last executing test programs: 7.721254278s ago: executing program 3 (id=162): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x4b0f43) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') copy_file_range(r1, &(0x7f0000000240)=0xffffffffffffffff, r1, 0x0, 0x80000001, 0x0) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x2, 0x0, 0xb3, &(0x7f0000000100)={0x270, 0x9, 0x6}}) syz_usb_connect(0x0, 0x24, &(0x7f00000024c0)={{0x12, 0x1, 0x200, 0xbb, 0x0, 0x9b, 0x8, 0x12d1, 0x2f7b, 0xdeda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xa, 0x20, 0x0, "", [{{0x9, 0x4, 0xb8, 0x1, 0x0, 0xff, 0x3, 0x16, 0x3}}]}}]}}, 0x0) 5.738392693s ago: executing program 0 (id=170): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000100)={r0, &(0x7f0000000000)=']\x91:-]{-\x00', 0x8400, &(0x7f0000000040)={@align=0x3, {0xbe57, 0x2, 0x0, 0x3}}, 0x1ff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xff}) 5.378802512s ago: executing program 0 (id=173): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000300)={r2, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x2000, 0x1}) 5.37805881s ago: executing program 3 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x6) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2300000000f0ffffffff4300000008000300", @ANYRES32=r2], 0x30}}, 0x0) 5.113034091s ago: executing program 0 (id=176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x40, @remote, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r3, &(0x7f0000000180)="84650000", 0x4) r4 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x2b}}, './file0\x00'}) close_range(r5, r1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0xc, 0x3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090b, 0x2, '\x00', @value64=0x6}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x1, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 4.339355985s ago: executing program 3 (id=179): syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0xb2, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0, &(0x7f0000000000)) syz_usb_connect(0x6, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100002400011b00000009040000022a3e740009058bff7f0000100109050b362f91f182a9666f3094d8480c754803d8a956ab57cfd31de174fd463fadf13ed8750c02fc3f117f98c58df3646bf2d91809829d902de150c1ad78a3957687378e5feb9e0bd3eaa678dac0fee07b20dd00119bd90208026dc807b5052a2700"/141], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x11b801, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'team0\x00'}) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000440)={r1, 0x0, 0x7d, 0x8, 0x9, 0x9, [0x7, 0x9, 0x1, 0x6, 0x3, 0x443ea9f1]}) syz_usb_connect$uac1(0x6, 0xae, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000408205750040000102030109029c0003010108f90904000000018fa4000a2401080026000201020824050110dd95260d2406020103050005000e000107240505019b770904010000010200000904010101010200000a2402018804ff0aef420f240201080204dde5220591a1067809050109bf07000e020725010406000009040200000102000009040201010102000007240104070400090582090004049b040725010c030001"], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x6, 0x90, 0x2, 0x10}, 0x23, &(0x7f0000000240)=ANY=[@ANYBLOB="050f2300020a1003000d0002098c0214100461a76cba681ff900"/35], 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x2b, &(0x7f00000002c0)=@string={0x2b, 0x3, "eb9e28fd264f0bb2c73c63043eae904477a8150f6a5e70db8cc5c02c68831e60180ad0472e10598c20"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x404}}]}) 4.193706609s ago: executing program 0 (id=180): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xffffc90000000000, 0x0, 0x4000015}, 0x2c000010) 4.138354353s ago: executing program 0 (id=181): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197"], 0x1c}], 0x1}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x0, 0x0, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000600)={0x40, 0x6, 0x4, "2e0e52c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.084149734s ago: executing program 1 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES16=r4, @ANYBLOB="050928bd7000fddbdf251900000008000300", @ANYRES32=r2, @ANYBLOB="050060"], 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) 3.941457646s ago: executing program 1 (id=184): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000300)={r2, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x2000, 0x1}) 3.861247128s ago: executing program 1 (id=185): file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x100) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="120110037dc84908da05a00038f10102030109022d000109062004090428050308842bfc09050900000209810609050e0340000c060609050a0c20000000065fcdec114ab7ef5b4e22392d4b18ca8932e2a3cc563266d24922803b12f8caa583eb11882b70838847d0018a91aad9dfc14dc1f94ffa"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x439}}, {0x100, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x9, &(0x7f0000000280)=@string={0x9, 0x3, "11e7b64f032952"}}, {0x6a, &(0x7f00000002c0)=@string={0x6a, 0x3, "c3da0067c08a7ad8169ee80e7d44a3c193383c6aa34eed2b3136c40a6ba8f4cc93f67cad2fa90ad30a780f02b7c079b45faee60a6c57dd95ea99bdd9bf845a4a79d48e2a10fce57c1f8d86420cf8f9c280564e5a866957a9c2dfe6f6f58b4dbc702a3722beaa8130"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x407}}]}) r0 = syz_open_dev$video4linux(&(0x7f0000000500), 0x69, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc038563b, &(0x7f0000000040)={0x0, 0xff, 0x300a, 0x1}) 3.720084557s ago: executing program 3 (id=186): recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000000)=""/53, 0x35, 0x10002, &(0x7f0000000100)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @main=@item_012={0x2, 0x0, 0xb, "8939"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_012={0x2, 0x2, 0x8, "3994"}, @local=@item_4={0x3, 0x2, 0x2, "b09ea549"}, @main=@item_4={0x3, 0x0, 0x8, "ce9abc16"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000200fc003a2a5e247b00000008061b8001"], 0x624}], 0x1, 0x0, 0x0, 0x60400}, 0x0) syz_usb_connect$hid(0x1, 0x5e, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) 2.849164052s ago: executing program 2 (id=188): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1000000000000191}, 0x0) 2.6258601s ago: executing program 2 (id=189): r0 = open(&(0x7f0000000480)='.\x00', 0x101000, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}}}, 0xe) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000700036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd, 0x60803) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x1, 0x9, 0x300e, 0x5, 0xb, 0xb, 0x2, 0x5}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418802, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r6, r7, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x104, {0x5, 0x3, 0xffffffffffffffff, 0x4000000000008, 0x0, 0x9b53, {0x2, 0x6, 0x6, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x1000, 0xe44, r6, r7, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) write$sndseq(r2, &(0x7f0000000100)=[{0x5, 0x3, 0x0, 0x0, @time, {}, {0x0, 0x3}, @queue={0x7, {0x7, 0xfffffff7}}}], 0xfd07) statx(r0, 0x0, 0x1000, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10b083, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010058, 0x0, 0x1000000}]}) 2.429579586s ago: executing program 1 (id=190): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) syz_open_dev$midi(0x0, 0x3, 0x88c02) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x64a42, 0x0) 2.166272017s ago: executing program 0 (id=191): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd5, 0x28, 0x1b, 0x8, 0x9c0, 0x201, 0xfa4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3d, 0xae, 0xa0, 0x2, "", [{{0x9, 0x4, 0x25, 0x7, 0x0, 0x13, 0xfd, 0x42, 0xfb}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010026bd706e6e24139e07"], 0x40}}, 0x90) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x7) sched_setattr(r2, &(0x7f00000000c0)={0x38, 0x0, 0x40, 0x2, 0x1, 0xe2, 0x4, 0x1, 0x5, 0xfffffff7}, 0x0) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)=r2) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x8}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.077536218s ago: executing program 2 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff02}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000030a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0xffff000000000000}, 0x0) 923.175697ms ago: executing program 3 (id=193): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r5}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x2000, 0x1}) 653.322321ms ago: executing program 3 (id=194): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000006400)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'}) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006880)={0x20, 0x0, 0x3, {0x6, 0x4, 0x3, 0x9}}, 0x0}) 544.041884ms ago: executing program 2 (id=195): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) 500.955805ms ago: executing program 1 (id=196): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f00000000c0)={[], [{@uid_eq}]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}}, 0x90) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000000)) 196.99453ms ago: executing program 2 (id=197): r0 = socket$kcm(0x10, 0x6, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x4, "34f836b389f161d7d805535a7e7f5c629f85c90457bdd9b803f72a800ad6e6e5"}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b7be00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 69.252325ms ago: executing program 2 (id=198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f00000001c0)=0xfff, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000880)={0x48, 0xa, r3}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b00010000000009040000016da839000905030220"], 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x3) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000900), 0x1e1081, 0x0) syz_usb_connect$uac2(0x2, 0xff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0x8, 0xa9, 0x10, 0x7}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x5, [{0x101, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000003c0)=@string={0x4, 0x3, "33ff"}}, {0x7f, &(0x7f0000000400)=@string={0x7f, 0x3, "2af0016bd7816b2a5d3719bfed085d7d79eb421198da83fe17d6691ad220c71e5dd72e97a0b1be9ba7375873af3bfc70f5a616a95443d7569281157ee80dead95ffd292dcdcbc45f532fb24d637cd035061860f1fa43850850f3fdbecc81743fa564dedbc20ab33a6c619ab062889ca3ccc7b6077cc14dafef060b3547"}}, {0x92, &(0x7f0000000040)=ANY=[@ANYBLOB="9203b06f161056f2606afbd8f8bcb8df03b455a24d57955e520d6f0acaa0aae7b333cfb169bae9d99897f7c6e45332cc4617f10c5da60fa0f871e5ae0973d89292d4e1ed600fdaddf57baee10f000000bd31fe9690ec8963e5d0fe8b76745103c29482cc565352ca4d4dd094fc666a8d301b1461752dd87301399396ce7d227ada3bf6eba10c23bad21ac0d8b2fa55fbd09aef13be63bf24f0a91f6c"]}, {0x87, &(0x7f0000000540)=@string={0x87, 0x3, "9af460203bc096fd2c9e17761fe6a870a8450a786360b99080c8903074776e0417af46437ab197fd0a7b40df958b0fe818bd878b2555fca90cba285c208d665d928fdd1d4967a45fcae40b58724604285d887d8c019a59588d7f65c3c7666f7096cb9a12b43e262efc5f76794d6e4a9d4dc84eeab67b8dcec8118874a76e830e8299f97ef2"}}]}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x1, 0x2, 0x2}, &(0x7f0000000500)=0x20) syz_emit_vhci(&(0x7f0000000940)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0xb1}}}, 0x4) 0s ago: executing program 1 (id=199): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r6}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) (fail_nth: 15) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 87.015522][ T5809] cgroup: Unknown subsys name 'net' [ 87.216217][ T9] cfg80211: failed to load regulatory.db [ 87.306231][ T5809] cgroup: Unknown subsys name 'cpuset' [ 87.372193][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.344728][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.824590][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.836481][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.864088][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.875874][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.876079][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.878755][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.886178][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.894086][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.894971][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.895553][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.896775][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.900131][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.900522][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.904913][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.905475][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.907071][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.907984][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.992143][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.992807][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.993615][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.819462][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 93.031183][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 93.041498][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 93.093366][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 93.280841][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.281030][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.291672][ T5822] bridge_slave_0: entered allmulticast mode [ 93.295558][ T5822] bridge_slave_0: entered promiscuous mode [ 93.336626][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.336809][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.336975][ T5822] bridge_slave_1: entered allmulticast mode [ 93.339013][ T5822] bridge_slave_1: entered promiscuous mode [ 93.479326][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.479518][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.479677][ T5824] bridge_slave_0: entered allmulticast mode [ 93.482452][ T5824] bridge_slave_0: entered promiscuous mode [ 93.490883][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.491169][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.494520][ T5821] bridge_slave_0: entered allmulticast mode [ 93.498280][ T5821] bridge_slave_0: entered promiscuous mode [ 93.523910][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.552953][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.553172][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.553435][ T5824] bridge_slave_1: entered allmulticast mode [ 93.555750][ T5824] bridge_slave_1: entered promiscuous mode [ 93.560317][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.560665][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.560910][ T5821] bridge_slave_1: entered allmulticast mode [ 93.565939][ T5821] bridge_slave_1: entered promiscuous mode [ 93.573840][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.574223][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.574501][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.574736][ T5823] bridge_slave_0: entered allmulticast mode [ 93.578365][ T5823] bridge_slave_0: entered promiscuous mode [ 93.665381][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.665600][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.665795][ T5823] bridge_slave_1: entered allmulticast mode [ 93.668209][ T5823] bridge_slave_1: entered promiscuous mode [ 93.807543][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.823247][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.826583][ T5822] team0: Port device team_slave_0 added [ 93.852184][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.855637][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.859561][ T5822] team0: Port device team_slave_1 added [ 93.867344][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.928838][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.999385][ T5824] team0: Port device team_slave_0 added [ 94.005344][ T5821] team0: Port device team_slave_0 added [ 94.008980][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.008998][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.009033][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.012607][ T5831] Bluetooth: hci1: command tx timeout [ 94.012724][ T5831] Bluetooth: hci2: command tx timeout [ 94.012915][ T5825] Bluetooth: hci0: command tx timeout [ 94.059002][ T5824] team0: Port device team_slave_1 added [ 94.064424][ T5821] team0: Port device team_slave_1 added [ 94.066587][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.066601][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.066625][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.074910][ T5823] team0: Port device team_slave_0 added [ 94.093091][ T5825] Bluetooth: hci3: command tx timeout [ 94.152592][ T5823] team0: Port device team_slave_1 added [ 94.222341][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.222355][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.222372][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.225952][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.225967][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.225983][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.253567][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.253586][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.253611][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.256325][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.256339][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.256364][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.282382][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.282401][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.282426][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.347221][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.347239][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.347272][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.370384][ T5822] hsr_slave_0: entered promiscuous mode [ 94.376015][ T5822] hsr_slave_1: entered promiscuous mode [ 94.558781][ T5824] hsr_slave_0: entered promiscuous mode [ 94.560502][ T5824] hsr_slave_1: entered promiscuous mode [ 94.562087][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 94.562202][ T5824] Cannot create hsr debugfs directory [ 94.574195][ T5821] hsr_slave_0: entered promiscuous mode [ 94.576217][ T5821] hsr_slave_1: entered promiscuous mode [ 94.577784][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 94.577807][ T5821] Cannot create hsr debugfs directory [ 94.645267][ T5823] hsr_slave_0: entered promiscuous mode [ 94.646638][ T5823] hsr_slave_1: entered promiscuous mode [ 94.647709][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 94.647736][ T5823] Cannot create hsr debugfs directory [ 95.782310][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.823932][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.826532][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.848877][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.857210][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.885965][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.917160][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.937021][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.066197][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.091602][ T60] Bluetooth: hci2: command tx timeout [ 96.091640][ T60] Bluetooth: hci1: command tx timeout [ 96.091801][ T5825] Bluetooth: hci0: command tx timeout [ 96.116862][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.129590][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.155306][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.169378][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.172465][ T5825] Bluetooth: hci3: command tx timeout [ 96.207076][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.229377][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.273229][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.423820][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.455413][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.463112][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.496081][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.509216][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.537825][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.565769][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.597726][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.739388][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.776342][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.790843][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.827758][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.840372][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.882791][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.889314][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.918703][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.990227][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.106555][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.159009][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.159749][ T772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.200397][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.230130][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.230266][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.345284][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.400738][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.400891][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.423791][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.466783][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.466899][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.549820][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.586204][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.646771][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.647010][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.724510][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.724654][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.840777][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.889806][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.889911][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.969901][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.970094][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.147670][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.173584][ T5831] Bluetooth: hci1: command tx timeout [ 98.173621][ T5831] Bluetooth: hci2: command tx timeout [ 98.173767][ T5825] Bluetooth: hci0: command tx timeout [ 98.252037][ T5825] Bluetooth: hci3: command tx timeout [ 98.546756][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.668934][ T5822] veth0_vlan: entered promiscuous mode [ 98.750435][ T5822] veth1_vlan: entered promiscuous mode [ 98.769605][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.866818][ T5824] veth0_vlan: entered promiscuous mode [ 98.871761][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.935507][ T5824] veth1_vlan: entered promiscuous mode [ 98.940121][ T5822] veth0_macvtap: entered promiscuous mode [ 98.993739][ T5822] veth1_macvtap: entered promiscuous mode [ 99.046119][ T5823] veth0_vlan: entered promiscuous mode [ 99.109990][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.111145][ T5823] veth1_vlan: entered promiscuous mode [ 99.157956][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.183249][ T5824] veth0_macvtap: entered promiscuous mode [ 99.189779][ T5821] veth0_vlan: entered promiscuous mode [ 99.217739][ T5824] veth1_macvtap: entered promiscuous mode [ 99.234589][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.250889][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.260558][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.263147][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.314276][ T5821] veth1_vlan: entered promiscuous mode [ 99.410866][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.490162][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.511753][ T5823] veth0_macvtap: entered promiscuous mode [ 99.676231][ T156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.701140][ T156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.712402][ T5823] veth1_macvtap: entered promiscuous mode [ 99.741075][ T156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.759538][ T156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.963096][ T5821] veth0_macvtap: entered promiscuous mode [ 99.995628][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.995652][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.045409][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.125963][ T5821] veth1_macvtap: entered promiscuous mode [ 100.187141][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.252864][ T60] Bluetooth: hci2: command tx timeout [ 100.252898][ T60] Bluetooth: hci1: command tx timeout [ 100.252950][ T5825] Bluetooth: hci0: command tx timeout [ 100.309478][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.325823][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.325918][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.325933][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.332652][ T5825] Bluetooth: hci3: command tx timeout [ 100.338615][ T156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.372594][ T156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.471807][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.627759][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.632090][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.632109][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.716013][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.739532][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.757888][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.804737][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.107108][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.107132][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.599791][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.599814][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.740263][ T823] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.832743][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.832767][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.004218][ T823] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 102.004285][ T823] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.004314][ T823] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.004362][ T823] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.004386][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.165660][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.165684][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.358813][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.358835][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.379138][ T823] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.393824][ T823] usb 1-1: invalid MIDI out EP 0 [ 102.619424][ T5915] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 103.083408][ T5920] devtmpfs: Too few inodes for current use [ 103.669589][ T5928] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 104.237776][ T823] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 104.329145][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.435049][ T5935] FAULT_INJECTION: forcing a failure. [ 104.435049][ T5935] name failslab, interval 1, probability 0, space 0, times 1 [ 104.435087][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 104.435110][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 104.435120][ T5935] Call Trace: [ 104.435127][ T5935] [ 104.435135][ T5935] dump_stack_lvl+0xe8/0x150 [ 104.435164][ T5935] should_fail_ex+0x46b/0x600 [ 104.435198][ T5935] should_failslab+0xa8/0x100 [ 104.435227][ T5935] kmem_cache_alloc_noprof+0x87/0x680 [ 104.435250][ T5935] ? vm_area_dup+0x2b/0x670 [ 104.435264][ T5935] ? __pfx_vma_merge_new_range+0x10/0x10 [ 104.435285][ T5935] vm_area_dup+0x2b/0x670 [ 104.435305][ T5935] copy_vma+0x54c/0x9e0 [ 104.435333][ T5935] ? __pfx_copy_vma+0x10/0x10 [ 104.435377][ T5935] ? rcu_is_watching+0x15/0xb0 [ 104.435401][ T5935] ? percpu_counter_add_batch+0xea/0x1d0 [ 104.435433][ T5935] move_vma+0x89a/0x1900 [ 104.435471][ T5935] ? arch_get_unmapped_area_topdown+0x264/0xb70 [ 104.435493][ T5935] ? __pfx_move_vma+0x10/0x10 [ 104.435519][ T5935] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 104.435539][ T5935] ? mtree_load+0x12a/0x780 [ 104.435566][ T5935] ? cap_mmap_addr+0xaf/0x100 [ 104.435585][ T5935] ? bpf_lsm_mmap_addr+0x9/0x50 [ 104.435614][ T5935] mremap_to+0x7b7/0x880 [ 104.435641][ T5935] ? mtree_load+0x12a/0x780 [ 104.435658][ T5935] ? __pfx_mremap_to+0x10/0x10 [ 104.435680][ T5935] ? may_expand_vm+0x24d/0x390 [ 104.435711][ T5935] ? check_prep_vma+0x8b9/0xb00 [ 104.435743][ T5935] __se_sys_mremap+0xe6d/0x11d0 [ 104.435792][ T5935] ? __pfx___se_sys_mremap+0x10/0x10 [ 104.435817][ T5935] ? fput+0xa0/0xd0 [ 104.435853][ T5935] ? __x64_sys_mremap+0x20/0xc0 [ 104.435872][ T5935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.435892][ T5935] do_syscall_64+0x15f/0xf80 [ 104.435920][ T5935] ? trace_irq_disable+0x3b/0x140 [ 104.435939][ T5935] ? clear_bhb_loop+0x40/0x90 [ 104.435961][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.435979][ T5935] RIP: 0033:0x7fd56050c819 [ 104.435997][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.436011][ T5935] RSP: 002b:00007fd55e745028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 104.436032][ T5935] RAX: ffffffffffffffda RBX: 00007fd560786090 RCX: 00007fd56050c819 [ 104.436045][ T5935] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 104.436057][ T5935] RBP: 00007fd55e745090 R08: 0000200000000000 R09: 0000000000000000 [ 104.436068][ T5935] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 104.436078][ T5935] R13: 00007fd560786128 R14: 00007fd560786090 R15: 00007fff8f67f888 [ 104.436108][ T5935] [ 104.554717][ T823] usb 1-1: USB disconnect, device number 2 [ 104.967491][ T5942] FAULT_INJECTION: forcing a failure. [ 104.967491][ T5942] name failslab, interval 1, probability 0, space 0, times 0 [ 104.967527][ T5942] CPU: 1 UID: 0 PID: 5942 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 104.967552][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 104.967564][ T5942] Call Trace: [ 104.967572][ T5942] [ 104.967581][ T5942] dump_stack_lvl+0xe8/0x150 [ 104.967611][ T5942] should_fail_ex+0x46b/0x600 [ 104.967645][ T5942] should_failslab+0xa8/0x100 [ 104.967678][ T5942] __kmalloc_noprof+0xdf/0x7b0 [ 104.967706][ T5942] ? tomoyo_encode+0x28b/0x550 [ 104.967736][ T5942] tomoyo_encode+0x28b/0x550 [ 104.967765][ T5942] tomoyo_realpath_from_path+0x58d/0x5d0 [ 104.967803][ T5942] tomoyo_mount_permission+0x3e8/0x9d0 [ 104.967831][ T5942] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 104.967856][ T5942] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 104.967940][ T5942] security_sb_mount+0xe4/0x320 [ 104.967973][ T5942] path_mount+0xbc/0x10e0 [ 104.967993][ T5942] ? user_path_at+0xd4/0x160 [ 104.968021][ T5942] ? user_path_at+0xd4/0x160 [ 104.968046][ T5942] __se_sys_mount+0x31d/0x420 [ 104.968120][ T5942] ? __pfx___se_sys_mount+0x10/0x10 [ 104.968148][ T5942] ? __x64_sys_mount+0x20/0xc0 [ 104.968167][ T5942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.968186][ T5942] do_syscall_64+0x15f/0xf80 [ 104.968205][ T5942] ? trace_irq_disable+0x3b/0x140 [ 104.968225][ T5942] ? clear_bhb_loop+0x40/0x90 [ 104.968246][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.968263][ T5942] RIP: 0033:0x7fd56050c819 [ 104.968280][ T5942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.968295][ T5942] RSP: 002b:00007fd55e745028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.968316][ T5942] RAX: ffffffffffffffda RBX: 00007fd560786090 RCX: 00007fd56050c819 [ 104.968331][ T5942] RDX: 0000200000000000 RSI: 0000200000004a00 RDI: 0000200000000100 [ 104.968344][ T5942] RBP: 00007fd55e745090 R08: 0000000000000000 R09: 0000000000000000 [ 104.968354][ T5942] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000001 [ 104.968365][ T5942] R13: 00007fd560786128 R14: 00007fd560786090 R15: 00007fff8f67f888 [ 104.968393][ T5942] [ 105.007817][ T5942] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.979668][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.042348][ T823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.171158][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 106.187717][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.187757][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.187799][ T5812] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 106.187824][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.213411][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 106.224311][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.251053][ T823] usb 2-1: config 6 has an invalid interface number: 218 but max is 0 [ 106.251083][ T823] usb 2-1: config 6 has no interface number 0 [ 106.251115][ T823] usb 2-1: config 6 interface 218 has no altsetting 0 [ 106.254970][ T37] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.261871][ T823] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=35.2f [ 106.261901][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.261921][ T823] usb 2-1: Product: syz [ 106.261934][ T823] usb 2-1: Manufacturer: syz [ 106.261948][ T823] usb 2-1: SerialNumber: syz [ 106.434780][ T5812] usb 4-1: config 0 descriptor?? [ 106.454686][ T37] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.454724][ T37] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 106.454760][ T37] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.454782][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.573953][ T5954] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 106.683515][ T37] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.631395][ T5812] usbhid 4-1:0.0: can't add hid device: -71 [ 107.631523][ T5812] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 107.836382][ T5812] usb 4-1: USB disconnect, device number 2 [ 107.842012][ T5954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.223366][ T823] mdc800 2-1:6.218: probe fails -> wrong Interface [ 108.559149][ T823] usb 2-1: USB disconnect, device number 2 [ 108.840895][ T37] usb 1-1: USB disconnect, device number 3 [ 109.118746][ T5952] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.277028][ T5973] devtmpfs: Too few inodes for current use [ 109.341606][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 109.587697][ T5952] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 109.587726][ T5952] usb 3-1: config 0 has no interface number 0 [ 109.587770][ T5952] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.587791][ T5952] usb 3-1: config 0 interface 89 has no altsetting 0 [ 109.599421][ T5952] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 109.599452][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.599471][ T5952] usb 3-1: Product: syz [ 109.599485][ T5952] usb 3-1: Manufacturer: syz [ 109.599499][ T5952] usb 3-1: SerialNumber: syz [ 109.665262][ T5952] usb 3-1: config 0 descriptor?? [ 109.718909][ T5952] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 109.718950][ T5952] em28xx 3-1:0.89: Video interface 89 found: [ 110.228300][ T5985] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 110.228387][ T5985] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 110.355382][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 110.362695][ T5952] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 110.796099][ T5970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.809203][ T5970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.187238][ T5952] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=98) [ 111.187272][ T5952] em28xx 3-1:0.89: board has no eeprom [ 111.662187][ T5952] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 111.662221][ T5952] em28xx 3-1:0.89: analog set to bulk mode. [ 111.663667][ T823] em28xx 3-1:0.89: Registering V4L2 extension [ 111.714584][ T5952] usb 3-1: USB disconnect, device number 2 [ 111.719598][ T5952] em28xx 3-1:0.89: Disconnecting em28xx [ 111.881912][ T823] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 111.881939][ T823] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 111.881953][ T823] em28xx 3-1:0.89: No AC97 audio processor [ 112.118464][ T823] usb 3-1: Decoder not found [ 112.118488][ T823] em28xx 3-1:0.89: failed to create media graph [ 112.118562][ T823] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 112.292762][ T823] em28xx 3-1:0.89: Registering snapshot button... [ 112.399523][ T6022] devtmpfs: Too few inodes for current use [ 112.545794][ T823] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input5 [ 112.722315][ T823] em28xx 3-1:0.89: Remote control support is not available for this card. [ 112.733691][ T5952] em28xx 3-1:0.89: Closing input extension [ 112.751497][ T5952] em28xx 3-1:0.89: Deregistering snapshot button [ 113.661557][ T32] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.812018][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 113.831227][ T32] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 113.832215][ T32] usb 1-1: config 0 has no interface number 0 [ 113.832269][ T32] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.832295][ T32] usb 1-1: config 0 interface 89 has no altsetting 0 [ 113.840826][ T32] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 113.840858][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.840877][ T32] usb 1-1: Product: syz [ 113.840891][ T32] usb 1-1: Manufacturer: syz [ 113.840904][ T32] usb 1-1: SerialNumber: syz [ 113.846349][ T5952] em28xx 3-1:0.89: Freeing device [ 114.054737][ T32] usb 1-1: config 0 descriptor?? [ 114.104384][ T32] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 114.104454][ T32] em28xx 1-1:0.89: Video interface 89 found: [ 114.562244][ T6054] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 114.562387][ T6054] netlink: 'syz.1.40': attribute type 2 has an invalid length. [ 114.562404][ T6054] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 114.562417][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.40'. [ 114.876395][ T32] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 115.105033][ T6060] FAULT_INJECTION: forcing a failure. [ 115.105033][ T6060] name failslab, interval 1, probability 0, space 0, times 0 [ 115.105070][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: syz.2.41 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.105091][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.105102][ T6060] Call Trace: [ 115.105109][ T6060] [ 115.105116][ T6060] dump_stack_lvl+0xe8/0x150 [ 115.105143][ T6060] should_fail_ex+0x46b/0x600 [ 115.105172][ T6060] should_failslab+0xa8/0x100 [ 115.105200][ T6060] __kmalloc_cache_noprof+0x84/0x690 [ 115.105226][ T6060] ? vkms_plane_duplicate_state+0x51/0x110 [ 115.105258][ T6060] vkms_plane_duplicate_state+0x51/0x110 [ 115.105285][ T6060] drm_atomic_get_plane_state+0x25a/0x670 [ 115.105304][ T6060] ? drm_atomic_helper_check_plane_state+0x811/0xf30 [ 115.105340][ T6060] drm_atomic_add_affected_planes+0x242/0x3d0 [ 115.105377][ T6060] vkms_crtc_atomic_check+0xff/0x760 [ 115.105407][ T6060] drm_atomic_helper_check_planes+0x57b/0x7f0 [ 115.105441][ T6060] drm_atomic_helper_check+0xa0/0x190 [ 115.105463][ T6060] ? __pfx_vkms_atomic_check+0x10/0x10 [ 115.105491][ T6060] drm_atomic_check_only+0x167b/0x3090 [ 115.105528][ T6060] drm_atomic_commit+0x167/0x2b0 [ 115.105550][ T6060] ? __pfx_drm_atomic_commit+0x10/0x10 [ 115.105567][ T6060] ? drm_atomic_get_crtc_state+0x3fb/0x610 [ 115.105583][ T6060] ? __pfx___drm_printfn_info+0x10/0x10 [ 115.105609][ T6060] ? drm_mode_object_get+0xcf/0x140 [ 115.105637][ T6060] ? drm_atomic_set_fb_for_plane+0x1f5/0x280 [ 115.105667][ T6060] drm_atomic_helper_update_plane+0x248/0x3b0 [ 115.105706][ T6060] drm_mode_cursor_common+0xecc/0x1660 [ 115.105755][ T6060] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 115.105812][ T6060] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 115.105835][ T6060] ? lockdep_hardirqs_on+0x7a/0x110 [ 115.105856][ T6060] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 115.105884][ T6060] drm_mode_cursor_ioctl+0xd4/0x130 [ 115.105905][ T6060] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 115.105932][ T6060] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 115.105961][ T6060] ? rt_spin_unlock+0x160/0x200 [ 115.105995][ T6060] ? drm_is_current_master+0x1a2/0x210 [ 115.106019][ T6060] drm_ioctl_kernel+0x2e2/0x3b0 [ 115.106039][ T6060] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 115.106058][ T6060] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 115.106085][ T6060] drm_ioctl+0x6c0/0xb80 [ 115.106106][ T6060] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 115.106130][ T6060] ? __pfx_drm_ioctl+0x10/0x10 [ 115.106159][ T6060] ? __fget_files+0x2a/0x420 [ 115.106183][ T6060] ? bpf_lsm_file_ioctl+0x9/0x20 [ 115.106202][ T6060] ? __pfx_drm_ioctl+0x10/0x10 [ 115.106218][ T6060] __se_sys_ioctl+0xff/0x170 [ 115.106243][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.106263][ T6060] do_syscall_64+0x15f/0xf80 [ 115.106280][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.106297][ T6060] ? clear_bhb_loop+0x40/0x90 [ 115.106319][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.106336][ T6060] RIP: 0033:0x7fd336b5c819 [ 115.106355][ T6060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.106369][ T6060] RSP: 002b:00007fd334db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.106391][ T6060] RAX: ffffffffffffffda RBX: 00007fd336dd5fa0 RCX: 00007fd336b5c819 [ 115.106403][ T6060] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 115.106414][ T6060] RBP: 00007fd334db6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.106425][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.106435][ T6060] R13: 00007fd336dd6038 R14: 00007fd336dd5fa0 R15: 00007ffd04d20cc8 [ 115.106465][ T6060] [ 115.601468][ T37] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.821550][ T37] usb 2-1: config 4 has an invalid interface number: 23 but max is 0 [ 115.821583][ T37] usb 2-1: config 4 has an invalid descriptor of length 85, skipping remainder of the config [ 115.821603][ T37] usb 2-1: config 4 has no interface number 0 [ 115.825160][ T37] usb 2-1: too many endpoints for config 4 interface 23 altsetting 3: 128, using maximum allowed: 30 [ 115.825276][ T37] usb 2-1: config 4 interface 23 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 115.825309][ T37] usb 2-1: config 4 interface 23 has no altsetting 0 [ 115.825348][ T37] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 115.825439][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.957155][ T32] em28xx 1-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 115.957196][ T32] em28xx 1-1:0.89: failed to read eeprom (err=-5) [ 115.957244][ T32] em28xx 1-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 115.971698][ T5892] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 116.012157][ T823] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.012169][ T32] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 116.012267][ T32] em28xx 1-1:0.89: analog set to bulk mode. [ 116.012458][ T5812] em28xx 1-1:0.89: Registering V4L2 extension [ 116.087983][ T37] usb 2-1: language id specifier not provided by device, defaulting to English [ 116.131511][ T5892] usb 3-1: Invalid ep0 maxpacket: 64 [ 116.181543][ T823] usb 4-1: device descriptor read/64, error -71 [ 116.232211][ T5812] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 116.272221][ T32] usb 1-1: USB disconnect, device number 4 [ 116.276368][ T5812] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 116.276588][ T5812] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-19) [ 116.276784][ T5812] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-19) [ 116.308759][ T5812] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 116.308904][ T5812] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 116.308919][ T5812] em28xx 1-1:0.89: No AC97 audio processor [ 116.362263][ T32] em28xx 1-1:0.89: Disconnecting em28xx [ 116.394516][ T5812] usb 1-1: Decoder not found [ 116.394540][ T5812] em28xx 1-1:0.89: failed to create media graph [ 116.394574][ T5812] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 116.408614][ T5812] em28xx 1-1:0.89: Registering snapshot button... [ 116.435034][ T5892] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 116.475805][ T5812] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input6 [ 116.480190][ T37] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 116.481678][ T823] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.499515][ T5812] em28xx 1-1:0.89: Remote control support is not available for this card. [ 116.499583][ T32] em28xx 1-1:0.89: Closing input extension [ 116.499605][ T32] em28xx 1-1:0.89: Deregistering snapshot button [ 116.606149][ T5892] usb 3-1: Invalid ep0 maxpacket: 64 [ 116.607424][ T5892] usb usb3-port1: attempt power cycle [ 116.642578][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 116.661482][ T823] usb 4-1: device descriptor read/64, error -71 [ 116.699345][ T6073] process 'syz.0.45' launched './file0' with NULL argv: empty string added [ 116.747071][ T32] em28xx 1-1:0.89: Freeing device [ 116.782357][ T823] usb usb4-port1: attempt power cycle [ 117.072256][ T5892] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 117.116659][ T5892] usb 3-1: Invalid ep0 maxpacket: 64 [ 117.171587][ T823] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.193389][ T823] usb 4-1: device descriptor read/8, error -71 [ 117.251545][ T5892] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 117.273690][ T5892] usb 3-1: Invalid ep0 maxpacket: 64 [ 117.274036][ T5892] usb usb3-port1: unable to enumerate USB device [ 117.431538][ T823] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.454488][ T823] usb 4-1: device descriptor read/8, error -71 [ 117.532442][ T37] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 117.532464][ T37] stv0680 2-1:4.23: STV(e): camera ping failed!! [ 117.532871][ T37] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 117.532884][ T37] stv0680 2-1:4.23: last error: 0, command = 0x0 [ 117.550823][ T37] usb 2-1: USB disconnect, device number 3 [ 117.552797][ T5892] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 117.594015][ T823] usb usb4-port1: unable to enumerate USB device [ 117.768624][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.769593][ T5892] usb 1-1: not running at top speed; connect to a high speed hub [ 117.779089][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 117.779130][ T5892] usb 1-1: can't read configurations, error -61 [ 117.901648][ T5892] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 118.064627][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.067526][ T5892] usb 1-1: not running at top speed; connect to a high speed hub [ 118.072632][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.072674][ T5892] usb 1-1: can't read configurations, error -61 [ 118.077163][ T5892] usb usb1-port1: attempt power cycle [ 118.433117][ T5892] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 118.433254][ T37] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 118.460314][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.460965][ T5892] usb 1-1: not running at top speed; connect to a high speed hub [ 118.473188][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.473227][ T5892] usb 1-1: can't read configurations, error -61 [ 118.586655][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 118.586695][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.586749][ T37] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 118.586776][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.612859][ T5892] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 118.633480][ T37] usb 2-1: config 0 descriptor?? [ 118.653271][ T6084] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 118.653669][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.668020][ T5892] usb 1-1: not running at top speed; connect to a high speed hub [ 118.675793][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.675833][ T5892] usb 1-1: can't read configurations, error -61 [ 118.676406][ T5892] usb usb1-port1: unable to enumerate USB device [ 119.117307][ T37] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0 [ 119.117355][ T37] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0 [ 119.117382][ T37] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0 [ 119.117406][ T37] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0 [ 119.117430][ T37] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0 [ 119.117454][ T37] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0 [ 119.117478][ T37] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0 [ 119.117502][ T37] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0 [ 119.117526][ T37] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0 [ 119.117551][ T37] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0 [ 119.233270][ T37] thrustmaster 0003:044F:B304.0001: hidraw0: USB HID v0.05 Device [HID 044f:b304] on usb-dummy_hcd.1-1/input0 [ 119.233295][ T37] thrustmaster 0003:044F:B304.0001: no inputs found [ 119.313670][ T823] usb 2-1: USB disconnect, device number 4 [ 119.489700][ T6092] fido_id[6092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 119.733166][ T6104] FAULT_INJECTION: forcing a failure. [ 119.733166][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 119.733203][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.733229][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.733241][ T6104] Call Trace: [ 119.733250][ T6104] [ 119.733271][ T6104] dump_stack_lvl+0xe8/0x150 [ 119.733304][ T6104] should_fail_ex+0x46b/0x600 [ 119.733341][ T6104] should_failslab+0xa8/0x100 [ 119.733377][ T6104] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 119.733409][ T6104] ? __alloc_skb+0x1d0/0x7d0 [ 119.733432][ T6104] ? lockdep_hardirqs_on+0x7a/0x110 [ 119.733460][ T6104] __alloc_skb+0x1d0/0x7d0 [ 119.733486][ T6104] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 119.733514][ T6104] netlink_sendmsg+0x5d4/0xb40 [ 119.733552][ T6104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.733589][ T6104] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 119.733623][ T6104] ? aa_sock_msg_perm+0x122/0x200 [ 119.733665][ T6104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.733689][ T6104] sock_sendmsg_nosec+0x112/0x150 [ 119.733727][ T6104] ____sys_sendmsg+0x55c/0x870 [ 119.733762][ T6104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.733801][ T6104] ? import_iovec+0x73/0xa0 [ 119.733837][ T6104] ___sys_sendmsg+0x2a5/0x360 [ 119.733864][ T6104] ? __lock_acquire+0x6b5/0x2cf0 [ 119.733896][ T6104] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.733961][ T6104] ? __fget_files+0x2a/0x420 [ 119.733987][ T6104] ? __fget_files+0x3a6/0x420 [ 119.734025][ T6104] __x64_sys_sendmsg+0x1c3/0x2a0 [ 119.734057][ T6104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.734096][ T6104] ? __pfx_ksys_write+0x10/0x10 [ 119.734137][ T6104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.734162][ T6104] do_syscall_64+0x15f/0xf80 [ 119.734184][ T6104] ? trace_irq_disable+0x3b/0x140 [ 119.734210][ T6104] ? clear_bhb_loop+0x40/0x90 [ 119.734239][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.734271][ T6104] RIP: 0033:0x7f13862ac819 [ 119.734291][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.734307][ T6104] RSP: 002b:00007f13844fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.734331][ T6104] RAX: ffffffffffffffda RBX: 00007f1386525fa0 RCX: 00007f13862ac819 [ 119.734347][ T6104] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 119.734360][ T6104] RBP: 00007f13844fe090 R08: 0000000000000000 R09: 0000000000000000 [ 119.734373][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.734386][ T6104] R13: 00007f1386526038 R14: 00007f1386525fa0 R15: 00007ffd736fb088 [ 119.734415][ T6104] [ 120.191500][ T37] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.361608][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 120.366533][ T37] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 120.366566][ T37] usb 4-1: config 0 has no interface number 0 [ 120.366617][ T37] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.366643][ T37] usb 4-1: config 0 interface 89 has no altsetting 0 [ 120.387699][ T37] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 120.387730][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.387749][ T37] usb 4-1: Product: syz [ 120.387762][ T37] usb 4-1: Manufacturer: syz [ 120.387776][ T37] usb 4-1: SerialNumber: syz [ 120.439665][ T37] usb 4-1: config 0 descriptor?? [ 120.510323][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 120.510465][ T6119] netlink: 2 bytes leftover after parsing attributes in process `syz.1.60'. [ 120.566127][ T37] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 120.566170][ T37] em28xx 4-1:0.89: Video interface 89 found: [ 120.782847][ T6124] loop8: detected capacity change from 0 to 7 [ 120.951531][ T823] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.973601][ T6124] Dev loop8: unable to read RDB block 7 [ 120.973648][ T6124] loop8: unable to read partition table [ 120.974417][ T6124] loop8: partition table beyond EOD, truncated [ 120.974450][ T6124] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 121.080879][ T37] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 121.112276][ T823] usb 1-1: Using ep0 maxpacket: 16 [ 121.117517][ T823] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.119152][ T823] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.119179][ T823] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 121.197736][ T823] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 121.197772][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.197794][ T823] usb 1-1: Product: syz [ 121.197809][ T823] usb 1-1: Manufacturer: syz [ 121.197825][ T823] usb 1-1: SerialNumber: syz [ 121.343957][ T5967] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.473861][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.484715][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.524730][ T823] usb 1-1: 0:2 : does not exist [ 121.552667][ T5967] usb 3-1: Using ep0 maxpacket: 16 [ 121.564698][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 121.564740][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.567287][ T5967] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 121.567316][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.567335][ T5967] usb 3-1: Product: syz [ 121.567349][ T5967] usb 3-1: Manufacturer: syz [ 121.567363][ T5967] usb 3-1: SerialNumber: syz [ 121.706440][ T5967] usb 3-1: config 0 descriptor?? [ 121.828725][ T823] usb 1-1: USB disconnect, device number 9 [ 121.906303][ T5967] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 122.057625][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.247927][ T6108] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 122.247952][ T6108] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 122.609257][ T5967] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 122.796610][ T37] em28xx 4-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 122.796646][ T37] em28xx 4-1:0.89: failed to read eeprom (err=-5) [ 122.796692][ T37] em28xx 4-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 122.811536][ T5967] usb 3-1: USB disconnect, device number 7 [ 122.851514][ T37] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 122.851547][ T37] em28xx 4-1:0.89: analog set to bulk mode. [ 122.852975][ T5958] em28xx 4-1:0.89: Registering V4L2 extension [ 122.943998][ T5958] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 122.947470][ T5958] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 122.949527][ T5958] em28xx 4-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 122.953252][ T5958] em28xx 4-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 122.983028][ T37] usb 4-1: USB disconnect, device number 7 [ 122.989110][ T37] em28xx 4-1:0.89: Disconnecting em28xx [ 123.004706][ T5958] em28xx 4-1:0.89: Config register raw data: 0xfffffffb [ 123.004733][ T5958] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 123.004747][ T5958] em28xx 4-1:0.89: No AC97 audio processor [ 123.116922][ T5958] usb 4-1: Decoder not found [ 123.116946][ T5958] em28xx 4-1:0.89: failed to create media graph [ 123.116979][ T5958] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 123.224679][ T5967] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 123.239540][ T5967] kobil_sct 3-1:0.0: device disconnected [ 123.254095][ T5958] em28xx 4-1:0.89: Registering snapshot button... [ 123.298193][ T5958] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input7 [ 123.358381][ T5958] em28xx 4-1:0.89: Remote control support is not available for this card. [ 123.373473][ T37] em28xx 4-1:0.89: Closing input extension [ 123.373502][ T37] em28xx 4-1:0.89: Deregistering snapshot button [ 123.638031][ T6155] ======================================================= [ 123.638031][ T6155] WARNING: The mand mount option has been deprecated and [ 123.638031][ T6155] and is ignored by this kernel. Remove the mand [ 123.638031][ T6155] option from the mount to silence this warning. [ 123.638031][ T6155] ======================================================= [ 123.761034][ T37] em28xx 4-1:0.89: Freeing device [ 124.552328][ T6175] netlink: 172 bytes leftover after parsing attributes in process `syz.1.77'. [ 124.552389][ T6175] netlink: 48 bytes leftover after parsing attributes in process `syz.1.77'. [ 124.725303][ T6181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.837353][ T6181] netlink: 'syz.3.75': attribute type 29 has an invalid length. [ 125.220121][ T6193] FAULT_INJECTION: forcing a failure. [ 125.220121][ T6193] name failslab, interval 1, probability 0, space 0, times 0 [ 125.220175][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.3.80 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.220198][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.220209][ T6193] Call Trace: [ 125.220219][ T6193] [ 125.220233][ T6193] dump_stack_lvl+0xe8/0x150 [ 125.220261][ T6193] should_fail_ex+0x46b/0x600 [ 125.220294][ T6193] should_failslab+0xa8/0x100 [ 125.220327][ T6193] kmem_cache_alloc_noprof+0x87/0x680 [ 125.220358][ T6193] ? anon_vma_clone+0x3e5/0x9f0 [ 125.220393][ T6193] anon_vma_clone+0x3e5/0x9f0 [ 125.220435][ T6193] __split_vma+0x3a5/0xa30 [ 125.220474][ T6193] ? __pfx___split_vma+0x10/0x10 [ 125.220513][ T6193] ? mas_find+0xb0e/0xd30 [ 125.220529][ T6193] ? validate_mm+0x25d/0x4c0 [ 125.220552][ T6193] vms_gather_munmap_vmas+0x32d/0x1380 [ 125.220575][ T6193] ? validate_mm+0x403/0x4c0 [ 125.220611][ T6193] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 125.220652][ T6193] do_vmi_align_munmap+0x2c7/0x4d0 [ 125.220694][ T6193] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 125.220732][ T6193] ? mtree_range_walk+0x6fc/0x8b0 [ 125.220783][ T6193] do_vmi_munmap+0x252/0x2d0 [ 125.220810][ T6193] move_vma+0x11a7/0x1900 [ 125.220853][ T6193] ? arch_get_unmapped_area_topdown+0x264/0xb70 [ 125.220880][ T6193] ? __pfx_move_vma+0x10/0x10 [ 125.220923][ T6193] ? mtree_load+0x12a/0x780 [ 125.220954][ T6193] ? cap_mmap_addr+0xaf/0x100 [ 125.220978][ T6193] ? bpf_lsm_mmap_addr+0x9/0x50 [ 125.221013][ T6193] mremap_to+0x7b7/0x880 [ 125.221045][ T6193] ? mtree_load+0x12a/0x780 [ 125.221067][ T6193] ? __pfx_mremap_to+0x10/0x10 [ 125.221093][ T6193] ? may_expand_vm+0x24d/0x390 [ 125.221129][ T6193] ? check_prep_vma+0x8b9/0xb00 [ 125.221164][ T6193] __se_sys_mremap+0xe6d/0x11d0 [ 125.221214][ T6193] ? __pfx___se_sys_mremap+0x10/0x10 [ 125.221244][ T6193] ? fput+0xa0/0xd0 [ 125.221268][ T6193] ? ksys_write+0x248/0x270 [ 125.221299][ T6193] ? __pfx_ksys_write+0x10/0x10 [ 125.221335][ T6193] ? __x64_sys_mremap+0x20/0xc0 [ 125.221357][ T6193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.221378][ T6193] do_syscall_64+0x15f/0xf80 [ 125.221398][ T6193] ? trace_irq_disable+0x3b/0x140 [ 125.221422][ T6193] ? clear_bhb_loop+0x40/0x90 [ 125.221450][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.221471][ T6193] RIP: 0033:0x7f13862ac819 [ 125.221492][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.221509][ T6193] RSP: 002b:00007f13844dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 125.221534][ T6193] RAX: ffffffffffffffda RBX: 00007f1386526090 RCX: 00007f13862ac819 [ 125.221550][ T6193] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 125.221562][ T6193] RBP: 00007f13844dd090 R08: 0000200000000000 R09: 0000000000000000 [ 125.221576][ T6193] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 125.221589][ T6193] R13: 00007f1386526128 R14: 00007f1386526090 R15: 00007ffd736fb088 [ 125.221621][ T6193] [ 125.251466][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 125.342667][ T6196] FAULT_INJECTION: forcing a failure. [ 125.342667][ T6196] name failslab, interval 1, probability 0, space 0, times 0 [ 125.342702][ T6196] CPU: 1 UID: 0 PID: 6196 Comm: syz.2.82 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.342725][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.342736][ T6196] Call Trace: [ 125.342744][ T6196] [ 125.342752][ T6196] dump_stack_lvl+0xe8/0x150 [ 125.342780][ T6196] should_fail_ex+0x46b/0x600 [ 125.342811][ T6196] should_failslab+0xa8/0x100 [ 125.342840][ T6196] __kmalloc_noprof+0xdf/0x7b0 [ 125.342866][ T6196] ? kfree+0x4d/0x6c0 [ 125.342887][ T6196] ? kasan_quarantine_put+0xbb/0x1f0 [ 125.342910][ T6196] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 125.342938][ T6196] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.342962][ T6196] tomoyo_realpath_from_path+0xe3/0x5d0 [ 125.342986][ T6196] ? kmem_cache_free+0x187/0x6c0 [ 125.343025][ T6196] tomoyo_mount_permission+0x918/0x9d0 [ 125.343054][ T6196] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 125.343078][ T6196] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 125.343154][ T6196] security_sb_mount+0xe4/0x320 [ 125.343182][ T6196] path_mount+0xbc/0x10e0 [ 125.343204][ T6196] ? user_path_at+0xd4/0x160 [ 125.343233][ T6196] ? user_path_at+0xd4/0x160 [ 125.343265][ T6196] __se_sys_mount+0x31d/0x420 [ 125.343293][ T6196] ? __pfx___se_sys_mount+0x10/0x10 [ 125.343321][ T6196] ? __x64_sys_mount+0x20/0xc0 [ 125.343342][ T6196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.343364][ T6196] do_syscall_64+0x15f/0xf80 [ 125.343383][ T6196] ? trace_irq_disable+0x3b/0x140 [ 125.343405][ T6196] ? clear_bhb_loop+0x40/0x90 [ 125.343429][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.343448][ T6196] RIP: 0033:0x7fd336b5c819 [ 125.343466][ T6196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.343482][ T6196] RSP: 002b:00007fd334d95028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.343504][ T6196] RAX: ffffffffffffffda RBX: 00007fd336dd6090 RCX: 00007fd336b5c819 [ 125.343518][ T6196] RDX: 0000200000000000 RSI: 0000200000004a00 RDI: 0000200000000100 [ 125.343531][ T6196] RBP: 00007fd334d95090 R08: 0000000000000000 R09: 0000000000000000 [ 125.343543][ T6196] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000002 [ 125.343555][ T6196] R13: 00007fd336dd6128 R14: 00007fd336dd6090 R15: 00007ffd04d20cc8 [ 125.343585][ T6196] [ 125.360963][ T6196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 125.441413][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 125.485369][ T10] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 125.485401][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.485423][ T10] usb 1-1: config 0 has no interface number 0 [ 125.485475][ T10] usb 1-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 125.613433][ T10] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 125.613465][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.613484][ T10] usb 1-1: Product: syz [ 125.613498][ T10] usb 1-1: Manufacturer: syz [ 125.613512][ T10] usb 1-1: SerialNumber: syz [ 125.932513][ T10] usb 1-1: config 0 descriptor?? [ 125.971563][ T5812] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.111408][ T5812] usb 4-1: device descriptor read/64, error -71 [ 126.160939][ T10] usb 1-1: NFC: intf ffff88805ebf8000 id ffffffff8ed97b20 [ 126.193675][ T10] usb 1-1: USB disconnect, device number 10 [ 126.371672][ T5812] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.501594][ T5812] usb 4-1: device descriptor read/64, error -71 [ 126.541472][ T823] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 126.614454][ T5812] usb usb4-port1: attempt power cycle [ 126.691469][ T823] usb 3-1: Using ep0 maxpacket: 16 [ 126.709211][ T823] usb 3-1: config index 0 descriptor too short (expected 67, got 36) [ 126.709363][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.709391][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.709427][ T823] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 126.709449][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.760908][ T6213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.789015][ T823] usb 3-1: config 0 descriptor?? [ 126.820276][ T6213] netlink: 'syz.1.88': attribute type 29 has an invalid length. [ 126.991454][ T5812] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 127.019621][ T5812] usb 4-1: device descriptor read/8, error -71 [ 127.251487][ T5812] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 127.276503][ T5812] usb 4-1: device descriptor read/8, error -71 [ 127.332551][ T823] hid_parser_main: 31 callbacks suppressed [ 127.332580][ T823] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.332621][ T823] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.332649][ T823] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.332674][ T823] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.332700][ T823] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.332744][ T823] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.332771][ T823] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.332794][ T823] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.335774][ T823] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.335796][ T823] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.336139][ T823] apple 0003:05AC:0247.0002: unknown global tag 0xe [ 127.336148][ T823] apple 0003:05AC:0247.0002: item 0 0 1 14 parsing failed [ 127.336651][ T823] apple 0003:05AC:0247.0002: parse failed [ 127.336716][ T823] apple 0003:05AC:0247.0002: probe with driver apple failed with error -22 [ 127.437349][ T6223] netlink: 'syz.1.92': attribute type 11 has an invalid length. [ 127.468160][ T5812] usb usb4-port1: unable to enumerate USB device [ 127.470950][ T6223] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.92'. [ 127.496932][ T5952] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.507505][ T37] usb 3-1: USB disconnect, device number 8 [ 127.655396][ T5952] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.656681][ T5952] usb 1-1: config 66 has an invalid interface number: 114 but max is 0 [ 127.656699][ T5952] usb 1-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 127.656710][ T5952] usb 1-1: config 66 has no interface number 0 [ 127.656728][ T5952] usb 1-1: too many endpoints for config 66 interface 114 altsetting 115: 105, using maximum allowed: 30 [ 127.656758][ T5952] usb 1-1: config 66 interface 114 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 127.656775][ T5952] usb 1-1: config 66 interface 114 has no altsetting 0 [ 127.658956][ T5952] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 127.658973][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.658985][ T5952] usb 1-1: Product: syz [ 127.658994][ T5952] usb 1-1: Manufacturer: syz [ 127.659002][ T5952] usb 1-1: SerialNumber: syz [ 127.952621][ T5952] usb 1-1: USB disconnect, device number 11 [ 128.172529][ T37] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.341376][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 128.347276][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 128.350482][ T37] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 128.350513][ T37] usb 2-1: config 8 has no interface number 0 [ 128.350562][ T37] usb 2-1: config 8 interface 158 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 128.350603][ T37] usb 2-1: config 8 interface 158 altsetting 0 endpoint 0x7 has an invalid bInterval 101, changing to 7 [ 128.350628][ T37] usb 2-1: config 8 interface 158 altsetting 0 endpoint 0x7 has invalid maxpacket 33463, setting to 1024 [ 128.382416][ T37] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=7f.6d [ 128.382437][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.382450][ T37] usb 2-1: Product: syz [ 128.382459][ T37] usb 2-1: Manufacturer: syz [ 128.382468][ T37] usb 2-1: SerialNumber: syz [ 128.915785][ T823] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 128.919212][ T37] usb 2-1: USB disconnect, device number 5 [ 129.031672][ T5952] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 129.064766][ T823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.065776][ T823] usb 4-1: not running at top speed; connect to a high speed hub [ 129.067463][ T823] usb 4-1: config 2 has an invalid interface number: 187 but max is 0 [ 129.067488][ T823] usb 4-1: config 2 has no interface number 0 [ 129.067537][ T823] usb 4-1: config 2 interface 187 altsetting 0 endpoint 0xA has invalid maxpacket 1028, setting to 64 [ 129.072307][ T823] usb 4-1: New USB device found, idVendor=04b4, idProduct=5500, bcdDevice=2a.7c [ 129.072337][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.072356][ T823] usb 4-1: Product: syz [ 129.072369][ T823] usb 4-1: Manufacturer: syz [ 129.072383][ T823] usb 4-1: SerialNumber: syz [ 129.093863][ T6233] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 129.211632][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 129.230969][ T5952] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 129.231001][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.232296][ T5952] usb 1-1: config 0 has no interfaces? [ 129.232332][ T5952] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 129.232354][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.288463][ T5952] usb 1-1: config 0 descriptor?? [ 129.337812][ T6233] netlink: 108 bytes leftover after parsing attributes in process `syz.3.95'. [ 129.426995][ T823] cypress_m8 4-1:2.187: HID->COM RS232 Adapter converter detected [ 129.428419][ T823] cyphidcom ttyUSB0: required endpoint is missing [ 129.447306][ T823] usb 4-1: USB disconnect, device number 12 [ 129.483883][ T823] cypress_m8 4-1:2.187: device disconnected [ 129.612605][ T6242] loop8: detected capacity change from 0 to 7 [ 129.614669][ T6242] Dev loop8: unable to read RDB block 7 [ 129.614699][ T6242] loop8: AHDI p1 p2 [ 129.614731][ T6242] loop8: partition table partially beyond EOD, truncated [ 129.617149][ T6242] loop8: p1 start 1702000233 is beyond EOD, truncated [ 129.729334][ T5952] usb 1-1: USB disconnect, device number 12 [ 130.362699][ T6256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.101'. [ 130.546447][ T6260] netlink: 32 bytes leftover after parsing attributes in process `syz.3.103'. [ 130.546472][ T6260] tipc: Invalid UDP bearer configuration [ 130.546523][ T6260] tipc: Enabling of bearer rejected, failed to enable media [ 130.631501][ T5952] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.667550][ T32] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.794806][ T5952] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.794845][ T5952] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.794885][ T5952] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.794908][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.814106][ T6258] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.844946][ T32] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 130.849418][ T32] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 130.849462][ T32] usb 2-1: can't read configurations, error -61 [ 130.881512][ T5952] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.112040][ T32] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.112229][ T37] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 131.202709][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 131.263300][ T32] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 131.266458][ T32] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 131.266501][ T32] usb 2-1: can't read configurations, error -61 [ 131.267003][ T32] usb usb2-port1: attempt power cycle [ 131.316846][ T5952] usb 3-1: USB disconnect, device number 9 [ 131.324713][ T37] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 131.324745][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.324764][ T37] usb 4-1: config 0 has no interface number 0 [ 131.324861][ T37] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 131.324887][ T37] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 131.324912][ T37] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.404947][ T37] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 131.404985][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.405009][ T37] usb 4-1: Product: syz [ 131.405025][ T37] usb 4-1: Manufacturer: syz [ 131.405040][ T37] usb 4-1: SerialNumber: syz [ 131.405486][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 131.405609][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.405635][ T10] usb 1-1: Product: syz [ 131.405650][ T10] usb 1-1: Manufacturer: syz [ 131.405675][ T10] usb 1-1: SerialNumber: syz [ 131.539727][ T37] usb 4-1: config 0 descriptor?? [ 131.549198][ T37] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 131.570338][ T37] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 131.617461][ T37] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 131.761532][ T32] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.797764][ T32] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 131.816383][ T32] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 131.816428][ T32] usb 2-1: can't read configurations, error -61 [ 131.910330][ T5812] usb 4-1: USB disconnect, device number 13 [ 131.949632][ T5812] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 131.963374][ T5812] cyberjack 4-1:0.69: device disconnected [ 132.002924][ T32] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.025275][ T32] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 132.060733][ T32] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 132.060776][ T32] usb 2-1: can't read configurations, error -61 [ 132.099083][ T32] usb usb2-port1: unable to enumerate USB device [ 132.286341][ T6276] Zero length message leads to an empty skb [ 132.539780][ T10] rtl8150 1-1:1.0: couldn't reset the device [ 132.540464][ T10] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 132.567737][ T10] usb 1-1: USB disconnect, device number 13 [ 133.200023][ T6286] input: syz0 as /devices/virtual/input/input8 [ 133.321600][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.340809][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.713010][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.870334][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 133.877265][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.885327][ T10] usb 1-1: config 1 has an invalid interface number: 170 but max is 0 [ 133.885357][ T10] usb 1-1: config 1 has no interface number 0 [ 133.885392][ T10] usb 1-1: config 1 interface 170 has no altsetting 0 [ 133.899746][ T10] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f3.04 [ 133.899872][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.899901][ T10] usb 1-1: Product: syz [ 133.899916][ T10] usb 1-1: Manufacturer: syz [ 133.899932][ T10] usb 1-1: SerialNumber: syz [ 135.576178][ T10] usbsevseg 1-1:1.170: USB 7 Segment device now attached [ 135.640729][ T10] usb 1-1: USB disconnect, device number 14 [ 135.649522][ T10] usbsevseg 1-1:1.170: USB 7 Segment now disconnected [ 137.163629][ T6320] FAULT_INJECTION: forcing a failure. [ 137.163629][ T6320] name failslab, interval 1, probability 0, space 0, times 0 [ 137.163667][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.0.123 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.163691][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.163703][ T6320] Call Trace: [ 137.163712][ T6320] [ 137.163721][ T6320] dump_stack_lvl+0xe8/0x150 [ 137.163762][ T6320] should_fail_ex+0x46b/0x600 [ 137.163797][ T6320] should_failslab+0xa8/0x100 [ 137.163832][ T6320] __kmalloc_noprof+0xdf/0x7b0 [ 137.163860][ T6320] ? drm_atomic_add_affected_planes+0x357/0x3d0 [ 137.163883][ T6320] ? vkms_crtc_atomic_check+0x3ff/0x760 [ 137.163912][ T6320] vkms_crtc_atomic_check+0x3ff/0x760 [ 137.163947][ T6320] drm_atomic_helper_check_planes+0x57b/0x7f0 [ 137.163993][ T6320] drm_atomic_helper_check+0xa0/0x190 [ 137.164020][ T6320] ? __pfx_vkms_atomic_check+0x10/0x10 [ 137.164054][ T6320] drm_atomic_check_only+0x167b/0x3090 [ 137.164097][ T6320] drm_atomic_commit+0x167/0x2b0 [ 137.164124][ T6320] ? __pfx_drm_atomic_commit+0x10/0x10 [ 137.164146][ T6320] ? drm_atomic_get_crtc_state+0x3fb/0x610 [ 137.164167][ T6320] ? __pfx___drm_printfn_info+0x10/0x10 [ 137.164200][ T6320] ? drm_mode_object_get+0xcf/0x140 [ 137.164230][ T6320] ? drm_atomic_set_fb_for_plane+0x1f5/0x280 [ 137.164261][ T6320] drm_atomic_helper_update_plane+0x248/0x3b0 [ 137.164301][ T6320] drm_mode_cursor_common+0xecc/0x1660 [ 137.164354][ T6320] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 137.164413][ T6320] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.164436][ T6320] ? lockdep_hardirqs_on+0x7a/0x110 [ 137.164459][ T6320] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 137.164486][ T6320] drm_mode_cursor_ioctl+0xd4/0x130 [ 137.164508][ T6320] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 137.164539][ T6320] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 137.164569][ T6320] ? rt_spin_unlock+0x160/0x200 [ 137.164600][ T6320] ? drm_is_current_master+0x1a2/0x210 [ 137.164630][ T6320] drm_ioctl_kernel+0x2e2/0x3b0 [ 137.164656][ T6320] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 137.164679][ T6320] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 137.164710][ T6320] drm_ioctl+0x6c0/0xb80 [ 137.164745][ T6320] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 137.164772][ T6320] ? __pfx_drm_ioctl+0x10/0x10 [ 137.164806][ T6320] ? __fget_files+0x2a/0x420 [ 137.164836][ T6320] ? bpf_lsm_file_ioctl+0x9/0x20 [ 137.164862][ T6320] ? __pfx_drm_ioctl+0x10/0x10 [ 137.164883][ T6320] __se_sys_ioctl+0xff/0x170 [ 137.164913][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.164938][ T6320] do_syscall_64+0x15f/0xf80 [ 137.164960][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.164982][ T6320] ? clear_bhb_loop+0x40/0x90 [ 137.165009][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.165032][ T6320] RIP: 0033:0x7fd56050c819 [ 137.165054][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.165071][ T6320] RSP: 002b:00007fd55e766028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.165095][ T6320] RAX: ffffffffffffffda RBX: 00007fd560785fa0 RCX: 00007fd56050c819 [ 137.165111][ T6320] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 137.165125][ T6320] RBP: 00007fd55e766090 R08: 0000000000000000 R09: 0000000000000000 [ 137.165139][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.165152][ T6320] R13: 00007fd560786038 R14: 00007fd560785fa0 R15: 00007fff8f67f888 [ 137.165187][ T6320] [ 137.696291][ T1243] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 137.833534][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.865871][ T1243] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 137.865937][ T1243] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.865967][ T1243] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.866016][ T1243] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.866041][ T1243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.909875][ T1243] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.919296][ T1243] usb 2-1: invalid MIDI out EP 0 [ 138.049479][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 138.049705][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.049800][ T10] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.049850][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.049877][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.786054][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.789778][ T1243] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 138.810333][ T10] usb 3-1: invalid MIDI out EP 0 [ 138.832348][ T1243] usb 2-1: USB disconnect, device number 10 [ 139.442156][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 139.511630][ T10] usb 3-1: USB disconnect, device number 10 [ 139.852844][ T5958] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 139.963441][ T6352] netlink: 44 bytes leftover after parsing attributes in process `syz.2.133'. [ 139.963462][ T6352] netlink: 43 bytes leftover after parsing attributes in process `syz.2.133'. [ 139.963472][ T6352] netlink: 'syz.2.133': attribute type 6 has an invalid length. [ 139.963480][ T6352] netlink: 'syz.2.133': attribute type 5 has an invalid length. [ 139.963487][ T6352] netlink: 43 bytes leftover after parsing attributes in process `syz.2.133'. [ 140.015500][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 140.045224][ T5958] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 140.045255][ T5958] usb 2-1: config 0 has no interface number 0 [ 140.045300][ T5958] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.045324][ T5958] usb 2-1: config 0 interface 89 has no altsetting 0 [ 140.050465][ T5958] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 140.050498][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.050518][ T5958] usb 2-1: Product: syz [ 140.050532][ T5958] usb 2-1: Manufacturer: syz [ 140.050546][ T5958] usb 2-1: SerialNumber: syz [ 140.067765][ T5958] usb 2-1: config 0 descriptor?? [ 140.154159][ T5958] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 140.154200][ T5958] em28xx 2-1:0.89: Video interface 89 found: [ 140.201447][ T823] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 140.352897][ T823] usb 1-1: Using ep0 maxpacket: 32 [ 140.357208][ T823] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.361035][ T823] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 165, changing to 7 [ 140.398391][ T823] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.398424][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.398444][ T823] usb 1-1: Product: syz [ 140.398468][ T823] usb 1-1: Manufacturer: syz [ 140.398482][ T823] usb 1-1: SerialNumber: syz [ 140.690800][ T5958] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 140.715244][ T823] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 140.719130][ T823] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 140.719160][ T823] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 140.762529][ T5812] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 140.815930][ T6363] loop8: detected capacity change from 0 to 7 [ 140.844261][ T6363] Dev loop8: unable to read RDB block 7 [ 140.844371][ T6363] loop8: unable to read partition table [ 140.844893][ T6363] loop8: partition table beyond EOD, truncated [ 140.845675][ T6363] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 140.901648][ T823] usb 1-1: USB disconnect, device number 15 [ 140.929049][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 140.929085][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.935252][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 140.935284][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.953262][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 140.953294][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.989932][ T5812] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 140.989964][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.990041][ T5812] usb 4-1: Product: syz [ 140.990056][ T5812] usb 4-1: Manufacturer: syz [ 140.990069][ T5812] usb 4-1: SerialNumber: syz [ 141.037294][ T6365] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 141.038569][ T6365] CIFS: VFS: Malformed UNC in devname [ 141.269136][ T5958] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 141.269171][ T5958] em28xx 2-1:0.89: board has no eeprom [ 141.278123][ T5812] usb 4-1: config 0 descriptor?? [ 141.290509][ T5812] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 141.300970][ T5812] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 141.488613][ T6361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 141.519684][ T6361] netlink: 'syz.3.137': attribute type 83 has an invalid length. [ 141.538271][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.538966][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.552325][ T5958] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 141.552353][ T5958] em28xx 2-1:0.89: analog set to bulk mode. [ 141.594137][ T37] em28xx 2-1:0.89: Registering V4L2 extension [ 141.640614][ T5967] usb 4-1: USB disconnect, device number 14 [ 141.687535][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 141.687693][ T37] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 141.688069][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 141.688248][ T37] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 141.688573][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 141.690779][ T37] em28xx 2-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 141.691230][ T37] em28xx 2-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 141.703245][ T37] em28xx 2-1:0.89: Config register raw data: 0xfffffffb [ 141.749645][ T37] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 141.749670][ T37] em28xx 2-1:0.89: No AC97 audio processor [ 141.898633][ T1243] usb 2-1: USB disconnect, device number 11 [ 141.918253][ T1243] em28xx 2-1:0.89: Disconnecting em28xx [ 141.937758][ T37] usb 2-1: Decoder not found [ 141.937780][ T37] em28xx 2-1:0.89: failed to create media graph [ 141.944893][ T37] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 141.987472][ T37] em28xx 2-1:0.89: Registering snapshot button... [ 142.029711][ T37] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input9 [ 142.054103][ T37] em28xx 2-1:0.89: Remote control support is not available for this card. [ 142.056183][ T1243] em28xx 2-1:0.89: Closing input extension [ 142.056208][ T1243] em28xx 2-1:0.89: Deregistering snapshot button [ 142.181467][ T5958] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 142.349168][ T5958] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 142.349228][ T5958] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.349257][ T5958] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.349300][ T5958] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.349324][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.349611][ T1243] em28xx 2-1:0.89: Freeing device [ 142.492276][ T6381] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.143'. [ 142.539505][ T5958] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.549783][ T5958] usb 3-1: invalid MIDI out EP 0 [ 143.050126][ T6393] udevd[6393]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.141976][ T5958] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 143.159010][ T5958] usb 3-1: USB disconnect, device number 11 [ 143.761439][ T1243] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 143.936046][ T1243] usb 4-1: Using ep0 maxpacket: 32 [ 143.941573][ T1243] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 143.941602][ T1243] usb 4-1: config 0 has no interface number 0 [ 143.941646][ T1243] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.941669][ T1243] usb 4-1: config 0 interface 89 has no altsetting 0 [ 143.944190][ T1243] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 143.944221][ T1243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.944240][ T1243] usb 4-1: Product: syz [ 143.944255][ T1243] usb 4-1: Manufacturer: syz [ 143.944269][ T1243] usb 4-1: SerialNumber: syz [ 143.964357][ T1243] usb 4-1: config 0 descriptor?? [ 144.015697][ T1243] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 144.015751][ T1243] em28xx 4-1:0.89: Video interface 89 found: [ 144.293595][ T6420] FAULT_INJECTION: forcing a failure. [ 144.293595][ T6420] name failslab, interval 1, probability 0, space 0, times 0 [ 144.293637][ T6420] CPU: 1 UID: 0 PID: 6420 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 144.293662][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 144.293674][ T6420] Call Trace: [ 144.293684][ T6420] [ 144.293692][ T6420] dump_stack_lvl+0xe8/0x150 [ 144.293730][ T6420] should_fail_ex+0x46b/0x600 [ 144.293767][ T6420] should_failslab+0xa8/0x100 [ 144.293802][ T6420] kmem_cache_alloc_noprof+0x87/0x680 [ 144.293832][ T6420] ? mas_alloc_nodes+0x291/0x350 [ 144.293866][ T6420] mas_alloc_nodes+0x291/0x350 [ 144.293895][ T6420] mas_preallocate+0x2d6/0x640 [ 144.293928][ T6420] ? __pfx_mas_preallocate+0x10/0x10 [ 144.293967][ T6420] ? __mas_set_range+0x12f/0x3c0 [ 144.293993][ T6420] __split_vma+0x33d/0xa30 [ 144.294017][ T6420] ? mas_next_slot+0xc3e/0xd10 [ 144.294047][ T6420] ? __pfx___split_vma+0x10/0x10 [ 144.294077][ T6420] ? mas_find+0xb0e/0xd30 [ 144.294099][ T6420] vms_gather_munmap_vmas+0x4fa/0x1380 [ 144.294136][ T6420] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 144.294174][ T6420] do_vmi_align_munmap+0x2c7/0x4d0 [ 144.294210][ T6420] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 144.294244][ T6420] ? mtree_range_walk+0x6fc/0x8b0 [ 144.294287][ T6420] do_vmi_munmap+0x252/0x2d0 [ 144.294312][ T6420] move_vma+0x11a7/0x1900 [ 144.294350][ T6420] ? arch_get_unmapped_area_topdown+0x264/0xb70 [ 144.294372][ T6420] ? __pfx_move_vma+0x10/0x10 [ 144.294411][ T6420] ? mtree_load+0x12a/0x780 [ 144.294437][ T6420] ? cap_mmap_addr+0xaf/0x100 [ 144.294456][ T6420] ? bpf_lsm_mmap_addr+0x9/0x50 [ 144.294485][ T6420] mremap_to+0x7b7/0x880 [ 144.294510][ T6420] ? mtree_load+0x12a/0x780 [ 144.294526][ T6420] ? __pfx_mremap_to+0x10/0x10 [ 144.294546][ T6420] ? may_expand_vm+0x24d/0x390 [ 144.294576][ T6420] ? check_prep_vma+0x8b9/0xb00 [ 144.294607][ T6420] __se_sys_mremap+0xe6d/0x11d0 [ 144.294650][ T6420] ? __pfx___se_sys_mremap+0x10/0x10 [ 144.294677][ T6420] ? fput+0xa0/0xd0 [ 144.294697][ T6420] ? ksys_write+0x248/0x270 [ 144.294724][ T6420] ? __pfx_ksys_write+0x10/0x10 [ 144.294754][ T6420] ? __x64_sys_mremap+0x20/0xc0 [ 144.294773][ T6420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.294793][ T6420] do_syscall_64+0x15f/0xf80 [ 144.294811][ T6420] ? trace_irq_disable+0x3b/0x140 [ 144.294832][ T6420] ? clear_bhb_loop+0x40/0x90 [ 144.294854][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.294872][ T6420] RIP: 0033:0x7fd56050c819 [ 144.294893][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.294908][ T6420] RSP: 002b:00007fd55e745028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 144.294929][ T6420] RAX: ffffffffffffffda RBX: 00007fd560786090 RCX: 00007fd56050c819 [ 144.294943][ T6420] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 144.294954][ T6420] RBP: 00007fd55e745090 R08: 0000200000000000 R09: 0000000000000000 [ 144.294965][ T6420] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 144.294975][ T6420] R13: 00007fd560786128 R14: 00007fd560786090 R15: 00007fff8f67f888 [ 144.295004][ T6420] [ 144.422224][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.485558][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.923589][ T1243] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 145.141909][ T6432] tmpfs: Bad value for 'mpol' [ 145.434976][ T6436] netlink: 45 bytes leftover after parsing attributes in process `syz.1.156'. [ 145.847110][ T6432] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.885834][ T6432] block device autoloading is deprecated and will be removed. [ 145.989458][ T6441] FAULT_INJECTION: forcing a failure. [ 145.989458][ T6441] name failslab, interval 1, probability 0, space 0, times 0 [ 145.989485][ T6441] CPU: 0 UID: 0 PID: 6441 Comm: syz.0.157 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.989506][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 145.989514][ T6441] Call Trace: [ 145.989519][ T6441] [ 145.989524][ T6441] dump_stack_lvl+0xe8/0x150 [ 145.989544][ T6441] should_fail_ex+0x46b/0x600 [ 145.989564][ T6441] should_failslab+0xa8/0x100 [ 145.989590][ T6441] __kmalloc_cache_noprof+0x84/0x690 [ 145.989608][ T6441] ? drm_atomic_helper_setup_commit+0x1c8/0x1a90 [ 145.989642][ T6441] drm_atomic_helper_setup_commit+0x1c8/0x1a90 [ 145.989689][ T6441] drm_atomic_helper_commit+0x6a/0xb10 [ 145.989727][ T6441] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 145.989756][ T6441] drm_atomic_commit+0x246/0x2b0 [ 145.989783][ T6441] ? __pfx_drm_atomic_commit+0x10/0x10 [ 145.989804][ T6441] ? drm_atomic_get_crtc_state+0x3fb/0x610 [ 145.989823][ T6441] ? __pfx___drm_printfn_info+0x10/0x10 [ 145.989853][ T6441] ? drm_mode_object_get+0xcf/0x140 [ 145.989878][ T6441] ? drm_atomic_set_fb_for_plane+0x1f5/0x280 [ 145.989896][ T6441] drm_atomic_helper_update_plane+0x248/0x3b0 [ 145.989919][ T6441] drm_mode_cursor_common+0xecc/0x1660 [ 145.989949][ T6441] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 145.989981][ T6441] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 145.989994][ T6441] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.990007][ T6441] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 145.990023][ T6441] drm_mode_cursor_ioctl+0xd4/0x130 [ 145.990036][ T6441] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 145.990054][ T6441] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 145.990070][ T6441] ? rt_spin_unlock+0x160/0x200 [ 145.990089][ T6441] ? drm_is_current_master+0x1a2/0x210 [ 145.990106][ T6441] drm_ioctl_kernel+0x2e2/0x3b0 [ 145.990120][ T6441] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 145.990133][ T6441] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 145.990152][ T6441] drm_ioctl+0x6c0/0xb80 [ 145.990166][ T6441] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 145.990182][ T6441] ? __pfx_drm_ioctl+0x10/0x10 [ 145.990221][ T6441] ? __fget_files+0x2a/0x420 [ 145.990239][ T6441] ? bpf_lsm_file_ioctl+0x9/0x20 [ 145.990253][ T6441] ? __pfx_drm_ioctl+0x10/0x10 [ 145.990265][ T6441] __se_sys_ioctl+0xff/0x170 [ 145.990283][ T6441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.990297][ T6441] do_syscall_64+0x15f/0xf80 [ 145.990309][ T6441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.990322][ T6441] ? clear_bhb_loop+0x40/0x90 [ 145.990337][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.990349][ T6441] RIP: 0033:0x7fd56050c819 [ 145.990363][ T6441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.990373][ T6441] RSP: 002b:00007fd55e766028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.990392][ T6441] RAX: ffffffffffffffda RBX: 00007fd560785fa0 RCX: 00007fd56050c819 [ 145.990401][ T6441] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 145.990409][ T6441] RBP: 00007fd55e766090 R08: 0000000000000000 R09: 0000000000000000 [ 145.990417][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.990424][ T6441] R13: 00007fd560786038 R14: 00007fd560785fa0 R15: 00007fff8f67f888 [ 145.990443][ T6441] [ 146.477426][ T1243] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 146.477453][ T1243] em28xx 4-1:0.89: board has no eeprom [ 146.498614][ T6446] FAULT_INJECTION: forcing a failure. [ 146.498614][ T6446] name failslab, interval 1, probability 0, space 0, times 0 [ 146.498652][ T6446] CPU: 0 UID: 0 PID: 6446 Comm: syz.2.159 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 146.498676][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 146.498688][ T6446] Call Trace: [ 146.498704][ T6446] [ 146.498713][ T6446] dump_stack_lvl+0xe8/0x150 [ 146.498748][ T6446] should_fail_ex+0x46b/0x600 [ 146.498779][ T6446] should_failslab+0xa8/0x100 [ 146.498810][ T6446] __kmalloc_noprof+0xdf/0x7b0 [ 146.498828][ T6446] ? kfree+0x4d/0x6c0 [ 146.498842][ T6446] ? kasan_quarantine_put+0xbb/0x1f0 [ 146.498856][ T6446] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 146.498874][ T6446] ? lockdep_hardirqs_on+0x7a/0x110 [ 146.498890][ T6446] tomoyo_realpath_from_path+0xe3/0x5d0 [ 146.498906][ T6446] ? kmem_cache_free+0x187/0x6c0 [ 146.498931][ T6446] tomoyo_mount_permission+0x918/0x9d0 [ 146.498949][ T6446] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 146.498965][ T6446] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 146.499013][ T6446] security_sb_mount+0xe4/0x320 [ 146.499034][ T6446] path_mount+0xbc/0x10e0 [ 146.499048][ T6446] ? user_path_at+0xd4/0x160 [ 146.499067][ T6446] ? user_path_at+0xd4/0x160 [ 146.499084][ T6446] __se_sys_mount+0x31d/0x420 [ 146.499102][ T6446] ? __pfx___se_sys_mount+0x10/0x10 [ 146.499120][ T6446] ? __x64_sys_mount+0x20/0xc0 [ 146.499134][ T6446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.499147][ T6446] do_syscall_64+0x15f/0xf80 [ 146.499161][ T6446] ? clear_bhb_loop+0x40/0x90 [ 146.499176][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.499189][ T6446] RIP: 0033:0x7fd336b5c819 [ 146.499202][ T6446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.499213][ T6446] RSP: 002b:00007fd334db6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.499227][ T6446] RAX: ffffffffffffffda RBX: 00007fd336dd5fa0 RCX: 00007fd336b5c819 [ 146.499236][ T6446] RDX: 0000200000000000 RSI: 0000200000004a00 RDI: 0000200000000100 [ 146.499244][ T6446] RBP: 00007fd334db6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.499252][ T6446] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000002 [ 146.499259][ T6446] R13: 00007fd336dd6038 R14: 00007fd336dd5fa0 R15: 00007ffd04d20cc8 [ 146.499278][ T6446] [ 146.499284][ T6446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.511567][ T5812] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 146.533290][ T1243] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 146.533320][ T1243] em28xx 4-1:0.89: analog set to bulk mode. [ 146.547053][ T823] em28xx 4-1:0.89: Registering V4L2 extension [ 146.816810][ T5827] usb 4-1: USB disconnect, device number 15 [ 146.842446][ T5812] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 146.842481][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.842503][ T5812] usb 2-1: Product: syz [ 146.842518][ T5812] usb 2-1: Manufacturer: syz [ 146.842534][ T5812] usb 2-1: SerialNumber: syz [ 146.871381][ T5827] em28xx 4-1:0.89: Disconnecting em28xx [ 146.914319][ T823] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 146.914347][ T823] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 146.914361][ T823] em28xx 4-1:0.89: No AC97 audio processor [ 147.203071][ T823] usb 4-1: Decoder not found [ 147.203096][ T823] em28xx 4-1:0.89: failed to create media graph [ 147.203128][ T823] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 147.220449][ T823] em28xx 4-1:0.89: Registering snapshot button... [ 147.257810][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 147.257872][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 147.257895][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 147.326795][ T5812] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 147.377101][ T5812] usb 2-1: USB disconnect, device number 12 [ 147.394112][ T823] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input10 [ 147.466937][ T823] em28xx 4-1:0.89: Remote control support is not available for this card. [ 147.466999][ T5827] em28xx 4-1:0.89: Closing input extension [ 147.467022][ T5827] em28xx 4-1:0.89: Deregistering snapshot button [ 147.783034][ T5827] em28xx 4-1:0.89: Freeing device [ 148.070250][ T6467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'. [ 148.092001][ T5827] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 148.241568][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 148.244999][ T5827] usb 4-1: config 7 has an invalid interface number: 184 but max is 0 [ 148.245031][ T5827] usb 4-1: config 7 has no interface number 0 [ 148.245060][ T5827] usb 4-1: config 7 interface 184 has no altsetting 0 [ 148.249216][ T5827] usb 4-1: New USB device found, idVendor=12d1, idProduct=2f7b, bcdDevice=de.da [ 148.249257][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.249270][ T5827] usb 4-1: Product: syz [ 148.249280][ T5827] usb 4-1: Manufacturer: syz [ 148.249289][ T5827] usb 4-1: SerialNumber: syz [ 148.525703][ T5827] huawei_cdc_ncm 4-1:7.184: CDC Union missing and no IAD found [ 148.525762][ T5827] huawei_cdc_ncm 4-1:7.184: bind() failure [ 148.566314][ T5827] usb 4-1: USB disconnect, device number 16 [ 149.341891][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 149.495246][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 149.495307][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.495336][ T10] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.495380][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.495406][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.621628][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.622752][ T10] usb 2-1: invalid MIDI out EP 0 [ 150.236713][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 150.248170][ T10] usb 2-1: USB disconnect, device number 13 [ 150.851671][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 151.004526][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.004554][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 151.004604][ T10] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 151.004619][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.009615][ T10] usb 1-1: config 0 descriptor?? [ 151.081688][ T823] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 151.191519][ T5827] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 151.231460][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 151.235312][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 151.236566][ T823] usb 2-1: config 9 has an invalid interface number: 40 but max is 0 [ 151.236600][ T823] usb 2-1: config 9 has no interface number 0 [ 151.236683][ T823] usb 2-1: config 9 interface 40 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 151.236703][ T823] usb 2-1: config 9 interface 40 has no altsetting 0 [ 151.249967][ T823] usb 2-1: New USB device found, idVendor=05da, idProduct=00a0, bcdDevice=f1.38 [ 151.250100][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.250120][ T823] usb 2-1: Product: ÑŒ [ 151.250150][ T823] usb 2-1: SerialNumber: Ñ… [ 151.351602][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 151.356009][ T5827] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 151.356029][ T5827] usb 4-1: config 0 has no interface number 0 [ 151.356061][ T5827] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.356076][ T5827] usb 4-1: config 0 interface 89 has no altsetting 0 [ 151.408109][ T5827] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 151.408182][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.408195][ T5827] usb 4-1: Product: syz [ 151.408204][ T5827] usb 4-1: Manufacturer: syz [ 151.408213][ T5827] usb 4-1: SerialNumber: syz [ 151.445589][ T5827] usb 4-1: config 0 descriptor?? [ 151.479356][ T5827] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 151.479387][ T5827] em28xx 4-1:0.89: Video interface 89 found: [ 151.566045][ T823] usb 2-1: can only deal with bulk endpoints; endpoint 9 is not bulk. [ 151.566072][ T823] usb 2-1: can only deal with bulk endpoints; endpoint 14 is not bulk. [ 151.566090][ T823] usb 2-1: can only deal with bulk endpoints; endpoint 10 is not bulk. [ 151.566105][ T823] usb 2-1: couldn't find two input bulk endpoints. Bailing out. [ 151.657492][ T823] usb 2-1: USB disconnect, device number 14 [ 151.729023][ T10] Bluetooth: Can't get version to change to load ram patch err [ 151.729044][ T10] Bluetooth: Loading sysconfig file failed [ 151.729089][ T10] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 151.795112][ T10] usb 1-1: USB disconnect, device number 16 [ 152.053608][ T6528] netlink: 'syz.2.189': attribute type 21 has an invalid length. [ 152.053705][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 152.084445][ T5827] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 152.087000][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.113524][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.363635][ T6531] kvm: kvm [6527]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000 [ 152.501470][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 152.523449][ T6521] netlink: 'syz.3.186': attribute type 27 has an invalid length. [ 152.673018][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 152.673152][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.673172][ T10] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.673200][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.673214][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.775055][ T823] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 152.777261][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.784561][ T10] usb 2-1: invalid MIDI out EP 0 [ 152.830475][ T5827] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 152.830504][ T5827] em28xx 4-1:0.89: board has no eeprom [ 152.959830][ T823] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.962090][ T823] usb 1-1: not running at top speed; connect to a high speed hub [ 152.994432][ T823] usb 1-1: config 61 has an invalid interface number: 37 but max is 0 [ 152.994463][ T823] usb 1-1: config 61 has no interface number 0 [ 152.994484][ T823] usb 1-1: config 61 interface 37 has no altsetting 0 [ 153.026772][ T823] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 153.026845][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.026859][ T823] usb 1-1: Product: syz [ 153.026868][ T823] usb 1-1: Manufacturer: syz [ 153.026876][ T823] usb 1-1: SerialNumber: syz [ 153.121986][ T5827] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 153.122007][ T5827] em28xx 4-1:0.89: analog set to bulk mode. [ 153.147872][ T9] em28xx 4-1:0.89: Registering V4L2 extension [ 153.227363][ T9] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 153.229743][ T9] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 153.235153][ T9] em28xx 4-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 153.266651][ T5827] usb 4-1: USB disconnect, device number 17 [ 153.276151][ T9] em28xx 4-1:0.89: reading from i2c device at 0x40 failed (error=-19) [ 153.276302][ T9] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 153.276442][ T9] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 153.276455][ T9] em28xx 4-1:0.89: No AC97 audio processor [ 153.344551][ T5827] em28xx 4-1:0.89: Disconnecting em28xx [ 153.440331][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.454122][ T9] usb 4-1: Decoder not found [ 153.454543][ T9] em28xx 4-1:0.89: failed to create media graph [ 153.454585][ T9] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 153.498509][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.499533][ T6533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 153.596560][ T9] em28xx 4-1:0.89: Registering snapshot button... [ 153.725975][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input11 [ 153.900746][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.915804][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.975814][ T9] em28xx 4-1:0.89: Remote control support is not available for this card. [ 153.975881][ T5827] em28xx 4-1:0.89: Closing input extension [ 153.975903][ T5827] em28xx 4-1:0.89: Deregistering snapshot button [ 154.023831][ T823] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 154.189963][ T6545] warning: `syz.1.196' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.464918][ T823] gp8psk: usb in 128 operation failed. [ 154.473552][ T823] gp8psk: usb in 137 operation failed. [ 154.473577][ T823] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 154.473645][ T823] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 154.510355][ T823] usb 1-1: USB disconnect, device number 17 [ 154.732057][ T6555] FAULT_INJECTION: forcing a failure. [ 154.732057][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 154.732099][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.732124][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.732142][ T6555] Call Trace: [ 154.732151][ T6555] [ 154.732151][ T6555] [ 154.732161][ T6555] dump_stack_lvl+0xe8/0x150 [ 154.732192][ T6555] should_fail_ex+0x46b/0x600 [ 154.732229][ T6555] should_failslab+0xa8/0x100 [ 154.732274][ T6555] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 154.732306][ T6555] ? ktime_get+0x45/0x220 [ 154.732329][ T6555] ? __get_vm_area_node+0x171/0x350 [ 154.732364][ T6555] __get_vm_area_node+0x171/0x350 [ 154.732395][ T6555] __vmalloc_node_range_noprof+0x36a/0x1750 [ 154.732427][ T6555] ? system_heap_vmap+0x1b5/0x570 [ 154.732496][ T6555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.732535][ T6555] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.732558][ T6555] ? system_heap_vmap+0x1b5/0x570 [ 154.732589][ T6555] vmalloc_noprof+0xb2/0xe0 [ 154.732620][ T6555] ? system_heap_vmap+0x1b5/0x570 [ 154.732652][ T6555] system_heap_vmap+0x1b5/0x570 [ 154.732682][ T6555] ? dma_resv_iter_first_unlocked+0x26/0x540 [ 154.732715][ T6555] ? __pfx_system_heap_vmap+0x10/0x10 [ 154.732760][ T6555] ? __pfx_system_heap_vmap+0x10/0x10 [ 154.732791][ T6555] dma_buf_vmap+0x244/0x3c0 [ 154.732824][ T6555] ? __pfx_dma_buf_vmap+0x10/0x10 [ 154.732865][ T6555] drm_gem_shmem_vmap_locked+0x14c/0x800 [ 154.732894][ T6555] ? drm_gem_vmap+0x4c/0x1d0 [ 154.732930][ T6555] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 154.732968][ T6555] drm_gem_vmap+0x10a/0x1d0 [ 154.733006][ T6555] drm_gem_fb_vmap+0xaa/0x8d0 [ 154.733049][ T6555] drm_atomic_helper_prepare_planes+0x2d9/0xb60 [ 154.733096][ T6555] drm_atomic_helper_commit+0x19d/0xb10 [ 154.733136][ T6555] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 154.733166][ T6555] drm_atomic_commit+0x246/0x2b0 [ 154.733194][ T6555] ? __pfx_drm_atomic_commit+0x10/0x10 [ 154.733215][ T6555] ? drm_atomic_get_crtc_state+0x3fb/0x610 [ 154.733236][ T6555] ? __pfx___drm_printfn_info+0x10/0x10 [ 154.733274][ T6555] ? drm_mode_object_get+0xcf/0x140 [ 154.733306][ T6555] ? drm_atomic_set_fb_for_plane+0x1f5/0x280 [ 154.733337][ T6555] drm_atomic_helper_update_plane+0x248/0x3b0 [ 154.733378][ T6555] drm_mode_cursor_common+0xecc/0x1660 [ 154.733435][ T6555] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 154.733497][ T6555] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 154.733520][ T6555] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.733542][ T6555] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 154.733573][ T6555] drm_mode_cursor_ioctl+0xd4/0x130 [ 154.733597][ T6555] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 154.733630][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.733661][ T6555] ? rt_spin_unlock+0x160/0x200 [ 154.733695][ T6555] ? drm_is_current_master+0x1a2/0x210 [ 154.733726][ T6555] drm_ioctl_kernel+0x2e2/0x3b0 [ 154.733754][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.733778][ T6555] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 154.733813][ T6555] drm_ioctl+0x6c0/0xb80 [ 154.733841][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.733871][ T6555] ? __pfx_drm_ioctl+0x10/0x10 [ 154.733909][ T6555] ? __fget_files+0x2a/0x420 [ 154.733941][ T6555] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.733967][ T6555] ? __pfx_drm_ioctl+0x10/0x10 [ 154.733989][ T6555] __se_sys_ioctl+0xff/0x170 [ 154.734023][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.734048][ T6555] do_syscall_64+0x15f/0xf80 [ 154.734070][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.734093][ T6555] ? clear_bhb_loop+0x40/0x90 [ 154.734122][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.734144][ T6555] RIP: 0033:0x7f42236ec819 [ 154.734166][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.734184][ T6555] RSP: 002b:00007f4221946028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.734210][ T6555] RAX: ffffffffffffffda RBX: 00007f4223965fa0 RCX: 00007f42236ec819 [ 154.734226][ T6555] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 154.734241][ T6555] RBP: 00007f4221946090 R08: 0000000000000000 R09: 0000000000000000 [ 154.734255][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.734275][ T6555] R13: 00007f4223966038 R14: 00007f4223965fa0 R15: 00007ffdec6691e8 [ 154.734312][ T6555] [ 154.734742][ T6555] syz.1.199: vmalloc error: size 264, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 154.735074][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.735098][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.735110][ T6555] Call Trace: [ 154.735119][ T6555] [ 154.735128][ T6555] dump_stack_lvl+0xe8/0x150 [ 154.735156][ T6555] warn_alloc+0x263/0x3e0 [ 154.735200][ T6555] ? __pfx_warn_alloc+0x10/0x10 [ 154.735232][ T6555] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 154.735277][ T6555] ? __get_vm_area_node+0x171/0x350 [ 154.735311][ T6555] ? __get_vm_area_node+0x2e1/0x350 [ 154.735348][ T6555] __vmalloc_node_range_noprof+0x38f/0x1750 [ 154.735417][ T6555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.735457][ T6555] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.735480][ T6555] ? system_heap_vmap+0x1b5/0x570 [ 154.735512][ T6555] vmalloc_noprof+0xb2/0xe0 [ 154.735541][ T6555] ? system_heap_vmap+0x1b5/0x570 [ 154.735574][ T6555] system_heap_vmap+0x1b5/0x570 [ 154.735610][ T6555] ? dma_resv_iter_first_unlocked+0x26/0x540 [ 154.735644][ T6555] ? __pfx_system_heap_vmap+0x10/0x10 [ 154.735687][ T6555] ? __pfx_system_heap_vmap+0x10/0x10 [ 154.735719][ T6555] dma_buf_vmap+0x244/0x3c0 [ 154.735751][ T6555] ? __pfx_dma_buf_vmap+0x10/0x10 [ 154.735793][ T6555] drm_gem_shmem_vmap_locked+0x14c/0x800 [ 154.735820][ T6555] ? drm_gem_vmap+0x4c/0x1d0 [ 154.735856][ T6555] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 154.735894][ T6555] drm_gem_vmap+0x10a/0x1d0 [ 154.735931][ T6555] drm_gem_fb_vmap+0xaa/0x8d0 [ 154.735974][ T6555] drm_atomic_helper_prepare_planes+0x2d9/0xb60 [ 154.736021][ T6555] drm_atomic_helper_commit+0x19d/0xb10 [ 154.736062][ T6555] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 154.736094][ T6555] drm_atomic_commit+0x246/0x2b0 [ 154.736124][ T6555] ? __pfx_drm_atomic_commit+0x10/0x10 [ 154.736145][ T6555] ? drm_atomic_get_crtc_state+0x3fb/0x610 [ 154.736166][ T6555] ? __pfx___drm_printfn_info+0x10/0x10 [ 154.736199][ T6555] ? drm_mode_object_get+0xcf/0x140 [ 154.736230][ T6555] ? drm_atomic_set_fb_for_plane+0x1f5/0x280 [ 154.736261][ T6555] drm_atomic_helper_update_plane+0x248/0x3b0 [ 154.736311][ T6555] drm_mode_cursor_common+0xecc/0x1660 [ 154.736368][ T6555] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 154.736431][ T6555] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 154.736455][ T6555] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.736478][ T6555] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 154.736509][ T6555] drm_mode_cursor_ioctl+0xd4/0x130 [ 154.736532][ T6555] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 154.736564][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.736595][ T6555] ? rt_spin_unlock+0x160/0x200 [ 154.736629][ T6555] ? drm_is_current_master+0x1a2/0x210 [ 154.736660][ T6555] drm_ioctl_kernel+0x2e2/0x3b0 [ 154.736687][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.736710][ T6555] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 154.736745][ T6555] drm_ioctl+0x6c0/0xb80 [ 154.736774][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.736803][ T6555] ? __pfx_drm_ioctl+0x10/0x10 [ 154.736842][ T6555] ? __fget_files+0x2a/0x420 [ 154.736874][ T6555] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.736900][ T6555] ? __pfx_drm_ioctl+0x10/0x10 [ 154.736922][ T6555] __se_sys_ioctl+0xff/0x170 [ 154.736955][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.736980][ T6555] do_syscall_64+0x15f/0xf80 [ 154.737001][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.737025][ T6555] ? clear_bhb_loop+0x40/0x90 [ 154.737054][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.737077][ T6555] RIP: 0033:0x7f42236ec819 [ 154.737097][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.737115][ T6555] RSP: 002b:00007f4221946028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.737137][ T6555] RAX: ffffffffffffffda RBX: 00007f4223965fa0 RCX: 00007f42236ec819 [ 154.737153][ T6555] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 154.737167][ T6555] RBP: 00007f4221946090 R08: 0000000000000000 R09: 0000000000000000 [ 154.737181][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.737194][ T6555] R13: 00007f4223966038 R14: 00007f4223965fa0 R15: 00007ffdec6691e8 [ 154.737231][ T6555] [ 154.737434][ T6555] Mem-Info: [ 154.737444][ T6555] active_anon:8147 inactive_anon:0 isolated_anon:0 [ 154.737444][ T6555] active_file:8926 inactive_file:39977 isolated_file:0 [ 154.737444][ T6555] unevictable:768 dirty:1055 writeback:0 [ 154.737444][ T6555] slab_reclaimable:11500 slab_unreclaimable:95501 [ 154.737444][ T6555] mapped:25887 shmem:1362 pagetables:1250 [ 154.737444][ T6555] sec_pagetables:0 bounce:0 [ 154.737444][ T6555] kernel_misc_reclaimable:0 [ 154.737444][ T6555] free:1336846 free_pcp:2758 free_cma:0 [ 154.737493][ T6555] Node 0 active_anon:32588kB inactive_anon:0kB active_file:35704kB inactive_file:159716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103548kB dirty:4220kB writeback:0kB shmem:3912kB kernel_stack:12740kB pagetables:4812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 154.737541][ T6555] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 154.737583][ T6555] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.737636][ T6555] lowmem_reserve[]: 0 2492 2492 2492 2492 [ 154.737667][ T6555] Node 0 DMA32 free:1390752kB boost:0kB min:3912kB low:6432kB high:8952kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32588kB inactive_anon:0kB active_file:35704kB inactive_file:159716kB unevictable:1536kB writepending:4220kB zspages:0kB present:3129332kB managed:2551880kB mlocked:0kB bounce:0kB free_pcp:11024kB local_pcp:6992kB free_cma:0kB [ 154.737723][ T6555] lowmem_reserve[]: 0 0 0 0 0 [ 154.737751][ T6555] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 154.737802][ T6555] lowmem_reserve[]: 0 0 0 0 0 [ 154.737830][ T6555] Node 1 Normal free:3941272kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.737882][ T6555] lowmem_reserve[]: 0 0 0 0 0 [ 154.737911][ T6555] Node 0 DMA: [ 154.746466][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 154.776497][ T6555] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.776618][ T6555] Node 0 DMA32: 322*4kB (UM) 1097*8kB (UM) 615*16kB (UME) 208*32kB (UME) 62*64kB (UME) 24*128kB (UM) 25*256kB (UME) 4*512kB (UME) 3*1024kB (UE) 1*2048kB (M) 328*4096kB (UM) = 1390656kB [ 154.776774][ T6555] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 154.776873][ T6555] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 8*16kB (UM) 9*32kB (UM) 5*64kB (UM) 7*128kB (UM) 1*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3941272kB [ 154.777125][ T6555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.777142][ T6555] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.777158][ T6555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.777173][ T6555] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.777188][ T6555] 50261 total pagecache pages [ 154.777195][ T6555] 0 pages in swap cache [ 154.777202][ T6555] Free swap = 124996kB [ 154.777209][ T6555] Total swap = 124996kB [ 154.777217][ T6555] 2097051 pages RAM [ 154.777224][ T6555] 0 pages HighMem/MovableOnly [ 154.777231][ T6555] 427300 pages reserved [ 154.777237][ T6555] 0 pages cma reserved [ 154.779376][ T6555] ------------[ cut here ]------------ [ 154.779387][ T6555] ret [ 154.779392][ T6555] WARNING: drivers/dma-buf/dma-buf.c:1649 at dma_buf_vmap+0x30f/0x3c0, CPU#0: syz.1.199/6555 [ 154.779434][ T6555] Modules linked in: [ 154.779452][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.779473][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.779484][ T6555] RIP: 0010:dma_buf_vmap+0x30f/0x3c0 [ 154.779509][ T6555] Code: 95 05 cc e8 03 c9 14 fc 90 0f 0b 90 b8 ea ff ff ff eb b4 e8 f3 c8 14 fc 90 0f 0b 90 e9 11 fe ff ff e8 e5 c8 14 fc 44 89 f0 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df eb 8e e8 2d 63 91 05 48 c7 [ 154.779533][ T6555] RSP: 0018:ffffc900015cf3a0 EFLAGS: 00010293 [ 154.779549][ T6555] RAX: 00000000fffffff4 RBX: 1ffff920002b9e78 RCX: ffff888030a18000 [ 154.779564][ T6555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.779575][ T6555] RBP: ffffc900015cf450 R08: 0000000000000000 R09: 0000000000000000 [ 154.779593][ T6555] R10: dffffc0000000000 R11: fffffbfff1f9e8ff R12: 1ffff110071b4505 [ 154.779608][ T6555] R13: ffffffff85b1b400 R14: 00000000fffffff4 R15: ffff888038da2830 [ 154.779622][ T6555] FS: 00007f42219466c0(0000) GS:ffff888125a62000(0000) knlGS:0000000000000000 [ 154.779639][ T6555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.779653][ T6555] CR2: 00007fd336b45980 CR3: 0000000036392000 CR4: 00000000003526f0 [ 154.779672][ T6555] Call Trace: [ 154.779682][ T6555] [ 154.779695][ T6555] ? __pfx_dma_buf_vmap+0x10/0x10 [ 154.779731][ T6555] drm_gem_shmem_vmap_locked+0x14c/0x800 [ 154.779757][ T6555] ? drm_gem_vmap+0x4c/0x1d0 [ 154.779786][ T6555] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 154.779818][ T6555] drm_gem_vmap+0x10a/0x1d0 [ 154.779850][ T6555] drm_gem_fb_vmap+0xaa/0x8d0 [ 154.779886][ T6555] drm_atomic_helper_prepare_planes+0x2d9/0xb60 [ 154.779926][ T6555] drm_atomic_helper_commit+0x19d/0xb10 [ 154.779960][ T6555] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 154.779987][ T6555] drm_atomic_commit+0x246/0x2b0 [ 154.780012][ T6555] ? __pfx_drm_atomic_commit+0x10/0x10 [ 154.780031][ T6555] ? drm_atomic_get_crtc_state+0x3fb/0x610 [ 154.780049][ T6555] ? __pfx___drm_printfn_info+0x10/0x10 [ 154.780077][ T6555] ? drm_mode_object_get+0xcf/0x140 [ 154.780103][ T6555] ? drm_atomic_set_fb_for_plane+0x1f5/0x280 [ 154.780130][ T6555] drm_atomic_helper_update_plane+0x248/0x3b0 [ 154.780165][ T6555] drm_mode_cursor_common+0xecc/0x1660 [ 154.780213][ T6555] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 154.780265][ T6555] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 154.780287][ T6555] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.780307][ T6555] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 154.780333][ T6555] drm_mode_cursor_ioctl+0xd4/0x130 [ 154.780354][ T6555] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 154.780381][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.780407][ T6555] ? rt_spin_unlock+0x160/0x200 [ 154.780435][ T6555] ? drm_is_current_master+0x1a2/0x210 [ 154.780462][ T6555] drm_ioctl_kernel+0x2e2/0x3b0 [ 154.780486][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.780507][ T6555] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 154.780544][ T6555] drm_ioctl+0x6c0/0xb80 [ 154.780568][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.780594][ T6555] ? __pfx_drm_ioctl+0x10/0x10 [ 154.780626][ T6555] ? __fget_files+0x2a/0x420 [ 154.780653][ T6555] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.780675][ T6555] ? __pfx_drm_ioctl+0x10/0x10 [ 154.780694][ T6555] __se_sys_ioctl+0xff/0x170 [ 154.780723][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.780746][ T6555] do_syscall_64+0x15f/0xf80 [ 154.780767][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.780788][ T6555] ? clear_bhb_loop+0x40/0x90 [ 154.780812][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.780831][ T6555] RIP: 0033:0x7f42236ec819 [ 154.780850][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.780865][ T6555] RSP: 002b:00007f4221946028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.780885][ T6555] RAX: ffffffffffffffda RBX: 00007f4223965fa0 RCX: 00007f42236ec819 [ 154.780898][ T6555] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 154.780911][ T6555] RBP: 00007f4221946090 R08: 0000000000000000 R09: 0000000000000000 [ 154.780923][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.780935][ T6555] R13: 00007f4223966038 R14: 00007f4223965fa0 R15: 00007ffdec6691e8 [ 154.780967][ T6555] [ 154.780977][ T6555] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.780991][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.781012][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.781023][ T6555] Call Trace: [ 154.781031][ T6555] [ 154.781039][ T6555] vpanic+0x56c/0xa60 [ 154.781062][ T6555] ? __pfx__printk+0x10/0x10 [ 154.781089][ T6555] ? __pfx_vpanic+0x10/0x10 [ 154.781110][ T6555] ? is_bpf_text_address+0x292/0x2b0 [ 154.781136][ T6555] ? is_bpf_text_address+0x26/0x2b0 [ 154.781169][ T6555] panic+0xc5/0xd0 [ 154.781192][ T6555] ? __pfx_panic+0x10/0x10 [ 154.781236][ T6555] __warn+0x315/0x4c0 [ 154.781259][ T6555] ? dma_buf_vmap+0x30f/0x3c0 [ 154.781287][ T6555] ? dma_buf_vmap+0x30f/0x3c0 [ 154.781312][ T6555] __report_bug+0x29a/0x540 [ 154.781338][ T6555] ? dma_buf_vmap+0x30f/0x3c0 [ 154.781362][ T6555] ? __pfx___report_bug+0x10/0x10 [ 154.781381][ T6555] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.781401][ T6555] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 154.781421][ T6555] ? rt_mutex_slowunlock+0x1cb/0x300 [ 154.781448][ T6555] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 154.781483][ T6555] ? dma_buf_vmap+0x30f/0x3c0 [ 154.781507][ T6555] report_bug+0x16a/0x220 [ 154.781535][ T6555] ? dma_buf_vmap+0x30f/0x3c0 [ 154.781557][ T6555] ? dma_buf_vmap+0x311/0x3c0 [ 154.781580][ T6555] handle_bug+0x9c/0x200 [ 154.781604][ T6555] exc_invalid_op+0x1a/0x50 [ 154.781627][ T6555] asm_exc_invalid_op+0x1a/0x20 [ 154.781646][ T6555] RIP: 0010:dma_buf_vmap+0x30f/0x3c0 [ 154.781671][ T6555] Code: 95 05 cc e8 03 c9 14 fc 90 0f 0b 90 b8 ea ff ff ff eb b4 e8 f3 c8 14 fc 90 0f 0b 90 e9 11 fe ff ff e8 e5 c8 14 fc 44 89 f0 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df eb 8e e8 2d 63 91 05 48 c7 [ 154.781687][ T6555] RSP: 0018:ffffc900015cf3a0 EFLAGS: 00010293 [ 154.781703][ T6555] RAX: 00000000fffffff4 RBX: 1ffff920002b9e78 RCX: ffff888030a18000 [ 154.781717][ T6555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.781729][ T6555] RBP: ffffc900015cf450 R08: 0000000000000000 R09: 0000000000000000 [ 154.781742][ T6555] R10: dffffc0000000000 R11: fffffbfff1f9e8ff R12: 1ffff110071b4505 [ 154.781756][ T6555] R13: ffffffff85b1b400 R14: 00000000fffffff4 R15: ffff888038da2830 [ 154.781772][ T6555] ? __pfx_system_heap_vmap+0x10/0x10 [ 154.781815][ T6555] ? __pfx_dma_buf_vmap+0x10/0x10 [ 154.781850][ T6555] drm_gem_shmem_vmap_locked+0x14c/0x800 [ 154.781874][ T6555] ? drm_gem_vmap+0x4c/0x1d0 [ 154.781905][ T6555] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 154.781939][ T6555] drm_gem_vmap+0x10a/0x1d0 [ 154.781975][ T6555] drm_gem_fb_vmap+0xaa/0x8d0 [ 154.782016][ T6555] drm_atomic_helper_prepare_planes+0x2d9/0xb60 [ 154.782060][ T6555] drm_atomic_helper_commit+0x19d/0xb10 [ 154.782097][ T6555] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 154.782130][ T6555] drm_atomic_commit+0x246/0x2b0 [ 154.782175][ T6555] ? __pfx_drm_atomic_commit+0x10/0x10 [ 154.782196][ T6555] ? drm_atomic_get_crtc_state+0x3fb/0x610 [ 154.782215][ T6555] ? __pfx___drm_printfn_info+0x10/0x10 [ 154.782248][ T6555] ? drm_mode_object_get+0xcf/0x140 [ 154.782526][ T6555] ? drm_atomic_set_fb_for_plane+0x1f5/0x280 [ 154.782579][ T6555] drm_atomic_helper_update_plane+0x248/0x3b0 [ 154.782621][ T6555] drm_mode_cursor_common+0xecc/0x1660 [ 154.782676][ T6555] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 154.782737][ T6555] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 154.782762][ T6555] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.782785][ T6555] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 154.782829][ T6555] drm_mode_cursor_ioctl+0xd4/0x130 [ 154.782856][ T6555] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 154.782888][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.782917][ T6555] ? rt_spin_unlock+0x160/0x200 [ 154.783151][ T6555] ? drm_is_current_master+0x1a2/0x210 [ 154.783184][ T6555] drm_ioctl_kernel+0x2e2/0x3b0 [ 154.783211][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.783236][ T6555] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 154.783267][ T6555] drm_ioctl+0x6c0/0xb80 [ 154.783293][ T6555] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 154.783321][ T6555] ? __pfx_drm_ioctl+0x10/0x10 [ 154.783453][ T6555] ? __fget_files+0x2a/0x420 [ 154.783487][ T6555] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.783510][ T6555] ? __pfx_drm_ioctl+0x10/0x10 [ 154.783532][ T6555] __se_sys_ioctl+0xff/0x170 [ 154.783564][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.783586][ T6555] do_syscall_64+0x15f/0xf80 [ 154.783605][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.783629][ T6555] ? clear_bhb_loop+0x40/0x90 [ 154.783657][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.783680][ T6555] RIP: 0033:0x7f42236ec819 [ 154.783703][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.783722][ T6555] RSP: 002b:00007f4221946028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.783747][ T6555] RAX: ffffffffffffffda RBX: 00007f4223965fa0 RCX: 00007f42236ec819 [ 154.783764][ T6555] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 154.783778][ T6555] RBP: 00007f4221946090 R08: 0000000000000000 R09: 0000000000000000 [ 154.783792][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.783806][ T6555] R13: 00007f4223966038 R14: 00007f4223965fa0 R15: 00007ffdec6691e8 [ 154.783841][ T6555] [ 154.784567][ T6555] Kernel Offset: disabled