last executing test programs: 3.662168709s ago: executing program 3 (id=80): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000300)={@private=0xe1010203, @empty, 0x1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000000)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) 3.578639877s ago: executing program 3 (id=82): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.466327776s ago: executing program 0 (id=94): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='mountstats\x00') 2.059507113s ago: executing program 1 (id=98): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.825267216s ago: executing program 1 (id=99): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x64, 0x0, 0x9, 0x2, 0x0, @empty, @broadcast}, {0x16, 0x80, 0x0, @loopback}}}}}}, 0x2e) 1.716316884s ago: executing program 1 (id=100): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='smaps\x00') 1.703097542s ago: executing program 0 (id=101): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x0, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xfffffefe, 0x6, 0x3, 0x0, 0x20000005, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0xfffffc00, 0x7, 0x6, 0x37f6, 0x7, 0xb, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0xc0, 0x0, 0x2005, 0x9, 0x8d6, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x78db18b6, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x0, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000007, 0x5f35, 0x8, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x5ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x401, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x5, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120001, 0x5, 0x3, 0x2, 0x0, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14d, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0x2c8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x7fff, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xdb, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.631060267s ago: executing program 0 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0xa00800, 0x0) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0xf6) setresuid(0x0, 0xee01, 0x0) openat$cgroup_ro(r0, &(0x7f0000000600)='cpu.stat\x00', 0x0, 0x0) 1.556227834s ago: executing program 0 (id=103): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) write(r0, &(0x7f0000000340)='\a', 0x1) 1.540771978s ago: executing program 2 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x76) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './dev'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@xino_on}], [], 0x2c}) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 1.538816233s ago: executing program 1 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x39, 0xfff, 0xc84a, 0x40000000000180, 0x100000000, 0x4, 0xf2, 0xd, 0x7fffffffffffe, 0x0, 0x7, 0x7, 0x712f, 0x470ab5f9, 0x10000, 0x7], 0xeeef0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.44591543s ago: executing program 2 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff01800000080039"], 0x15) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x3afd}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.396244437s ago: executing program 3 (id=107): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000400)={'pcl812\x00', [0x300, 0x7, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x6, 0x6, 0xffffff60, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1]}) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, 0x4, 0x1000000, 0x10, 0x2710, 0x20, 0x1, 0x40, 0x0, &(0x7f0000000540)=[0x0], 0x1, 0x0}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000000, 0x6, 0x2, 0xf, 0x2, 0xf, 0x8}]}) 1.295604484s ago: executing program 0 (id=108): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0}) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={r2, 0x0, r1, 0x0, 0x80000}) 1.154763223s ago: executing program 3 (id=109): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 1.142795442s ago: executing program 1 (id=110): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000045c0)=0x40) 1.021607291s ago: executing program 2 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r0, r1, 0x0, 0x201f00) 889.019981ms ago: executing program 1 (id=112): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB="b23d"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0x8) 831.056197ms ago: executing program 3 (id=113): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) 690.826084ms ago: executing program 2 (id=114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 577.354472ms ago: executing program 3 (id=115): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x40, 0x15, 0x4, "5604d9d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 311.377896ms ago: executing program 2 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x10) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x0, 0xa0) getdents64(r0, &(0x7f0000000480)=""/100, 0x64) 193.5017ms ago: executing program 0 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc_dir\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_dir/acpi/wakeup\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=118): setresgid(0x0, 0xee01, 0x0) r0 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, &(0x7f0000000080)='environ\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 76.213311][ T5598] cgroup: Unknown subsys name 'net' [ 76.298550][ T5598] cgroup: Unknown subsys name 'cpuset' [ 76.307212][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.886909][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.243899][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.246147][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.248042][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.249670][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.250637][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.251077][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.251716][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.252685][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.253185][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.254430][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.255268][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.256692][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.267766][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.268605][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.270778][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.272009][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.272788][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.295356][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.359889][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.368722][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.147109][ T5608] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 81.147766][ T5609] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 81.150932][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.151925][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.153914][ T5607] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 81.159968][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.672916][ T5610] infiniband rxe0: set active [ 81.672939][ T5610] infiniband rxe0: added rxe_eth0 [ 81.681536][ T193] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.723186][ T5610] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 81.723225][ T5610] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 81.723261][ T5610] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 81.784028][ T5610] RDS/IB: rxe0: added [ 81.790686][ T5610] smc: adding ib device rxe0 with port count 1 [ 81.790775][ T5610] smc: ib device rxe0 port 1 has no pnetid [ 81.831703][ T971] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.871296][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.098588][ T193] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.336375][ T5623] Bluetooth: hci2: command tx timeout [ 82.336505][ T5623] Bluetooth: hci1: command tx timeout [ 82.336575][ T5623] Bluetooth: hci3: command tx timeout [ 82.415220][ T5612] Bluetooth: hci0: command tx timeout [ 82.564847][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.608321][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.608568][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.608703][ T5609] bridge_slave_0: entered allmulticast mode [ 82.612153][ T5609] bridge_slave_0: entered promiscuous mode [ 82.657753][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.657851][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.657962][ T5609] bridge_slave_1: entered allmulticast mode [ 82.659692][ T5609] bridge_slave_1: entered promiscuous mode [ 82.727412][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.727849][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.728418][ T5608] bridge_slave_0: entered allmulticast mode [ 82.730487][ T5608] bridge_slave_0: entered promiscuous mode [ 82.781812][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.782985][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.783122][ T5608] bridge_slave_1: entered allmulticast mode [ 82.786807][ T5608] bridge_slave_1: entered promiscuous mode [ 82.841701][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.863002][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.863178][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.863313][ T5607] bridge_slave_0: entered allmulticast mode [ 82.866516][ T5607] bridge_slave_0: entered promiscuous mode [ 82.878090][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.907817][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.908168][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.908346][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.908541][ T5607] bridge_slave_1: entered allmulticast mode [ 82.911165][ T5607] bridge_slave_1: entered promiscuous mode [ 82.954623][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.954708][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.976223][ T5609] team0: Port device team_slave_0 added [ 83.005809][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.009315][ T5609] team0: Port device team_slave_1 added [ 83.029723][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.064881][ T5608] team0: Port device team_slave_0 added [ 83.099973][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.100001][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.100026][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.106075][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.106092][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.106113][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.109024][ T5608] team0: Port device team_slave_1 added [ 83.127018][ T5607] team0: Port device team_slave_0 added [ 83.157640][ T5607] team0: Port device team_slave_1 added [ 83.174636][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.174653][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.174673][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.261661][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.261679][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.261702][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.319580][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.319598][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.319623][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.340198][ T5609] hsr_slave_0: entered promiscuous mode [ 83.342956][ T5609] hsr_slave_1: entered promiscuous mode [ 83.395954][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.395973][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.396007][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.471543][ T5608] hsr_slave_0: entered promiscuous mode [ 83.472234][ T5608] hsr_slave_1: entered promiscuous mode [ 83.472874][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 83.472932][ T5608] Cannot create hsr debugfs directory [ 83.567114][ T5607] hsr_slave_0: entered promiscuous mode [ 83.567782][ T5607] hsr_slave_1: entered promiscuous mode [ 83.568236][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 83.568255][ T5607] Cannot create hsr debugfs directory [ 83.574846][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.024715][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.035454][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.044535][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.060659][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.069527][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.081273][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.099376][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.102806][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.223667][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.238312][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.239253][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.244634][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.268281][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.273070][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.274017][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.285545][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.415945][ T5612] Bluetooth: hci3: command tx timeout [ 84.415980][ T5612] Bluetooth: hci1: command tx timeout [ 84.416003][ T5612] Bluetooth: hci2: command tx timeout [ 84.418082][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.418259][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.418398][ T5610] bridge_slave_0: entered allmulticast mode [ 84.419789][ T5610] bridge_slave_0: entered promiscuous mode [ 84.423103][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.423206][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.423320][ T5610] bridge_slave_1: entered allmulticast mode [ 84.425003][ T5610] bridge_slave_1: entered promiscuous mode [ 84.477823][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.495485][ T5623] Bluetooth: hci0: command tx timeout [ 84.500584][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.516611][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.520076][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.534641][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.537538][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.548293][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.549911][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.560611][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.569845][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.611627][ T5610] team0: Port device team_slave_0 added [ 84.617046][ T5610] team0: Port device team_slave_1 added [ 84.662159][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.662178][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.662201][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.676266][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.676282][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.676303][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.773041][ T5610] hsr_slave_0: entered promiscuous mode [ 84.773773][ T5610] hsr_slave_1: entered promiscuous mode [ 84.774234][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 84.774254][ T5610] Cannot create hsr debugfs directory [ 84.788549][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.921562][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.961664][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.961828][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.993216][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.023662][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.023725][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.093405][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.113072][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.113137][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.114511][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.114573][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.171583][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.174396][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.177608][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.188552][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.207283][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.210717][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.211824][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.214580][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.240272][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.341677][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.367530][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.367646][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.394812][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.394932][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.594842][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.641396][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.673117][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.673239][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.690251][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.690355][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.217935][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.390539][ T5609] veth0_vlan: entered promiscuous mode [ 86.421419][ T5609] veth1_vlan: entered promiscuous mode [ 86.474080][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.496683][ T5623] Bluetooth: hci2: command tx timeout [ 86.496718][ T5623] Bluetooth: hci1: command tx timeout [ 86.496741][ T5623] Bluetooth: hci3: command tx timeout [ 86.552837][ T5609] veth0_macvtap: entered promiscuous mode [ 86.571466][ T5609] veth1_macvtap: entered promiscuous mode [ 86.575819][ T5612] Bluetooth: hci0: command tx timeout [ 86.653300][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.689900][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.702538][ T5608] veth0_vlan: entered promiscuous mode [ 86.718275][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.762545][ T5608] veth1_vlan: entered promiscuous mode [ 86.768972][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.769108][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.769141][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.769173][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.868678][ T5607] veth0_vlan: entered promiscuous mode [ 86.927125][ T5607] veth1_vlan: entered promiscuous mode [ 86.969336][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.969359][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.970800][ T5608] veth0_macvtap: entered promiscuous mode [ 86.977666][ T10] cfg80211: failed to load regulatory.db [ 87.018454][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.033747][ T5608] veth1_macvtap: entered promiscuous mode [ 87.066688][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.066711][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.093851][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.118395][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.132842][ T5607] veth0_macvtap: entered promiscuous mode [ 87.171812][ T5607] veth1_macvtap: entered promiscuous mode [ 87.176797][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.177032][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.177533][ T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.177843][ T44] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.188187][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.277151][ T5610] veth0_vlan: entered promiscuous mode [ 87.279941][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.347685][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.395931][ T5610] veth1_vlan: entered promiscuous mode [ 87.423459][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.423482][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.507611][ T1171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.507664][ T1171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.507702][ T1171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.507739][ T1171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.570033][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.570055][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.671256][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.671280][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.691209][ T5610] veth0_macvtap: entered promiscuous mode [ 87.703283][ T5610] veth1_macvtap: entered promiscuous mode [ 87.759456][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.759480][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.822700][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.840467][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.896251][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.937752][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.937805][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.937840][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.046337][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.046360][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.106025][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.106048][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.137445][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 88.168756][ T5783] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.311227][ T10] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.329180][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.329215][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.329260][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.575277][ T5612] Bluetooth: hci3: command tx timeout [ 88.575315][ T5612] Bluetooth: hci1: command tx timeout [ 88.575338][ T5612] Bluetooth: hci2: command tx timeout [ 88.620732][ T5796] bonding: no command found in bonding_masters - use +ifname or -ifname [ 88.634709][ T10] usb 4-1: usb_control_msg returned -32 [ 88.634766][ T10] usbtmc 4-1:16.0: can't read capabilities [ 88.656153][ T5623] Bluetooth: hci0: command tx timeout [ 89.025896][ T5808] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 89.034737][ T5728] usb 4-1: USB disconnect, device number 2 [ 89.101302][ T5810] FAULT_INJECTION: forcing a failure. [ 89.101302][ T5810] name failslab, interval 1, probability 0, space 0, times 1 [ 89.101334][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 89.101355][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.101365][ T5810] Call Trace: [ 89.101372][ T5810] [ 89.101380][ T5810] dump_stack_lvl+0xe8/0x150 [ 89.101411][ T5810] should_fail_ex+0x3eb/0x540 [ 89.101441][ T5810] should_failslab+0xa8/0x100 [ 89.101464][ T5810] __kmalloc_noprof+0xf9/0x710 [ 89.101502][ T5810] ? tomoyo_encode2+0x28b/0x540 [ 89.101527][ T5810] ? tomoyo_encode2+0x28b/0x540 [ 89.101560][ T5810] tomoyo_encode2+0x28b/0x540 [ 89.101594][ T5810] tomoyo_check_unix_address+0x39f/0x7e0 [ 89.101627][ T5810] ? tomoyo_check_unix_address+0x16d/0x7e0 [ 89.101654][ T5810] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 89.101699][ T5810] ? lock_acquire+0x115/0x350 [ 89.101728][ T5810] tomoyo_socket_sendmsg_permission+0x1d9/0x300 [ 89.101773][ T5810] security_socket_sendmsg+0xc0/0x280 [ 89.101798][ T5810] ____sys_sendmsg+0x51d/0x850 [ 89.101832][ T5810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.101870][ T5810] ? import_iovec+0x73/0xa0 [ 89.101902][ T5810] ___sys_sendmsg+0x2a5/0x360 [ 89.101926][ T5810] ? __lock_acquire+0x747/0x2de0 [ 89.101951][ T5810] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.101984][ T5810] ? __pfx_futex_wake_mark+0x10/0x10 [ 89.102046][ T5810] ? __fget_files+0x3a2/0x420 [ 89.102074][ T5810] ? __fget_files+0x2a/0x420 [ 89.102117][ T5810] __sys_sendmmsg+0x273/0x4d0 [ 89.102152][ T5810] ? __pfx___sys_sendmmsg+0x10/0x10 [ 89.102176][ T5810] ? do_futex+0x3e7/0x4e0 [ 89.102211][ T5810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.102259][ T5810] ? rcu_is_watching+0x16/0xb0 [ 89.102294][ T5810] __x64_sys_sendmmsg+0xa0/0xc0 [ 89.102322][ T5810] do_syscall_64+0x166/0x520 [ 89.102343][ T5810] ? trace_irq_disable+0x3b/0x140 [ 89.102362][ T5810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.102381][ T5810] ? clear_bhb_loop+0x70/0xc0 [ 89.102403][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.102421][ T5810] RIP: 0033:0x7fdc0439e559 [ 89.102440][ T5810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.102456][ T5810] RSP: 002b:00007fdc0534b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 89.102488][ T5810] RAX: ffffffffffffffda RBX: 00007fdc04625fa0 RCX: 00007fdc0439e559 [ 89.102502][ T5810] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000004 [ 89.102514][ T5810] RBP: 00007fdc044358b0 R08: 0000000000000000 R09: 0000000000000000 [ 89.102526][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.102537][ T5810] R13: 00007fdc04626038 R14: 00007fdc04625fa0 R15: 00007fff5b047da8 [ 89.102569][ T5810] [ 89.238640][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.445131][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 89.445938][ T10] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 89.452853][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.452908][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.452934][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 89.452954][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 89.452975][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.484522][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.484550][ T10] usb 1-1: Manufacturer: syz [ 89.533305][ T10] usb 1-1: config 0 descriptor?? [ 89.656167][ T5816] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.674070][ T5816] FAULT_INJECTION: forcing a failure. [ 89.674070][ T5816] name failslab, interval 1, probability 0, space 0, times 0 [ 89.674107][ T5816] CPU: 0 UID: 0 PID: 5816 Comm: syz.1.17 Not tainted syzkaller #0 PREEMPT(full) [ 89.674131][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.674144][ T5816] Call Trace: [ 89.674153][ T5816] [ 89.674162][ T5816] dump_stack_lvl+0xe8/0x150 [ 89.674197][ T5816] should_fail_ex+0x3eb/0x540 [ 89.674231][ T5816] should_failslab+0xa8/0x100 [ 89.674257][ T5816] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 89.674288][ T5816] ? __lock_acquire+0x747/0x2de0 [ 89.674308][ T5816] ? __kernfs_new_node+0xa9/0x980 [ 89.674329][ T5816] ? __kernfs_new_node+0xa9/0x980 [ 89.674370][ T5816] kstrdup+0x42/0x100 [ 89.674399][ T5816] __kernfs_new_node+0xa9/0x980 [ 89.674434][ T5816] ? __pfx___kernfs_new_node+0x10/0x10 [ 89.674456][ T5816] ? lock_acquire+0x115/0x350 [ 89.674478][ T5816] ? kernfs_root+0x1c/0x230 [ 89.674509][ T5816] ? kernfs_root+0x1c/0x230 [ 89.674530][ T5816] ? kernfs_root+0x1c/0x230 [ 89.674550][ T5816] ? kernfs_root+0x1c/0x230 [ 89.674577][ T5816] kernfs_new_node+0xeb/0x140 [ 89.674605][ T5816] __kernfs_create_file+0x4b/0x2e0 [ 89.674635][ T5816] sysfs_add_file_mode_ns+0x237/0x300 [ 89.674675][ T5816] internal_create_group+0x679/0x1180 [ 89.674717][ T5816] ? kobject_add+0x163/0x240 [ 89.674746][ T5816] ? rcu_is_watching+0x16/0xb0 [ 89.674772][ T5816] ? __pfx_internal_create_group+0x10/0x10 [ 89.674803][ T5816] ? __kmalloc_noprof+0x1a6/0x710 [ 89.674835][ T5816] sysfs_create_groups+0x59/0x120 [ 89.674861][ T5816] ib_setup_port_attrs+0xfd8/0x2420 [ 89.674888][ T5816] ? __lock_acquire+0x747/0x2de0 [ 89.674942][ T5816] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 89.674966][ T5816] ? __mutex_unlock_slowpath+0x731/0x900 [ 89.674996][ T5816] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 89.675024][ T5816] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.675056][ T5816] ? kobject_put+0x50f/0x550 [ 89.675082][ T5816] ? do_raw_spin_unlock+0xf5/0x200 [ 89.675115][ T5816] ? device_add+0x6f6/0xb80 [ 89.675142][ T5816] add_one_compat_dev+0x441/0x640 [ 89.675173][ T5816] rdma_dev_init_net+0x23e/0x2f0 [ 89.675198][ T5816] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 89.675222][ T5816] ? __kmalloc_noprof+0x1a6/0x710 [ 89.675247][ T5816] ? ops_init+0x7b/0x5d0 [ 89.675280][ T5816] ops_init+0x35d/0x5d0 [ 89.675316][ T5816] setup_net+0x118/0x350 [ 89.675342][ T5816] ? __pfx_setup_net+0x10/0x10 [ 89.675374][ T5816] ? down_read_killable+0x1b6/0x3b0 [ 89.675403][ T5816] ? __ns_common_init+0x38a/0x590 [ 89.675435][ T5816] copy_net_ns+0x536/0x770 [ 89.675463][ T5816] create_new_namespaces+0x3f0/0x6b0 [ 89.675492][ T5816] ? security_capable+0x7e/0x2c0 [ 89.675529][ T5816] unshare_nsproxy_namespaces+0x144/0x190 [ 89.675558][ T5816] ksys_unshare+0x532/0x890 [ 89.675587][ T5816] ? __pfx_ksys_unshare+0x10/0x10 [ 89.675614][ T5816] ? rcu_is_watching+0x16/0xb0 [ 89.675653][ T5816] __x64_sys_unshare+0x38/0x50 [ 89.675677][ T5816] do_syscall_64+0x166/0x520 [ 89.675702][ T5816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.675723][ T5816] ? clear_bhb_loop+0x70/0xc0 [ 89.675749][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.675769][ T5816] RIP: 0033:0x7fdc0439e559 [ 89.675789][ T5816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.675806][ T5816] RSP: 002b:00007fdc0534b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 89.675829][ T5816] RAX: ffffffffffffffda RBX: 00007fdc04625fa0 RCX: 00007fdc0439e559 [ 89.675844][ T5816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 89.675856][ T5816] RBP: 00007fdc044358b0 R08: 0000000000000000 R09: 0000000000000000 [ 89.675868][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.675880][ T5816] R13: 00007fdc04626038 R14: 00007fdc04625fa0 R15: 00007fff5b047da8 [ 89.675917][ T5816] [ 90.086266][ T10] rc_core: IR keymap rc-hauppauge not found [ 90.086285][ T10] Registered IR keymap rc-empty [ 90.087277][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.113870][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.131012][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 90.150557][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 90.177209][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.195651][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.215573][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.235457][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.257747][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.275332][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.295711][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.317396][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.335361][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.355310][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.378281][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.403075][ T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 90.403133][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 90.405196][ T5769] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.454087][ T46] usb 1-1: USB disconnect, device number 2 [ 90.586730][ T5769] usb 4-1: Using ep0 maxpacket: 32 [ 90.590079][ T5769] usb 4-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 90.590807][ T5769] usb 4-1: config 0 has no interfaces? [ 90.593346][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.593369][ T5769] usb 4-1: Product: syz [ 90.593383][ T5769] usb 4-1: Manufacturer: syz [ 90.593397][ T5769] usb 4-1: SerialNumber: syz [ 90.640705][ T5769] usb 4-1: config 0 descriptor?? [ 90.868637][ T9] usb 4-1: USB disconnect, device number 3 [ 90.914534][ T5855] device-mapper: ioctl: Unable to rename non-existent device, to uuid .2\´£«.j—DH [ 91.065234][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.194076][ T5865] FAULT_INJECTION: forcing a failure. [ 91.194076][ T5865] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 91.194099][ T5865] CPU: 1 UID: 0 PID: 5865 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 91.194114][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.194120][ T5865] Call Trace: [ 91.194126][ T5865] [ 91.194132][ T5865] dump_stack_lvl+0xe8/0x150 [ 91.194155][ T5865] should_fail_ex+0x3eb/0x540 [ 91.194174][ T5865] prepare_alloc_pages+0x21e/0x5f0 [ 91.194194][ T5865] __alloc_frozen_pages_noprof+0x17c/0x410 [ 91.194214][ T5865] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 91.194235][ T5865] ? policy_nodemask+0x2cc/0x8e0 [ 91.194252][ T5865] alloc_pages_mpol+0x21e/0x390 [ 91.194269][ T5865] folio_alloc_mpol_noprof+0x39/0x160 [ 91.194283][ T5865] vma_alloc_folio_noprof+0xe1/0x1e0 [ 91.194297][ T5865] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 91.194313][ T5865] ? vma_has_anon_rmap+0xc9/0x270 [ 91.194326][ T5865] do_wp_page+0x1166/0x4b60 [ 91.194357][ T5865] ? __pfx_do_wp_page+0x10/0x10 [ 91.194368][ T5865] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.194384][ T5865] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 91.194404][ T5865] handle_mm_fault+0x15c1/0x3540 [ 91.194422][ T5865] ? handle_mm_fault+0xee/0x3540 [ 91.194442][ T5865] ? __pfx_handle_mm_fault+0x10/0x10 [ 91.194453][ T5865] ? lock_vma_under_rcu+0x45a/0x500 [ 91.194467][ T5865] ? __pfx_do_futex+0x10/0x10 [ 91.194494][ T5865] do_user_addr_fault+0xb35/0x1480 [ 91.194518][ T5865] ? trace_page_fault_user+0x84/0x1e0 [ 91.194536][ T5865] exc_page_fault+0x6a/0xc0 [ 91.194551][ T5865] asm_exc_page_fault+0x26/0x30 [ 91.194562][ T5865] RIP: 0033:0x7f32da4572f6 [ 91.194574][ T5865] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 9c dd 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 91.194584][ T5865] RSP: 002b:00007f32d87f5f60 EFLAGS: 00010206 [ 91.194596][ T5865] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000a80000 [ 91.194604][ T5865] RDX: 00000000000026f5 RSI: 0000200000a80000 RDI: 0000200000a81000 [ 91.194612][ T5865] RBP: 00007f32da655180 R08: 0000000000000000 R09: ffffffffffffffff [ 91.194619][ T5865] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 91.194627][ T5865] R13: 0000200000a80000 R14: 00007f32da825fa0 R15: 0000000000000000 [ 91.194645][ T5865] [ 91.194768][ T5865] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 91.288325][ T46] usb 3-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 91.337088][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.337145][ T46] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 91.337168][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.395190][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 91.395219][ T46] usb 3-1: Product: syz [ 91.395234][ T46] usb 3-1: Manufacturer: syz [ 91.507405][ T5850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 91.510950][ T46] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 91.522186][ T46] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 91.605167][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.757748][ T9] usb 1-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 91.761073][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.761129][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 91.761156][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 91.761205][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.804641][ T46] usb 3-1: USB disconnect, device number 2 [ 91.854578][ T46] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 91.859195][ T46] garmin_gps 3-1:1.0: device disconnected [ 91.932126][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'. [ 91.993209][ T5880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.244183][ T9] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 92.244244][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 92.244256][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 92.280896][ T9] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 92.299795][ T9] usb 1-1: USB disconnect, device number 3 [ 92.631798][ T5897] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 92.631838][ T5897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.638303][ T5897] vhci_hcd vhci_hcd.0: Device attached [ 92.661934][ T5728] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.731770][ T5904] FAULT_INJECTION: forcing a failure. [ 92.731770][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 92.731802][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: syz.1.54 Not tainted syzkaller #0 PREEMPT(full) [ 92.731848][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.731860][ T5904] Call Trace: [ 92.731868][ T5904] [ 92.731876][ T5904] dump_stack_lvl+0xe8/0x150 [ 92.731911][ T5904] should_fail_ex+0x3eb/0x540 [ 92.731942][ T5904] should_failslab+0xa8/0x100 [ 92.731966][ T5904] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 92.731997][ T5904] ? kasprintf+0xe2/0x140 [ 92.732023][ T5904] ? kasprintf+0xe2/0x140 [ 92.732058][ T5904] kvasprintf+0xeb/0x1a0 [ 92.732086][ T5904] ? futex_unqueue+0x22/0x240 [ 92.732111][ T5904] ? __pfx_kvasprintf+0x10/0x10 [ 92.732153][ T5904] kasprintf+0xe2/0x140 [ 92.732180][ T5904] ? __pfx___futex_wait+0x10/0x10 [ 92.732204][ T5904] ? __pfx_kasprintf+0x10/0x10 [ 92.732229][ T5904] ? __pfx_futex_wake_mark+0x10/0x10 [ 92.732276][ T5904] logfc+0x15b/0x520 [ 92.732298][ T5904] ? __pfx___mutex_trylock_common+0x10/0x10 [ 92.732325][ T5904] ? rcu_is_watching+0x16/0xb0 [ 92.732350][ T5904] ? __pfx_logfc+0x10/0x10 [ 92.732371][ T5904] ? __mutex_lock+0x305/0x15a0 [ 92.732397][ T5904] ? __pfx_hook_capable+0x10/0x10 [ 92.732438][ T5904] ceph_get_tree+0x36a/0x1a40 [ 92.732463][ T5904] ? apparmor_capable+0x126/0x170 [ 92.732489][ T5904] vfs_get_tree+0x92/0x2a0 [ 92.732514][ T5904] vfs_cmd_create+0xa2/0x200 [ 92.732540][ T5904] __se_sys_fsconfig+0x6b9/0x810 [ 92.732571][ T5904] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 92.732599][ T5904] ? rcu_is_watching+0x16/0xb0 [ 92.732631][ T5904] ? __x64_sys_fsconfig+0x20/0xc0 [ 92.732656][ T5904] do_syscall_64+0x166/0x520 [ 92.732680][ T5904] ? trace_irq_disable+0x3b/0x140 [ 92.732701][ T5904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.732722][ T5904] ? clear_bhb_loop+0x70/0xc0 [ 92.732747][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.732767][ T5904] RIP: 0033:0x7fdc0439e559 [ 92.732787][ T5904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.732802][ T5904] RSP: 002b:00007fdc0534b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 92.732826][ T5904] RAX: ffffffffffffffda RBX: 00007fdc04625fa0 RCX: 00007fdc0439e559 [ 92.732850][ T5904] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 92.732863][ T5904] RBP: 00007fdc044358b0 R08: 0000000000000000 R09: 0000000000000000 [ 92.732876][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.732888][ T5904] R13: 00007fdc04626038 R14: 00007fdc04625fa0 R15: 00007fff5b047da8 [ 92.732924][ T5904] [ 92.794802][ T5907] FAULT_INJECTION: forcing a failure. [ 92.794802][ T5907] name failslab, interval 1, probability 0, space 0, times 0 [ 92.794838][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 92.794858][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.794867][ T5907] Call Trace: [ 92.794875][ T5907] [ 92.794883][ T5907] dump_stack_lvl+0xe8/0x150 [ 92.794913][ T5907] should_fail_ex+0x3eb/0x540 [ 92.794942][ T5907] should_failslab+0xa8/0x100 [ 92.794965][ T5907] __kmalloc_noprof+0xf9/0x710 [ 92.794990][ T5907] ? __register_sysctl_table+0xc02/0x1370 [ 92.795011][ T5907] ? __register_sysctl_table+0xc02/0x1370 [ 92.795043][ T5907] __register_sysctl_table+0xc02/0x1370 [ 92.795075][ T5907] nf_lwtunnel_net_init+0x53/0xf0 [ 92.795096][ T5907] ops_init+0x35d/0x5d0 [ 92.795128][ T5907] setup_net+0x118/0x350 [ 92.795150][ T5907] ? __pfx_setup_net+0x10/0x10 [ 92.795171][ T5907] ? down_read_killable+0x1b6/0x3b0 [ 92.795196][ T5907] ? __ns_common_init+0x38a/0x590 [ 92.795222][ T5907] copy_net_ns+0x536/0x770 [ 92.795246][ T5907] create_new_namespaces+0x3f0/0x6b0 [ 92.795270][ T5907] ? security_capable+0x7e/0x2c0 [ 92.795301][ T5907] unshare_nsproxy_namespaces+0x144/0x190 [ 92.795326][ T5907] ksys_unshare+0x532/0x890 [ 92.795351][ T5907] ? __pfx_ksys_unshare+0x10/0x10 [ 92.795373][ T5907] ? rcu_is_watching+0x16/0xb0 [ 92.795406][ T5907] __x64_sys_unshare+0x38/0x50 [ 92.795427][ T5907] do_syscall_64+0x166/0x520 [ 92.795447][ T5907] ? trace_irq_disable+0x3b/0x140 [ 92.795466][ T5907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.795484][ T5907] ? clear_bhb_loop+0x70/0xc0 [ 92.795506][ T5907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.795523][ T5907] RIP: 0033:0x7fdab179e559 [ 92.795541][ T5907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.795555][ T5907] RSP: 002b:00007fdab25c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 92.795575][ T5907] RAX: ffffffffffffffda RBX: 00007fdab1a25fa0 RCX: 00007fdab179e559 [ 92.795588][ T5907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 92.795599][ T5907] RBP: 00007fdab18358b0 R08: 0000000000000000 R09: 0000000000000000 [ 92.795610][ T5907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.795620][ T5907] R13: 00007fdab1a26038 R14: 00007fdab1a25fa0 R15: 00007ffdbf20f678 [ 92.795651][ T5907] [ 92.802841][ T5907] sysctl could not get directory: /net/netfilter -12 [ 92.897493][ T5769] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 92.906731][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.067740][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 93.071753][ T46] usb 3-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 93.074550][ T46] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 93.074574][ T46] usb 3-1: config 0 has no interface number 0 [ 93.074611][ T46] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.074634][ T46] usb 3-1: config 0 interface 85 has no altsetting 0 [ 93.097143][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.097169][ T46] usb 3-1: Product: syz [ 93.097182][ T46] usb 3-1: Manufacturer: syz [ 93.097194][ T46] usb 3-1: SerialNumber: syz [ 93.106029][ T46] usb 3-1: config 0 descriptor?? [ 93.627632][ T5931] FAULT_INJECTION: forcing a failure. [ 93.627632][ T5931] name failslab, interval 1, probability 0, space 0, times 0 [ 93.627667][ T5931] CPU: 1 UID: 0 PID: 5931 Comm: syz.0.62 Not tainted syzkaller #0 PREEMPT(full) [ 93.627696][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.627707][ T5931] Call Trace: [ 93.627715][ T5931] [ 93.627724][ T5931] dump_stack_lvl+0xe8/0x150 [ 93.627759][ T5931] should_fail_ex+0x3eb/0x540 [ 93.627791][ T5931] should_failslab+0xa8/0x100 [ 93.627815][ T5931] __kmalloc_noprof+0xf9/0x710 [ 93.627843][ T5931] ? prepare_creds+0x30/0x820 [ 93.627863][ T5931] ? security_prepare_creds+0x52/0x360 [ 93.627888][ T5931] ? security_prepare_creds+0x52/0x360 [ 93.627913][ T5931] ? kmem_cache_alloc_noprof+0x151/0x600 [ 93.627942][ T5931] security_prepare_creds+0x52/0x360 [ 93.627972][ T5931] prepare_creds+0x57d/0x820 [ 93.627997][ T5931] __se_sys_capset+0x2c6/0x450 [ 93.628022][ T5931] ? __pfx___se_sys_capset+0x10/0x10 [ 93.628053][ T5931] ? rcu_is_watching+0x16/0xb0 [ 93.628090][ T5931] do_syscall_64+0x166/0x520 [ 93.628115][ T5931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.628136][ T5931] ? clear_bhb_loop+0x70/0xc0 [ 93.628161][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.628181][ T5931] RIP: 0033:0x7f32da59e559 [ 93.628200][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.628216][ T5931] RSP: 002b:00007f32d87f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 93.628240][ T5931] RAX: ffffffffffffffda RBX: 00007f32da825fa0 RCX: 00007f32da59e559 [ 93.628253][ T5931] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000040 [ 93.628267][ T5931] RBP: 00007f32da6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 93.628280][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.628293][ T5931] R13: 00007f32da826038 R14: 00007f32da825fa0 R15: 00007ffc25e4f348 [ 93.628336][ T5931] [ 93.669294][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.750567][ T46] appletouch 3-1:0.85: Geyser mode initialized. [ 93.762914][ T46] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6 [ 93.856213][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 93.870761][ T9] usb 2-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 93.900494][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.900524][ T9] usb 2-1: Product: syz [ 93.900539][ T9] usb 2-1: Manufacturer: syz [ 93.900552][ T9] usb 2-1: SerialNumber: syz [ 93.930021][ T9] usb 2-1: config 0 descriptor?? [ 93.997262][ T46] usb 3-1: USB disconnect, device number 3 [ 94.014184][ T5900] vhci_hcd: connection reset by peer [ 94.037217][ T12] vhci_hcd vhci_hcd.2: stop threads [ 94.037640][ T12] vhci_hcd vhci_hcd.2: release socket [ 94.037890][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 94.086516][ T46] appletouch 3-1:0.85: input: appletouch disconnected [ 94.350467][ T9] airspy 2-1:0.0: Board ID: 00 [ 94.350493][ T9] airspy 2-1:0.0: Firmware version: [ 94.680318][ T5952] FAULT_INJECTION: forcing a failure. [ 94.680318][ T5952] name failslab, interval 1, probability 0, space 0, times 0 [ 94.680339][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz.2.68 Not tainted syzkaller #0 PREEMPT(full) [ 94.680353][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.680361][ T5952] Call Trace: [ 94.680365][ T5952] [ 94.680371][ T5952] dump_stack_lvl+0xe8/0x150 [ 94.680394][ T5952] should_fail_ex+0x3eb/0x540 [ 94.680414][ T5952] should_failslab+0xa8/0x100 [ 94.680426][ T5952] ? prepare_creds+0x30/0x820 [ 94.680439][ T5952] kmem_cache_alloc_noprof+0x9c/0x600 [ 94.680454][ T5952] ? look_up_user_keyrings+0x558/0x670 [ 94.680469][ T5952] ? prepare_creds+0x30/0x820 [ 94.680484][ T5952] prepare_creds+0x30/0x820 [ 94.680498][ T5952] join_session_keyring+0x1b/0x440 [ 94.680515][ T5952] lookup_user_key+0x570/0x12b0 [ 94.680535][ T5952] ? __pfx_lookup_user_key+0x10/0x10 [ 94.680551][ T5952] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 94.680570][ T5952] ? __might_fault+0xaf/0x130 [ 94.680588][ T5952] __se_sys_add_key+0x315/0x420 [ 94.680602][ T5952] ? __pfx___se_sys_add_key+0x10/0x10 [ 94.680619][ T5952] ? __x64_sys_add_key+0x20/0xc0 [ 94.680633][ T5952] do_syscall_64+0x166/0x520 [ 94.680647][ T5952] ? trace_irq_disable+0x3b/0x140 [ 94.680660][ T5952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.680671][ T5952] ? clear_bhb_loop+0x70/0xc0 [ 94.680685][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.680697][ T5952] RIP: 0033:0x7f6074d9e559 [ 94.680709][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.680719][ T5952] RSP: 002b:00007f6075b8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 94.680733][ T5952] RAX: ffffffffffffffda RBX: 00007f6075025fa0 RCX: 00007f6074d9e559 [ 94.680742][ T5952] RDX: 0000200000000580 RSI: 0000000000000000 RDI: 0000200000000040 [ 94.680750][ T5952] RBP: 00007f6074e358b0 R08: fffffffffffffffd R09: 0000000000000000 [ 94.680758][ T5952] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 94.680765][ T5952] R13: 00007f6075026038 R14: 00007f6075025fa0 R15: 00007fffe544d928 [ 94.680790][ T5952] [ 95.011190][ T5959] syz.3.71 uses obsolete (PF_INET,SOCK_PACKET) [ 95.188571][ T9] airspy 2-1:0.0: usb_control_msg() failed -71 request 0f [ 95.218586][ T9] airspy 2-1:0.0: Registered as swradio24 [ 95.218611][ T9] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 95.242864][ T9] usb 2-1: USB disconnect, device number 2 [ 96.146839][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.285187][ T5729] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.295676][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 96.296878][ T9] usb 4-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 96.297954][ T9] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 96.297977][ T9] usb 4-1: config 2 has no interface number 0 [ 96.298022][ T9] usb 4-1: config 2 interface 31 has no altsetting 0 [ 96.300194][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.300216][ T9] usb 4-1: Product: syz [ 96.300230][ T9] usb 4-1: Manufacturer: syz [ 96.300244][ T9] usb 4-1: SerialNumber: syz [ 96.455442][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 96.456217][ T5729] usb 3-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.457336][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 96.457366][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.461091][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.461116][ T5729] usb 3-1: Product: syz [ 96.461130][ T5729] usb 3-1: Manufacturer: syz [ 96.461143][ T5729] usb 3-1: SerialNumber: syz [ 96.466142][ T5729] usb 3-1: config 0 descriptor?? [ 96.472357][ T5729] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 96.472387][ T5729] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 96.553838][ T6001] evm: overlay not supported [ 96.853623][ T6007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.92'. [ 97.083383][ T5729] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 97.084472][ T5729] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 97.289325][ T5729] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 97.289350][ T5729] em28xx 3-1:0.0: No AC97 audio processor [ 97.303961][ T5729] usb 3-1: USB disconnect, device number 4 [ 97.307456][ T5729] em28xx 3-1:0.0: Disconnecting em28xx [ 97.312288][ T5729] em28xx: Freeing device [ 97.391514][ T9] ch9200 4-1:2.31: probe with driver ch9200 failed with error -71 [ 97.418550][ T9] usb 4-1: USB disconnect, device number 4 [ 97.917010][ T6032] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 98.009676][ T5769] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 98.307102][ T6045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.109'. [ 98.312194][ T6045] bond0: (slave bond_slave_0): Releasing backup interface [ 98.411555][ T6045] bond_slave_0: entered promiscuous mode [ 98.411584][ T6045] bond_slave_0: entered allmulticast mode [ 98.654126][ T6053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.704673][ T6053] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 98.906263][ T5728] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.056548][ T5728] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.061821][ T5728] usb 2-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 99.061855][ T5728] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.093627][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 99.093655][ T5728] usb 2-1: Product: syz [ 99.093669][ T5728] usb 2-1: Manufacturer: syz [ 99.093682][ T5728] usb 2-1: SerialNumber: syz [ 99.122257][ T5728] usb 2-1: config 0 descriptor?? [ 99.131499][ T6055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.158937][ T5728] usb 2-1: selecting invalid altsetting 0 [ 99.197558][ T193] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.345264][ T193] usb 4-1: Using ep0 maxpacket: 32 [ 99.348070][ T193] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 99.354857][ T193] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 99.354886][ T193] usb 4-1: config 0 has no interface number 0 [ 99.370446][ T193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.370471][ T193] usb 4-1: Product: syz [ 99.370483][ T193] usb 4-1: Manufacturer: syz [ 99.370495][ T193] usb 4-1: SerialNumber: syz [ 99.412918][ T193] usb 4-1: config 0 descriptor?? [ 99.537595][ T6055] usb 2-1: BOGUS urb xfer, pipe 0 != type 3 [ 99.571794][ T6072] BUG: scheduling while atomic: syz.1.112/6072/0x00000002 [ 99.571823][ T6072] locks held by syz.1.112/6072: 1, on CPU#0: [ 99.571840][ T6072] #0: ffff88801f723910 (&group->lock#2){..-.}-{3:3}, at: snd_pcm_drop+0xcc/0x780 [ 99.571907][ T6072] Modules linked in: [ 99.571917][ T6072] irq event stamp: 130 [ 99.602342][ T6072] hardirqs last enabled at (129): [] irqentry_exit+0x2a0/0x9b0 [ 99.611583][ T6072] hardirqs last disabled at (130): [] _raw_spin_lock_irq+0x17/0x50 [ 99.621359][ T6072] softirqs last enabled at (128): [] __irq_exit_rcu+0xcb/0x220 [ 99.630682][ T6072] softirqs last disabled at (119): [] __irq_exit_rcu+0xcb/0x220 [ 99.639937][ T6072] Preemption disabled at: [ 99.639948][ T6072] [<0000000000000000>] 0x0 [ 99.639979][ T6072] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 99.657551][ T6072] CPU: 0 UID: 0 PID: 6072 Comm: syz.1.112 Not tainted syzkaller #0 PREEMPT(full) [ 99.666788][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.676877][ T6072] Call Trace: [ 99.680191][ T6072] [ 99.683153][ T6072] vpanic+0x26f/0x710 [ 99.687207][ T6072] panic+0xc5/0xd0 [ 99.691057][ T6072] ? __pfx_panic+0x10/0x10 [ 99.695520][ T6072] ? __pfx__printk+0x10/0x10 [ 99.700228][ T6072] ? nbcon_cpu_emergency_exit+0x16a/0x210 [ 99.705992][ T6072] ? print_lock_name+0x68/0x90 [ 99.710777][ T6072] check_panic_on_warn+0x89/0xb0 [ 99.715731][ T6072] __schedule_bug+0xf1/0x150 [ 99.720347][ T6072] __schedule+0x18b7/0x5820 [ 99.724862][ T6072] ? __lock_acquire+0x747/0x2de0 [ 99.729817][ T6072] ? do_raw_spin_unlock+0xf5/0x200 [ 99.734943][ T6072] ? __pfx___schedule+0x10/0x10 [ 99.739798][ T6072] ? lock_acquire+0x115/0x350 [ 99.744490][ T6072] ? schedule+0x90/0x2b0 [ 99.748759][ T6072] schedule+0x164/0x2b0 [ 99.752945][ T6072] schedule_timeout+0x152/0x2c0 [ 99.757818][ T6072] ? __pfx_schedule_timeout+0x10/0x10 [ 99.763245][ T6072] ? __pfx_process_timeout+0x10/0x10 [ 99.768658][ T6072] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.773715][ T6072] wait_clear_urbs+0x134/0x390 [ 99.778542][ T6072] ? __pfx_wait_clear_urbs+0x10/0x10 [ 99.783879][ T6072] ? __wake_up_common_lock+0x195/0x1f0 [ 99.789403][ T6072] snd_usb_pcm_sync_stop+0x9c/0xb0 [ 99.794560][ T6072] ? __pfx_snd_usb_pcm_sync_stop+0x10/0x10 [ 99.800414][ T6072] snd_pcm_drop+0x57d/0x780 [ 99.804968][ T6072] snd_pcm_oss_set_trigger+0xa85/0xda0 [ 99.810475][ T6072] snd_pcm_oss_ioctl+0xbb3/0xdf0 [ 99.815444][ T6072] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 99.820934][ T6072] __se_sys_ioctl+0xfc/0x170 [ 99.825559][ T6072] do_syscall_64+0x166/0x520 [ 99.830170][ T6072] ? trace_irq_disable+0x3b/0x140 [ 99.835210][ T6072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.841325][ T6072] ? clear_bhb_loop+0x70/0xc0 [ 99.846029][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.851951][ T6072] RIP: 0033:0x7fdc0439e559 [ 99.856388][ T6072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.876032][ T6072] RSP: 002b:00007fdc0532a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.884494][ T6072] RAX: ffffffffffffffda RBX: 00007fdc04626090 RCX: 00007fdc0439e559 [ 99.892497][ T6072] RDX: 0000200000000140 RSI: 0000000040045010 RDI: 0000000000000006 [ 99.900492][ T6072] RBP: 00007fdc044358b0 R08: 0000000000000000 R09: 0000000000000000 [ 99.908481][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.916473][ T6072] R13: 00007fdc04626128 R14: 00007fdc04626090 R15: 00007fff5b047da8 [ 99.924502][ T6072] [ 99.927913][ T6072] Kernel Offset: disabled [ 99.932255][ T6072] Rebooting in 86400 seconds..