last executing test programs: 6.947254045s ago: executing program 2 (id=814): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x3f, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 6.782074887s ago: executing program 2 (id=816): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x591080, 0x100) 6.678087997s ago: executing program 2 (id=817): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000003c0)={0x0, 0x2, 0x2, {0x2, 0x17}}, 0x0, &(0x7f00000000c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "2324cbe669026edefca793e7a1aac135"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x6, 0x1, "05723a9a", "a23bf85f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xc, 0x2, 0x8d, 0xbede, 0x4}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="20317d000000dd9c8806271c056ad648196d723dde0f308159afe691c1d16d9e4aa25ed800a01b423ca2e675342c7f10"], 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 5.506799528s ago: executing program 1 (id=826): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_usb_connect$hid(0x0, 0xfffffffffffffe67, 0x0, 0x0) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "d53c0eb582cba9f1bc16e9ca85647283ccf9e9b7cfa617c953f8334fb77453e9d63eafb578307ceb8c0de24e1a2799fbe25a20bdffddd2b9708a52e314708472", 0x3d}, 0x48, r1) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xfffffffffffffffe) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) r3 = socket(0x10, 0x3, 0x0) fsopen(0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) splice(r3, 0x0, r5, 0x0, 0x8002, 0x0) dup(0xffffffffffffffff) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'hsr0\x00'}}, 0x1e) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000040)=[{0x0, 0xfffd}], 0x1, 0x0) semtimedop(r6, &(0x7f0000000500)=[{0x4, 0x5, 0x1800}, {0x0, 0xffff, 0x1000}], 0x2, &(0x7f0000000540)={0x0, 0x3938700}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) keyctl$link(0x8, r2, 0xfffffffffffffffc) r7 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000009c0)={0x0, 0x2, 0x1, [0x81, 0x6, 0x2, 0x5, 0x4], [0xffffffffffffcf43, 0x2, 0x2, 0x9, 0x8, 0x8, 0xff, 0x2, 0x1, 0x9, 0x5, 0x6, 0x9, 0x3, 0x1000, 0x9, 0x661, 0x6, 0x3, 0x1, 0x7, 0x7, 0x1, 0x100000000, 0x0, 0xfffffffffffffff8, 0x100000, 0x5, 0x3, 0xfffffffffffffffe, 0x101, 0x1, 0x1, 0x40, 0x0, 0x6505, 0x1, 0x9, 0x0, 0x3, 0x0, 0xf32, 0xffffffffffffffff, 0x3, 0x7, 0x2, 0x9, 0x8d, 0x1, 0x7, 0x7, 0x2, 0x2, 0xffffffffffffffb6, 0x6, 0x55e, 0x8, 0x7fffffffffffffff, 0x80, 0x2, 0x0, 0x9, 0x0, 0x3, 0x81, 0x9, 0x3, 0x7, 0x4, 0x200, 0x6, 0x1, 0xf6, 0x9, 0x7, 0x100, 0x5, 0x1, 0x5, 0xdc9, 0x8, 0x0, 0x48f98d61, 0x2, 0x9aba, 0xfff, 0x4, 0x7fff, 0x1, 0x4, 0x5, 0x8000000000000001, 0xd, 0x5, 0x400, 0x6, 0xc272, 0x9, 0x1, 0x5, 0x3, 0xc, 0x80000000, 0x1, 0xfffffffffffffff7, 0x9, 0x9, 0x3, 0x779, 0xb, 0x2, 0xb, 0x6, 0x6, 0xffffffffffffff7f, 0x7, 0x983, 0x2, 0x7f, 0x4, 0x8001]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000002180)={r8, 0x4, 0x0, [0x9, 0x4, 0x7, 0x0, 0x2], [0x9, 0xfac, 0x1000, 0x5, 0x4, 0x7fff, 0x1, 0xfffffffffffffff9, 0x7fffffffffffffff, 0xd, 0x1, 0xfffffffffffffff9, 0x100000001, 0x3, 0xfffffffffffffff0, 0xfffffffffffffffe, 0x2, 0x8001, 0x7, 0x7fff, 0x4, 0xb, 0x4, 0xffffffffffffff33, 0xddb8, 0x6, 0x2, 0x3, 0x80000000, 0x891, 0x4, 0xc5f1, 0x5, 0x3, 0x0, 0xc3, 0x0, 0x0, 0x9, 0x1, 0x6, 0x0, 0xfffffffffffffffe, 0x9, 0x2, 0x4, 0x3, 0x2, 0x200, 0x8, 0x4, 0x6, 0x2, 0x7c1, 0x7, 0xf, 0x0, 0x8, 0x8000000000000000, 0x9, 0x5, 0x1000, 0xfffffffffffffffc, 0xf9d, 0x4, 0x4, 0x3923585b, 0x2, 0x9, 0x2, 0x5, 0xb, 0x81, 0x2, 0x36a94ab4, 0x8001, 0x8000000000000000, 0xa, 0x6, 0x2, 0x4, 0x80000000, 0x2, 0x6, 0x7, 0xc518, 0x9, 0x1, 0x80000000, 0x3, 0x6, 0x8, 0xfff, 0x8, 0x3, 0xcd32, 0x5, 0x1, 0x10000000, 0x3, 0x6, 0xc, 0x2, 0x0, 0x3, 0x100000001, 0x5, 0x8d, 0x2, 0x8, 0x2, 0x8, 0x1, 0x800, 0x6, 0x1, 0xfffffffffffffffb, 0x1, 0x4d, 0x6, 0x8210]}) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000001180)=""/4096) clock_gettime(0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x52418e567e5a9d8b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 5.449646596s ago: executing program 3 (id=827): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x4001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)="b922cdd771b1024c1f1f9b3c77606d888451227d5749c538f96ba541525cc189dadadc7e38bd85b7ddf7f7091d9c", 0x2e) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x13, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5.063015384s ago: executing program 3 (id=828): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000003c0)={0x0, 0x2, 0x2, {0x2, 0x17}}, &(0x7f0000000b00)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "4bc2c6ccd1e405a1ff7f93bb060aa1f3c777f1b75c806ec00cb1f03b7a38b3063a419fea50fe1635f52381b5952a3b82aa56df0673d831210b05b2d8d35582803742c5100a4bfe45e7f0aa34757accb084f6144c5c80b659847a921a9f29c4f12d4a8a9dc791e2c9cd6b6a4b1ee0188b599ebc740556c2f39412e643f600ffd7dcee200dd41a79951f34113cbd872800d9967d08e963f1a5a622cccdb5d8fe5c63644c18c6c800e6d9c2805ec1f6a654500fcb373e093972f2e87dbda10434fc"}}, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x6, 0x1, "05723a9a", "a27b1a5f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xc, 0x2, 0x8d, 0xbede, 0x4}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="20317d000000dd9c8806271c056ad648196d723dde0f308159afe691c1d16d9e4aa25ed800a01b423ca2e675342c7f10016e36"], 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4.33221518s ago: executing program 2 (id=829): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x54d040, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 2.998164552s ago: executing program 3 (id=832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30fffffff050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32=r2], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2.502518491s ago: executing program 3 (id=835): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x26f, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 2.448590401s ago: executing program 2 (id=836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "251e9fa24fd95ab6", "356d9d31998018856bdcedb712e32ec08a9f445a4a74f6f892426f921d79baf6", "2c45107a", "f7866b01a90ce008"}, 0x38) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="78cf3d30c0c23baf32452d129569808e8debc251c0b98e095e5c5450e1015c66cdca6625588eeab7d52293875907a281d0552fc030e6eb998fccb71921701f9bde0f05de4a11c388953295fdab75f626be58eb8849fd23a80eaa1b95a12f1f4cd53edf5ef3a290639e27a874c0ef9facb7095b94e244cb85d1e6a28290c268f53f00c5c0df97ad9da2beefea5353a3dbfd26c6dfbfaad4fd01792aae77f7dc17f0b9c3a947805e422a2311bafad5f97554032c40bab65b573d2900dcd4828588fb6601c07805259edee693eb5c68b1d9984dc2af480c330a4ade", 0xda}, {&(0x7f0000000500)="385343ced8a47af7d176ad55869eb42a80fc7c3c11d79f3329f6e2e8df340ea59bfffb03f823f327febcfd2ac99ca2562537557cda7802b8a8fa88847be2e18e8b705653cfa331538c87a9656910c4b63bd7fe0f5366704b4ed9f898c047df984984d9fee54d4a9baea8992eb14492f424e393da60d8740c1baadd36c8493fad626d9ac5a63cf624baa936386f9e3b22d51fd8f7b595bd39067b62e567091f2852c55d34fecffd87937267a11102f564e911a60330ce9ab2a87317198216dcc029db4b7d8b2aa4594f2d2204054d7095dd35a4a29f2d3406917a359db94cfaf3eca1", 0xe2}, {&(0x7f0000001180)="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", 0x10e2}, {&(0x7f0000000400)="e7e930bda7c47baa2d227dee41c0d6ebcd5fb24981fb32eb1457b8896e77294a6ea004ec60545d41542a0bd2c73b3ccef69da0771940ee14f8073dfd8bc679383e68dd5d149e667e0e9432937d2f6e303a697c9d8271d90172241967bf473585bac0ec12156bb3717931030cff17fdbadaf726b893e39ce587927e347fa90f25d457d53a968bc94b90ef022aecbfe759ad208e0bc86ee98097f4b6b7329a678b23c831d028b5d4c5497808bf640ee9cac3ed607a7982d656e36966da885e046a897431d579d453", 0xc7}, {&(0x7f0000000040)="6e317af83f09e4", 0x7}, {&(0x7f00000029c0)="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", 0xd6a}], 0x6}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/154, 0x9a}], 0x1) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x2000) 2.403947676s ago: executing program 1 (id=837): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009080709050200"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0xde, 0xfa, 0x1a, 0x20, 0x5ac, 0x238, 0xdd7c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x4, 0xf0, 0x0, [{{0x9, 0x4, 0xfc, 0x9, 0x0, 0x3, 0x9d, 0x2}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1e, &(0x7f0000000200), 0x4) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x2715, 0x0, &(0x7f0000000000)) r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x6c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x9, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004005}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x3c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x7f5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x61, {"3e36360f0748b803000000010000000f23c80f21f8350c0020000f23f8366766470f2e6b00c4237916517100420f070f01c4264263044e66baf80cb8dafdbf82ef66bafc0cec0f005dbec4a399440340"}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0xae}, @uexit={0x0, 0x18, 0xac}, @code={0x1, 0x56, {"0f20d835200000000f22d80f01d126460f08360f01c50f01f8c744240006000000c744240275000000c7442406000000000f01142464f3466cc4e16054fc260f01c30f79c0"}}, @cpuid={0x2, 0x18, {0x5, 0x9}}, @code={0x1, 0x7e, {"d9e02666470fc7b46409000000b9e20200000f32c74424008c58e21bc74424026658a09ac7442406000000000f0114240f01c56566430f3adfaba3c7932964360f20c10f20c035020000000f22c048b800000000000000000f23d00f21f8350000000d0f23f8c4a2f99354c4e0"}}, @uexit={0x0, 0x18, 0x7ff}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x3ae7f564}, @code={0x1, 0x4c, {"410f38079059580000c443b50d38000f01f3664a0f7e7f600f01ca3e36420f07c4014df3560ec40165efcbc401ad6c6b0066ba400066b8a36866ef"}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x59, {"36410f2d62d240adb9910b0000b800000000ba000000800f3066ba6100b86e000000ef3e460f79bd0000000066b829010f00d0c4a1fc7766b895008ec8f3470fc737660f388149b8"}}, @uexit={0x0, 0x18, 0x280000000000000}, @code={0x1, 0x5b, {"b9a50200000f323ef20f78d380f62e0f01ca0f01c30f73d372c4c245367d00400f239a66b839000f00d8420f01cfc744240004000000c74424020e000000c7442406000000000f011c24"}}, @cpuid={0x2, 0x18, {0x3, 0x3}}], 0x33d}) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x6f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x80, 0xa8, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "a8f9e532e901"}, {0x5, 0x24, 0x0, 0x2f8}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x1, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0xe, 0x0, 0x3, 0x7f}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x16, 0x7fff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x5, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x2, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x40, 0x2, 0x9}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xc, 0xfa, 0x1, 0xff, 0x5}, 0x2f, &(0x7f00000000c0)={0x5, 0xf, 0x2f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "2e71c182163e22802b369e6855b40824"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x8, 0xf00}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0xe, 0x3}]}}) 2.33329492s ago: executing program 3 (id=838): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000003c0)={0x0, 0x2, 0x2, {0x2, 0x17}}, 0x0, &(0x7f00000000c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "2324cbe669026edefca793e7a1aac135"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x6, 0x1, "05723a9a", "a23bf85f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xc, 0x2, 0x8d, 0xbede, 0x4}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="20317d000000dd9c8806271c056ad648196d723dde0f308159afe691c1d16d9e4aa25ed800a01b423ca2e675342c7f10"], 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.871635201s ago: executing program 2 (id=841): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000003c0)={0x0, 0x2, 0x2, {0x2, 0x17}}, &(0x7f0000000b00)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "4bc2c6ccd1e405a1ff7f93bb060aa1f3c777f1b75c806ec00cb1f03b7a38b3063a419fea50fe1635f52381b5952a3b82aa56df0673d831210b05b2d8d35582803742c5100a4bfe45e7f0aa34757accb084f6144c5c80b659847a921a9f29c4f12d4a8a9dc791e2c9cd6b6a4b1ee0188b599ebc740556c2f39412e643f600ffd7dcee200dd41a79951f34113cbd872800d9967d08e963f1a5a622cccdb5d8fe5c63644c18c6c800e6d9c2805ec1f6a654500fcb373e093972f2e87dbda10434fc"}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x6, 0x1, "05723a9a", "a27b1a5f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xc, 0x2, 0x8d, 0xbede, 0x4}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="20317d000000dd9c8806271c056ad648196d723dde0f308159afe691c1d16d9e4aa25ed800a01b423ca2e675342c7f10016e36"], 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.691525982s ago: executing program 1 (id=842): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (fail_nth: 46) 1.423144072s ago: executing program 1 (id=843): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101402, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc004ae0a, &(0x7f0000000000)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002640)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/66, 0x42}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f00000014c0)=""/258, 0x102}, {&(0x7f00000004c0)=""/4082, 0xff2}], 0x4}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000004040)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x1000) truncate(&(0x7f0000000000)='./file0\x00', 0x5) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x4b) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000003c0)={0x7, 0x0, [{0x845, 0x0, 0x1000}, {0xa0b, 0x0, 0x5}, {0x400000b6, 0x0, 0x9}, {0xaea, 0x0, 0x9}, {0x2ba, 0x0, 0x2}, {0x182, 0x0, 0x5}, {0x273, 0x0, 0x2}]}) 854.638592ms ago: executing program 0 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30fffffff550000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32=r2], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 694.1451ms ago: executing program 0 (id=846): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x300, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 571.300204ms ago: executing program 0 (id=847): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @local}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r1}, 0x14) (async) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000100)=0xfffffffa, 0x4) (async) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x5) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xe0000000000000}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000300)={0x2}) (async) r4 = socket(0x18, 0x2, 0x80000001) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000340)) (async) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000380)={0x0, 0x6, 0x38, "f62ab7e0716378224afc271566069d874dbe603533cdddf9e834c3fc7e05e9973e39405890791f240a53b2fcbf86d90529fb7ac9edf386cc870f6fce", 0x2, "73634a166de0f6a747f30db69864b54e2e593416acdc32a6bac9214ed5cac3e8300692d31edc2be881dd1738091b7ef3fae3a19d28e275997cf1b9f8", 0x20}) (async) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000440)=""/157, 0x9d, &(0x7f0000000500)=""/70, 0x2, 0x3}}, 0x48) (async) r5 = accept4$ax25(r2, 0x0, &(0x7f0000000600), 0x80800) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000640)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {r0}}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'rose0\x00'}) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000740)={{r4}, 0x6, &(0x7f0000000700)=[0xc, 0x9, 0x0, 0x3, 0x2, 0xfffffffffffff8a8], 0x3, 0x1, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000900)={0x18, 0x0, &(0x7f00000007c0)=[@acquire_done={0x40106309, 0x3}, @enter_looper], 0xfa, 0x0, &(0x7f0000000800)="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"}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000980)={'batadv0\x00', &(0x7f0000000940)=@ethtool_stats={0x1d, 0x6, [0xe, 0xa5f, 0x10, 0x5, 0xffffffff, 0x1]}}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r8, 0x89e3) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r4) (async) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000a00)={0x6, 0xfffffff3, 0x6901}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r7) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r9, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000050}, 0x40010) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000000bc0)={0x0, 0x40, '\x00', 0x0, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_buf(r7, 0x29, 0xca, &(0x7f0000000c00)="ebe0787bfce8c873da7f581f3579e17c3d9fffe37862b89d6e5384517c56405642a738b112c9199a5f4b30d7bc69f03e2ca395aa19d6f2cb03577917b4457715413a135c756e1f9ac20ce2bf42e4aa652987bc44ff73368e7ce54b08e2a84ddb3b7c54805492a01f3ba5f86149be24e265e08d9e96642350e08a9c36d87cd9fa2a3d575da6b38148215f8b79ccc6f8801d44c1ebcdac1ff85e59f51dc561251fb9f39ea46b3d9bcbaa791340c03a3ddfc2aad7965c67a98264f5a21c5010608e9422fe7d2493f7f98647fb4397420088cf9169d9a725a180e68e9c6275dfe0d911d8300c657024c15acec6d851", 0xed) 506.720344ms ago: executing program 1 (id=848): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x4001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)="b922cdd771b1024c1f1f9b3c77606d888451227d5749c538f96ba541525cc189dadadc7e38bd85b7ddf7f7091d9c", 0x2e) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 489.955353ms ago: executing program 0 (id=849): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x4001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)="b922cdd771b1024c1f1f9b3c77606d888451227d5749c538f96ba541525cc189dadadc7e38bd85b7ddf7f7091d9c", 0x2e) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x13, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 167.32915ms ago: executing program 0 (id=850): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNGETVNETBE(r1, 0x800454df, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000"], 0xffe) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 166.913847ms ago: executing program 1 (id=851): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009080709050200"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007000000df038b0100000000"], 0x38}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x81, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x17, 0x50, 0xae, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, "a855a3040000"}, {0x5, 0x24, 0x0, 0x8}, {0x8, 0x24, 0xf, 0x1, 0x1, 0xb5aa, 0x3, 0x2}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x6, 0x96}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0xb, 0xff}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x6, 0x3, 0x8, 0x8, 0xff}, 0x16, &(0x7f0000000240)={0x5, 0xf, 0x16, 0x1, [@generic={0x11, 0x10, 0x4, "0a01f8fd82e66e4c0e65c786c7c0"}]}, 0x4, [{0x8f, &(0x7f0000000280)=@string={0x8f, 0x3, "15c07f6be71bbab0980adb306410e4b79caa0b55050d4495ecb29c65b8461a1ece90b63adbf37e6b8c38c4990dc0612c11c196068593099e18d92877de55037e29c052e062d839925377b8021222b17542580d2f58da5265bc8a86ddf006c867dd48dc82edcff74f99e4740b91f8f7fe286eb90a3aa08bc6ce0e89c212b1aed1dfab6bf06d99fa3130c9d4c85f"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40e}}, {0xe5, &(0x7f00000003c0)=ANY=[@ANYBLOB="e50384cabb998c7db5f02433a9eacf1f34fe455bd5d00fa731f3809df5ceff48427242a12db3ce30af860f9f417a82365a3fff518110b3e513c96ff7905ac7fb8de904ec393f94486e922b928fabe8760a7ac0abecf32796ea698019613300628ba101791573f61394b0e5e4f28057bed8c41bd75df55d6a505068d04c7d2abae08dd3aa7c76021e47f2b8870589767dcdb1e957cad937e1398e9bbe97489e37c6b840a4a840dd401617f72ad3581d6938c122ce5da20f217780f659ca500ab515c1cc109761f8023f482253da6832f719ce346271bfd537dc3cf0051db7247e0cececd6ac"]}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3c9c00, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000080)={0x2, 0x4}) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 88.914463ms ago: executing program 3 (id=852): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (fail_nth: 47) 0s ago: executing program 0 (id=853): mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200020, 0x0) accept(0xffffffffffffffff, &(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000200)=0x80) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0xbb000000) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x1) syz_clone(0x20801000, &(0x7f0000000080)="f03916c6e58d40bae8729d01c3d77b2210861c3480fd", 0x16, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="0e9b09f4d5ff8d3baa903831e4b9b2ccfad5dec5c9e10ab12d52d3f87a5b90ff3e76aecc2e5d511bc6ada21cf0c4d6c75fff9a88e08c43388a864a59bc631a5807a68366f82a2a54b7bbafc7e637d874517c865168d91d578f60692676fc3f9ba4da57b500247d5ec4c9d6970e4a77e0de132778018ccd52cd30fc97f42256cdcdae3a1cecdaf284b0d1b4261b42b452ba7ab2ebb594f42c4e5ef42268d7c213ade434f8a928") kernel console output (not intermixed with test programs): 617] RSP: 002b:00007ffaf42db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.839788][ T7617] RAX: ffffffffffffffda RBX: 00007ffaf35b5fa0 RCX: 00007ffaf338e929 [ 161.839800][ T7617] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 161.839810][ T7617] RBP: 00007ffaf42db090 R08: 0000000000000000 R09: 0000000000000000 [ 161.839821][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.839830][ T7617] R13: 0000000000000000 R14: 00007ffaf35b5fa0 R15: 00007ffcb1cea718 [ 161.839861][ T7617] [ 161.967034][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.967086][ T5929] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 161.967107][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.980985][ T5929] usb 1-1: config 0 descriptor?? [ 162.288171][ T7621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.288657][ T7621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.450508][ T5929] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 162.489533][ T5929] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002B/input/input48 [ 162.547318][ T7630] loop4: detected capacity change from 0 to 7 [ 162.586458][ T7630] Dev loop4: unable to read RDB block 7 [ 162.649087][ T7630] loop4: unable to read partition table [ 162.655122][ T7630] loop4: partition table beyond EOD, truncated [ 162.695099][ T5929] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 162.751903][ T7630] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.827148][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 162.985469][ T5929] usb 1-1: USB disconnect, device number 28 [ 163.017666][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 163.034343][ T24] usb 3-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 163.087818][ T24] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.129637][ T24] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 163.153405][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.368052][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.377089][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.428673][ T5842] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 163.549990][ T7647] loop4: detected capacity change from 0 to 7 [ 163.557315][ T7647] Dev loop4: unable to read RDB block 7 [ 163.571693][ T7647] loop4: unable to read partition table [ 163.577576][ T7647] loop4: partition table beyond EOD, truncated [ 163.579168][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 163.587183][ T7647] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.604376][ T5842] usb 4-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 163.632184][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.655082][ T5842] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 163.685435][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.706331][ T5842] usb 4-1: config 0 descriptor?? [ 163.794444][ T7651] FAULT_INJECTION: forcing a failure. [ 163.794444][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 163.794467][ T7651] CPU: 0 UID: 0 PID: 7651 Comm: syz.0.633 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 163.794478][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.794484][ T7651] Call Trace: [ 163.794490][ T7651] [ 163.794497][ T7651] dump_stack_lvl+0x189/0x250 [ 163.794519][ T7651] ? __pfx____ratelimit+0x10/0x10 [ 163.794544][ T7651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.794563][ T7651] ? __pfx__printk+0x10/0x10 [ 163.794589][ T7651] ? __pfx___might_resched+0x10/0x10 [ 163.794599][ T7651] ? fs_reclaim_acquire+0x7d/0x100 [ 163.794615][ T7651] should_fail_ex+0x414/0x560 [ 163.794635][ T7651] should_failslab+0xa8/0x100 [ 163.794652][ T7651] __kmalloc_cache_noprof+0x70/0x3d0 [ 163.794670][ T7651] ? drm_atomic_helper_setup_commit+0x1c9/0x1370 [ 163.794701][ T7651] drm_atomic_helper_setup_commit+0x1c9/0x1370 [ 163.794732][ T7651] ? __pfx___drm_dev_dbg+0x10/0x10 [ 163.794757][ T7651] drm_atomic_helper_commit+0x6a/0xb10 [ 163.794773][ T7651] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 163.794786][ T7651] drm_atomic_commit+0x25f/0x2c0 [ 163.794804][ T7651] ? __pfx_drm_atomic_commit+0x10/0x10 [ 163.794822][ T7651] ? __pfx___drm_printfn_info+0x10/0x10 [ 163.794850][ T7651] ? drm_client_rotation+0x47c/0x5b0 [ 163.794874][ T7651] drm_client_modeset_commit_atomic+0x620/0x760 [ 163.794900][ T7651] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 163.794923][ T7651] ? __pfx___mutex_lock+0x10/0x10 [ 163.794936][ T7651] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.794962][ T7651] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 163.794986][ T7651] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 163.795027][ T7651] fb_pan_display+0x39b/0x680 [ 163.795044][ T7651] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 163.795061][ T7651] fb_set_var+0x85a/0xf50 [ 163.795078][ T7651] ? __pfx_fb_set_var+0x10/0x10 [ 163.795092][ T7651] ? trace_contention_end+0x39/0x120 [ 163.795108][ T7651] ? __mutex_lock+0x330/0xe80 [ 163.795134][ T7651] ? __lock_acquire+0xab9/0xd20 [ 163.795160][ T7651] ? do_fb_ioctl+0x598/0x750 [ 163.795203][ T7651] do_fb_ioctl+0x63b/0x750 [ 163.795217][ T7651] ? __pfx_do_fb_ioctl+0x10/0x10 [ 163.795257][ T7651] ? __fget_files+0x2a/0x420 [ 163.795284][ T7651] ? __fget_files+0x3a0/0x420 [ 163.795304][ T7651] ? __fget_files+0x2a/0x420 [ 163.795329][ T7651] ? bpf_lsm_file_ioctl+0x9/0x20 [ 163.795345][ T7651] ? __pfx_fb_ioctl+0x10/0x10 [ 163.795357][ T7651] __se_sys_ioctl+0xf9/0x170 [ 163.795369][ T7651] do_syscall_64+0xfa/0x3b0 [ 163.795381][ T7651] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.795392][ T7651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.795405][ T7651] ? clear_bhb_loop+0x60/0xb0 [ 163.795426][ T7651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.795441][ T7651] RIP: 0033:0x7fd63ed8e929 [ 163.795457][ T7651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.795471][ T7651] RSP: 002b:00007fd63cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.795488][ T7651] RAX: ffffffffffffffda RBX: 00007fd63efb5fa0 RCX: 00007fd63ed8e929 [ 163.795499][ T7651] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 163.795505][ T7651] RBP: 00007fd63cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.795510][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.795516][ T7651] R13: 0000000000000000 R14: 00007fd63efb5fa0 R15: 00007ffc5c97d6f8 [ 163.795532][ T7651] [ 163.966451][ T5842] usbhid 4-1:0.0: can't add hid device: -71 [ 163.966561][ T5842] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 163.993499][ T5842] usb 4-1: USB disconnect, device number 27 [ 164.193658][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 164.193727][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 164.507417][ T7656] capability: warning: `syz.0.635' uses 32-bit capabilities (legacy support in use) [ 164.571439][ T7659] loop4: detected capacity change from 0 to 7 [ 164.581712][ T7659] Dev loop4: unable to read RDB block 7 [ 164.589740][ T7659] loop4: unable to read partition table [ 164.596426][ T7659] loop4: partition table beyond EOD, truncated [ 164.606861][ T7659] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 164.635480][ T5205] Dev loop4: unable to read RDB block 7 [ 164.641225][ T5205] loop4: unable to read partition table [ 164.648954][ T5205] loop4: partition table beyond EOD, truncated [ 164.721124][ T24] usb 3-1: string descriptor 0 read error: -71 [ 164.740989][ T24] hub 3-1:32.0: bad descriptor, ignoring hub [ 164.756266][ T24] hub 3-1:32.0: probe with driver hub failed with error -5 [ 164.837279][ T24] usb 3-1: USB disconnect, device number 33 [ 165.082866][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.099899][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.222301][ T7673] loop4: detected capacity change from 0 to 7 [ 165.229356][ T7673] Dev loop4: unable to read RDB block 7 [ 165.235554][ T7673] loop4: unable to read partition table [ 165.241743][ T7673] loop4: partition table beyond EOD, truncated [ 165.250774][ T7673] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.565233][ T5842] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 165.700654][ T7679] FAULT_INJECTION: forcing a failure. [ 165.700654][ T7679] name failslab, interval 1, probability 0, space 0, times 0 [ 165.700679][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.2.644 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 165.700698][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.700709][ T7679] Call Trace: [ 165.700715][ T7679] [ 165.700723][ T7679] dump_stack_lvl+0x189/0x250 [ 165.700746][ T7679] ? __pfx____ratelimit+0x10/0x10 [ 165.700768][ T7679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.700781][ T7679] ? __pfx__printk+0x10/0x10 [ 165.700795][ T7679] ? __pfx___might_resched+0x10/0x10 [ 165.700805][ T7679] ? fs_reclaim_acquire+0x7d/0x100 [ 165.700821][ T7679] should_fail_ex+0x414/0x560 [ 165.700848][ T7679] should_failslab+0xa8/0x100 [ 165.700870][ T7679] __kmalloc_cache_noprof+0x70/0x3d0 [ 165.700888][ T7679] ? drm_atomic_helper_setup_commit+0x1c9/0x1370 [ 165.700919][ T7679] drm_atomic_helper_setup_commit+0x1c9/0x1370 [ 165.700938][ T7679] ? __pfx___drm_dev_dbg+0x10/0x10 [ 165.700955][ T7679] drm_atomic_helper_commit+0x6a/0xb10 [ 165.700971][ T7679] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 165.700987][ T7679] drm_atomic_commit+0x25f/0x2c0 [ 165.701010][ T7679] ? __pfx_drm_atomic_commit+0x10/0x10 [ 165.701028][ T7679] ? __pfx___drm_printfn_info+0x10/0x10 [ 165.701056][ T7679] ? drm_client_rotation+0x47c/0x5b0 [ 165.701076][ T7679] drm_client_modeset_commit_atomic+0x620/0x760 [ 165.701094][ T7679] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 165.701116][ T7679] ? __pfx___mutex_lock+0x10/0x10 [ 165.701130][ T7679] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.701162][ T7679] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 165.701187][ T7679] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 165.701224][ T7679] fb_pan_display+0x39b/0x680 [ 165.701235][ T7679] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 165.701251][ T7679] fb_set_var+0x85a/0xf50 [ 165.701269][ T7679] ? __pfx_fb_set_var+0x10/0x10 [ 165.701285][ T7679] ? trace_contention_end+0x39/0x120 [ 165.701303][ T7679] ? __mutex_lock+0x330/0xe80 [ 165.701329][ T7679] ? __lock_acquire+0xab9/0xd20 [ 165.701361][ T7679] ? do_fb_ioctl+0x598/0x750 [ 165.701394][ T7679] do_fb_ioctl+0x63b/0x750 [ 165.701408][ T7679] ? __pfx_do_fb_ioctl+0x10/0x10 [ 165.701454][ T7679] ? __fget_files+0x2a/0x420 [ 165.701481][ T7679] ? __fget_files+0x3a0/0x420 [ 165.701501][ T7679] ? __fget_files+0x2a/0x420 [ 165.701525][ T7679] ? bpf_lsm_file_ioctl+0x9/0x20 [ 165.701534][ T7679] ? __pfx_fb_ioctl+0x10/0x10 [ 165.701546][ T7679] __se_sys_ioctl+0xf9/0x170 [ 165.701559][ T7679] do_syscall_64+0xfa/0x3b0 [ 165.701571][ T7679] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.701583][ T7679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.701598][ T7679] ? clear_bhb_loop+0x60/0xb0 [ 165.701618][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.701634][ T7679] RIP: 0033:0x7ffaf338e929 [ 165.701650][ T7679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.701665][ T7679] RSP: 002b:00007ffaf42db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.701681][ T7679] RAX: ffffffffffffffda RBX: 00007ffaf35b5fa0 RCX: 00007ffaf338e929 [ 165.701688][ T7679] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 165.701694][ T7679] RBP: 00007ffaf42db090 R08: 0000000000000000 R09: 0000000000000000 [ 165.701699][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.701704][ T7679] R13: 0000000000000000 R14: 00007ffaf35b5fa0 R15: 00007ffcb1cea718 [ 165.701721][ T7679] [ 165.727318][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.727367][ T5842] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 165.727380][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.733674][ T5842] usb 4-1: config 0 descriptor?? [ 166.152570][ T5842] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 166.177328][ T5842] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002C/input/input49 [ 166.298713][ T5842] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 166.488343][ T5929] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 166.593774][ T7686] loop4: detected capacity change from 0 to 7 [ 166.602719][ T5843] Dev loop4: unable to read RDB block 7 [ 166.608778][ T5843] loop4: unable to read partition table [ 166.614689][ T5843] loop4: partition table beyond EOD, truncated [ 166.622184][ T7686] Dev loop4: unable to read RDB block 7 [ 166.629575][ T7686] loop4: unable to read partition table [ 166.635434][ T7686] loop4: partition table beyond EOD, truncated [ 166.642300][ T7686] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 166.652415][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 166.669792][ T5942] usb 4-1: USB disconnect, device number 28 [ 166.675823][ C0] keytouch 0003:0926:3333.002C: usb_submit_urb(ctrl) failed: -19 [ 166.687646][ T5929] usb 3-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 166.706951][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.715533][ T5929] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 166.726187][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.743820][ T5929] usb 3-1: config 0 descriptor?? [ 166.969454][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 166.975513][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 166.988566][ T5929] usb 3-1: USB disconnect, device number 34 [ 167.166612][ T7696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.176326][ T7696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.285860][ T7700] loop4: detected capacity change from 0 to 7 [ 167.292994][ T7700] Dev loop4: unable to read RDB block 7 [ 167.298623][ T7700] loop4: unable to read partition table [ 167.304717][ T7700] loop4: partition table beyond EOD, truncated [ 167.313282][ T7700] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 167.438490][ T7704] FAULT_INJECTION: forcing a failure. [ 167.438490][ T7704] name failslab, interval 1, probability 0, space 0, times 0 [ 167.438515][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.3.655 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 167.438528][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.438534][ T7704] Call Trace: [ 167.438538][ T7704] [ 167.438542][ T7704] dump_stack_lvl+0x189/0x250 [ 167.438559][ T7704] ? __pfx____ratelimit+0x10/0x10 [ 167.438572][ T7704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.438582][ T7704] ? __pfx__printk+0x10/0x10 [ 167.438598][ T7704] ? __pfx___might_resched+0x10/0x10 [ 167.438608][ T7704] ? fs_reclaim_acquire+0x7d/0x100 [ 167.438624][ T7704] should_fail_ex+0x414/0x560 [ 167.438644][ T7704] should_failslab+0xa8/0x100 [ 167.438658][ T7704] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 167.438670][ T7704] ? drm_atomic_get_connector_state+0x1a1/0x6e0 [ 167.438681][ T7704] ? ww_mutex_lock+0x3f/0x1c0 [ 167.438695][ T7704] ? drm_atomic_get_connector_state+0x1a1/0x6e0 [ 167.438705][ T7704] krealloc_noprof+0x124/0x340 [ 167.438719][ T7704] drm_atomic_get_connector_state+0x1a1/0x6e0 [ 167.438735][ T7704] drm_atomic_add_affected_connectors+0x2dd/0x410 [ 167.438749][ T7704] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 167.438760][ T7704] ? ww_mutex_lock+0x3f/0x1c0 [ 167.438774][ T7704] ? modeset_lock+0x37d/0x650 [ 167.438790][ T7704] __drm_atomic_helper_set_config+0x697/0xea0 [ 167.438809][ T7704] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 167.438822][ T7704] ? drm_client_rotation+0x47c/0x5b0 [ 167.438835][ T7704] drm_client_modeset_commit_atomic+0x469/0x760 [ 167.438854][ T7704] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 167.438876][ T7704] ? __pfx___mutex_lock+0x10/0x10 [ 167.438889][ T7704] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.438908][ T7704] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 167.438921][ T7704] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 167.438943][ T7704] fb_pan_display+0x39b/0x680 [ 167.438954][ T7704] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 167.438970][ T7704] fb_set_var+0x85a/0xf50 [ 167.438987][ T7704] ? __pfx_fb_set_var+0x10/0x10 [ 167.439002][ T7704] ? trace_contention_end+0x39/0x120 [ 167.439013][ T7704] ? __mutex_lock+0x330/0xe80 [ 167.439028][ T7704] ? __lock_acquire+0xab9/0xd20 [ 167.439044][ T7704] ? do_fb_ioctl+0x598/0x750 [ 167.439072][ T7704] do_fb_ioctl+0x63b/0x750 [ 167.439086][ T7704] ? __pfx_do_fb_ioctl+0x10/0x10 [ 167.439121][ T7704] ? __fget_files+0x2a/0x420 [ 167.439138][ T7704] ? __fget_files+0x3a0/0x420 [ 167.439150][ T7704] ? __fget_files+0x2a/0x420 [ 167.439166][ T7704] ? bpf_lsm_file_ioctl+0x9/0x20 [ 167.439176][ T7704] ? __pfx_fb_ioctl+0x10/0x10 [ 167.439188][ T7704] __se_sys_ioctl+0xf9/0x170 [ 167.439200][ T7704] do_syscall_64+0xfa/0x3b0 [ 167.439214][ T7704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.439222][ T7704] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.439231][ T7704] ? clear_bhb_loop+0x60/0xb0 [ 167.439243][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.439251][ T7704] RIP: 0033:0x7fb06b58e929 [ 167.439261][ T7704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.439269][ T7704] RSP: 002b:00007fb06c47b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.439280][ T7704] RAX: ffffffffffffffda RBX: 00007fb06b7b5fa0 RCX: 00007fb06b58e929 [ 167.439287][ T7704] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 167.439293][ T7704] RBP: 00007fb06c47b090 R08: 0000000000000000 R09: 0000000000000000 [ 167.439299][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.439304][ T7704] R13: 0000000000000000 R14: 00007fb06b7b5fa0 R15: 00007ffcab46bf58 [ 167.439321][ T7704] [ 167.576819][ T7707] loop4: detected capacity change from 0 to 7 [ 167.577760][ T7707] Dev loop4: unable to read RDB block 7 [ 167.577802][ T7707] loop4: unable to read partition table [ 167.577998][ T7707] loop4: partition table beyond EOD, truncated [ 167.578016][ T7707] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 167.922336][ T5929] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 168.027960][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.061566][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.203083][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 168.209828][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 168.220889][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.230744][ T5929] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 168.239846][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.250674][ T5929] usb 3-1: config 0 descriptor?? [ 168.303543][ T5842] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 168.455441][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.466935][ T5842] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 168.477283][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.489878][ T5929] logitech 0003:046D:C298.002D: report_id 0 is invalid [ 168.497961][ T5929] logitech 0003:046D:C298.002D: item 0 0 1 8 parsing failed [ 168.506505][ T5842] usb 4-1: config 0 descriptor?? [ 168.516385][ T5929] logitech 0003:046D:C298.002D: parse failed [ 168.522489][ T5842] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 168.529817][ T5929] logitech 0003:046D:C298.002D: probe with driver logitech failed with error -22 [ 168.688524][ T5929] usb 3-1: USB disconnect, device number 35 [ 168.723241][ T5842] pwc: send_video_command error -71 [ 168.735861][ T5842] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 168.743477][ T5842] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 168.764967][ T5842] usb 4-1: USB disconnect, device number 29 [ 168.773799][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.785455][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.342859][ T7725] loop4: detected capacity change from 0 to 7 [ 169.350844][ T7725] Dev loop4: unable to read RDB block 7 [ 169.359744][ T7725] loop4: unable to read partition table [ 169.365877][ T7725] loop4: partition table beyond EOD, truncated [ 169.372255][ T7725] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.500706][ T7730] loop4: detected capacity change from 0 to 7 [ 169.509500][ T7730] Dev loop4: unable to read RDB block 7 [ 169.515126][ T7730] loop4: unable to read partition table [ 169.521756][ T7730] loop4: partition table beyond EOD, truncated [ 169.528355][ T7730] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.567053][ T5903] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 169.717372][ T5842] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 169.728210][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 169.739519][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.746178][ T5903] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 169.755753][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.770073][ T5903] usb 3-1: config 0 descriptor?? [ 169.845148][ T7738] FAULT_INJECTION: forcing a failure. [ 169.845148][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 169.845173][ T7738] CPU: 0 UID: 0 PID: 7738 Comm: syz.1.670 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 169.845193][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.845203][ T7738] Call Trace: [ 169.845210][ T7738] [ 169.845217][ T7738] dump_stack_lvl+0x189/0x250 [ 169.845240][ T7738] ? __pfx____ratelimit+0x10/0x10 [ 169.845262][ T7738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.845277][ T7738] ? __pfx__printk+0x10/0x10 [ 169.845292][ T7738] ? __pfx___might_resched+0x10/0x10 [ 169.845301][ T7738] ? fs_reclaim_acquire+0x7d/0x100 [ 169.845317][ T7738] should_fail_ex+0x414/0x560 [ 169.845345][ T7738] should_failslab+0xa8/0x100 [ 169.845369][ T7738] __kmalloc_cache_noprof+0x70/0x3d0 [ 169.845388][ T7738] ? drm_atomic_state_alloc+0xa9/0x100 [ 169.845411][ T7738] drm_atomic_state_alloc+0xa9/0x100 [ 169.845426][ T7738] drm_client_modeset_commit_atomic+0xe2/0x760 [ 169.845438][ T7738] ? rcu_is_watching+0x15/0xb0 [ 169.845450][ T7738] ? __mutex_lock+0x330/0xe80 [ 169.845465][ T7738] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 169.845500][ T7738] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.845536][ T7738] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 169.845560][ T7738] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 169.845586][ T7738] fb_pan_display+0x39b/0x680 [ 169.845597][ T7738] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 169.845613][ T7738] bit_update_start+0x4d/0x1e0 [ 169.845629][ T7738] fbcon_modechanged+0xc3b/0x13a0 [ 169.845667][ T7738] do_fb_ioctl+0x6fd/0x750 [ 169.845692][ T7738] ? __pfx_do_fb_ioctl+0x10/0x10 [ 169.845738][ T7738] ? __fget_files+0x2a/0x420 [ 169.845754][ T7738] ? __fget_files+0x3a0/0x420 [ 169.845766][ T7738] ? __fget_files+0x2a/0x420 [ 169.845788][ T7738] ? bpf_lsm_file_ioctl+0x9/0x20 [ 169.845805][ T7738] ? __pfx_fb_ioctl+0x10/0x10 [ 169.845825][ T7738] __se_sys_ioctl+0xf9/0x170 [ 169.845847][ T7738] do_syscall_64+0xfa/0x3b0 [ 169.845865][ T7738] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.845877][ T7738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.845886][ T7738] ? clear_bhb_loop+0x60/0xb0 [ 169.845897][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.845906][ T7738] RIP: 0033:0x7f3edf18e929 [ 169.845916][ T7738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.845927][ T7738] RSP: 002b:00007f3ee0029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.845956][ T7738] RAX: ffffffffffffffda RBX: 00007f3edf3b5fa0 RCX: 00007f3edf18e929 [ 169.845969][ T7738] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 169.845980][ T7738] RBP: 00007f3ee0029090 R08: 0000000000000000 R09: 0000000000000000 [ 169.845990][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.846000][ T7738] R13: 0000000000000000 R14: 00007f3edf3b5fa0 R15: 00007fff21999388 [ 169.846023][ T7738] [ 169.869546][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.869582][ T5842] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 169.869595][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.872069][ T5842] usb 4-1: config 0 descriptor?? [ 169.994209][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 170.240981][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 170.254231][ T5903] usb 3-1: USB disconnect, device number 36 [ 170.347699][ T5842] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 170.368038][ T7742] tmpfs: Unknown parameter 'indo64' [ 170.375807][ T5842] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002E/input/input50 [ 170.423308][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.433311][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.493215][ T5842] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 170.729961][ T7749] loop4: detected capacity change from 0 to 7 [ 170.742323][ T7749] Dev loop4: unable to read RDB block 7 [ 170.748136][ T7749] loop4: unable to read partition table [ 170.754535][ T7749] loop4: partition table beyond EOD, truncated [ 170.761291][ T7749] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 170.884751][ T5842] usb 4-1: USB disconnect, device number 30 [ 171.023709][ T7753] loop4: detected capacity change from 0 to 7 [ 171.030901][ T7753] Dev loop4: unable to read RDB block 7 [ 171.036634][ T7753] loop4: unable to read partition table [ 171.044202][ T7753] loop4: partition table beyond EOD, truncated [ 171.050410][ T7753] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.103825][ T5942] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 171.271938][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 171.278799][ T5942] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 171.290071][ T5942] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 171.299377][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.307658][ T5942] usb 3-1: Product: syz [ 171.316445][ T5942] usb 3-1: Manufacturer: syz [ 171.321069][ T5942] usb 3-1: SerialNumber: syz [ 171.328554][ T5942] usb 3-1: config 0 descriptor?? [ 171.345545][ T5942] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 171.356818][ T5942] usb 3-1: Detected FT232B [ 171.483137][ T7760] FAULT_INJECTION: forcing a failure. [ 171.483137][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 171.483172][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.3.680 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 171.483192][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.483203][ T7760] Call Trace: [ 171.483212][ T7760] [ 171.483220][ T7760] dump_stack_lvl+0x189/0x250 [ 171.483243][ T7760] ? __pfx____ratelimit+0x10/0x10 [ 171.483264][ T7760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.483282][ T7760] ? __pfx__printk+0x10/0x10 [ 171.483308][ T7760] ? __pfx___might_resched+0x10/0x10 [ 171.483324][ T7760] ? fs_reclaim_acquire+0x7d/0x100 [ 171.483351][ T7760] should_fail_ex+0x414/0x560 [ 171.483383][ T7760] should_failslab+0xa8/0x100 [ 171.483405][ T7760] __kmalloc_noprof+0xcb/0x4f0 [ 171.483422][ T7760] ? drm_atomic_state_init+0x9c/0x310 [ 171.483446][ T7760] drm_atomic_state_init+0x9c/0x310 [ 171.483468][ T7760] drm_atomic_state_alloc+0xbc/0x100 [ 171.483487][ T7760] drm_client_modeset_commit_atomic+0xe2/0x760 [ 171.483507][ T7760] ? rcu_is_watching+0x15/0xb0 [ 171.483529][ T7760] ? __mutex_lock+0x330/0xe80 [ 171.483553][ T7760] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 171.483595][ T7760] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.483630][ T7760] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 171.483654][ T7760] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 171.483693][ T7760] fb_pan_display+0x39b/0x680 [ 171.483712][ T7760] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 171.483741][ T7760] bit_update_start+0x4d/0x1e0 [ 171.483764][ T7760] fbcon_modechanged+0xc3b/0x13a0 [ 171.483802][ T7760] do_fb_ioctl+0x6fd/0x750 [ 171.483827][ T7760] ? __pfx_do_fb_ioctl+0x10/0x10 [ 171.483898][ T7760] ? __fget_files+0x2a/0x420 [ 171.483926][ T7760] ? __fget_files+0x3a0/0x420 [ 171.483945][ T7760] ? __fget_files+0x2a/0x420 [ 171.483970][ T7760] ? bpf_lsm_file_ioctl+0x9/0x20 [ 171.483987][ T7760] ? __pfx_fb_ioctl+0x10/0x10 [ 171.484007][ T7760] __se_sys_ioctl+0xf9/0x170 [ 171.484028][ T7760] do_syscall_64+0xfa/0x3b0 [ 171.484050][ T7760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.484065][ T7760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 171.484081][ T7760] ? clear_bhb_loop+0x60/0xb0 [ 171.484101][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.484117][ T7760] RIP: 0033:0x7fb06b58e929 [ 171.484132][ T7760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.484147][ T7760] RSP: 002b:00007fb06c47b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.484165][ T7760] RAX: ffffffffffffffda RBX: 00007fb06b7b5fa0 RCX: 00007fb06b58e929 [ 171.484177][ T7760] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 171.484188][ T7760] RBP: 00007fb06c47b090 R08: 0000000000000000 R09: 0000000000000000 [ 171.484198][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.484208][ T7760] R13: 0000000000000000 R14: 00007fb06b7b5fa0 R15: 00007ffcab46bf58 [ 171.484240][ T7760] [ 172.060813][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.071230][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.175303][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 172.290758][ T5942] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 172.302210][ T5942] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 172.327139][ T5942] usb 3-1: USB disconnect, device number 37 [ 172.346596][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 172.348236][ T5942] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 172.374351][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.379229][ T5942] ftdi_sio 3-1:0.0: device disconnected [ 172.392388][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.405290][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 172.414579][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.421730][ T7773] loop4: detected capacity change from 0 to 7 [ 172.430877][ T5843] Dev loop4: unable to read RDB block 7 [ 172.432166][ T24] usb 4-1: config 0 descriptor?? [ 172.442300][ T5843] loop4: unable to read partition table [ 172.450420][ T5843] loop4: partition table beyond EOD, truncated [ 172.460301][ T7773] Dev loop4: unable to read RDB block 7 [ 172.467124][ T7773] loop4: unable to read partition table [ 172.473049][ T7773] loop4: partition table beyond EOD, truncated [ 172.482027][ T7773] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 172.662706][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 172.672500][ T7777] loop4: detected capacity change from 0 to 7 [ 172.673461][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 172.681980][ T5843] Dev loop4: unable to read RDB block 7 [ 172.693875][ T5843] loop4: unable to read partition table [ 172.700734][ T5843] loop4: partition table beyond EOD, truncated [ 172.702853][ T24] usb 4-1: USB disconnect, device number 31 [ 172.712473][ T7777] Dev loop4: unable to read RDB block 7 [ 172.721127][ T7777] loop4: unable to read partition table [ 172.727851][ T7777] loop4: partition table beyond EOD, truncated [ 172.734110][ T7777] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 172.810404][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.819769][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.846423][ T5942] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 172.998537][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.009548][ T5942] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 173.018654][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.029156][ T5942] usb 3-1: config 0 descriptor?? [ 173.247648][ T5942] usbhid 3-1:0.0: can't add hid device: -71 [ 173.253686][ T5942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 173.269045][ T5942] usb 3-1: USB disconnect, device number 38 [ 173.421652][ T7787] FAULT_INJECTION: forcing a failure. [ 173.421652][ T7787] name failslab, interval 1, probability 0, space 0, times 0 [ 173.421688][ T7787] CPU: 0 UID: 0 PID: 7787 Comm: syz.3.692 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 173.421707][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.421716][ T7787] Call Trace: [ 173.421723][ T7787] [ 173.421731][ T7787] dump_stack_lvl+0x189/0x250 [ 173.421754][ T7787] ? __pfx____ratelimit+0x10/0x10 [ 173.421776][ T7787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.421795][ T7787] ? __pfx__printk+0x10/0x10 [ 173.421821][ T7787] ? __pfx___might_resched+0x10/0x10 [ 173.421838][ T7787] ? fs_reclaim_acquire+0x7d/0x100 [ 173.421863][ T7787] should_fail_ex+0x414/0x560 [ 173.421895][ T7787] should_failslab+0xa8/0x100 [ 173.421917][ T7787] __kmalloc_cache_noprof+0x70/0x3d0 [ 173.421936][ T7787] ? drm_atomic_helper_setup_commit+0x1c9/0x1370 [ 173.421972][ T7787] drm_atomic_helper_setup_commit+0x1c9/0x1370 [ 173.422002][ T7787] ? __pfx___drm_dev_dbg+0x10/0x10 [ 173.422031][ T7787] drm_atomic_helper_commit+0x6a/0xb10 [ 173.422061][ T7787] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 173.422082][ T7787] drm_atomic_commit+0x25f/0x2c0 [ 173.422106][ T7787] ? __pfx_drm_atomic_commit+0x10/0x10 [ 173.422123][ T7787] ? __pfx___drm_printfn_info+0x10/0x10 [ 173.422151][ T7787] ? drm_client_rotation+0x47c/0x5b0 [ 173.422175][ T7787] drm_client_modeset_commit_atomic+0x620/0x760 [ 173.422209][ T7787] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 173.422252][ T7787] ? __pfx___mutex_lock+0x10/0x10 [ 173.422273][ T7787] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.422306][ T7787] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 173.422328][ T7787] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 173.422364][ T7787] fb_pan_display+0x39b/0x680 [ 173.422382][ T7787] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 173.422408][ T7787] fb_set_var+0x85a/0xf50 [ 173.422440][ T7787] ? __pfx_fb_set_var+0x10/0x10 [ 173.422465][ T7787] ? trace_contention_end+0x39/0x120 [ 173.422483][ T7787] ? __mutex_lock+0x330/0xe80 [ 173.422508][ T7787] ? __lock_acquire+0xab9/0xd20 [ 173.422532][ T7787] ? do_fb_ioctl+0x598/0x750 [ 173.422582][ T7787] do_fb_ioctl+0x63b/0x750 [ 173.422604][ T7787] ? __pfx_do_fb_ioctl+0x10/0x10 [ 173.422667][ T7787] ? __fget_files+0x2a/0x420 [ 173.422693][ T7787] ? __fget_files+0x3a0/0x420 [ 173.422714][ T7787] ? __fget_files+0x2a/0x420 [ 173.422739][ T7787] ? bpf_lsm_file_ioctl+0x9/0x20 [ 173.422755][ T7787] ? __pfx_fb_ioctl+0x10/0x10 [ 173.422776][ T7787] __se_sys_ioctl+0xf9/0x170 [ 173.422798][ T7787] do_syscall_64+0xfa/0x3b0 [ 173.422818][ T7787] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.422837][ T7787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.422853][ T7787] ? clear_bhb_loop+0x60/0xb0 [ 173.422874][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.422890][ T7787] RIP: 0033:0x7fb06b58e929 [ 173.422905][ T7787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.422919][ T7787] RSP: 002b:00007fb06c47b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.422937][ T7787] RAX: ffffffffffffffda RBX: 00007fb06b7b5fa0 RCX: 00007fb06b58e929 [ 173.422955][ T7787] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 173.422966][ T7787] RBP: 00007fb06c47b090 R08: 0000000000000000 R09: 0000000000000000 [ 173.422976][ T7787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.422985][ T7787] R13: 0000000000000000 R14: 00007fb06b7b5fa0 R15: 00007ffcab46bf58 [ 173.423015][ T7787] [ 173.682867][ T5942] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 173.849095][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 173.866775][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.895720][ T5942] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 173.915167][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.942170][ T5942] usb 3-1: config 0 descriptor?? [ 173.975382][ T7799] loop4: detected capacity change from 0 to 7 [ 173.982867][ T7799] Dev loop4: unable to read RDB block 7 [ 173.988597][ T7799] loop4: unable to read partition table [ 173.995152][ T7799] loop4: partition table beyond EOD, truncated [ 174.001957][ T7799] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.199655][ T5929] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 174.367791][ T5942] mcp2221 0003:04D8:00DD.002F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 174.383512][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.395042][ T5929] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.395466][ T7807] loop4: detected capacity change from 0 to 7 [ 174.411381][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.423739][ T5929] usb 1-1: config 0 descriptor?? [ 174.423928][ T7807] Dev loop4: unable to read RDB block 7 [ 174.437072][ T7810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.455299][ T7810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.463937][ T7807] loop4: unable to read partition table [ 174.470016][ T7807] loop4: partition table beyond EOD, truncated [ 174.476961][ T7807] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.521398][ T5205] Dev loop4: unable to read RDB block 7 [ 174.527055][ T5205] loop4: unable to read partition table [ 174.535595][ T5205] loop4: partition table beyond EOD, truncated [ 174.787602][ T24] usb 3-1: USB disconnect, device number 39 [ 174.836308][ T5942] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 174.874611][ T5929] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 174.898033][ T5929] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0030/input/input51 [ 175.007704][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.036934][ T5942] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 175.052309][ T5929] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 175.067840][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.110409][ T5942] usb 4-1: config 0 descriptor?? [ 175.210043][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.221476][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.236356][ T7822] FAULT_INJECTION: forcing a failure. [ 175.236356][ T7822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.249840][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: syz.1.704 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 175.249864][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.249875][ T7822] Call Trace: [ 175.249882][ T7822] [ 175.249892][ T7822] dump_stack_lvl+0x189/0x250 [ 175.249915][ T7822] ? __pfx____ratelimit+0x10/0x10 [ 175.249937][ T7822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.249955][ T7822] ? __pfx__printk+0x10/0x10 [ 175.249988][ T7822] should_fail_ex+0x414/0x560 [ 175.250018][ T7822] _copy_to_user+0x31/0xb0 [ 175.250037][ T7822] simple_read_from_buffer+0xe1/0x170 [ 175.250065][ T7822] proc_fail_nth_read+0x1df/0x250 [ 175.250085][ T7822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.250105][ T7822] ? rw_verify_area+0x258/0x650 [ 175.250123][ T7822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.250139][ T7822] vfs_read+0x200/0x980 [ 175.250163][ T7822] ? __pfx___mutex_lock+0x10/0x10 [ 175.250185][ T7822] ? __pfx_vfs_read+0x10/0x10 [ 175.250205][ T7822] ? __fget_files+0x2a/0x420 [ 175.250230][ T7822] ? __fget_files+0x3a0/0x420 [ 175.250250][ T7822] ? __fget_files+0x2a/0x420 [ 175.250279][ T7822] ksys_read+0x145/0x250 [ 175.250301][ T7822] ? __pfx_ksys_read+0x10/0x10 [ 175.250325][ T7822] ? do_syscall_64+0xbe/0x3b0 [ 175.250350][ T7822] do_syscall_64+0xfa/0x3b0 [ 175.250369][ T7822] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.250389][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.250405][ T7822] ? clear_bhb_loop+0x60/0xb0 [ 175.250424][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.250440][ T7822] RIP: 0033:0x7f3edf18d33c [ 175.250455][ T7822] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 175.250482][ T7822] RSP: 002b:00007f3ee0029030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.250499][ T7822] RAX: ffffffffffffffda RBX: 00007f3edf3b5fa0 RCX: 00007f3edf18d33c [ 175.250510][ T7822] RDX: 000000000000000f RSI: 00007f3ee00290a0 RDI: 0000000000000004 [ 175.250519][ T7822] RBP: 00007f3ee0029090 R08: 0000000000000000 R09: 0000000000000000 [ 175.250528][ T7822] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 175.250537][ T7822] R13: 0000000000000000 R14: 00007f3edf3b5fa0 R15: 00007fff21999388 [ 175.250562][ T7822] [ 175.476608][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.518508][ T5903] usb 1-1: USB disconnect, device number 29 [ 175.553585][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 175.724252][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 175.738396][ T24] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 175.749606][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 175.758659][ T24] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 175.770707][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.792285][ T24] usb 3-1: config 0 descriptor?? [ 175.792680][ T5942] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor [ 175.799392][ T5942] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0031/input/input52 [ 175.884057][ T5942] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 176.014734][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 176.020778][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 176.100199][ T24] usb 3-1: USB disconnect, device number 40 [ 176.100905][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.155178][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.195925][ T7839] FAULT_INJECTION: forcing a failure. [ 176.195925][ T7839] name failslab, interval 1, probability 0, space 0, times 0 [ 176.195961][ T7839] CPU: 0 UID: 0 PID: 7839 Comm: syz.0.709 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 176.195981][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.195992][ T7839] Call Trace: [ 176.195998][ T7839] [ 176.196006][ T7839] dump_stack_lvl+0x189/0x250 [ 176.196034][ T7839] ? __pfx____ratelimit+0x10/0x10 [ 176.196062][ T7839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.196080][ T7839] ? __pfx__printk+0x10/0x10 [ 176.196107][ T7839] ? __pfx___might_resched+0x10/0x10 [ 176.196123][ T7839] ? fs_reclaim_acquire+0x7d/0x100 [ 176.196148][ T7839] should_fail_ex+0x414/0x560 [ 176.196180][ T7839] should_failslab+0xa8/0x100 [ 176.196202][ T7839] __kmalloc_cache_noprof+0x70/0x3d0 [ 176.196221][ T7839] ? vkms_plane_duplicate_state+0x51/0x110 [ 176.196249][ T7839] vkms_plane_duplicate_state+0x51/0x110 [ 176.196274][ T7839] drm_atomic_get_plane_state+0x25a/0x5a0 [ 176.196302][ T7839] drm_client_modeset_commit_atomic+0x1e7/0x760 [ 176.196337][ T7839] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 176.196380][ T7839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.196415][ T7839] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 176.196439][ T7839] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 176.196479][ T7839] fb_pan_display+0x39b/0x680 [ 176.196499][ T7839] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 176.196527][ T7839] bit_update_start+0x4d/0x1e0 [ 176.196550][ T7839] fbcon_modechanged+0xc3b/0x13a0 [ 176.196589][ T7839] do_fb_ioctl+0x6fd/0x750 [ 176.196614][ T7839] ? __pfx_do_fb_ioctl+0x10/0x10 [ 176.196688][ T7839] ? __fget_files+0x2a/0x420 [ 176.196715][ T7839] ? __fget_files+0x3a0/0x420 [ 176.196734][ T7839] ? __fget_files+0x2a/0x420 [ 176.196760][ T7839] ? bpf_lsm_file_ioctl+0x9/0x20 [ 176.196777][ T7839] ? __pfx_fb_ioctl+0x10/0x10 [ 176.196797][ T7839] __se_sys_ioctl+0xf9/0x170 [ 176.196819][ T7839] do_syscall_64+0xfa/0x3b0 [ 176.196839][ T7839] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.196858][ T7839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.196874][ T7839] ? clear_bhb_loop+0x60/0xb0 [ 176.196896][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.196912][ T7839] RIP: 0033:0x7fd63ed8e929 [ 176.196927][ T7839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.196942][ T7839] RSP: 002b:00007fd63cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.196960][ T7839] RAX: ffffffffffffffda RBX: 00007fd63efb5fa0 RCX: 00007fd63ed8e929 [ 176.196972][ T7839] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 176.196983][ T7839] RBP: 00007fd63cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.196993][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.197002][ T7839] R13: 0000000000000000 R14: 00007fd63efb5fa0 R15: 00007ffc5c97d6f8 [ 176.197034][ T7839] [ 176.323552][ T5942] usb 4-1: USB disconnect, device number 32 [ 176.401182][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.401623][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.677227][ T7841] loop4: detected capacity change from 0 to 7 [ 176.759938][ T5843] Dev loop4: unable to read RDB block 7 [ 176.765962][ T5843] loop4: unable to read partition table [ 176.775834][ T5843] loop4: partition table beyond EOD, truncated [ 176.790770][ T7841] Dev loop4: unable to read RDB block 7 [ 176.810371][ T7841] loop4: unable to read partition table [ 176.816759][ T7841] loop4: partition table beyond EOD, truncated [ 176.863609][ T7841] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.937915][ T5205] Dev loop4: unable to read RDB block 7 [ 176.943575][ T5205] loop4: unable to read partition table [ 176.955070][ T5205] loop4: partition table beyond EOD, truncated [ 177.063006][ T7850] loop4: detected capacity change from 0 to 7 [ 177.111625][ T5843] Dev loop4: unable to read RDB block 7 [ 177.117556][ T5843] loop4: unable to read partition table [ 177.123519][ T5843] loop4: partition table beyond EOD, truncated [ 177.145157][ T7850] Dev loop4: unable to read RDB block 7 [ 177.152719][ T7850] loop4: unable to read partition table [ 177.177468][ T7850] loop4: partition table beyond EOD, truncated [ 177.187425][ T7850] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 177.458093][ T5929] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 177.628397][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 177.635596][ T5929] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.656018][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.671281][ T5929] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 177.688651][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.702354][ T5929] usb 3-1: config 0 descriptor?? [ 177.718777][ T5842] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 177.792006][ T5942] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 177.870122][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 177.878409][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 177.889053][ T5842] usb 4-1: config 0 interface 0 has no altsetting 1 [ 177.912128][ T5842] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 177.930062][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.938936][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 177.945021][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 177.953042][ T5842] usb 4-1: SerialNumber: syz [ 177.960401][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.985904][ T5942] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 177.996067][ T5842] usb 4-1: config 0 descriptor?? [ 178.001409][ T5929] usb 3-1: USB disconnect, device number 41 [ 178.011564][ T5842] usb-storage 4-1:0.0: USB Mass Storage device detected [ 178.021935][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.041757][ T5942] usb 1-1: config 0 descriptor?? [ 178.063491][ T5842] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 178.211773][ T7862] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.717'. [ 178.221534][ T7861] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.717'. [ 178.266408][ T5903] usb 4-1: USB disconnect, device number 33 [ 178.307310][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.317673][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.474877][ T5942] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 178.521866][ T5942] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0032/input/input53 [ 178.666249][ T5942] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 178.885211][ T7880] FAULT_INJECTION: forcing a failure. [ 178.885211][ T7880] name failslab, interval 1, probability 0, space 0, times 0 [ 178.885268][ T7880] CPU: 1 UID: 0 PID: 7880 Comm: syz.3.723 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 178.885288][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.885299][ T7880] Call Trace: [ 178.885306][ T7880] [ 178.885313][ T7880] dump_stack_lvl+0x189/0x250 [ 178.885336][ T7880] ? __pfx____ratelimit+0x10/0x10 [ 178.885358][ T7880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.885380][ T7880] ? __pfx__printk+0x10/0x10 [ 178.885406][ T7880] ? __pfx___might_resched+0x10/0x10 [ 178.885422][ T7880] ? fs_reclaim_acquire+0x7d/0x100 [ 178.885454][ T7880] should_fail_ex+0x414/0x560 [ 178.885486][ T7880] should_failslab+0xa8/0x100 [ 178.885509][ T7880] __kmalloc_cache_noprof+0x70/0x3d0 [ 178.885527][ T7880] ? vkms_plane_duplicate_state+0x8d/0x110 [ 178.885555][ T7880] vkms_plane_duplicate_state+0x8d/0x110 [ 178.885577][ T7880] drm_atomic_get_plane_state+0x25a/0x5a0 [ 178.885600][ T7880] drm_client_modeset_commit_atomic+0x1e7/0x760 [ 178.885634][ T7880] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 178.885673][ T7880] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 178.885707][ T7880] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 178.885730][ T7880] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 178.885770][ T7880] fb_pan_display+0x39b/0x680 [ 178.885789][ T7880] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 178.885818][ T7880] bit_update_start+0x4d/0x1e0 [ 178.885840][ T7880] fbcon_modechanged+0xc3b/0x13a0 [ 178.885879][ T7880] do_fb_ioctl+0x6fd/0x750 [ 178.885904][ T7880] ? __pfx_do_fb_ioctl+0x10/0x10 [ 178.885968][ T7880] ? __fget_files+0x2a/0x420 [ 178.885995][ T7880] ? __fget_files+0x3a0/0x420 [ 178.886014][ T7880] ? __fget_files+0x2a/0x420 [ 178.886040][ T7880] ? bpf_lsm_file_ioctl+0x9/0x20 [ 178.886056][ T7880] ? __pfx_fb_ioctl+0x10/0x10 [ 178.886076][ T7880] __se_sys_ioctl+0xf9/0x170 [ 178.886101][ T7880] do_syscall_64+0xfa/0x3b0 [ 178.886125][ T7880] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.886145][ T7880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.886160][ T7880] ? clear_bhb_loop+0x60/0xb0 [ 178.886181][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.886196][ T7880] RIP: 0033:0x7fb06b58e929 [ 178.886211][ T7880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.886226][ T7880] RSP: 002b:00007fb06c47b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.886243][ T7880] RAX: ffffffffffffffda RBX: 00007fb06b7b5fa0 RCX: 00007fb06b58e929 [ 178.886256][ T7880] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 178.886266][ T7880] RBP: 00007fb06c47b090 R08: 0000000000000000 R09: 0000000000000000 [ 178.886277][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.886286][ T7880] R13: 0000000000000000 R14: 00007fb06b7b5fa0 R15: 00007ffcab46bf58 [ 178.886318][ T7880] [ 178.901592][ T5903] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 178.915397][ T7882] loop4: detected capacity change from 0 to 7 [ 178.916558][ T7882] Dev loop4: unable to read RDB block 7 [ 178.916602][ T7882] loop4: unable to read partition table [ 178.916838][ T7882] loop4: partition table beyond EOD, truncated [ 178.916866][ T7882] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 179.001464][ T5929] usb 1-1: USB disconnect, device number 30 [ 179.055006][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.055055][ T5903] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.055076][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.065261][ T5903] usb 3-1: config 0 descriptor?? [ 179.486753][ T5903] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 179.496632][ T5903] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0033/input/input54 [ 179.637565][ T5903] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 179.784019][ T7897] loop4: detected capacity change from 0 to 7 [ 179.827123][ T7897] Dev loop4: unable to read RDB block 7 [ 179.832834][ T7897] loop4: unable to read partition table [ 179.840158][ T7897] loop4: partition table beyond EOD, truncated [ 179.847584][ T7897] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.013823][ T5903] usb 3-1: USB disconnect, device number 42 [ 180.121500][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.131983][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.143695][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.153881][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.274908][ T5929] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 180.325219][ T5922] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 180.425348][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 180.434362][ T5929] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.444361][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.451211][ T5929] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 180.460405][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.471510][ T5929] usb 4-1: config 0 descriptor?? [ 180.495492][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 180.502685][ T5922] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.513117][ T5922] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.519824][ T5922] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 180.529332][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.541781][ T5922] usb 1-1: config 0 descriptor?? [ 180.609117][ T7909] loop4: detected capacity change from 0 to 7 [ 180.619337][ T7909] Dev loop4: unable to read RDB block 7 [ 180.625015][ T7909] loop4: unable to read partition table [ 180.631278][ T7909] loop4: partition table beyond EOD, truncated [ 180.637810][ T7909] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.687584][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 180.704715][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 180.747939][ T5929] usb 4-1: USB disconnect, device number 34 [ 180.764244][ T5922] usbhid 1-1:0.0: can't add hid device: -71 [ 180.785524][ T5922] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 180.803136][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.806203][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.810063][ T5922] usb 1-1: USB disconnect, device number 31 [ 180.814837][ T7911] FAULT_INJECTION: forcing a failure. [ 180.814837][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 180.814858][ T7911] CPU: 1 UID: 0 PID: 7911 Comm: syz.2.736 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 180.814872][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.814878][ T7911] Call Trace: [ 180.814882][ T7911] [ 180.814887][ T7911] dump_stack_lvl+0x189/0x250 [ 180.814902][ T7911] ? __pfx____ratelimit+0x10/0x10 [ 180.814916][ T7911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.814926][ T7911] ? __pfx__printk+0x10/0x10 [ 180.814941][ T7911] ? __pfx___might_resched+0x10/0x10 [ 180.814950][ T7911] ? fs_reclaim_acquire+0x7d/0x100 [ 180.814966][ T7911] should_fail_ex+0x414/0x560 [ 180.814986][ T7911] should_failslab+0xa8/0x100 [ 180.815000][ T7911] __kmalloc_cache_noprof+0x70/0x3d0 [ 180.815010][ T7911] ? drm_atomic_state_alloc+0xa9/0x100 [ 180.815024][ T7911] drm_atomic_state_alloc+0xa9/0x100 [ 180.815038][ T7911] drm_client_modeset_commit_atomic+0xe2/0x760 [ 180.815049][ T7911] ? rcu_is_watching+0x15/0xb0 [ 180.815061][ T7911] ? __mutex_lock+0x330/0xe80 [ 180.815076][ T7911] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 180.815098][ T7911] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.815118][ T7911] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 180.815131][ T7911] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 180.815154][ T7911] fb_pan_display+0x39b/0x680 [ 180.815166][ T7911] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 180.815182][ T7911] bit_update_start+0x4d/0x1e0 [ 180.815195][ T7911] fbcon_modechanged+0xc3b/0x13a0 [ 180.815218][ T7911] do_fb_ioctl+0x6fd/0x750 [ 180.815232][ T7911] ? __pfx_do_fb_ioctl+0x10/0x10 [ 180.815268][ T7911] ? __fget_files+0x2a/0x420 [ 180.815290][ T7911] ? __fget_files+0x3a0/0x420 [ 180.815302][ T7911] ? __fget_files+0x2a/0x420 [ 180.815317][ T7911] ? bpf_lsm_file_ioctl+0x9/0x20 [ 180.815327][ T7911] ? __pfx_fb_ioctl+0x10/0x10 [ 180.815339][ T7911] __se_sys_ioctl+0xf9/0x170 [ 180.815351][ T7911] do_syscall_64+0xfa/0x3b0 [ 180.815363][ T7911] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.815375][ T7911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.815384][ T7911] ? clear_bhb_loop+0x60/0xb0 [ 180.815395][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.815404][ T7911] RIP: 0033:0x7ffaf338e929 [ 180.815413][ T7911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.815421][ T7911] RSP: 002b:00007ffaf42db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.815432][ T7911] RAX: ffffffffffffffda RBX: 00007ffaf35b5fa0 RCX: 00007ffaf338e929 [ 180.815438][ T7911] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 180.815445][ T7911] RBP: 00007ffaf42db090 R08: 0000000000000000 R09: 0000000000000000 [ 180.815450][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.815455][ T7911] R13: 0000000000000000 R14: 00007ffaf35b5fa0 R15: 00007ffcb1cea718 [ 180.815472][ T7911] [ 181.433398][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 181.485487][ T7922] loop4: detected capacity change from 0 to 7 [ 181.498031][ T5929] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 181.502814][ T7922] Dev loop4: unable to read RDB block 7 [ 181.512868][ T7922] loop4: unable to read partition table [ 181.523559][ T7922] loop4: partition table beyond EOD, truncated [ 181.544991][ T7922] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 181.654085][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.655280][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.684916][ T5929] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 181.684944][ T5929] usb 4-1: config 0 has no interface number 0 [ 181.684982][ T5929] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.685003][ T5929] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 181.685025][ T5929] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 181.685046][ T5929] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 181.685068][ T5929] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 181.685089][ T5929] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.685127][ T5929] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 181.685147][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.690788][ T5929] usb 4-1: config 0 descriptor?? [ 181.806631][ T7915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 181.814081][ T7915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 181.833090][ T5929] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 181.839522][ T7934] loop4: detected capacity change from 0 to 7 [ 181.856332][ T6174] Dev loop4: unable to read RDB block 7 [ 181.862613][ T6174] loop4: unable to read partition table [ 181.868435][ T6174] loop4: partition table beyond EOD, truncated [ 181.878732][ T7934] Dev loop4: unable to read RDB block 7 [ 181.884481][ T7934] loop4: unable to read partition table [ 181.891244][ T7934] loop4: partition table beyond EOD, truncated [ 181.897441][ T7934] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 181.915610][ T5205] Dev loop4: unable to read RDB block 7 [ 181.922447][ T5205] loop4: unable to read partition table [ 181.928945][ T5922] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 181.936856][ T5205] loop4: partition table beyond EOD, truncated [ 182.052680][ T24] usb 4-1: USB disconnect, device number 35 [ 182.066664][ T24] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 182.084219][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.096677][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.108485][ T5922] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 182.118237][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.133653][ T5922] usb 3-1: config 0 descriptor?? [ 182.249670][ T5903] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 182.399928][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 182.408425][ T5903] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid maxpacket 10781, setting to 64 [ 182.423567][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.430593][ T5903] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 182.440779][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.452767][ T5903] usb 1-1: config 0 descriptor?? [ 182.548145][ T5922] cm6533_jd 0003:0D8C:0022.0034: unknown main item tag 0x0 [ 182.555793][ T5922] cm6533_jd 0003:0D8C:0022.0034: unknown main item tag 0x0 [ 182.577561][ T5922] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0034/input/input56 [ 182.637091][ T5922] cm6533_jd 0003:0D8C:0022.0034: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 182.683741][ T5903] usbhid 1-1:0.0: can't add hid device: -71 [ 182.705171][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 182.731891][ T5903] usb 1-1: USB disconnect, device number 32 [ 182.876991][ T7943] FAULT_INJECTION: forcing a failure. [ 182.876991][ T7943] name failslab, interval 1, probability 0, space 0, times 0 [ 182.877050][ T7943] CPU: 1 UID: 0 PID: 7943 Comm: syz.3.749 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 182.877070][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.877080][ T7943] Call Trace: [ 182.877087][ T7943] [ 182.877095][ T7943] dump_stack_lvl+0x189/0x250 [ 182.877118][ T7943] ? __pfx____ratelimit+0x10/0x10 [ 182.877141][ T7943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.877163][ T7943] ? __pfx__printk+0x10/0x10 [ 182.877189][ T7943] ? __pfx___might_resched+0x10/0x10 [ 182.877205][ T7943] ? fs_reclaim_acquire+0x7d/0x100 [ 182.877232][ T7943] should_fail_ex+0x414/0x560 [ 182.877263][ T7943] should_failslab+0xa8/0x100 [ 182.877285][ T7943] __kmalloc_cache_noprof+0x70/0x3d0 [ 182.877304][ T7943] ? vkms_plane_duplicate_state+0x51/0x110 [ 182.877333][ T7943] vkms_plane_duplicate_state+0x51/0x110 [ 182.877358][ T7943] drm_atomic_get_plane_state+0x25a/0x5a0 [ 182.877387][ T7943] drm_client_modeset_commit_atomic+0x1e7/0x760 [ 182.877423][ T7943] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 182.877465][ T7943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.877501][ T7943] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 182.877526][ T7943] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 182.877567][ T7943] fb_pan_display+0x39b/0x680 [ 182.877586][ T7943] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 182.877614][ T7943] bit_update_start+0x4d/0x1e0 [ 182.877637][ T7943] fbcon_modechanged+0xc3b/0x13a0 [ 182.877677][ T7943] do_fb_ioctl+0x6fd/0x750 [ 182.877702][ T7943] ? __pfx_do_fb_ioctl+0x10/0x10 [ 182.877768][ T7943] ? __fget_files+0x2a/0x420 [ 182.877795][ T7943] ? __fget_files+0x3a0/0x420 [ 182.877814][ T7943] ? __fget_files+0x2a/0x420 [ 182.877839][ T7943] ? bpf_lsm_file_ioctl+0x9/0x20 [ 182.877855][ T7943] ? __pfx_fb_ioctl+0x10/0x10 [ 182.877876][ T7943] __se_sys_ioctl+0xf9/0x170 [ 182.877898][ T7943] do_syscall_64+0xfa/0x3b0 [ 182.877917][ T7943] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.877937][ T7943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.877954][ T7943] ? clear_bhb_loop+0x60/0xb0 [ 182.877975][ T7943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.877991][ T7943] RIP: 0033:0x7fb06b58e929 [ 182.878007][ T7943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.878021][ T7943] RSP: 002b:00007fb06c47b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.878039][ T7943] RAX: ffffffffffffffda RBX: 00007fb06b7b5fa0 RCX: 00007fb06b58e929 [ 182.878057][ T7943] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 182.878066][ T7943] RBP: 00007fb06c47b090 R08: 0000000000000000 R09: 0000000000000000 [ 182.878077][ T7943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.878086][ T7943] R13: 0000000000000000 R14: 00007fb06b7b5fa0 R15: 00007ffcab46bf58 [ 182.878118][ T7943] [ 182.933459][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.933921][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.284795][ T5922] usb 3-1: USB disconnect, device number 43 [ 183.531703][ T7960] loop4: detected capacity change from 0 to 7 [ 183.560528][ T5843] Dev loop4: unable to read RDB block 7 [ 183.567216][ T5843] loop4: unable to read partition table [ 183.593247][ T5843] loop4: partition table beyond EOD, truncated [ 183.602176][ T7960] Dev loop4: unable to read RDB block 7 [ 183.609905][ T7960] loop4: unable to read partition table [ 183.617086][ T7960] loop4: partition table beyond EOD, truncated [ 183.633950][ T7960] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.658166][ T5205] Dev loop4: unable to read RDB block 7 [ 183.664334][ T5205] loop4: unable to read partition table [ 183.671599][ T5205] loop4: partition table beyond EOD, truncated [ 183.870222][ T5922] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 183.973888][ T7969] loop4: detected capacity change from 0 to 7 [ 183.985290][ T5843] Dev loop4: unable to read RDB block 7 [ 183.993222][ T5843] loop4: unable to read partition table [ 183.999583][ T5843] loop4: partition table beyond EOD, truncated [ 184.009927][ T7969] Dev loop4: unable to read RDB block 7 [ 184.016201][ T7969] loop4: unable to read partition table [ 184.022544][ T7969] loop4: partition table beyond EOD, truncated [ 184.033035][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.034001][ T7969] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.055903][ T5922] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 184.068224][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.085790][ T5922] usb 4-1: config 0 descriptor?? [ 184.230696][ T5903] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 184.393038][ T7979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.412461][ T7979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.422271][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.440223][ T5903] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.449234][ T5903] usb 3-1: config 1 has no interface number 1 [ 184.470189][ T5903] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 184.483217][ T5903] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x76, changing to 0x6 [ 184.495894][ T5903] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 101, changing to 7 [ 184.514962][ T5922] keytouch 0003:0926:3333.0035: fixing up Keytouch IEC report descriptor [ 184.529420][ T5903] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 25951, setting to 1024 [ 184.545726][ T5922] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0035/input/input57 [ 184.564362][ T5903] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.573791][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.585395][ T5903] usb 3-1: Product: syz [ 184.590829][ T5903] usb 3-1: Manufacturer: syz [ 184.595640][ T5903] usb 3-1: SerialNumber: syz [ 184.609378][ T7970] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.667624][ T5922] keytouch 0003:0926:3333.0035: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 184.917674][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.926797][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.956885][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.976467][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.003389][ T5903] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 185.003494][ T5903] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 185.010541][ T7982] FAULT_INJECTION: forcing a failure. [ 185.010541][ T7982] name failslab, interval 1, probability 0, space 0, times 0 [ 185.010573][ T7982] CPU: 0 UID: 0 PID: 7982 Comm: syz.0.764 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 185.010592][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.010603][ T7982] Call Trace: [ 185.010610][ T7982] [ 185.010617][ T7982] dump_stack_lvl+0x189/0x250 [ 185.010641][ T7982] ? __pfx____ratelimit+0x10/0x10 [ 185.010664][ T7982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.010682][ T7982] ? __pfx__printk+0x10/0x10 [ 185.010708][ T7982] ? __pfx___might_resched+0x10/0x10 [ 185.010724][ T7982] ? fs_reclaim_acquire+0x7d/0x100 [ 185.010751][ T7982] should_fail_ex+0x414/0x560 [ 185.010784][ T7982] should_failslab+0xa8/0x100 [ 185.010806][ T7982] __kmalloc_cache_noprof+0x70/0x3d0 [ 185.010825][ T7982] ? vkms_plane_duplicate_state+0x8d/0x110 [ 185.010854][ T7982] vkms_plane_duplicate_state+0x8d/0x110 [ 185.010878][ T7982] drm_atomic_get_plane_state+0x25a/0x5a0 [ 185.010906][ T7982] drm_client_modeset_commit_atomic+0x1e7/0x760 [ 185.010948][ T7982] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 185.010990][ T7982] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.011027][ T7982] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 185.011052][ T7982] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 185.011092][ T7982] fb_pan_display+0x39b/0x680 [ 185.011111][ T7982] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 185.011139][ T7982] bit_update_start+0x4d/0x1e0 [ 185.011162][ T7982] fbcon_modechanged+0xc3b/0x13a0 [ 185.011201][ T7982] do_fb_ioctl+0x6fd/0x750 [ 185.011225][ T7982] ? __pfx_do_fb_ioctl+0x10/0x10 [ 185.011290][ T7982] ? __fget_files+0x2a/0x420 [ 185.011318][ T7982] ? __fget_files+0x3a0/0x420 [ 185.011338][ T7982] ? __fget_files+0x2a/0x420 [ 185.011363][ T7982] ? bpf_lsm_file_ioctl+0x9/0x20 [ 185.011380][ T7982] ? __pfx_fb_ioctl+0x10/0x10 [ 185.011400][ T7982] __se_sys_ioctl+0xf9/0x170 [ 185.011422][ T7982] do_syscall_64+0xfa/0x3b0 [ 185.011441][ T7982] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.011460][ T7982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.011476][ T7982] ? clear_bhb_loop+0x60/0xb0 [ 185.011498][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.011514][ T7982] RIP: 0033:0x7fd63ed8e929 [ 185.011529][ T7982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.011543][ T7982] RSP: 002b:00007fd63cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.011562][ T7982] RAX: ffffffffffffffda RBX: 00007fd63efb5fa0 RCX: 00007fd63ed8e929 [ 185.011574][ T7982] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 185.011586][ T7982] RBP: 00007fd63cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 185.011596][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.011606][ T7982] R13: 0000000000000000 R14: 00007fd63efb5fa0 R15: 00007ffc5c97d6f8 [ 185.011638][ T7982] [ 185.029971][ T5929] usb 4-1: USB disconnect, device number 36 [ 185.085673][ T5903] usb 3-1: USB disconnect, device number 44 [ 185.572912][ T5842] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 185.708386][ T7993] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 185.710282][ T5842] usb 1-1: device descriptor read/64, error -71 [ 185.733253][ T7994] loop4: detected capacity change from 0 to 7 [ 185.737555][ T7994] Dev loop4: unable to read RDB block 7 [ 185.737604][ T7994] loop4: unable to read partition table [ 185.737810][ T7994] loop4: partition table beyond EOD, truncated [ 185.737837][ T7994] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 185.884659][ T7996] loop4: detected capacity change from 0 to 7 [ 185.893492][ T5843] Dev loop4: unable to read RDB block 7 [ 185.899153][ T5843] loop4: unable to read partition table [ 185.907991][ T5843] loop4: partition table beyond EOD, truncated [ 185.915612][ T7996] Dev loop4: unable to read RDB block 7 [ 185.932586][ T7996] loop4: unable to read partition table [ 185.940463][ T7996] loop4: partition table beyond EOD, truncated [ 185.950210][ T5903] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 185.950245][ T5842] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 185.966892][ T7996] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.123365][ T5842] usb 1-1: device descriptor read/64, error -71 [ 186.126489][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.151797][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.165983][ T5903] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 186.189654][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.200310][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.201727][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.227924][ T5903] usb 3-1: config 0 descriptor?? [ 186.240817][ T5842] usb usb1-port1: attempt power cycle [ 186.267447][ T8004] FAULT_INJECTION: forcing a failure. [ 186.267447][ T8004] name failslab, interval 1, probability 0, space 0, times 0 [ 186.267512][ T8004] CPU: 1 UID: 0 PID: 8004 Comm: syz.3.774 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 186.267531][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.267542][ T8004] Call Trace: [ 186.267548][ T8004] [ 186.267556][ T8004] dump_stack_lvl+0x189/0x250 [ 186.267580][ T8004] ? __pfx____ratelimit+0x10/0x10 [ 186.267601][ T8004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.267623][ T8004] ? __pfx__printk+0x10/0x10 [ 186.267645][ T8004] ? __pfx___might_resched+0x10/0x10 [ 186.267662][ T8004] ? fs_reclaim_acquire+0x7d/0x100 [ 186.267689][ T8004] should_fail_ex+0x414/0x560 [ 186.267720][ T8004] should_failslab+0xa8/0x100 [ 186.267743][ T8004] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 186.267762][ T8004] ? drm_atomic_get_connector_state+0x1a1/0x6e0 [ 186.267782][ T8004] ? ww_mutex_lock+0x3f/0x1c0 [ 186.267812][ T8004] ? drm_atomic_get_connector_state+0x1a1/0x6e0 [ 186.267831][ T8004] krealloc_noprof+0x124/0x340 [ 186.267855][ T8004] drm_atomic_get_connector_state+0x1a1/0x6e0 [ 186.267885][ T8004] drm_atomic_add_affected_connectors+0x2dd/0x410 [ 186.267909][ T8004] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 186.267928][ T8004] ? ww_mutex_lock+0x3f/0x1c0 [ 186.267953][ T8004] ? modeset_lock+0x37d/0x650 [ 186.267980][ T8004] __drm_atomic_helper_set_config+0x697/0xea0 [ 186.268013][ T8004] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 186.268037][ T8004] ? drm_client_rotation+0x47c/0x5b0 [ 186.268062][ T8004] drm_client_modeset_commit_atomic+0x469/0x760 [ 186.268096][ T8004] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 186.268138][ T8004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.268173][ T8004] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 186.268198][ T8004] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 186.268238][ T8004] fb_pan_display+0x39b/0x680 [ 186.268258][ T8004] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 186.268286][ T8004] bit_update_start+0x4d/0x1e0 [ 186.268308][ T8004] fbcon_modechanged+0xc3b/0x13a0 [ 186.268347][ T8004] do_fb_ioctl+0x6fd/0x750 [ 186.268372][ T8004] ? __pfx_do_fb_ioctl+0x10/0x10 [ 186.268437][ T8004] ? __fget_files+0x2a/0x420 [ 186.268464][ T8004] ? __fget_files+0x3a0/0x420 [ 186.268484][ T8004] ? __fget_files+0x2a/0x420 [ 186.268509][ T8004] ? bpf_lsm_file_ioctl+0x9/0x20 [ 186.268526][ T8004] ? __pfx_fb_ioctl+0x10/0x10 [ 186.268546][ T8004] __se_sys_ioctl+0xf9/0x170 [ 186.268567][ T8004] do_syscall_64+0xfa/0x3b0 [ 186.268586][ T8004] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.268605][ T8004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.268622][ T8004] ? clear_bhb_loop+0x60/0xb0 [ 186.268642][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.268658][ T8004] RIP: 0033:0x7fb06b58e929 [ 186.268674][ T8004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.268688][ T8004] RSP: 002b:00007fb06c47b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.268706][ T8004] RAX: ffffffffffffffda RBX: 00007fb06b7b5fa0 RCX: 00007fb06b58e929 [ 186.268718][ T8004] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 186.268729][ T8004] RBP: 00007fb06c47b090 R08: 0000000000000000 R09: 0000000000000000 [ 186.268739][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.268748][ T8004] R13: 0000000000000000 R14: 00007fb06b7b5fa0 R15: 00007ffcab46bf58 [ 186.268779][ T8004] [ 186.580445][ T5842] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 186.660534][ T5903] isku 0003:1E7D:319C.0036: unknown main item tag 0x0 [ 186.666960][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.694148][ T5842] usb 1-1: device descriptor read/8, error -71 [ 186.748417][ T5903] isku 0003:1E7D:319C.0036: unknown main item tag 0x0 [ 186.775396][ T5903] isku 0003:1E7D:319C.0036: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 186.924963][ T8009] 9pnet_fd: Insufficient options for proto=fd [ 186.997747][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.006976][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.050245][ T5842] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 187.087047][ T5842] usb 1-1: device descriptor read/8, error -71 [ 187.200605][ T5842] usb usb1-port1: unable to enumerate USB device [ 187.210324][ T5942] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 187.362170][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.374647][ T5942] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 187.381940][ T5903] isku 0003:1E7D:319C.0036: couldn't init struct isku_device [ 187.385387][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.410255][ T5903] isku 0003:1E7D:319C.0036: couldn't install keyboard [ 187.411228][ T5942] usb 4-1: config 0 descriptor?? [ 187.432200][ T5903] isku 0003:1E7D:319C.0036: probe with driver isku failed with error -71 [ 187.449433][ T5903] usb 3-1: USB disconnect, device number 45 [ 187.625279][ T8016] loop4: detected capacity change from 0 to 7 [ 187.633356][ T5843] Dev loop4: unable to read RDB block 7 [ 187.639053][ T5843] loop4: unable to read partition table [ 187.645256][ T5843] loop4: partition table beyond EOD, truncated [ 187.655917][ T8016] Dev loop4: unable to read RDB block 7 [ 187.662576][ T8016] loop4: unable to read partition table [ 187.668459][ T8016] loop4: partition table beyond EOD, truncated [ 187.675045][ T8016] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.878245][ T5942] keytouch 0003:0926:3333.0037: fixing up Keytouch IEC report descriptor [ 187.904470][ T5942] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0037/input/input58 [ 187.917975][ T8023] loop4: detected capacity change from 0 to 7 [ 187.926733][ T8023] Dev loop4: unable to read RDB block 7 [ 187.933478][ T8023] loop4: unable to read partition table [ 187.939461][ T8023] loop4: partition table beyond EOD, truncated [ 187.945909][ T8023] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.036957][ T5942] keytouch 0003:0926:3333.0037: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 188.400719][ T8032] FAULT_INJECTION: forcing a failure. [ 188.400719][ T8032] name failslab, interval 1, probability 0, space 0, times 0 [ 188.400752][ T8032] CPU: 0 UID: 0 PID: 8032 Comm: syz.0.786 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 188.400771][ T8032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.400781][ T8032] Call Trace: [ 188.400788][ T8032] [ 188.400796][ T8032] dump_stack_lvl+0x189/0x250 [ 188.400818][ T8032] ? __pfx____ratelimit+0x10/0x10 [ 188.400840][ T8032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.400857][ T8032] ? __pfx__printk+0x10/0x10 [ 188.400882][ T8032] ? __pfx___might_resched+0x10/0x10 [ 188.400903][ T8032] should_fail_ex+0x414/0x560 [ 188.400933][ T8032] should_failslab+0xa8/0x100 [ 188.400955][ T8032] __kmalloc_cache_noprof+0x70/0x3d0 [ 188.400973][ T8032] ? drm_atomic_helper_connector_duplicate_state+0x72/0xb0 [ 188.400999][ T8032] drm_atomic_helper_connector_duplicate_state+0x72/0xb0 [ 188.401019][ T8032] drm_atomic_get_connector_state+0x36f/0x6e0 [ 188.401050][ T8032] drm_atomic_add_affected_connectors+0x2dd/0x410 [ 188.401075][ T8032] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 188.401093][ T8032] ? ww_mutex_lock+0x3f/0x1c0 [ 188.401119][ T8032] ? modeset_lock+0x37d/0x650 [ 188.401147][ T8032] __drm_atomic_helper_set_config+0x697/0xea0 [ 188.401178][ T8032] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 188.401202][ T8032] ? drm_client_rotation+0x47c/0x5b0 [ 188.401224][ T8032] drm_client_modeset_commit_atomic+0x469/0x760 [ 188.401258][ T8032] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 188.401300][ T8032] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.401333][ T8032] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 188.401357][ T8032] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 188.401395][ T8032] fb_pan_display+0x39b/0x680 [ 188.401406][ T1550] usb 4-1: USB disconnect, device number 37 [ 188.401413][ T8032] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 188.401440][ T8032] bit_update_start+0x4d/0x1e0 [ 188.401462][ T8032] fbcon_modechanged+0xc3b/0x13a0 [ 188.401500][ T8032] do_fb_ioctl+0x6fd/0x750 [ 188.401524][ T8032] ? __pfx_do_fb_ioctl+0x10/0x10 [ 188.401600][ T8032] ? __fget_files+0x2a/0x420 [ 188.401629][ T8032] ? __fget_files+0x3a0/0x420 [ 188.401648][ T8032] ? __fget_files+0x2a/0x420 [ 188.401673][ T8032] ? bpf_lsm_file_ioctl+0x9/0x20 [ 188.401689][ T8032] ? __pfx_fb_ioctl+0x10/0x10 [ 188.401709][ T8032] __se_sys_ioctl+0xf9/0x170 [ 188.401731][ T8032] do_syscall_64+0xfa/0x3b0 [ 188.401750][ T8032] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.401769][ T8032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.401784][ T8032] ? clear_bhb_loop+0x60/0xb0 [ 188.401806][ T8032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.401820][ T8032] RIP: 0033:0x7fd63ed8e929 [ 188.401836][ T8032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.401851][ T8032] RSP: 002b:00007fd63cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.401869][ T8032] RAX: ffffffffffffffda RBX: 00007fd63efb5fa0 RCX: 00007fd63ed8e929 [ 188.401881][ T8032] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 188.401892][ T8032] RBP: 00007fd63cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.401903][ T8032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.401913][ T8032] R13: 0000000000000000 R14: 00007fd63efb5fa0 R15: 00007ffc5c97d6f8 [ 188.401944][ T8032] [ 188.460243][ T5922] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 188.760805][ T8040] loop4: detected capacity change from 0 to 7 [ 188.817218][ T5843] Dev loop4: unable to read RDB block 7 [ 188.825463][ T5843] loop4: unable to read partition table [ 188.834921][ T5843] loop4: partition table beyond EOD, truncated [ 188.851899][ T8040] Dev loop4: unable to read RDB block 7 [ 188.865217][ T8040] loop4: unable to read partition table [ 188.876533][ T8040] loop4: partition table beyond EOD, truncated [ 188.889970][ T8040] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.922631][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.936771][ T5922] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.957113][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.970374][ T5922] usb 3-1: config 0 descriptor?? [ 189.112649][ T8047] loop4: detected capacity change from 0 to 7 [ 189.136977][ T8047] Dev loop4: unable to read RDB block 7 [ 189.144636][ T8047] loop4: unable to read partition table [ 189.151151][ T8047] loop4: partition table beyond EOD, truncated [ 189.157555][ T8047] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 189.428897][ T5922] keytouch 0003:0926:3333.0038: fixing up Keytouch IEC report descriptor [ 189.438671][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 189.462596][ T5922] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0038/input/input59 [ 189.550689][ T8062] FAULT_INJECTION: forcing a failure. [ 189.550689][ T8062] name failslab, interval 1, probability 0, space 0, times 0 [ 189.550761][ T8062] CPU: 1 UID: 0 PID: 8062 Comm: syz.1.797 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 189.550781][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.550790][ T8062] Call Trace: [ 189.550797][ T8062] [ 189.550805][ T8062] dump_stack_lvl+0x189/0x250 [ 189.550829][ T8062] ? __pfx____ratelimit+0x10/0x10 [ 189.550855][ T8062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.550872][ T8062] ? __pfx__printk+0x10/0x10 [ 189.550893][ T8062] ? __pfx___might_resched+0x10/0x10 [ 189.550910][ T8062] ? fs_reclaim_acquire+0x7d/0x100 [ 189.550936][ T8062] should_fail_ex+0x414/0x560 [ 189.550967][ T8062] should_failslab+0xa8/0x100 [ 189.550989][ T8062] __kmalloc_cache_noprof+0x70/0x3d0 [ 189.551006][ T8062] ? vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 189.551036][ T8062] vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 189.551063][ T8062] drm_atomic_get_crtc_state+0x197/0x460 [ 189.551090][ T8062] drm_atomic_get_plane_state+0x4c8/0x5a0 [ 189.551116][ T8062] drm_client_modeset_commit_atomic+0x1e7/0x760 [ 189.551148][ T8062] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 189.551183][ T8062] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.551217][ T8062] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 189.551240][ T8062] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 189.551282][ T8062] fb_pan_display+0x39b/0x680 [ 189.551297][ T8062] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 189.551319][ T8062] bit_update_start+0x4d/0x1e0 [ 189.551336][ T8062] fbcon_modechanged+0xc3b/0x13a0 [ 189.551366][ T8062] do_fb_ioctl+0x6fd/0x750 [ 189.551385][ T8062] ? __pfx_do_fb_ioctl+0x10/0x10 [ 189.551434][ T8062] ? __fget_files+0x2a/0x420 [ 189.551455][ T8062] ? __fget_files+0x3a0/0x420 [ 189.551470][ T8062] ? __fget_files+0x2a/0x420 [ 189.551489][ T8062] ? bpf_lsm_file_ioctl+0x9/0x20 [ 189.551502][ T8062] ? __pfx_fb_ioctl+0x10/0x10 [ 189.551519][ T8062] __se_sys_ioctl+0xf9/0x170 [ 189.551535][ T8062] do_syscall_64+0xfa/0x3b0 [ 189.551550][ T8062] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.551565][ T8062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.551577][ T8062] ? clear_bhb_loop+0x60/0xb0 [ 189.551593][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.551605][ T8062] RIP: 0033:0x7f3edf18e929 [ 189.551618][ T8062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.551629][ T8062] RSP: 002b:00007f3ee0029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.551644][ T8062] RAX: ffffffffffffffda RBX: 00007f3edf3b5fa0 RCX: 00007f3edf18e929 [ 189.551653][ T8062] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 189.551662][ T8062] RBP: 00007f3ee0029090 R08: 0000000000000000 R09: 0000000000000000 [ 189.551670][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.551677][ T8062] R13: 0000000000000000 R14: 00007f3edf3b5fa0 R15: 00007fff21999388 [ 189.551701][ T8062] [ 189.574029][ T5922] keytouch 0003:0926:3333.0038: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 189.621959][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 189.644389][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 189.644417][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.644449][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 189.644796][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.661902][ T24] usb 4-1: config 0 descriptor?? [ 189.988868][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.066133][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.200994][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 190.207032][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 190.218696][ T8072] loop4: detected capacity change from 0 to 7 [ 190.224340][ T24] usb 4-1: USB disconnect, device number 38 [ 190.240486][ T8072] Dev loop4: unable to read RDB block 7 [ 190.246082][ T8072] loop4: unable to read partition table [ 190.253812][ T8072] loop4: partition table beyond EOD, truncated [ 190.260045][ T8072] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.279468][ T5922] usb 3-1: USB disconnect, device number 46 [ 190.744836][ T8083] loop4: detected capacity change from 0 to 7 [ 190.755849][ T8083] Dev loop4: unable to read RDB block 7 [ 190.762796][ T8083] loop4: unable to read partition table [ 190.768829][ T8083] loop4: partition table beyond EOD, truncated [ 190.781989][ T8083] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.794247][ T8087] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.806'. [ 190.843959][ T8084] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.806'. [ 190.878803][ T8087] ./file0: Can't lookup blockdev [ 190.954778][ T5903] IPVS: starting estimator thread 0... [ 190.967730][ T8092] FAULT_INJECTION: forcing a failure. [ 190.967730][ T8092] name failslab, interval 1, probability 0, space 0, times 0 [ 190.967785][ T8092] CPU: 1 UID: 0 PID: 8092 Comm: syz.2.808 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 190.967806][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.967816][ T8092] Call Trace: [ 190.967823][ T8092] [ 190.967830][ T8092] dump_stack_lvl+0x189/0x250 [ 190.967853][ T8092] ? __pfx____ratelimit+0x10/0x10 [ 190.967874][ T8092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.967892][ T8092] ? __pfx__printk+0x10/0x10 [ 190.967919][ T8092] ? __pfx___might_resched+0x10/0x10 [ 190.967936][ T8092] ? fs_reclaim_acquire+0x7d/0x100 [ 190.967962][ T8092] should_fail_ex+0x414/0x560 [ 190.967994][ T8092] should_failslab+0xa8/0x100 [ 190.968016][ T8092] __kmalloc_noprof+0xcb/0x4f0 [ 190.968033][ T8092] ? drm_atomic_state_init+0x9c/0x310 [ 190.968057][ T8092] drm_atomic_state_init+0x9c/0x310 [ 190.968079][ T8092] drm_atomic_state_alloc+0xbc/0x100 [ 190.968099][ T8092] drm_client_modeset_commit_atomic+0xe2/0x760 [ 190.968119][ T8092] ? rcu_is_watching+0x15/0xb0 [ 190.968140][ T8092] ? __mutex_lock+0x330/0xe80 [ 190.968162][ T8092] ? __mutex_lock+0x330/0xe80 [ 190.968182][ T8092] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 190.968198][ T8092] ? trace_contention_end+0x39/0x120 [ 190.968257][ T8092] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 190.968282][ T8092] drm_client_modeset_commit+0x4a/0x70 [ 190.968300][ T8092] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 190.968328][ T8092] drm_fb_helper_set_par+0xaf/0x100 [ 190.968353][ T8092] fb_set_var+0x82b/0xf50 [ 190.968376][ T8092] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.968409][ T8092] ? __pfx_fb_set_var+0x10/0x10 [ 190.968437][ T8092] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 190.968464][ T8092] ? soft_cursor+0xb1e/0xd80 [ 190.968515][ T8092] ? fbcon_switch+0x8bf/0x2040 [ 190.968538][ T8092] fbcon_switch+0x95b/0x2040 [ 190.968570][ T8092] ? __pfx_fbcon_switch+0x10/0x10 [ 190.968608][ T8092] ? __pfx_hide_cursor+0x10/0x10 [ 190.968637][ T8092] ? is_console_locked+0x9/0x20 [ 190.968653][ T8092] ? set_origin+0x346/0x480 [ 190.968679][ T8092] redraw_screen+0x56a/0xe90 [ 190.968701][ T8092] ? fbcon_set_palette+0x6cb/0x860 [ 190.968727][ T8092] ? __pfx_redraw_screen+0x10/0x10 [ 190.968764][ T8092] do_fb_ioctl+0x6fd/0x750 [ 190.968789][ T8092] ? __pfx_do_fb_ioctl+0x10/0x10 [ 190.968856][ T8092] ? __fget_files+0x2a/0x420 [ 190.968884][ T8092] ? __fget_files+0x3a0/0x420 [ 190.968904][ T8092] ? __fget_files+0x2a/0x420 [ 190.968929][ T8092] ? bpf_lsm_file_ioctl+0x9/0x20 [ 190.968945][ T8092] ? __pfx_fb_ioctl+0x10/0x10 [ 190.968965][ T8092] __se_sys_ioctl+0xf9/0x170 [ 190.968988][ T8092] do_syscall_64+0xfa/0x3b0 [ 190.969007][ T8092] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.969028][ T8092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.969044][ T8092] ? clear_bhb_loop+0x60/0xb0 [ 190.969065][ T8092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.969100][ T8092] RIP: 0033:0x7ffaf338e929 [ 190.969115][ T8092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.969125][ T8092] RSP: 002b:00007ffaf42db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.969139][ T8092] RAX: ffffffffffffffda RBX: 00007ffaf35b5fa0 RCX: 00007ffaf338e929 [ 190.969148][ T8092] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 190.969160][ T8092] RBP: 00007ffaf42db090 R08: 0000000000000000 R09: 0000000000000000 [ 190.969170][ T8092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.969180][ T8092] R13: 0000000000000000 R14: 00007ffaf35b5fa0 R15: 00007ffcb1cea718 [ 190.969212][ T8092] [ 191.060409][ T8093] IPVS: using max 33 ests per chain, 79200 per kthread [ 191.191658][ T8099] loop4: detected capacity change from 0 to 7 [ 191.334467][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.407363][ T8099] Dev loop4: unable to read RDB block 7 [ 191.414105][ T8099] loop4: unable to read partition table [ 191.429514][ T8099] loop4: partition table beyond EOD, truncated [ 191.475355][ T8099] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 191.524378][ T5205] Dev loop4: unable to read RDB block 7 [ 191.531853][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.540456][ T5205] loop4: unable to read partition table [ 191.546421][ T5205] loop4: partition table beyond EOD, truncated [ 191.569679][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.993280][ T8118] loop4: detected capacity change from 0 to 7 [ 192.004585][ T8118] Dev loop4: unable to read RDB block 7 [ 192.010224][ T8118] loop4: unable to read partition table [ 192.016372][ T8118] loop4: partition table beyond EOD, truncated [ 192.025493][ T8118] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.097830][ T5942] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 192.117190][ T8120] FAULT_INJECTION: forcing a failure. [ 192.117190][ T8120] name failslab, interval 1, probability 0, space 0, times 0 [ 192.117214][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.0.819 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 192.117226][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.117232][ T8120] Call Trace: [ 192.117237][ T8120] [ 192.117244][ T8120] dump_stack_lvl+0x189/0x250 [ 192.117260][ T8120] ? __pfx____ratelimit+0x10/0x10 [ 192.117274][ T8120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.117298][ T8120] ? __pfx__printk+0x10/0x10 [ 192.117313][ T8120] ? __pfx___might_resched+0x10/0x10 [ 192.117321][ T8120] ? fs_reclaim_acquire+0x7d/0x100 [ 192.117337][ T8120] should_fail_ex+0x414/0x560 [ 192.117356][ T8120] should_failslab+0xa8/0x100 [ 192.117369][ T8120] __kmalloc_cache_noprof+0x70/0x3d0 [ 192.117380][ T8120] ? drm_atomic_state_alloc+0xa9/0x100 [ 192.117394][ T8120] drm_atomic_state_alloc+0xa9/0x100 [ 192.117404][ T8120] drm_client_modeset_commit_atomic+0xe2/0x760 [ 192.117416][ T8120] ? rcu_is_watching+0x15/0xb0 [ 192.117428][ T8120] ? __mutex_lock+0x330/0xe80 [ 192.117440][ T8120] ? __mutex_lock+0x330/0xe80 [ 192.117452][ T8120] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 192.117483][ T8120] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 192.117496][ T8120] drm_client_modeset_commit+0x4a/0x70 [ 192.117506][ T8120] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 192.117522][ T8120] drm_fb_helper_set_par+0xaf/0x100 [ 192.117537][ T8120] fb_set_var+0x82b/0xf50 [ 192.117547][ T8120] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.117566][ T8120] ? __pfx_fb_set_var+0x10/0x10 [ 192.117580][ T8120] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 192.117596][ T8120] ? soft_cursor+0xb1e/0xd80 [ 192.117623][ T8120] ? fbcon_switch+0x8bf/0x2040 [ 192.117635][ T8120] fbcon_switch+0x95b/0x2040 [ 192.117652][ T8120] ? __pfx_fbcon_switch+0x10/0x10 [ 192.117672][ T8120] ? __pfx_hide_cursor+0x10/0x10 [ 192.117688][ T8120] ? is_console_locked+0x9/0x20 [ 192.117697][ T8120] ? set_origin+0x346/0x480 [ 192.117712][ T8120] redraw_screen+0x56a/0xe90 [ 192.117726][ T8120] ? fbcon_set_palette+0x6cb/0x860 [ 192.117739][ T8120] ? __pfx_redraw_screen+0x10/0x10 [ 192.117759][ T8120] do_fb_ioctl+0x6fd/0x750 [ 192.117774][ T8120] ? __pfx_do_fb_ioctl+0x10/0x10 [ 192.117809][ T8120] ? __fget_files+0x2a/0x420 [ 192.117825][ T8120] ? __fget_files+0x3a0/0x420 [ 192.117837][ T8120] ? __fget_files+0x2a/0x420 [ 192.117852][ T8120] ? bpf_lsm_file_ioctl+0x9/0x20 [ 192.117861][ T8120] ? __pfx_fb_ioctl+0x10/0x10 [ 192.117873][ T8120] __se_sys_ioctl+0xf9/0x170 [ 192.117886][ T8120] do_syscall_64+0xfa/0x3b0 [ 192.117898][ T8120] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.117909][ T8120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.117918][ T8120] ? clear_bhb_loop+0x60/0xb0 [ 192.117930][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.117939][ T8120] RIP: 0033:0x7fd63ed8e929 [ 192.117949][ T8120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.117957][ T8120] RSP: 002b:00007fd63cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.117967][ T8120] RAX: ffffffffffffffda RBX: 00007fd63efb5fa0 RCX: 00007fd63ed8e929 [ 192.117974][ T8120] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 192.117980][ T8120] RBP: 00007fd63cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.117986][ T8120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.117991][ T8120] R13: 0000000000000000 R14: 00007fd63efb5fa0 R15: 00007ffc5c97d6f8 [ 192.118008][ T8120] [ 192.150242][ T5929] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 192.242016][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 192.258879][ T5942] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.258909][ T5942] usb 4-1: config 0 interface 0 has no altsetting 0 [ 192.258940][ T5942] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 192.258960][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.264066][ T5942] usb 4-1: config 0 descriptor?? [ 192.309371][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.495590][ T8127] loop4: detected capacity change from 0 to 7 [ 192.521043][ T5929] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 192.521073][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.522191][ T5942] usbhid 4-1:0.0: can't add hid device: -71 [ 192.548108][ T5843] Dev loop4: unable to read RDB block 7 [ 192.556784][ T5929] usb 3-1: config 0 descriptor?? [ 192.577812][ T5843] loop4: unable to read partition table [ 192.578101][ T5843] loop4: partition table beyond EOD, truncated [ 192.595665][ T8127] Dev loop4: unable to read RDB block 7 [ 192.605155][ T5942] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 192.646745][ T8127] loop4: unable to read partition table [ 192.662235][ T5942] usb 4-1: USB disconnect, device number 39 [ 192.694811][ T8127] loop4: partition table beyond EOD, truncated [ 192.749008][ T8127] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.778590][ T5205] Dev loop4: unable to read RDB block 7 [ 192.785528][ T5205] loop4: unable to read partition table [ 192.792735][ T5205] loop4: partition table beyond EOD, truncated [ 193.107676][ T5929] keytouch 0003:0926:3333.0039: fixing up Keytouch IEC report descriptor [ 193.122781][ T5929] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0039/input/input60 [ 193.172552][ T8144] loop4: detected capacity change from 0 to 7 [ 193.186224][ T5843] Dev loop4: unable to read RDB block 7 [ 193.191111][ T5942] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 193.194243][ T5843] loop4: unable to read partition table [ 193.207561][ T5843] loop4: partition table beyond EOD, truncated [ 193.226830][ T8144] Dev loop4: unable to read RDB block 7 [ 193.243123][ T8144] loop4: unable to read partition table [ 193.275315][ T8144] loop4: partition table beyond EOD, truncated [ 193.281860][ T8144] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.282585][ T5929] keytouch 0003:0926:3333.0039: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 193.366578][ T5942] usb 1-1: Using ep0 maxpacket: 16 [ 193.397834][ T5942] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 193.436946][ T5942] usb 1-1: config 1 has no interface number 0 [ 193.450312][ T5942] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 193.481503][ T5942] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 193.513624][ T5942] usb 1-1: config 1 interface 105 has no altsetting 0 [ 193.529540][ T5942] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 193.548069][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.557589][ T5942] usb 1-1: Product: syz [ 193.565004][ T5942] usb 1-1: Manufacturer: syz [ 193.572439][ T5942] usb 1-1: SerialNumber: syz [ 193.589123][ T8132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.597724][ T8132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.645850][ T5922] usb 3-1: USB disconnect, device number 47 [ 193.760578][ T5929] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 193.935472][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.951198][ T5929] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.961786][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.974438][ T5929] usb 4-1: config 0 descriptor?? [ 194.017391][ T8132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.028397][ T8132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.405745][ T5929] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor [ 194.427519][ T5929] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.003A/input/input61 [ 194.554136][ T5842] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 194.563457][ T5929] keytouch 0003:0926:3333.003A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 194.619813][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.628182][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.703974][ T5942] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 194.722255][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 194.732678][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.746299][ T5942] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 194.757471][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.780500][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 194.796385][ T5942] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 194.809423][ T5842] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 194.820983][ T5842] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.836935][ T5942] usb 1-1: USB disconnect, device number 37 [ 194.843625][ T5842] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 194.853110][ T5842] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 194.861333][ T5842] usb 3-1: Manufacturer: syz [ 194.868592][ T5942] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 194.888801][ T5842] usb 3-1: config 0 descriptor?? [ 194.941528][ T5942] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 194.951283][ T5942] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 194.960779][ T5942] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 194.990996][ T5929] usb 4-1: USB disconnect, device number 40 [ 195.170176][ T5842] rc_core: IR keymap rc-hauppauge not found [ 195.176126][ T5842] Registered IR keymap rc-empty [ 195.182226][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.200249][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.223569][ T5842] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 195.239660][ T5842] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input62 [ 195.262364][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.280478][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.312986][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.340317][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.380369][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.400970][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.401565][ T8182] FAULT_INJECTION: forcing a failure. [ 195.401565][ T8182] name failslab, interval 1, probability 0, space 0, times 0 [ 195.401595][ T8182] CPU: 0 UID: 0 PID: 8182 Comm: syz.0.831 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 195.401618][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.401628][ T8182] Call Trace: [ 195.401635][ T8182] [ 195.401642][ T8182] dump_stack_lvl+0x189/0x250 [ 195.401658][ T8182] ? __pfx____ratelimit+0x10/0x10 [ 195.401671][ T8182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.401682][ T8182] ? __pfx__printk+0x10/0x10 [ 195.401697][ T8182] ? __pfx___might_resched+0x10/0x10 [ 195.401710][ T8182] ? fs_reclaim_acquire+0x7d/0x100 [ 195.401737][ T8182] should_fail_ex+0x414/0x560 [ 195.401776][ T8182] should_failslab+0xa8/0x100 [ 195.401795][ T8182] __kmalloc_cache_noprof+0x70/0x3d0 [ 195.401807][ T8182] ? vkms_plane_duplicate_state+0x51/0x110 [ 195.401824][ T8182] vkms_plane_duplicate_state+0x51/0x110 [ 195.401838][ T8182] drm_atomic_get_plane_state+0x25a/0x5a0 [ 195.401857][ T8182] drm_client_modeset_commit_atomic+0x1e7/0x760 [ 195.401887][ T8182] ? __mutex_lock+0x330/0xe80 [ 195.401907][ T8182] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 195.401922][ T8182] ? trace_contention_end+0x39/0x120 [ 195.401967][ T8182] ? preempt_schedule_irq+0xde/0x150 [ 195.401994][ T8182] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 195.402010][ T8182] drm_client_modeset_commit+0x4a/0x70 [ 195.402021][ T8182] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 195.402049][ T8182] drm_fb_helper_set_par+0xaf/0x100 [ 195.402074][ T8182] fb_set_var+0x82b/0xf50 [ 195.402107][ T8182] ? __pfx_fb_set_var+0x10/0x10 [ 195.402122][ T8182] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 195.402138][ T8182] ? soft_cursor+0xb1e/0xd80 [ 195.402165][ T8182] ? fbcon_switch+0x8bf/0x2040 [ 195.402186][ T8182] fbcon_switch+0x95b/0x2040 [ 195.402218][ T8182] ? __pfx_fbcon_switch+0x10/0x10 [ 195.402254][ T8182] ? __pfx_hide_cursor+0x10/0x10 [ 195.402271][ T8182] ? is_console_locked+0x9/0x20 [ 195.402281][ T8182] ? set_origin+0x346/0x480 [ 195.402300][ T8182] redraw_screen+0x56a/0xe90 [ 195.402313][ T8182] ? fbcon_set_palette+0x6cb/0x860 [ 195.402336][ T8182] ? __pfx_redraw_screen+0x10/0x10 [ 195.402371][ T8182] do_fb_ioctl+0x6fd/0x750 [ 195.402396][ T8182] ? __pfx_do_fb_ioctl+0x10/0x10 [ 195.402435][ T8182] ? __fget_files+0x2a/0x420 [ 195.402452][ T8182] ? __fget_files+0x3a0/0x420 [ 195.402464][ T8182] ? __fget_files+0x2a/0x420 [ 195.402488][ T8182] ? bpf_lsm_file_ioctl+0x9/0x20 [ 195.402505][ T8182] ? __pfx_fb_ioctl+0x10/0x10 [ 195.402526][ T8182] __se_sys_ioctl+0xf9/0x170 [ 195.402548][ T8182] do_syscall_64+0xfa/0x3b0 [ 195.402562][ T8182] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.402573][ T8182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.402582][ T8182] ? clear_bhb_loop+0x60/0xb0 [ 195.402594][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.402603][ T8182] RIP: 0033:0x7fd63ed8e929 [ 195.402615][ T8182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.402629][ T8182] RSP: 002b:00007fd63cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.402647][ T8182] RAX: ffffffffffffffda RBX: 00007fd63efb5fa0 RCX: 00007fd63ed8e929 [ 195.402659][ T8182] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 195.402670][ T8182] RBP: 00007fd63cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.402680][ T8182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.402690][ T8182] R13: 0000000000000000 R14: 00007fd63efb5fa0 R15: 00007ffc5c97d6f8 [ 195.402711][ T8182] [ 195.420294][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.443861][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.464423][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.486451][ T5842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.505786][ T5842] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 195.505824][ T5842] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 195.557246][ T5922] usb 3-1: USB disconnect, device number 48 [ 196.144178][ T8191] loop4: detected capacity change from 0 to 7 [ 196.177861][ T8191] Dev loop4: unable to read RDB block 7 [ 196.197080][ T8191] loop4: unable to read partition table [ 196.212351][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.233574][ T8191] loop4: partition table beyond EOD, truncated [ 196.250528][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.280260][ T8191] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 196.295282][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.306036][ T5205] Dev loop4: unable to read RDB block 7 [ 196.311008][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.316395][ T5205] loop4: unable to read partition table [ 196.327034][ T5205] loop4: partition table beyond EOD, truncated [ 196.427311][ T8201] loop4: detected capacity change from 0 to 7 [ 196.452219][ T8201] Dev loop4: unable to read RDB block 7 [ 196.457908][ T8201] loop4: unable to read partition table [ 196.483819][ T8201] loop4: partition table beyond EOD, truncated [ 196.491658][ T8201] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 196.510469][ T5903] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 196.532110][ T5205] Dev loop4: unable to read RDB block 7 [ 196.537794][ T5205] loop4: unable to read partition table [ 196.544313][ T5205] loop4: partition table beyond EOD, truncated [ 196.682345][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.715981][ T5903] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 196.727890][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.744636][ T5903] usb 4-1: config 0 descriptor?? [ 196.930375][ T5842] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 196.933954][ T8214] FAULT_INJECTION: forcing a failure. [ 196.933954][ T8214] name failslab, interval 1, probability 0, space 0, times 0 [ 196.933987][ T8214] CPU: 1 UID: 0 PID: 8214 Comm: syz.1.842 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 196.934010][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.934020][ T8214] Call Trace: [ 196.934027][ T8214] [ 196.934034][ T8214] dump_stack_lvl+0x189/0x250 [ 196.934057][ T8214] ? __pfx____ratelimit+0x10/0x10 [ 196.934078][ T8214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.934097][ T8214] ? __pfx__printk+0x10/0x10 [ 196.934122][ T8214] ? __pfx___might_resched+0x10/0x10 [ 196.934137][ T8214] ? fs_reclaim_acquire+0x7d/0x100 [ 196.934165][ T8214] should_fail_ex+0x414/0x560 [ 196.934197][ T8214] should_failslab+0xa8/0x100 [ 196.934217][ T8214] __kmalloc_cache_noprof+0x70/0x3d0 [ 196.934235][ T8214] ? vkms_plane_duplicate_state+0x8d/0x110 [ 196.934264][ T8214] vkms_plane_duplicate_state+0x8d/0x110 [ 196.934287][ T8214] drm_atomic_get_plane_state+0x25a/0x5a0 [ 196.934315][ T8214] drm_client_modeset_commit_atomic+0x1e7/0x760 [ 196.934348][ T8214] ? __mutex_lock+0x330/0xe80 [ 196.934369][ T8214] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 196.934423][ T8214] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 196.934445][ T8214] drm_client_modeset_commit+0x4a/0x70 [ 196.934461][ T8214] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 196.934487][ T8214] drm_fb_helper_set_par+0xaf/0x100 [ 196.934509][ T8214] fb_set_var+0x82b/0xf50 [ 196.934525][ T8214] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.934553][ T8214] ? __pfx_fb_set_var+0x10/0x10 [ 196.934578][ T8214] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 196.934606][ T8214] ? soft_cursor+0xb1e/0xd80 [ 196.934652][ T8214] ? fbcon_switch+0x8bf/0x2040 [ 196.934676][ T8214] fbcon_switch+0x95b/0x2040 [ 196.934709][ T8214] ? __pfx_fbcon_switch+0x10/0x10 [ 196.934745][ T8214] ? __pfx_hide_cursor+0x10/0x10 [ 196.934771][ T8214] ? is_console_locked+0x9/0x20 [ 196.934786][ T8214] ? set_origin+0x346/0x480 [ 196.934812][ T8214] redraw_screen+0x56a/0xe90 [ 196.934833][ T8214] ? fbcon_set_palette+0x6cb/0x860 [ 196.934865][ T8214] ? __pfx_redraw_screen+0x10/0x10 [ 196.934901][ T8214] do_fb_ioctl+0x6fd/0x750 [ 196.934926][ T8214] ? __pfx_do_fb_ioctl+0x10/0x10 [ 196.935006][ T8214] ? __fget_files+0x2a/0x420 [ 196.935035][ T8214] ? __fget_files+0x3a0/0x420 [ 196.935054][ T8214] ? __fget_files+0x2a/0x420 [ 196.935078][ T8214] ? bpf_lsm_file_ioctl+0x9/0x20 [ 196.935095][ T8214] ? __pfx_fb_ioctl+0x10/0x10 [ 196.935116][ T8214] __se_sys_ioctl+0xf9/0x170 [ 196.935146][ T8214] do_syscall_64+0xfa/0x3b0 [ 196.935174][ T8214] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.935194][ T8214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.935212][ T8214] ? clear_bhb_loop+0x60/0xb0 [ 196.935237][ T8214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.935252][ T8214] RIP: 0033:0x7f3edf18e929 [ 196.935268][ T8214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.935283][ T8214] RSP: 002b:00007f3ee0029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.935300][ T8214] RAX: ffffffffffffffda RBX: 00007f3edf3b5fa0 RCX: 00007f3edf18e929 [ 196.935312][ T8214] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 196.935322][ T8214] RBP: 00007f3ee0029090 R08: 0000000000000000 R09: 0000000000000000 [ 196.935333][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.935343][ T8214] R13: 0000000000000000 R14: 00007f3edf3b5fa0 R15: 00007fff21999388 [ 196.935375][ T8214] [ 197.082764][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.367212][ T5903] keytouch 0003:0926:3333.003B: fixing up Keytouch IEC report descriptor [ 197.465044][ T5842] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.472576][ T5903] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.003B/input/input63 [ 197.514721][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.552120][ T5842] usb 3-1: config 0 descriptor?? [ 197.626910][ T5903] keytouch 0003:0926:3333.003B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 197.652546][ T8230] Attempt to restore checkpoint with obsolete wellknown handles [ 197.886165][ T5922] usb 4-1: USB disconnect, device number 41 [ 197.972820][ T5842] keytouch 0003:0926:3333.003C: fixing up Keytouch IEC report descriptor [ 198.004118][ T5842] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.003C/input/input64 [ 198.139296][ T8245] loop4: detected capacity change from 0 to 7 [ 198.145458][ T5842] keytouch 0003:0926:3333.003C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 198.185043][ T8243] Dev loop4: unable to read RDB block 7 [ 198.200207][ T8243] loop4: unable to read partition table [ 198.206162][ T8243] loop4: partition table beyond EOD, truncated [ 198.228982][ T8245] Dev loop4: unable to read RDB block 7 [ 198.254180][ T8245] loop4: unable to read partition table [ 198.263322][ T8245] loop4: partition table beyond EOD, truncated [ 198.272822][ T8245] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.408048][ T8251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.435216][ T8251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.475096][ T8251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.486534][ T8251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.500913][ T8251] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 [ 198.517641][ T8251] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 8251, name: syz.1.851 [ 198.517712][ T8251] preempt_count: 0, expected: 0 [ 198.517724][ T8251] RCU nest depth: 1, expected: 0 [ 198.517767][ T8251] 2 locks held by syz.1.851/8251: [ 198.517779][ T8251] #0: ffffffff8e33bfe0 (rcu_read_lock){....}-{1:3}, at: query_vma_setup+0x18/0x110 [ 198.517841][ T8251] #1: ffff8880762f0e48 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0 [ 198.517919][ T8251] CPU: 1 UID: 0 PID: 8251 Comm: syz.1.851 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 198.517938][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.517945][ T8251] Call Trace: [ 198.517950][ T8251] [ 198.517955][ T8251] dump_stack_lvl+0x189/0x250 [ 198.517969][ T8251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.517984][ T8251] ? print_lock_name+0xde/0x100 [ 198.518004][ T8251] __might_resched+0x495/0x610 [ 198.518025][ T8251] ? handle_softirqs+0x106/0x870 [ 198.518045][ T8251] ? __pfx___might_resched+0x10/0x10 [ 198.518075][ T8251] ? __kmalloc_noprof+0xa3/0x4f0 [ 198.518096][ T8251] __kmalloc_noprof+0xbc/0x4f0 [ 198.518107][ T8251] ? procfs_procmap_ioctl+0x877/0xd10 [ 198.518122][ T8251] procfs_procmap_ioctl+0x877/0xd10 [ 198.518138][ T8251] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 198.518161][ T8251] ? __fget_files+0x2a/0x420 [ 198.518187][ T8251] ? __fget_files+0x2a/0x420 [ 198.518207][ T8251] ? __fget_files+0x3a0/0x420 [ 198.518228][ T8251] ? __fget_files+0x2a/0x420 [ 198.518249][ T8251] ? bpf_lsm_file_ioctl+0x9/0x20 [ 198.518258][ T8251] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 198.518270][ T8251] __se_sys_ioctl+0xf9/0x170 [ 198.518282][ T8251] do_syscall_64+0xfa/0x3b0 [ 198.518295][ T8251] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.518312][ T8251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.518329][ T8251] ? clear_bhb_loop+0x60/0xb0 [ 198.518350][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.518367][ T8251] RIP: 0033:0x7f3edf18e929 [ 198.518383][ T8251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.518394][ T8251] RSP: 002b:00007f3ee0029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.518404][ T8251] RAX: ffffffffffffffda RBX: 00007f3edf3b5fa0 RCX: 00007f3edf18e929 [ 198.518418][ T8251] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000007 [ 198.518425][ T8251] RBP: 00007f3edf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 198.518431][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.518436][ T8251] R13: 0000000000000000 R14: 00007f3edf3b5fa0 R15: 00007fff21999388 [ 198.518454][ T8251] [ 198.528275][ T5922] usb 3-1: USB disconnect, device number 49 [ 198.533300][ T8253] FAULT_INJECTION: forcing a failure. [ 198.533300][ T8253] name failslab, interval 1, probability 0, space 0, times 0 [ 198.533335][ T8253] CPU: 0 UID: 0 PID: 8253 Comm: syz.3.852 Tainted: G W 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 198.533359][ T8253] Tainted: [W]=WARN [ 198.533365][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.533375][ T8253] Call Trace: [ 198.533381][ T8253] [ 198.533389][ T8253] dump_stack_lvl+0x189/0x250 [ 198.533411][ T8253] ? __pfx____ratelimit+0x10/0x10 [ 198.533434][ T8253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.533452][ T8253] ? __pfx__printk+0x10/0x10 [ 198.533477][ T8253] ? __pfx___might_resched+0x10/0x10 [ 198.533493][ T8253] ? fs_reclaim_acquire+0x7d/0x100 [ 198.533519][ T8253] should_fail_ex+0x414/0x560 [ 198.533549][ T8253] should_failslab+0xa8/0x100 [ 198.533572][ T8253] __kmalloc_cache_noprof+0x70/0x3d0 [ 198.533590][ T8253] ? vkms_plane_duplicate_state+0x51/0x110 [ 198.533617][ T8253] vkms_plane_duplicate_state+0x51/0x110 [ 198.533641][ T8253] drm_atomic_get_plane_state+0x25a/0x5a0 [ 198.533675][ T8253] drm_client_modeset_commit_atomic+0x1e7/0x760 [ 198.533710][ T8253] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 198.533752][ T8253] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.533786][ T8253] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 198.533811][ T8253] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 198.533849][ T8253] fb_pan_display+0x39b/0x680 [ 198.533869][ T8253] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 198.533896][ T8253] bit_update_start+0x4d/0x1e0 [ 198.533917][ T8253] fbcon_modechanged+0xc3b/0x13a0 [ 198.533956][ T8253] do_fb_ioctl+0x6fd/0x750 [ 198.533980][ T8253] ? __pfx_do_fb_ioctl+0x10/0x10 [ 198.534043][ T8253] ? __fget_files+0x2a/0x420 [ 198.534072][ T8253] ? __fget_files+0x3a0/0x420 [ 198.534091][ T8253] ? __fget_files+0x2a/0x420 [ 198.534116][ T8253] ? bpf_lsm_file_ioctl+0x9/0x20 [ 198.534133][ T8253] ? __pfx_fb_ioctl+0x10/0x10 [ 198.534152][ T8253] __se_sys_ioctl+0xf9/0x170 [ 198.534174][ T8253] do_syscall_64+0xfa/0x3b0 [ 198.534193][ T8253] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.534212][ T8253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.534228][ T8253] ? clear_bhb_loop+0x60/0xb0 [ 198.534247][ T8253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.534262][ T8253] RIP: 0033:0x7fb06b58e929 [ 198.534278][ T8253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.534293][ T8253] RSP: 002b:00007fb06c47b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.534311][ T8253] RAX: ffffffffffffffda RBX: 00007fb06b7b5fa0 RCX: 00007fb06b58e929 [ 198.534322][ T8253] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 198.534333][ T8253] RBP: 00007fb06c47b090 R08: 0000000000000000 R09: 0000000000000000 [ 198.534343][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.534353][ T8253] R13: 0000000000000000 R14: 00007fb06b7b5fa0 R15: 00007ffcab46bf58 [ 198.534388][ T8253] [ 201.818978][ T5848] Bluetooth: hci2: command 0x0419 tx timeout [ 201.825782][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 201.830496][ T5839] Bluetooth: hci1: command 0x0406 tx timeout