 337.241973][ T5869] request_firmware_work_func+0xaf/0x1c0 [ 337.247597][ T5869] ? process_scheduled_works+0x9ef/0x17b0 [ 337.253345][ T5869] process_scheduled_works+0xae1/0x17b0 [ 337.258900][ T5869] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.264877][ T5869] worker_thread+0x8a0/0xda0 [ 337.269474][ T5869] kthread+0x711/0x8a0 [ 337.273532][ T5869] ? __pfx_worker_thread+0x10/0x10 [ 337.278628][ T5869] ? __pfx_kthread+0x10/0x10 [ 337.283211][ T5869] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.288396][ T5869] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.293575][ T5869] ? __pfx_kthread+0x10/0x10 [ 337.298156][ T5869] ret_from_fork+0x4bc/0x870 [ 337.302734][ T5869] ? __pfx_ret_from_fork+0x10/0x10 [ 337.307838][ T5869] ? __switch_to_asm+0x39/0x70 [ 337.312584][ T5869] ? __switch_to_asm+0x33/0x70 [ 337.317328][ T5869] ? __pfx_kthread+0x10/0x10 [ 337.321908][ T5869] ret_from_fork_asm+0x1a/0x30 [ 337.326673][ T5869] [ 337.329966][ T5869] Kernel Offset: disabled [ 337.334277][ T5869] Rebooting in 86400 seconds..