last executing test programs: 8.567345817s ago: executing program 1 (id=1150): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65) sigaltstack(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, r4, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) write$dsp(r5, &(0x7f0000000400)="c4322f5c57ef1e8c2d500b7efabd1af0b06ee646f0d7c11ea4a8f86ecc05d60b7021cc9a2bf2b1fbb537f242c642619e1fdea2c7dd2e019267f3eec05db7b7805888178436eccf92c044357bd1e45b9a6f1d42b23f2549ef8211fdf9ead0e6c005fb76f054bce224fa814166ca756011e32bd2af7e2855846f25732d8f2ebd9a18ba8e7d42d9cc5763783b6d24d5ac3e3383b7900acc595fd81d14d0dd1f495cc5cc837aef304791b5b9651b7e0b38", 0xaf) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x8, 0x0, 0x3}, 0x0) r6 = add_key$user(0x0, 0x0, &(0x7f00000000c0)="ff", 0x1, 0x0) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r6}) keyctl$KEYCTL_MOVE(0x1e, r6, r7, r7, 0x0) add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x22, &(0x7f00000000c0)=0x7a, 0x4) 7.570340982s ago: executing program 1 (id=1155): unshare(0x20000000) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad88864"], 0xffdd) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[], 0xffdd) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xe}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0x200e, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x9, r7, 0x1, 0x40, 0x6, @remote}, 0x14) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x8, 0x1, 0x2}, 0x18, 0x1) landlock_restrict_self(r8, 0x2) recvmmsg(r2, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x45833af92e4b39ff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r10, 0xc02c5625, &(0x7f0000000040)={0x990001, 0x10001, @value=0x6}) getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x8, 0x6, 0x1, 0x40, 0x7]}, &(0x7f0000000200)=0x54) 6.821252019s ago: executing program 0 (id=1159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000000000000000000cd0af228b913378cfcd000000000000000c277", @ANYRES32=0x0, @ANYBLOB="03000000000a0000"], 0x20}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000002900)=[0x0]) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r5 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f00000000c0)) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012400000800008000b400000cd200500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 5.11514677s ago: executing program 4 (id=1161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.646624523s ago: executing program 2 (id=1162): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) r1 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x88000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x800}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close_range(r0, r1, 0x0) splice(r0, &(0x7f0000000300)=0xf3, 0xffffffffffffffff, &(0x7f0000000340)=0x6, 0x857, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xcd, 0xf9, 0xf8, 0x8, 0xbc3, 0x1, 0x1185, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdb, 0xd2, 0x96, 0x0, [], [{{0x9, 0x5, 0x7, 0x3}}]}}]}}]}}, 0x0) r2 = syz_io_uring_setup(0xf6a, &(0x7f0000000100)={0x0, 0x2c1c, 0x0, 0x0, 0x8c}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/37, 0x25}], &(0x7f0000000280)=[0x3ff, 0x2]}, 0x20) 4.645788186s ago: executing program 4 (id=1163): read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x8000, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e22, @remote}}}, 0x104) r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x6, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f00000002c0)={0x980000, 0xad, 0xff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa10001, 0x849f, '\x00', @value64=0x5}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05f50000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_clone(0x104201000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) 4.615266765s ago: executing program 0 (id=1164): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65) sigaltstack(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x10d40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, r4, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) write$dsp(r5, &(0x7f0000000400)="c4322f5c57ef1e8c2d500b7efabd1af0b06ee646f0d7c11ea4a8f86ecc05d60b7021cc9a2bf2b1fbb537f242c642619e1fdea2c7dd2e019267f3eec05db7b7805888178436eccf92c044357bd1e45b9a6f1d42b23f2549ef8211fdf9ead0e6c005fb76f054bce224fa814166ca756011e32bd2af7e2855846f25732d8f2ebd9a18ba8e7d42d9cc5763783b6d24d5ac3e3383b7900acc595fd81d14d0dd1f495cc5cc837aef304791b5b9651b7e0b382fac93", 0xb2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x100000000000008, 0x0, 0x40000003}, 0x0) r6 = add_key$user(0x0, 0x0, &(0x7f00000000c0)="ff", 0x1, 0x0) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r6}) keyctl$KEYCTL_MOVE(0x1e, 0x0, r7, r7, 0x0) add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x17, &(0x7f0000000240)=0x9, 0xfffffffffffffc7c) r9 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x201c}) 4.070679724s ago: executing program 1 (id=1167): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x3000000, 0x9, 0x466}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.625046869s ago: executing program 4 (id=1168): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) r1 = socket$nl_crypto(0x10, 0x3, 0x15) (async) syz_emit_ethernet(0x110, &(0x7f0000000080)={@random="ca6c3c6d0a4e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0xbc, 0x80, '.', "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"}}}}}, &(0x7f00000001c0)={0x1, 0x4, [0x4dd, 0x9c, 0xe0f, 0xde9]}) (async) r2 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast2}, 0x10) 3.438593822s ago: executing program 0 (id=1169): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x178, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffff80}, {0x0, 0x0, 0xfffffffffffffffd, 0x8}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d4, 0xcc}, 0x0, @in=@remote, 0x0, 0x2, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x178}}, 0x0) 3.388396988s ago: executing program 3 (id=1170): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x86fc4fdd5a722ef, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xfffffffffffffe30}, @exit], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) socket$kcm(0x2, 0x200000000000001, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f00000001c0)="e3ad", 0x44) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x10000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000680)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f00000000c0)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000200)={0x4, 0x0, '\x00', 0x1, &(0x7f00000004c0)}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x260, 0x11c, 0xffffffff, 0x0, 0x11c, 0x304, 0x304, 0xffffffff, 0x304, 0x304, 0x5, 0x0, {[{{@uncond, 0x0, 0xd4, 0x11c, 0x0, {}, [@common=@unspec=@physdev={{0x64}, {'veth0_to_hsr\x00', {}, 'dummy0\x00', {}, 0x10, 0xf}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv6=@private2={0xfc, 0x2, '\x00', 0xfc}, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x0, 0x3}, {0x3, 0x6, 0x4}, 0x3, 0x1}}}, {{@ip={@rand_addr=0x64010101, @rand_addr=0x64010100, 0xff000000, 0xffffffff, 'veth1\x00', 'bond_slave_1\x00', {}, {0xff}, 0x2, 0x2, 0x68}, 0x0, 0x70, 0xa4, 0x0, {0x0, 0x4800}}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1c2, {0x0, @local, @broadcast, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @icmp_id=0x64, @gre_key=0x1000}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3f4) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000180)={0x29, 0x6, 0x0, {0x2, 0x4}}, 0x29) 3.275767585s ago: executing program 0 (id=1171): msgget(0x2, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffc, 0x3}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x20040600) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) preadv2(r4, &(0x7f0000000880), 0x0, 0x7, 0x3, 0x1) close_range(r2, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, 0x0, &(0x7f0000000240)) bind$inet(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 3.1944255s ago: executing program 4 (id=1172): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='htcp\x00', 0x5) syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYRES16], 0x0) shutdown(r3, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000280)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x2200, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00"], 0x1874}}, 0xa004) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x1f8, 0x228, 0x25a, 0x1f8, 0x228, 0x4, 0x0, {[{{@ipv6={@private2, @dev, [0x0, 0x0, 0x0, 0x160], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0xfc}, 0x5002, 0xa4, 0xec, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x40, 0x0, '\x00', {0x8}}}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.95987823s ago: executing program 2 (id=1173): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$audio(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'bond0\x00'}, 0x18) (async) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r1}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feffffffffdbf0d4d22bd10f7196428004000180140009", @ANYRESOCT, @ANYRES8=r0, @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) (async, rerun: 64) openat$ptmx(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64) 2.400635572s ago: executing program 3 (id=1174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.374284002s ago: executing program 2 (id=1175): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000001400"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) syz_open_dev$media(0x0, 0x6, 0x10080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b110000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.578647652s ago: executing program 3 (id=1176): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x8) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) write$FUSE_DIRENT(r0, 0x0, 0x10) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc0d05605, &(0x7f0000000040)={0x1, 0x0, 0x0, {0x0, 0x4f424752}}) 1.555513721s ago: executing program 2 (id=1177): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="140003b738e94ce03b24e68d4bca360aa9ecc6c1bdedd32ada47f5563fe300ac0797cc6ab57754e481b70566c2220284b03dcd59f7a623e33111a724b187d3cd9c761af5c8fe3bad45847d116f09e0d36bb4ea832e7d2b841bef30f6dbc2de4786f6581999b1174916bc58a9346c3310f4cd490389abe6195c75d45b0985a8b3107ce7e733cabe", @ANYRES16=r1, @ANYBLOB="af83000000000000000033000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 1.461722641s ago: executing program 3 (id=1178): syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) recvmmsg$unix(r0, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146}], 0x0, &(0x7f0000000280)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @cred, @cred, @cred, @rights]}}, {{&(0x7f0000000340), 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111}], 0x0, &(0x7f0000000480)=[@rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights]}}, {{&(0x7f0000000540)=@abs, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28}, {&(0x7f0000000680)=""/18}], 0x0, &(0x7f0000000700)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000000780), 0x0, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190}, {&(0x7f00000008c0)=""/64}, {&(0x7f0000000900)=""/99}, {&(0x7f0000000980)=""/222}, {&(0x7f0000000a80)=""/224}, {&(0x7f0000000b80)=""/4}, {&(0x7f0000000bc0)=""/237}, {&(0x7f0000000cc0)=""/60}, {&(0x7f0000000d00)=""/226}], 0x0, &(0x7f0000000e80)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}, 0xfd}], 0x7e4, 0x2, 0x0) 1.318776734s ago: executing program 2 (id=1179): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000100001040000000000003fffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}}, 0x0) 1.129802987s ago: executing program 3 (id=1180): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65) sigaltstack(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) write$dsp(r4, &(0x7f0000000400)="c4322f5c57ef1e8c2d500b7efabd1af0b06ee646f0d7c11ea4a8f86ecc05d60b7021cc9a2bf2b1fbb537f242c642619e1fdea2c7dd2e019267f3eec05db7b7805888178436eccf92c044357bd1e45b9a6f1d42b23f2549ef8211fdf9ead0e6c005fb76f054bce224fa814166ca756011e32bd2af7e2855846f25732d8f2ebd9a18ba8e7d42d9cc5763783b6d24d5ac3e3383b7900acc595fd81d14d0dd1f495cc5cc837aef304791b5b9651b7e0b38", 0xaf) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x8, 0x0, 0x3}, 0x0) r5 = add_key$user(0x0, 0x0, &(0x7f00000000c0)="ff", 0x1, 0x0) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r5}) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r6, 0x0) add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x22, &(0x7f00000000c0)=0x7a, 0x4) 898.896421ms ago: executing program 2 (id=1181): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x1e4, 0xfffffffa, 0x161, 0x0, 0x0, 0x401, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) (async) unshare(0x2c020400) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000708000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) 830.323108ms ago: executing program 1 (id=1182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x10, 0x803, 0x2) (async) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) dup2(r1, r3) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, &(0x7f0000000840)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r10, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, &(0x7f0000000840)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) (async) syz_usb_control_io$printer(r10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r11, &(0x7f0000000200), 0x0, 0x2, 0x0) (async) recvmmsg(r11, &(0x7f0000000200), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r13 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787c, 0x80, 0x1, 0x286}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r13, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 759.651616ms ago: executing program 4 (id=1183): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x3234564e, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x10) write(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010327bd700000000000", @ANYRES32=0x0, @ANYBLOB="0c0099000000000044000020"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x40054) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x9, 0x0, 0x80000001, 0x6, 0x8}, 0x14) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x8000) 560.256156ms ago: executing program 1 (id=1184): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000001c0)={0x2, 0x100, 0x7, {0x80000004, 0x7, 0x6, 0x499}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000005b00), r2}}, 0x18) shmctl$IPC_RMID(0x0, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x400c) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000000)=""/123) 475.803739ms ago: executing program 4 (id=1185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x200000000000000, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 267.985888ms ago: executing program 0 (id=1186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 138.816111ms ago: executing program 1 (id=1187): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100000000000000000003", @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 90.634098ms ago: executing program 3 (id=1188): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020731a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$rxrpc(0x21, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket(0x2, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xa086010000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 0 (id=1189): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 [ 288.423387][ T8657] dump_stack_lvl+0x189/0x250 [ 288.423424][ T8657] ? __pfx____ratelimit+0x10/0x10 [ 288.423456][ T8657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.423489][ T8657] ? __pfx__printk+0x10/0x10 [ 288.423512][ T8657] ? __might_fault+0xb0/0x130 [ 288.423544][ T8657] should_fail_ex+0x414/0x560 [ 288.423576][ T8657] _copy_from_user+0x2d/0xb0 [ 288.423598][ T8657] snd_pcm_oss_write+0x84f/0x11a0 [ 288.423651][ T8657] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 288.423691][ T8657] ? bpf_lsm_file_permission+0x9/0x20 [ 288.423720][ T8657] ? security_file_permission+0x75/0x290 [ 288.423744][ T8657] ? rw_verify_area+0x258/0x650 [ 288.423775][ T8657] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 288.423808][ T8657] vfs_write+0x27e/0xa90 [ 288.423848][ T8657] ? __pfx_vfs_write+0x10/0x10 [ 288.423882][ T8657] ? __fget_files+0x2a/0x420 [ 288.423908][ T8657] ? __fget_files+0x2a/0x420 [ 288.423929][ T8657] ? __fget_files+0x3a0/0x420 [ 288.423949][ T8657] ? __fget_files+0x2a/0x420 [ 288.423981][ T8657] ksys_write+0x145/0x250 [ 288.424003][ T8657] ? __pfx_ksys_write+0x10/0x10 [ 288.424024][ T8657] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 288.424059][ T8657] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.424092][ T8657] __do_fast_syscall_32+0xb6/0x2b0 [ 288.424114][ T8657] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.424149][ T8657] do_fast_syscall_32+0x34/0x80 [ 288.424169][ T8657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.424194][ T8657] RIP: 0023:0xf7fb8539 [ 288.424211][ T8657] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 288.424229][ T8657] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 288.424251][ T8657] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000500 [ 288.424265][ T8657] RDX: 000000000000fc36 RSI: 0000000000000000 RDI: 0000000000000000 [ 288.424277][ T8657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.424288][ T8657] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 288.424301][ T8657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.424331][ T8657] [ 288.946697][ T5896] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 289.135079][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 289.155315][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.172350][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.187169][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.196972][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.205511][ T5896] usb 4-1: Product: syz [ 289.210048][ T5896] usb 4-1: Manufacturer: syz [ 289.225198][ T5896] usb 4-1: SerialNumber: syz [ 289.225267][ T5828] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 289.404352][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 289.437426][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 289.448045][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.460521][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.464629][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 289.511801][ T5896] usb 4-1: 0:2 : does not exist [ 289.515109][ T5828] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 289.530525][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.530907][ T5896] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 289.544124][ T8686] netlink: 104 bytes leftover after parsing attributes in process `syz.4.801'. [ 289.555760][ T8686] netlink: 104 bytes leftover after parsing attributes in process `syz.4.801'. [ 289.574035][ T5828] usb 2-1: Product: syz [ 289.578767][ T5828] usb 2-1: Manufacturer: syz [ 289.583605][ T5828] usb 2-1: SerialNumber: syz [ 289.601967][ T5828] usb 2-1: config 0 descriptor?? [ 289.612238][ T5896] usb 4-1: USB disconnect, device number 33 [ 289.614397][ T8670] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 289.634898][ T8670] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 289.686498][ T6919] udevd[6919]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.718421][ T5828] usb 2-1: ucan: probing device on interface #0 [ 289.755958][ T8681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.800'. [ 289.771924][ T8681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.800'. [ 290.306111][ T5828] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 290.326160][ T5828] usb 2-1: USB disconnect, device number 41 [ 290.417641][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 290.614828][ T5925] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 290.649365][ T10] usb 5-1: config 0 has no interfaces? [ 290.661810][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 290.671295][ T5916] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 290.709362][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.894229][ T10] usb 5-1: Product: syz [ 290.898934][ T5925] usb 3-1: config 0 has no interfaces? [ 290.925832][ T10] usb 5-1: Manufacturer: syz [ 290.935009][ T5916] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 290.944115][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.952472][ T10] usb 5-1: SerialNumber: syz [ 290.977963][ T5925] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 291.011102][ T10] usb 5-1: config 0 descriptor?? [ 291.022150][ T5916] usb 4-1: config 0 descriptor?? [ 291.043713][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.094015][ T5925] usb 3-1: Product: syz [ 291.114453][ T5925] usb 3-1: Manufacturer: syz [ 291.152350][ T5925] usb 3-1: SerialNumber: syz [ 291.216988][ T5925] usb 3-1: config 0 descriptor?? [ 291.261749][ T8696] netlink: 32 bytes leftover after parsing attributes in process `syz.4.803'. [ 291.333677][ T5925] usb 5-1: USB disconnect, device number 46 [ 292.236510][ T8717] FAULT_INJECTION: forcing a failure. [ 292.236510][ T8717] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 292.250291][ T8717] CPU: 1 UID: 0 PID: 8717 Comm: syz.0.812 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 292.250313][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.250327][ T8717] Call Trace: [ 292.250336][ T8717] [ 292.250345][ T8717] dump_stack_lvl+0x189/0x250 [ 292.250383][ T8717] ? __pfx____ratelimit+0x10/0x10 [ 292.250416][ T8717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.250440][ T8717] ? __pfx__printk+0x10/0x10 [ 292.250457][ T8717] ? fs_reclaim_acquire+0x7d/0x100 [ 292.250489][ T8717] should_fail_ex+0x414/0x560 [ 292.250523][ T8717] prepare_alloc_pages+0x213/0x610 [ 292.250556][ T8717] __alloc_frozen_pages_noprof+0x123/0x370 [ 292.250582][ T8717] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 292.250615][ T8717] alloc_pages_bulk_noprof+0x560/0x710 [ 292.250646][ T8717] ? alloc_pages_noprof+0xbe/0x190 [ 292.250674][ T8717] kasan_populate_vmalloc+0xba/0x1a0 [ 292.250709][ T8717] alloc_vmap_area+0xd51/0x1490 [ 292.250739][ T8717] ? __pfx_alloc_vmap_area+0x10/0x10 [ 292.250753][ T8717] ? __kasan_kmalloc+0x93/0xb0 [ 292.250767][ T8717] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 292.250786][ T8717] ? __get_vm_area_node+0x13f/0x300 [ 292.250808][ T8717] ? array_map_alloc+0x431/0x6f0 [ 292.250838][ T8717] __get_vm_area_node+0x1f8/0x300 [ 292.250866][ T8717] __vmalloc_node_range_noprof+0x301/0x12f0 [ 292.250887][ T8717] ? array_map_alloc+0x431/0x6f0 [ 292.250928][ T8717] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.250949][ T8717] ? cap_capable+0x11f/0x460 [ 292.250976][ T8717] ? security_capable+0xbd/0x2e0 [ 292.251004][ T8717] bpf_map_area_mmapable_alloc+0xf6/0x160 [ 292.251035][ T8717] ? array_map_alloc+0x431/0x6f0 [ 292.251059][ T8717] array_map_alloc+0x431/0x6f0 [ 292.251090][ T8717] map_create+0x903/0x1150 [ 292.251126][ T8717] ? security_bpf+0x7e/0x300 [ 292.251158][ T8717] __sys_bpf+0x67e/0x860 [ 292.251186][ T8717] ? __pfx___sys_bpf+0x10/0x10 [ 292.251216][ T8717] ? ksys_write+0x22a/0x250 [ 292.251238][ T8717] __ia32_sys_bpf+0x7c/0x90 [ 292.251265][ T8717] __do_fast_syscall_32+0xb6/0x2b0 [ 292.251288][ T8717] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.251323][ T8717] do_fast_syscall_32+0x34/0x80 [ 292.251343][ T8717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.251362][ T8717] RIP: 0023:0xf7fb8539 [ 292.251375][ T8717] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 292.251390][ T8717] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 292.251411][ T8717] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800009c0 [ 292.251426][ T8717] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.251439][ T8717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.251450][ T8717] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 292.251461][ T8717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.251490][ T8717] [ 292.546709][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.965956][ T5925] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 293.127335][ T5925] usb 5-1: config 0 has no interfaces? [ 293.135687][ T5925] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 293.148353][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.158888][ T5925] usb 5-1: Product: syz [ 293.163193][ T5925] usb 5-1: Manufacturer: syz [ 293.167948][ T5925] usb 5-1: SerialNumber: syz [ 293.179373][ T5925] usb 5-1: config 0 descriptor?? [ 293.395006][ T5916] usb 4-1: Cannot set autoneg [ 293.407574][ T5916] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 293.429791][ T5916] usb 4-1: USB disconnect, device number 34 [ 293.484618][ T8733] loop6: detected capacity change from 0 to 524287999 [ 293.500351][ T8733] buffer_io_error: 5 callbacks suppressed [ 293.500365][ T8733] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.516481][ T8733] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.524847][ T8733] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.534181][ T8733] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.547414][ T8733] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.558296][ T8733] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.566708][ T8733] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.576588][ T8733] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.578951][ T8735] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 293.591063][ T8733] ldm_validate_partition_table(): Disk read failed. [ 293.611090][ T8733] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.621451][ T8733] Dev loop6: unable to read RDB block 0 [ 293.625439][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.640183][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.640309][ T8733] loop6: unable to read partition table [ 293.661456][ T8733] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 293.701133][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.736867][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.856670][ T5916] usb 3-1: USB disconnect, device number 48 [ 293.870936][ T5206] ldm_validate_partition_table(): Disk read failed. [ 293.888791][ T5206] Dev loop6: unable to read RDB block 0 [ 293.895956][ T5206] loop6: unable to read partition table [ 294.444852][ T5925] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 295.052990][ T5925] usb 1-1: device descriptor read/64, error -71 [ 295.094950][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 295.269414][ T5939] usb 5-1: USB disconnect, device number 47 [ 295.277711][ T10] usb 2-1: config 0 has no interfaces? [ 295.299082][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 295.315636][ T5925] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 295.346292][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.375578][ T10] usb 2-1: Product: syz [ 295.379826][ T10] usb 2-1: Manufacturer: syz [ 295.394719][ T10] usb 2-1: SerialNumber: syz [ 295.464060][ T10] usb 2-1: config 0 descriptor?? [ 295.492194][ T5925] usb 1-1: device descriptor read/64, error -71 [ 295.673839][ T5925] usb usb1-port1: attempt power cycle [ 296.045366][ T5925] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 296.095996][ T5925] usb 1-1: device descriptor read/8, error -71 [ 296.345083][ T5925] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 296.365720][ T5925] usb 1-1: device descriptor read/8, error -71 [ 296.475972][ T5925] usb usb1-port1: unable to enumerate USB device [ 296.588500][ T8783] ip6gretap0: entered promiscuous mode [ 296.594251][ T8783] macsec1: entered promiscuous mode [ 296.603368][ T8783] ip6gretap0: left promiscuous mode [ 297.056151][ T8795] netlink: 104 bytes leftover after parsing attributes in process `syz.2.835'. [ 297.094677][ T8795] netlink: 104 bytes leftover after parsing attributes in process `syz.2.835'. [ 297.439328][ T8808] netlink: 'syz.2.841': attribute type 25 has an invalid length. [ 297.486862][ T1213] usb 2-1: USB disconnect, device number 42 [ 297.660860][ T8814] FAULT_INJECTION: forcing a failure. [ 297.660860][ T8814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.701298][ T8814] CPU: 0 UID: 0 PID: 8814 Comm: syz.1.842 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 297.701328][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.701342][ T8814] Call Trace: [ 297.701350][ T8814] [ 297.701359][ T8814] dump_stack_lvl+0x189/0x250 [ 297.701397][ T8814] ? __pfx____ratelimit+0x10/0x10 [ 297.701430][ T8814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.701463][ T8814] ? __pfx__printk+0x10/0x10 [ 297.701486][ T8814] ? __might_fault+0xb0/0x130 [ 297.701519][ T8814] should_fail_ex+0x414/0x560 [ 297.701552][ T8814] _copy_from_iter+0x1db/0x16f0 [ 297.701597][ T8814] ? __pfx__copy_from_iter+0x10/0x10 [ 297.701632][ T8814] ? __kasan_kmalloc+0x93/0xb0 [ 297.701657][ T8814] ? __raw_spin_lock_init+0x45/0x100 [ 297.701685][ T8814] bcm_tx_setup+0x6d9/0x1bd0 [ 297.701751][ T8814] bcm_sendmsg+0x45c/0x6a0 [ 297.701788][ T8814] ? __pfx_bcm_sendmsg+0x10/0x10 [ 297.701825][ T8814] ? __import_iovec+0x5d4/0x7f0 [ 297.701844][ T8814] ? aa_sock_msg_perm+0x94/0x160 [ 297.701873][ T8814] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.701900][ T8814] ? __pfx_bcm_sendmsg+0x10/0x10 [ 297.701932][ T8814] __sock_sendmsg+0x219/0x270 [ 297.701968][ T8814] ____sys_sendmsg+0x505/0x830 [ 297.702002][ T8814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.702054][ T8814] ___sys_sendmsg+0x21f/0x2a0 [ 297.702084][ T8814] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.702151][ T8814] ? __fget_files+0x2a/0x420 [ 297.702174][ T8814] ? __fget_files+0x3a0/0x420 [ 297.702209][ T8814] __sys_sendmsg+0x164/0x220 [ 297.702239][ T8814] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.702283][ T8814] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 297.702319][ T8814] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.702353][ T8814] __do_fast_syscall_32+0xb6/0x2b0 [ 297.702375][ T8814] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.702411][ T8814] do_fast_syscall_32+0x34/0x80 [ 297.702432][ T8814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.702457][ T8814] RIP: 0023:0xf7f17539 [ 297.702476][ T8814] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 297.702494][ T8814] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 297.702515][ T8814] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001680 [ 297.702530][ T8814] RDX: 0000000020008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.702543][ T8814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.702555][ T8814] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.702567][ T8814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.702598][ T8814] [ 298.061719][ T8817] Cannot find add_set index 16384 as target [ 299.305102][ T5939] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 299.504904][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 299.521046][ T5939] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 299.558619][ T5939] usb 2-1: config 0 has no interface number 0 [ 299.678697][ T5939] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 299.724874][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.759419][ T5939] usb 2-1: Product: syz [ 299.807515][ T5939] usb 2-1: Manufacturer: syz [ 299.824977][ T5939] usb 2-1: SerialNumber: syz [ 299.840298][ T5939] usb 2-1: config 0 descriptor?? [ 299.971374][ T8836] bridge0: entered promiscuous mode [ 300.040261][ T8836] vlan0: entered promiscuous mode [ 300.375165][ T5939] peak_usb 2-1:0.56 can0: unable to request usb[type=0 value=1] err=-71 [ 300.434111][ T5939] peak_usb 2-1:0.56: unable to read PCAN-USB X6 firmware info (err -71) [ 300.439110][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 300.718313][ T5939] peak_usb 2-1:0.56: probe with driver peak_usb failed with error -71 [ 300.862120][ T5939] usb 2-1: USB disconnect, device number 43 [ 301.089305][ T8859] netlink: 1072 bytes leftover after parsing attributes in process `syz.4.855'. [ 301.485110][ T5939] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 301.728142][ T5939] usb 2-1: config 0 has no interfaces? [ 301.826851][ T5939] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 301.921056][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.946547][ T8873] FAULT_INJECTION: forcing a failure. [ 301.946547][ T8873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.968003][ T8873] CPU: 0 UID: 0 PID: 8873 Comm: syz.2.860 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 301.968025][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.968036][ T8873] Call Trace: [ 301.968042][ T8873] [ 301.968049][ T8873] dump_stack_lvl+0x189/0x250 [ 301.968077][ T8873] ? __pfx____ratelimit+0x10/0x10 [ 301.968101][ T8873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.968125][ T8873] ? __pfx__printk+0x10/0x10 [ 301.968141][ T8873] ? __might_fault+0xb0/0x130 [ 301.968164][ T8873] should_fail_ex+0x414/0x560 [ 301.968187][ T8873] _copy_from_user+0x2d/0xb0 [ 301.968203][ T8873] snd_seq_event_dup+0x467/0x780 [ 301.968230][ T8873] snd_seq_client_enqueue_event+0x2d4/0x4a0 [ 301.968258][ T8873] ? __pfx_snd_seq_client_enqueue_event+0x10/0x10 [ 301.968286][ T8873] snd_seq_write+0x5c2/0x810 [ 301.968318][ T8873] ? __pfx_snd_seq_write+0x10/0x10 [ 301.968342][ T8873] ? bpf_lsm_file_permission+0x9/0x20 [ 301.968364][ T8873] ? security_file_permission+0x75/0x290 [ 301.968381][ T8873] ? rw_verify_area+0x258/0x650 [ 301.968404][ T8873] ? __pfx_snd_seq_write+0x10/0x10 [ 301.968439][ T8873] vfs_write+0x27e/0xa90 [ 301.968469][ T8873] ? __pfx_vfs_write+0x10/0x10 [ 301.968494][ T8873] ? __fget_files+0x2a/0x420 [ 301.968513][ T8873] ? __fget_files+0x2a/0x420 [ 301.968528][ T8873] ? __fget_files+0x3a0/0x420 [ 301.968543][ T8873] ? __fget_files+0x2a/0x420 [ 301.968566][ T8873] ksys_write+0x145/0x250 [ 301.968582][ T8873] ? __pfx_ksys_write+0x10/0x10 [ 301.968597][ T8873] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 301.968622][ T8873] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.968647][ T8873] __do_fast_syscall_32+0xb6/0x2b0 [ 301.968662][ T8873] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.968687][ T8873] do_fast_syscall_32+0x34/0x80 [ 301.968701][ T8873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.968720][ T8873] RIP: 0023:0xf7fe6539 [ 301.968733][ T8873] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 301.968746][ T8873] RSP: 002b:00000000f50e555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 301.968768][ T8873] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 301.968778][ T8873] RDX: 000000000000ffc8 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.968787][ T8873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.968795][ T8873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 301.968804][ T8873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.968825][ T8873] [ 302.025029][ T5939] usb 2-1: Product: syz [ 302.306850][ T5939] usb 2-1: Manufacturer: syz [ 302.311669][ T5939] usb 2-1: SerialNumber: syz [ 302.341671][ T5939] usb 2-1: config 0 descriptor?? [ 302.637955][ T8856] program syz.1.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.777612][ T8881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.792398][ T8881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.365052][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 303.585051][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 303.615508][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 303.624647][ T10] usb 5-1: config 0 has no interface number 0 [ 303.632990][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 303.715365][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 303.772110][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.852399][ T10] usb 5-1: Product: syz [ 303.865813][ T10] usb 5-1: Manufacturer: syz [ 303.878970][ T10] usb 5-1: SerialNumber: syz [ 303.914571][ T10] usb 5-1: config 0 descriptor?? [ 303.980745][ T10] smsc75xx v1.0.0 [ 303.984459][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 304.044021][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 304.176014][ T10] IPVS: starting estimator thread 0... [ 304.334952][ T8894] IPVS: using max 36 ests per chain, 86400 per kthread [ 304.465586][ T8902] netlink: 'syz.2.869': attribute type 5 has an invalid length. [ 304.506916][ T5939] usb 2-1: USB disconnect, device number 44 [ 305.214868][ T5939] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 305.355936][ T5939] usb 3-1: device descriptor read/64, error -71 [ 305.645940][ T5939] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 305.784950][ T5939] usb 3-1: device descriptor read/64, error -71 [ 305.925610][ T5939] usb usb3-port1: attempt power cycle [ 306.274124][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'. [ 306.293611][ T5939] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 306.589071][ T8930] openvswitch: netlink: Key type 173 is out of range max 32 [ 306.811483][ T5939] usb 3-1: device descriptor read/8, error -71 [ 306.897908][ T5915] usb 5-1: USB disconnect, device number 48 [ 307.125322][ T5939] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 307.167458][ T5939] usb 3-1: device descriptor read/8, error -71 [ 307.306401][ T5939] usb usb3-port1: unable to enumerate USB device [ 307.334045][ T8939] FAULT_INJECTION: forcing a failure. [ 307.334045][ T8939] name failslab, interval 1, probability 0, space 0, times 0 [ 307.385012][ T8939] CPU: 1 UID: 0 PID: 8939 Comm: syz.3.880 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 307.385042][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.385066][ T8939] Call Trace: [ 307.385075][ T8939] [ 307.385085][ T8939] dump_stack_lvl+0x189/0x250 [ 307.385123][ T8939] ? __pfx____ratelimit+0x10/0x10 [ 307.385155][ T8939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.385189][ T8939] ? __pfx__printk+0x10/0x10 [ 307.385218][ T8939] ? ref_tracker_alloc+0x318/0x460 [ 307.385251][ T8939] should_fail_ex+0x414/0x560 [ 307.385284][ T8939] should_failslab+0xa8/0x100 [ 307.385308][ T8939] kmem_cache_alloc_noprof+0x73/0x3c0 [ 307.385349][ T8939] ? skb_clone+0x212/0x3a0 [ 307.385383][ T8939] skb_clone+0x212/0x3a0 [ 307.385416][ T8939] __netlink_deliver_tap+0x404/0x850 [ 307.385456][ T8939] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.385483][ T8939] netlink_deliver_tap+0x19c/0x1b0 [ 307.385510][ T8939] netlink_unicast+0x72f/0x8d0 [ 307.385544][ T8939] netlink_sendmsg+0x805/0xb30 [ 307.385581][ T8939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.385610][ T8939] ? __import_iovec+0x5d4/0x7f0 [ 307.385629][ T8939] ? aa_sock_msg_perm+0x94/0x160 [ 307.385658][ T8939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.385686][ T8939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.385713][ T8939] __sock_sendmsg+0x219/0x270 [ 307.385750][ T8939] ____sys_sendmsg+0x505/0x830 [ 307.385784][ T8939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.385830][ T8939] ___sys_sendmsg+0x21f/0x2a0 [ 307.385860][ T8939] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.385929][ T8939] ? __fget_files+0x2a/0x420 [ 307.385955][ T8939] ? __fget_files+0x3a0/0x420 [ 307.385991][ T8939] __sys_sendmsg+0x164/0x220 [ 307.386021][ T8939] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.386064][ T8939] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 307.386101][ T8939] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.386135][ T8939] __do_fast_syscall_32+0xb6/0x2b0 [ 307.386157][ T8939] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.386193][ T8939] do_fast_syscall_32+0x34/0x80 [ 307.386214][ T8939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.386239][ T8939] RIP: 0023:0xf703e539 [ 307.386257][ T8939] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 307.386275][ T8939] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 307.386297][ T8939] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000200 [ 307.386318][ T8939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.386330][ T8939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.386342][ T8939] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 307.386354][ T8939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.386385][ T8939] [ 307.387606][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 307.994858][ T1213] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 308.255139][ T1213] usb 4-1: Using ep0 maxpacket: 32 [ 308.335981][ T1213] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.353202][ T1213] usb 4-1: config 0 has no interface number 0 [ 308.491366][ T1213] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 308.537289][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.631592][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 308.669184][ T1213] usb 4-1: Product: syz [ 308.719844][ T1213] usb 4-1: Manufacturer: syz [ 308.799162][ T1213] usb 4-1: SerialNumber: syz [ 308.829051][ T1213] usb 4-1: config 0 descriptor?? [ 308.865970][ T1213] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 308.920509][ T1213] usb 4-1: selecting invalid altsetting 1 [ 308.943415][ T1213] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 309.006710][ T1213] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 309.018524][ T8939] team0 (unregistering): Port device team_slave_0 removed [ 309.062293][ T1213] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 309.079511][ T8939] team0 (unregistering): Failed to send options change via netlink (err -105) [ 309.172654][ T1213] usb 4-1: media controller created [ 309.224426][ T8939] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 309.303781][ T1213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.421693][ T8939] team0 (unregistering): Port device team_slave_1 removed [ 309.769221][ T1213] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 309.794955][ T1213] zl10353_read_register: readreg error (reg=127, ret==-71) [ 309.807224][ T1213] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 309.983019][ T1213] usb 4-1: USB disconnect, device number 35 [ 310.054920][ T5896] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 310.225020][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 310.254963][ T5896] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.283675][ T5896] usb 2-1: config 0 has no interface number 0 [ 310.299516][ T5896] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 310.311944][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.368128][ T5896] usb 2-1: Product: syz [ 310.381726][ T5896] usb 2-1: Manufacturer: syz [ 310.402325][ T5896] usb 2-1: SerialNumber: syz [ 310.431839][ T5896] usb 2-1: config 0 descriptor?? [ 310.452480][ T5896] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 310.467794][ T5896] usb 2-1: selecting invalid altsetting 1 [ 310.490879][ T5896] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 310.590569][ T5896] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 310.818094][ T5896] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 310.918954][ T5896] usb 2-1: media controller created [ 310.977255][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.044359][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 311.055247][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 311.119176][ T5896] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 311.139827][ T5896] zl10353_read_register: readreg error (reg=127, ret==-71) [ 311.165563][ T5896] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 311.439805][ T5896] usb 2-1: USB disconnect, device number 45 [ 311.760345][ T8984] netlink: 'syz.4.894': attribute type 49 has an invalid length. [ 312.276244][ T5896] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 312.485280][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 312.612571][ T5896] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 312.651065][ T8993] AppArmor: change_hat: Invalid input '0x000000000000000^ch2¿»angeh' [ 312.677910][ T5896] usb 2-1: config 0 has no interface number 0 [ 312.771781][ T5896] usb 2-1: config 0 interface 184 has no altsetting 0 [ 312.806903][ T51] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 312.843700][ T5896] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 312.855294][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.863829][ T5896] usb 2-1: Product: syz [ 312.868166][ T5896] usb 2-1: Manufacturer: syz [ 312.872791][ T5896] usb 2-1: SerialNumber: syz [ 312.881474][ T5896] usb 2-1: config 0 descriptor?? [ 312.899190][ T5896] smsc75xx v1.0.0 [ 312.902910][ T5896] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 312.975424][ T5896] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 313.351714][ T9007] ip6gretap0: entered promiscuous mode [ 313.351859][ T9007] vlan0: entered promiscuous mode [ 313.353224][ T9007] bridge0: port 3(vlan0) entered blocking state [ 313.353344][ T9007] bridge0: port 3(vlan0) entered disabled state [ 313.353502][ T9007] vlan0: entered allmulticast mode [ 313.353521][ T9007] ip6gretap0: entered allmulticast mode [ 315.427709][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 315.595509][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 315.653492][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 315.716905][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 315.742734][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 315.771376][ T10] usb 5-1: Product: syz [ 315.816300][ T10] usb 5-1: Manufacturer: syz [ 315.854943][ T10] usb 5-1: SerialNumber: syz [ 315.911456][ T10] usb 5-1: config 0 descriptor?? [ 315.939897][ T9044] netlink: 168 bytes leftover after parsing attributes in process `syz.2.913'. [ 315.960667][ T9035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 315.968958][ T5939] usb 2-1: USB disconnect, device number 46 [ 316.002731][ T9044] netlink: 168 bytes leftover after parsing attributes in process `syz.2.913'. [ 316.442129][ T10] usb 5-1: USB disconnect, device number 49 [ 317.235324][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.241738][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.616370][ T5923] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 317.775047][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 317.805058][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.817361][ T5923] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 317.838304][ T5923] usb 3-1: can't read configurations, error -71 [ 318.585126][ T5939] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 318.767183][ T5939] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 318.797770][ T5939] usb 2-1: config 0 has no interface number 0 [ 318.826353][ T5939] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 318.843046][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.862752][ T5939] usb 2-1: Product: syz [ 318.871299][ T5939] usb 2-1: Manufacturer: syz [ 318.881601][ T5939] usb 2-1: SerialNumber: syz [ 318.898262][ T5939] usb 2-1: config 0 descriptor?? [ 318.930300][ T5939] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 318.945387][ T5939] usb 2-1: No valid video chain found. [ 319.264950][ T5939] usb 2-1: USB disconnect, device number 47 [ 319.440326][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'. [ 319.449700][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 319.463179][ T9114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.775672][ T5939] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 319.906649][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 319.922237][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 319.938343][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 319.968539][ T5939] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 320.017535][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.067006][ T9125] vlan2: entered promiscuous mode [ 320.071516][ T5939] usb 5-1: config 0 descriptor?? [ 320.090380][ T5939] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 320.196262][ T5925] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 320.358644][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 320.365434][ T9129] syzkaller1: entered promiscuous mode [ 320.371054][ T9129] syzkaller1: entered allmulticast mode [ 320.388921][ T5925] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 320.401782][ T5925] usb 4-1: config 0 has no interface number 0 [ 320.459469][ T5925] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 320.478434][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.515637][ T5925] usb 4-1: Product: syz [ 320.520492][ T5925] usb 4-1: Manufacturer: syz [ 320.546796][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.943'. [ 320.557862][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.943'. [ 320.579028][ T5925] usb 4-1: SerialNumber: syz [ 320.626002][ T5925] usb 4-1: config 0 descriptor?? [ 320.837940][ T5925] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 321.038688][ T5925] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 321.056659][ T5925] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 321.088958][ T5925] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 321.097115][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 321.137291][ T5939] gspca_sonixj: reg_w1 err -71 [ 321.154901][ T5939] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 321.165251][ T5939] usb 5-1: USB disconnect, device number 50 [ 321.269368][ T5925] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -22 [ 321.402982][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.452494][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.157791][ T5939] usb 4-1: USB disconnect, device number 36 [ 322.205143][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 322.367544][ T10] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 322.379378][ T10] usb 5-1: config 0 has no interface number 0 [ 322.388363][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 322.403002][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.411542][ T10] usb 5-1: Product: syz [ 322.429529][ T10] usb 5-1: Manufacturer: syz [ 322.443458][ T10] usb 5-1: SerialNumber: syz [ 322.454357][ T10] usb 5-1: config 0 descriptor?? [ 322.467664][ T10] usb 5-1: Found UVC 0.00 device syz (05ac:8501) [ 322.482962][ T10] usb 5-1: No valid video chain found. [ 322.678997][ T10] usb 5-1: USB disconnect, device number 51 [ 322.975384][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 322.994621][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 323.374828][ T5939] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 323.550014][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.581806][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.658476][ T5939] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 323.790936][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.881182][ T5939] usb 1-1: config 0 descriptor?? [ 324.140703][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.159734][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.179425][ T9168] netlink: 116 bytes leftover after parsing attributes in process `syz.0.953'. [ 324.224605][ T9168] netlink: 116 bytes leftover after parsing attributes in process `syz.0.953'. [ 324.490859][ T5939] sony 0003:054C:024B.0005: unknown main item tag 0x0 [ 324.515424][ T5939] sony 0003:054C:024B.0005: unknown main item tag 0x0 [ 324.524002][ T5939] sony 0003:054C:024B.0005: unexpected long global item [ 324.531377][ T5923] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 324.547515][ T5939] sony 0003:054C:024B.0005: parse failed [ 324.553493][ T5939] sony 0003:054C:024B.0005: probe with driver sony failed with error -22 [ 324.691346][ T5939] usb 1-1: USB disconnect, device number 39 [ 324.720082][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 324.733445][ T5923] usb 4-1: not running at top speed; connect to a high speed hub [ 324.750102][ T5923] usb 4-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 324.789312][ T5923] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.801224][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.827452][ T5923] usb 4-1: Product: syz [ 324.835923][ T5923] usb 4-1: Manufacturer: syz [ 324.840651][ T5923] usb 4-1: SerialNumber: syz [ 324.886855][ T5923] usb 4-1: bad CDC descriptors [ 326.598551][ T5923] usb 4-1: USB disconnect, device number 37 [ 326.658130][ T5925] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 326.831418][ T5925] usb 1-1: config 0 has no interfaces? [ 326.882801][ T5925] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 326.969721][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.064420][ T9212] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 327.135092][ T5925] usb 1-1: Product: syz [ 327.162256][ T5925] usb 1-1: Manufacturer: syz [ 327.180624][ T5925] usb 1-1: SerialNumber: syz [ 327.220459][ T5925] usb 1-1: config 0 descriptor?? [ 327.414960][ T5923] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 327.729479][ T5923] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 327.740419][ T5923] usb 5-1: config 0 has no interface number 0 [ 327.765521][ T5923] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 327.774909][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.787923][ T5923] usb 5-1: Product: syz [ 327.792441][ T5923] usb 5-1: Manufacturer: syz [ 327.797679][ T5923] usb 5-1: SerialNumber: syz [ 327.812055][ T5923] usb 5-1: config 0 descriptor?? [ 327.836483][ T5923] usb 5-1: Found UVC 0.00 device syz (05ac:8501) [ 327.843170][ T5923] usb 5-1: No valid video chain found. [ 328.300137][ T5923] usb 5-1: USB disconnect, device number 52 [ 328.435975][ T9229] syz.2.969: vmalloc error: size 12582912, failed to allocated page array size 24576, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 328.474118][ T9229] CPU: 0 UID: 0 PID: 9229 Comm: syz.2.969 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 328.474141][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.474151][ T9229] Call Trace: [ 328.474157][ T9229] [ 328.474164][ T9229] dump_stack_lvl+0x189/0x250 [ 328.474194][ T9229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.474219][ T9229] ? __pfx__printk+0x10/0x10 [ 328.474236][ T9229] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 328.474254][ T9229] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 328.474272][ T9229] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 328.474291][ T9229] warn_alloc+0x214/0x310 [ 328.474313][ T9229] ? __pfx_warn_alloc+0x10/0x10 [ 328.474337][ T9229] ? __get_vm_area_node+0x28f/0x300 [ 328.474352][ T9229] ? vicodec_start_streaming+0x8f6/0x1470 [ 328.474374][ T9229] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 328.474412][ T9229] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 328.474432][ T9229] ? rcu_is_watching+0x15/0xb0 [ 328.474456][ T9229] ? vicodec_start_streaming+0x8f6/0x1470 [ 328.474473][ T9229] ? vicodec_start_streaming+0x8f6/0x1470 [ 328.474489][ T9229] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 328.474505][ T9229] ? vicodec_start_streaming+0x8f6/0x1470 [ 328.474528][ T9229] vicodec_start_streaming+0x8f6/0x1470 [ 328.474552][ T9229] ? __pfx_vicodec_start_streaming+0x10/0x10 [ 328.474571][ T9229] vb2_start_streaming+0x125/0x460 [ 328.474592][ T9229] vb2_core_streamon+0x2e0/0x4f0 [ 328.474611][ T9229] v4l2_m2m_ioctl_streamon+0xe0/0x140 [ 328.474640][ T9229] __video_do_ioctl+0xc9b/0xdb0 [ 328.474664][ T9229] ? __pfx___video_do_ioctl+0x10/0x10 [ 328.474692][ T9229] video_usercopy+0x86e/0x14f0 [ 328.474716][ T9229] ? __pfx___video_do_ioctl+0x10/0x10 [ 328.474743][ T9229] ? __pfx_video_usercopy+0x10/0x10 [ 328.474788][ T9229] ? __fget_files+0x2a/0x420 [ 328.474808][ T9229] v4l2_ioctl+0x18a/0x1e0 [ 328.474827][ T9229] v4l2_compat_ioctl32+0x1d4/0x260 [ 328.474851][ T9229] __ia32_compat_sys_ioctl+0x540/0x840 [ 328.474877][ T9229] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 328.474905][ T9229] ? __se_sys_futex_time32+0x360/0x3e0 [ 328.474931][ T9229] ? rcu_is_watching+0x15/0xb0 [ 328.474956][ T9229] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 328.474981][ T9229] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.475005][ T9229] __do_fast_syscall_32+0xb6/0x2b0 [ 328.475026][ T9229] do_fast_syscall_32+0x34/0x80 [ 328.475040][ T9229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.475058][ T9229] RIP: 0023:0xf7fe6539 [ 328.475071][ T9229] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 328.475083][ T9229] RSP: 002b:00000000f50c455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 328.475099][ T9229] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040045612 [ 328.475109][ T9229] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.475118][ T9229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.475126][ T9229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 328.475134][ T9229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.475155][ T9229] [ 328.845794][ T9229] Mem-Info: [ 328.849331][ T9229] active_anon:5904 inactive_anon:0 isolated_anon:0 [ 328.849331][ T9229] active_file:1800 inactive_file:3867 isolated_file:0 [ 328.849331][ T9229] unevictable:776 dirty:187 writeback:0 [ 328.849331][ T9229] slab_reclaimable:9366 slab_unreclaimable:98933 [ 328.849331][ T9229] mapped:30686 shmem:1371 pagetables:1211 [ 328.849331][ T9229] sec_pagetables:0 bounce:0 [ 328.849331][ T9229] kernel_misc_reclaimable:0 [ 328.849331][ T9229] free:1356919 free_pcp:15114 free_cma:0 [ 328.903196][ T9229] Node 0 active_anon:23592kB inactive_anon:0kB active_file:7200kB inactive_file:15336kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:122648kB dirty:748kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12356kB pagetables:4732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 328.941450][ T9229] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 328.979049][ T9229] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.012782][ T9229] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 329.019855][ T9229] Node 0 DMA32 free:1517932kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23516kB inactive_anon:0kB active_file:7056kB inactive_file:13812kB unevictable:1536kB writepending:760kB present:3129332kB managed:2561044kB mlocked:0kB bounce:0kB free_pcp:38416kB local_pcp:17220kB free_cma:0kB [ 329.052530][ T9229] lowmem_reserve[]: 0 0 1 1 1 [ 329.057415][ T9229] Node 0 Normal free:12kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:184kB inactive_file:1524kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:40kB free_cma:0kB [ 329.088446][ T9229] lowmem_reserve[]: 0 0 0 0 0 [ 329.093248][ T9229] Node 1 Normal free:3896428kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21324kB local_pcp:14744kB free_cma:0kB [ 329.125270][ T9229] lowmem_reserve[]: 0 0 0 0 0 [ 329.130119][ T9229] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 329.143030][ T9229] Node 0 DMA32: 1235*4kB (UME) 772*8kB (UME) 626*16kB (UME) 789*32kB (UME) 385*64kB (UME) 198*128kB (UME) 99*256kB (UME) 49*512kB (UME) 23*1024kB (UM) 8*2048kB (ME) 325*4096kB (UM) = 1517932kB [ 329.163013][ T9229] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 329.175190][ T9229] Node 1 Normal: 197*4kB (UE) 55*8kB (UE) 36*16kB (UE) 93*32kB (UE) 31*64kB (UME) 4*128kB (UE) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3896428kB [ 329.212008][ T9229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.302996][ T9229] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.354993][ T9229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.364619][ T9229] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.422372][ T9229] 7034 total pagecache pages [ 329.444851][ T9229] 0 pages in swap cache [ 329.449170][ T9229] Free swap = 124996kB [ 329.453357][ T9229] Total swap = 124996kB [ 329.480228][ T9241] netlink: 104 bytes leftover after parsing attributes in process `syz.4.974'. [ 329.501256][ T9241] netlink: 104 bytes leftover after parsing attributes in process `syz.4.974'. [ 329.521066][ T9229] 2097051 pages RAM [ 329.536459][ T9229] 0 pages HighMem/MovableOnly [ 329.551755][ T9229] 424684 pages reserved [ 329.564822][ T9229] 0 pages cma reserved [ 329.656686][ T5925] usb 1-1: USB disconnect, device number 40 [ 329.885417][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.975'. [ 329.914998][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.975'. [ 329.944964][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.975'. [ 329.967403][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.975'. [ 329.987250][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.975'. [ 330.023005][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.975'. [ 330.079172][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.975'. [ 330.089243][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.975'. [ 330.625886][ T5925] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 330.694217][ T9275] fuse: Invalid gid '0x0000000000000009' [ 330.784983][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 330.819330][ T5925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.836731][ T5925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.873759][ T5925] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.883764][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.912052][ T5925] usb 3-1: Product: syz [ 330.949236][ T5925] usb 3-1: Manufacturer: syz [ 330.975041][ T5925] usb 3-1: SerialNumber: syz [ 330.991788][ T9286] netlink: 'syz.4.983': attribute type 10 has an invalid length. [ 331.029914][ T5939] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 331.039781][ T9288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.130689][ T9286] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.167063][ T9286] bond0: (slave team0): Enslaving as an active interface with an up link [ 331.247593][ T5939] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 331.258737][ T5939] usb 2-1: config 0 has no interface number 0 [ 331.270422][ T5939] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 331.282813][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.293118][ T5939] usb 2-1: Product: syz [ 331.328937][ T5939] usb 2-1: Manufacturer: syz [ 331.333927][ T5939] usb 2-1: SerialNumber: syz [ 331.357187][ T9292] FAULT_INJECTION: forcing a failure. [ 331.357187][ T9292] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.377487][ T9292] CPU: 1 UID: 0 PID: 9292 Comm: syz.0.986 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 331.377512][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.377528][ T9292] Call Trace: [ 331.377538][ T9292] [ 331.377548][ T9292] dump_stack_lvl+0x189/0x250 [ 331.377587][ T9292] ? __pfx____ratelimit+0x10/0x10 [ 331.377620][ T9292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.377645][ T9292] ? __pfx__printk+0x10/0x10 [ 331.377663][ T9292] ? fs_reclaim_acquire+0x7d/0x100 [ 331.377700][ T9292] should_fail_ex+0x414/0x560 [ 331.377733][ T9292] prepare_alloc_pages+0x213/0x610 [ 331.377768][ T9292] __alloc_frozen_pages_noprof+0x123/0x370 [ 331.377790][ T9292] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 331.377833][ T9292] alloc_pages_bulk_noprof+0x560/0x710 [ 331.377868][ T9292] ? alloc_pages_noprof+0xbe/0x190 [ 331.377892][ T9292] kasan_populate_vmalloc+0xba/0x1a0 [ 331.377929][ T9292] alloc_vmap_area+0xd51/0x1490 [ 331.377963][ T9292] ? __pfx_alloc_vmap_area+0x10/0x10 [ 331.377984][ T9292] ? __kasan_kmalloc+0x93/0xb0 [ 331.378005][ T9292] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 331.378026][ T9292] ? __get_vm_area_node+0x13f/0x300 [ 331.378045][ T9292] ? array_map_alloc+0x431/0x6f0 [ 331.378076][ T9292] __get_vm_area_node+0x1f8/0x300 [ 331.378105][ T9292] __vmalloc_node_range_noprof+0x301/0x12f0 [ 331.378130][ T9292] ? array_map_alloc+0x431/0x6f0 [ 331.378189][ T9292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.378211][ T9292] ? cap_capable+0x11f/0x460 [ 331.378237][ T9292] ? security_capable+0xbd/0x2e0 [ 331.378267][ T9292] bpf_map_area_mmapable_alloc+0xf6/0x160 [ 331.378301][ T9292] ? array_map_alloc+0x431/0x6f0 [ 331.378334][ T9292] array_map_alloc+0x431/0x6f0 [ 331.378378][ T9292] map_create+0x903/0x1150 [ 331.378419][ T9292] ? security_bpf+0x7e/0x300 [ 331.378449][ T9292] __sys_bpf+0x67e/0x860 [ 331.378479][ T9292] ? __pfx___sys_bpf+0x10/0x10 [ 331.378522][ T9292] ? ksys_write+0x22a/0x250 [ 331.378554][ T9292] __ia32_sys_bpf+0x7c/0x90 [ 331.378582][ T9292] __do_fast_syscall_32+0xb6/0x2b0 [ 331.378613][ T9292] do_fast_syscall_32+0x34/0x80 [ 331.378634][ T9292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.378661][ T9292] RIP: 0023:0xf7fb8539 [ 331.378680][ T9292] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 331.378699][ T9292] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 331.378722][ T9292] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800009c0 [ 331.378737][ T9292] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.378750][ T9292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.378761][ T9292] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 331.378774][ T9292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.378804][ T9292] [ 331.385295][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.479850][ T5939] usb 2-1: config 0 descriptor?? [ 331.955166][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.017258][ T5925] usb 3-1: 0:2 : does not exist [ 332.106563][ T5925] usb 3-1: USB disconnect, device number 55 [ 332.126570][ T5939] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 332.153467][ T5939] usb 2-1: No valid video chain found. [ 332.268632][ T6919] udevd[6919]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.353571][ T5939] usb 2-1: USB disconnect, device number 48 [ 333.281005][ T9312] netlink: 'syz.0.998': attribute type 10 has an invalid length. [ 333.435012][ T9305] wireguard0: entered promiscuous mode [ 333.515738][ T9305] wireguard0: entered allmulticast mode [ 333.574850][ T5896] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 333.953465][ T9312] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.965599][ T9312] bond0: (slave team0): Enslaving as an active interface with an up link [ 334.089281][ T5896] usb 4-1: config 0 has no interfaces? [ 334.107083][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 334.121991][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.360700][ T5896] usb 4-1: Product: syz [ 334.421921][ T5896] usb 4-1: Manufacturer: syz [ 334.431386][ T5896] usb 4-1: SerialNumber: syz [ 334.462250][ T5896] usb 4-1: config 0 descriptor?? [ 335.163129][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.170829][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.121179][ T9332] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 336.255817][ T5915] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 336.444263][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.465117][ T5915] usb 1-1: config 0 has no interfaces? [ 336.473193][ T5828] usb 4-1: USB disconnect, device number 38 [ 336.508483][ T5915] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 336.518045][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.557198][ T5915] usb 1-1: Product: syz [ 336.589484][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.603487][ T5915] usb 1-1: Manufacturer: syz [ 336.620622][ T5915] usb 1-1: SerialNumber: syz [ 336.661877][ T5915] usb 1-1: config 0 descriptor?? [ 337.155686][ T9319] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.177232][ T9319] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.201582][ T9319] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.238761][ T9319] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.131760][ T9360] loop2: detected capacity change from 0 to 7 [ 338.152042][ T9360] Dev loop2: unable to read RDB block 7 [ 338.179010][ T9360] loop2: unable to read partition table [ 338.205241][ T9360] loop2: partition table beyond EOD, truncated [ 338.230259][ T9360] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 338.727666][ T5828] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 338.775129][ T5925] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 338.894959][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 338.908660][ T9372] __nla_validate_parse: 7 callbacks suppressed [ 338.908676][ T9372] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1011'. [ 338.938214][ T5925] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 338.938518][ T9372] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1011'. [ 338.956385][ T5828] usb 3-1: config 4 has an invalid interface number: 176 but max is 0 [ 338.977394][ T5925] usb 2-1: config 0 has no interface number 0 [ 339.002614][ T5828] usb 3-1: config 4 has no interface number 0 [ 339.005067][ T30] kauditd_printk_skb: 610 callbacks suppressed [ 339.005086][ T30] audit: type=1326 audit(1749483267.045:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1013" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 339.067433][ T1213] usb 1-1: USB disconnect, device number 41 [ 339.075312][ T5925] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 339.084403][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.093953][ T5828] usb 3-1: config 4 interface 176 has no altsetting 0 [ 339.105903][ T5925] usb 2-1: Product: syz [ 339.112937][ T5925] usb 2-1: Manufacturer: syz [ 339.114201][ T5828] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 339.140606][ T5925] usb 2-1: SerialNumber: syz [ 339.163634][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.178406][ T5925] usb 2-1: config 0 descriptor?? [ 339.191732][ T5925] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 339.206464][ T5828] usb 3-1: Product: syz [ 339.210725][ T5828] usb 3-1: Manufacturer: syz [ 339.226140][ T5925] usb 2-1: No valid video chain found. [ 339.232980][ T5828] usb 3-1: SerialNumber: syz [ 339.292599][ T5828] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 339.321221][ T9382] FAULT_INJECTION: forcing a failure. [ 339.321221][ T9382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.336194][ T9382] CPU: 1 UID: 0 PID: 9382 Comm: syz.0.1014 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 339.336223][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.336235][ T9382] Call Trace: [ 339.336244][ T9382] [ 339.336252][ T9382] dump_stack_lvl+0x189/0x250 [ 339.336289][ T9382] ? __pfx____ratelimit+0x10/0x10 [ 339.336324][ T9382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.336357][ T9382] ? __pfx__printk+0x10/0x10 [ 339.336394][ T9382] should_fail_ex+0x414/0x560 [ 339.336428][ T9382] _copy_to_user+0x31/0xb0 [ 339.336453][ T9382] simple_read_from_buffer+0xe1/0x170 [ 339.336481][ T9382] proc_fail_nth_read+0x1df/0x250 [ 339.336509][ T9382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.336538][ T9382] ? rw_verify_area+0x258/0x650 [ 339.336569][ T9382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.336597][ T9382] vfs_read+0x200/0x980 [ 339.336636][ T9382] ? __pfx___mutex_lock+0x10/0x10 [ 339.336658][ T9382] ? __pfx_vfs_read+0x10/0x10 [ 339.336692][ T9382] ? __fget_files+0x2a/0x420 [ 339.336721][ T9382] ? __fget_files+0x3a0/0x420 [ 339.336744][ T9382] ? __fget_files+0x2a/0x420 [ 339.336778][ T9382] ksys_read+0x145/0x250 [ 339.336800][ T9382] ? __pfx_ksys_read+0x10/0x10 [ 339.336836][ T9382] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 339.336883][ T9382] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.336919][ T9382] __do_fast_syscall_32+0xb6/0x2b0 [ 339.336941][ T9382] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.336978][ T9382] do_fast_syscall_32+0x34/0x80 [ 339.337000][ T9382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.337026][ T9382] RIP: 0023:0xf7fb8539 [ 339.337045][ T9382] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 339.337064][ T9382] RSP: 002b:00000000f50d6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 339.337085][ T9382] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50d6620 [ 339.337100][ T9382] RDX: 000000000000000f RSI: 00000000f7442ff4 RDI: 0000000000000000 [ 339.337113][ T9382] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 339.337125][ T9382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 339.337137][ T9382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.337169][ T9382] [ 339.603612][ T36] usb 3-1: Failed to submit usb control message: -71 [ 339.603674][ T36] usb 3-1: unable to send the bmi data to the device: -71 [ 339.603695][ T36] usb 3-1: unable to get target info from device [ 339.603712][ T36] usb 3-1: could not get target info (-71) [ 339.603732][ T36] usb 3-1: could not probe fw (-71) [ 339.627399][ T5896] usb 3-1: USB disconnect, device number 56 [ 339.714281][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 339.734070][ T9385] x_tables: duplicate underflow at hook 1 [ 339.787822][ T1213] usb 2-1: USB disconnect, device number 49 [ 340.040243][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 340.060096][ T9399] loop2: detected capacity change from 0 to 7 [ 340.102301][ T9399] Dev loop2: unable to read RDB block 7 [ 340.108237][ T9399] loop2: unable to read partition table [ 340.114961][ T9399] loop2: partition table beyond EOD, truncated [ 340.121312][ T9399] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 340.244331][ T30] audit: type=1326 audit(1749483268.285:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 340.689831][ T30] audit: type=1326 audit(1749483268.285:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 340.840035][ T30] audit: type=1326 audit(1749483268.335:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 341.004919][ T30] audit: type=1326 audit(1749483268.335:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 341.211389][ T30] audit: type=1326 audit(1749483268.335:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 341.294860][ T30] audit: type=1326 audit(1749483268.375:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 342.575995][ T9440] vlan2: entered promiscuous mode [ 343.374970][ T5939] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 343.576852][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 343.586839][ T5939] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 343.684876][ T1213] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 343.716831][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 343.738112][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 343.748274][ T5923] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 343.767083][ T5939] usb 5-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 343.784130][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.795119][ T5939] usb 5-1: Product: syz [ 343.802450][ T5939] usb 5-1: Manufacturer: syz [ 343.809975][ T5939] usb 5-1: SerialNumber: syz [ 343.814879][ T5828] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 343.824436][ T5939] usb 5-1: config 0 descriptor?? [ 343.855303][ T1213] usb 3-1: Using ep0 maxpacket: 16 [ 343.862488][ T1213] usb 3-1: config 4 has an invalid interface number: 176 but max is 0 [ 343.891852][ T1213] usb 3-1: config 4 has no interface number 0 [ 343.898314][ T1213] usb 3-1: config 4 interface 176 has no altsetting 0 [ 343.908001][ T1213] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 343.917552][ T5923] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 343.917582][ T5923] usb 2-1: config 0 has no interface number 0 [ 343.926703][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.943034][ T1213] usb 3-1: Product: syz [ 343.951265][ T1213] usb 3-1: Manufacturer: syz [ 343.956565][ T1213] usb 3-1: SerialNumber: syz [ 343.956824][ T5923] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 343.967220][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.984002][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.997987][ T5828] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 344.008404][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.018254][ T1213] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 344.035056][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.055215][ T5923] usb 2-1: Product: syz [ 344.059443][ T5923] usb 2-1: Manufacturer: syz [ 344.064076][ T5923] usb 2-1: SerialNumber: syz [ 344.069588][ T5828] usb 4-1: config 0 descriptor?? [ 344.089132][ T5923] usb 2-1: config 0 descriptor?? [ 344.097977][ T5923] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 344.113602][ T5923] usb 2-1: No valid video chain found. [ 344.211905][ T1131] usb 3-1: Failed to submit usb control message: -71 [ 344.215907][ T9463] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.1038'. [ 344.219622][ T1213] usb 3-1: USB disconnect, device number 57 [ 344.235007][ T1131] usb 3-1: unable to send the bmi data to the device: -71 [ 344.246868][ T1131] usb 3-1: unable to get target info from device [ 344.253292][ T1131] usb 3-1: could not get target info (-71) [ 344.268931][ T1131] usb 3-1: could not probe fw (-71) [ 344.340746][ T5916] usb 2-1: USB disconnect, device number 50 [ 344.541226][ T5828] megaworld 0003:07B5:0312.0006: item fetching failed at offset 2/5 [ 344.552486][ T5828] megaworld 0003:07B5:0312.0006: parse failed [ 344.559212][ T5828] megaworld 0003:07B5:0312.0006: probe with driver megaworld failed with error -22 [ 344.565624][ T5923] usb 5-1: USB disconnect, device number 53 [ 344.893769][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.944065][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.188641][ T9481] @: renamed from vlan0 [ 345.232402][ T5923] usb 4-1: USB disconnect, device number 39 [ 345.412939][ T9486] FAULT_INJECTION: forcing a failure. [ 345.412939][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.435111][ T9486] CPU: 1 UID: 0 PID: 9486 Comm: syz.2.1044 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 345.435140][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.435153][ T9486] Call Trace: [ 345.435161][ T9486] [ 345.435170][ T9486] dump_stack_lvl+0x189/0x250 [ 345.435206][ T9486] ? __pfx____ratelimit+0x10/0x10 [ 345.435238][ T9486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.435270][ T9486] ? __pfx__printk+0x10/0x10 [ 345.435293][ T9486] ? __might_fault+0xb0/0x130 [ 345.435326][ T9486] should_fail_ex+0x414/0x560 [ 345.435358][ T9486] _copy_from_user+0x2d/0xb0 [ 345.435380][ T9486] snd_seq_event_dup+0x467/0x780 [ 345.435421][ T9486] snd_seq_client_enqueue_event+0x2d4/0x4a0 [ 345.435459][ T9486] ? __pfx_snd_seq_client_enqueue_event+0x10/0x10 [ 345.435501][ T9486] snd_seq_write+0x5c2/0x810 [ 345.435546][ T9486] ? __pfx_snd_seq_write+0x10/0x10 [ 345.435581][ T9486] ? bpf_lsm_file_permission+0x9/0x20 [ 345.435603][ T9486] ? security_file_permission+0x75/0x290 [ 345.435620][ T9486] ? rw_verify_area+0x258/0x650 [ 345.435643][ T9486] ? __pfx_snd_seq_write+0x10/0x10 [ 345.435666][ T9486] vfs_write+0x27e/0xa90 [ 345.435704][ T9486] ? __pfx_vfs_write+0x10/0x10 [ 345.435729][ T9486] ? __fget_files+0x2a/0x420 [ 345.435748][ T9486] ? __fget_files+0x2a/0x420 [ 345.435763][ T9486] ? __fget_files+0x3a0/0x420 [ 345.435778][ T9486] ? __fget_files+0x2a/0x420 [ 345.435801][ T9486] ksys_write+0x145/0x250 [ 345.435817][ T9486] ? __pfx_ksys_write+0x10/0x10 [ 345.435832][ T9486] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 345.435858][ T9486] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.435883][ T9486] __do_fast_syscall_32+0xb6/0x2b0 [ 345.435898][ T9486] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.435923][ T9486] do_fast_syscall_32+0x34/0x80 [ 345.435937][ T9486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.435955][ T9486] RIP: 0023:0xf7fe6539 [ 345.435968][ T9486] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 345.435982][ T9486] RSP: 002b:00000000f50e555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 345.435997][ T9486] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 345.436008][ T9486] RDX: 000000000000ffc8 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.436016][ T9486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.436025][ T9486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 345.436033][ T9486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.436054][ T9486] [ 345.464949][ T5828] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 345.871909][ T5828] usb 5-1: config 0 has no interfaces? [ 345.875798][ T9494] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 345.914184][ T5828] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 345.958853][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.989809][ T5828] usb 5-1: Product: syz [ 346.003365][ T5828] usb 5-1: Manufacturer: syz [ 346.022010][ T5828] usb 5-1: SerialNumber: syz [ 346.051116][ T5828] usb 5-1: config 0 descriptor?? [ 346.624900][ T5828] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 347.059922][ T5828] usb 1-1: config 0 has no interfaces? [ 347.071395][ T5828] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 347.081593][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.089859][ T5828] usb 1-1: Product: syz [ 347.094662][ T5828] usb 1-1: Manufacturer: syz [ 347.100337][ T5828] usb 1-1: SerialNumber: syz [ 347.123991][ T5828] usb 1-1: config 0 descriptor?? [ 347.355872][ T9502] program syz.0.1050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.374536][ T9502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.385259][ T9502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.654943][ T5828] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 347.663890][ T5916] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 347.824962][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 347.832934][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.852194][ T5828] usb 2-1: config 4 has an invalid interface number: 176 but max is 0 [ 347.862154][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.893994][ T5828] usb 2-1: config 4 has no interface number 0 [ 347.900739][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.954813][ T5828] usb 2-1: config 4 interface 176 has no altsetting 0 [ 348.004042][ T5828] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 348.014324][ T5916] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.050944][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.051177][ T5915] usb 5-1: USB disconnect, device number 54 [ 348.059573][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.078731][ T5828] usb 2-1: Product: syz [ 348.090037][ T5828] usb 2-1: Manufacturer: syz [ 348.096279][ T5828] usb 2-1: SerialNumber: syz [ 348.102152][ T5916] usb 3-1: config 0 descriptor?? [ 348.140160][ T5828] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 348.357551][ T5915] usb 2-1: USB disconnect, device number 51 [ 348.363644][ T1164] usb 2-1: Failed to submit usb control message: -71 [ 348.383034][ T1164] usb 2-1: unable to send the bmi data to the device: -71 [ 348.422410][ T1164] usb 2-1: unable to get target info from device [ 348.472545][ T1164] usb 2-1: could not get target info (-71) [ 348.491415][ T1164] usb 2-1: could not probe fw (-71) [ 348.583199][ T5916] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 348.649089][ T5916] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 348.745052][ T5828] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 348.847239][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1053'. [ 348.917131][ T5828] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 348.926012][ T5828] usb 5-1: config 0 has no interface number 0 [ 348.937129][ T5828] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 348.946863][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.958012][ T5828] usb 5-1: Product: syz [ 348.970647][ T5828] usb 5-1: Manufacturer: syz [ 348.985082][ T5916] usb 3-1: USB disconnect, device number 58 [ 349.014460][ T5828] usb 5-1: SerialNumber: syz [ 349.044442][ T5828] usb 5-1: config 0 descriptor?? [ 349.071459][ T5828] usb 5-1: Found UVC 0.00 device syz (05ac:8501) [ 349.088133][ T5828] usb 5-1: No valid video chain found. [ 349.354141][ T5939] usb 1-1: USB disconnect, device number 42 [ 349.395555][ T5916] usb 5-1: USB disconnect, device number 55 [ 349.665204][ T9537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1062'. [ 349.821410][ T5939] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 349.907682][ T9541] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 349.940071][ T9541] batman_adv: batadv0: Adding interface: gretap1 [ 349.961953][ T9541] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.990042][ T9547] netlink: 'syz.3.1064': attribute type 3 has an invalid length. [ 349.998056][ T9547] netlink: 'syz.3.1064': attribute type 3 has an invalid length. [ 350.044938][ T9541] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 350.081806][ T5939] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 350.110409][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.148823][ T5939] usb 1-1: config 0 descriptor?? [ 350.166229][ T5939] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 350.344943][ T5916] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 350.449956][ T5939] gp8psk: usb in 128 operation failed. [ 350.478897][ T5915] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 350.644893][ T5916] usb 5-1: device descriptor read/64, error -71 [ 350.687881][ T5939] gp8psk: usb in 146 operation failed. [ 350.705074][ T5939] gp8psk: failed to get FW version [ 350.718830][ T5828] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 350.724871][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 350.745916][ T5939] gp8psk: FPGA Version = 173 [ 350.753473][ T5915] usb 3-1: config 4 has an invalid interface number: 176 but max is 0 [ 350.801831][ T5915] usb 3-1: config 4 has no interface number 0 [ 350.839983][ T5915] usb 3-1: config 4 interface 176 has no altsetting 0 [ 350.870392][ T5915] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 350.879814][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.895205][ T5916] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 350.914882][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 350.921538][ T5915] usb 3-1: Product: syz [ 350.934900][ T5915] usb 3-1: Manufacturer: syz [ 350.950458][ T5939] gp8psk: usb in 138 operation failed. [ 350.970190][ T5915] usb 3-1: SerialNumber: syz [ 350.975827][ T5828] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 350.976876][ T5939] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 350.999500][ T5939] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 351.038741][ T5939] usb 1-1: USB disconnect, device number 43 [ 351.054857][ T5828] usb 4-1: config 0 has no interface number 0 [ 351.071233][ T5828] usb 4-1: config 0 interface 184 has no altsetting 0 [ 351.078819][ T5916] usb 5-1: device descriptor read/64, error -71 [ 351.090853][ T5915] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 351.144105][ T5828] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 351.153442][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.161833][ T5828] usb 4-1: Product: syz [ 351.192397][ T5828] usb 4-1: Manufacturer: syz [ 351.201317][ T5916] usb usb5-port1: attempt power cycle [ 351.211730][ T5828] usb 4-1: SerialNumber: syz [ 351.266993][ T3451] usb 3-1: Failed to submit usb control message: -71 [ 351.268453][ T1213] usb 3-1: USB disconnect, device number 59 [ 351.274376][ T3451] usb 3-1: unable to send the bmi data to the device: -71 [ 351.294917][ T3451] usb 3-1: unable to get target info from device [ 351.301560][ T5828] usb 4-1: config 0 descriptor?? [ 351.301621][ T3451] usb 3-1: could not get target info (-71) [ 351.313947][ T3451] usb 3-1: could not probe fw (-71) [ 351.364064][ T5828] smsc75xx v1.0.0 [ 351.430629][ T5828] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 351.458943][ T5828] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 351.608353][ T5916] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 351.650077][ T5916] usb 5-1: device descriptor read/8, error -71 [ 351.729140][ T30] audit: type=1326 audit(1749483279.775:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.1.1072" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f17539 code=0x0 [ 351.789187][ T30] audit: type=1326 audit(1749483279.835:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 351.845965][ T30] audit: type=1326 audit(1749483279.835:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 351.904952][ T5916] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 351.914096][ T30] audit: type=1326 audit(1749483279.835:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 351.914411][ T9568] No buffer was provided with the request [ 351.944262][ T30] audit: type=1326 audit(1749483279.835:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 351.984209][ T5916] usb 5-1: device descriptor read/8, error -71 [ 352.009322][ T30] audit: type=1326 audit(1749483279.835:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 352.095583][ T5916] usb usb5-port1: unable to enumerate USB device [ 352.865314][ T5915] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 352.939170][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 352.953075][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 352.967345][ T9589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1078'. [ 353.046480][ T5915] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 353.070914][ T5915] usb 2-1: config 0 has no interface number 0 [ 353.108366][ T5915] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 353.120329][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.128846][ T5915] usb 2-1: Product: syz [ 353.133208][ T5915] usb 2-1: Manufacturer: syz [ 353.138369][ T5915] usb 2-1: SerialNumber: syz [ 353.161371][ T5915] usb 2-1: config 0 descriptor?? [ 353.192898][ T5915] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 353.205626][ T5915] usb 2-1: No valid video chain found. [ 353.224890][ T5939] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 353.319333][ T5923] usb 4-1: USB disconnect, device number 40 [ 353.366215][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 353.383232][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 353.395511][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 353.407907][ T5939] usb 3-1: config 254 has an invalid interface number: 240 but max is 0 [ 353.507815][ T5939] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 353.519314][ T5939] usb 3-1: config 254 has no interface number 0 [ 353.526205][ T5939] usb 3-1: config 254 interface 240 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.529047][ T5939] usb 3-1: New USB device found, idVendor=17ef, idProduct=3069, bcdDevice=3e.9b [ 353.550750][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.565512][ T5915] usb 2-1: USB disconnect, device number 52 [ 353.599025][ T5939] usb 3-1: Product: syz [ 353.613711][ T5939] usb 3-1: Manufacturer: syz [ 353.619028][ T5939] usb 3-1: SerialNumber: syz [ 353.639837][ T5939] r8152-cfgselector 3-1: Unknown version 0x0000 [ 353.824889][ T5923] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 354.001259][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 354.014125][ T5939] r8152-cfgselector 3-1: USB disconnect, device number 60 [ 354.105098][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 354.112847][ T5923] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db [ 354.126628][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.146661][ T5923] usb 4-1: config 0 descriptor?? [ 354.313699][ T5923] pwc: Logitech ViewPort AV 100 webcam detected. [ 354.570388][ T5923] pwc: send_video_command error -71 [ 354.581959][ T5923] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 354.615016][ T5923] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 354.666413][ T5923] usb 4-1: USB disconnect, device number 41 [ 354.775139][ T1213] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 354.916658][ T9622] netlink: 'syz.2.1091': attribute type 3 has an invalid length. [ 354.936552][ T1213] usb 5-1: Using ep0 maxpacket: 16 [ 354.936663][ T9622] netlink: 'syz.2.1091': attribute type 3 has an invalid length. [ 354.949629][ T1213] usb 5-1: config 4 has an invalid interface number: 176 but max is 0 [ 354.971443][ T9622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1091'. [ 354.975058][ T1213] usb 5-1: config 4 has no interface number 0 [ 354.992656][ T1213] usb 5-1: config 4 interface 176 has no altsetting 0 [ 355.005742][ T9622] FAULT_INJECTION: forcing a failure. [ 355.005742][ T9622] name failslab, interval 1, probability 0, space 0, times 0 [ 355.013226][ T1213] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 355.028730][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.037435][ T1213] usb 5-1: Product: syz [ 355.041947][ T1213] usb 5-1: Manufacturer: syz [ 355.047183][ T1213] usb 5-1: SerialNumber: syz [ 355.054073][ T9622] CPU: 1 UID: 0 PID: 9622 Comm: syz.2.1091 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 355.054100][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.054113][ T9622] Call Trace: [ 355.054122][ T9622] [ 355.054131][ T9622] dump_stack_lvl+0x189/0x250 [ 355.054171][ T9622] ? __pfx____ratelimit+0x10/0x10 [ 355.054204][ T9622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.054238][ T9622] ? __pfx__printk+0x10/0x10 [ 355.054268][ T9622] ? __pfx___might_resched+0x10/0x10 [ 355.054307][ T9622] should_fail_ex+0x414/0x560 [ 355.054340][ T9622] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 355.054365][ T9622] should_failslab+0xa8/0x100 [ 355.054391][ T9622] __kvmalloc_node_noprof+0x161/0x5f0 [ 355.054414][ T9622] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 355.054446][ T9622] __nf_hook_entries_try_shrink+0x316/0x6e0 [ 355.054485][ T9622] __nf_unregister_net_hook+0x4f6/0x700 [ 355.054521][ T9622] nf_unregister_net_hooks+0xcb/0x140 [ 355.054551][ T9622] nf_ct_netns_put+0x2d2/0x520 [ 355.054579][ T9622] nft_connlimit_destroy+0x5a/0xb0 [ 355.054601][ T9622] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 355.054625][ T9622] nf_tables_newsetelem+0x2d38/0x4340 [ 355.054702][ T9622] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 355.054736][ T9622] ? __lock_acquire+0xab9/0xd20 [ 355.054790][ T9622] ? nla_validate_array+0xfc/0x260 [ 355.054845][ T9622] ? __pfx___nla_validate_parse+0x10/0x10 [ 355.054883][ T9622] ? __lock_acquire+0xab9/0xd20 [ 355.054924][ T9622] ? nfnl_pernet+0x23/0x240 [ 355.054986][ T9622] ? __nla_parse+0x40/0x60 [ 355.055021][ T9622] nfnetlink_rcv+0x112f/0x2520 [ 355.055090][ T9622] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 355.055142][ T9622] ? ref_tracker_free+0x63a/0x7d0 [ 355.055203][ T9622] ? __netlink_deliver_tap+0x807/0x850 [ 355.055239][ T9622] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.055264][ T9622] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.055295][ T9622] netlink_unicast+0x75b/0x8d0 [ 355.055330][ T9622] netlink_sendmsg+0x805/0xb30 [ 355.055366][ T9622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.055396][ T9622] ? __import_iovec+0x5d4/0x7f0 [ 355.055415][ T9622] ? aa_sock_msg_perm+0x94/0x160 [ 355.055444][ T9622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.055470][ T9622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.055498][ T9622] __sock_sendmsg+0x219/0x270 [ 355.055535][ T9622] ____sys_sendmsg+0x505/0x830 [ 355.055569][ T9622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.055616][ T9622] ___sys_sendmsg+0x21f/0x2a0 [ 355.055646][ T9622] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.055713][ T9622] ? __fget_files+0x2a/0x420 [ 355.055736][ T9622] ? __fget_files+0x3a0/0x420 [ 355.055771][ T9622] __sys_sendmsg+0x164/0x220 [ 355.055801][ T9622] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.055845][ T9622] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 355.055880][ T9622] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.055915][ T9622] __do_fast_syscall_32+0xb6/0x2b0 [ 355.055937][ T9622] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.055981][ T9622] do_fast_syscall_32+0x34/0x80 [ 355.056003][ T9622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.056027][ T9622] RIP: 0023:0xf7fe6539 [ 355.056045][ T9622] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 355.056063][ T9622] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 355.056086][ T9622] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 355.056100][ T9622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.056113][ T9622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.056125][ T9622] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 355.056137][ T9622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.056168][ T9622] [ 355.425523][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.625616][ T9620] netlink: 'syz.1.1090': attribute type 5 has an invalid length. [ 355.698761][ T1213] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 355.865152][ T1164] usb 5-1: Failed to submit usb control message: -71 [ 355.878637][ T1164] usb 5-1: unable to send the bmi data to the device: -71 [ 355.895544][ T1164] usb 5-1: unable to get target info from device [ 355.901560][ T1213] usb 5-1: USB disconnect, device number 60 [ 355.901964][ T1164] usb 5-1: could not get target info (-71) [ 355.913949][ T1164] usb 5-1: could not probe fw (-71) [ 356.094832][ T5828] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 356.251794][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 356.264961][ T5896] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 356.284218][ T5828] usb 2-1: New USB device found, idVendor=06f8, idProduct=0003, bcdDevice= e.dd [ 356.293751][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.355138][ T5828] usb 2-1: config 0 descriptor?? [ 356.358985][ T5923] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 356.440391][ T5896] usb 3-1: config 0 has no interfaces? [ 356.461146][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 356.470656][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.481618][ T5896] usb 3-1: Product: syz [ 356.486924][ T5896] usb 3-1: Manufacturer: syz [ 356.501977][ T5896] usb 3-1: SerialNumber: syz [ 356.524600][ T5896] usb 3-1: config 0 descriptor?? [ 356.545669][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 356.553759][ T5923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.573325][ T5923] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 356.590846][ T5923] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.591118][ T5828] usb 2-1: USB disconnect, device number 53 [ 356.604127][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.655748][ T5923] usb 4-1: Product: syz [ 356.697846][ T5923] usb 4-1: Manufacturer: syz [ 356.702941][ T5923] usb 4-1: SerialNumber: syz [ 356.772529][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.781694][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.926137][ T5923] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 357.017796][ T5923] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 357.052284][ T5923] usb 4-1: USB disconnect, device number 42 [ 357.137080][ T6919] udevd[6919]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.244827][ T1213] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 358.482645][ T1213] usb 5-1: Using ep0 maxpacket: 8 [ 358.494172][ T1213] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.508482][ T1213] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.520726][ T1213] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.693910][ T1213] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.734149][ T1213] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.769578][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.965699][ T5828] usb 3-1: USB disconnect, device number 61 [ 359.014502][ T1213] usb 5-1: GET_CAPABILITIES returned 0 [ 359.020555][ T1213] usbtmc 5-1:16.0: can't read capabilities [ 359.233756][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.243062][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.252139][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.261201][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.270274][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.307366][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.317516][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.326657][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.357493][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.366667][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.376729][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.386545][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.395693][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.407736][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.416887][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.426020][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.440781][ T5828] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 359.471591][ T5939] usb 5-1: USB disconnect, device number 61 [ 359.574863][ T5828] usb 3-1: device descriptor read/64, error -71 [ 359.724830][ T1213] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 359.784918][ T5923] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 359.814847][ T5828] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 359.875056][ T1213] usb 2-1: Using ep0 maxpacket: 16 [ 359.883120][ T1213] usb 2-1: config 4 has an invalid interface number: 176 but max is 0 [ 359.893256][ T1213] usb 2-1: config 4 has no interface number 0 [ 359.901050][ T1213] usb 2-1: config 4 interface 176 has no altsetting 0 [ 359.913704][ T1213] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 359.924626][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.935051][ T1213] usb 2-1: Product: syz [ 359.939487][ T1213] usb 2-1: Manufacturer: syz [ 359.944105][ T1213] usb 2-1: SerialNumber: syz [ 359.954917][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 359.956533][ T5828] usb 3-1: device descriptor read/64, error -71 [ 359.966339][ T5923] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 359.966365][ T5923] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 359.966386][ T5923] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.006851][ T1213] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 360.016691][ T5923] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.016719][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.016739][ T5923] usb 1-1: Product: syz [ 360.016755][ T5923] usb 1-1: Manufacturer: syz [ 360.016769][ T5923] usb 1-1: SerialNumber: syz [ 360.100158][ T5828] usb usb3-port1: attempt power cycle [ 360.201235][ T3451] usb 2-1: Failed to submit usb control message: -71 [ 360.208889][ T1213] usb 2-1: USB disconnect, device number 54 [ 360.215244][ T3451] usb 2-1: unable to send the bmi data to the device: -71 [ 360.223391][ T3451] usb 2-1: unable to get target info from device [ 360.250910][ T3451] usb 2-1: could not get target info (-71) [ 360.271854][ T3451] usb 2-1: could not probe fw (-71) [ 360.289642][ T9675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 360.326011][ T9675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.353131][ T9675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.373721][ T5923] usb 1-1: 0:2 : does not exist [ 360.402598][ T5923] usb 1-1: USB disconnect, device number 44 [ 360.455846][ T5828] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 360.525645][ T5828] usb 3-1: device descriptor read/8, error -71 [ 360.533291][ T6919] udevd[6919]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.784855][ T5828] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 360.805622][ T5828] usb 3-1: device descriptor read/8, error -71 [ 360.915231][ T5828] usb usb3-port1: unable to enumerate USB device [ 362.565103][ T5828] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 362.745671][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 362.762894][ T5828] usb 4-1: config 4 has an invalid interface number: 176 but max is 0 [ 362.784806][ T5828] usb 4-1: config 4 has no interface number 0 [ 362.811114][ T5828] usb 4-1: config 4 interface 176 has no altsetting 0 [ 362.827337][ T5828] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 362.875026][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.915314][ T5828] usb 4-1: Product: syz [ 362.919561][ T5828] usb 4-1: Manufacturer: syz [ 362.924205][ T5828] usb 4-1: SerialNumber: syz [ 363.000293][ T5828] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 363.232101][ T5828] usb 4-1: USB disconnect, device number 43 [ 363.238269][ T3572] usb 4-1: Failed to submit usb control message: -71 [ 363.251795][ T3572] usb 4-1: unable to send the bmi data to the device: -71 [ 363.271470][ T3572] usb 4-1: unable to get target info from device [ 363.305531][ T3572] usb 4-1: could not get target info (-71) [ 363.321816][ T3572] usb 4-1: could not probe fw (-71) [ 363.612592][ T9748] batadv0: entered promiscuous mode [ 363.621171][ T9748] vlan2: entered promiscuous mode [ 363.748810][ T9753] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1130'. [ 363.760365][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 363.987791][ T9761] netlink: 'syz.3.1133': attribute type 8 has an invalid length. [ 364.283535][ T9768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1135'. [ 364.290317][ T9771] loop2: detected capacity change from 0 to 7 [ 364.317014][ T9771] Dev loop2: unable to read RDB block 7 [ 364.331095][ T9771] loop2: AHDI p1 p2 p3 [ 364.340460][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1135'. [ 364.353189][ T9771] loop2: partition table partially beyond EOD, truncated [ 364.369407][ T9771] loop2: p1 start 1601398130 is beyond EOD, truncated [ 364.389033][ T9771] loop2: p2 start 1702059890 is beyond EOD, truncated [ 364.765116][ T9781] usb usb8: usbfs: process 9781 (syz.2.1138) did not claim interface 0 before use [ 364.795883][ T1213] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 364.964849][ T1213] usb 5-1: Using ep0 maxpacket: 16 [ 364.982388][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.003103][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.030831][ T1213] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 365.054993][ T5828] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 365.081983][ T1213] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 365.112058][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.152612][ T1213] usb 5-1: config 0 descriptor?? [ 365.171774][ T30] audit: type=1326 audit(1749483293.215:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 365.194099][ T5939] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 365.232327][ T5828] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.254479][ T30] audit: type=1326 audit(1749483293.215:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 365.276969][ T5828] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.291132][ T5828] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 365.313775][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 365.354827][ T30] audit: type=1326 audit(1749483293.215:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 365.389772][ T30] audit: type=1326 audit(1749483293.215:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 365.412336][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 365.425509][ T30] audit: type=1326 audit(1749483293.215:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 365.452139][ T5828] usb 3-1: SerialNumber: syz [ 365.488657][ T5939] usb 4-1: config 4 has an invalid interface number: 176 but max is 0 [ 365.502012][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 365.514948][ T5939] usb 4-1: config 4 has no interface number 0 [ 365.529578][ T5939] usb 4-1: config 4 interface 176 has no altsetting 0 [ 365.562933][ T9790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.584342][ T9790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.592759][ T30] audit: type=1326 audit(1749483293.215:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 365.685581][ T30] audit: type=1326 audit(1749483293.255:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8558 code=0x7ffc0000 [ 365.709802][ T5939] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 365.749259][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.760960][ T5939] usb 4-1: Product: syz [ 365.765546][ T30] audit: type=1326 audit(1749483293.255:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 365.787560][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.800725][ T5939] usb 4-1: Manufacturer: syz [ 365.805518][ T5939] usb 4-1: SerialNumber: syz [ 365.884101][ T9775] bond0: (slave team0): Releasing backup interface [ 365.940944][ T30] audit: type=1326 audit(1749483293.255:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 365.974506][ T5939] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 365.997701][ T9775] team0 (unregistering): Failed to send options change via netlink (err -105) [ 366.025654][ T9775] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 366.109061][ T9775] team0 (unregistering): Port device team_slave_0 removed [ 366.131086][ T30] audit: type=1326 audit(1749483293.395:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8558 code=0x7ffc0000 [ 366.153245][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.200564][ T1164] usb 4-1: Failed to submit usb control message: -71 [ 366.201058][ T5916] usb 4-1: USB disconnect, device number 44 [ 366.214638][ T1164] usb 4-1: unable to send the bmi data to the device: -71 [ 366.246489][ T1164] usb 4-1: unable to get target info from device [ 366.253490][ T1164] usb 4-1: could not get target info (-71) [ 366.259207][ T9775] team0 (unregistering): Failed to send options change via netlink (err -105) [ 366.275136][ T1164] usb 4-1: could not probe fw (-71) [ 366.295452][ T9775] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 366.310893][ T9775] team0 (unregistering): Port device team_slave_1 removed [ 366.425927][ T1213] usbhid 5-1:0.0: can't add hid device: -71 [ 366.433486][ T1213] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 366.454798][ T5896] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 366.486500][ T1213] usb 5-1: USB disconnect, device number 62 [ 366.504917][ T5939] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 366.654810][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 366.662167][ T5896] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 366.674398][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 366.692566][ T5939] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 366.701899][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.736264][ T5939] usb 2-1: config 0 descriptor?? [ 366.809900][ T5896] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 366.827281][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 366.839517][ T5896] usb 1-1: Product: syz [ 366.843777][ T5896] usb 1-1: Manufacturer: syz [ 366.851199][ T5896] usb 1-1: SerialNumber: syz [ 366.871483][ T5896] usb 1-1: config 0 descriptor?? [ 366.883556][ T9799] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 366.915112][ T1213] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 366.947335][ T5939] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 366.967140][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.013253][ T5939] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 367.021302][ T5939] usb 2-1: media controller created [ 367.063718][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.067746][ T1213] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.122535][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 367.153287][ T5939] az6027: usb out operation failed. (-71) [ 367.183693][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 367.202368][ T5939] az6027: usb out operation failed. (-71) [ 367.212574][ T5939] stb0899_attach: Driver disabled by Kconfig [ 367.224603][ T1213] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 367.238461][ T5939] az6027: no front-end attached [ 367.238461][ T5939] [ 367.248982][ T5939] az6027: usb out operation failed. (-71) [ 367.255368][ T5939] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 367.271952][ T1213] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 367.283268][ T5939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 367.314317][ T5939] dvb-usb: schedule remote query interval to 400 msecs. [ 367.325706][ T1213] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 367.338637][ T5939] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 367.400839][ T5939] usb 2-1: USB disconnect, device number 55 [ 367.404858][ T1213] usb 5-1: Manufacturer: syz [ 367.485223][ T1213] usb 5-1: config 0 descriptor?? [ 367.696104][ T5939] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 367.709379][ T5828] usb 3-1: 0:2 : does not exist [ 367.766043][ T5828] usb 3-1: USB disconnect, device number 66 [ 367.920405][ T6919] udevd[6919]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.949261][ T1213] rc_core: IR keymap rc-hauppauge not found [ 367.965180][ T1213] Registered IR keymap rc-empty [ 367.970809][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1149'. [ 367.985327][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 367.995074][ T9813] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1149'. [ 368.025317][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 368.072389][ T1213] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 368.102560][ T1213] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 368.150827][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 368.189818][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 368.200624][ T9824] sctp: [Deprecated]: syz.3.1152 (pid 9824) Use of int in maxseg socket option. [ 368.200624][ T9824] Use struct sctp_assoc_value instead [ 368.225115][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 368.246694][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 368.275020][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 368.295335][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 368.315694][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 368.335185][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 368.355129][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 368.385130][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 368.417328][ T1213] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 368.431748][ T1213] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 368.464212][ T1213] usb 5-1: USB disconnect, device number 63 [ 369.218497][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'. [ 369.268367][ T5916] usb 1-1: USB disconnect, device number 45 [ 369.384939][ T1213] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 369.565700][ T1213] usb 5-1: Using ep0 maxpacket: 16 [ 369.616679][ T1213] usb 5-1: config 4 has an invalid interface number: 176 but max is 0 [ 369.642649][ T1213] usb 5-1: config 4 has no interface number 0 [ 370.148153][ T1213] usb 5-1: config 4 interface 176 has no altsetting 0 [ 370.187076][ T1213] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 370.202236][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.223906][ T1213] usb 5-1: Product: syz [ 370.232214][ T1213] usb 5-1: Manufacturer: syz [ 370.247832][ T1213] usb 5-1: SerialNumber: syz [ 370.510872][ T1213] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 370.527783][ T1164] usb 5-1: Failed to submit usb control message: -71 [ 370.537312][ T1164] usb 5-1: unable to send the bmi data to the device: -71 [ 370.544442][ T1164] usb 5-1: unable to get target info from device [ 370.663236][ T1213] usb 5-1: USB disconnect, device number 64 [ 370.695185][ T5916] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 370.754835][ T1164] usb 5-1: could not get target info (-71) [ 370.782025][ T1164] usb 5-1: could not probe fw (-71) [ 370.854927][ T5916] usb 4-1: Invalid ep0 maxpacket: 16 [ 371.176292][ T5916] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 371.355198][ T5916] usb 4-1: Invalid ep0 maxpacket: 16 [ 371.360836][ T5916] usb usb4-port1: attempt power cycle [ 372.108786][ T9866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 372.125295][ T9866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 372.140347][ T9866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 372.145853][ T1213] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 372.173204][ T9874] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 372.206468][ T9874] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 372.236610][ T9874] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 372.335260][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 372.341473][ T9866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 372.343576][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 372.372702][ T9866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 372.387298][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 372.411702][ T9866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 372.432929][ T1213] usb 3-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 372.446978][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.473274][ T1213] usb 3-1: Product: syz [ 372.483942][ T1213] usb 3-1: Manufacturer: syz [ 372.502673][ T1213] usb 3-1: SerialNumber: syz [ 372.524300][ T1213] usb 3-1: config 0 descriptor?? [ 372.553350][ T1213] ipw 3-1:0.0: IPWireless converter converter detected [ 372.645128][ T5939] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 372.770168][ T5924] usb 3-1: USB disconnect, device number 67 [ 372.781231][ T5924] ipw 3-1:0.0: device disconnected [ 372.809953][ T5939] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 372.833461][ T9894] dvmrp8: entered allmulticast mode [ 372.834919][ T5939] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 372.843061][ T9893] dvmrp8: left allmulticast mode [ 372.863453][ T5939] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 372.874171][ T5939] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.891558][ T5939] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 372.900911][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.966051][ T5939] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 372.973959][ T5939] usb 2-1: invalid MIDI out EP 0 [ 373.178047][ T5939] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 373.220262][ T5939] usb 2-1: USB disconnect, device number 56 [ 373.261806][ T9899] Cannot find del_set index 3 as target [ 374.145138][ T9920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.598321][ T9937] __nla_validate_parse: 9 callbacks suppressed [ 375.598339][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 375.654052][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 376.314389][ T9956] macsec1: entered promiscuous mode [ 376.507793][ T9959] ------------[ cut here ]------------ [ 376.513782][ T9959] kernel BUG at mm/hugetlb.c:2346! [ 376.518927][ T9959] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 376.525175][ T9959] CPU: 0 UID: 0 PID: 9959 Comm: syz.0.1189 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 376.535441][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.545526][ T9959] RIP: 0010:alloc_hugetlb_folio_reserve+0xc3/0xd0 [ 376.551968][ T9959] Code: e8 e2 d5 a2 ff 48 c7 c7 00 67 e1 8d e8 c6 03 4b 09 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 be d5 a2 ff 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 376.571579][ T9959] RSP: 0018:ffffc9001adaf6a8 EFLAGS: 00010093 [ 376.577650][ T9959] RAX: ffffffff821d8932 RBX: ffffffff99adf128 RCX: ffff88802bd78000 [ 376.585657][ T9959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.593632][ T9959] RBP: 0000000000142cc0 R08: ffffea0001d3002f R09: 1ffffd40003a6005 [ 376.601783][ T9959] R10: dffffc0000000000 R11: fffff940003a6006 R12: dffffc0000000000 [ 376.609766][ T9959] R13: 1ffffffff335be25 R14: ffffea0001d30000 R15: 0000000000000000 [ 376.617915][ T9959] FS: 0000000000000000(0000) GS:ffff888125c52000(0063) knlGS:00000000f50d6b40 [ 376.626865][ T9959] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 376.633638][ T9959] CR2: 00000000585474c0 CR3: 00000000321dc000 CR4: 00000000003526f0 [ 376.641615][ T9959] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006 [ 376.649593][ T9959] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 376.657566][ T9959] Call Trace: [ 376.661025][ T9959] [ 376.664049][ T9959] memfd_alloc_folio+0x20f/0x3f0 [ 376.669006][ T9959] ? memfd_pin_folios+0xa4e/0xf60 [ 376.674053][ T9959] memfd_pin_folios+0xa65/0xf60 [ 376.678938][ T9959] ? __pfx_memfd_pin_folios+0x10/0x10 [ 376.684347][ T9959] ? shmem_mapping+0xd/0x50 [ 376.688867][ T9959] ? memfd_fcntl+0x239/0x630 [ 376.693558][ T9959] ? down_read+0x1ad/0x2e0 [ 376.697988][ T9959] udmabuf_create+0x7b5/0xf70 [ 376.702781][ T9959] ? __pfx_udmabuf_create+0x10/0x10 [ 376.708012][ T9959] udmabuf_ioctl+0x1d1/0x2c0 [ 376.712716][ T9959] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 376.717850][ T9959] ? __fget_files+0x2a/0x420 [ 376.722546][ T9959] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 376.728112][ T9959] __ia32_compat_sys_ioctl+0x540/0x840 [ 376.733599][ T9959] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 376.739690][ T9959] ? __se_sys_futex_time32+0x360/0x3e0 [ 376.745166][ T9959] ? rcu_is_watching+0x15/0xb0 [ 376.750124][ T9959] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 376.756740][ T9959] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.761957][ T9959] __do_fast_syscall_32+0xb6/0x2b0 [ 376.767095][ T9959] do_fast_syscall_32+0x34/0x80 [ 376.771954][ T9959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.778293][ T9959] RIP: 0023:0xf7fb8539 [ 376.782366][ T9959] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 376.801988][ T9959] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 376.810416][ T9959] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040187542 [ 376.818395][ T9959] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.826463][ T9959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.834437][ T9959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 376.842416][ T9959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.850493][ T9959] [ 376.853549][ T9959] Modules linked in: [ 376.857465][ T9959] ---[ end trace 0000000000000000 ]--- [ 376.862935][ T9959] RIP: 0010:alloc_hugetlb_folio_reserve+0xc3/0xd0 [ 376.869376][ T9959] Code: e8 e2 d5 a2 ff 48 c7 c7 00 67 e1 8d e8 c6 03 4b 09 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 be d5 a2 ff 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 376.888999][ T9959] RSP: 0018:ffffc9001adaf6a8 EFLAGS: 00010093 [ 376.895083][ T9959] RAX: ffffffff821d8932 RBX: ffffffff99adf128 RCX: ffff88802bd78000 [ 376.903068][ T9959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.911049][ T9959] RBP: 0000000000142cc0 R08: ffffea0001d3002f R09: 1ffffd40003a6005 [ 376.919036][ T9959] R10: dffffc0000000000 R11: fffff940003a6006 R12: dffffc0000000000 [ 376.927021][ T9959] R13: 1ffffffff335be25 R14: ffffea0001d30000 R15: 0000000000000000 [ 376.935022][ T9959] FS: 0000000000000000(0000) GS:ffff888125c52000(0063) knlGS:00000000f50d6b40 [ 376.943961][ T9959] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 376.950553][ T9959] CR2: 00000000585474c0 CR3: 00000000321dc000 CR4: 00000000003526f0 [ 376.958538][ T9959] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006 [ 376.966519][ T9959] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 376.974511][ T9959] Kernel panic - not syncing: Fatal exception [ 376.981030][ T9959] Kernel Offset: disabled [ 376.985391][ T9959] Rebooting in 86400 seconds..